casino_core 0.0.5 → 0.0.6

data/Gemfile

@@ -17,6 +17,7 @@ group :development, :test do
   gem 'simplecov', '~> 0.7.1'
   gem 'sqlite3'
   gem 'database_cleaner'
+  gem 'webmock'
 end
 
 gem 'activerecord', '~> 3.2.9'

data/Gemfile.lock

@@ -15,6 +15,7 @@ GEM
     addressable (2.3.2)
     arel (3.0.2)
     builder (3.0.4)
+    crack (0.3.1)
     database_cleaner (0.9.1)
     diff-lcs (1.1.3)
     git (1.2.5)
@@ -25,8 +26,8 @@ GEM
       rake
       rdoc
     json (1.7.5)
-    multi_json (1.4.0)
-    rake (10.0.2)
+    multi_json (1.5.0)
+    rake (10.0.3)
     rdoc (3.12)
       json (~> 1.4)
     redcarpet (2.2.2)
@@ -34,10 +35,10 @@ GEM
       rspec-core (~> 2.12.0)
       rspec-expectations (~> 2.12.0)
       rspec-mocks (~> 2.12.0)
-    rspec-core (2.12.0)
-    rspec-expectations (2.12.0)
+    rspec-core (2.12.2)
+    rspec-expectations (2.12.1)
       diff-lcs (~> 1.1.3)
-    rspec-mocks (2.12.0)
+    rspec-mocks (2.12.1)
     simplecov (0.7.1)
       multi_json (~> 1.0)
       simplecov-html (~> 0.7.1)
@@ -45,6 +46,9 @@ GEM
     sqlite3 (1.3.6)
     tzinfo (0.3.35)
     useragent (0.4.15)
+    webmock (1.9.0)
+      addressable (>= 2.2.7)
+      crack (>= 0.1.7)
     yard (0.8.3)
 
 PLATFORMS
@@ -61,4 +65,5 @@ DEPENDENCIES
   simplecov (~> 0.7.1)
   sqlite3
   useragent (~> 0.4.13)
+  webmock
   yard (~> 0.8.3)

data/VERSION

@@ -1 +1 @@
-0.0.5
+0.0.6

data/casino_core.gemspec

@@ -5,11 +5,11 @@
 
 Gem::Specification.new do |s|
   s.name = "casino_core"
-  s.version = "0.0.5"
+  s.version = "0.0.6"
 
