atlas_rb 0.0.88 → 0.0.89

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 32ee794eeaed7d20594470df3855ba0d970c9c80e4f4bf8ce2f930e287a56f26
-  data.tar.gz: b1dd7c4007aa3353d5bcc21a2f4022b33f4986e28ed144a92c541cddd194b801
+  metadata.gz: a987c6f2b9d67ba84bfb29752682c630a47d69e943af83d44f5957136b2ae680
+  data.tar.gz: 5b2eea6ac511508959d56be1d7dce4306a2187eba6eeb5e1e4556ed7efe3fc9c
 SHA512:
-  metadata.gz: 6a61eb2b1217fa42f19bb37673e8244cd6544976446cf8f85657b25d928cebbc0c763b6e660984f71037c669f3638dd6a4657788cc628ed68e18cb52a0d99ccc
-  data.tar.gz: b721b72a80318001ce3e2e770dbc592665c1bad510c9db157bef04dcfc5b706978306ecc9dacec902817116c9b4127694769eb6c7b4d22763ee476bc76084d5a
+  metadata.gz: b0279a6e5f20724c89a4e5bb31232e33c9860f4a28ee416a34539e279715e43c8229e436f41a696cc56d762049e4b69abde7a21ba72adaf687bebc5330044e8c
+  data.tar.gz: a480b47e2927b337e222d4890d5903b366acebfc27283d366d3967fb98c53a96a84ff039c590ba1a2d67751982c8dd379123a2ad86391e84cf4f937c30225956

data/.version

@@ -1 +1 @@
-0.0.88
+0.0.89

data/Gemfile.lock

@@ -1,7 +1,7 @@
 PATH
   remote: .
   specs:
-    atlas_rb (0.0.88)
+    atlas_rb (0.0.89)
       faraday (~> 2.7)
       faraday-follow_redirects (~> 0.3.0)
       faraday-multipart (~> 1)
@@ -23,7 +23,7 @@ GEM
       net-http (~> 0.5)
     hashie (5.1.0)
       logger
-    json (2.19.4)
+    json (2.19.5)
     logger (1.7.0)
     multipart-post (2.4.1)
     net-http (0.9.1)

data/lib/atlas_rb/faraday_helper.rb

@@ -29,14 +29,16 @@ module AtlasRb
     # @example Fetching a community
     #   AtlasRb::Community.connection({}).get('/communities/abc123')
     def connection(params, nuid=nil)
+      headers = {
+        "Content-Type" => "application/json",
+        "Authorization" => "Bearer #{ENV.fetch("ATLAS_TOKEN", nil)}"
+      }
+      headers["User"] = "NUID #{nuid}" if nuid
+
       Faraday.new(
         url: ENV.fetch("ATLAS_URL", nil),
         params: params,
-        headers: {
-          "Content-Type" => "application/json",
-          "Authorization" => "Bearer #{ENV.fetch("ATLAS_TOKEN", nil)}",
-          "User" => "NUID #{nuid}"
-        }
+        headers: headers
       ) do |f|
         f.response :follow_redirects
         f.adapter Faraday.default_adapter
@@ -62,12 +64,14 @@ module AtlasRb
     #   }
     #   AtlasRb::Blob.multipart({}).post('/files/', payload)
     def multipart(nuid=nil)
+      headers = {
+        "Authorization" => "Bearer #{ENV.fetch("ATLAS_TOKEN", nil)}"
+      }
+      headers["User"] = "NUID #{nuid}" if nuid
+
       Faraday.new(
         url: ENV.fetch("ATLAS_URL", nil),
-        headers: {
-          "Authorization" => "Bearer #{ENV.fetch("ATLAS_TOKEN", nil)}",
-          "User" => "NUID #{nuid}"
-        }
+        headers: headers
       ) do |f|
         f.request :multipart
         f.request :url_encoded

data/lib/atlas_rb/user.rb

@@ -0,0 +1,44 @@
+# frozen_string_literal: true
+
+module AtlasRb
+  # System-user binding for Atlas's find-or-create + group-replace endpoint.
+  #
+  # Used by Cerberus on its SSO callback: given an NUID and the IdP-asserted
+  # group set, find-or-create the matching User row and replace its groups
+  # with the supplied array (full replace, not merge — the IdP's assertion
+  # is authoritative).
+  #
+  # The endpoint is system-only; {.find_or_create} sends bearer-token auth
+  # and no `User:` header. Atlas returns 403 if any `User:` header is
+  # present.
+  class User
+    extend AtlasRb::FaradayHelper
+
+    # Find-or-create the User keyed on NUID and replace its groups.
+    #
+    # Idempotent on `nuid`. Authoritative on `groups`.
+    #
+    # @param nuid [String] the Northeastern University ID.
+    # @param groups [Array<String>] full group set; replaces, not merges.
+    # @param name [String, nil] forwarded if the caller (e.g. Cerberus's
+    #   SSO callback) has it; Atlas treats this field as optional.
+    # @param email [String, nil] forwarded if available; optional in Atlas.
+    # @return [AtlasRb::Mash] the resulting User record (`id`, `nuid`,
+    #   `name`, `email`, `role`, `groups`).
+    #
+    # @example From Cerberus's SSO callback
+    #   AtlasRb::User.find_or_create(nuid: "001234567",
+    #                                groups: ["northeastern:staff",
+    #                                         "drs:editors"],
+    #                                name: "Jane Doe",
+    #                                email: "j.doe@example.edu")
+    def self.find_or_create(nuid:, groups:, name: nil, email: nil)
+      body = { groups: groups }
+      body[:name] = name if name
+      body[:email] = email if email
+
+      response = connection({}).put("/users/by_nuid/#{nuid}", body.to_json)
+      AtlasRb::Mash.new(JSON.parse(response.body))["user"]
+    end
+  end
+end

data/lib/atlas_rb.rb

@@ -13,6 +13,7 @@ require_relative "atlas_rb/collection"
 require_relative "atlas_rb/work"
 require_relative "atlas_rb/file_set"
 require_relative "atlas_rb/blob"
+require_relative "atlas_rb/user"
 
 # Ruby client for the Atlas API — Northeastern University's institutional
 # digital repository.

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: atlas_rb
 version: !ruby/object:Gem::Version
-  version: 0.0.88
+  version: 0.0.89
 platform: ruby
 authors:
 - David Cliff
 autorequire:
 bindir: exe
 cert_chain: []
-date: 2026-04-27 00:00:00.000000000 Z
+date: 2026-05-07 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: faraday
@@ -122,6 +122,7 @@ files:
 - lib/atlas_rb/file_set.rb
 - lib/atlas_rb/mash.rb
 - lib/atlas_rb/resource.rb
+- lib/atlas_rb/user.rb
 - lib/atlas_rb/version.rb
 - lib/atlas_rb/work.rb
 - sig/atlas_rb.rbs