authorio 0.8.0

checksums.yaml

@@ -0,0 +1,7 @@
+---
+SHA256:
+  metadata.gz: 9a376e3f8c81fdc53ac6c223c42fedadb43cdc02129713ca6756db1506c07f10
+  data.tar.gz: 761c806afafae95a35e97e97b784ae4271cc09fb7cbb6eb6001571e9319cc6a2
+SHA512:
+  metadata.gz: 32c86c4be9a8cf949ba616797d0a7b505213687d09435ae7c8e0a5588224076c73b0aab4e7b985af74baa89963dafabdc2db7f562982165886dc8085e2fd88c7
+  data.tar.gz: c9bbaf3bce9c291ddf5619a62caa03962d31c1e57abf0fe45baae96d2325cbd1f0d46f1d6c5477fb9cef6dafa9eb54f4ee2874820e8e74b662dd7e8c9d6aa77d

data/MIT-LICENSE

@@ -0,0 +1,20 @@
+Copyright 2021 Michael Meckler
+
+Permission is hereby granted, free of charge, to any person obtaining
+a copy of this software and associated documentation files (the
+"Software"), to deal in the Software without restriction, including
+without limitation the rights to use, copy, modify, merge, publish,
+distribute, sublicense, and/or sell copies of the Software, and to
+permit persons to whom the Software is furnished to do so, subject to
+the following conditions:
+
+The above copyright notice and this permission notice shall be
+included in all copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND,
+EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF
+MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND
+NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE
+LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION
+OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION
+WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.

data/README.md

@@ -0,0 +1,99 @@
+# Authorio
+The Authorio plugin turns any Rails-based site into an authentication endpoint for Indieauth.
+
+## Motivation
+[IndieAuth](https://indieauth.com/faq) is an authentication protocol that allows you to sign in to a website using a domain name (assuming the web site supports IndieAuth). There are two servers involved in the transaction: the *client*, which is where you're logging in to (authenticating with), and the *authentication endpoint*, which verifies you are who you say you are.
+
+There are several implementations for IndieAuth clients, if you want to support IndieAuth login on your site. But there aren't many useful implementations of the authentication endpoint. Many people work around this by using an IndieAuth service, such as [RelMeAuth](https://indieweb.org/RelMeAuth) which delegates authentication to a third-party site such as Twitter or Facebook.
+
+Authorio allows you to create a truly federated authentication setup, using your own Rails site. By adding Authorio to your site, you can remove any external authentication dependencies and log in using only servies you control.
+
+## Installation
+
+### 1. Add the Authorio Gem to your bundle
+Add this line to your application's Gemfile:
+
+```ruby
+gem 'authorio'
+```
+
+And then execute:
+```bash
+$ bundle
+```
+
+### 2. Install Authorio config files
+```bash
+$ rails generate authorio:install
+```
+
+### 3. Install Authorio migrations
+Authorio needs to add a couple tables to your app's database in order to store (hashed) passwords and access tokens.
+You will need to install the migrations and then run them to add these tables
+```bash
+$ rails authorio:install:migrations
+Copied migration 20210703002653_create_authorio_users.authorio.rb from authorio
+Copied migration 20210703002654_create_authorio_requests.authorio.rb from authorio
+$ rails db:migrate
+...
+== 20210703002653 CreateAuthorioUsers: migrated (0.0038s) =====================
+...
+== 20210703002654 CreateAuthorioRequests: migrated (0.0041s) ==================
+```
+
+### 4. Install Authorio routes
+Add the following line somewhere inside the `Rails.application.routes.draw do` block in your `config/routes.rb` file
+```ruby
+authorio_routes
+```
+
+### 5. Add the Indieauth tags
+Somewhere on your home page, add the following to your view template:
+```erb
+<%= indieauth_tag %>
+```
+
+This part of the protocol will tell the IndieAuth client where to redirect for authentication. Note that ideally
+you should only place this tag on your home page, and not in a layout that will put it on every page on your site.
+(It won't hurt anything but it's redundant to have it in multiple locations)
+
+### 6. Set your initial password
+By default, Authorio uses a simple password to authenticate you. This password is hashed and stored in your app
+database, which presumably you control.
+
+You are free to customize Authorio to change its authentication scheme however you want, but to get started
+quickly you'll want to set up a password for yourself.
+
+```bash
+$ rake authorio:password
+
+Enter new password: 
+Confirm password: 
+Password set
+```
+
+### 7. Precompile assets
+
+Authorio has some of its own assets which, if you're running in a production environment, will need to be precompiled
+like your existing assets. Re-run your normal precompilation step to ensure Authorio's assets are in your asset pipeline
+```bash
+$ rails assets:precompile
+```
+Now restart your rails app, and you should be all set!
+
+## Usage
+
+To test your authentication endpoint, find an IndieAuth client you can log in to. A simple test is at [Pin13](pin13.net/login). Enter your site's URL and click Sign In.
+
+You should be then be redirected back to your own site and the Authorio
+login UI  
+<img src="./auth-ui.png" width="400">
+
+Enter the password you set up when you installed Authorio. This should redirect you back to the client where you
+will be logged in!
+
+## Contributing
+Send pull requests to [Authorio on GitHub](https://github.com/reiterate-app/authorio)
+
+## License
+The gem is available as open source under the terms of the [MIT License](https://opensource.org/licenses/MIT).