   s.required_rubygems_version = Gem::Requirement.new(">= 0") if s.respond_to? :required_rubygems_version=
   s.authors = ["Nils Caspar"]
-  s.date = "2012-12-19"
+  s.date = "2012-12-24"
   s.description = "A CAS server core library."
   s.email = "ncaspar@me.com"
   s.extra_rdoc_files = [
@@ -41,6 +41,7 @@ Gem::Specification.new do |s|
     "db/migrate/20121125091934_add_issued_from_credentials_to_service_tickets.rb",
     "db/migrate/20121125185415_create_proxy_granting_tickets.rb",
     "db/migrate/20121125190013_tickets_should_be_unique.rb",
+    "db/migrate/20121223135227_proxy_granting_tickets_belongs_to_service_ticket.rb",
     "db/schema.rb",
     "lib/casino_core.rb",
     "lib/casino_core/authenticator.rb",
@@ -49,6 +50,7 @@ Gem::Specification.new do |s|
     "lib/casino_core/helper/browser.rb",
     "lib/casino_core/helper/logger.rb",
     "lib/casino_core/helper/login_tickets.rb",
+    "lib/casino_core/helper/proxy_granting_tickets.rb",
     "lib/casino_core/helper/service_tickets.rb",
     "lib/casino_core/helper/ticket_granting_tickets.rb",
     "lib/casino_core/helper/tickets.rb",
@@ -63,6 +65,7 @@ Gem::Specification.new do |s|
     "lib/casino_core/processor/login_credential_acceptor.rb",
     "lib/casino_core/processor/login_credential_requestor.rb",
     "lib/casino_core/processor/logout.rb",
+    "lib/casino_core/processor/service_ticket_validator.rb",
     "lib/casino_core/processor/session_destroyer.rb",
     "lib/casino_core/processor/session_overview.rb",
     "lib/casino_core/railtie.rb",
@@ -77,6 +80,7 @@ Gem::Specification.new do |s|
     "spec/processor/login_credential_acceptor_spec.rb",
     "spec/processor/login_credential_requestor_spec.rb",
     "spec/processor/logout_spec.rb",
+    "spec/processor/service_ticket_validator_spec.rb",
     "spec/processor/session_destroyer_spec.rb",
     "spec/processor/session_overview_spec.rb",
     "spec/spec_helper.rb"
@@ -102,6 +106,7 @@ Gem::Specification.new do |s|
       s.add_development_dependency(%q<simplecov>, ["~> 0.7.1"])
       s.add_development_dependency(%q<sqlite3>, [">= 0"])
       s.add_development_dependency(%q<database_cleaner>, [">= 0"])
+      s.add_development_dependency(%q<webmock>, [">= 0"])
     else
       s.add_dependency(%q<activerecord>, ["~> 3.2.9"])
       s.add_dependency(%q<addressable>, ["~> 2.3.2"])
@@ -114,6 +119,7 @@ Gem::Specification.new do |s|
       s.add_dependency(%q<simplecov>, ["~> 0.7.1"])
       s.add_dependency(%q<sqlite3>, [">= 0"])
       s.add_dependency(%q<database_cleaner>, [">= 0"])
+      s.add_dependency(%q<webmock>, [">= 0"])
     end
   else
     s.add_dependency(%q<activerecord>, ["~> 3.2.9"])
@@ -127,6 +133,7 @@ Gem::Specification.new do |s|
     s.add_dependency(%q<simplecov>, ["~> 0.7.1"])
     s.add_dependency(%q<sqlite3>, [">= 0"])
     s.add_dependency(%q<database_cleaner>, [">= 0"])
+    s.add_dependency(%q<webmock>, [">= 0"])
   end
 end
 

data/config/cas.yml

@@ -13,7 +13,8 @@ development:
       options:
         users:
           testuser:
-            password: foobar123
+            password: "foobar123"
+            name: "Test User"
 
 test:
   <<: *defaults
@@ -23,4 +24,5 @@ test:
       options:
         users:
           testuser:
-            password: foobar123
+            password: "foobar123"
+            name: "Test User"

data/db/migrate/20121223135227_proxy_granting_tickets_belongs_to_service_ticket.rb

@@ -0,0 +1,14 @@
+require 'casino_core/model'
+
+class ProxyGrantingTicketsBelongsToServiceTicket < ActiveRecord::Migration
+  def change
+    CASinoCore::Model::ProxyGrantingTicket.delete_all
+
+    remove_index :proxy_granting_tickets, :ticket_granting_ticket_id
+    remove_column :proxy_granting_tickets, :ticket_granting_ticket_id
+
+    add_column :proxy_granting_tickets, :service_ticket_id, :integer
+    change_column :proxy_granting_tickets, :service_ticket_id, :integer, null: false
+    add_index :proxy_granting_tickets, :service_ticket_id
+  end
+end

data/db/schema.rb

@@ -11,7 +11,7 @@
 #
 # It's strongly recommended to check this file into your version control system.
 
-ActiveRecord::Schema.define(:version => 20121125190013) do
+ActiveRecord::Schema.define(:version => 20121223135227) do
 
   create_table "login_tickets", :force => true do |t|
     t.string   "ticket",     :null => false
@@ -22,16 +22,16 @@ ActiveRecord::Schema.define(:version => 20121125190013) do
   add_index "login_tickets", ["ticket"], :name => "index_login_tickets_on_ticket", :unique => true
 
   create_table "proxy_granting_tickets", :force => true do |t|
-    t.string   "ticket",                    :null => false
-    t.string   "iou",                       :null => false
-    t.integer  "ticket_granting_ticket_id", :null => false
-    t.datetime "created_at",                :null => false
-    t.datetime "updated_at",                :null => false
+    t.string   "ticket",            :null => false
+    t.string   "iou",               :null => false
+    t.datetime "created_at",        :null => false
+    t.datetime "updated_at",        :null => false
+    t.integer  "service_ticket_id", :null => false
   end
 
