applidget-oauth2 0.0.1 → 0.0.2

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA1:
-  metadata.gz: ea1ed910a2a806726498a3780f302aba37e8e2d7
-  data.tar.gz: f4d70c91335ce5274d0731bd8095358a0de83d9b
+  metadata.gz: 05aa7b5dfc529e46a0c60b09f49fed698652907e
+  data.tar.gz: 00d9855f29cb3f2064b7d3ddae2a42764e1662e3
 SHA512:
-  metadata.gz: f56a85d0f90db7f5a9970c6de73e5ab008f3edba910273e112da7da91e8330dba064371f8697bf85d60f0d7907c02b5f3c6030fbc590aca682e2470ae483da5a
-  data.tar.gz: 2107d90459bd9b3841189dd53d1d5b1e0875b439b28a25fd79957779e9a01632d055cc4b1db9be3eefa739fef32525e7f588cb633e2f2038972786dd98acb483
+  metadata.gz: 7391cda0ba0b4e5066694f3a6f6d3bdb975e098f8ab89a0573eabe24deb14442f29119e7b852567f5bef200eabf0e48d0f0a35144b539545c71141ee1b63f483
+  data.tar.gz: 51517ff15213b0f2df1ee87c1524f25fe566bd5b593c3e5e6d2521bf7be676a7e5382793edd7686e3885bf2a4d80d36ba407dd81d4471e1db2d3a731b2df6dd8

data/Gemfile

@@ -1,4 +1,5 @@
 source 'https://rubygems.org'
 
+gem 'oauth2'
 # Specify your gem's dependencies in applidget-oauth2.gemspec
 gemspec

data/lib/applidget/oauth2/version.rb

@@ -1,5 +1,5 @@
 module Applidget
   module Oauth2
-    VERSION = "0.0.1"
+    VERSION = "0.0.2"
   end
 end

data/lib/applidget/oauth2.rb

@@ -2,8 +2,68 @@ require "applidget/oauth2/version"
 
 module Applidget
   module Oauth2
-    def self.hi
-      puts 'hi!'
+    require 'oauth2'
+    # Any Oauth2 protocol with Applidget Accounts should be implemented by inheriting from this controller.
+    # You should provide a method '@options' that defines a hash with the right parameters, e.g. :
+    #
+    #   def @options
+    #     {
+    #       model: "guest",
+    #       api: "/api/v1/me.json",
+    #       request_params: { hd: params[:hd], auth: params[:auth], scope: "public" },
+    #       callback_url: generic_url_from callback_guests_auth_applidget_accounts_path
+    #     }
+    #   end
+    #
+    # You should also override callback method : the parsed response from the api will be given by calling
+    # the super method, e.g. :
+    #
+    #   def callback
+    #     guest_hash = super
+    #     # your code ...
+    #   end
+
+    before_filter :check_csrf, :only => [:callback]
+
+    def request_uri(options)
+      @options = options
+      client.auth_code.authorize_url({:redirect_uri => @options[:callback_url]}.merge(request_params))
+    end
+
+    def access_token(options, params)
+      @options = options
+      @params = params
+      if check_csrf
+        @access_token = build_access_token
+        @access_token.get(@options[:api]).parsed
+      end
+    end
+
+    private
+
+    def client
+      @client ||= ::OAuth2::Client.new(@options[:client_id], @options[:client_secret], { :site => @options[:provider_host] })
+    end
+
+    def build_access_token
+      client.auth_code.get_token(@params['code'], {:redirect_uri => @options[:callback_url]}, {})
+    end
+
+    def set_csrf_token
+      csrf_token = SecureRandom.urlsafe_base64(15).tr('lIO0', 'sxyz')
+      state = csrf_token #TODO: embed other information here if necessary
+      cookies["oauth2.csrf_token"] = state
+      state
+    end
+
+    def check_csrf
+      state = @params[:state]
+      state != cookies.delete("oauth2.csrf_token")
+    end
+
+    def request_params
+      state = set_csrf_token
+      @options[:request_params].merge({state: state})
     end
   end
 end

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: applidget-oauth2
 version: !ruby/object:Gem::Version
-  version: 0.0.1
+  version: 0.0.2
 platform: ruby
 authors:
 - aymericbouzy
@@ -52,6 +52,7 @@ files:
 - LICENSE.txt
 - README.md
 - Rakefile
+- applidget-oauth2-0.0.1.gem
 - applidget-oauth2.gemspec
 - lib/applidget/oauth2.rb
 - lib/applidget/oauth2/version.rb