data/Rakefile

@@ -0,0 +1,20 @@
+require "bundler/setup"
+
+APP_RAKEFILE = File.expand_path("test/dummy/Rakefile", __dir__)
+load "rails/tasks/engine.rake"
+
+load "rails/tasks/statistics.rake"
+
+load "lib/tasks/authorio_tasks.rake"
+
+require "bundler/gem_tasks"
+
+require "rake/testtask"
+
+Rake::TestTask.new(:test) do |t|
+  t.libs << 'test'
+  t.pattern = 'test/**/*_test.rb'
+  t.verbose = false
+end
+
+task default: :test

data/app/assets/config/authorio_manifest.js

@@ -0,0 +1 @@
+//= link_directory ../stylesheets/authorio .css

data/app/assets/stylesheets/authorio/application.css

@@ -0,0 +1,15 @@
+/*
+ * This is a manifest file that'll be compiled into application.css, which will include all the files
+ * listed below.
+ *
+ * Any CSS and SCSS file within this directory, lib/assets/stylesheets, vendor/assets/stylesheets,
+ * or any plugin's vendor/assets/stylesheets directory can be referenced here using a relative path.
+ *
+ * You're free to add application-wide styles to this file and they'll appear at the bottom of the
+ * compiled file so the styles you add here take precedence over styles defined in any other CSS/SCSS
+ * files in this directory. Styles in this file should be added after the last require_* statement.
+ * It is generally better to create a new file per style scope.
+ *
+ *= require_tree .
+ *= require_self
+ */

data/app/assets/stylesheets/authorio/auth.css

@@ -0,0 +1,41 @@
+div.authorio-auth {
+	padding-top: 200px;
+}
+
+.authorio-auth h3 {
+	text-align: center;
+}
+
+.authorio-auth .client-row {
+	text-align: center;
+	color: darkolivegreen;
+	margin-top: -0.5em;
+}
+
+.authorio-auth span.client {
+	font-weight: bold;
+}
+
+.auth-panel {
+	background-color: gainsboro;
+	border-bottom: 2px solid darkgray;
+	padding-bottom: 3em;
+}
+
+.authorio-auth label {
+	display: block;
+	margin-left:  1.2em;
+}
+
+.authorio-auth input {
+	margin: 0 1em 1em 1em;
+	width:  90%;
+}
+
+.authorio-auth form {
+	margin-top: 2em;
+}
+
+.authorio-auth input.btn {
+	margin-top: 2em;
+}

data/app/controllers/authorio/application_controller.rb

@@ -0,0 +1,4 @@
+module Authorio
+  class ApplicationController < ActionController::Base
+  end
+end

