casino 0.0.1

data/app/controllers/casino/application_controller.rb

@@ -0,0 +1,19 @@
+require 'casino'
+require 'casino_core'
+
+class CASino::ApplicationController < ::ApplicationController
+  layout 'application'
+
+  include ApplicationHelper
+
+  def cookies
+    super
+  end
+
+  protected
+  def processor(processor_name, listener_name = nil)
+    listener_name ||= processor_name
+    listener = CASino::Listener.const_get(listener_name).new(self)
+    @processor = CASinoCore::Processor.const_get(processor_name).new(listener)
+  end
+end

data/app/controllers/casino/proxy_tickets_controller.rb

@@ -0,0 +1,9 @@
+class CASino::ProxyTicketsController < CASino::ApplicationController
+  def proxy_validate
+    processor(:ProxyTicketValidator, :TicketValidator).process(params)
+  end
+
+  def create
+    processor(:ProxyTicketProvider).process(params)
+  end
+end

data/app/controllers/casino/service_tickets_controller.rb

@@ -0,0 +1,9 @@
+class CASino::ServiceTicketsController < CASino::ApplicationController
+  def validate
+    processor(:LegacyValidator).process(params)
+  end
+
+  def service_validate
+    processor(:ServiceTicketValidator, :TicketValidator).process(params)
+  end
+end

data/app/controllers/casino/sessions_controller.rb

@@ -0,0 +1,23 @@
+class CASino::SessionsController < CASino::ApplicationController
+  include CASino::SessionsHelper
+
+  def index
+    processor(:SessionOverview).process(cookies, request.user_agent)
+  end
+
+  def new
+    processor(:LoginCredentialRequestor).process(params, cookies, request.user_agent)
+  end
+
+  def create
+    processor(:LoginCredentialAcceptor).process(params, cookies, request.user_agent)
+  end
+
+  def destroy
+    processor(:SessionDestroyer).process(params, cookies, request.user_agent)
+  end
+
+  def logout
+    processor(:Logout).process(params, cookies, request.user_agent)
+  end
+end

data/app/helpers/application_helper.rb

@@ -0,0 +1,2 @@
+module ApplicationHelper
+end

data/app/helpers/casino/sessions_helper.rb

@@ -0,0 +1,5 @@
+module CASino::SessionsHelper
+  def current_ticket_granting_ticket?(ticket_granting_ticket)
+    ticket_granting_ticket.ticket == cookies[:tgt]
+  end
+end

data/app/helpers/service_tickets_helper.rb

@@ -0,0 +1,2 @@
+module ServiceTicketsHelper
+end

data/app/views/casino/service_tickets/validate.text.erb

@@ -0,0 +1,2 @@
+<%= @username.blank? ? 'no' : 'yes' %>
+<%= @username %>

data/app/views/casino/sessions/index.html.erb

@@ -0,0 +1,43 @@
+<h1>Welcome</h1>
+<p>
+  You are currently logged in as <strong><%= @ticket_granting_tickets[0].username %></strong>.
+  <%= link_to 'Logout', logout_path %>
+</p>
+<h2>Sessions</h2>
+<p>
+  These are the web browsers currently logged in:
+</p>
+<table width="100%" class="tickets">
+  <thead>
+    <tr>
+      <th>Browser</th>
+      <th>Services</th>
+      <th>Most recent activity</th>
+      <th width="180">&nbsp;</th>
+    </tr>
+  </thead>
+  <tbody>
+    <% @ticket_granting_tickets.each do |ticket_granting_ticket| %>
+      <tr class="<%= 'highlighted' if current_ticket_granting_ticket?(ticket_granting_ticket) %>">
+        <td>
+          <span title="<%= ticket_granting_ticket.user_agent %>">
+            <%= ticket_granting_ticket.browser_info %>
+          </span>
+        </td>
+        <td>
+          <%= ticket_granting_ticket.service_tickets.size %>
+        </td>
+        <td>
+          <%= distance_of_time_in_words_to_now(ticket_granting_ticket.updated_at) %> ago
+        </td>
+        <td>
+          <% if current_ticket_granting_ticket?(ticket_granting_ticket) %>
+            <strong>Current session</strong>
+          <% else %>
+            <%= link_to 'End session', session_path(ticket_granting_ticket.id), method: :delete %>
+          <% end %>
+        </td>
+      </tr>
+    <% end %>
+  </tbody>
+</table>

