From a14160ae568e0c594f8646b4d829df2a64b3c910 Mon Sep 17 00:00:00 2001
From: Evans Sitibekiso <jevacrism@gmail.com>
Date: Tue, 2 Aug 2022 16:04:34 +0200
Subject: [PATCH 01/41] add devise gem configuration

---
 .idea/codestyles/codeStyleConfig.xml | 5 +++++
 1 file changed, 5 insertions(+)
 create mode 100644 .idea/codestyles/codeStyleConfig.xml

diff --git a/.idea/codestyles/codeStyleConfig.xml b/.idea/codestyles/codeStyleConfig.xml
new file mode 100644
index 0000000..79ee123
--- /dev/null
+++ b/.idea/codestyles/codeStyleConfig.xml
@@ -0,0 +1,5 @@
+<component name="ProjectCodeStyleConfiguration">
+  <state>
+    <option name="USE_PER_PROJECT_SETTINGS" value="true" />
+  </state>
+</component>
\ No newline at end of file

From c4c3ab2d715890c25ddd9e2a6d2e608440872bbc Mon Sep 17 00:00:00 2001
From: Evans Sitibekiso <jevacrism@gmail.com>
Date: Tue, 2 Aug 2022 16:13:36 +0200
Subject: [PATCH 02/41] update styles

---
 .idea/blog-app.iml                    | 21 +++++++++++++++++++++
 app/assets/stylesheets/user_style.css |  4 +---
 2 files changed, 22 insertions(+), 3 deletions(-)

diff --git a/.idea/blog-app.iml b/.idea/blog-app.iml
index 7f42246..5fc63fb 100644
--- a/.idea/blog-app.iml
+++ b/.idea/blog-app.iml
@@ -41,6 +41,7 @@
     <orderEntry type="library" scope="PROVIDED" name="activesupport (v7.0.3.1, ruby-3.1.2-p20) [gem]" level="application" />
     <orderEntry type="library" scope="PROVIDED" name="addressable (v2.8.0, ruby-3.1.2-p20) [gem]" level="application" />
     <orderEntry type="library" scope="PROVIDED" name="ast (v2.4.2, ruby-3.1.2-p20) [gem]" level="application" />
+    <orderEntry type="library" scope="PROVIDED" name="bcrypt (v3.1.18, ruby-3.1.2-p20) [gem]" level="application" />
     <orderEntry type="library" scope="PROVIDED" name="bindex (v0.8.1, ruby-3.1.2-p20) [gem]" level="application" />
     <orderEntry type="library" scope="PROVIDED" name="bootsnap (v1.12.0, ruby-3.1.2-p20) [gem]" level="application" />
     <orderEntry type="library" scope="PROVIDED" name="builder (v3.2.4, ruby-3.1.2-p20) [gem]" level="application" />
@@ -50,6 +51,7 @@
     <orderEntry type="library" scope="PROVIDED" name="childprocess (v4.1.0, ruby-3.1.2-p20) [gem]" level="application" />
     <orderEntry type="library" scope="PROVIDED" name="concurrent-ruby (v1.1.10, ruby-3.1.2-p20) [gem]" level="application" />
     <orderEntry type="library" scope="PROVIDED" name="crass (v1.0.6, ruby-3.1.2-p20) [gem]" level="application" />
+    <orderEntry type="library" scope="PROVIDED" name="devise (v4.8.1, ruby-3.1.2-p20) [gem]" level="application" />
     <orderEntry type="library" scope="PROVIDED" name="diff-lcs (v1.5.0, ruby-3.1.2-p20) [gem]" level="application" />
     <orderEntry type="library" scope="PROVIDED" name="digest (v3.1.0, ruby-3.1.2-p20) [gem]" level="application" />
     <orderEntry type="library" scope="PROVIDED" name="erubi (v1.10.0, ruby-3.1.2-p20) [gem]" level="application" />
@@ -73,6 +75,7 @@
     <orderEntry type="library" scope="PROVIDED" name="net-smtp (v0.3.1, ruby-3.1.2-p20) [gem]" level="application" />
     <orderEntry type="library" scope="PROVIDED" name="nio4r (v2.5.8, ruby-3.1.2-p20) [gem]" level="application" />
     <orderEntry type="library" scope="PROVIDED" name="nokogiri (v1.13.7, ruby-3.1.2-p20) [gem]" level="application" />
+    <orderEntry type="library" scope="PROVIDED" name="orm_adapter (v0.5.0, ruby-3.1.2-p20) [gem]" level="application" />
     <orderEntry type="library" scope="PROVIDED" name="parallel (v1.22.1, ruby-3.1.2-p20) [gem]" level="application" />
     <orderEntry type="library" scope="PROVIDED" name="parser (v3.1.2.0, ruby-3.1.2-p20) [gem]" level="application" />
     <orderEntry type="library" scope="PROVIDED" name="pg (v1.4.1, ruby-3.1.2-p20) [gem]" level="application" />
@@ -89,6 +92,7 @@
     <orderEntry type="library" scope="PROVIDED" name="rainbow (v3.1.1, ruby-3.1.2-p20) [gem]" level="application" />
     <orderEntry type="library" scope="PROVIDED" name="rake (v13.0.6, ruby-3.1.2-p20) [gem]" level="application" />
     <orderEntry type="library" scope="PROVIDED" name="regexp_parser (v2.5.0, ruby-3.1.2-p20) [gem]" level="application" />
+    <orderEntry type="library" scope="PROVIDED" name="responders (v3.0.1, ruby-3.1.2-p20) [gem]" level="application" />
     <orderEntry type="library" scope="PROVIDED" name="rexml (v3.2.5, ruby-3.1.2-p20) [gem]" level="application" />
     <orderEntry type="library" scope="PROVIDED" name="rspec-core (v3.11.0, ruby-3.1.2-p20) [gem]" level="application" />
     <orderEntry type="library" scope="PROVIDED" name="rspec-expectations (v3.11.0, ruby-3.1.2-p20) [gem]" level="application" />
@@ -111,6 +115,7 @@
     <orderEntry type="library" scope="PROVIDED" name="tzinfo-data (v1.2022.1, ruby-3.1.2-p20) [gem]" level="application" />
     <orderEntry type="library" scope="PROVIDED" name="unicode-display_width (v2.2.0, ruby-3.1.2-p20) [gem]" level="application" />
     <orderEntry type="library" scope="PROVIDED" name="uniform_notifier (v1.16.0, ruby-3.1.2-p20) [gem]" level="application" />
+    <orderEntry type="library" scope="PROVIDED" name="warden (v1.2.9, ruby-3.1.2-p20) [gem]" level="application" />
     <orderEntry type="library" scope="PROVIDED" name="web-console (v4.2.0, ruby-3.1.2-p20) [gem]" level="application" />
     <orderEntry type="library" scope="PROVIDED" name="webdrivers (v5.0.0, ruby-3.1.2-p20) [gem]" level="application" />
     <orderEntry type="library" scope="PROVIDED" name="websocket (v1.2.9, ruby-3.1.2-p20) [gem]" level="application" />
@@ -127,12 +132,17 @@
     <option name="generators">
       <list>
         <option value="active_record:application_record" />
+        <option value="active_record:devise" />
         <option value="active_record:multi_db" />
         <option value="application_record" />
         <option value="benchmark" />
         <option value="bullet:install" />
         <option value="channel" />
         <option value="controller" />
+        <option value="devise" />
+        <option value="devise:controllers" />
+        <option value="devise:install" />
+        <option value="devise:views" />
         <option value="generator" />
         <option value="helper" />
         <option value="integration_test" />
@@ -142,7 +152,10 @@
         <option value="mailer" />
         <option value="migration" />
         <option value="model" />
+        <option value="mongoid:devise" />
         <option value="resource" />
+        <option value="responders:install" />
+        <option value="responders_controller" />
         <option value="rspec:channel" />
         <option value="rspec:controller" />
         <option value="rspec:feature" />
@@ -181,12 +194,17 @@
     <option name="myGenerators">
       <list>
         <option value="active_record:application_record" />
+        <option value="active_record:devise" />
         <option value="active_record:multi_db" />
         <option value="application_record" />
         <option value="benchmark" />
         <option value="bullet:install" />
         <option value="channel" />
         <option value="controller" />
+        <option value="devise" />
+        <option value="devise:controllers" />
+        <option value="devise:install" />
+        <option value="devise:views" />
         <option value="generator" />
         <option value="helper" />
         <option value="integration_test" />
@@ -196,7 +214,10 @@
         <option value="mailer" />
         <option value="migration" />
         <option value="model" />
+        <option value="mongoid:devise" />
         <option value="resource" />
+        <option value="responders:install" />
+        <option value="responders_controller" />
         <option value="rspec:channel" />
         <option value="rspec:controller" />
         <option value="rspec:feature" />
diff --git a/app/assets/stylesheets/user_style.css b/app/assets/stylesheets/user_style.css
index 52bd724..e579b28 100644
--- a/app/assets/stylesheets/user_style.css
+++ b/app/assets/stylesheets/user_style.css
@@ -153,8 +153,6 @@ a {
   display: flex;
   justify-content: center;
   align-items: center;
-
-  /* text-align: center; */
 }
 
 .text-button {
@@ -193,4 +191,4 @@ a {
   justify-content: space-between;
   align-items: flex-start;
   width: 100%;
-}
+}
\ No newline at end of file

From 26aca8b6fb009bacd8ac9d43fc61bdcbe31a6be8 Mon Sep 17 00:00:00 2001
From: Evans Sitibekiso <jevacrism@gmail.com>
Date: Tue, 2 Aug 2022 16:16:04 +0200
Subject: [PATCH 03/41] add user devise config in application controller

---
 app/controllers/application_controller.rb | 12 +++++++++---
 1 file changed, 9 insertions(+), 3 deletions(-)

diff --git a/app/controllers/application_controller.rb b/app/controllers/application_controller.rb
index 76d31c2..5ab21b7 100644
--- a/app/controllers/application_controller.rb
+++ b/app/controllers/application_controller.rb
@@ -1,5 +1,11 @@
 class ApplicationController < ActionController::Base
-  def current_user
-    User.first
+  before_action :authenticate_user!
+  protect_from_forgery with: :exception
+  before_action :update_allowed_parameters, if: :devise_controller?
+
+  def update_allowed_parameters
+    devise_parameter_sanitizer.permit(:sign_up) do |field|
+      field.permit(:name, :photo, :bio, :posts_counter, :email, :password, :password_confirmation)
+    end
   end
-end
+end
\ No newline at end of file

From 50e2873f015602198b04a0ee87260b311727fbac Mon Sep 17 00:00:00 2001
From: Evans Sitibekiso <jevacrism@gmail.com>
Date: Tue, 2 Aug 2022 16:34:08 +0200
Subject: [PATCH 04/41] create new html file in devise folder

---
 app/models/user.rb                          | 17 ++++++++++++++++-
 app/views/devise/confirmations/new.html.erb | 15 +++++++++++++++
 2 files changed, 31 insertions(+), 1 deletion(-)
 create mode 100644 app/views/devise/confirmations/new.html.erb

diff --git a/app/models/user.rb b/app/models/user.rb
index cc6a244..dfa7439 100644
--- a/app/models/user.rb
+++ b/app/models/user.rb
@@ -1,4 +1,11 @@
+
+
 class User < ApplicationRecord
+  # Include default devise modules. Others available are:
+  # :confirmable, :lockable, :timeoutable, :trackable and :omniauthable
+  devise :database_authenticatable, :registerable,
+         :recoverable, :rememberable, :validatable
+
   validates :name, presence: true, allow_blank: false
   validates :posts_counter, numericality: { only_integer: true, greater_than_or_equal_to: 0 }
 
@@ -6,7 +13,15 @@ class User < ApplicationRecord
   has_many :comments, foreign_key: 'author_id'
   has_many :likes, foreign_key: 'author_id'
 
+  after_initialize :set_defaults
+
   def recent_posts
     posts.order(created_at: :desc).limit(3)
   end
-end
+
+  private
+
+  def set_defaults
+    self.posts_counter ||= 0
+  end
+end
\ No newline at end of file
diff --git a/app/views/devise/confirmations/new.html.erb b/app/views/devise/confirmations/new.html.erb
new file mode 100644
index 0000000..91bbc93
--- /dev/null
+++ b/app/views/devise/confirmations/new.html.erb
@@ -0,0 +1,15 @@
+<h2>Resend confirmation instructions</h2>
+
+<%= form_for(resource, as: resource_name, url: confirmation_path(resource_name), html: { method: :post }) do |f| %>
+  <%= render "devise/shared/error_messages", resource: resource %>
+
+  <div class="field">
+    <%= f.label :email %><br />
+    <%= f.email_field :email, autofocus: true, autocomplete: "email", value: (resource.pending_reconfirmation? ? resource.unconfirmed_email : resource.email) %>
+  </div>
+
+  <div class="actions">
+    <%= f.submit "Resend confirmation instructions" %>
+  </div>
+<% end %>
+<%= render "devise/shared/links" %>
\ No newline at end of file

From 78ea350e71e05c2c732fd33bffe70bcf5c059021 Mon Sep 17 00:00:00 2001
From: Evans Sitibekiso <jevacrism@gmail.com>
Date: Tue, 2 Aug 2022 16:44:06 +0200
Subject: [PATCH 05/41] Update new.html.erb in registrations and sessions

---
 .../devise/mailer/confirmation_instructions.html.erb      | 5 +++++
 app/views/devise/mailer/email_changed.html.erb            | 7 +++++++
 app/views/devise/mailer/password_change.html.erb          | 3 +++
 .../devise/mailer/reset_password_instructions.html.erb    | 8 ++++++++
 app/views/devise/mailer/unlock_instructions.html.erb      | 7 +++++++
 5 files changed, 30 insertions(+)
 create mode 100644 app/views/devise/mailer/confirmation_instructions.html.erb
 create mode 100644 app/views/devise/mailer/email_changed.html.erb
 create mode 100644 app/views/devise/mailer/password_change.html.erb
 create mode 100644 app/views/devise/mailer/reset_password_instructions.html.erb
 create mode 100644 app/views/devise/mailer/unlock_instructions.html.erb

diff --git a/app/views/devise/mailer/confirmation_instructions.html.erb b/app/views/devise/mailer/confirmation_instructions.html.erb
new file mode 100644
index 0000000..c2b058f
--- /dev/null
+++ b/app/views/devise/mailer/confirmation_instructions.html.erb
@@ -0,0 +1,5 @@
+<p>Welcome <%= @email %>!</p>
+
+<p>You can confirm your account email through the link below:</p>
+
+<p><%= link_to 'Confirm my account', confirmation_url(@resource, confirmation_token: @token) %></p>
\ No newline at end of file
diff --git a/app/views/devise/mailer/email_changed.html.erb b/app/views/devise/mailer/email_changed.html.erb
new file mode 100644
index 0000000..0833fbd
--- /dev/null
+++ b/app/views/devise/mailer/email_changed.html.erb
@@ -0,0 +1,7 @@
+<p>Hello <%= @email %>!</p>
+
+<% if @resource.try(:unconfirmed_email?) %>
+  <p>We're contacting you to notify you that your email is being changed to <%= @resource.unconfirmed_email %>.</p>
+<% else %>
+  <p>We're contacting you to notify you that your email has been changed to <%= @resource.email %>.</p>
+<% end %>
\ No newline at end of file
diff --git a/app/views/devise/mailer/password_change.html.erb b/app/views/devise/mailer/password_change.html.erb
new file mode 100644
index 0000000..1070cff
--- /dev/null
+++ b/app/views/devise/mailer/password_change.html.erb
@@ -0,0 +1,3 @@
+<p>Hello <%= @resource.email %>!</p>
+
+<p>We're contacting you to notify you that your password has been changed.</p>
\ No newline at end of file
diff --git a/app/views/devise/mailer/reset_password_instructions.html.erb b/app/views/devise/mailer/reset_password_instructions.html.erb
new file mode 100644
index 0000000..7bc3a70
--- /dev/null
+++ b/app/views/devise/mailer/reset_password_instructions.html.erb
@@ -0,0 +1,8 @@
+<p>Hello <%= @resource.email %>!</p>
+
+<p>Someone has requested a link to change your password. You can do this through the link below.</p>
+
+<p><%= link_to 'Change my password', edit_password_url(@resource, reset_password_token: @token) %></p>
+
+<p>If you didn't request this, please ignore this email.</p>
+<p>Your password won't change until you access the link above and create a new one.</p>
\ No newline at end of file
diff --git a/app/views/devise/mailer/unlock_instructions.html.erb b/app/views/devise/mailer/unlock_instructions.html.erb
new file mode 100644
index 0000000..5aefc91
--- /dev/null
+++ b/app/views/devise/mailer/unlock_instructions.html.erb
@@ -0,0 +1,7 @@
+<p>Hello <%= @resource.email %>!</p>
+
+<p>Your account has been locked due to an excessive number of unsuccessful sign in attempts.</p>
+
+<p>Click the link below to unlock your account:</p>
+
+<p><%= link_to 'Unlock my account', unlock_url(@resource, unlock_token: @token) %></p>
\ No newline at end of file