data/app/controllers/authorio/auth_controller.rb

@@ -0,0 +1,134 @@
+module Authorio
+  class AuthController < ActionController::Base
+    require 'uri'
+    require 'digest'
+
+    protect_from_forgery except: [:send_profile, :issue_token, :authorize_user]
+
+    def authorization_interface
+      p = auth_req_params
+
+      path = if p[:me]
+        URI(p[:me]).path
+      else
+        '/'
+      end
+
+      user = User.find_by! profile_path: path
+      @user_url = p[:me] || user_url(user)
+
+      # If there are any old requests from this (client, user), delete them now
+      Request.where(authorio_user: user, client: p[:client_id]).delete_all
+
+      auth_request = Request.new.tap do |req|
+        req.code = SecureRandom.hex(20)
+        req.redirect_uri = p[:redirect_uri]
+        req.client = p[:client_id] # IndieAuth client_id conflicts with Rails' _id foreign key convention
+        req.scope = p[:scope]
+        req.authorio_user = user
+      end
+      auth_request.save
+      session[:state] = p[:state]
+      session[:code_challenge] = p[:code_challenge]
+    end
+
+    def authorize_user
+      p = auth_user_params
+      user = User.find_by! profile_path: URI(p[:url]).path
+      auth_req = Request.find_by! client: p[:client], authorio_user: user
+      if user.authenticate(p[:password])
+        params = { code: auth_req.code, state: session[:state] }
+        redirect_to "#{auth_req.redirect_uri}?#{params.to_query}"
+      else
+        flash.now[:alert] = "Incorrect password. Try again."
+        redirect_back fallback_location: Authorio.authorization_path, allow_other_host: false
+      end
+    end
+
+    def send_profile
+      begin
+        render json: { 'me': user_url(validate_request.authorio_user) }
+      rescue Authorio::Exceptions::InvalidGrant
+        render invalid_grant
+      end
+    end
+
+    def issue_token
+      begin
+        req = validate_request
+        raise Authorio::Exceptions::InvalidGrant.new if req.scope.blank?
+        token = Token.create(authorio_user: req.authorio_user, scope: req.scope, client: req.client)
+        render json: {
+          'me': user_url(req.authorio_user),
+          'access_token': token.auth_token,
+          'scope': req.scope,
+          'token_type': 'Bearer'
+        }
+      rescue Authorio::Exceptions::InvalidGrant
+        render invalid_grant
+      end
+    end
+
+    def verify_token
+      token = Token.find_by auth_token: bearer_token
+      head :bad_request and return if token.nil?
+      render json: {
+        'me': user_url(token.authorio_user),
+        'client_id': token.client,
+        'scope': 'token.scope'
+      }
+    end
+
+    private
+
+    def auth_req_params
+      %w(client_id redirect_uri state code_challenge).each do |param|
+        unless params.key?(param) && !params[param].empty?
+          raise ::ActionController::ParameterMissing.new(param)
+        end
+      end
+      params.permit(:response_type, :code_challenge, :code_challenge_method, :scope, :me, :redirect_uri, :client_id, :state)
+    end
+
+    def auth_user_params
+      params.permit(:password, :url, :client)
+    end
+
+    def user_url(user)
+      "#{request.scheme}://#{request.host}#{user.profile_path}"
+    end
+
+    def invalid_grant
+      { json: { 'error': 'invalid_grant' }, status: :bad_request }
+    end
+
+    def code_challenge_failed?
+      # For now, if original request did not have code challenge, then we pass by default
+      return false if session[:code_challenge].nil?
+      sha256 = Digest::SHA256.hexdigest params[:code_verifier]
+      base64 = Base64.urlsafe_encode64 sha256
+      return base64 != session[:code_challenge]
+    end
+
+    def invalid_request?(req)
+      req.redirect_uri != params[:redirect_uri] \
+        || req.client != params[:client_id] \
+        || req.created_at < Time.now - 10.minutes
+    end
+
+    def validate_request
+      req = Request.find_by code: params[:code]
+      raise Authorio::Exceptions::InvalidGrant.new if req.nil?
+      req.delete
+      raise Authorio::Exceptions::InvalidGrant.new if invalid_request?(req) || code_challenge_failed?
+      req
+    end
+
+    def bearer_token
+      bearer = /^Bearer /
+      header = request.headers['Authorization']
+      header.gsub(bearer, '') if header && header.match(bearer)
+    end
+
+  end
+end

data/app/controllers/authorio/helpers.rb

@@ -0,0 +1,17 @@
+module Authorio
+  # These helpers are provided to the main application
+  module Helpers
+    extend ActiveSupport::Concern
+
+    included do
+      if respond_to?(:helper_method)
+        helper_method :indieauth_tag
+      end
+    end
+
+    def indieauth_tag
+      %Q[<link rel="authorization_endpoint" href="#{URI.join(root_url, Authorio.authorization_path)}">
+        <link rel="token_endpoint" href="#{URI.join(root_url, Authorio.token_path)}">].html_safe
+    end
+  end
+end

