authify-api 0.1.0 → 0.2.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA1:
-  metadata.gz: a0f77e5a23fef6d16a82c095c2f76b9840dcf33f
-  data.tar.gz: c77e75b1605e0ea51c1bd589b47e9ca859735ba1
+  metadata.gz: 1ad42a62cd052be494876ad2448c87fadc49d779
+  data.tar.gz: 63e6a369a12ea65833c62330d6f1df2a25ed1473
 SHA512:
-  metadata.gz: fb9a4ed3c1c41e5e3ef207521fcc33d1fe50177eafdfb4037702ae0bf81a941b48d81b266230339a71cdf2e896616325d009f08f656f1a869fa4220588edee63
-  data.tar.gz: 0afea4d9d48418bae6f32d597f15c440259c49e84da4d4403dfdb41ca30e7d3b6d0102f7b5e01f98aba9f40f9cd332b8f1f3b9cd065c970a4f86b1274207e110
+  metadata.gz: c17f797d481991ff2237c8c9d16b965670094394609a9b0e20fd1745ca6b84de4610a843ee8010bc999f4815975d0cc12aeb678966232f8fc0137b50c2835d80
+  data.tar.gz: 0eb621c92eaa49877952c8b3cf03741056af7084170c05af708ba0d921dbc4f62d741bdddefa5cad85975a4457ba593a494302324abb62478cd20ff470faf31e

data/.rubocop.yml

@@ -16,12 +16,14 @@ Metrics/CyclomaticComplexity:
 Metrics/PerceivedComplexity:
   Max: 9
 
-BlockLength:
+Metrics/BlockLength:
   Max: 30
   Exclude:
     - '*.gemspec'
     - 'lib/authify/api/controllers/*.rb'
     - Rakefile
+    - 'spec/**/*_spec.rb'
+    - 'spec/spec_helper.rb'
 
 AllCops:
   Exclude:

data/.travis.yml

@@ -1,7 +1,9 @@
 sudo: false
 language: ruby
+services:
+  - redis-server
 rvm:
-- 2.3.1
+  - 2.3.3
 before_install: gem install bundler -v 1.12.5
 deploy:
   provider: rubygems

data/Dockerfile

@@ -0,0 +1,46 @@
+FROM ruby:2.3.3-alpine
+
+ENV AUTHIFY_PORT=9292
+ENV AUTHIFY_ENVIRONMENT=development
+ENV AUTHIFY_DB_URL=sqlite3:///app/authify-api.db
+ENV AUTHIFY_REDIS_HOST=redis
+ENV AUTHIFY_PUBKEY_PATH=/ssl/public.pem
+ENV AUTHIFY_PRIVKEY_PATH=/ssl/private.pem
+ENV AUTHIFY_JWT_ISSUER="My Awesome Company Inc."
+ENV AUTHIFY_JWT_ALGORITHM="ES512"
+ENV AUTHIFY_JWT_EXPIRATION="15"
+
+RUN apk --no-cache upgrade \
+    && apk --no-cache add \
+       git \
+       sqlite-libs mariadb-client mariadb-client-libs
+
+RUN apk --no-cache add --virtual build-dependencies \
+        build-base \
+        ruby-dev \
+        sqlite-dev \
+        mariadb-dev
+
+COPY . /app
+RUN cd /app \
+    && bundle install --jobs=4 \
+    && apk del build-dependencies
+
+RUN mkdir /ssl
+
+RUN chown -R root:root /app \
+    && chown nobody:nogroup /app/db \
+    && chown nobody:nogroup /app/db/schema.rb \
+    && rm -f /app/.travis.yml \
+    && chown -R nobody:nogroup /ssl
+
+USER nobody
+WORKDIR /app
+
+VOLUME /ssl
+
+CMD bundle exec rake db:migrate \
+    && bundle exec rackup \
+       -o 0.0.0.0 \
+       -p $AUTHIFY_PORT \
+       -E $AUTHIFY_ENVIRONMENT

data/Rakefile

@@ -12,13 +12,41 @@ end
 RSpec::Core::RakeTask.new(:spec)
 RuboCop::RakeTask.new(:rubocop)
 