   add_index "proxy_granting_tickets", ["iou"], :name => "index_proxy_granting_tickets_on_iou", :unique => true
+  add_index "proxy_granting_tickets", ["service_ticket_id"], :name => "index_proxy_granting_tickets_on_service_ticket_id"
   add_index "proxy_granting_tickets", ["ticket"], :name => "index_proxy_granting_tickets_on_ticket", :unique => true
-  add_index "proxy_granting_tickets", ["ticket_granting_ticket_id"], :name => "index_proxy_granting_tickets_on_ticket_granting_ticket_id"
 
   create_table "service_tickets", :force => true do |t|
     t.string   "ticket",                                       :null => false

data/lib/casino_core/helper/logger.rb

@@ -1,11 +1,10 @@
+require 'casino_core/settings'
+
 module CASinoCore
   module Helper
     module Logger
       def logger
-        # TODO this is just a "silent logger", make logger a setting!
-        logger = ::Logger.new(STDOUT)
-        logger.level = ::Logger::Severity::UNKNOWN
-        logger
+        CASinoCore::Settings.logger
       end
     end
   end

data/lib/casino_core/helper/proxy_granting_tickets.rb

@@ -0,0 +1,45 @@
+require 'addressable/uri'
+require 'net/https'
+
+require 'casino_core/helper/logger'
+require 'casino_core/helper/tickets'
+
+module CASinoCore
+  module Helper
+    module ProxyGrantingTickets
+      include CASinoCore::Helper::Logger
+      include CASinoCore::Helper::Tickets
+
+      def acquire_proxy_granting_ticket(pgt_url, service_ticket)
+        begin
+          uri = Addressable::URI.parse(pgt_url)
+          https = Net::HTTP.new(uri.host, uri.port || 443)
+          https.use_ssl = true
+
+          https.start do |conn|
+            pgt = service_ticket.proxy_granting_tickets.new({
+              ticket: random_ticket_string('PGT'),
+              iou: random_ticket_string('PGTIOU')
+            })
+
+            uri.query_values = (uri.query_values || {}).merge(pgtId: pgt.ticket, pgtIou: pgt.iou)
+
+            response = conn.request_get(uri.request_uri)
+            # TODO: follow redirects... 2.5.4 says that redirects MAY be followed
+            if "#{response.code}" == "200"
+              # 3.4 (proxy-granting ticket IOU)
+              pgt.save!
+              logger.debug "Proxy-granting ticket generated for pgt_url '#{pgt_url}': #{pgt.inspect}"
+              return pgt
+            else
+              logger.warn "Proxy-granting ticket callback server responded with a bad result code '#{response.code}'. PGT will not be stored."
+            end
+          end
+        rescue Timeout::Error, Errno::EINVAL, Errno::ECONNRESET, EOFError, Net::HTTPBadResponse, Net::HTTPHeaderSyntaxError, Net::ProtocolError
+          logger.warn "Exception while communication with proxy-granting ticket callback server: #{e.message}"
+        end
+        nil
+      end
+    end
+  end
+end