From 79d7be36e85898aae85cd9cbd33cb57cb48f8747 Mon Sep 17 00:00:00 2001
From: Evans Sitibekiso <jevacrism@gmail.com>
Date: Tue, 2 Aug 2022 16:46:56 +0200
Subject: [PATCH 06/41] Update application.erb in views/layouts

---
 app/views/layouts/application.html.erb | 42 ++++++++++++++------------
 1 file changed, 22 insertions(+), 20 deletions(-)

diff --git a/app/views/layouts/application.html.erb b/app/views/layouts/application.html.erb
index 6cdc32f..f3979f9 100644
--- a/app/views/layouts/application.html.erb
+++ b/app/views/layouts/application.html.erb
@@ -1,27 +1,29 @@
 <!DOCTYPE html>
 <html>
-  <head>
-    <title>BlogApp</title>
-    <meta name="viewport" content="width=device-width,initial-scale=1">
-    <%= csrf_meta_tags %>
-    <%= csp_meta_tag %>
+<head>
+  <title>BlogApp</title>
+  <meta name="viewport" content="width=device-width,initial-scale=1">
+  <%= csrf_meta_tags %>
+  <%= csp_meta_tag %>
 
-    <link
-      href="https://cdn.jsdelivr.net/npm/bootstrap@5.0.2/dist/css/bootstrap.min.css"
-      rel="stylesheet"
-      integrity="sha384-EVSTQN3/azprG1Anm3QDgpJLIm9Nao0Yz1ztcQTwFspd3yD65VohhpuuCOmLASjC"
-      crossorigin="anonymous"
+  <link
+    href="https://cdn.jsdelivr.net/npm/bootstrap@5.0.2/dist/css/bootstrap.min.css"
+    rel="stylesheet"
+    integrity="sha384-EVSTQN3/azprG1Anm3QDgpJLIm9Nao0Yz1ztcQTwFspd3yD65VohhpuuCOmLASjC"
+    crossorigin="anonymous"
     />
-    <%= stylesheet_link_tag "application", "data-turbo-track": "reload" %>
-  </head>
+  <%= stylesheet_link_tag "application", "data-turbo-track": "reload" %>
+</head>
 
-  <body>
-    <%= yield %>
+<body>
+<div  role="alert"><%= notice %></div>
+<div  role="alert"><%= alert %></div>
+<%= yield %>
 
-    <script
-      src="https://cdn.jsdelivr.net/npm/bootstrap@5.0.2/dist/js/bootstrap.bundle.min.js"
-      integrity="sha384-MrcW6ZMFYlzcLA8Nl+NtUVF0sA7MsXsP1UyJoMp4YLEuNSfAP+JcXn/tWtIaxVXM"
-      crossorigin="anonymous"
-    ></script>
-  </body>
+<script
+  src="https://cdn.jsdelivr.net/npm/bootstrap@5.0.2/dist/js/bootstrap.bundle.min.js"
+  integrity="sha384-MrcW6ZMFYlzcLA8Nl+NtUVF0sA7MsXsP1UyJoMp4YLEuNSfAP+JcXn/tWtIaxVXM"
+  crossorigin="anonymous"
+></script>
+</body>
 </html>
\ No newline at end of file

From 3ee66aa74d19d0c03c8fc9d77d98bd705ccb87d3 Mon Sep 17 00:00:00 2001
From: Evans Sitibekiso <jevacrism@gmail.com>
Date: Tue, 2 Aug 2022 16:50:22 +0200
Subject: [PATCH 07/41] Run rails db:migrate, and update index and shot html
 file in views/users

---
 app/views/users/index.html.erb | 6 +++---
 app/views/users/show.html.erb  | 2 +-
 2 files changed, 4 insertions(+), 4 deletions(-)

diff --git a/app/views/users/index.html.erb b/app/views/users/index.html.erb
index 84f1b7d..ac5d553 100644
--- a/app/views/users/index.html.erb
+++ b/app/views/users/index.html.erb
@@ -1,12 +1,12 @@
 <section class="container">  
     <% @users.each do |user| %>       
-        <div class="user-box">            
+        <div class="user-box m-3">            
             <img class="image-user" src=<%= user.photo %> alt="user">
-            <div class="user-info">
+            <div class="user-info p-5">
                 <p class="user-name"><%= link_to user.name, user %></p>
                 <p class="user-post">Number of posts: <%= user.posts_counter%></p> 
             </div>
         </div>
     <% end %>   
     
-</section>
+</section>
\ No newline at end of file
diff --git a/app/views/users/show.html.erb b/app/views/users/show.html.erb
index a85f0e0..52f87f1 100644
--- a/app/views/users/show.html.erb
+++ b/app/views/users/show.html.erb
@@ -1,4 +1,4 @@
-<section class="container">
+<section class="container flex flex--column">
     <div class="user-box">
         <img class="image-user" src=<%= @user.photo %> alt="user"/>
         <div class="user-info">

From 25cd143f81ecd8afc20eaacf893c1d97b7e4a6ef Mon Sep 17 00:00:00 2001
From: Evans Sitibekiso <jevacrism@gmail.com>
Date: Tue, 2 Aug 2022 16:54:50 +0200
Subject: [PATCH 08/41] add confirmable

---
 config/environments/development.rb | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/config/environments/development.rb b/config/environments/development.rb
index b7ce798..1173ceb 100644
--- a/config/environments/development.rb
+++ b/config/environments/development.rb
@@ -49,6 +49,9 @@
 
   config.action_mailer.perform_caching = false
 
+  config.action_mailer.default_url_options = { host: 'localhost', port: 3000 }
+  config.action_mailer.smtp_settings = {:address => "localhost", :port => 1025}
+
   # Print deprecation notices to the Rails logger.
   config.active_support.deprecation = :log
 

From 5f420cf41288a840b7e614a5d4f8c013ed4cebf6 Mon Sep 17 00:00:00 2001
From: Evans Sitibekiso <jevacrism@gmail.com>
Date: Tue, 2 Aug 2022 16:58:55 +0200
Subject: [PATCH 09/41] add devise gem configuration

---
 config/initializers/devise.rb | 311 ++++++++++++++++++++++++++++++++++
 1 file changed, 311 insertions(+)
 create mode 100644 config/initializers/devise.rb

diff --git a/config/initializers/devise.rb b/config/initializers/devise.rb
new file mode 100644
index 0000000..5a36f2e
--- /dev/null
+++ b/config/initializers/devise.rb
@@ -0,0 +1,311 @@
+# frozen_string_literal: true
+
+# Assuming you have not yet modified this file, each configuration option below
+# is set to its default value. Note that some are commented out while others
+# are not: uncommented lines are intended to protect your configuration from
+# breaking changes in upgrades (i.e., in the event that future versions of
+# Devise change the default values for those options).
+#
+# Use this hook to configure devise mailer, warden hooks and so forth.
+# Many of these configuration options can be set straight in your model.
+Devise.setup do |config|
+    # The secret key used by Devise. Devise uses this key to generate
+    # random tokens. Changing this key will render invalid all existing
+    # confirmation, reset password and unlock tokens in the database.
+    # Devise will use the `secret_key_base` as its `secret_key`
+    # by default. You can change it below and use your own secret key.
+    # config.secret_key = '46dab3bbef3bde297f532474f064546b81e249e56b67e11d60c1757b802243efe3d3e49852a2b4d950ba5ded478e50235616b5217a311815eed5bfb9552f1fc5'
+  
+    # ==> Controller configuration
+    # Configure the parent class to the devise controllers.
+    # config.parent_controller = 'DeviseController'
+  
+    # ==> Mailer Configuration
+    # Configure the e-mail address which will be shown in Devise::Mailer,
+    # note that it will be overwritten if you use your own mailer class
+    # with default "from" parameter.
+    config.mailer_sender = 'please-change-me-at-config-initializers-devise@example.com'
+  
+    # Configure the class responsible to send e-mails.
+    # config.mailer = 'Devise::Mailer'
+  
+    # Configure the parent class responsible to send e-mails.
+    # config.parent_mailer = 'ActionMailer::Base'
+  
+    # ==> ORM configuration
+    # Load and configure the ORM. Supports :active_record (default) and
+    # :mongoid (bson_ext recommended) by default. Other ORMs may be
+    # available as additional gems.
+    require 'devise/orm/active_record'
+  
+    # ==> Configuration for any authentication mechanism
+    # Configure which keys are used when authenticating a user. The default is
+    # just :email. You can configure it to use [:username, :subdomain], so for
+    # authenticating a user, both parameters are required. Remember that those
+    # parameters are used only when authenticating and not when retrieving from
+    # session. If you need permissions, you should implement that in a before filter.
+    # You can also supply a hash where the value is a boolean determining whether
+    # or not authentication should be aborted when the value is not present.
+    # config.authentication_keys = [:email]
+  
+    # Configure parameters from the request object used for authentication. Each entry
+    # given should be a request method and it will automatically be passed to the
+    # find_for_authentication method and considered in your model lookup. For instance,
+    # if you set :request_keys to [:subdomain], :subdomain will be used on authentication.
+    # The same considerations mentioned for authentication_keys also apply to request_keys.
+    # config.request_keys = []
+  
+    # Configure which authentication keys should be case-insensitive.
+    # These keys will be downcased upon creating or modifying a user and when used
+    # to authenticate or find a user. Default is :email.
+    config.case_insensitive_keys = [:email]
+  
+    # Configure which authentication keys should have whitespace stripped.
+    # These keys will have whitespace before and after removed upon creating or
+    # modifying a user and when used to authenticate or find a user. Default is :email.
+    config.strip_whitespace_keys = [:email]
+  
+    # Tell if authentication through request.params is enabled. True by default.
+    # It can be set to an array that will enable params authentication only for the
+    # given strategies, for example, `config.params_authenticatable = [:database]` will
+    # enable it only for database (email + password) authentication.
+    # config.params_authenticatable = true
+  
+    # Tell if authentication through HTTP Auth is enabled. False by default.
+    # It can be set to an array that will enable http authentication only for the
+    # given strategies, for example, `config.http_authenticatable = [:database]` will
+    # enable it only for database authentication.
+    # For API-only applications to support authentication "out-of-the-box", you will likely want to
+    # enable this with :database unless you are using a custom strategy.
+    # The supported strategies are:
+    # :database      = Support basic authentication with authentication key + password
+    # config.http_authenticatable = false
+  
+    # If 401 status code should be returned for AJAX requests. True by default.
+    # config.http_authenticatable_on_xhr = true
+  
+    # The realm used in Http Basic Authentication. 'Application' by default.
+    # config.http_authentication_realm = 'Application'
+  
+    # It will change confirmation, password recovery and other workflows
+    # to behave the same regardless if the e-mail provided was right or wrong.
+    # Does not affect registerable.
+    # config.paranoid = true
+  
+    # By default Devise will store the user in session. You can skip storage for
+    # particular strategies by setting this option.
+    # Notice that if you are skipping storage for all authentication paths, you
+    # may want to disable generating routes to Devise's sessions controller by
+    # passing skip: :sessions to `devise_for` in your config/routes.rb
+    config.skip_session_storage = [:http_auth]
+  
+    # By default, Devise cleans up the CSRF token on authentication to
+    # avoid CSRF token fixation attacks. This means that, when using AJAX
+    # requests for sign in and sign up, you need to get a new CSRF token
+    # from the server. You can disable this option at your own risk.
+    # config.clean_up_csrf_token_on_authentication = true
+  
+    # When false, Devise will not attempt to reload routes on eager load.
+    # This can reduce the time taken to boot the app but if your application
+    # requires the Devise mappings to be loaded during boot time the application
+    # won't boot properly.
+    # config.reload_routes = true
+  
+    # ==> Configuration for :database_authenticatable
+    # For bcrypt, this is the cost for hashing the password and defaults to 12. If
+    # using other algorithms, it sets how many times you want the password to be hashed.
+    # The number of stretches used for generating the hashed password are stored
+    # with the hashed password. This allows you to change the stretches without
+    # invalidating existing passwords.
+    #
+    # Limiting the stretches to just one in testing will increase the performance of
+    # your test suite dramatically. However, it is STRONGLY RECOMMENDED to not use
+    # a value less than 10 in other environments. Note that, for bcrypt (the default
+    # algorithm), the cost increases exponentially with the number of stretches (e.g.
+    # a value of 20 is already extremely slow: approx. 60 seconds for 1 calculation).
+    config.stretches = Rails.env.test? ? 1 : 12
+  
+    # Set up a pepper to generate the hashed password.
+    # config.pepper = '110a0162fca815f3624c8b3d409ab116f2d8ed650673b046124c7d28d850ca15b0bf68857b5fc1e1b6a5907691209375bf38b62cbf6cefb8ea8edd5460cc9636'
+  
+    # Send a notification to the original email when the user's email is changed.
+    # config.send_email_changed_notification = false
+  
+    # Send a notification email when the user's password is changed.
+    # config.send_password_change_notification = false
+  
+    # ==> Configuration for :confirmable
+    # A period that the user is allowed to access the website even without
+    # confirming their account. For instance, if set to 2.days, the user will be
+    # able to access the website for two days without confirming their account,
+    # access will be blocked just in the third day.
+    # You can also set it to nil, which will allow the user to access the website
+    # without confirming their account.
+    # Default is 0.days, meaning the user cannot access the website without
+    # confirming their account.
+    # config.allow_unconfirmed_access_for = 2.days
+  
+    # A period that the user is allowed to confirm their account before their
+    # token becomes invalid. For example, if set to 3.days, the user can confirm
+    # their account within 3 days after the mail was sent, but on the fourth day
+    # their account can't be confirmed with the token any more.
+    # Default is nil, meaning there is no restriction on how long a user can take
+    # before confirming their account.
+    # config.confirm_within = 3.days
+  
+    # If true, requires any email changes to be confirmed (exactly the same way as
+    # initial account confirmation) to be applied. Requires additional unconfirmed_email
+    # db field (see migrations). Until confirmed, new email is stored in
+    # unconfirmed_email column, and copied to email column on successful confirmation.
+    config.reconfirmable = true
+  
+    # Defines which key will be used when confirming an account
+    # config.confirmation_keys = [:email]
+  
+    # ==> Configuration for :rememberable
+    # The time the user will be remembered without asking for credentials again.
+    # config.remember_for = 2.weeks
+  
+    # Invalidates all the remember me tokens when the user signs out.
+    config.expire_all_remember_me_on_sign_out = true
+  
+    # If true, extends the user's remember period when remembered via cookie.
+    # config.extend_remember_period = false
+  
+    # Options to be passed to the created cookie. For instance, you can set
+    # secure: true in order to force SSL only cookies.
+    # config.rememberable_options = {}
+  
+    # ==> Configuration for :validatable
+    # Range for password length.
+    config.password_length = 6..128
+  
+    # Email regex used to validate email formats. It simply asserts that
+    # one (and only one) @ exists in the given string. This is mainly
+    # to give user feedback and not to assert the e-mail validity.
+    config.email_regexp = /\A[^@\s]+@[^@\s]+\z/
+  
+    # ==> Configuration for :timeoutable
+    # The time you want to timeout the user session without activity. After this
+    # time the user will be asked for credentials again. Default is 30 minutes.
+    # config.timeout_in = 30.minutes
+  
+    # ==> Configuration for :lockable
+    # Defines which strategy will be used to lock an account.
+    # :failed_attempts = Locks an account after a number of failed attempts to sign in.
+    # :none            = No lock strategy. You should handle locking by yourself.
+    # config.lock_strategy = :failed_attempts
+  
+    # Defines which key will be used when locking and unlocking an account
+    # config.unlock_keys = [:email]
+  
+    # Defines which strategy will be used to unlock an account.
+    # :email = Sends an unlock link to the user email
+    # :time  = Re-enables login after a certain amount of time (see :unlock_in below)
+    # :both  = Enables both strategies
+    # :none  = No unlock strategy. You should handle unlocking by yourself.
+    # config.unlock_strategy = :both
+  
+    # Number of authentication tries before locking an account if lock_strategy
+    # is failed attempts.
+    # config.maximum_attempts = 20
+  
+    # Time interval to unlock the account if :time is enabled as unlock_strategy.
+    # config.unlock_in = 1.hour
+  
+    # Warn on the last attempt before the account is locked.
+    # config.last_attempt_warning = true
+  
+    # ==> Configuration for :recoverable
+    #
+    # Defines which key will be used when recovering the password for an account
+    # config.reset_password_keys = [:email]
+  
+    # Time interval you can reset your password with a reset password key.
+    # Don't put a too small interval or your users won't have the time to
+    # change their passwords.
+    config.reset_password_within = 6.hours
+  
+    # When set to false, does not sign a user in automatically after their password is
+    # reset. Defaults to true, so a user is signed in automatically after a reset.
+    # config.sign_in_after_reset_password = true
+  
+    # ==> Configuration for :encryptable
+    # Allow you to use another hashing or encryption algorithm besides bcrypt (default).
+    # You can use :sha1, :sha512 or algorithms from others authentication tools as
+    # :clearance_sha1, :authlogic_sha512 (then you should set stretches above to 20
+    # for default behavior) and :restful_authentication_sha1 (then you should set
+    # stretches to 10, and copy REST_AUTH_SITE_KEY to pepper).
+    #
+    # Require the `devise-encryptable` gem when using anything other than bcrypt
+    # config.encryptor = :sha512
+  
+    # ==> Scopes configuration
+    # Turn scoped views on. Before rendering "sessions/new", it will first check for
+    # "users/sessions/new". It's turned off by default because it's slower if you
+    # are using only default views.
+    # config.scoped_views = false
+  
+    # Configure the default scope given to Warden. By default it's the first
+    # devise role declared in your routes (usually :user).
+    # config.default_scope = :user
+  
+    # Set this configuration to false if you want /users/sign_out to sign out
+    # only the current scope. By default, Devise signs out all scopes.
+    # config.sign_out_all_scopes = true
+  
+    # ==> Navigation configuration
+    # Lists the formats that should be treated as navigational. Formats like
+    # :html, should redirect to the sign in page when the user does not have
+    # access, but formats like :xml or :json, should return 401.
+    #
+    # If you have any extra navigational formats, like :iphone or :mobile, you
+    # should add them to the navigational formats lists.
+    #
+    # The "*/*" below is required to match Internet Explorer requests.
+    # config.navigational_formats = ['*/*', :html]
+  
+    # The default HTTP method used to sign out a resource. Default is :delete.
+    config.sign_out_via = :delete
+  
+    # ==> OmniAuth
+    # Add a new OmniAuth provider. Check the wiki for more information on setting
+    # up on your models and hooks.
+    # config.omniauth :github, 'APP_ID', 'APP_SECRET', scope: 'user,public_repo'
+  
+    # ==> Warden configuration
+    # If you want to use other strategies, that are not supported by Devise, or
+    # change the failure app, you can configure them inside the config.warden block.
+    #
+    # config.warden do |manager|
+    #   manager.intercept_401 = false
+    #   manager.default_strategies(scope: :user).unshift :some_external_strategy
+    # end
+  
+    # ==> Mountable engine configurations
+    # When using Devise inside an engine, let's call it `MyEngine`, and this engine
+    # is mountable, there are some extra configurations to be taken into account.
+    # The following options are available, assuming the engine is mounted as:
+    #
+    #     mount MyEngine, at: '/my_engine'
+    #
+    # The router that invoked `devise_for`, in the example above, would be:
+    # config.router_name = :my_engine
+    #
+    # When using OmniAuth, Devise cannot automatically set OmniAuth path,
+    # so you need to do it manually. For the users scope, it would be:
+    # config.omniauth_path_prefix = '/my_engine/users/auth'
+  
+    # ==> Turbolinks configuration
+    # If your app is using Turbolinks, Turbolinks::Controller needs to be included to make redirection work correctly:
+    #
+    # ActiveSupport.on_load(:devise_failure_app) do
+    #   include Turbolinks::Controller
+    # end
+  
+    # ==> Configuration for :registerable
+  
+    # When set to false, does not sign a user in automatically after their password is
+    # changed. Defaults to true, so a user is signed in automatically after changing a password.
+    # config.sign_in_after_change_password = true
+  end
\ No newline at end of file