-task default: [:spec, :rubocop]
+task default: %i(spec rubocop)
 
 desc 'Start the demo using `rackup`'
 task :start do
   exec 'rackup config.ru'
 end
 
+namespace :jwt do
+  desc 'Generate a Signer Certificate'
+  task :gencert do
+    jwtalgo  = ENV['AUTHIFY_JWT_ALGORITHM']
+    privpath = ENV['AUTHIFY_PRIVKEY_PATH']
+    pubpath  = ENV['AUTHIFY_PUBKEY_PATH']
+    raise 'Missing ENV settings' unless jwtalgo && privpath && pubpath
+
+    require 'authify/api'
+    algo = case jwtalgo
+           when 'ES256'
+             'prime256v1'
+           when 'ES384'
+             'secp384r1'
+           when 'ES512'
+             'secp521r1'
+           end
+    secret_key = OpenSSL::PKey::EC.new(algo)
+    secret_key.generate_key
+    # write out the private key to a file...
+    File.write(File.expand_path(privpath), secret_key.to_pem)
+    public_key = secret_key
+    public_key.private_key = nil
+    # write out the public key to a file...
+    File.write(File.expand_path(pubpath), public_key.to_pem)
+  end
+end
+
 namespace :delegate do
   desc 'Add a Trusted Delegate'
   task :add, [:name] do |_t, args|
@@ -56,3 +84,10 @@ namespace :delegate do
     end
   end
 end
+
+namespace :docker do
+  desc 'Build a fresh docker image'
+  task :build do
+    exec 'docker build -t authify/api .'
+  end
+end

data/authify-api.gemspec

@@ -1,4 +1,5 @@
 # coding: utf-8
+
 lib = File.expand_path('../lib', __FILE__)
 $LOAD_PATH.unshift(lib) unless $LOAD_PATH.include?(lib)
 require 'authify/api/version'
@@ -22,7 +23,7 @@ Gem::Specification.new do |spec|
 
   spec.required_ruby_version = '~> 2.0'
 
-  spec.add_runtime_dependency 'authify-core'
+  spec.add_runtime_dependency 'authify-core', '~> 0.1'
   spec.add_runtime_dependency 'authify-middleware'
   spec.add_runtime_dependency 'connection_pool', '~> 2.2'
   spec.add_runtime_dependency 'sinatra', '>= 2.0.0.beta2', '< 3'
@@ -35,6 +36,7 @@ Gem::Specification.new do |spec|
   spec.add_runtime_dependency 'jsonapi-serializers', '~> 0.16'
   # spec.add_runtime_dependency 'sinja', '~> 1.2', '>= 1.2.4'
   spec.add_runtime_dependency 'puma', '~> 3.7'
+  spec.add_runtime_dependency 'resque', '~> 1.26'
 
   spec.add_development_dependency 'bundler', '~> 1.12'
   spec.add_development_dependency 'rake', '~> 10.0'
@@ -43,4 +45,5 @@ Gem::Specification.new do |spec|
   spec.add_development_dependency 'yard',    '~> 0.8'
   spec.add_development_dependency 'travis', '~> 1.8'
   spec.add_development_dependency 'simplecov', '~> 0.13'
+  spec.add_development_dependency 'rack-test', '~> 0.6'
 end

data/db/migrate/20170328151033_add_verified_to_user.rb

@@ -0,0 +1,10 @@
+# User verifications
+class AddVerifiedToUser < ActiveRecord::Migration[5.0]
+  def change
+    change_table :users do |t|
+      t.boolean :verified
+      t.string :verification_token
+      t.index :verified
+    end
+  end
+end

data/db/schema.rb

@@ -10,7 +10,7 @@
 #
 # It's strongly recommended that you check this file into your version control system.
 