data/app/helpers/authorio/application_helper.rb

@@ -0,0 +1,4 @@
+module Authorio
+  module ApplicationHelper
+  end
+end

data/app/helpers/authorio/test_helper.rb

@@ -0,0 +1,4 @@
+module Authorio
+  module TestHelper
+  end
+end

data/app/jobs/authorio/application_job.rb

@@ -0,0 +1,4 @@
+module Authorio
+  class ApplicationJob < ActiveJob::Base
+  end
+end

data/app/models/authorio/application_record.rb

@@ -0,0 +1,5 @@
+module Authorio
+  class ApplicationRecord < ActiveRecord::Base
+    self.abstract_class = true
+  end
+end

data/app/models/authorio/request.rb

@@ -0,0 +1,7 @@
+module Authorio
+  class Request < ApplicationRecord
+    belongs_to :authorio_user, class_name: "::Authorio::User"
+
+    validates_presence_of :code, :redirect_uri, :client
+  end
+end

data/app/models/authorio/token.rb

@@ -0,0 +1,8 @@
+module Authorio
+  class Token < ApplicationRecord
+    belongs_to :authorio_user, class_name: "::Authorio::User"
+    has_secure_token :auth_token
+
+    validates_presence_of :scope, :client
+  end
+end

data/app/models/authorio/user.rb

@@ -0,0 +1,5 @@
+module Authorio
+  class User < ApplicationRecord
+    has_secure_password
+  end
+end

data/app/views/authorio/auth/authorization_interface.html.erb

@@ -0,0 +1,37 @@
+<!DOCTYPE html>
+<html lang="en-GB">
+  <head>
+    <meta charset="utf-8">
+    <title>Authorio Login</title>
+    <meta name="viewport" content="width=device-width, initial-scale=1">
+    <link rel="stylesheet"
+      href="https://maxcdn.bootstrapcdn.com/bootstrap/3.3.7/css/bootstrap.min.css"
+      integrity="sha384-BVYiiSIFeK1dGmJRAkycuHAHRg32OmUcww7on3RYdg4Va+PmSTsz/K68vbdEjh4u"
+      crossorigin="anonymous">
+    <%= stylesheet_link_tag "authorio/auth" %>
+  </head>
+  <body>
+    <div class="container authorio-auth">
+      <div class="row">
+        <div class="col-md-4">
+        </div>
+        <div class="col-md-4 auth-panel">
+          <h3>Authorio</h3>
+          <div class="client-row">
+            Authenticating with <span class="client"><%= params[:client_id] %>
+          </div>
+          <%= form_with(url: "authorize_user", method: :post) do |form| %>
+          <%= form.label(:url, "User URL") %>
+          <%= form.text_field(:url, value: @user_url, readonly: true) %>
+          <%= form.label(:password, "Password") %>
+          <%= form.password_field(:password) %>
+          <%= form.hidden_field(:client, value: params[:client_id]) %>
+          <%= form.submit("Sign in", class: 'btn btn-success') %>
+          <% end %>
+        </div>
+        <div class="col-md-4">
+        </div>
+      </div>
+    </div>
+  </body>
+</html>

data/app/views/layouts/authorio/application.html.erb

@@ -0,0 +1,15 @@
+<!DOCTYPE html>
+<html>
+<head>
+  <title>Authorio</title>
+  <%= csrf_meta_tags %>
+  <%= csp_meta_tag %>
+
+  <%= stylesheet_link_tag    "authorio/application", media: "all" %>
+</head>
+<body>
+
+<%= yield %>
+
+</body>
+</html>

data/config/routes.rb

@@ -0,0 +1,7 @@
+Authorio::Engine.routes.draw do
+	get Authorio.configuration.authorization_endpoint, controller: 'auth', action: 'authorization_interface'
+	post Authorio.configuration.authorization_endpoint, controller: 'auth', action: 'send_profile'
+	post '/authorize_user', controller: 'auth', action: 'authorize_user'
+	get Authorio.configuration.token_endpoint, controller: 'auth', action: 'verify_token'
+	post Authorio.configuration.token_endpoint, controller: 'auth', action: 'issue_token'
+end

data/db/migrate/20210627230156_create_authorio_users.rb

@@ -0,0 +1,11 @@
+class CreateAuthorioUsers < ActiveRecord::Migration[6.1]
+  def change
+    create_table :authorio_users do |t|
+      t.string :profile_path
+      t.string :password_digest
+
+      t.timestamps
+    end
+    add_index :authorio_users, :profile_path, unique: true
+  end
+end

