spike experiment for pundit injection

.gitignore

@@ -12,3 +12,5 @@
 /test/dummy/tmp/development_secret.txt
 
 .byebug_history
+
+.DS_Store

app/controllers/rake_ui/application_controller.rb

@@ -3,13 +3,51 @@
 module RakeUi
   class ApplicationController < ActionController::Base
     before_action :black_hole_production
+    before_action :auth_validate
+    before_action :policy_validate
+
+    # include Pundit::Authorization
+
+    # before_action :authorize_pundit
+    # before_action :authorize!
+
+    STAGING_OK = (Rails.env.staging? && RakeUi.configuration.allow_staging)
+    PROD_OK = RakeUi.configuration.allow_production
 
     private
 
+    def authorize_pundit
+      r = 3
+      @current_user = authenticate_admin_user!
+      authorize(@current_user)
+      # binding.pry
+      # authorize :rake_tasks, :show?
+    end
+
     def black_hole_production
-      return if Rails.env.test? || Rails.env.development? || RakeUi.configuration.allow_production
+      return if Rails.env.test? || Rails.env.development? || STAGING_OK || PROD_OK
 
       raise ActionController::RoutingError, "Not Found"
     end
+
+    def auth_validate
+      return true unless RakeUi.configuration.auth_engine
+
+      if defined?(RakeUi.configuration.auth_engine)
+        cb = RakeUi.configuration.auth_callback
+        return false unless cb && (cb.class == Proc)
+        RakeUi.configuration.auth_callback.call(self)
+      end
+    end
+
+    def policy_validate
+      return true unless RakeUi.configuration.policy_engine
+
+      if defined?(RakeUi.configuration.policy_engine)
+        cb = RakeUi.configuration.policy_callback
+        return false unless cb && (cb.class == Proc)
+        RakeUi.configuration.policy_callback.call(self)
+      end
+    end
   end
 end

lib/rake-ui.rb

@@ -4,7 +4,18 @@
 
 module RakeUi
   mattr_accessor :allow_production
+  mattr_accessor :allow_staging
+  mattr_accessor :policy_engine
+  mattr_accessor :policy_callback
+  mattr_accessor :auth_engine
+  mattr_accessor :auth_callback
+
   self.allow_production = false
+  self.allow_staging = true
+  self.policy_engine = nil
+  self.policy_callback = nil
+  self.auth_engine = nil
+  self.auth_callback = nil
 
   def self.configuration
     yield(self) if block_given?