casino 3.0.4 → 4.0.0.pre.1

Sign up to get free protection for your applications and to get access to all the features.
Files changed (149) hide show
  1. checksums.yaml +7 -0
  2. data/.travis.yml +12 -3
  3. data/app/api/casino/api.rb +7 -0
  4. data/app/api/casino/api/entity/auth_token_ticket.rb +5 -0
  5. data/app/api/casino/api/resource/auth_token_tickets.rb +12 -0
  6. data/app/assets/javascripts/casino/{application.js → application.js.erb} +1 -1
  7. data/app/authenticators/casino/static_authenticator.rb +8 -2
  8. data/app/builders/casino/proxy_response_builder.rb +24 -0
  9. data/app/builders/casino/ticket_validation_response_builder.rb +9 -5
  10. data/app/controllers/casino/application_controller.rb +0 -22
  11. data/app/controllers/casino/auth_tokens_controller.rb +34 -0
  12. data/app/controllers/casino/controller_concern/ticket_validator.rb +30 -0
  13. data/app/controllers/casino/proxy_tickets_controller.rb +42 -2
  14. data/app/controllers/casino/service_tickets_controller.rb +15 -2
  15. data/app/controllers/casino/sessions_controller.rb +59 -8
  16. data/app/controllers/casino/two_factor_authenticators_controller.rb +28 -3
  17. data/app/helpers/casino/sessions_helper.rb +75 -0
  18. data/app/helpers/casino/two_factor_authenticators_helper.rb +12 -0
  19. data/app/models/casino/auth_token_ticket.rb +15 -0
  20. data/app/models/casino/login_ticket.rb +7 -4
  21. data/app/models/casino/model_concern/consumable_ticket.rb +20 -0
  22. data/app/models/casino/model_concern/ticket.rb +28 -0
  23. data/app/models/casino/proxy_granting_ticket.rb +12 -0
  24. data/app/models/casino/proxy_ticket.rb +4 -0
  25. data/app/models/casino/service_ticket.rb +5 -4
  26. data/app/models/casino/ticket_granting_ticket.rb +5 -1
  27. data/app/models/casino/two_factor_authenticator.rb +2 -0
  28. data/app/processors/casino/authentication_processor.rb +73 -0
  29. data/app/processors/casino/browser_processor.rb +12 -0
  30. data/app/processors/casino/proxy_granting_ticket_processor.rb +37 -0
  31. data/app/processors/casino/service_ticket_processor.rb +81 -0
  32. data/app/processors/casino/ticket_granting_ticket_processor.rb +56 -0
  33. data/app/processors/casino/two_factor_authenticator_processor.rb +18 -0
  34. data/app/services/casino/auth_token_validation_service.rb +66 -0
  35. data/app/views/casino/sessions/index.html.erb +2 -2
  36. data/app/views/casino/sessions/new.html.erb +1 -1
  37. data/app/views/casino/sessions/validate_otp.html.erb +1 -1
  38. data/app/views/casino/two_factor_authenticators/new.html.erb +6 -3
  39. data/app/views/layouts/application.html.erb +0 -1
  40. data/casino.gemspec +4 -2
  41. data/config/locales/en.yml +35 -0
  42. data/config/locales/zh-CN.yml +88 -0
  43. data/config/locales/zh-TW.yml +88 -0
  44. data/config/routes.rb +3 -10
  45. data/db/migrate/20140831205255_create_auth_token_tickets.rb +10 -0
  46. data/lib/casino.rb +4 -1
  47. data/lib/casino/tasks/cleanup.rake +13 -1
  48. data/lib/casino/version.rb +1 -1
  49. data/spec/controllers/auth_tokens_controller_spec.rb +75 -0
  50. data/spec/controllers/proxy_tickets_controller_spec.rb +120 -14
  51. data/spec/controllers/service_and_proxy_tickets_controller_spec.rb +224 -0
  52. data/spec/controllers/service_tickets_controller_spec.rb +62 -16
  53. data/spec/controllers/sessions_controller_spec.rb +622 -36
  54. data/spec/controllers/two_factor_authenticators_controller_spec.rb +217 -18
  55. data/spec/dummy/config/cas.yml +3 -0
  56. data/spec/dummy/config/environments/development.rb +0 -4