data/db/migrate/20210627230416_create_authorio_requests.rb

@@ -0,0 +1,13 @@
+class CreateAuthorioRequests < ActiveRecord::Migration[6.1]
+  def change
+    create_table :authorio_requests do |t|
+      t.string :code
+      t.string :redirect_uri
+      t.string :client
+      t.string :scope
+      t.references :authorio_user, null: false, foreign_key: true
+
+      t.timestamps
+    end
+  end
+end

data/db/migrate/20210707230416_create_authorio_tokens.rb

@@ -0,0 +1,13 @@
+class CreateAuthorioTokens < ActiveRecord::Migration[6.1]
+  def change
+    create_table :authorio_tokens do |t|
+      t.string :client
+      t.string :scope
+      t.references :authorio_user, null: false, foreign_key: true
+      t.string :auth_token
+
+      t.timestamps
+    end
+    add_index :authorio_tokens, :auth_token, unique: true
+  end
+end

data/lib/authorio.rb

@@ -0,0 +1,27 @@
+require "authorio/version"
+require "authorio/engine"
+require "authorio/configuration"
+require "authorio/routes"
+require "authorio/exceptions"
+
+module Authorio
+	class << self
+		attr_accessor :configuration, :authorization_path
+	end
+
+	def self.configuration
+		@configuration ||= Configuration.new
+ 	end
+
+  	def self.configure
+		yield configuration
+	end
+
+	def self.authorization_path
+		return [Authorio.configuration.mount_point, Authorio.configuration.authorization_endpoint].join("/")
+	end
+
+	def self.token_path
+		return [Authorio.configuration.mount_point, Authorio.configuration.token_endpoint].join("/")
+	end
+end

data/lib/authorio/configuration.rb

@@ -0,0 +1,12 @@
+module Authorio
+	class Configuration
+
+		attr_accessor :authorization_endpoint, :token_endpoint, :mount_point
+
+		def initialize
+			@authorization_endpoint = "auth"
+			@token_endpoint = "token"
+			@mount_point = "authorio"
+		end
+	end
+end

data/lib/authorio/engine.rb

@@ -0,0 +1,14 @@
+module Authorio
+  class Engine < ::Rails::Engine
+		isolate_namespace Authorio
+
+		initializer "authorio.load_helpers" do |app|
+			ActionController::Base.send :include, Authorio::Helpers
+		end
+
+		initializer "authorio.assets.precompile" do |app|
+			app.config.assets.precompile += %w( authorio/auth.css )
+		end
+
+  end
+end

data/lib/authorio/exceptions.rb

@@ -0,0 +1,5 @@
+module Authorio
+	module Exceptions
+		class InvalidGrant < RuntimeError; end
+	end
+end

data/lib/authorio/routes.rb

@@ -0,0 +1,9 @@
+module ActionDispatch::Routing
+	class Mapper
+
+		# Provide a custom mounting command, just so we can track our own mount point
+		def authorio_routes
+			mount Authorio::Engine, at: Authorio.configuration.mount_point
+		end
+	end
+end

data/lib/authorio/version.rb

@@ -0,0 +1,3 @@
+module Authorio
+  VERSION = '0.8.0'
+end

data/lib/generators/authorio/install/install_generator.rb

@@ -0,0 +1,17 @@
+module Authorio
+  class InstallGenerator < Rails::Generators::Base
+
+    def self.source_paths
+      paths = []
+      paths << File.expand_path('../templates', "../../#{__FILE__}")
+      paths << File.expand_path('../templates', "../#{__FILE__}")
+      paths << File.expand_path('../templates', __FILE__)
+      paths.flatten
+    end
+
+    def add_files
+      template 'authorio.rb', 'config/initializers/authorio.rb'
+    end
+
+  end
+end

data/lib/generators/authorio/install/templates/authorio.rb

@@ -0,0 +1,15 @@
+# Configuration for Authorio IndieAuth authentication
+
+Authorio.configure do |config|
+
+	# Mount point for Authorio URLs. Typically you would call this in your routes.rb
+	# as mount Authorio::Engine, at: mount_point
+	# But Authorio needs to know its own mount point, so we define it here and use a custom mount command in the config
+	# config.mount_point = "authorio"
+
+	# The path where clients will be redirected to provide authentication
+	# config.authorization_endpoint = "auth"
+
+	# The path for token requests
+	# config.token_endpoint = "token"
+end