data/app/views/casino/sessions/logout.html.erb

@@ -0,0 +1,8 @@
+<h1>Logged out</h1>
+<p>
+  <% if @url.nil? %>
+    <%= t('logout.logged_out_without_url') %>
+  <% else %>
+    <%= t('logout.logged_out_with_url') %> <a href="<%= @url %>"><%= @url %></a>
+  <% end %>
+</p>

data/app/views/casino/sessions/new.html.erb

@@ -0,0 +1,12 @@
+<h1>Login</h1>
+<%= form_tag(login_path, method: :post, id: 'login-form') do %>
+  <%= hidden_field_tag :lt, @login_ticket.ticket %>
+  <%= hidden_field_tag :service, params[:service] unless params[:service].nil? %>
+  <dl>
+    <dt><%= label_tag :username %></dt>
+    <dd><%= text_field_tag :username, params[:username] %></dd>
+    <dt><%= label_tag :password %></dt>
+    <dd><%= password_field_tag :password %></dd>
+  </dl>
+  <%= submit_tag "Login" %>
+<% end %>

data/app/views/layouts/application.html.erb

@@ -0,0 +1,18 @@
+<!DOCTYPE html>
+<html>
+<head>
+  <title>CASino</title>
+  <%= stylesheet_link_tag    "application", :media => "all" %>
+  <%= javascript_include_tag "application" %>
+  <%= csrf_meta_tags %>
+</head>
+<body>
+<% flash.each do |name, msg| %>
+  <% if msg.is_a?(String) %>
+    <%= content_tag :div, msg, :id => "flash_#{name}" %>
+  <% end %>
+<% end %>
+<%= yield %>
+
+</body>
+</html>

data/casino.gemspec

@@ -0,0 +1,29 @@
+# -*- encoding: utf-8 -*-
+$:.push File.expand_path('../lib', __FILE__)
+require 'casino/version'
+
+Gem::Specification.new do |s|
+  s.name        = 'casino'
+  s.version     = CASino::VERSION
+  s.authors     = ['Nils Caspar']
+  s.email       = ['ncaspar@me.com']
+  s.homepage    = 'http://rbcas.org/'
+  s.license     = 'MIT'
+  s.summary     = 'A simple CAS server written in Ruby using the Rails framework.'
+  s.description = 'CASino is a simple CAS (Central Authentication Service) server using CASinoCore as its backend.'
+
+  s.files         = `git ls-files`.split("\n")
+  s.test_files    = `git ls-files -- {test,spec,features}/*`.split("\n")
+  s.executables   = `git ls-files -- bin/*`.split("\n").map{ |f| File.basename(f) }
+  s.require_paths = ['lib']
+
+  s.add_development_dependency 'rake', '~> 10.0'
+  s.add_development_dependency 'rspec', '~> 2.12'
+  s.add_development_dependency 'rspec-rails', '~> 2.0'
+  s.add_development_dependency 'simplecov', '~> 0.7'
+  s.add_development_dependency 'sqlite3', '~> 1.3'
+
+  s.add_runtime_dependency 'rails', '~> 3.2.9'
+  s.add_runtime_dependency 'jquery-rails', '~> 2.1'
+  s.add_runtime_dependency 'casino_core', '~> 1.0'
+end

data/config/.gitignore

@@ -0,0 +1,3 @@
+database.yml
+yetting.yml
+cas.yml

data/config/initializers/inflections.rb

@@ -0,0 +1,19 @@
+# Be sure to restart your server when you modify this file.
+
+# Add new inflection rules using the following format
+# (all these examples are active by default):
+# ActiveSupport::Inflector.inflections do |inflect|
+#   inflect.plural /^(ox)$/i, '\1en'
+#   inflect.singular /^(ox)en/i, '\1'
+#   inflect.irregular 'person', 'people'
+#   inflect.uncountable %w( fish sheep )
+# end
+#
+# These inflection rules are supported but not enabled by default:
+# ActiveSupport::Inflector.inflections do |inflect|
+#   inflect.acronym 'RESTful'
+# end
+
+ActiveSupport::Inflector.inflections do |inflect|
+  inflect.acronym 'API'
+end