From 5c29be8ed533317338528e2ddb40f11e433fc0b6 Mon Sep 17 00:00:00 2001
From: Evans Sitibekiso <jevacrism@gmail.com>
Date: Tue, 2 Aug 2022 17:05:34 +0200
Subject: [PATCH 10/41] Run rails db:migrate, and update index and shot html
 file in views/users

---
 config/database.yml          |  7 ++--
 config/locales/devise.en.yml | 67 ++++++++++++++++++++++++++++++++++++
 2 files changed, 70 insertions(+), 4 deletions(-)
 create mode 100644 config/locales/devise.en.yml

diff --git a/config/database.yml b/config/database.yml
index fa127a3..a8a1f70 100644
--- a/config/database.yml
+++ b/config/database.yml
@@ -1,5 +1,3 @@
-
-
 # PostgreSQL. Versions 9.3 and up are supported.
 #
 # Install the pg driver:
@@ -19,7 +17,7 @@
 default: &default
   adapter: postgresql
   encoding: unicode
-
+  
   # For details on connection pooling, see Rails configuration guide
   # https://guides.rubyonrails.org/configuring.html#database-pooling
   pool: <%= ENV.fetch("RAILS_MAX_THREADS") { 5 } %>
@@ -27,6 +25,7 @@ default: &default
 development:
   <<: *default
   database: blog_app_development
+  
 
   # The specified database role being used to connect to postgres.
   # To create additional roles in postgres see `$ createuser --help`.
@@ -61,7 +60,7 @@ development:
 test:
   <<: *default
   database: blog_app_test
-
+  
 
 # As with config/credentials.yml, you never want to store sensitive information,
 # like your database password, in your source code. If your source code is
diff --git a/config/locales/devise.en.yml b/config/locales/devise.en.yml
new file mode 100644
index 0000000..4117539
--- /dev/null
+++ b/config/locales/devise.en.yml
@@ -0,0 +1,67 @@
+
+
+# Additional translations at https://github.com/heartcombo/devise/wiki/I18n
+
+en:
+  devise:
+    confirmations:
+      confirmed: "Your email address has been successfully confirmed."
+      send_instructions: "You will receive an email with instructions for how to confirm your email address in a few minutes."
+      send_paranoid_instructions: "If your email address exists in our database, you will receive an email with instructions for how to confirm your email address in a few minutes."
+    failure:
+      already_authenticated: "You are already signed in."
+      inactive: "Your account is not activated yet."
+      invalid: "Invalid %{authentication_keys} or password."
+      locked: "Your account is locked."
+      last_attempt: "You have one more attempt before your account is locked."
+      not_found_in_database: "Invalid %{authentication_keys} or password."
+      timeout: "Your session expired. Please sign in again to continue."
+      unauthenticated: "You need to sign in or sign up before continuing."
+      unconfirmed: "You have to confirm your email address before continuing."
+    mailer:
+      confirmation_instructions:
+        subject: "Confirmation instructions"
+      reset_password_instructions:
+        subject: "Reset password instructions"
+      unlock_instructions:
+        subject: "Unlock instructions"
+      email_changed:
+        subject: "Email Changed"
+      password_change:
+        subject: "Password Changed"
+    omniauth_callbacks:
+      failure: "Could not authenticate you from %{kind} because \"%{reason}\"."
+      success: "Successfully authenticated from %{kind} account."
+    passwords:
+      no_token: "You can't access this page without coming from a password reset email. If you do come from a password reset email, please make sure you used the full URL provided."
+      send_instructions: "You will receive an email with instructions on how to reset your password in a few minutes."
+      send_paranoid_instructions: "If your email address exists in our database, you will receive a password recovery link at your email address in a few minutes."
+      updated: "Your password has been changed successfully. You are now signed in."
+      updated_not_active: "Your password has been changed successfully."
+    registrations:
+      destroyed: "Bye! Your account has been successfully cancelled. We hope to see you again soon."
+      signed_up: "Welcome! You have signed up successfully."
+      signed_up_but_inactive: "You have signed up successfully. However, we could not sign you in because your account is not yet activated."
+      signed_up_but_locked: "You have signed up successfully. However, we could not sign you in because your account is locked."
+      signed_up_but_unconfirmed: "A message with a confirmation link has been sent to your email address. Please follow the link to activate your account."
+      update_needs_confirmation: "You updated your account successfully, but we need to verify your new email address. Please check your email and follow the confirmation link to confirm your new email address."
+      updated: "Your account has been updated successfully."
+      updated_but_not_signed_in: "Your account has been updated successfully, but since your password was changed, you need to sign in again."
+    sessions:
+      signed_in: "Signed in successfully."
+      signed_out: "Signed out successfully."
+      already_signed_out: "Signed out successfully."
+    unlocks:
+      send_instructions: "You will receive an email with instructions for how to unlock your account in a few minutes."
+      send_paranoid_instructions: "If your account exists, you will receive an email with instructions for how to unlock it in a few minutes."
+      unlocked: "Your account has been unlocked successfully. Please sign in to continue."
+  errors:
+    messages:
+      already_confirmed: "was already confirmed, please try signing in"
+      confirmation_period_expired: "needs to be confirmed within %{period}, please request a new one"
+      expired: "has expired, please request a new one"
+      not_found: "not found"
+      not_locked: "was not locked"
+      not_saved:
+        one: "1 error prohibited this %{resource} from being saved:"
+        other: "%{count} errors prohibited this %{resource} from being saved:"
\ No newline at end of file

From 52ffcd42d6dbb2b21816084d5232d129161da265 Mon Sep 17 00:00:00 2001
From: Evans Sitibekiso <jevacrism@gmail.com>
Date: Tue, 2 Aug 2022 17:08:16 +0200
Subject: [PATCH 11/41] add user devise config in application controller

---
 config/routes.rb | 4 +++-
 1 file changed, 3 insertions(+), 1 deletion(-)

diff --git a/config/routes.rb b/config/routes.rb
index 4d98a1a..ab3912d 100644
--- a/config/routes.rb
+++ b/config/routes.rb
@@ -1,9 +1,11 @@
 Rails.application.routes.draw do
+  devise_for :users
   root 'users#index'
+
   resources :users, only: [:index, :show] do
     resources :posts, only: [:index, :show, :new, :create] do
       resources :comments, only: [:new, :create]
       resources :likes, only: [:new, :create]
     end
   end
-end
+end
\ No newline at end of file

From 9e741419221b0bb8e65ec134d7e3e669abfecf9d Mon Sep 17 00:00:00 2001
From: Evans Sitibekiso <jevacrism@gmail.com>
Date: Tue, 2 Aug 2022 17:13:51 +0200
Subject: [PATCH 12/41] resolve linter errors

---
 app/assets/stylesheets/user_style.css     | 2 +-
 app/controllers/application_controller.rb | 2 +-
 app/models/user.rb                        | 4 +---
 3 files changed, 3 insertions(+), 5 deletions(-)

diff --git a/app/assets/stylesheets/user_style.css b/app/assets/stylesheets/user_style.css
index e579b28..6404f68 100644
--- a/app/assets/stylesheets/user_style.css
+++ b/app/assets/stylesheets/user_style.css
@@ -191,4 +191,4 @@ a {
   justify-content: space-between;
   align-items: flex-start;
   width: 100%;
-}
\ No newline at end of file
+}
diff --git a/app/controllers/application_controller.rb b/app/controllers/application_controller.rb
index 5ab21b7..f1c48b6 100644
--- a/app/controllers/application_controller.rb
+++ b/app/controllers/application_controller.rb
@@ -8,4 +8,4 @@ def update_allowed_parameters
       field.permit(:name, :photo, :bio, :posts_counter, :email, :password, :password_confirmation)
     end
   end
-end
\ No newline at end of file
+end
diff --git a/app/models/user.rb b/app/models/user.rb
index dfa7439..ba380cd 100644
--- a/app/models/user.rb
+++ b/app/models/user.rb
@@ -1,5 +1,3 @@
-
-
 class User < ApplicationRecord
   # Include default devise modules. Others available are:
   # :confirmable, :lockable, :timeoutable, :trackable and :omniauthable
@@ -24,4 +22,4 @@ def recent_posts
   def set_defaults
     self.posts_counter ||= 0
   end
-end
\ No newline at end of file
+end

From 5820d15c8985cd31b636af5a7543d9958af222e6 Mon Sep 17 00:00:00 2001
From: Evans Sitibekiso <jevacrism@gmail.com>
Date: Thu, 4 Aug 2022 01:07:33 +0200
Subject: [PATCH 13/41] Update comments_controller.rb and create destroy method

---
 app/controllers/comments_controller.rb | 8 +++++++-
 1 file changed, 7 insertions(+), 1 deletion(-)

diff --git a/app/controllers/comments_controller.rb b/app/controllers/comments_controller.rb
index 4dbb215..39c6ce8 100644
--- a/app/controllers/comments_controller.rb
+++ b/app/controllers/comments_controller.rb
@@ -21,9 +21,15 @@ def create
     end
   end
 