data/lib/casino_core/helper/service_tickets.rb

@@ -26,6 +26,40 @@ module CASinoCore
 
         clean_service
       end
+
+      def validate_service_ticket_for_service(ticket, service, renew = false)
+        result = if service.nil? or ticket.nil?
+          logger.warn 'Invalid validate request: no valid ticket or no valid service given'
+          'INVALID_REQUEST'
+        else
+          if ticket.consumed?
+            logger.warn "Service ticket '#{ticket.ticket}' already consumed"
+            'INVALID_TICKET'
+          elsif Time.now - ticket.created_at > CASinoCore::Settings.service_ticket[:lifetime_unconsumed]
+            logger.warn "Service ticket '#{ticket.ticket}' has expired"
+            'INVALID_TICKET'
+          elsif clean_service_url(service) != ticket.service
+            logger.warn "Service ticket '#{ticket.ticket}' is not valid for service '#{service}'"
+            'INVALID_SERVICE'
+          elsif renew && !ticket.issued_from_credentials?
+            logger.info "Service ticket '#{ticket.ticket}' was not issued from credentials but service '#{service}' will only accept a renewed ticket"
+            'INVALID_TICKET'
+          else
+            logger.info "Service ticket '#{ticket.ticket}' for service '#{service}' successfully validated"
+            true
+          end
+        end
+        unless ticket.nil?
+          logger.debug "Consumed ticket '#{ticket.ticket}'"
+          ticket.consumed = true
+          ticket.save!
+        end
+        result
+      end
+
+      def service_ticket_valid_for_service?(ticket, service, renew = false)
+        validate_service_ticket_for_service(ticket, service, renew) == true
+      end
     end
   end
 end

data/lib/casino_core/helper.rb

@@ -6,6 +6,7 @@ module CASinoCore
     autoload :Browser, 'casino_core/helper/browser.rb'
     autoload :Logger, 'casino_core/helper/logger.rb'
     autoload :LoginTickets, 'casino_core/helper/login_tickets.rb'
+    autoload :ProxyGrantingTickets, 'casino_core/helper/proxy_granting_tickets.rb'
     autoload :ServiceTickets, 'casino_core/helper/service_tickets.rb'
     autoload :Tickets, 'casino_core/helper/tickets.rb'
     autoload :TicketGrantingTickets, 'casino_core/helper/ticket_granting_tickets.rb'

data/lib/casino_core/model/proxy_granting_ticket.rb

@@ -1,8 +1,8 @@
 require 'casino_core/model'
 
 class CASinoCore::Model::ProxyGrantingTicket < ActiveRecord::Base
-  attr_accessible :iou, :ticket, :ticket_granting_ticket_id
+  attr_accessible :iou, :ticket, :service_ticket_id
   validates :ticket, uniqueness: true
   validates :iou, uniqueness: true
-  belongs_to :ticket_granting_ticket
+  belongs_to :service_ticket
 end

data/lib/casino_core/model/service_ticket.rb

@@ -9,6 +9,7 @@ class CASinoCore::Model::ServiceTicket < ActiveRecord::Base
   validates :ticket, uniqueness: true
   belongs_to :ticket_granting_ticket
   before_destroy :send_single_sing_out_notification
+  has_many :proxy_granting_tickets
 
   def self.cleanup_unconsumed
     self.delete_all(['created_at < ? AND consumed = ?', CASinoCore::Settings.service_ticket[:lifetime_unconsumed].seconds.ago, false])

data/lib/casino_core/model/ticket_granting_ticket.rb

@@ -5,7 +5,6 @@ class CASinoCore::Model::TicketGrantingTicket < ActiveRecord::Base
   serialize :extra_attributes, Hash
   validates :ticket, uniqueness: true
   has_many :service_tickets
-  has_many :proxy_granting_tickets
 
   def browser_info
     user_agent = UserAgent.parse(self.user_agent)

data/lib/casino_core/processor/legacy_validator.rb

@@ -8,48 +8,17 @@ class CASinoCore::Processor::LegacyValidator < CASinoCore::Processor
   include CASinoCore::Helper::ServiceTickets
 