data/config/initializers/mime_types.rb

@@ -0,0 +1,5 @@
+# Be sure to restart your server when you modify this file.
+
+# Add new mime types for use in respond_to blocks:
+# Mime::Type.register "text/richtext", :rtf
+# Mime::Type.register_alias "text/html", :iphone

data/config/initializers/wrap_parameters.rb

@@ -0,0 +1,9 @@
+# Be sure to restart your server when you modify this file.
+#
+# This file contains settings for ActionController::ParamsWrapper which
+# is enabled by default.
+
+# Enable parameter wrapping for JSON. You can disable this by setting :format to an empty array.
+ActiveSupport.on_load(:action_controller) do
+  wrap_parameters format: [:json]
+end

data/config/initializers/yaml.rb

@@ -0,0 +1 @@
+YAML::ENGINE.yamler = 'syck'

data/config/locales/en.yml

@@ -0,0 +1,10 @@
+# Sample localization file for English. Add more files in this directory for other locales.
+# See https://github.com/svenfuchs/rails-i18n/tree/master/rails%2Flocale for starting points.
+
+en:
+  login_credential_acceptor:
+    invalid_login_ticket: "Your login request did not include a valid login ticket."
+    invalid_login_credentials: "Incorrect username or password."
+  logout:
+    logged_out_without_url: "You have successfully logged out."
+    logged_out_with_url: "The application you just logged out of has provided a link it would like you to follow:"

data/config/routes.rb

@@ -0,0 +1,82 @@
+CASino::Engine.routes.draw do
+  resources :sessions, only: [:index, :destroy]
+  get 'login' => 'sessions#new'
+  post 'login' => 'sessions#create'
+  get 'logout' => 'sessions#logout'
+
+  get 'validate' => 'service_tickets#validate'
+  get 'serviceValidate' => 'service_tickets#service_validate'
+
+  get 'proxyValidate' => 'proxy_tickets#proxy_validate'
+  get 'proxy' => 'proxy_tickets#create'
+
+  # api
+  scope '/cas' do
+    scope module: :api, as: :api do
+      namespace :v1 do
+        resources :tickets, only: [:create, :destroy] do
+          post :update, on: :member
+        end
+      end
+    end
+  end
+
+  root to: redirect('/login')
+
+  # The priority is based upon order of creation:
+  # first created -> highest priority.
+
+  # Sample of regular route:
+  #   match 'products/:id' => 'catalog#view'
+  # Keep in mind you can assign values other than :controller and :action
+
+  # Sample of named route:
+  #   match 'products/:id/purchase' => 'catalog#purchase', :as => :purchase
+  # This route can be invoked with purchase_url(:id => product.id)
+
+  # Sample resource route (maps HTTP verbs to controller actions automatically):
+  #   resources :products
+
+  # Sample resource route with options:
+  #   resources :products do
+  #     member do
+  #       get 'short'
+  #       post 'toggle'
+  #     end
+  #
+  #     collection do
+  #       get 'sold'
+  #     end
+  #   end
+
+  # Sample resource route with sub-resources:
+  #   resources :products do
+  #     resources :comments, :sales
+  #     resource :seller
+  #   end
+
+  # Sample resource route with more complex sub-resources
+  #   resources :products do
+  #     resources :comments
+  #     resources :sales do
+  #       get 'recent', :on => :collection
+  #     end
+  #   end
+
+  # Sample resource route within a namespace:
+  #   namespace :admin do
+  #     # Directs /admin/products/* to Admin::ProductsController
+  #     # (app/controllers/admin/products_controller.rb)
+  #     resources :products
+  #   end
+
+  # You can have the root of your site routed with "root"
+  # just remember to delete public/index.html.
+  # root :to => 'welcome#index'
+
+  # See how all your routes lay out with "rake routes"
+
+  # This is a legacy wild controller route that's not recommended for RESTful applications.
+  # Note: This route will make all actions in every controller accessible via GET requests.
+  # match ':controller(/:action(/:id))(.:format)'
+end

