casino 0.0.1

data/lib/casino/listener/login_credential_requestor.rb

@@ -0,0 +1,16 @@
+require 'casino/listener'
+
+class CASino::Listener::LoginCredentialRequestor < CASino::Listener
+  def user_not_logged_in(login_ticket)
+    assign(:login_ticket, login_ticket)
+    @controller.cookies.delete :tgt
+  end
+
+  def user_logged_in(url)
+    if url.nil?
+      @controller.redirect_to sessions_path
+    else
+      @controller.redirect_to url, status: :see_other
+    end
+  end
+end

data/lib/casino/listener/logout.rb

@@ -0,0 +1,8 @@
+require 'casino/listener'
+
+class CASino::Listener::Logout < CASino::Listener
+  def user_logged_out(url)
+    assign(:url, url)
+    @controller.cookies.delete :tgt
+  end
+end

data/lib/casino/listener/proxy_ticket_provider.rb

@@ -0,0 +1,11 @@
+require 'casino/listener'
+
+class CASino::Listener::ProxyTicketProvider < CASino::Listener
+  def request_failed(xml)
+    @controller.render xml: xml
+  end
+
+  def request_succeeded(xml)
+    @controller.render xml: xml
+  end
+end

data/lib/casino/listener/session_destroyer.rb

@@ -0,0 +1,11 @@
+require 'casino/listener'
+
+class CASino::Listener::SessionDestroyer < CASino::Listener
+  def ticket_deleted
+    @controller.redirect_to(sessions_path)
+  end
+
+  def ticket_not_found
+    @controller.redirect_to(sessions_path)
+  end
+end

data/lib/casino/listener/session_overview.rb

@@ -0,0 +1,11 @@
+require 'casino/listener'
+
+class CASino::Listener::SessionOverview < CASino::Listener
+  def user_not_logged_in
+    @controller.redirect_to login_path
+  end
+
+  def ticket_granting_tickets_found(ticket_granting_tickets)
+    assign(:ticket_granting_tickets, ticket_granting_tickets)
+  end
+end

data/lib/casino/listener/ticket_validator.rb

@@ -0,0 +1,11 @@
+require 'casino/listener'
+
+class CASino::Listener::TicketValidator < CASino::Listener
+  def validation_failed(xml)
+    @controller.render xml: xml
+  end
+
+  def validation_succeeded(xml)
+    @controller.render xml: xml
+  end
+end

data/lib/casino/version.rb

@@ -0,0 +1,3 @@
+module CASino
+  VERSION = '0.0.1'
+end

data/lib/generators/casino/install_generator.rb

@@ -0,0 +1,37 @@
+require 'casino_core'
+
+module Casino # CASino would lead to c_a_sino...
+  class InstallGenerator < Rails::Generators::Base
+    source_root File.expand_path('../templates', __FILE__)
+
+    def copy_initializer_file
+      copy_file 'casino_core.rb', 'config/initializers/casino_core.rb'
+    end
+
+    def copy_config_files
+      copy_file 'cas.yml', 'config/cas.yml'
+      copy_file 'database.yml', 'config/database.yml'
+    end
+
+    def insert_assets_loader
+      insert_into_file 'app/assets/javascripts/application.js', :after => %r{//= require +['"]?jquery_ujs['"]?} do
+        "\n//= require casino"
+      end
+      insert_into_file "app/assets/stylesheets/application.css", :after => %r{\*= require_self} do
+        "\n *= require casino"
+      end
+    end
+
+    def insert_engine_routes
+      route "mount CASino::Engine => '/', :as => 'CASino'"
+    end
+
+    def remove_index_html
+      remove_file 'public/index.html'
+    end
+
+    def show_readme
+      readme 'README'
+    end
+  end
+end

data/lib/generators/casino/templates/README

@@ -0,0 +1,28 @@
+===============================================================================
+
+The CASino Engine has been correctly installed in your Rails application.
+
+  1. Edit the configuration files:
+
+    - config/cas.yml
+    - config/database.yml
+
+  2. Edit or delete (to use the integrated) layout file:
+
+    - app/views/layouts/application.html.erb
+
+  3. Load the database schema
+
+    > bundle exec rake casino_core:db:schema:load
+
+  4. Launch the server
+
+    > bundle exec rails server
+
+  5. Open your browser
+
+    > open http://localhost:3000/
+
+  6. Enjoy!
+
+===============================================================================