  57. data/spec/dummy/db/migrate/{20130910094259_create_base_models.casino.rb → 20140831214845_create_core_schema.casino.rb} +55 -32
  58. data/spec/dummy/db/migrate/20140831214846_rename_base_models.casino.rb +102 -0
  59. data/spec/dummy/db/migrate/20140831214847_cleanup_indexes.casino.rb +28 -0
  60. data/spec/dummy/db/migrate/20140831214848_fix_long_index_names.casino.rb +13 -0
  61. data/spec/dummy/db/migrate/20140831214849_change_service_to_text.casino.rb +7 -0
  62. data/spec/dummy/db/migrate/20140831214850_change_user_agent_to_text.casino.rb +6 -0
  63. data/spec/dummy/db/migrate/20140831214851_fix_length_of_text_fields.casino.rb +8 -0
  64. data/spec/dummy/db/migrate/20140831214852_create_auth_token_tickets.casino.rb +11 -0
  65. data/spec/dummy/db/schema.rb +79 -70
  66. data/spec/features/login_spec.rb +0 -9
  67. data/spec/model/auth_token_ticket_spec.rb +23 -0
  68. data/spec/services/auth_token_validation_service_spec.rb +83 -0
  69. data/spec/support/sign_in.rb +4 -0
  70. metadata +139 -210
  71. data/app/controllers/casino/api/v1/tickets_controller.rb +0 -55
  72. data/app/helpers/service_tickets_helper.rb +0 -2
  73. data/app/listeners/casino/legacy_validator_listener.rb +0 -11
  74. data/app/listeners/casino/listener.rb +0 -16
  75. data/app/listeners/casino/login_credential_acceptor_listener.rb +0 -38
  76. data/app/listeners/casino/login_credential_requestor_listener.rb +0 -21
  77. data/app/listeners/casino/logout_listener.rb +0 -12
  78. data/app/listeners/casino/other_sessions_destroyer_listener.rb +0 -7
  79. data/app/listeners/casino/proxy_ticket_provider_listener.rb +0 -11
  80. data/app/listeners/casino/second_factor_authentication_acceptor_listener.rb +0 -26
  81. data/app/listeners/casino/session_destroyer_listener.rb +0 -11
  82. data/app/listeners/casino/session_overview_listener.rb +0 -11
  83. data/app/listeners/casino/ticket_validator_listener.rb +0 -11
  84. data/app/listeners/casino/two_factor_authenticator_activator_listener.rb +0 -23
  85. data/app/listeners/casino/two_factor_authenticator_destroyer_listener.rb +0 -16
  86. data/app/listeners/casino/two_factor_authenticator_overview_listener.rb +0 -11
  87. data/app/listeners/casino/two_factor_authenticator_registrator_listener.rb +0 -11
  88. data/app/processors/casino/api/login_credential_acceptor_processor.rb +0 -46
  89. data/app/processors/casino/api/logout_processor.rb +0 -17
  90. data/app/processors/casino/api/service_ticket_provider_processor.rb +0 -69
  91. data/app/processors/casino/legacy_validator_processor.rb +0 -19
  92. data/app/processors/casino/login_credential_acceptor_processor.rb +0 -63
  93. data/app/processors/casino/login_credential_requestor_processor.rb +0 -70
  94. data/app/processors/casino/logout_processor.rb +0 -23
  95. data/app/processors/casino/other_sessions_destroyer_processor.rb +0 -26
  96. data/app/processors/casino/processor.rb +0 -5
  97. data/app/processors/casino/processor_concern/authentication.rb +0 -87
  98. data/app/processors/casino/processor_concern/browser.rb +0 -14
  99. data/app/processors/casino/processor_concern/login_tickets.rb +0 -28
  100. data/app/processors/casino/processor_concern/proxy_granting_tickets.rb +0 -43
  101. data/app/processors/casino/processor_concern/proxy_tickets.rb +0 -56
  102. data/app/processors/casino/processor_concern/service_tickets.rb +0 -50
  103. data/app/processors/casino/processor_concern/ticket_granting_tickets.rb +0 -65
  104. data/app/processors/casino/processor_concern/tickets.rb +0 -17
  105. data/app/processors/casino/processor_concern/two_factor_authenticators.rb +0 -23
