bouncer-client 0.2.1 → 0.2.2

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA1:
-  metadata.gz: 48e0baa7d9e6c6bcaa45cd62a57927e716568185
-  data.tar.gz: 17e56a7d1a6977c5195f465c855564525664a790
+  metadata.gz: 366496483071b755211e3ad71000a4bd83c9f7f2
+  data.tar.gz: 7c19fec4ead6a2c20e9e5a118ae9bb8d7d6a98ea
 SHA512:
-  metadata.gz: f583f0b254bde355d5297d929b1c25a255a001a84455f948e460c6f3b4499f7dfdafe22428ea024eb1e310c7d3117f6c2e7eb61a48f33bd12c850f889dec7857
-  data.tar.gz: 135491e90e82efee2e283f864505691e89635b890548f53e795da484cc3feb0988d4aaad4c53c6fc8d49c97759e1dda8d68e5f7486190561d4ccb03f1e69520c
+  metadata.gz: 680dfd545b9969e420e0ae7a4880b1f7b552124a6af5481977ff1b0b960308aa4a8a6136afdf85b6a8928ab07018f6cad7c9c0910adc48a644d8cd71871a1a7d
+  data.tar.gz: 7fada9f8789a68ee2d2368ec0039b46f0abeee0d7618cffe1da6249b205abba744417addd48359f91b61209a1bcc5c507ccc475a6155536ed194006e8844c1df

data/bouncer-client.gemspec

@@ -21,6 +21,7 @@ Gem::Specification.new do |spec|
   spec.add_dependency 'faraday'
   spec.add_dependency 'faraday_middleware'
   spec.add_dependency 'redis'
+  spec.add_development_dependency 'activesupport'
   spec.add_development_dependency 'codeclimate-test-reporter'
   spec.add_development_dependency "rake", "~> 10.0"
   spec.add_development_dependency 'rspec'

data/lib/bouncer-client/controller_mixin.rb

@@ -1,4 +1,5 @@
 require 'active_support/rescuable'
+require 'bouncer-client/errors'
 module Bouncer
   module ControllerMixin
     def current_user
@@ -6,21 +7,26 @@ module Bouncer
       @token ||= Bouncer::Token.new(request.headers['authorization'])
     end
 
-    def authenticate_user!
+    def authenticate_token!
       raise UnauthenticatedError unless Bouncer::Token.present? request
-      raise UnauthenticatedError unless current_user.validate!
+      raise UnauthenticatedError unless current_user.valid?
     end
 
     def authenticate_super_admin!
       authenticate_user!
-      raise UnauthorizedError unless current_user.super_admin?
+      raise UnauthorizedError unless current_user.user.super_admin?
     end
 
     def authenticate_device!
-      authenticate_user!
+      authenticate_token!
       raise UnauthorizedError unless current_user.device?
     end
 
+    def authenticate_user!
+      authenticate_token!
+      raise UnauthorizedError unless current_user.user?
+    end
+
     private
 
     def unauthorized(error)

data/lib/bouncer-client/version.rb

@@ -1,3 +1,3 @@
 module Bouncer
-  VERSION = "0.2.1"
+  VERSION = "0.2.2"
 end

data/spec/cassettes/bouncer/valid_user.yml

@@ -0,0 +1,109 @@
+---
+http_interactions:
+- request:
+    method: get
+    uri: https://mbouncer.herokuapp.com/oauth/token/info
+    body:
+      encoding: US-ASCII
+      string: ''
+    headers:
+      Content-Type:
+      - application/json
+      Authorization:
+      - Bearer <ADMIN_TOKEN>
+      User-Agent:
+      - Faraday v0.9.1
+      Accept-Encoding:
+      - gzip;q=1.0,deflate;q=0.6,identity;q=0.3
+      Accept:
+      - "*/*"
+  response:
+    status:
+      code: 200
+      message: OK
+    headers:
+      Server:
+      - Cowboy
+      Connection:
+      - close
+      Date:
+      - Thu, 19 Feb 2015 15:25:06 GMT
+      Status:
+      - 200 OK
+      X-Frame-Options:
+      - SAMEORIGIN
+      X-Xss-Protection:
+      - 1; mode=block
+      X-Content-Type-Options:
+      - nosniff
+      Content-Type:
+      - application/json; charset=utf-8
+      Etag:
+      - W/"059ee065b4ee4df76ac3ab9d05708e89"
+      Cache-Control:
+      - max-age=0, private, must-revalidate
+      X-Request-Id:
+      - 000d0e52-7733-4d51-868d-53b169dc38d7
+      X-Runtime:
+      - '0.012449'
+      Via:
+      - 1.1 vegur
+    body:
+      encoding: UTF-8
+      string: '{"resource_owner_id":"960dd380-85db-43c7-b79b-ed3f3c7d4a88","scopes":["user"],"expires_in_seconds":6265,"application":{"uid":null},"created_at":1424358570}'
+    http_version: 
+  recorded_at: Thu, 19 Feb 2015 15:25:05 GMT
+- request:
+    method: get
+    uri: https://mbouncer.herokuapp.com/me
+    body:
+      encoding: US-ASCII
+      string: ''
+    headers:
+      Content-Type:
+      - application/json
+      Authorization:
+      - Bearer <ADMIN_TOKEN>
+      User-Agent:
+      - Faraday v0.9.1
+      Accept-Encoding:
+      - gzip;q=1.0,deflate;q=0.6,identity;q=0.3
+      Accept:
+      - "*/*"
+  response:
+    status:
+      code: 200
+      message: OK
+    headers:
+      Server:
+      - Cowboy
+      Connection:
+      - close
+      Date:
+      - Thu, 19 Feb 2015 15:25:06 GMT
+      Status:
+      - 200 OK
+      X-Frame-Options:
+      - SAMEORIGIN
+      X-Xss-Protection:
+      - 1; mode=block
+      X-Content-Type-Options:
+      - nosniff
+      Content-Type:
+      - application/json; charset=utf-8
+      Etag:
+      - W/"f3b0c963380b198b62bf64cc73b32e13"
+      Cache-Control:
+      - max-age=0, private, must-revalidate
+      X-Request-Id:
+      - 266192c3-9a4b-4374-952f-a500b9e764af
+      X-Runtime:
+      - '0.018491'
+      Via:
+      - 1.1 vegur
+    body:
+      encoding: UTF-8
+      string: '{"users":[{"id":"960dd380-85db-43c7-b79b-ed3f3c7d4a88","image":"https://secure.gravatar.com/avatar/ebfcbe366c47be18e8d3d6eb13d51d17?d=mm\u0026s=50","phone":"4075120689","email":"kurt@monsieur.co","name":null,"super_admin":false,"confirmed_at":"2000-01-01T18:46:46.786Z"}]}'
+    http_version: 
+  recorded_at: Thu, 19 Feb 2015 15:25:05 GMT
+recorded_with: VCR 2.9.3

