Merge branch 'test/devise-fork' into 'develop'

Use a modified Devise gem, changes to writing roles

See merge request gab/social/gab-social!62

Gemfile

@@ -30,7 +30,9 @@ gem 'charlock_holmes', '~> 0.7.6'
 gem 'iso-639'
 gem 'chewy', '~> 5.0'
 gem 'cld3', '~> 3.2.4'
-gem 'devise', '~> 4.6'
+git 'https://github.com/freespeech4ever/devise.git', branch: 'gab2' do
+  gem 'devise'
+end
 gem 'devise-two-factor', '~> 3.0'
 
 group :pam_authentication, optional: true do

Gemfile.lock

@@ -1,3 +1,15 @@
+GIT
+  remote: https://github.com/freespeech4ever/devise.git
+  revision: 4009905531f28ebd7ecab22f898b5d6180eefb4a
+  branch: gab2
+  specs:
+    devise (4.7.3)
+      bcrypt (~> 3.0)
+      orm_adapter (~> 0.1)
+      railties (>= 4.1.0)
+      responders
+      warden (~> 1.2.3)
+
 GIT
   remote: https://github.com/rtomayko/posix-spawn
   revision: 58465d2e213991f8afb13b984854a49fcdcc980c
@@ -183,12 +195,6 @@ GEM
       rake (> 10, < 14)
       ruby-statistics (>= 2.1)
       thor (>= 0.19, < 2)
-    devise (4.7.3)
-      bcrypt (~> 3.0)
-      orm_adapter (~> 0.1)
-      railties (>= 4.1.0)
-      responders
-      warden (~> 1.2.3)
     devise-two-factor (3.1.0)
       activesupport (< 6.1)
       attr_encrypted (>= 1.3, < 4, != 2)
@@ -696,7 +702,7 @@ DEPENDENCIES
   climate_control (~> 0.2)
   concurrent-ruby
   derailed_benchmarks
-  devise (~> 4.6)
+  devise!
   devise-two-factor (~> 3.0)
   devise_pam_authenticatable2 (~> 9.2)
   doorkeeper (~> 5.1)

app/javascript/gabsocial/actions/lists.js

@@ -109,7 +109,7 @@ const fetchListsSuccess = (lists) => ({
 
 const fetchListsFail = (error) => ({
   type: LISTS_FETCH_FAIL,
-  showToast: true,
+  showToast: false,
   error,
 })
 

app/javascript/gabsocial/api.js

@@ -25,9 +25,12 @@ function setCSRFHeader() {
 
 ready(setCSRFHeader);
 
-export default getState => axios.create({
-  headers: Object.assign(csrfHeader, getState ? {
-    'Authorization': `Bearer ${getState().getIn(['meta', 'access_token'], '')}`,
+export default getState => {
+  const authToken = getState ? getState().getIn(['meta', 'access_token'], '') : null;
+
+  return axios.create({
+    headers: Object.assign(csrfHeader, authToken ? {
+      'Authorization': `Bearer ${authToken}}`,
     } : {}),
 
     transformResponse: [function (data) {
@@ -38,3 +41,4 @@ export default getState => axios.create({
       }
     }],
   });
+};

app/models/account_moderation_note.rb

@@ -15,11 +15,6 @@ class AccountModerationNote < ApplicationRecord
   belongs_to :account
   belongs_to :target_account, class_name: 'Account'
 
-  connects_to database: {
-    writing: :master,
-    reading: :master
-  }
-
   scope :latest, -> { reorder('created_at DESC') }
 
   validates :content, presence: true, length: { maximum: 500 }

app/models/account_verification_request.rb

@@ -15,8 +15,8 @@
 class AccountVerificationRequest < ApplicationRecord
 
 	connects_to database: {
-		writing: :master,
-		reading: :master
+		writing: :primary,
+		reading: :primary
 	}
 