  106. data/app/processors/casino/proxy_ticket_provider_processor.rb +0 -41
  107. data/app/processors/casino/proxy_ticket_validator_processor.rb +0 -22
  108. data/app/processors/casino/second_factor_authentication_acceptor_processor.rb +0 -45
  109. data/app/processors/casino/service_ticket_validator_processor.rb +0 -46
  110. data/app/processors/casino/session_destroyer_processor.rb +0 -25
  111. data/app/processors/casino/session_overview_processor.rb +0 -21
  112. data/app/processors/casino/two_factor_authenticator_activator_processor.rb +0 -41
  113. data/app/processors/casino/two_factor_authenticator_destroyer_processor.rb +0 -33
  114. data/app/processors/casino/two_factor_authenticator_overview_processor.rb +0 -20
  115. data/app/processors/casino/two_factor_authenticator_registrator_processor.rb +0 -24
  116. data/spec/controllers/api/v1/tickets_controller_spec.rb +0 -114
  117. data/spec/controllers/listener/legacy_validator_spec.rb +0 -22
  118. data/spec/controllers/listener/login_credential_acceptor_spec.rb +0 -108
  119. data/spec/controllers/listener/login_credential_requestor_spec.rb +0 -57
  120. data/spec/controllers/listener/logout_spec.rb +0 -38
  121. data/spec/controllers/listener/other_sessions_destroyer_spec.rb +0 -19
  122. data/spec/controllers/listener/proxy_ticket_provider_spec.rb +0 -22
  123. data/spec/controllers/listener/second_factor_authentication_acceptor_spec.rb +0 -74
  124. data/spec/controllers/listener/session_destroyer_spec.rb +0 -25
  125. data/spec/controllers/listener/session_overview_spec.rb +0 -26
  126. data/spec/controllers/listener/ticket_validator_spec.rb +0 -22
  127. data/spec/controllers/listener/two_factor_authenticator_activator_spec.rb +0 -64
  128. data/spec/controllers/listener/two_factor_authenticator_destroyer_spec.rb +0 -40
  129. data/spec/controllers/listener/two_factor_authenticator_overview_spec.rb +0 -16
  130. data/spec/controllers/listener/two_factor_authenticator_registrator_spec.rb +0 -27
  131. data/spec/processor/api/login_credential_acceptor_spec.rb +0 -52
  132. data/spec/processor/api/logout_spec.rb +0 -34
  133. data/spec/processor/api/service_ticket_provider_spec.rb +0 -61
  134. data/spec/processor/legacy_validator_spec.rb +0 -78
  135. data/spec/processor/login_credential_acceptor_spec.rb +0 -164
  136. data/spec/processor/login_credential_requestor_spec.rb +0 -145
  137. data/spec/processor/logout_other_sessions_spec.rb +0 -53
  138. data/spec/processor/logout_spec.rb +0 -72
  139. data/spec/processor/processor_concern/service_tickets_spec.rb +0 -49
  140. data/spec/processor/proxy_ticket_provider_spec.rb +0 -66
  141. data/spec/processor/proxy_ticket_validator_spec.rb +0 -65
  142. data/spec/processor/second_factor_authenticaton_acceptor_spec.rb +0 -94
  143. data/spec/processor/session_destroyer_spec.rb +0 -75
  144. data/spec/processor/session_overview_spec.rb +0 -49
  145. data/spec/processor/ticket_validator_spec.rb +0 -214
  146. data/spec/processor/two_factor_authenticator_activator_spec.rb +0 -122
  147. data/spec/processor/two_factor_authenticator_destroyer_spec.rb +0 -71
  148. data/spec/processor/two_factor_authenticator_overview_spec.rb +0 -56
  149. data/spec/processor/two_factor_authenticator_registrator_spec.rb +0 -48
@@ -1,122 +0,0 @@
1
- require 'spec_helper'
2
-
3
- describe CASino::TwoFactorAuthenticatorActivatorProcessor do
4
- describe '#process' do
5
- let(:listener) { Object.new }
6
- let(:processor) { described_class.new(listener) }
7
- let(:cookies) { { tgt: tgt } }
8
-
9
- before(:each) do
10