   # This method will call `#validation_succeeded` or `#validation_failed`. In both cases, it supplies
-  # a string as argument. The webapplication should present that string (and nothing else) to the
+  # a string as argument. The web application should present that string (and nothing else) to the
   # requestor.
   #
   # @param [Hash] params parameters supplied by requestor (a service)
   def process(params = nil)
     params ||= {}
     ticket = CASinoCore::Model::ServiceTicket.where(ticket: params[:ticket]).first
-    if ticket_valid_for_service?(ticket, params[:service], !!params[:renew])
+    if service_ticket_valid_for_service?(ticket, params[:service], !!params[:renew])
       @listener.validation_succeeded("yes\n#{ticket.ticket_granting_ticket.username}\n")
     else
       @listener.validation_failed("no\n\n")
     end
   end
-
-  private
-  def ticket_valid_for_service?(ticket, service, renew = false)
-    ticket_valid = if service.nil? or ticket.nil?
-      logger.warn 'Invalid validate request: no valid ticket or no valid service given'
-      false
-    else
-      if ticket.consumed?
-        logger.warn "Service ticket '#{ticket.ticket}' already consumed"
-        false
-      elsif Time.now - ticket.created_at > CASinoCore::Settings.service_ticket[:lifetime_unconsumed]
-        logger.warn "Service ticket '#{ticket.ticket}' has expired"
-        false
-      elsif clean_service_url(service) != ticket.service
-        logger.warn "Service ticket '#{ticket.ticket}' is not valid for service '#{service}'"
-        false
-      elsif renew && !ticket.issued_from_credentials?
-        logger.info "Service ticket '#{ticket.ticket}' was not issued from credentials but service '#{service}' will only accept a renewed ticket"
-        false
-      else
-        logger.info "Service ticket '#{ticket.ticket}' for service '#{service}' successfully validated"
-        true
-      end
-    end
-    unless ticket.nil?
-      logger.debug "Consumed ticket '#{ticket.ticket}'"
-      ticket.consumed = true
-      ticket.save!
-    end
-    ticket_valid
-  end
 end

data/lib/casino_core/processor/service_ticket_validator.rb

@@ -0,0 +1,69 @@
+require 'builder'
+require 'casino_core/processor'
+require 'casino_core/helper'
+require 'casino_core/model'
+
+# The ServiceTicketValidator processor should be used to handle GET requests to /serviceValidate
+class CASinoCore::Processor::ServiceTicketValidator < CASinoCore::Processor
+  include CASinoCore::Helper::ServiceTickets
+  include CASinoCore::Helper::ProxyGrantingTickets
+
+  # This method will call `#validation_succeeded` or `#validation_failed`. In both cases, it supplies
+  # a string as argument. The web application should present that string (and nothing else) to the
+  # requestor. The Content-Type should be set to 'text/xml; charset=utf-8'
+  #
+  # @param [Hash] params parameters delivered by the client
+  def process(params = nil)
+    params ||= {}
+    ticket = CASinoCore::Model::ServiceTicket.where(ticket: params[:ticket]).first
+    validation_result = validate_service_ticket_for_service(ticket, params[:service], !!params[:renew])
+    if validation_result == true
+      options = { service_ticket: ticket }
+      unless params[:pgtUrl].nil?
+        options[:proxy_granting_ticket] = acquire_proxy_granting_ticket(params[:pgtUrl], ticket)
+      end
+      @listener.validation_succeeded(build_xml(true, options))
+    else
+      @listener.validation_failed(build_xml(false, error_code: validation_result, error_message: 'Validation failed'))
+    end
+  end
+
+  private
+  def build_xml(success, options = {})
+    xml = Builder::XmlMarkup.new(indent: 2)
+    xml.cas :serviceResponse, 'xmlns:cas' => 'http://www.yale.edu/tp/cas' do |service_response|
+      if success
+        ticket_granting_ticket = options[:service_ticket].ticket_granting_ticket
+        service_response.cas :authenticationSuccess do |authentication_success|
+          authentication_success.cas :user, ticket_granting_ticket.username
+          unless ticket_granting_ticket.extra_attributes.blank?
+            authentication_success.cas :attributes do |attributes|
+              ticket_granting_ticket.extra_attributes.each do |key, value|
+                serialize_extra_attribute(attributes, key, value)
+              end
+            end
+          end
+          if options[:proxy_granting_ticket]
+            proxy_granting_ticket = options[:proxy_granting_ticket]
+            authentication_success.cas :proxyGrantingTicket, proxy_granting_ticket.iou
+          end
+        end
+      else
+        service_response.cas :authenticationFailure, options[:error_message], code: options[:error_code]
+      end
+    end
+    xml.target!
+  end
+
+  def serialize_extra_attribute(builder, key, value)
+    if value.kind_of?(String) || value.kind_of?(Numeric) || value.kind_of?(Symbol)
+      builder.cas key, "#{value}"
+    elsif value.kind_of?(Numeric)
+      builder.cas key, value.to_s
+    else
+      builder.cas key do
+        builder.cdata! value.to_yaml
+      end
+    end
+  end
+end