-ActiveRecord::Schema.define(version: 20170208022427) do
+ActiveRecord::Schema.define(version: 20170328151033) do
 
   create_table "apikeys", force: :cascade, options: "ENGINE=InnoDB DEFAULT CHARSET=utf8" do |t|
     t.integer  "user_id"
@@ -85,13 +85,16 @@ ActiveRecord::Schema.define(version: 20170208022427) do
 
   create_table "users", force: :cascade, options: "ENGINE=InnoDB DEFAULT CHARSET=utf8" do |t|
     t.string   "email"
-    t.text     "password_digest", limit: 65535
+    t.text     "password_digest",    limit: 65535
     t.string   "full_name"
-    t.datetime "created_at",                                    null: false
-    t.datetime "updated_at",                                    null: false
-    t.boolean  "admin",                         default: false, null: false
+    t.datetime "created_at",                                       null: false
+    t.datetime "updated_at",                                       null: false
+    t.boolean  "admin",                            default: false, null: false
+    t.boolean  "verified"
+    t.string   "verification_token"
     t.index ["admin"], name: "index_users_on_admin", using: :btree
     t.index ["email"], name: "index_users_on_email", using: :btree
+    t.index ["verified"], name: "index_users_on_verified", using: :btree
   end
 
 end

data/lib/authify/api.rb

@@ -2,6 +2,7 @@
 
 # External Requirements
 require 'authify/core'
+require 'authify/core/jobs/email'
 require 'authify/middleware'
 require 'sinatra/base'
 require 'sinatra/activerecord'
@@ -10,6 +11,7 @@ require 'sinatra/jsonapi'
 require 'tilt/erb'
 require 'connection_pool'
 require 'moneta'
+require 'resque'
 
 # Internal Requirements
 module Authify
@@ -26,6 +28,9 @@ module Authify
   end
 end
 
+redis_config = Authify::API::CONFIG[:redis]
+Resque.redis = "#{redis_config[:host]}:#{redis_config[:port]}"
+
 require 'authify/api/version'
 require 'authify/api/jsonapi_utils'
 require 'authify/api/controllers/apikey'

data/lib/authify/api/controllers/apikey.rb

@@ -18,7 +18,7 @@ module Authify
           Models::APIKey.all
         end
 
-        show(roles: [:myself, :admin]) do
+        show(roles: %i(myself admin)) do
           last_modified resource.updated_at
           next resource, exclude: [:secret_key]
         end
@@ -31,7 +31,7 @@ module Authify
           next key.id, key
         end
 
-        destroy(roles: [:myself, :admin]) do
+        destroy(roles: %i(myself admin)) do
           resource.destroy
         end
 
@@ -40,7 +40,7 @@ module Authify
         end
 
         has_one :user do
-          pluck(roles: [:myself, :admin]) do
+          pluck(roles: %i(myself admin)) do
             resource.user
           end
         end

data/lib/authify/api/controllers/group.rb

@@ -19,7 +19,7 @@ module Authify
           Models::Group.all
         end
 
-        show(roles: [:admin, :owner]) do
+        show(roles: %i(admin owner)) do
           last_modified resource.updated_at
           next resource
         end
@@ -30,7 +30,7 @@ module Authify
           next g
         end
 
-        destroy(roles: [:admin, :owner]) do
+        destroy(roles: %i(admin owner)) do
           resource.destroy
         end
 
@@ -39,23 +39,23 @@ module Authify
         end
 
         has_many :users do
-          fetch(roles: [:admin, :owner]) do
+          fetch(roles: %i(admin owner)) do
             resource.users
           end
 
-          replace(roles: [:admin, :owner]) do |rios|
+          replace(roles: %i(admin owner)) do |rios|
             refs = rios.map { |attrs| Models::User.find(attrs) }
             resource.users = refs
             resource.save
           end
 