data/lib/generators/casino/templates/cas.yml

@@ -0,0 +1,44 @@
+defaults: &defaults
+  login_ticket:
+    lifetime: 600
+  service_ticket:
+    lifetime_unconsumed: 300
+    lifetime_consumed: 86400
+  proxy_ticket:
+    lifetime_unconsumed: 300
+    lifetime_consumed: 86400
+
+development:
+  <<: *defaults
+  authenticators:
+    static:
+      class: "CASinoCore::Authenticator::Static"
+      options:
+        users:
+          testuser:
+            password: "foobar123"
+
+test:
+  <<: *defaults
+  authenticators:
+    static:
+      class: "CASinoCore::Authenticator::Static"
+      options:
+        users:
+          testuser:
+            password: "foobar123"
+
+production:
+  <<: *defaults
+  authenticators:
+    my_company_ldap:
+      authenticator: "ldap"
+      options:
+        host: "localhost"
+        port: 12445
+        base: "dc=users,dc=example.com"
+        username_attribute: "uid"
+        encryption: "simple_tls"
+        extra_attributes:
+          email: "mail"
+          fullname: "displayname"

data/lib/generators/casino/templates/casino.css

@@ -0,0 +1,3 @@
+/*
+ *= require casino
+ */

data/lib/generators/casino/templates/casino.js

@@ -0,0 +1 @@
+//=require casino

data/lib/generators/casino/templates/casino_core.rb

@@ -0,0 +1 @@
+CASinoCore.setup Rails.env, application_root: Rails.root

data/lib/generators/casino/templates/database.yml

@@ -0,0 +1,25 @@
+# SQLite version 3.x
+#   gem install sqlite3
+#
+#   Ensure the SQLite 3 gem is defined in your Gemfile
+#   gem 'sqlite3'
+development:
+  adapter: sqlite3
+  database: db/development.sqlite3
+  pool: 5
+  timeout: 5000
+
+# Warning: The database defined as "test" will be erased and
+# re-generated from your development database when you run "rake".
+# Do not set this db to the same as development or production.
+test:
+  adapter: sqlite3
+  database: db/test.sqlite3
+  pool: 5
+  timeout: 5000
+
+production:
+  adapter: sqlite3
+  database: db/production.sqlite3
+  pool: 5
+  timeout: 5000

data/lib/tasks/login_tickets.rake

@@ -0,0 +1,7 @@
+namespace :login_tickets do
+  desc 'Remove expired login tickets.'
+  task cleanup: :environment do
+    rows_affected = LoginTicket.cleanup
+    puts "Deleted #{rows_affected} login tickets."
+  end
+end

data/lib/tasks/service_tickets.rake

@@ -0,0 +1,9 @@
+namespace :service_tickets do
+  desc 'Remove expired service tickets.'
+  task cleanup: :environment do
+    [:consumed, :unconsumed].each do |type|
+      rows_affected = ServiceTicket.send("cleanup_#{type}")
+      puts "Deleted #{rows_affected} #{type} service tickets."
+    end
+  end
+end

data/public/404.html

@@ -0,0 +1,26 @@
+<!DOCTYPE html>
+<html>
+<head>
+  <title>The page you were looking for doesn't exist (404)</title>
+  <style type="text/css">
+    body { background-color: #fff; color: #666; text-align: center; font-family: arial, sans-serif; }
+    div.dialog {
+      width: 25em;
+      padding: 0 4em;
+      margin: 4em auto 0 auto;
+      border: 1px solid #ccc;
+      border-right-color: #999;
+      border-bottom-color: #999;
+    }
+    h1 { font-size: 100%; color: #f00; line-height: 1.5em; }
+  </style>
+</head>
+
+<body>
+  <!-- This file lives in public/404.html -->
+  <div class="dialog">
+    <h1>The page you were looking for doesn't exist.</h1>
+    <p>You may have mistyped the address or the page may have moved.</p>
+  </div>
+</body>
+</html>

data/public/422.html

@@ -0,0 +1,26 @@
+<!DOCTYPE html>
+<html>
+<head>
+  <title>The change you wanted was rejected (422)</title>
+  <style type="text/css">
+    body { background-color: #fff; color: #666; text-align: center; font-family: arial, sans-serif; }
+    div.dialog {
+      width: 25em;
+      padding: 0 4em;
+      margin: 4em auto 0 auto;
+      border: 1px solid #ccc;
+      border-right-color: #999;
+      border-bottom-color: #999;
+    }
+    h1 { font-size: 100%; color: #f00; line-height: 1.5em; }
+  </style>
+</head>
+
+<body>
+  <!-- This file lives in public/422.html -->
+  <div class="dialog">
+    <h1>The change you wanted was rejected.</h1>
+    <p>Maybe you tried to change something you didn't have access to.</p>
+  </div>
+</body>
+</html>