data/spec/mixins/controller_mixin_spec.rb

@@ -0,0 +1,55 @@
+require 'spec_helper'
+require 'bouncer-client/controller_mixin'
+describe Bouncer::ControllerMixin do
+  let(:controller) { Object.new.extend Bouncer::ControllerMixin }
+  describe "#current_user" do
+    it 'returns nil if token is missing' do
+      stub_authorization "stuff"
+      expect(controller.current_user).to eq nil
+    end
+
+    it 'builds a token from Bearer' do
+      stub_authorization 'Bearer stuff'
+      VCR.use_cassette 'bouncer/valid_admin' do
+        expect(controller.current_user.user.email).to eq "kurt@monsieur.co"
+      end
+    end
+  end
+
+  describe "#authenticate_super_admin!" do
+    before do      
+      stub_authorization 'Bearer stuff'
+    end
+
+    it 'allows admin' do
+      VCR.use_cassette 'bouncer/valid_admin' do
+        expect{controller.authenticate_super_admin!}.to_not raise_error
+      end
+    end
+
+    it 'disallows users' do
+      VCR.use_cassette 'bouncer/valid_user' do
+        expect{controller.authenticate_super_admin!}.to raise_error(Bouncer::UnauthorizedError)
+      end
+    end
+  end
+
+  describe "#authenticate_device!" do
+    before { stub_authorization 'Bearer stuff' }
+    it 'allows devices' do
+      VCR.use_cassette 'bouncer/valid_device' do
+        expect{controller.authenticate_device!}.to_not raise_error
+      end
+    end
+
+    it 'disallows admins' do
+      VCR.use_cassette 'bouncer/valid_admin' do
+        expect{controller.authenticate_device!}.to raise_error(Bouncer::UnauthorizedError)
+      end
+    end
+  end
+
+  def stub_authorization str
+    allow(controller).to receive_message_chain(:request, :headers => {"authorization" => str} )
+  end
+end

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: bouncer-client
 version: !ruby/object:Gem::Version
-  version: 0.2.1
+  version: 0.2.2
 platform: ruby
 authors:
 - Kurt Nelson
@@ -52,6 +52,20 @@ dependencies:
     - - ">="
       - !ruby/object:Gem::Version
         version: '0'
+- !ruby/object:Gem::Dependency
+  name: activesupport
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: '0'
+  type: :development
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: '0'
 - !ruby/object:Gem::Dependency
   name: codeclimate-test-reporter
   requirement: !ruby/object:Gem::Requirement
@@ -237,6 +251,8 @@ files:
 - spec/cassettes/bouncer/user.yml
 - spec/cassettes/bouncer/valid_admin.yml
 - spec/cassettes/bouncer/valid_device.yml
+- spec/cassettes/bouncer/valid_user.yml
+- spec/mixins/controller_mixin_spec.rb
 - spec/model/token_spec.rb
 - spec/model/user_spec.rb
 - spec/spec_helper.rb
@@ -269,6 +285,8 @@ test_files:
 - spec/cassettes/bouncer/user.yml
 - spec/cassettes/bouncer/valid_admin.yml
 - spec/cassettes/bouncer/valid_device.yml
+- spec/cassettes/bouncer/valid_user.yml
+- spec/mixins/controller_mixin_spec.rb
 - spec/model/token_spec.rb
 - spec/model/user_spec.rb
 - spec/spec_helper.rb