+  def destroy
+    comment = Comment.find(params[:id])
+    comment.destroy
+    redirect_to user_post_url(current_user, comment.post), notice: 'Comment was successfully destroyed.'
+  end
+
   private
 
   def comment_params
     params.require(:comment).permit(:text)
   end
-end
+end
\ No newline at end of file

From 1612884e4c2d25949ad7843944558525946b30ee Mon Sep 17 00:00:00 2001
From: Evans Sitibekiso <jevacrism@gmail.com>
Date: Thu, 4 Aug 2022 01:09:46 +0200
Subject: [PATCH 14/41] Update post_controller.rb and create destroy method

---
 app/controllers/posts_controller.rb | 10 +++++++++-
 1 file changed, 9 insertions(+), 1 deletion(-)

diff --git a/app/controllers/posts_controller.rb b/app/controllers/posts_controller.rb
index 9a093ef..0807f4e 100644
--- a/app/controllers/posts_controller.rb
+++ b/app/controllers/posts_controller.rb
@@ -1,4 +1,5 @@
 class PostsController < ApplicationController
+  load_and_authorize_resource
   before_action :set_post, only: %i[show edit update destroy]
 
   def index
@@ -28,6 +29,13 @@ def create
     end
   end
 
+  def destroy
+    @post = Post.find(params[:id])
+    @user = User.find(@post.author_id)
+    @post.destroy
+    redirect_to user_url(@user)
+  end
+
   private
 
   def set_post
@@ -37,4 +45,4 @@ def set_post
   def post_params
     params.require(:post).permit(:title, :text, :comments_counter, :likes_counter)
   end
-end
+end
\ No newline at end of file

From 8670658c51679418c813ea1d6230d85bdb3e86cd Mon Sep 17 00:00:00 2001
From: Evans Sitibekiso <jevacrism@gmail.com>
Date: Thu, 4 Aug 2022 01:13:27 +0200
Subject: [PATCH 15/41] add cancancan authorization

---
 app/models/ability.rb | 36 ++++++++++++++++++++++++++++++++++++
 1 file changed, 36 insertions(+)
 create mode 100644 app/models/ability.rb

diff --git a/app/models/ability.rb b/app/models/ability.rb
new file mode 100644
index 0000000..ecd1e6c
--- /dev/null
+++ b/app/models/ability.rb
@@ -0,0 +1,36 @@
+class Ability
+    include CanCan::Ability
+  
+    def initialize(user)
+      can :read, :all if user.role.nil?
+  
+      can :manage, :all if user.role == 'admin'
+      can :read, :all if user.role == 'user'
+      can :manage, Post, author_id: user.id
+      can :manage, Comment, author_id: user.id
+      # Define abilities for the user here. For example:
+      #
+      #   return unless user.present?
+      #   can :read, :all
+      #   return unless user.admin?
+      #   can :manage, :all
+      #
+      # The first argument to `can` is the action you are giving the user
+      # permission to do.
+      # If you pass :manage it will apply to every action. Other common actions
+      # here are :read, :create, :update and :destroy.
+      #
+      # The second argument is the resource the user can perform the action on.
+      # If you pass :all it will apply to every resource. Otherwise pass a Ruby
+      # class of the resource.
+      #
+      # The third argument is an optional hash of conditions to further filter the
+      # objects.
+      # For example, here the user can only update published articles.
+      #
+      #   can :update, Article, published: true
+      #
+      # See the wiki for details:
+      # https://github.com/CanCanCommunity/cancancan/blob/develop/docs/define_check_abilities.md
+    end
+  end
\ No newline at end of file

From e58a588ab7c03747ba36da5803bd2485a7a0880e Mon Sep 17 00:00:00 2001
From: Evans Sitibekiso <jevacrism@gmail.com>
Date: Thu, 4 Aug 2022 01:17:22 +0200
Subject: [PATCH 16/41] Update comment.rb and create
 update_comments_counter_on_destroy method

---
 app/models/comment.rb | 7 ++++++-
 1 file changed, 6 insertions(+), 1 deletion(-)

diff --git a/app/models/comment.rb b/app/models/comment.rb
index 0aeb54d..088cf25 100644
--- a/app/models/comment.rb
+++ b/app/models/comment.rb
@@ -3,10 +3,15 @@ class Comment < ApplicationRecord
   belongs_to :post
 
   after_save :update_comments_counter
+  before_destroy :update_comments_counter_on_destroy
 
   private
 
   def update_comments_counter
     post.increment!(:comments_counter)
   end
-end
+
+  def update_comments_counter_on_destroy
+    post.update_columns('comments_counter' => post.comments_counter - 1)
+  end
+end
\ No newline at end of file

From b468531a68a3e409d836a64c747f80744b2caa19 Mon Sep 17 00:00:00 2001
From: Evans Sitibekiso <jevacrism@gmail.com>
Date: Thu, 4 Aug 2022 01:20:38 +0200
Subject: [PATCH 17/41] Update post.rb

---
 app/models/post.rb | 11 ++++++++---
 1 file changed, 8 insertions(+), 3 deletions(-)

diff --git a/app/models/post.rb b/app/models/post.rb
index d03e3bd..00f40b4 100644
--- a/app/models/post.rb
+++ b/app/models/post.rb
@@ -4,10 +4,11 @@ class Post < ApplicationRecord
   validates :likes_counter, numericality: { only_integer: true, greater_than_or_equal_to: 0 }
 
   belongs_to :author, class_name: 'User'
-  has_many :comments, foreign_key: 'post_id'
-  has_many :likes, foreign_key: 'post_id'
+  has_many :comments, foreign_key: 'post_id', dependent: :destroy
+  has_many :likes, foreign_key: 'post_id', dependent: :destroy
 
   after_save :update_posts_counter
+  before_destroy :update_posts_counter_on_destroy
 
   def recent_comments
     comments.order(created_at: :desc).limit(5)
@@ -18,4 +19,8 @@ def recent_comments
   def update_posts_counter
     author.increment!(:posts_counter)
   end
-end
+
+  def update_posts_counter_on_destroy
+    author.update_columns('posts_counter' => author.posts_counter - 1)
+  end
+end
\ No newline at end of file

From 2779baff61128daa8ebed7fcc93910cdc17cc9d1 Mon Sep 17 00:00:00 2001
From: Evans Sitibekiso <jevacrism@gmail.com>
Date: Thu, 4 Aug 2022 01:22:25 +0200
Subject: [PATCH 18/41] Update user.rb

---
 app/models/user.rb | 8 ++++----
 1 file changed, 4 insertions(+), 4 deletions(-)

diff --git a/app/models/user.rb b/app/models/user.rb
index ba380cd..6fc55b3 100644
--- a/app/models/user.rb
+++ b/app/models/user.rb
@@ -7,9 +7,9 @@ class User < ApplicationRecord
   validates :name, presence: true, allow_blank: false
   validates :posts_counter, numericality: { only_integer: true, greater_than_or_equal_to: 0 }
 
-  has_many :posts, foreign_key: 'author_id'
-  has_many :comments, foreign_key: 'author_id'
-  has_many :likes, foreign_key: 'author_id'
+  has_many :posts, foreign_key: 'author_id', dependent: :destroy
+  has_many :comments, foreign_key: 'author_id', dependent: :destroy
+  has_many :likes, foreign_key: 'author_id', dependent: :destroy
 
   after_initialize :set_defaults
 
@@ -22,4 +22,4 @@ def recent_posts
   def set_defaults
     self.posts_counter ||= 0
   end
-end
+end
\ No newline at end of file

From fba2715aaaf03a8c9e7371669b4afe9e005e1b8d Mon Sep 17 00:00:00 2001
From: Evans Sitibekiso <jevacrism@gmail.com>
Date: Thu, 4 Aug 2022 01:29:25 +0200
Subject: [PATCH 19/41] Update posts show.html.erb to include delete option

---
 app/views/posts/show.html.erb | 11 +++++++++--
 1 file changed, 9 insertions(+), 2 deletions(-)

diff --git a/app/views/posts/show.html.erb b/app/views/posts/show.html.erb
index f8dd84e..2cbbf39 100644
--- a/app/views/posts/show.html.erb
+++ b/app/views/posts/show.html.erb
@@ -9,6 +9,7 @@
     <div class="comment-info">
         <% @post.recent_comments.each do |comment| %>
             <div>
+                <p class="post-title">Comments</p>
                 <p> 
                     <span>
                         <%= comment.author.name %>:
@@ -16,11 +17,17 @@
                     <span>
                         <%= comment.text %>
                     </span>
-                </p>
-            </div>            
+                </p>                
+            </div>
+            <% if can? :destroy, comment %>
+                <%= button_to "Delete", user_post_comment_path(@post.author, @post, comment), method: :delete, class: 'button' %>
+            <% end %>         
         <% end %>
     </div>
     <div class="button-user">
+        <% if can? :destroy, @post %>
+            <%= button_to "Delete Post", user_post_path(@post.author, @post), method: :delete, class: "button" %>
+        <% end %>
         <%= button_to "Back", user_path(@post.author, @post), method: :get, class: "button" %>
         <%= button_to "Add Comment", new_user_post_comment_path(@post.author, @post), method: :get, class: "button" %>
         <div >

From d0a59b345b88747a3e9002557ab5799532234e94 Mon Sep 17 00:00:00 2001
From: Evans Sitibekiso <jevacrism@gmail.com>
Date: Thu, 4 Aug 2022 01:32:48 +0200
Subject: [PATCH 20/41] Update users show.html.erb

---
 app/views/users/show.html.erb | 1 +
 1 file changed, 1 insertion(+)

diff --git a/app/views/users/show.html.erb b/app/views/users/show.html.erb
index 52f87f1..2761553 100644
--- a/app/views/users/show.html.erb
+++ b/app/views/users/show.html.erb
@@ -20,6 +20,7 @@
     <% end %>    
 
     <div class="button-user">
+        <%= button_to "Back", root_url(), method: :get, class: "button" %>
         <button class="button">
         <%= link_to "See all posts", user_posts_path(@user), class:"text-button" %>
         </button>

From fe51071e7000b995a6f679a99029d73e89c09d98 Mon Sep 17 00:00:00 2001
From: Evans Sitibekiso <jevacrism@gmail.com>
Date: Thu, 4 Aug 2022 01:37:48 +0200
Subject: [PATCH 21/41] Update routes.rb to include destroy action

---
 config/routes.rb | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/config/routes.rb b/config/routes.rb
index ab3912d..c040c1f 100644
--- a/config/routes.rb
+++ b/config/routes.rb
@@ -3,9 +3,9 @@
   root 'users#index'
 
   resources :users, only: [:index, :show] do
-    resources :posts, only: [:index, :show, :new, :create] do
-      resources :comments, only: [:new, :create]
-      resources :likes, only: [:new, :create]
+    resources :posts, only: [:index, :show, :new, :create, :destroy] do
+      resources :comments, only: [:new, :create, :destroy]
+      resources :likes, only: [:new, :create, :destroy]
     end
   end
 end
\ No newline at end of file

From a8cb60bac986aa98f46d363b9e1c061962bdc80e Mon Sep 17 00:00:00 2001
From: Evans Sitibekiso <jevacrism@gmail.com>
Date: Thu, 4 Aug 2022 01:42:23 +0200
Subject: [PATCH 22/41] add cancancan authorization

---
 db/migrate/20220727130516_add_role_to_users.rb | 5 +++++
 1 file changed, 5 insertions(+)
 create mode 100644 db/migrate/20220727130516_add_role_to_users.rb

diff --git a/db/migrate/20220727130516_add_role_to_users.rb b/db/migrate/20220727130516_add_role_to_users.rb
new file mode 100644
index 0000000..262c5b5
--- /dev/null
+++ b/db/migrate/20220727130516_add_role_to_users.rb
@@ -0,0 +1,5 @@
+class AddRoleToUsers < ActiveRecord::Migration[7.0]
+    def change
+      add_column :users, :role, :string
+    end
+  end
\ No newline at end of file

From 74ec27dd7f576c947744af8b833f0f46462a7e6d Mon Sep 17 00:00:00 2001
From: Evans Sitibekiso <jevacrism@gmail.com>
Date: Thu, 4 Aug 2022 01:48:01 +0200
Subject: [PATCH 23/41] add cancancan authorization

---
 db/schema.rb | 15 +++++++++++++--
 1 file changed, 13 insertions(+), 2 deletions(-)

diff --git a/db/schema.rb b/db/schema.rb
index 56247fe..a61f14b 100644
--- a/db/schema.rb
+++ b/db/schema.rb
@@ -10,7 +10,7 @@
 #
 # It's strongly recommended that you check this file into your version control system.
 
-ActiveRecord::Schema[7.0].define(version: 2022_07_12_105029) do
+ActiveRecord::Schema[7.0].define(version: 2022_07_27_130516) do
   # These are extensions that must be enabled in order to support this database
   enable_extension "plpgsql"
 
@@ -51,6 +51,17 @@
     t.integer "posts_counter"
     t.datetime "created_at", null: false
     t.datetime "updated_at", null: false
+    t.string "email", default: "", null: false
+    t.string "encrypted_password", default: "", null: false
+    t.string "reset_password_token"
+    t.datetime "reset_password_sent_at"
+    t.datetime "remember_created_at"
+    t.string "confirmation_token"
+    t.datetime "confirmed_at"
+    t.datetime "confirmation_sent_at"
+    t.string "role"
+    t.index ["email"], name: "index_users_on_email", unique: true
+    t.index ["reset_password_token"], name: "index_users_on_reset_password_token", unique: true
   end
 
   add_foreign_key "comments", "posts"
@@ -58,4 +69,4 @@
   add_foreign_key "likes", "posts"
   add_foreign_key "likes", "users", column: "author_id"
   add_foreign_key "posts", "users", column: "author_id"
-end
+end
\ No newline at end of file

From 68ff6cff244d49355dd12400897d862ab4127e1f Mon Sep 17 00:00:00 2001
From: Evans Sitibekiso <jevacrism@gmail.com>
Date: Thu, 4 Aug 2022 01:55:48 +0200
Subject: [PATCH 24/41] correct linter errors

---
 Gemfile                                |  7 ++-
 Gemfile.lock                           | 34 ++++++++++---
 app/controllers/comments_controller.rb |  2 +-
 app/controllers/posts_controller.rb    |  2 +-
 app/models/ability.rb                  | 70 +++++++++++++-------------
 app/models/comment.rb                  |  2 +-
 app/models/post.rb                     |  2 +-
 app/models/user.rb                     |  2 +-
 8 files changed, 73 insertions(+), 48 deletions(-)

diff --git a/Gemfile b/Gemfile
index e418f6a..3f43521 100644
--- a/Gemfile
+++ b/Gemfile
@@ -44,13 +44,18 @@ gem 'tzinfo-data'
 # Reduces boot times through caching; required in config/boot.rb
 gem 'bootsnap', require: false
 
+gem 'devise'
+
+gem 'cancancan'
+
 # Use Sass to process CSS
 # gem "sassc-rails"
 
 # Use Active Storage variants [https://guides.rubyonrails.org/active_storage_overview.html#transforming-images]
 # gem "image_processing", "~> 1.2"
 