-          merge(roles: [:admin, :owner]) do |rios|
+          merge(roles: %i(admin owner)) do |rios|
             refs = rios.map { |attrs| Models::User.find(attrs) }
             resource.users << refs
             resource.save
           end
 
-          subtract(roles: [:admin, :owner]) do |rios|
+          subtract(roles: %i(admin owner)) do |rios|
             refs = rios.map { |attrs| Models::User.find(attrs) }
             # This only removes the linkage, not the actual users
             resource.users.delete(refs)

data/lib/authify/api/controllers/identity.rb

@@ -14,11 +14,11 @@ module Authify
           end
         end
 
-        index(roles: [:admin, :trusted]) do
+        index(roles: %i(admin trusted)) do
           Models::Identity.all
         end
 
-        show(roles: [:myself, :admin, :trusted]) do
+        show(roles: %i(myself admin trusted)) do
           last_modified resource.updated_at
           next resource
         end
@@ -30,7 +30,7 @@ module Authify
           next ident.id, ident
         end
 
-        destroy(roles: [:myself, :admin]) do
+        destroy(roles: %i(myself admin)) do
           resource.destroy
         end
 
@@ -39,7 +39,7 @@ module Authify
         end
 
         has_one :user do
-          pluck(roles: [:myself, :admin, :trusted]) do
+          pluck(roles: %i(myself admin trusted)) do
             resource.user
           end
         end

data/lib/authify/api/controllers/organization.rb

@@ -4,7 +4,7 @@ module Authify
       Organization = proc do
         helpers do
           def find(id)
-            Models::Organization.find(id.to_i)
+            Models::Organization.includes(:users, :groups, :admins).find(id.to_i)
           end
 
           def role
@@ -15,15 +15,15 @@ module Authify
           end
 
           def modifiable_fields
-            [
-              :name,
-              :public_email,
-              :gravatar_email,
-              :billing_email,
-              :description,
-              :url,
-              :location
-            ]
+            %i(
+              name
+              public_email
+              gravatar_email
+              billing_email
+              description
+              url
+              location
+            )
           end
 
           def filtered_attributes(attributes)
@@ -41,54 +41,60 @@ module Authify
           end
         end
 
-        index(roles: [:admin]) do
-          Models::Organization.all
+        index(roles: %i(admin user)) do
+          Models::Organization.includes(:users, :groups, :admins)
         end
 
         get '/mine' do
           halt(403) unless can?(:create)
-          serialize_models current_user.organizations
+          serialize_models current_user.organizations.includes(:users, :groups, :admins)
         end
 
         show(roles: [:user]) do
           last_modified resource.updated_at
-          next resource
+          exclude = []
+          unless role?(:admin, :owner)
+            exclude << 'billing_email'
+            exclude << 'gravatar_email'
+          end
+          next resource, exclude: exclude
         end
 
         show_many do |ids|
-          Models::Organization.find(ids)
+          Models::Organization.includes(:users, :groups, :admins).find(ids)
         end
 
         create(roles: [:user]) do |attrs|
-          o = Models::Organization.new(attrs)
-          o.admins << current_user
+          o = Models::Organization.new filtered_attributes(attrs)
+          new_member = Models::OrganizationMembership.new(user: current_user, admin: true)
+          o.organization_memberships << new_member
           o.save
-          next o
+          next o.id, o
         end
 
-        update(roles: [:owner, :admin]) do |attrs|
+        update(roles: %i(owner admin)) do |attrs|
           resource.update filtered_attributes(attrs)
           next resource
         end
 