- listener.stub(:user_not_logged_in)
11
- listener.stub(:two_factor_authenticator_activated)
12
- listener.stub(:invalid_two_factor_authenticator)
13
- listener.stub(:invalid_one_time_password)
14
- listener.stub(:two_factor_authenticator_activated)
15
- end
16
-
17
- context 'with an existing ticket-granting ticket' do
18
- let(:ticket_granting_ticket) { FactoryGirl.create :ticket_granting_ticket }
19
- let(:user) { ticket_granting_ticket.user }
20
- let(:tgt) { ticket_granting_ticket.ticket }
21
- let(:user_agent) { ticket_granting_ticket.user_agent }
22
- let(:id) { two_factor_authenticator.id }
23
- let(:otp) { '123456' }
24
- let(:params) { { otp: otp, id: id } }
25
-
26
- context 'with an invalid authenticator' do
27
- context 'with an expired authenticator' do
28
- let(:two_factor_authenticator) { FactoryGirl.create :two_factor_authenticator, :inactive, user: user }
29
-
30
- before(:each) do
31
- two_factor_authenticator.created_at = 10.hours.ago
32
- two_factor_authenticator.save!
33
- end
34
-
35
- it 'calls the `#invalid_two_factor_authenticator` method an the listener' do
36
- listener.should_receive(:invalid_two_factor_authenticator).with(no_args)
37
- processor.process(params, cookies, user_agent)
38
- end
39
- end
40
-
41
- context 'with a authenticator of another user' do
42
- let(:two_factor_authenticator) { FactoryGirl.create :two_factor_authenticator, :inactive }
43
-
44
- before(:each) do
45
- two_factor_authenticator.created_at = 10.hours.ago
46
- two_factor_authenticator.save!
47
- end
48
-
49
- it 'calls the `#invalid_two_factor_authenticator` method an the listener' do
50
- listener.should_receive(:invalid_two_factor_authenticator).with(no_args)
51
- processor.process(params, cookies, user_agent)
52
- end
53
- end
54
- end
55
-
56
- context 'with a valid authenticator' do
57
- let(:two_factor_authenticator) { FactoryGirl.create :two_factor_authenticator, :inactive, user: user }
58
-
59
- context 'with a valid OTP' do
60
- before(:each) do
61
- ROTP::TOTP.any_instance.should_receive(:verify_with_drift).with(otp, 30).and_return(true)
62
- end
63
-
64
- it 'calls the `#two_factor_authenticator_activated` method an the listener' do
65
- listener.should_receive(:two_factor_authenticator_activated).with(no_args)
66
- processor.process(params, cookies, user_agent)
67
- end
68
-
69
- it 'does activate the authenticator' do
70
- processor.process(params, cookies, user_agent)
71
- two_factor_authenticator.reload
72
- two_factor_authenticator.should be_active
73
- end
74
-
75
- context 'when another two-factor authenticator was active' do
76
- let!(:other_two_factor_authenticator) { FactoryGirl.create :two_factor_authenticator, user: user }
77
-
78
- it 'does activate the authenticator' do
79
- processor.process(params, cookies, user_agent)
80
- two_factor_authenticator.reload
81
- two_factor_authenticator.should be_active
82
- end
83
-
84
- it 'does delete the other authenticator' do
85
- processor.process(params, cookies, user_agent)
86
- lambda do
87
- other_two_factor_authenticator.reload
88
- end.should raise_error(ActiveRecord::RecordNotFound)
89
- end
90
- end
91
-
92
- end
93
-
94
- context 'with an invalid OTP' do
95
- before(:each) do
96
- ROTP::TOTP.any_instance.should_receive(:verify_with_drift).with(otp, 30).and_return(false)
97
- end
98
-
99
- it 'calls the `#invalid_one_time_password` method an the listener' do
100
- listener.should_receive(:invalid_one_time_password).with(two_factor_authenticator)
101
- processor.process(params, cookies, user_agent)
102
- end
103
-
104