-gem 'ffi'
+gem 'ffi', github: 'ffi/ffi', submodules: true
+
 group :development, :test do
   # See https://guides.rubyonrails.org/debugging_rails_applications.html#debugging-with-the-debug-gem
   gem 'rails-controller-testing'
diff --git a/Gemfile.lock b/Gemfile.lock
index a749d98..1d9ba19 100644
--- a/Gemfile.lock
+++ b/Gemfile.lock
@@ -1,3 +1,12 @@
+
+
+GIT
+  remote: https://github.com/ffi/ffi.git
+  revision: 07a1c0c028942f786b80f48206795a8fa6b0e8f5
+  submodules: true
+  specs:
+    ffi (1.15.5)
+
 GEM
   remote: https://rubygems.org/
   specs:
@@ -69,6 +78,7 @@ GEM
     addressable (2.8.0)
       public_suffix (>= 2.0.2, < 5.0)
     ast (2.4.2)
+    bcrypt (3.1.18)
     bindex (0.8.1)
     bootsnap (1.12.0)
       msgpack (~> 1.2)
@@ -76,6 +86,7 @@ GEM
     bullet (7.0.2)
       activesupport (>= 3.0.0)
       uniform_notifier (~> 1.11)
+    cancancan (3.4.0)
     capybara (3.37.1)
       addressable
       matrix
@@ -88,11 +99,15 @@ GEM
     childprocess (4.1.0)
     concurrent-ruby (1.1.10)
     crass (1.0.6)
+    devise (4.8.1)
+      bcrypt (~> 3.0)
+      orm_adapter (~> 0.1)
+      railties (>= 4.1.0)
+      responders
+      warden (~> 1.2.3)
     diff-lcs (1.5.0)
     digest (3.1.0)
     erubi (1.10.0)
-    ffi (1.15.5)
-    ffi (1.15.5-x64-mingw-ucrt)
     globalid (1.0.0)
       activesupport (>= 5.0)
     i18n (1.12.0)
@@ -134,8 +149,7 @@ GEM
       racc (~> 1.4)
     nokogiri (1.13.7-x64-mingw-ucrt)
       racc (~> 1.4)
-    nokogiri (1.13.7-x86_64-linux)
-      racc (~> 1.4)
+    orm_adapter (0.5.0)
     parallel (1.22.1)
     parser (3.1.2.0)
       ast (~> 2.4.1)
@@ -181,6 +195,9 @@ GEM
     rainbow (3.1.1)
     rake (13.0.6)
     regexp_parser (2.5.0)
+    responders (3.0.1)
+      actionpack (>= 5.0)
+      railties (>= 5.0)
     rexml (3.2.5)
     rspec-core (3.11.0)
       rspec-support (~> 3.11.0)
@@ -240,6 +257,8 @@ GEM
       tzinfo (>= 1.0.0)
     unicode-display_width (2.2.0)
     uniform_notifier (1.16.0)
+    warden (1.2.9)
+      rack (>= 2.0.9)
     web-console (4.2.0)
       actionview (>= 6.0.0)
       activemodel (>= 6.0.0)
@@ -260,13 +279,14 @@ GEM
 PLATFORMS
   arm64-darwin-21
   x64-mingw-ucrt
-  x86_64-linux
 
 DEPENDENCIES
   bootsnap
   bullet
+  cancancan
   capybara
-  ffi
+  devise
+  ffi!
   importmap-rails
   jbuilder
   pg (~> 1.1)
@@ -287,4 +307,4 @@ RUBY VERSION
    ruby 3.1.2p20
 
 BUNDLED WITH
-   2.3.7
+   2.3.7
\ No newline at end of file
diff --git a/app/controllers/comments_controller.rb b/app/controllers/comments_controller.rb
index 39c6ce8..847ed24 100644
--- a/app/controllers/comments_controller.rb
+++ b/app/controllers/comments_controller.rb
@@ -32,4 +32,4 @@ def destroy
   def comment_params
     params.require(:comment).permit(:text)
   end
-end
\ No newline at end of file
+end
diff --git a/app/controllers/posts_controller.rb b/app/controllers/posts_controller.rb
index 0807f4e..72e0dab 100644
--- a/app/controllers/posts_controller.rb
+++ b/app/controllers/posts_controller.rb
@@ -45,4 +45,4 @@ def set_post
   def post_params
     params.require(:post).permit(:title, :text, :comments_counter, :likes_counter)
   end
-end
\ No newline at end of file
+end
diff --git a/app/models/ability.rb b/app/models/ability.rb
index ecd1e6c..9e35157 100644
--- a/app/models/ability.rb
+++ b/app/models/ability.rb
@@ -1,36 +1,36 @@
 class Ability
-    include CanCan::Ability
-  
-    def initialize(user)
-      can :read, :all if user.role.nil?
-  
-      can :manage, :all if user.role == 'admin'
-      can :read, :all if user.role == 'user'
-      can :manage, Post, author_id: user.id
-      can :manage, Comment, author_id: user.id
-      # Define abilities for the user here. For example:
-      #
-      #   return unless user.present?
-      #   can :read, :all
-      #   return unless user.admin?
-      #   can :manage, :all
-      #
-      # The first argument to `can` is the action you are giving the user
-      # permission to do.
-      # If you pass :manage it will apply to every action. Other common actions
-      # here are :read, :create, :update and :destroy.
-      #
-      # The second argument is the resource the user can perform the action on.
-      # If you pass :all it will apply to every resource. Otherwise pass a Ruby
-      # class of the resource.
-      #
-      # The third argument is an optional hash of conditions to further filter the
-      # objects.
-      # For example, here the user can only update published articles.
-      #
-      #   can :update, Article, published: true
-      #
-      # See the wiki for details:
-      # https://github.com/CanCanCommunity/cancancan/blob/develop/docs/define_check_abilities.md
-    end
-  end
\ No newline at end of file
+  include CanCan::Ability
+
+  def initialize(user)
+    can :read, :all if user.role.nil?
+
+    can :manage, :all if user.role == 'admin'
+    can :read, :all if user.role == 'user'
+    can :manage, Post, author_id: user.id
+    can :manage, Comment, author_id: user.id
+    # Define abilities for the user here. For example:
+    #
+    #   return unless user.present?
+    #   can :read, :all
+    #   return unless user.admin?
+    #   can :manage, :all
+    #
+    # The first argument to `can` is the action you are giving the user
+    # permission to do.
+    # If you pass :manage it will apply to every action. Other common actions
+    # here are :read, :create, :update and :destroy.
+    #
+    # The second argument is the resource the user can perform the action on.
+    # If you pass :all it will apply to every resource. Otherwise pass a Ruby
+    # class of the resource.
+    #
+    # The third argument is an optional hash of conditions to further filter the
+    # objects.
+    # For example, here the user can only update published articles.
+    #
+    #   can :update, Article, published: true
+    #
+    # See the wiki for details:
+    # https://github.com/CanCanCommunity/cancancan/blob/develop/docs/define_check_abilities.md
+  end
+end
diff --git a/app/models/comment.rb b/app/models/comment.rb
index 088cf25..eddc7d5 100644
--- a/app/models/comment.rb
+++ b/app/models/comment.rb
@@ -14,4 +14,4 @@ def update_comments_counter
   def update_comments_counter_on_destroy
     post.update_columns('comments_counter' => post.comments_counter - 1)
   end
-end
\ No newline at end of file
+end
diff --git a/app/models/post.rb b/app/models/post.rb
index 00f40b4..3c34c8d 100644
--- a/app/models/post.rb
+++ b/app/models/post.rb
@@ -23,4 +23,4 @@ def update_posts_counter
   def update_posts_counter_on_destroy
     author.update_columns('posts_counter' => author.posts_counter - 1)
   end
-end
\ No newline at end of file
+end
diff --git a/app/models/user.rb b/app/models/user.rb
index 6fc55b3..4b66e4b 100644
--- a/app/models/user.rb
+++ b/app/models/user.rb
@@ -22,4 +22,4 @@ def recent_posts
   def set_defaults
     self.posts_counter ||= 0
   end
-end
\ No newline at end of file
+end

From 7f5e080844610ab95b7bfae68f694fcbf71bcd5b Mon Sep 17 00:00:00 2001
From: Evans Sitibekiso <jevacrism@gmail.com>
Date: Thu, 4 Aug 2022 23:27:42 +0200
Subject: [PATCH 25/41] Create users_controller.rb in app/controllers/api/v1

---
 app/controllers/api/v1/api_controller.rb | 10 ++++++++++
 1 file changed, 10 insertions(+)
 create mode 100644 app/controllers/api/v1/api_controller.rb

diff --git a/app/controllers/api/v1/api_controller.rb b/app/controllers/api/v1/api_controller.rb
new file mode 100644
index 0000000..a7dc1c1
--- /dev/null
+++ b/app/controllers/api/v1/api_controller.rb
@@ -0,0 +1,10 @@
+class Api::V1::PostsController < ApplicationController
+    def index
+      @posts = Post.where(author_id: params[:author_id])
+      if @posts.empty?
+        json_response({ msg: 'no post or user found' }, 400)
+      else
+        render json: @posts
+      end
+    end
+  end
\ No newline at end of file

From ad24efc7026597f3e4ad5c181144a2ada66bdfa0 Mon Sep 17 00:00:00 2001
From: Evans Sitibekiso <jevacrism@gmail.com>
Date: Thu, 4 Aug 2022 23:31:51 +0200
Subject: [PATCH 26/41] Update comments_controller.rb in app/api/v1

---
 app/controllers/api/v1/comments_controller.rb | 30 +++++++++++++++++++
 1 file changed, 30 insertions(+)
 create mode 100644 app/controllers/api/v1/comments_controller.rb

diff --git a/app/controllers/api/v1/comments_controller.rb b/app/controllers/api/v1/comments_controller.rb
new file mode 100644
index 0000000..cb263e7
--- /dev/null
+++ b/app/controllers/api/v1/comments_controller.rb
@@ -0,0 +1,30 @@
+class Api::V1::CommentsController < ApplicationController
+    before_action :authorize_request
+    protect_from_forgery with: :null_session
+  
+    def index
+      @comments = Comment.where(post_id: params[:post_id])
+  
+      if @comments.empty?
+        json_response({ msg: 'No post, comments or user found' }, 400)
+      else
+        render json: @comments
+      end
+    end
+  
+    def create
+      @comment = Comment.create(
+        text: comment_params[:text],
+        author_id: params[:author_id],
+        post_id: params[:post_id]
+      )
+  
+      json_response(@comment, :created)
+    end
+  
+    private
+  
+    def comment_params
+      params.require(:comment).permit(:text)
+    end
+  end
\ No newline at end of file

From c255cae16d02fe02778a09d1eabc6607757098fb Mon Sep 17 00:00:00 2001
From: Evans Sitibekiso <jevacrism@gmail.com>
Date: Thu, 4 Aug 2022 23:40:11 +0200
Subject: [PATCH 27/41] Update postscontroller.rb in app/api/v1

---
 app/controllers/api/v1/posts_controller.rb | 11 +++++++++++
 1 file changed, 11 insertions(+)
 create mode 100644 app/controllers/api/v1/posts_controller.rb

diff --git a/app/controllers/api/v1/posts_controller.rb b/app/controllers/api/v1/posts_controller.rb
new file mode 100644
index 0000000..fc8d1de
--- /dev/null
+++ b/app/controllers/api/v1/posts_controller.rb
@@ -0,0 +1,11 @@
+class Api::V1::PostsController < ApplicationController
+    before_action :authorize_request
+    def index
+      @posts = Post.where(author_id: params[:author_id])
+      if @posts.empty?
+        json_response({ msg: 'no post or user found' }, 400)
+      else
+        render json: @posts
+      end
+    end
+  end
\ No newline at end of file

From 88f8c876fe50b4fa558dff4402f6931dc094e787 Mon Sep 17 00:00:00 2001
From: Evans Sitibekiso <jevacrism@gmail.com>
Date: Thu, 4 Aug 2022 23:43:20 +0200
Subject: [PATCH 28/41] Update userscontroller.rb

---
 app/controllers/api/v1/users_controller.rb | 7 +++++++
 1 file changed, 7 insertions(+)
 create mode 100644 app/controllers/api/v1/users_controller.rb

diff --git a/app/controllers/api/v1/users_controller.rb b/app/controllers/api/v1/users_controller.rb
new file mode 100644
index 0000000..63880cb
--- /dev/null
+++ b/app/controllers/api/v1/users_controller.rb
@@ -0,0 +1,7 @@
+class Api::V1::UsersController < ApplicationController
+    before_action :authorize_request
+    def index
+      @users = User.all
+      render json: @users, status: :ok
+    end
+  end
\ No newline at end of file

From 63a8d0b82400282b8d6dfcc04fbf7bdabd5c5a5d Mon Sep 17 00:00:00 2001
From: Evans Sitibekiso <jevacrism@gmail.com>
Date: Thu, 4 Aug 2022 23:51:42 +0200
Subject: [PATCH 29/41] Create exception_handler.rb module in
 app/controllers/concerns

---
 app/controllers/concerns/exception_handler.rb | 14 ++++++++++++++
 1 file changed, 14 insertions(+)
 create mode 100644 app/controllers/concerns/exception_handler.rb

diff --git a/app/controllers/concerns/exception_handler.rb b/app/controllers/concerns/exception_handler.rb
new file mode 100644
index 0000000..7acb573
--- /dev/null
+++ b/app/controllers/concerns/exception_handler.rb
@@ -0,0 +1,14 @@
+module ExceptionHandler
+    # provides the more graceful `included` method
+    extend ActiveSupport::Concern
+  
+    included do
+      rescue_from ActiveRecord::RecordNotFound do |e|
+        json_response({ message: e.message }, :not_found)
+      end
+  
+      rescue_from ActiveRecord::RecordInvalid do |e|
+        json_response({ message: e.message }, :unprocessable_entity)
+      end
+    end
+  end
\ No newline at end of file

From 9babb07a9e4d59d7cd1c35824ecfd043b7f8615a Mon Sep 17 00:00:00 2001
From: Evans Sitibekiso <jevacrism@gmail.com>
Date: Thu, 4 Aug 2022 23:53:57 +0200
Subject: [PATCH 30/41] Create response.rb module in app/controllers/concerns

---
 app/controllers/concerns/response.rb | 5 +++++
 1 file changed, 5 insertions(+)
 create mode 100644 app/controllers/concerns/response.rb

diff --git a/app/controllers/concerns/response.rb b/app/controllers/concerns/response.rb
new file mode 100644
index 0000000..c84079a
--- /dev/null
+++ b/app/controllers/concerns/response.rb
@@ -0,0 +1,5 @@
+module Response
+    def json_response(object, status = :ok)
+      render json: object, status:
+    end
+  end
\ No newline at end of file

From 5b58ba7df76998cbbe50c894551dc6c257ff9b76 Mon Sep 17 00:00:00 2001
From: Evans Sitibekiso <jevacrism@gmail.com>
Date: Fri, 5 Aug 2022 00:06:44 +0200
Subject: [PATCH 31/41] update files

---
 app/controllers/application_controller.rb | 21 ++++++++++++++++++++-
 app/controllers/comments_controller.rb    | 11 ++++++++++-
 app/controllers/posts_controller.rb       | 11 ++++++++++-
 3 files changed, 40 insertions(+), 3 deletions(-)

diff --git a/app/controllers/application_controller.rb b/app/controllers/application_controller.rb
index f1c48b6..69bd1ea 100644
--- a/app/controllers/application_controller.rb
+++ b/app/controllers/application_controller.rb
@@ -1,11 +1,30 @@
 class ApplicationController < ActionController::Base
+  include Response
+  include ExceptionHandler
+
   before_action :authenticate_user!
   protect_from_forgery with: :exception
   before_action :update_allowed_parameters, if: :devise_controller?
 