-        destroy(roles: [:owner, :admin]) do
+        destroy(roles: %i(owner admin)) do
           resource.destroy
         end
 
         has_many :users do
-          fetch(roles: [:owner, :admin, :member]) do
+          fetch(roles: %i(owner admin member)) do
             resource.users
           end
         end
 
         has_many :admins do
-          fetch(roles: [:owner, :admin, :member]) do
+          fetch(roles: %i(owner admin member)) do
             resource.admins
           end
         end
 
         has_many :groups do
-          fetch(roles: [:owner, :admin]) do
+          fetch(roles: %i(owner admin member)) do
             resource.groups
           end
         end

data/lib/authify/api/controllers/user.rb

@@ -8,13 +8,13 @@ module Authify
           end
 
           def role
-            Array(super).tap do |a|
+            Array(super.dup).tap do |a|
               a << :myself if current_user && resource && (resource.id == current_user.id)
             end.uniq
           end
 
           def modifiable_fields
-            [:full_name, :email].tap do |a|
+            %i(full_name email).tap do |a|
               a << :admin if role.include?(:admin)
             end
           end
@@ -34,11 +34,11 @@ module Authify
           end
         end
 
-        index(roles: [:user, :trusted]) do
+        index(roles: %i(user trusted)) do
           Models::User.all
         end
 
-        show(roles: [:user, :trusted]) do
+        show(roles: %i(user trusted)) do
           last_modified resource.updated_at
           next resource
         end
@@ -49,21 +49,30 @@ module Authify
           next user
         end
 
+        update(roles: %i(admin myself)) do |attrs|
+          # Necessary because #password= is overridden for Models::User
+          new_pass = attrs[:password] if attrs && attrs.key?(:password)
+          resource.update filtered_attributes(attrs)
+          resource.password = new_pass if new_pass
+          resource.save
+          next resource
+        end
+
         show_many do |ids|
           Models::User.find(ids)
         end
 
         has_many :apikeys do
-          fetch(roles: [:myself, :admin]) do
+          fetch(roles: %i(myself admin)) do
             resource.apikeys
           end
 
-          clear(roles: [:myself, :admin]) do
+          clear(roles: %i(myself admin)) do
             resource.apikeys.destroy_all
             resource.save
           end
 
-          subtract(roles: [:myself, :admin]) do |rios|
+          subtract(roles: %i(myself admin)) do |rios|
             refs = rios.map { |attrs| Models::APIKey.find(attrs) }
             # This actually calls #destroy on the keys (we don't need orphaned keys)
             resource.apikeys.destroy(refs)
@@ -72,36 +81,36 @@ module Authify
         end
 
         has_many :identities do
-          fetch(roles: [:myself, :admin, :trusted]) do
+          fetch(roles: %i(myself admin trusted)) do
             resource.identities
           end
 
-          clear(roles: [:myself, :admin]) do
+          clear(roles: %i(myself admin)) do
             resource.identities.destroy_all
             resource.save
           end
 
           merge(roles: [:myself]) do |rios|
-            refs = rios.map { |attrs| Models::Identities.new(attrs) }
+            refs = rios.map { |attrs| Models::Identity.new(attrs) }
             resource.identities << refs
             resource.save
           end
 
-          subtract(roles: [:myself, :admin]) do |rios|
-            refs = rios.map { |attrs| Models::Identities.find(attrs) }
+          subtract(roles: %i(myself admin)) do |rios|
+            refs = rios.map { |attrs| Models::Identity.find(attrs) }
             resource.identities.destroy(refs)
             resource.save
           end
         end
 
         has_many :organizations do
-          fetch(roles: [:user, :myself]) do
+          fetch(roles: %i(user myself admin)) do
             resource.organizations
           end
         end
 
         has_many :groups do
-          fetch(roles: [:myself, :admin]) do
+          fetch(roles: %i(myself admin)) do
             resource.groups
           end
         end

data/lib/authify/api/helpers/jwt_encryption.rb

@@ -16,7 +16,7 @@ module Authify
             iat: Time.now.to_i,
             iss: CONFIG[:jwt][:issuer],
             scopes: Core::Constants::JWTSCOPES.dup.tap do |scopes|
-              scopes << :admin_access if current_user && current_user.admin?
+              scopes << :admin_access if user.admin?
             end,
             user: {
               username: user.email,