 	LIMIT            = 4.megabytes

app/models/application_record.rb

@@ -2,7 +2,7 @@
 
 class ApplicationRecord < ActiveRecord::Base
   connects_to database: {
-    writing: :master,
+    writing: :primary,
     reading: :slave1
   }
   self.abstract_class = true

app/models/report.rb

@@ -29,11 +29,6 @@ class Report < ApplicationRecord
 
   validates :comment, length: { maximum: 1000 }
 
-  connects_to database: {
-    writing: :master,
-    reading: :master
-  }
-
   def local?
     false # Force uri_for to use uri attribute
   end

app/models/report_note.rb

@@ -19,9 +19,4 @@ class ReportNote < ApplicationRecord
 
   validates :content, presence: true, length: { maximum: 500 }
 
-  connects_to database: {
-    writing: :master,
-    reading: :master
-  }
-
 end

app/models/session_activation.rb

@@ -23,11 +23,6 @@ class SessionActivation < ApplicationRecord
            to: :access_token,
            allow_nil: true
 
-  connects_to database: {
-    writing: :master,
-    reading: :master
-  }
-
   def detection
     @detection ||= Browser.new(user_agent)
   end
@@ -45,8 +40,10 @@ class SessionActivation < ApplicationRecord
 
   class << self
     def active?(id)
+      ActiveRecord::Base.connected_to(role: :writing) do
         id && where(session_id: id).exists?
       end
+    end
 
     def activate(**options)
       activation = nil
@@ -61,19 +58,16 @@ class SessionActivation < ApplicationRecord
 
     def deactivate(id)
       return unless id
-      ActiveRecord::Base.connected_to(role: :writing) do
-        conn = ActiveRecord::Base.connection
-        conn.exec_query "delete from session_activations where session_id = '#{id}'"
-      end
+      where(session_id: id).destroy_all
     end
 
     def purge_old
       order('created_at desc').offset(Rails.configuration.x.max_session_activations).destroy_all
     end
 
-    def exclusive(id)
-      where('session_id != ?', id).destroy_all
-    end
+    #def exclusive(id)
+    #  where('session_id != ?', id).destroy_all
+    #end
   end
 
   private
@@ -93,6 +87,5 @@ class SessionActivation < ApplicationRecord
                                                           expires_in: Doorkeeper.configuration.access_token_expires_in,
                                                           use_refresh_token: Doorkeeper.configuration.refresh_token_enabled?)
     end
-    self.access_token
   end
 end

config/database.yml

@@ -7,7 +7,7 @@ default: &default
   prepared_statements: <%= ENV['PREPARED_STATEMENTS'] || 'false' %>
 
 development:
-  master:
+  primary:
     <<: *default
     url: <%= ENV['DB_MASTER_URL'] %>
   slave1:
@@ -39,7 +39,7 @@ test:
 #  port: <%= ENV['DB_PORT'] || 5432 %>
 #  prepared_statements: <%= ENV['PREPARED_STATEMENTS'] || 'true' %>
 production:
-  master:
+  primary:
     <<: *default
     url: <%= ENV['DB_MASTER_URL'] %>
   slave1:

config/initializers/devise.rb

@@ -76,6 +76,14 @@ module Devise
 end
 
 Devise.setup do |config|
+
+  config.warden_hook_save_wrapper = Proc.new do |hook|
+    # ensure the writable connection is used to avoid read-only write errors
+    ApplicationRecord.connected_to(role: :writing) do
+      hook.call
+    end
+  end
+
   config.warden do |manager|
     manager.default_strategies(scope: :user).unshift :ldap_authenticatable if Devise.ldap_authentication
     manager.default_strategies(scope: :user).unshift :pam_authenticatable  if Devise.pam_authentication

config/initializers/omniauth.rb

@@ -7,6 +7,13 @@ Devise.setup do |config|
   options = {}
   options[:redirect_at_sign_in] = ENV['OAUTH_REDIRECT_AT_SIGN_IN'] == 'true'
 
+  config.warden_hook_save_wrapper = Proc.new do |hook|
+    # ensure the writable connection is used to avoid read-only write errors
+    ApplicationRecord.connected_to(role: :writing) do
+      hook.call
+    end
+  end
+  
   # CAS strategy
   if ENV['CAS_ENABLED'] == 'true'
     cas_options = options