+  protected
+
   def update_allowed_parameters
     devise_parameter_sanitizer.permit(:sign_up) do |field|
       field.permit(:name, :photo, :bio, :posts_counter, :email, :password, :password_confirmation)
     end
   end
-end
+
+  def authorize_request
+    header = request.headers['Auth']
+    header = header.split.last if header
+    begin
+      @decoded = JsonWebToken.decode(header)
+      p @decoded
+      @current_user = User.find(@decoded['id'])
+    rescue ActiveRecord::RecordNotFound => e
+      render json: { errors: e.message }, status: :unauthorized
+    rescue JWT::DecodeError => e
+      render json: { error: e.message }, status: :unauthorized
+    end
+  end
+end
\ No newline at end of file
diff --git a/app/controllers/comments_controller.rb b/app/controllers/comments_controller.rb
index 847ed24..232f963 100644
--- a/app/controllers/comments_controller.rb
+++ b/app/controllers/comments_controller.rb
@@ -1,4 +1,13 @@
 class CommentsController < ApplicationController
+  def index
+    @user = current_user
+    @comments = @user.comments
+
+    respond_to do |format|
+      format.json { render json: @comments }
+    end
+  end
+
   def new
     @comment = Comment.new
     @user = current_user
@@ -32,4 +41,4 @@ def destroy
   def comment_params
     params.require(:comment).permit(:text)
   end
-end
+end
\ No newline at end of file
diff --git a/app/controllers/posts_controller.rb b/app/controllers/posts_controller.rb
index 72e0dab..6e03513 100644
--- a/app/controllers/posts_controller.rb
+++ b/app/controllers/posts_controller.rb
@@ -5,10 +5,19 @@ class PostsController < ApplicationController
   def index
     @user = current_user
     @posts = @user.posts.includes(:comments)
+
+    respond_to do |format|
+      format.html
+      format.json { render json: @posts }
+    end
   end
 
   def show
     @post = Post.find(params[:id])
+    respond_to do |format|
+      format.html
+      format.json { render json: @post }
+    end
   end
 
   def new
@@ -45,4 +54,4 @@ def set_post
   def post_params
     params.require(:post).permit(:title, :text, :comments_counter, :likes_counter)
   end
-end
+end
\ No newline at end of file

From 85b802cd15a2719eb8efdfb200653a2fe08aa6cc Mon Sep 17 00:00:00 2001
From: Evans Sitibekiso <jevacrism@gmail.com>
Date: Fri, 5 Aug 2022 00:13:09 +0200
Subject: [PATCH 32/41] Create json_web_token.rb in app/lib

---
 app/lib/json_web_token.rb | 5 +++++
 1 file changed, 5 insertions(+)
 create mode 100644 app/lib/json_web_token.rb

diff --git a/app/lib/json_web_token.rb b/app/lib/json_web_token.rb
new file mode 100644
index 0000000..d107e7b
--- /dev/null
+++ b/app/lib/json_web_token.rb
@@ -0,0 +1,5 @@
+class JsonWebToken
+    def self.decode(token)
+      JWT.decode(token, 'John')[0]
+    end
+  end
\ No newline at end of file

From 678209d3d31ccf9a66a787848b6eed4e7c694d57 Mon Sep 17 00:00:00 2001
From: Evans Sitibekiso <jevacrism@gmail.com>
Date: Fri, 5 Aug 2022 00:31:49 +0200
Subject: [PATCH 33/41] Add jwt gem in gemfile

---
 Gemfile             |  2 ++
 Gemfile.lock        |  2 ++
 config/database.yml | 11 +++++++----
 config/routes.rb    | 10 ++++++++++
 4 files changed, 21 insertions(+), 4 deletions(-)

diff --git a/Gemfile b/Gemfile
index 3f43521..2336fa0 100644
--- a/Gemfile
+++ b/Gemfile
@@ -48,6 +48,8 @@ gem 'devise'
 
 gem 'cancancan'
 
+gem 'jwt'
+
 # Use Sass to process CSS
 # gem "sassc-rails"
 
diff --git a/Gemfile.lock b/Gemfile.lock
index 1d9ba19..3fac33a 100644
--- a/Gemfile.lock
+++ b/Gemfile.lock
@@ -119,6 +119,7 @@ GEM
       actionview (>= 5.0.0)
       activesupport (>= 5.0.0)
     json (2.6.2)
+    jwt (2.4.1)
     loofah (2.18.0)
       crass (~> 1.0.2)
       nokogiri (>= 1.5.9)
@@ -289,6 +290,7 @@ DEPENDENCIES
   ffi!
   importmap-rails
   jbuilder
+   jwt
   pg (~> 1.1)
   puma (~> 5.0)
   rails (~> 7.0.3)
diff --git a/config/database.yml b/config/database.yml
index a8a1f70..e5f8a45 100644
--- a/config/database.yml
+++ b/config/database.yml
@@ -17,7 +17,8 @@
 default: &default
   adapter: postgresql
   encoding: unicode
-  
+  username: postgres
+  password: 2022
   # For details on connection pooling, see Rails configuration guide
   # https://guides.rubyonrails.org/configuring.html#database-pooling
   pool: <%= ENV.fetch("RAILS_MAX_THREADS") { 5 } %>
@@ -25,7 +26,8 @@ default: &default
 development:
   <<: *default
   database: blog_app_development
-  
+  username: postgres
+  password: 2022
 
   # The specified database role being used to connect to postgres.
   # To create additional roles in postgres see `$ createuser --help`.
@@ -60,7 +62,8 @@ development:
 test:
   <<: *default
   database: blog_app_test
-  
+  username: postgres
+  password: 2022
 
 # As with config/credentials.yml, you never want to store sensitive information,
 # like your database password, in your source code. If your source code is
@@ -85,4 +88,4 @@ test:
 production:
   <<: *default
   database: blog_app_production
-
+  
\ No newline at end of file
diff --git a/config/routes.rb b/config/routes.rb
index c040c1f..e3c8d9c 100644
--- a/config/routes.rb
+++ b/config/routes.rb
@@ -2,6 +2,16 @@
   devise_for :users
   root 'users#index'
 
+  namespace :api do
+    namespace :v1 do
+      resources :users, only:  [:index, :show] do
+        resources :posts, only:  [:index] do
+          resources :comments, only:  [:index, :create]
+        end
+      end
+    end
+  end
+
   resources :users, only: [:index, :show] do
     resources :posts, only: [:index, :show, :new, :create, :destroy] do
       resources :comments, only: [:new, :create, :destroy]

From e9fa22f70adb8741334c077d3004b93e6896dd8b Mon Sep 17 00:00:00 2001
From: Edward Odhiambo <Edward@Macs-MacBook-Air.local>
Date: Fri, 5 Aug 2022 15:04:53 +0300
Subject: [PATCH 34/41] Edit Linters

---
 app/controllers/api/v1/api_controller.rb      | 16 +++---
 app/controllers/api/v1/comments_controller.rb | 56 +++++++++----------
 app/controllers/api/v1/posts_controller.rb    | 18 +++---
 app/controllers/api/v1/users_controller.rb    | 12 ++--
 app/controllers/application_controller.rb     |  2 +-
 app/controllers/comments_controller.rb        |  2 +-
 app/controllers/concerns/exception_handler.rb | 24 ++++----
 app/controllers/concerns/response.rb          |  8 +--
 app/controllers/posts_controller.rb           |  2 +-
 app/lib/json_web_token.rb                     |  8 +--
 10 files changed, 74 insertions(+), 74 deletions(-)

diff --git a/app/controllers/api/v1/api_controller.rb b/app/controllers/api/v1/api_controller.rb
index a7dc1c1..f97baf2 100644
--- a/app/controllers/api/v1/api_controller.rb
+++ b/app/controllers/api/v1/api_controller.rb
@@ -1,10 +1,10 @@
 class Api::V1::PostsController < ApplicationController
-    def index
-      @posts = Post.where(author_id: params[:author_id])
-      if @posts.empty?
-        json_response({ msg: 'no post or user found' }, 400)
-      else
-        render json: @posts
-      end
+  def index
+    @posts = Post.where(author_id: params[:author_id])
+    if @posts.empty?
+      json_response({ msg: 'no post or user found' }, 400)
+    else
+      render json: @posts
     end
-  end
\ No newline at end of file
+  end
+end
diff --git a/app/controllers/api/v1/comments_controller.rb b/app/controllers/api/v1/comments_controller.rb
index cb263e7..b7df837 100644
--- a/app/controllers/api/v1/comments_controller.rb
+++ b/app/controllers/api/v1/comments_controller.rb
@@ -1,30 +1,30 @@
 class Api::V1::CommentsController < ApplicationController
-    before_action :authorize_request
-    protect_from_forgery with: :null_session
-  
-    def index
-      @comments = Comment.where(post_id: params[:post_id])
-  
-      if @comments.empty?
-        json_response({ msg: 'No post, comments or user found' }, 400)
-      else
-        render json: @comments
-      end
+  before_action :authorize_request
+  protect_from_forgery with: :null_session
+
+  def index
+    @comments = Comment.where(post_id: params[:post_id])
+
+    if @comments.empty?
+      json_response({ msg: 'No post, comments or user found' }, 400)
+    else
+      render json: @comments
     end
-  
-    def create
-      @comment = Comment.create(
-        text: comment_params[:text],
-        author_id: params[:author_id],
-        post_id: params[:post_id]
-      )
-  
-      json_response(@comment, :created)
-    end
-  
-    private
-  
-    def comment_params
-      params.require(:comment).permit(:text)
-    end
-  end
\ No newline at end of file
+  end
+
+  def create
+    @comment = Comment.create(
+      text: comment_params[:text],
+      author_id: params[:author_id],
+      post_id: params[:post_id]
+    )
+
+    json_response(@comment, :created)
+  end
+
+  private
+
+  def comment_params
+    params.require(:comment).permit(:text)
+  end
+end
diff --git a/app/controllers/api/v1/posts_controller.rb b/app/controllers/api/v1/posts_controller.rb
index fc8d1de..61675bf 100644
--- a/app/controllers/api/v1/posts_controller.rb
+++ b/app/controllers/api/v1/posts_controller.rb
@@ -1,11 +1,11 @@
 class Api::V1::PostsController < ApplicationController
-    before_action :authorize_request
-    def index
-      @posts = Post.where(author_id: params[:author_id])
-      if @posts.empty?
-        json_response({ msg: 'no post or user found' }, 400)
-      else
-        render json: @posts
-      end
+  before_action :authorize_request
+  def index
+    @posts = Post.where(author_id: params[:author_id])
+    if @posts.empty?
+      json_response({ msg: 'no post or user found' }, 400)
+    else
+      render json: @posts
     end
-  end
\ No newline at end of file
+  end
+end
diff --git a/app/controllers/api/v1/users_controller.rb b/app/controllers/api/v1/users_controller.rb
index 63880cb..013d8b6 100644
--- a/app/controllers/api/v1/users_controller.rb
+++ b/app/controllers/api/v1/users_controller.rb
@@ -1,7 +1,7 @@
 class Api::V1::UsersController < ApplicationController
-    before_action :authorize_request
-    def index
-      @users = User.all
-      render json: @users, status: :ok
-    end
-  end
\ No newline at end of file
+  before_action :authorize_request
+  def index
+    @users = User.all
+    render json: @users, status: :ok
+  end
+end
diff --git a/app/controllers/application_controller.rb b/app/controllers/application_controller.rb
index 69bd1ea..870f956 100644
--- a/app/controllers/application_controller.rb
+++ b/app/controllers/application_controller.rb
@@ -27,4 +27,4 @@ def authorize_request
       render json: { error: e.message }, status: :unauthorized
     end
   end
-end
\ No newline at end of file
+end
diff --git a/app/controllers/comments_controller.rb b/app/controllers/comments_controller.rb
index 232f963..5810b55 100644
--- a/app/controllers/comments_controller.rb
+++ b/app/controllers/comments_controller.rb
@@ -41,4 +41,4 @@ def destroy
   def comment_params
     params.require(:comment).permit(:text)
   end
-end
\ No newline at end of file
+end
diff --git a/app/controllers/concerns/exception_handler.rb b/app/controllers/concerns/exception_handler.rb
index 7acb573..ba78617 100644
--- a/app/controllers/concerns/exception_handler.rb
+++ b/app/controllers/concerns/exception_handler.rb
@@ -1,14 +1,14 @@
 module ExceptionHandler
-    # provides the more graceful `included` method
-    extend ActiveSupport::Concern
-  
-    included do
-      rescue_from ActiveRecord::RecordNotFound do |e|
-        json_response({ message: e.message }, :not_found)
-      end
-  
-      rescue_from ActiveRecord::RecordInvalid do |e|
-        json_response({ message: e.message }, :unprocessable_entity)
-      end
+  # provides the more graceful `included` method
+  extend ActiveSupport::Concern
+
+  included do
+    rescue_from ActiveRecord::RecordNotFound do |e|
+      json_response({ message: e.message }, :not_found)
     end
-  end
\ No newline at end of file
+
+    rescue_from ActiveRecord::RecordInvalid do |e|
+      json_response({ message: e.message }, :unprocessable_entity)
+    end
+  end
+end
diff --git a/app/controllers/concerns/response.rb b/app/controllers/concerns/response.rb
index c84079a..1f1f5d0 100644
--- a/app/controllers/concerns/response.rb
+++ b/app/controllers/concerns/response.rb
@@ -1,5 +1,5 @@
 module Response
-    def json_response(object, status = :ok)
-      render json: object, status:
-    end
-  end
\ No newline at end of file
+  def json_response(object, status = :ok)
+    render json: object, status:
+  end
+end
diff --git a/app/controllers/posts_controller.rb b/app/controllers/posts_controller.rb
index 6e03513..8400c86 100644
--- a/app/controllers/posts_controller.rb
+++ b/app/controllers/posts_controller.rb
@@ -54,4 +54,4 @@ def set_post
   def post_params
     params.require(:post).permit(:title, :text, :comments_counter, :likes_counter)
   end
-end
\ No newline at end of file
+end
diff --git a/app/lib/json_web_token.rb b/app/lib/json_web_token.rb
index d107e7b..e920055 100644
--- a/app/lib/json_web_token.rb
+++ b/app/lib/json_web_token.rb
@@ -1,5 +1,5 @@
 class JsonWebToken
-    def self.decode(token)
-      JWT.decode(token, 'John')[0]
-    end
-  end
\ No newline at end of file
+  def self.decode(token)
+    JWT.decode(token, 'John')[0]
+  end
+end

From 0556a617cdd5759f25b6ff794807c3d477ee2f23 Mon Sep 17 00:00:00 2001
From: Edward Odhiambo <Edward@Macs-MacBook-Air.local>
Date: Sat, 6 Aug 2022 11:04:27 +0300
Subject: [PATCH 35/41] Change DB Password Config