data/lib/authify/api/models/organization.rb

@@ -19,7 +19,8 @@ module Authify
 
         has_many :admins, -> { where admin: true },
                  through: :organization_memberships,
-                 class_name: 'Authify::API::Models::User'
+                 class_name: 'Authify::API::Models::User',
+                 source: 'user'
       end
     end
   end

data/lib/authify/api/models/user.rb

@@ -38,21 +38,47 @@ module Authify
 
         def authenticate(unencrypted_password)
           return false unless unencrypted_password && !unencrypted_password.empty?
+          return false unless password_digest && !password_digest.empty?
           compare_salted_sha512(unencrypted_password, password_digest)
         end
 
+        def verify(vtoken)
+          return false unless verification_token
+          token, valid_until = verification_token.split(':')
+          token == vtoken && Time.now.to_i <= Integer(valid_until)
+        end
+
+        # Both sets a token in the DB *and* emails it to the user
+        def set_verification_token!
+          return false if verified?
+          token = peppered_sha512(rand(999).to_s)[0...16]
+          valid_until = (Time.now + (15 * 60)).to_i
+          self.verification_token = "#{token}:#{valid_until}"
+
+          email_opts = {
+            body: "Your verification token is: #{token}"
+          }
+
+          Resque.enqueue(
+            Authify::Core::Jobs::Email,
+            email,
+            'Authify Verification Email',
+            email_opts
+          )
+        end
+
         def admin_for?(organization)
           admin? || organization.admins.include?(self)
         end
 
         def self.from_api_key(access, secret)
           key = APIKey.find_by_access_key(access)
-          key.user if key && key.compare_secret(secret)
+          key.user if key && key.compare_secret(secret) && key.user.verified?
         end
 
         def self.from_email(email, password)
           found_user = Models::User.find_by_email(email)
-          found_user if found_user && found_user.authenticate(password)
+          found_user if found_user && found_user.authenticate(password) && found_user.verified?
         end
 
         def self.from_identity(provider, uid)

data/lib/authify/api/serializers/user_serializer.rb

@@ -9,6 +9,7 @@ module Authify
         attribute :full_name
         attribute :admin
         attribute :created_at
+        attribute :verified
 
         has_many :apikeys
         has_many :groups

data/lib/authify/api/services/jwt_provider.rb

@@ -36,19 +36,12 @@ module Authify
           email = @parsed_body[:email]
           password = @parsed_body[:password]
           # For Trusted Delegates signing users in via omniauth
-          del_data = @parsed_body[:delegate]
           omni_provider = @parsed_body[:provider]
           omni_uid = @parsed_body[:uid]
-          trusted_delegate = if del_data
-                               Models::TrustedDelegate.from_access_key(
-                                 del_data[:access],
-                                 del_data[:secret]
-                               )
-                             end
 
           found_user = if access
                          Models::User.from_api_key(access, secret)
-                       elsif trusted_delegate
+                       elsif remote_app
                          Models::User.from_identity(omni_provider, omni_uid)
                        elsif email
                          Models::User.from_email(email, password)

data/lib/authify/api/services/registration.rb

@@ -33,29 +33,59 @@ module Authify
           via = @parsed_body[:via]
           password = @parsed_body[:password]
           name = @parsed_body[:name]
-          del_data = @parsed_body[:delegate]
-          trusted_delegate = if del_data
-                               Models::TrustedDelegate.from_access_key(
-                                 del_data[:access],
-                                 del_data[:secret]
-                               )
-                             end
 
           halt(422, 'Duplicate User') if Models::User.exists?(email: email)
-          halt(403, 'Password Required') unless password || trusted_delegate
+          halt(403, 'Password Required') unless password || remote_app
 