data/public/500.html

@@ -0,0 +1,25 @@
+<!DOCTYPE html>
+<html>
+<head>
+  <title>We're sorry, but something went wrong (500)</title>
+  <style type="text/css">
+    body { background-color: #fff; color: #666; text-align: center; font-family: arial, sans-serif; }
+    div.dialog {
+      width: 25em;
+      padding: 0 4em;
+      margin: 4em auto 0 auto;
+      border: 1px solid #ccc;
+      border-right-color: #999;
+      border-bottom-color: #999;
+    }
+    h1 { font-size: 100%; color: #f00; line-height: 1.5em; }
+  </style>
+</head>
+
+<body>
+  <!-- This file lives in public/500.html -->
+  <div class="dialog">
+    <h1>We're sorry, but something went wrong.</h1>
+  </div>
+</body>
+</html>

data/public/robots.txt

@@ -0,0 +1,5 @@
+# See http://www.robotstxt.org/wc/norobots.html for documentation on how to use the robots.txt file
+#
+# To ban all spiders from the entire site uncomment the next two lines:
+# User-Agent: *
+# Disallow: /

data/script/rails

@@ -0,0 +1,8 @@
+#!/usr/bin/env ruby
+# This command will automatically be run when you run "rails" with Rails 3 gems installed from the root of your application.
+
+ENGINE_ROOT = File.expand_path('../..', __FILE__)
+ENGINE_PATH = File.expand_path('../../lib/casino/engine', __FILE__)
+
+require 'rails/all'
+require 'rails/engine/commands'

data/spec/controllers/api/v1/tickets_controller_spec.rb

@@ -0,0 +1,100 @@
+require 'spec_helper'
+
+describe CASino::API::V1::TicketsController do
+
+  describe "POST /cas/v1/tickets" do
+    context "with correct credentials" do
+
+      before do
+        CASinoCore::Processor::API::LoginCredentialAcceptor.any_instance.should_receive(:process) do
+          @controller.user_logged_in_via_api "TGT-long-string"
+        end
+
+        post :create, params: {username: 'valid', password: 'valid'}
+      end
+
+      subject { response }
+      its(:response_code) { should eq 201 }
+      its(:location) { should eq 'http://test.host/cas/v1/tickets/TGT-long-string' }
+    end
+
+    context "with incorrect credentials" do
+
+      before do
+        CASinoCore::Processor::API::LoginCredentialAcceptor.any_instance.should_receive(:process) do
+          @controller.invalid_login_credentials_via_api
+        end
+
+        post :create, params: {username: 'invalid', password: 'invalid'}
+      end
+
+      subject { response }
+      its(:response_code) { should eq 400 }
+    end
+  end
+
+  describe "POST /cas/v1/tickets/{TGT id}" do
+
+    context "with a valid TGT" do
+
+      before do
+        CASinoCore::Processor::API::ServiceTicketProvider.any_instance.should_receive(:process).with('TGT-valid', kind_of(Hash), request.user_agent) do |ticket, params|
+          params.should == controller.params
+          @controller.granted_service_ticket_via_api 'ST-1-VALIDSERVICETICKET'
+        end
+        post :update, id: 'TGT-valid', service: 'http://example.org/'
+      end
+
+      subject { response }
+
+      its(:response_code) { should eq 200 }
+      its(:body) { should eq 'ST-1-VALIDSERVICETICKET' }
+    end
+
+    context "with an invalid TGT" do
+
+      before do
+        CASinoCore::Processor::API::ServiceTicketProvider.any_instance.should_receive(:process).with('TGT-invalid', kind_of(Hash), request.user_agent) do |ticket, params|
+          params.should == controller.params
+          @controller.invalid_ticket_granting_ticket_via_api
+        end
+        post :update, id: 'TGT-invalid', service: 'http://example.org/'
+      end
+
+      subject { response }
+
+      its(:response_code) { should eq 400 }
+
+    end
+
+    context "without a service" do
+
+      before do
+        CASinoCore::Processor::API::ServiceTicketProvider.any_instance.should_receive(:process).with('TGT-valid', kind_of(Hash), request.user_agent) do |ticket, params|
+          params.should == controller.params
+          @controller.no_service_provided_via_api
+        end
+        post :update, id: 'TGT-valid'
+      end
+
+      subject { response }
+
+      its(:response_code) { should eq 400 }
+
+    end
+  end
+
+  describe "DELETE /cas/v1/tickets/TGT-fdsjfsdfjkalfewrihfdhfaie" do
+     before do
+      CASinoCore::Processor::API::Logout.any_instance.should_receive(:process).with('TGT-fdsjfsdfjkalfewrihfdhfaie', request.user_agent) do
+        @controller.user_logged_out_via_api
+      end
+      post :destroy, id: 'TGT-fdsjfsdfjkalfewrihfdhfaie'
+    end
+
+    subject { response }
+
+    its(:response_code) { should eq 200 }
+  end
+
+end