---
 Gemfile.lock        |  9 +++++----
 config/database.yml |  6 +++---
 db/schema.rb        | 12 +-----------
 3 files changed, 9 insertions(+), 18 deletions(-)

diff --git a/Gemfile.lock b/Gemfile.lock
index 3fac33a..2a92575 100644
--- a/Gemfile.lock
+++ b/Gemfile.lock
@@ -1,5 +1,3 @@
-
-
 GIT
   remote: https://github.com/ffi/ffi.git
   revision: 07a1c0c028942f786b80f48206795a8fa6b0e8f5
@@ -150,6 +148,8 @@ GEM
       racc (~> 1.4)
     nokogiri (1.13.7-x64-mingw-ucrt)
       racc (~> 1.4)
+    nokogiri (1.13.7-x86_64-darwin)
+      racc (~> 1.4)
     orm_adapter (0.5.0)
     parallel (1.22.1)
     parser (3.1.2.0)
@@ -280,6 +280,7 @@ GEM
 PLATFORMS
   arm64-darwin-21
   x64-mingw-ucrt
+  x86_64-darwin-21
 
 DEPENDENCIES
   bootsnap
@@ -290,7 +291,7 @@ DEPENDENCIES
   ffi!
   importmap-rails
   jbuilder
-   jwt
+  jwt
   pg (~> 1.1)
   puma (~> 5.0)
   rails (~> 7.0.3)
@@ -309,4 +310,4 @@ RUBY VERSION
    ruby 3.1.2p20
 
 BUNDLED WITH
-   2.3.7
\ No newline at end of file
+   2.3.7
diff --git a/config/database.yml b/config/database.yml
index e5f8a45..67ceac9 100644
--- a/config/database.yml
+++ b/config/database.yml
@@ -18,7 +18,7 @@ default: &default
   adapter: postgresql
   encoding: unicode
   username: postgres
-  password: 2022
+  password: 12900001
   # For details on connection pooling, see Rails configuration guide
   # https://guides.rubyonrails.org/configuring.html#database-pooling
   pool: <%= ENV.fetch("RAILS_MAX_THREADS") { 5 } %>
@@ -27,7 +27,7 @@ development:
   <<: *default
   database: blog_app_development
   username: postgres
-  password: 2022
+  password: 12900001
 
   # The specified database role being used to connect to postgres.
   # To create additional roles in postgres see `$ createuser --help`.
@@ -63,7 +63,7 @@ test:
   <<: *default
   database: blog_app_test
   username: postgres
-  password: 2022
+  password: 12900001
 
 # As with config/credentials.yml, you never want to store sensitive information,
 # like your database password, in your source code. If your source code is
diff --git a/db/schema.rb b/db/schema.rb
index a61f14b..43c1a7f 100644
--- a/db/schema.rb
+++ b/db/schema.rb
@@ -51,17 +51,7 @@
     t.integer "posts_counter"
     t.datetime "created_at", null: false
     t.datetime "updated_at", null: false
-    t.string "email", default: "", null: false
-    t.string "encrypted_password", default: "", null: false
-    t.string "reset_password_token"
-    t.datetime "reset_password_sent_at"
-    t.datetime "remember_created_at"
-    t.string "confirmation_token"
-    t.datetime "confirmed_at"
-    t.datetime "confirmation_sent_at"
     t.string "role"
-    t.index ["email"], name: "index_users_on_email", unique: true
-    t.index ["reset_password_token"], name: "index_users_on_reset_password_token", unique: true
   end
 
   add_foreign_key "comments", "posts"
@@ -69,4 +59,4 @@
   add_foreign_key "likes", "posts"
   add_foreign_key "likes", "users", column: "author_id"
   add_foreign_key "posts", "users", column: "author_id"
-end
\ No newline at end of file
+end

From 721d16bfdaaca2320591ff11967bc23bf1af4293 Mon Sep 17 00:00:00 2001
From: Edward Odhiambo <Edward@Macs-MacBook-Air.local>
Date: Sat, 6 Aug 2022 11:06:53 +0300
Subject: [PATCH 36/41] Added Devise Model

---
 .../20220806080447_add_devise_to_users.rb     | 51 +++++++++++++++++++
 1 file changed, 51 insertions(+)
 create mode 100644 db/migrate/20220806080447_add_devise_to_users.rb

diff --git a/db/migrate/20220806080447_add_devise_to_users.rb b/db/migrate/20220806080447_add_devise_to_users.rb
new file mode 100644
index 0000000..98ed9dc
--- /dev/null
+++ b/db/migrate/20220806080447_add_devise_to_users.rb
@@ -0,0 +1,51 @@
+# frozen_string_literal: true
+
+class AddDeviseToUsers < ActiveRecord::Migration[7.0]
+  def self.up
+    change_table :users do |t|
+      ## Database authenticatable
+      t.string :email,              null: false, default: ""
+      t.string :encrypted_password, null: false, default: ""
+
+      ## Recoverable
+      t.string   :reset_password_token
+      t.datetime :reset_password_sent_at
+
+      ## Rememberable
+      t.datetime :remember_created_at
+
+      ## Trackable
+      # t.integer  :sign_in_count, default: 0, null: false
+      # t.datetime :current_sign_in_at
+      # t.datetime :last_sign_in_at
+      # t.string   :current_sign_in_ip
+      # t.string   :last_sign_in_ip
+
+      ## Confirmable
+      # t.string   :confirmation_token
+      # t.datetime :confirmed_at
+      # t.datetime :confirmation_sent_at
+      # t.string   :unconfirmed_email # Only if using reconfirmable
+
+      ## Lockable
+      # t.integer  :failed_attempts, default: 0, null: false # Only if lock strategy is :failed_attempts
+      # t.string   :unlock_token # Only if unlock strategy is :email or :both
+      # t.datetime :locked_at
+
+
+      # Uncomment below if timestamps were not included in your original model.
+      # t.timestamps null: false
+    end
+
+    add_index :users, :email,                unique: true
+    add_index :users, :reset_password_token, unique: true
+    # add_index :users, :confirmation_token,   unique: true
+    # add_index :users, :unlock_token,         unique: true
+  end
+
+  def self.down
+    # By default, we don't want to make any assumption about how to roll back a migration when your
+    # model already existed. Please edit below which fields you would like to remove in this migration.
+    raise ActiveRecord::IrreversibleMigration
+  end
+end

From 9a034521a1c51122ce92d3ed7c6ffb0512749a12 Mon Sep 17 00:00:00 2001
From: Edward Odhiambo <Edward@Macs-MacBook-Air.local>
Date: Sat, 6 Aug 2022 11:09:18 +0300
Subject: [PATCH 37/41] Migrate DB

---
 db/schema.rb | 9 ++++++++-
 1 file changed, 8 insertions(+), 1 deletion(-)

diff --git a/db/schema.rb b/db/schema.rb
index 43c1a7f..274a3b6 100644
--- a/db/schema.rb
+++ b/db/schema.rb
@@ -10,7 +10,7 @@
 #
 # It's strongly recommended that you check this file into your version control system.
 
-ActiveRecord::Schema[7.0].define(version: 2022_07_27_130516) do
+ActiveRecord::Schema[7.0].define(version: 2022_08_06_080447) do
   # These are extensions that must be enabled in order to support this database
   enable_extension "plpgsql"
 
@@ -52,6 +52,13 @@
     t.datetime "created_at", null: false
     t.datetime "updated_at", null: false
     t.string "role"
+    t.string "email", default: "", null: false
+    t.string "encrypted_password", default: "", null: false
+    t.string "reset_password_token"
+    t.datetime "reset_password_sent_at"
+    t.datetime "remember_created_at"
+    t.index ["email"], name: "index_users_on_email", unique: true
+    t.index ["reset_password_token"], name: "index_users_on_reset_password_token", unique: true
   end
 
   add_foreign_key "comments", "posts"

From 2cdef9c3ed29a269983308f3365d0eb1e1d293f7 Mon Sep 17 00:00:00 2001
From: Edward Odhiambo <Edward@Macs-MacBook-Air.local>
Date: Sat, 6 Aug 2022 11:12:27 +0300
Subject: [PATCH 38/41] Delete Devise Views

---
 app/views/devise/confirmations/new.html.erb       | 15 ---------------
 .../mailer/confirmation_instructions.html.erb     |  5 -----
 app/views/devise/mailer/email_changed.html.erb    |  7 -------
 app/views/devise/mailer/password_change.html.erb  |  3 ---
 .../mailer/reset_password_instructions.html.erb   |  8 --------
 .../devise/mailer/unlock_instructions.html.erb    |  7 -------
 6 files changed, 45 deletions(-)
 delete mode 100644 app/views/devise/confirmations/new.html.erb
 delete mode 100644 app/views/devise/mailer/confirmation_instructions.html.erb
 delete mode 100644 app/views/devise/mailer/email_changed.html.erb
 delete mode 100644 app/views/devise/mailer/password_change.html.erb
 delete mode 100644 app/views/devise/mailer/reset_password_instructions.html.erb
 delete mode 100644 app/views/devise/mailer/unlock_instructions.html.erb

diff --git a/app/views/devise/confirmations/new.html.erb b/app/views/devise/confirmations/new.html.erb
deleted file mode 100644
index 91bbc93..0000000
--- a/app/views/devise/confirmations/new.html.erb
+++ /dev/null
@@ -1,15 +0,0 @@
-<h2>Resend confirmation instructions</h2>
-
-<%= form_for(resource, as: resource_name, url: confirmation_path(resource_name), html: { method: :post }) do |f| %>
-  <%= render "devise/shared/error_messages", resource: resource %>
-
-  <div class="field">
-    <%= f.label :email %><br />
-    <%= f.email_field :email, autofocus: true, autocomplete: "email", value: (resource.pending_reconfirmation? ? resource.unconfirmed_email : resource.email) %>
-  </div>
-
-  <div class="actions">
-    <%= f.submit "Resend confirmation instructions" %>
-  </div>
-<% end %>
-<%= render "devise/shared/links" %>
\ No newline at end of file
diff --git a/app/views/devise/mailer/confirmation_instructions.html.erb b/app/views/devise/mailer/confirmation_instructions.html.erb
deleted file mode 100644
index c2b058f..0000000
--- a/app/views/devise/mailer/confirmation_instructions.html.erb
+++ /dev/null
@@ -1,5 +0,0 @@
-<p>Welcome <%= @email %>!</p>
-
-<p>You can confirm your account email through the link below:</p>
-
-<p><%= link_to 'Confirm my account', confirmation_url(@resource, confirmation_token: @token) %></p>
\ No newline at end of file
diff --git a/app/views/devise/mailer/email_changed.html.erb b/app/views/devise/mailer/email_changed.html.erb
deleted file mode 100644
index 0833fbd..0000000
--- a/app/views/devise/mailer/email_changed.html.erb
+++ /dev/null
@@ -1,7 +0,0 @@
-<p>Hello <%= @email %>!</p>
-
-<% if @resource.try(:unconfirmed_email?) %>
-  <p>We're contacting you to notify you that your email is being changed to <%= @resource.unconfirmed_email %>.</p>
-<% else %>
-  <p>We're contacting you to notify you that your email has been changed to <%= @resource.email %>.</p>
-<% end %>
\ No newline at end of file
diff --git a/app/views/devise/mailer/password_change.html.erb b/app/views/devise/mailer/password_change.html.erb
deleted file mode 100644
index 1070cff..0000000
--- a/app/views/devise/mailer/password_change.html.erb
+++ /dev/null
@@ -1,3 +0,0 @@
-<p>Hello <%= @resource.email %>!</p>
-
-<p>We're contacting you to notify you that your password has been changed.</p>
\ No newline at end of file
diff --git a/app/views/devise/mailer/reset_password_instructions.html.erb b/app/views/devise/mailer/reset_password_instructions.html.erb
deleted file mode 100644
index 7bc3a70..0000000
--- a/app/views/devise/mailer/reset_password_instructions.html.erb
+++ /dev/null
@@ -1,8 +0,0 @@
-<p>Hello <%= @resource.email %>!</p>
-
-<p>Someone has requested a link to change your password. You can do this through the link below.</p>
-
-<p><%= link_to 'Change my password', edit_password_url(@resource, reset_password_token: @token) %></p>
-
-<p>If you didn't request this, please ignore this email.</p>
-<p>Your password won't change until you access the link above and create a new one.</p>
\ No newline at end of file
diff --git a/app/views/devise/mailer/unlock_instructions.html.erb b/app/views/devise/mailer/unlock_instructions.html.erb
deleted file mode 100644
index 5aefc91..0000000
--- a/app/views/devise/mailer/unlock_instructions.html.erb
+++ /dev/null
@@ -1,7 +0,0 @@
-<p>Hello <%= @resource.email %>!</p>
-
-<p>Your account has been locked due to an excessive number of unsuccessful sign in attempts.</p>
-
-<p>Click the link below to unlock your account:</p>
-
-<p><%= link_to 'Unlock my account', unlock_url(@resource, unlock_token: @token) %></p>
\ No newline at end of file

From 5f0fce3d01a7cee4652201dc7ae866bdd47ad842 Mon Sep 17 00:00:00 2001
From: Edward Odhiambo <Edward@Macs-MacBook-Air.local>
Date: Sat, 6 Aug 2022 11:13:36 +0300
Subject: [PATCH 39/41] Added Devise Views

---
 app/views/devise/confirmations/new.html.erb   | 16 +++++++
 .../mailer/confirmation_instructions.html.erb |  5 +++
 .../devise/mailer/email_changed.html.erb      |  7 +++
 .../devise/mailer/password_change.html.erb    |  3 ++
 .../reset_password_instructions.html.erb      |  8 ++++
 .../mailer/unlock_instructions.html.erb       |  7 +++
 app/views/devise/passwords/edit.html.erb      | 25 +++++++++++
 app/views/devise/passwords/new.html.erb       | 16 +++++++
 app/views/devise/registrations/edit.html.erb  | 43 +++++++++++++++++++
 app/views/devise/registrations/new.html.erb   | 29 +++++++++++++
 app/views/devise/sessions/new.html.erb        | 26 +++++++++++
 .../devise/shared/_error_messages.html.erb    | 15 +++++++
 app/views/devise/shared/_links.html.erb       | 25 +++++++++++
 app/views/devise/unlocks/new.html.erb         | 16 +++++++
 14 files changed, 241 insertions(+)
 create mode 100644 app/views/devise/confirmations/new.html.erb
 create mode 100644 app/views/devise/mailer/confirmation_instructions.html.erb
 create mode 100644 app/views/devise/mailer/email_changed.html.erb
 create mode 100644 app/views/devise/mailer/password_change.html.erb
 create mode 100644 app/views/devise/mailer/reset_password_instructions.html.erb
 create mode 100644 app/views/devise/mailer/unlock_instructions.html.erb
 create mode 100644 app/views/devise/passwords/edit.html.erb
 create mode 100644 app/views/devise/passwords/new.html.erb
 create mode 100644 app/views/devise/registrations/edit.html.erb
 create mode 100644 app/views/devise/registrations/new.html.erb
 create mode 100644 app/views/devise/sessions/new.html.erb
 create mode 100644 app/views/devise/shared/_error_messages.html.erb
 create mode 100644 app/views/devise/shared/_links.html.erb
 create mode 100644 app/views/devise/unlocks/new.html.erb