           new_user = Models::User.new(email: email)
           new_user.full_name = name if name
           new_user.password = password if password
-          if via && via[:provider]
+          if via && via[:provider] && remote_app
             new_user.identities.build(
               provider: via[:provider],
               uid: via[:uid] ? via[:uid] : email
             )
+            new_user.verified = true
+          else
+            new_user.set_verification_token!
           end
+
           new_user.save
           update_current_user new_user
-          { id: new_user.id, email: new_user.email, jwt: jwt_token(new_user) }.to_json
+
+          response = { id: new_user.id, email: new_user.email }
+          if new_user.verified?
+            response[:verified] = true
+            response[:jwt]      = jwt_token(new_user)
+          else
+            response[:verified] = false
+          end
+          response.to_json
+        end
+
+        post '/verify' do
+          email = @parsed_body[:email]
+          password = @parsed_body[:password]
+          token = @parsed_body[:token]
+
+          halt(422, 'Invalid User') unless Models::User.exists?(email: email)
+          halt(403, 'Missing Parameters') unless email && password && token
+
+          found_user = Models::User.find_by_email(email)
+          if found_user.authenticate(password) && found_user.verify(token)
+            found_user.verified = true
+          else
+            halt(422, 'Verification Failed')
+          end
+          found_user.save
+          update_current_user found_user
+
+          {
+            id: found_user.id,
+            email: found_user.email,
+            verified: found_user.verified?,
+            jwt: jwt_token(found_user)
+          }.to_json
         end
       end
     end

data/lib/authify/api/version.rb

@@ -2,7 +2,7 @@ module Authify
   module API
     VERSION = [
       0, # Major
-      1, # Minor
+      2, # Minor
       0  # Patch
     ].join('.')
   end

metadata

@@ -1,29 +1,29 @@
 --- !ruby/object:Gem::Specification
 name: authify-api
 version: !ruby/object:Gem::Version
-  version: 0.1.0
+  version: 0.2.0
 platform: ruby
 authors:
 - Jonathan Gnagy
 autorequire: 
 bindir: exe
 cert_chain: []
-date: 2017-02-16 00:00:00.000000000 Z
+date: 2017-03-29 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: authify-core
   requirement: !ruby/object:Gem::Requirement
     requirements:
-    - - ">="
+    - - "~>"
       - !ruby/object:Gem::Version
-        version: '0'
+        version: '0.1'
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
-    - - ">="
+    - - "~>"
       - !ruby/object:Gem::Version
-        version: '0'
+        version: '0.1'
 - !ruby/object:Gem::Dependency
   name: authify-middleware
   requirement: !ruby/object:Gem::Requirement
@@ -190,6 +190,20 @@ dependencies:
     - - "~>"
       - !ruby/object:Gem::Version
         version: '3.7'
+- !ruby/object:Gem::Dependency
+  name: resque
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '1.26'
+  type: :runtime
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '1.26'
 - !ruby/object:Gem::Dependency
   name: bundler
   requirement: !ruby/object:Gem::Requirement
@@ -288,6 +302,20 @@ dependencies:
     - - "~>"
       - !ruby/object:Gem::Version
         version: '0.13'
+- !ruby/object:Gem::Dependency
+  name: rack-test
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '0.6'
+  type: :development
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '0.6'
 description: 
 email:
 - jgnagy@knuedge.com
@@ -299,6 +327,7 @@ files:
 - ".rspec"
 - ".rubocop.yml"
 - ".travis.yml"
+- Dockerfile
 - Gemfile
 - LICENSE.txt
 - README.md
@@ -315,6 +344,7 @@ files:
 - db/migrate/20170204001405_create_trusted_delegates.rb
 - db/migrate/20170208021933_add_admin_to_user.rb
 - db/migrate/20170208022427_set_default_for_user_admin.rb
+- db/migrate/20170328151033_add_verified_to_user.rb
 - db/schema.rb
 - lib/authify/api.rb
 - lib/authify/api/controllers/apikey.rb