bostonrb/bostonrb — pull request #164 by lorrocha (2014-01-14 18:34:48+00:00)
Title: Adding authorization.

Removed all HTTP authorization from website.

Implemented omniauth and octokit to act as validations. It's set up to only allow users that are part of Boston Ruby Group and be in either the team 'Organizer' or 'Project Night Coordinator'(the variables need to be set in a .env) to be considered signed in. After that, the session will test and a sign a session[:user_type] with the corresponding type.

Once the session variable has been assigned, the helper methods signed_in? and is_organizer? can be used.

I've set up a before filter to check if signed_in? before any admin actions can be made. Now we just need to implement the calendarevent models and apply the is_organizer? check within them.

Also added tests for the GithubAuth octokit service model.