data/lib/casino_core/processor.rb

@@ -6,6 +6,7 @@ module CASinoCore
     autoload :LoginCredentialAcceptor, 'casino_core/processor/login_credential_acceptor.rb'
     autoload :LoginCredentialRequestor, 'casino_core/processor/login_credential_requestor.rb'
     autoload :Logout, 'casino_core/processor/logout.rb'
+    autoload :ServiceTicketValidator, 'casino_core/processor/service_ticket_validator.rb'
     autoload :SessionDestroyer, 'casino_core/processor/session_destroyer.rb'
     autoload :SessionOverview, 'casino_core/processor/session_overview.rb'
 

data/lib/casino_core/railtie.rb

@@ -7,8 +7,12 @@ module CASinoCore
       CASinoCore::RakeTasks.load_tasks
     end
 
-    initializer "casino_core.load_configuration" do
+    initializer 'casino_core.load_configuration' do
       CASinoCore.setup Rails.env
     end
+
+    initializer 'casino_core.setup_logger' do
+      CASinoCore::Settings.logger = Rails.logger
+    end
   end
 end

data/lib/casino_core/settings.rb

@@ -3,7 +3,7 @@ require 'casino_core/authenticator'
 module CASinoCore
   class Settings
     class << self
-      attr_accessor :login_ticket, :service_ticket, :authenticators
+      attr_accessor :login_ticket, :service_ticket, :authenticators, :logger
       def init(config = {})
         config.each do |key,value|
           if respond_to?("#{key}=")
@@ -12,6 +12,10 @@ module CASinoCore
         end
       end
 
+      def logger
+        @logger ||= ::Logger.new(STDOUT)
+      end
+
       def authenticators=(authenticators)
         @authenticators = []
         authenticators.each do |authenticator|

data/spec/model/login_ticket_spec.rb

@@ -13,4 +13,11 @@ describe CASinoCore::Model::LoginTicket do
       described_class.find_by_ticket('LT-12345').should be_false
     end
   end
+
+  describe '#to_s' do
+    it 'returns the ticket identifier' do
+      ticket = described_class.new ticket: 'LT-12345'
+      "#{ticket}".should == ticket.ticket
+    end
+  end
 end

data/spec/processor/legacy_validator_spec.rb

@@ -37,18 +37,18 @@ describe CASinoCore::Processor::LegacyValidator do
       end
 
       context 'with renew flag' do
-        let(:parameters) { { service: service, ticket: service_ticket.ticket, renew: 'true' }}
+        let(:parameters_with_renew) { parameters.merge renew: 'true' }
 
         context 'with a service ticket without issued_from_credentials flag' do
           it 'consumes the service ticket' do
-            processor.process(parameters)
+            processor.process(parameters_with_renew)
             service_ticket.reload
             service_ticket.consumed.should == true
           end
 
           it 'calls the #validation_failed method on the listener' do
             listener.should_receive(:validation_failed).with("no\n\n")
-            processor.process(parameters)
+            processor.process(parameters_with_renew)
           end
         end
 
@@ -59,14 +59,14 @@ describe CASinoCore::Processor::LegacyValidator do
           end
 
           it 'consumes the service ticket' do
-            processor.process(parameters)
+            processor.process(parameters_with_renew)
             service_ticket.reload
             service_ticket.consumed.should == true
           end
 
           it 'calls the #validation_succeeded method on the listener' do
             listener.should_receive(:validation_succeeded).with("yes\ntest\n")
-            processor.process(parameters)
+            processor.process(parameters_with_renew)
           end
         end
       end