data/db/seeds.rb

@@ -0,0 +1,7 @@
+# This file should contain all the record creation needed to seed the database with its default values.
+# The data can then be loaded with the rake db:seed (or created alongside the db with db:setup).
+#
+# Examples:
+#
+#   cities = City.create([{ name: 'Chicago' }, { name: 'Copenhagen' }])
+#   Mayor.create(name: 'Emanuel', city: cities.first)

data/doc/README_FOR_APP

@@ -0,0 +1,2 @@
+Use this README file to introduce your application and point to useful places in the API for learning more.
+Run "rake doc:app" to generate API documentation for your models, controllers, helpers, and libraries.

data/lib/casino.rb

@@ -0,0 +1,6 @@
+require 'casino_core'
+require 'casino/engine'
+
+module CASino
+  autoload :Listener, 'casino/listener.rb'
+end

data/lib/casino/engine.rb

@@ -0,0 +1,7 @@
+require 'casino'
+
+module CASino
+  class Engine < Rails::Engine
+    isolate_namespace CASino
+  end
+end

data/lib/casino/listener.rb

@@ -0,0 +1,25 @@
+module CASino
+  class Listener
+
+    # include helpers to have the route path methods (like sessions_path)
+    include CASino::Engine.routes.url_helpers
+
+    autoload :LegacyValidator, 'casino/listener/legacy_validator.rb'
+    autoload :LoginCredentialAcceptor, 'casino/listener/login_credential_acceptor.rb'
+    autoload :LoginCredentialRequestor, 'casino/listener/login_credential_requestor.rb'
+    autoload :Logout, 'casino/listener/logout.rb'
+    autoload :ProxyTicketProvider, 'casino/listener/proxy_ticket_provider.rb'
+    autoload :SessionDestroyer, 'casino/listener/session_destroyer.rb'
+    autoload :SessionOverview, 'casino/listener/session_overview.rb'
+    autoload :TicketValidator, 'casino/listener/ticket_validator.rb'
+
+    def initialize(controller)
+      @controller = controller
+    end
+
+    protected
+    def assign(name, value)
+      @controller.instance_variable_set("@#{name}", value)
+    end
+  end
+end

data/lib/casino/listener/legacy_validator.rb

@@ -0,0 +1,11 @@
+require 'casino/listener'
+
+class CASino::Listener::LegacyValidator < CASino::Listener
+  def validation_failed(text)
+    @controller.render text: text, content_type: 'text/plain'
+  end
+
+  def validation_succeeded(text)
+    @controller.render text: text, content_type: 'text/plain'
+  end
+end

data/lib/casino/listener/login_credential_acceptor.rb

@@ -0,0 +1,28 @@
+require 'casino/listener'
+
+class CASino::Listener::LoginCredentialAcceptor < CASino::Listener
+  def user_logged_in(url, ticket_granting_ticket)
+    @controller.cookies[:tgt] = ticket_granting_ticket
+    if url.nil?
+      @controller.redirect_to sessions_path, status: :see_other
+    else
+      @controller.redirect_to url, status: :see_other
+    end
+  end
+
+  def invalid_login_credentials(login_ticket)
+    @controller.flash.now[:error] = I18n.t('login_credential_acceptor.invalid_login_credentials')
+    rerender_login_page(login_ticket)
+  end
+
+  def invalid_login_ticket(login_ticket)
+    @controller.flash.now[:error] = I18n.t('login_credential_acceptor.invalid_login_ticket')
+    rerender_login_page(login_ticket)
+  end
+
+  private
+  def rerender_login_page(login_ticket)
+    assign(:login_ticket, login_ticket)
+    @controller.render 'new', status: 403
+  end
+end