diff --git a/app/views/devise/confirmations/new.html.erb b/app/views/devise/confirmations/new.html.erb
new file mode 100644
index 0000000..b12dd0c
--- /dev/null
+++ b/app/views/devise/confirmations/new.html.erb
@@ -0,0 +1,16 @@
+<h2>Resend confirmation instructions</h2>
+
+<%= form_for(resource, as: resource_name, url: confirmation_path(resource_name), html: { method: :post }) do |f| %>
+  <%= render "devise/shared/error_messages", resource: resource %>
+
+  <div class="field">
+    <%= f.label :email %><br />
+    <%= f.email_field :email, autofocus: true, autocomplete: "email", value: (resource.pending_reconfirmation? ? resource.unconfirmed_email : resource.email) %>
+  </div>
+
+  <div class="actions">
+    <%= f.submit "Resend confirmation instructions" %>
+  </div>
+<% end %>
+
+<%= render "devise/shared/links" %>
diff --git a/app/views/devise/mailer/confirmation_instructions.html.erb b/app/views/devise/mailer/confirmation_instructions.html.erb
new file mode 100644
index 0000000..dc55f64
--- /dev/null
+++ b/app/views/devise/mailer/confirmation_instructions.html.erb
@@ -0,0 +1,5 @@
+<p>Welcome <%= @email %>!</p>
+
+<p>You can confirm your account email through the link below:</p>
+
+<p><%= link_to 'Confirm my account', confirmation_url(@resource, confirmation_token: @token) %></p>
diff --git a/app/views/devise/mailer/email_changed.html.erb b/app/views/devise/mailer/email_changed.html.erb
new file mode 100644
index 0000000..32f4ba8
--- /dev/null
+++ b/app/views/devise/mailer/email_changed.html.erb
@@ -0,0 +1,7 @@
+<p>Hello <%= @email %>!</p>
+
+<% if @resource.try(:unconfirmed_email?) %>
+  <p>We're contacting you to notify you that your email is being changed to <%= @resource.unconfirmed_email %>.</p>
+<% else %>
+  <p>We're contacting you to notify you that your email has been changed to <%= @resource.email %>.</p>
+<% end %>
diff --git a/app/views/devise/mailer/password_change.html.erb b/app/views/devise/mailer/password_change.html.erb
new file mode 100644
index 0000000..b41daf4
--- /dev/null
+++ b/app/views/devise/mailer/password_change.html.erb
@@ -0,0 +1,3 @@
+<p>Hello <%= @resource.email %>!</p>
+
+<p>We're contacting you to notify you that your password has been changed.</p>
diff --git a/app/views/devise/mailer/reset_password_instructions.html.erb b/app/views/devise/mailer/reset_password_instructions.html.erb
new file mode 100644
index 0000000..f667dc1
--- /dev/null
+++ b/app/views/devise/mailer/reset_password_instructions.html.erb
@@ -0,0 +1,8 @@
+<p>Hello <%= @resource.email %>!</p>
+
+<p>Someone has requested a link to change your password. You can do this through the link below.</p>
+
+<p><%= link_to 'Change my password', edit_password_url(@resource, reset_password_token: @token) %></p>
+
+<p>If you didn't request this, please ignore this email.</p>
+<p>Your password won't change until you access the link above and create a new one.</p>
diff --git a/app/views/devise/mailer/unlock_instructions.html.erb b/app/views/devise/mailer/unlock_instructions.html.erb
new file mode 100644
index 0000000..41e148b
--- /dev/null
+++ b/app/views/devise/mailer/unlock_instructions.html.erb
@@ -0,0 +1,7 @@
+<p>Hello <%= @resource.email %>!</p>
+
+<p>Your account has been locked due to an excessive number of unsuccessful sign in attempts.</p>
+
+<p>Click the link below to unlock your account:</p>
+
+<p><%= link_to 'Unlock my account', unlock_url(@resource, unlock_token: @token) %></p>
diff --git a/app/views/devise/passwords/edit.html.erb b/app/views/devise/passwords/edit.html.erb
new file mode 100644
index 0000000..5fbb9ff
--- /dev/null
+++ b/app/views/devise/passwords/edit.html.erb
@@ -0,0 +1,25 @@
+<h2>Change your password</h2>
+
+<%= form_for(resource, as: resource_name, url: password_path(resource_name), html: { method: :put }) do |f| %>
+  <%= render "devise/shared/error_messages", resource: resource %>
+  <%= f.hidden_field :reset_password_token %>
+
+  <div class="field">
+    <%= f.label :password, "New password" %><br />
+    <% if @minimum_password_length %>
+      <em>(<%= @minimum_password_length %> characters minimum)</em><br />
+    <% end %>
+    <%= f.password_field :password, autofocus: true, autocomplete: "new-password" %>
+  </div>
+
+  <div class="field">
+    <%= f.label :password_confirmation, "Confirm new password" %><br />
+    <%= f.password_field :password_confirmation, autocomplete: "new-password" %>
+  </div>
+
+  <div class="actions">
+    <%= f.submit "Change my password" %>
+  </div>
+<% end %>
+
+<%= render "devise/shared/links" %>
diff --git a/app/views/devise/passwords/new.html.erb b/app/views/devise/passwords/new.html.erb
new file mode 100644
index 0000000..9b486b8
--- /dev/null
+++ b/app/views/devise/passwords/new.html.erb
@@ -0,0 +1,16 @@
+<h2>Forgot your password?</h2>
+
+<%= form_for(resource, as: resource_name, url: password_path(resource_name), html: { method: :post }) do |f| %>
+  <%= render "devise/shared/error_messages", resource: resource %>
+
+  <div class="field">
+    <%= f.label :email %><br />
+    <%= f.email_field :email, autofocus: true, autocomplete: "email" %>
+  </div>
+
+  <div class="actions">
+    <%= f.submit "Send me reset password instructions" %>
+  </div>
+<% end %>
+
+<%= render "devise/shared/links" %>
diff --git a/app/views/devise/registrations/edit.html.erb b/app/views/devise/registrations/edit.html.erb
new file mode 100644
index 0000000..38d95b8
--- /dev/null
+++ b/app/views/devise/registrations/edit.html.erb
@@ -0,0 +1,43 @@
+<h2>Edit <%= resource_name.to_s.humanize %></h2>
+
+<%= form_for(resource, as: resource_name, url: registration_path(resource_name), html: { method: :put }) do |f| %>
+  <%= render "devise/shared/error_messages", resource: resource %>
+
+  <div class="field">
+    <%= f.label :email %><br />
+    <%= f.email_field :email, autofocus: true, autocomplete: "email" %>
+  </div>
+
+  <% if devise_mapping.confirmable? && resource.pending_reconfirmation? %>
+    <div>Currently waiting confirmation for: <%= resource.unconfirmed_email %></div>
+  <% end %>
+
+  <div class="field">
+    <%= f.label :password %> <i>(leave blank if you don't want to change it)</i><br />
+    <%= f.password_field :password, autocomplete: "new-password" %>
+    <% if @minimum_password_length %>
+      <br />
+      <em><%= @minimum_password_length %> characters minimum</em>
+    <% end %>
+  </div>
+
+  <div class="field">
+    <%= f.label :password_confirmation %><br />
+    <%= f.password_field :password_confirmation, autocomplete: "new-password" %>
+  </div>
+
+  <div class="field">
+    <%= f.label :current_password %> <i>(we need your current password to confirm your changes)</i><br />
+    <%= f.password_field :current_password, autocomplete: "current-password" %>
+  </div>
+
+  <div class="actions">
+    <%= f.submit "Update" %>
+  </div>
+<% end %>
+
+<h3>Cancel my account</h3>
+
+<p>Unhappy? <%= button_to "Cancel my account", registration_path(resource_name), data: { confirm: "Are you sure?" }, method: :delete %></p>
+
+<%= link_to "Back", :back %>
diff --git a/app/views/devise/registrations/new.html.erb b/app/views/devise/registrations/new.html.erb
new file mode 100644
index 0000000..d655b66
--- /dev/null
+++ b/app/views/devise/registrations/new.html.erb
@@ -0,0 +1,29 @@
+<h2>Sign up</h2>
+
+<%= form_for(resource, as: resource_name, url: registration_path(resource_name)) do |f| %>
+  <%= render "devise/shared/error_messages", resource: resource %>
+
+  <div class="field">
+    <%= f.label :email %><br />
+    <%= f.email_field :email, autofocus: true, autocomplete: "email" %>
+  </div>
+
+  <div class="field">
+    <%= f.label :password %>
+    <% if @minimum_password_length %>
+    <em>(<%= @minimum_password_length %> characters minimum)</em>
+    <% end %><br />
+    <%= f.password_field :password, autocomplete: "new-password" %>
+  </div>
+
+  <div class="field">
+    <%= f.label :password_confirmation %><br />
+    <%= f.password_field :password_confirmation, autocomplete: "new-password" %>
+  </div>
+
+  <div class="actions">
+    <%= f.submit "Sign up" %>
+  </div>
+<% end %>
+
+<%= render "devise/shared/links" %>
diff --git a/app/views/devise/sessions/new.html.erb b/app/views/devise/sessions/new.html.erb
new file mode 100644
index 0000000..5ede964
--- /dev/null
+++ b/app/views/devise/sessions/new.html.erb
@@ -0,0 +1,26 @@
+<h2>Log in</h2>
+
+<%= form_for(resource, as: resource_name, url: session_path(resource_name)) do |f| %>
+  <div class="field">
+    <%= f.label :email %><br />
+    <%= f.email_field :email, autofocus: true, autocomplete: "email" %>
+  </div>
+
+  <div class="field">
+    <%= f.label :password %><br />
+    <%= f.password_field :password, autocomplete: "current-password" %>
+  </div>
+
+  <% if devise_mapping.rememberable? %>
+    <div class="field">
+      <%= f.check_box :remember_me %>
+      <%= f.label :remember_me %>
+    </div>
+  <% end %>
+
+  <div class="actions">
+    <%= f.submit "Log in" %>
+  </div>
+<% end %>
+
+<%= render "devise/shared/links" %>
diff --git a/app/views/devise/shared/_error_messages.html.erb b/app/views/devise/shared/_error_messages.html.erb
new file mode 100644
index 0000000..ba7ab88
--- /dev/null
+++ b/app/views/devise/shared/_error_messages.html.erb
@@ -0,0 +1,15 @@
+<% if resource.errors.any? %>
+  <div id="error_explanation">
+    <h2>
+      <%= I18n.t("errors.messages.not_saved",
+                 count: resource.errors.count,
+                 resource: resource.class.model_name.human.downcase)
+       %>
+    </h2>
+    <ul>
+      <% resource.errors.full_messages.each do |message| %>
+        <li><%= message %></li>
+      <% end %>
+    </ul>
+  </div>
+<% end %>
diff --git a/app/views/devise/shared/_links.html.erb b/app/views/devise/shared/_links.html.erb
new file mode 100644
index 0000000..96a9412
--- /dev/null
+++ b/app/views/devise/shared/_links.html.erb
@@ -0,0 +1,25 @@
+<%- if controller_name != 'sessions' %>
+  <%= link_to "Log in", new_session_path(resource_name) %><br />
+<% end %>
+
+<%- if devise_mapping.registerable? && controller_name != 'registrations' %>
+  <%= link_to "Sign up", new_registration_path(resource_name) %><br />
+<% end %>
+
+<%- if devise_mapping.recoverable? && controller_name != 'passwords' && controller_name != 'registrations' %>
+  <%= link_to "Forgot your password?", new_password_path(resource_name) %><br />
+<% end %>
+
+<%- if devise_mapping.confirmable? && controller_name != 'confirmations' %>
+  <%= link_to "Didn't receive confirmation instructions?", new_confirmation_path(resource_name) %><br />
+<% end %>
+
+<%- if devise_mapping.lockable? && resource_class.unlock_strategy_enabled?(:email) && controller_name != 'unlocks' %>
+  <%= link_to "Didn't receive unlock instructions?", new_unlock_path(resource_name) %><br />
+<% end %>
+
+<%- if devise_mapping.omniauthable? %>
+  <%- resource_class.omniauth_providers.each do |provider| %>
+    <%= link_to "Sign in with #{OmniAuth::Utils.camelize(provider)}", omniauth_authorize_path(resource_name, provider), method: :post %><br />
+  <% end %>
+<% end %>
diff --git a/app/views/devise/unlocks/new.html.erb b/app/views/devise/unlocks/new.html.erb
new file mode 100644
index 0000000..ffc34de
--- /dev/null
+++ b/app/views/devise/unlocks/new.html.erb
@@ -0,0 +1,16 @@
+<h2>Resend unlock instructions</h2>
+
+<%= form_for(resource, as: resource_name, url: unlock_path(resource_name), html: { method: :post }) do |f| %>
+  <%= render "devise/shared/error_messages", resource: resource %>
+
+  <div class="field">
+    <%= f.label :email %><br />
+    <%= f.email_field :email, autofocus: true, autocomplete: "email" %>
+  </div>
+
+  <div class="actions">
+    <%= f.submit "Resend unlock instructions" %>
+  </div>
+<% end %>
+
+<%= render "devise/shared/links" %>

From 231363baa871658b7cbe5c77d43cf73ab7126ee4 Mon Sep 17 00:00:00 2001
From: Edward Odhiambo <Edward@Macs-MacBook-Air.local>
Date: Sat, 6 Aug 2022 11:32:16 +0300
Subject: [PATCH 40/41] Edit Devise Registration View

---
 app/views/devise/registrations/new.html.erb | 16 ++++++++++++++--
 1 file changed, 14 insertions(+), 2 deletions(-)

diff --git a/app/views/devise/registrations/new.html.erb b/app/views/devise/registrations/new.html.erb
index d655b66..8f03ff2 100644
--- a/app/views/devise/registrations/new.html.erb
+++ b/app/views/devise/registrations/new.html.erb
@@ -2,7 +2,19 @@
 
 <%= form_for(resource, as: resource_name, url: registration_path(resource_name)) do |f| %>
   <%= render "devise/shared/error_messages", resource: resource %>
-
+  
+  <div class="field">
+    <%= f.label :name %><br />
+    <%= f.text_field :name, autofocus: true, autocomplete: "name" %>
+  </div>
+  <div class="field">
+    <%= f.label :bio %><br />
+    <%= f.text_field :bio, autofocus: true, autocomplete: "bio" %>
+  </div>
+  <div class="field">
+    <%= f.label :photo %><br />
+    <%= f.text_field :photo, autofocus: true, autocomplete: "photo" %>
+  </div>
   <div class="field">
     <%= f.label :email %><br />
     <%= f.email_field :email, autofocus: true, autocomplete: "email" %>
@@ -26,4 +38,4 @@
   </div>
 <% end %>
 
-<%= render "devise/shared/links" %>
+<%= render "devise/shared/links" %>
\ No newline at end of file

From cf02c5e756bf711aceae3f16677088c827c9d902 Mon Sep 17 00:00:00 2001
From: Edward Odhiambo <Edward@Macs-MacBook-Air.local>
Date: Sat, 6 Aug 2022 11:34:19 +0300
Subject: [PATCH 41/41] Edit README.md

---
 README.md | 6 ++++++
 1 file changed, 6 insertions(+)

diff --git a/README.md b/README.md
index ab6209e..0f0bcb1 100644
--- a/README.md
+++ b/README.md
@@ -173,6 +173,12 @@ This project is build with:
 - Twitter: [@Evans_22J](https://twitter.com/Evans_22J)
 - LinkedIn: [@Evans Sitibekiso](https://www.linkedin.com/in/evans-sitibekiso/)
 
+👤 **Edward Odhiambo**
+
+- GitHub: [@whit3d](https://github.com/white3d)
+- Twitter: [@odhiambo_ed](https://twitter.com/odhiambo_ed)
+- LinkedIn: [Edward Odhiambo](https://www.linkedin.com/in/edward-odhiambo-6a462a21b/)
+
 ## 🤝 Contributor