- it 'does not activate the authenticator' do
105
- processor.process(params, cookies, user_agent)
106
- two_factor_authenticator.reload
107
- two_factor_authenticator.should_not be_active
108
- end
109
- end
110
- end
111
- end
112
-
113
- context 'with an invalid ticket-granting ticket' do
114
- let(:tgt) { 'TGT-lalala' }
115
- let(:user_agent) { 'TestBrowser 1.0' }
116
- it 'calls the #user_not_logged_in method on the listener' do
117
- listener.should_receive(:user_not_logged_in).with(no_args)
118
- processor.process(nil, cookies, user_agent)
119
- end
120
- end
121
- end
122
- end
@@ -1,71 +0,0 @@
1
- require 'spec_helper'
2
-
3
- describe CASino::TwoFactorAuthenticatorDestroyerProcessor do
4
- describe '#process' do
5
- let(:listener) { Object.new }
6
- let(:processor) { described_class.new(listener) }
7
- let(:cookies) { { tgt: tgt } }
8
-
9
- before(:each) do
10
- listener.stub(:user_not_logged_in)
11
- listener.stub(:two_factor_authenticator_destroyed)
12
- listener.stub(:invalid_two_factor_authenticator)
13
- end
14
-
15
- context 'with an existing ticket-granting ticket' do
16
- let(:ticket_granting_ticket) { FactoryGirl.create :ticket_granting_ticket }
17
- let(:user) { ticket_granting_ticket.user }
18
- let(:tgt) { ticket_granting_ticket.ticket }
19
- let(:user_agent) { ticket_granting_ticket.user_agent }
20
- let(:params) { { id: two_factor_authenticator.id } }
21
-
22
- context 'with a valid two-factor authenticator' do
23
- let!(:two_factor_authenticator) { FactoryGirl.create :two_factor_authenticator, user: user }
24
-
25
- it 'calls the #two_factor_authenticator_destroyed method on the listener' do
26
- listener.should_receive(:two_factor_authenticator_destroyed).with(no_args)
27
- processor.process(params, cookies, user_agent)
28
- end
29
-
30
- it 'deletes the two-factor authenticator' do
31
- processor.process(params, cookies, user_agent)
32
- lambda do
33
- two_factor_authenticator.reload
34
- end.should raise_error(ActiveRecord::RecordNotFound)
35
- end
36
-
37
- it 'does not delete other two-factor authenticators' do
38
- other = FactoryGirl.create :two_factor_authenticator
39
- lambda do
40
- processor.process(params, cookies, user_agent)
41
- end.should change(CASino::TwoFactorAuthenticator, :count).by(-1)
42
- end
43
- end
44
-
45
- context 'with a two-factor authenticator of another user' do
46
- let!(:two_factor_authenticator) { FactoryGirl.create :two_factor_authenticator }
47
-
48
- it 'calls the #invalid_two_factor_authenticator method on the listener' do
49
- listener.should_receive(:invalid_two_factor_authenticator).with(no_args)
50
- processor.process(params, cookies, user_agent)
51
- end
52
-
53
- it 'does not delete two-factor authenticators' do
54
- lambda do
55
- processor.process(params, cookies, user_agent)
56
- end.should_not change(CASino::TwoFactorAuthenticator, :count)
57
- end
58
- end
59
- end
60
-
61
- context 'with an invalid ticket-granting ticket' do
62
- let(:params) { {} }
63
- let(:tgt) { 'TGT-lalala' }
64
- let(:user_agent) { 'TestBrowser 1.0' }
65
- it 'calls the #user_not_logged_in method on the listener' do
66
- listener.should_receive(:user_not_logged_in).with(no_args)
67
- processor.process(params, cookies, user_agent)
68
- end
69
- end
70
- end
71
- end
@@ -1,56 +0,0 @@
1
- require 'spec_helper'
2
-
3
- describe CASino::TwoFactorAuthenticatorOverviewProcessor do
4
- describe '#process' do
5
- let(:listener) { Object.new }
6
- let(:processor) { described_class.new(listener) }
7
- let(:cookies) { { tgt: tgt } }
8
-
9
- before(:each) do
10
- listener.stub(:user_not_logged_in)