data/spec/processor/service_ticket_validator_spec.rb

@@ -0,0 +1,123 @@
+require 'spec_helper'
+
+describe CASinoCore::Processor::ServiceTicketValidator do
+  describe '#process' do
+    let(:listener) { Object.new }
+    let(:processor) { described_class.new(listener) }
+    let(:user_agent) { 'TestBrowser 1.0' }
+    let(:ticket_granting_ticket) {
+      CASinoCore::Model::TicketGrantingTicket.create!({
+        ticket: 'TGC-HXdkW233TsRtiqYGq4b8U7',
+        username: 'test',
+        extra_attributes: nil,
+        user_agent: user_agent
+      })
+    }
+    let(:service) { 'https://example.com/cas-service' }
+    let(:service_ticket) { ticket_granting_ticket.service_tickets.create! ticket: 'ST-2nOcXx56dtPTsB069yYf0h', service: service }
+    let(:parameters) { { service: service, ticket: service_ticket.ticket }}
+
+    let(:regex_failure) { /\A\<cas\:serviceResponse.*\n.*authenticationFailure/ }
+    let(:regex_success) { /\A\<cas\:serviceResponse.*\n.*authenticationSuccess/ }
+
+    before(:each) do
+      listener.stub(:validation_failed)
+      listener.stub(:validation_succeeded)
+    end
+
+    context 'with an unconsumed service ticket' do
+      context 'without renew flag' do
+        it 'consumes the service ticket' do
+          processor.process(parameters)
+          service_ticket.reload
+          service_ticket.consumed.should == true
+        end
+
+        it 'calls the #validation_succeeded method on the listener' do
+          listener.should_receive(:validation_succeeded).with(regex_success)
+          processor.process(parameters)
+        end
+      end
+
+      context 'with renew flag' do
+        let(:parameters_with_renew) { parameters.merge renew: 'true' }
+
+        context 'with a service ticket without issued_from_credentials flag' do
+          it 'consumes the service ticket' do
+            processor.process(parameters_with_renew)
+            service_ticket.reload
+            service_ticket.consumed.should == true
+          end
+
+          it 'calls the #validation_failed method on the listener' do
+            listener.should_receive(:validation_failed).with(regex_failure)
+            processor.process(parameters_with_renew)
+          end
+        end
+
+        context 'with a service ticket with issued_from_credentials flag' do
+          before(:each) do
+            service_ticket.issued_from_credentials = true
+            service_ticket.save!
+          end
+
+          it 'consumes the service ticket' do
+            processor.process(parameters_with_renew)
+            service_ticket.reload
+            service_ticket.consumed.should == true
+          end
+
+          it 'calls the #validation_succeeded method on the listener' do
+            listener.should_receive(:validation_succeeded).with(regex_success)
+            processor.process(parameters_with_renew)
+          end
+        end
+      end
+
+      context 'with proxy-granting ticket callback server' do
+        let(:parameters_with_pgt_url) { parameters.merge pgtUrl: 'https://www.example.com/' }
+
+        before(:each) do
+          stub_request(:get, /https:\/\/www\.example\.com\/\?pgtId=[^&]+&pgtIou=[^&]+/)
+        end
+
+        it 'calls the #validation_succeeded method on the listener' do
+          listener.should_receive(:validation_succeeded).with(regex_success)
+          processor.process(parameters_with_pgt_url)
+        end
+
+        it 'includes the PGTIOU in the response' do
+          listener.should_receive(:validation_succeeded).with(/\<cas\:proxyGrantingTicket\>\n?\s*PGTIOU-.+/)
+          processor.process(parameters_with_pgt_url)
+        end
+
+        it 'creates a proxy-granting ticket' do
+          lambda do
+            processor.process(parameters_with_pgt_url)
+          end.should change(service_ticket.proxy_granting_tickets, :count).by(1)
+        end
+
+        it 'contacts the callback server' do
+          processor.process(parameters_with_pgt_url)
+          proxy_granting_ticket = CASinoCore::Model::ProxyGrantingTicket.last
+          WebMock.should have_requested(:get, 'https://www.example.com').with(query: {
+            pgtId: proxy_granting_ticket.ticket,
+            pgtIou: proxy_granting_ticket.iou
+          })
+        end
+      end
+    end
+
+    context 'with a consumed service ticket' do
+      before(:each) do
+        service_ticket.consumed = true
+        service_ticket.save!
+      end
+
+      it 'calls the #validation_failed method on the listener' do
+        listener.should_receive(:validation_failed).with(regex_failure)
+        processor.process(parameters)
+      end
+    end
+  end
+end

data/spec/spec_helper.rb

@@ -1,5 +1,8 @@
-require 'casino_core'
 require 'database_cleaner'
+require 'logger'
+require 'webmock/rspec'
+require 'casino_core'
+require 'simplecov'
 