data/lib/tasks/authorio_tasks.rake

@@ -0,0 +1,18 @@
+namespace :authorio do
+	desc "Set password for initial Authorio user"
+	require 'io/console'
+
+	def input_no_echo(prompt)
+		print("\n#{prompt}")
+		STDIN.noecho(&:gets).chop
+	end
+
+	task :password => :environment do
+		passwd = input_no_echo("Enter new password: ")
+		passwd_confirm = input_no_echo("Confirm password: ")
+		user = Authorio::User.
+			create_with(password: passwd, password_confirmation:passwd_confirm).
+			find_or_create_by!(profile_path: '/')
+		puts("\nPassword set")
+	end
+end

metadata

@@ -0,0 +1,166 @@
+--- !ruby/object:Gem::Specification
+name: authorio
+version: !ruby/object:Gem::Version
+  version: 0.8.0
+platform: ruby
+authors:
+- Michael Meckler
+autorequire: 
+bindir: bin
+cert_chain: []
+date: 2021-07-11 00:00:00.000000000 Z
+dependencies:
+- !ruby/object:Gem::Dependency
+  name: rails
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: 6.1.3
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: 6.1.3.2
+  type: :runtime
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: 6.1.3
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: 6.1.3.2
+- !ruby/object:Gem::Dependency
+  name: bcrypt
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: '0'
+  type: :runtime
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: '0'
+- !ruby/object:Gem::Dependency
+  name: factory_bot_rails
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: '0'
+  type: :development
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: '0'
+- !ruby/object:Gem::Dependency
+  name: rspec
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: '0'
+  type: :development
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: '0'
+- !ruby/object:Gem::Dependency
+  name: rspec-rails
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: '0'
+  type: :development
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: '0'
+- !ruby/object:Gem::Dependency
+  name: byebug
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: '0'
+  type: :development
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: '0'
+description: Rails engine to add IndieAuth authentication endpoiont functionality
+email:
+- rattroupe@reiterate-app.com
+executables: []
+extensions: []
+extra_rdoc_files: []
+files:
+- MIT-LICENSE
+- README.md
+- Rakefile
+- app/assets/config/authorio_manifest.js
+- app/assets/stylesheets/authorio/application.css
+- app/assets/stylesheets/authorio/auth.css
+- app/controllers/authorio/application_controller.rb
+- app/controllers/authorio/auth_controller.rb
+- app/controllers/authorio/helpers.rb
+- app/helpers/authorio/application_helper.rb
+- app/helpers/authorio/test_helper.rb
+- app/jobs/authorio/application_job.rb
+- app/models/authorio/application_record.rb
+- app/models/authorio/request.rb
+- app/models/authorio/token.rb
+- app/models/authorio/user.rb
+- app/views/authorio/auth/authorization_interface.html.erb
+- app/views/layouts/authorio/application.html.erb
+- config/routes.rb
+- db/migrate/20210627230156_create_authorio_users.rb
+- db/migrate/20210627230416_create_authorio_requests.rb
+- db/migrate/20210707230416_create_authorio_tokens.rb
+- lib/authorio.rb
+- lib/authorio/configuration.rb
+- lib/authorio/engine.rb
+- lib/authorio/exceptions.rb
+- lib/authorio/routes.rb
+- lib/authorio/version.rb
+- lib/generators/authorio/install/install_generator.rb
+- lib/generators/authorio/install/templates/authorio.rb
+- lib/tasks/authorio_tasks.rake
+homepage: https://rubygems.org/gems/authorio
+licenses:
+- MIT
+metadata:
+  homepage_uri: https://rubygems.org/gems/authorio
+  source_code_uri: https://github.com/reiterate-app/authorio
+post_install_message: 
+rdoc_options: []
+require_paths:
+- lib
+required_ruby_version: !ruby/object:Gem::Requirement
+  requirements:
+  - - ">="
+    - !ruby/object:Gem::Version
+      version: '0'
+required_rubygems_version: !ruby/object:Gem::Requirement
+  requirements:
+  - - ">="
+    - !ruby/object:Gem::Version
+      version: '0'
+requirements: []
+rubygems_version: 3.2.11
+signing_key: 
+specification_version: 4
+summary: Indieauth Authentication endpoint for Rails
+test_files: []