11
- listener.stub(:two_factor_authenticators_found)
12
- end
13
-
14
- context 'with an existing ticket-granting ticket' do
15
- let(:ticket_granting_ticket) { FactoryGirl.create :ticket_granting_ticket }
16
- let(:user) { ticket_granting_ticket.user }
17
- let(:tgt) { ticket_granting_ticket.ticket }
18
- let(:user_agent) { ticket_granting_ticket.user_agent }
19
-
20
- context 'without a two-factor authenticator registered' do
21
- it 'calls the #two_factor_authenticators_found method on the listener' do
22
- listener.should_receive(:two_factor_authenticators_found).with([])
23
- processor.process(cookies, user_agent)
24
- end
25
- end
26
-
27
- context 'with an inactive two-factor authenticator' do
28
- let!(:two_factor_authenticator) { FactoryGirl.create :two_factor_authenticator, :inactive, user: user }
29
-
30
- it 'does not include the inactive authenticator' do
31
- listener.should_receive(:two_factor_authenticators_found).with([])
32
- processor.process(cookies, user_agent)
33
- end
34
- end
35
-
36
- context 'with a two-factor authenticator registered' do
37
- let(:two_factor_authenticator) { FactoryGirl.create :two_factor_authenticator, user: user }
38
- let!(:other_two_factor_authenticator) { FactoryGirl.create :two_factor_authenticator }
39
-
40
- it 'calls the #two_factor_authenticators_found method on the listener' do
41
- listener.should_receive(:two_factor_authenticators_found).with([two_factor_authenticator])
42
- processor.process(cookies, user_agent)
43
- end
44
- end
45
- end
46
-
47
- context 'with an invalid ticket-granting ticket' do
48
- let(:tgt) { 'TGT-lalala' }
49
- let(:user_agent) { 'TestBrowser 1.0' }
50
- it 'calls the #user_not_logged_in method on the listener' do
51
- listener.should_receive(:user_not_logged_in).with(no_args)
52
- processor.process(cookies, user_agent)
53
- end
54
- end
55
- end
56
- end
@@ -1,48 +0,0 @@
1
- require 'spec_helper'
2
-
3
- describe CASino::TwoFactorAuthenticatorRegistratorProcessor do
4
- describe '#process' do
5
- let(:listener) { Object.new }
6
- let(:processor) { described_class.new(listener) }
7
- let(:cookies) { { tgt: tgt } }
8
-
9
- before(:each) do
10
- listener.stub(:user_not_logged_in)
11
- listener.stub(:two_factor_authenticator_registered)
12
- end
13
-
14
- context 'with an existing ticket-granting ticket' do
15
- let(:ticket_granting_ticket) { FactoryGirl.create :ticket_granting_ticket }
16
- let(:user) { ticket_granting_ticket.user }
17
- let(:tgt) { ticket_granting_ticket.ticket }
18
- let(:user_agent) { ticket_granting_ticket.user_agent }
19
-
20
- it 'creates exactly one authenticator' do
21
- lambda do
22
- processor.process(cookies, user_agent)
23
- end.should change(CASino::TwoFactorAuthenticator, :count).by(1)
24
- end
25
-
26
- it 'calls #two_factor_authenticator_created on the listener' do
27
- listener.should_receive(:two_factor_authenticator_registered) do |authenticator|
28
- authenticator.should == CASino::TwoFactorAuthenticator.last
29
- end
30
- processor.process(cookies, user_agent)
31
- end
32
-
33
- it 'creates an inactive two-factor authenticator' do
34
- processor.process(cookies, user_agent)
35
- CASino::TwoFactorAuthenticator.last.should_not be_active
36
- end
37
- end
38
-
39
- context 'with an invalid ticket-granting ticket' do
40
- let(:tgt) { 'TGT-lalala' }
41
- let(:user_agent) { 'TestBrowser 1.0' }
42
- it 'calls the #user_not_logged_in method on the listener' do
43
- listener.should_receive(:user_not_logged_in).with(no_args)
44
- processor.process(cookies, user_agent)
45
- end
46
- end
47
- end
48
- end