 # This file was generated by the `rspec --init` command. Conventionally, all
 # specs live under a `spec` directory, which RSpec adds to the `$LOAD_PATH`.
@@ -16,7 +19,10 @@ RSpec.configure do |config|
   #     --seed 1234
   config.order = 'random'
 
+  SimpleCov.start
+
   CASinoCore.setup 'test'
+  CASinoCore::Settings.logger.level = ::Logger::Severity::UNKNOWN
 
   config.before(:suite) do
     DatabaseCleaner.strategy = :transaction

metadata

@@ -2,7 +2,7 @@
 name: casino_core
 version: !ruby/object:Gem::Version 
   prerelease: 
-  version: 0.0.5
+  version: 0.0.6
 platform: ruby
 authors: 
 - Nils Caspar
@@ -10,7 +10,7 @@ autorequire:
 bindir: bin
 cert_chain: []
 
-date: 2012-12-19 00:00:00 Z
+date: 2012-12-24 00:00:00 Z
 dependencies: 
 - !ruby/object:Gem::Dependency 
   name: activerecord
@@ -133,6 +133,17 @@ dependencies:
   type: :development
   prerelease: false
   version_requirements: *id011
+- !ruby/object:Gem::Dependency 
+  name: webmock
+  requirement: &id012 !ruby/object:Gem::Requirement 
+    none: false
+    requirements: 
+    - - ">="
+      - !ruby/object:Gem::Version 
+        version: "0"
+  type: :development
+  prerelease: false
+  version_requirements: *id012
 description: A CAS server core library.
 email: ncaspar@me.com
 executables: []
@@ -167,6 +178,7 @@ files:
 - db/migrate/20121125091934_add_issued_from_credentials_to_service_tickets.rb
 - db/migrate/20121125185415_create_proxy_granting_tickets.rb
 - db/migrate/20121125190013_tickets_should_be_unique.rb
+- db/migrate/20121223135227_proxy_granting_tickets_belongs_to_service_ticket.rb
 - db/schema.rb
 - lib/casino_core.rb
 - lib/casino_core/authenticator.rb
@@ -175,6 +187,7 @@ files:
 - lib/casino_core/helper/browser.rb
 - lib/casino_core/helper/logger.rb
 - lib/casino_core/helper/login_tickets.rb
+- lib/casino_core/helper/proxy_granting_tickets.rb
 - lib/casino_core/helper/service_tickets.rb
 - lib/casino_core/helper/ticket_granting_tickets.rb
 - lib/casino_core/helper/tickets.rb
@@ -189,6 +202,7 @@ files:
 - lib/casino_core/processor/login_credential_acceptor.rb
 - lib/casino_core/processor/login_credential_requestor.rb
 - lib/casino_core/processor/logout.rb
+- lib/casino_core/processor/service_ticket_validator.rb
 - lib/casino_core/processor/session_destroyer.rb
 - lib/casino_core/processor/session_overview.rb
 - lib/casino_core/railtie.rb
@@ -203,6 +217,7 @@ files:
 - spec/processor/login_credential_acceptor_spec.rb
 - spec/processor/login_credential_requestor_spec.rb
 - spec/processor/logout_spec.rb
+- spec/processor/service_ticket_validator_spec.rb
 - spec/processor/session_destroyer_spec.rb
 - spec/processor/session_overview_spec.rb
 - spec/spec_helper.rb
@@ -219,7 +234,7 @@ required_ruby_version: !ruby/object:Gem::Requirement
   requirements: 
   - - ">="
     - !ruby/object:Gem::Version 
-      hash: -263623959609363885
+      hash: 209769528785287815
       segments: 
       - 0
       version: "0"