RubyGems - clerk-sdk-ruby - Versions diffs - 4.0.0.beta2 → 4.0.0.beta4 - Mend

clerk-sdk-ruby 4.0.0.beta2 → 4.0.0.beta4

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.

Files changed (204) hide show

checksums.yaml +4 -4
data/.env.example +3 -0
data/.github/workflows/main.yml +22 -14
data/.gitignore +7 -1
data/.rspec +3 -0
data/.ruby-version +1 -0
data/CHANGELOG.md +25 -0
data/Gemfile +26 -3
data/Gemfile.lock +269 -13
data/Guardfile +14 -0
data/README.md +71 -11
data/Rakefile +50 -6
data/apps/rack/app.rb +67 -0
data/apps/rack/config.ru +17 -0
data/apps/rack/middleware/disable_paths.rb +13 -0
data/apps/rails-api/.dockerignore +41 -0
data/apps/rails-api/.gitattributes +9 -0
data/apps/rails-api/.gitignore +32 -0
data/apps/rails-api/.kamal/hooks/docker-setup.sample +3 -0
data/apps/rails-api/.kamal/hooks/post-deploy.sample +14 -0
data/apps/rails-api/.kamal/hooks/post-proxy-reboot.sample +3 -0
data/apps/rails-api/.kamal/hooks/pre-build.sample +51 -0
data/apps/rails-api/.kamal/hooks/pre-connect.sample +47 -0
data/apps/rails-api/.kamal/hooks/pre-deploy.sample +109 -0
data/apps/rails-api/.kamal/hooks/pre-proxy-reboot.sample +3 -0
data/apps/rails-api/.kamal/secrets +17 -0
data/apps/rails-api/.rubocop.yml +8 -0
data/apps/rails-api/.ruby-version +1 -0
data/apps/rails-api/Dockerfile +69 -0
data/apps/rails-api/Gemfile +54 -0
data/apps/rails-api/Gemfile.lock +374 -0
data/apps/rails-api/README.md +24 -0
data/apps/rails-api/Rakefile +6 -0
data/apps/rails-api/app/controllers/application_controller.rb +3 -0
data/apps/rails-api/app/controllers/home_controller.rb +5 -0
data/apps/rails-api/app/jobs/application_job.rb +7 -0
data/apps/rails-api/app/mailers/application_mailer.rb +4 -0
data/apps/rails-api/app/models/application_record.rb +3 -0
data/apps/rails-api/app/views/layouts/mailer.html.erb +13 -0
data/apps/rails-api/app/views/layouts/mailer.text.erb +1 -0
data/apps/rails-api/bin/brakeman +7 -0
data/apps/rails-api/bin/bundle +109 -0
data/apps/rails-api/bin/dev +2 -0
data/apps/rails-api/bin/docker-entrypoint +14 -0
data/apps/rails-api/bin/jobs +6 -0
data/apps/rails-api/bin/kamal +27 -0
data/apps/rails-api/bin/rails +4 -0
data/apps/rails-api/bin/rake +4 -0
data/apps/rails-api/bin/rubocop +8 -0
data/apps/rails-api/bin/setup +34 -0
data/apps/rails-api/bin/thrust +5 -0
data/apps/rails-api/config/application.rb +36 -0
data/apps/rails-api/config/boot.rb +4 -0
data/apps/rails-api/config/cable.yml +17 -0
data/apps/rails-api/config/cache.yml +16 -0
data/apps/rails-api/config/credentials.yml.enc +1 -0
data/apps/rails-api/config/database.yml +41 -0
data/apps/rails-api/config/deploy.yml +116 -0
data/apps/rails-api/config/environment.rb +5 -0
data/apps/rails-api/config/environments/development.rb +70 -0
data/apps/rails-api/config/environments/production.rb +88 -0
data/apps/rails-api/config/environments/test.rb +53 -0
data/apps/rails-api/config/initializers/cors.rb +16 -0
data/apps/rails-api/config/initializers/filter_parameter_logging.rb +8 -0
data/apps/rails-api/config/initializers/inflections.rb +16 -0
data/apps/rails-api/config/locales/en.yml +31 -0
data/apps/rails-api/config/puma.rb +41 -0
data/apps/rails-api/config/queue.yml +18 -0
data/apps/rails-api/config/recurring.yml +10 -0
data/apps/rails-api/config/routes.rb +10 -0
data/apps/rails-api/config/storage.yml +34 -0
data/apps/rails-api/config.ru +6 -0
data/apps/rails-api/db/cable_schema.rb +11 -0
data/apps/rails-api/db/cache_schema.rb +14 -0
data/apps/rails-api/db/queue_schema.rb +129 -0
data/apps/rails-api/db/seeds.rb +9 -0
data/apps/rails-api/public/robots.txt +1 -0
data/apps/rails-api/test/controllers/home_controller_test.rb +7 -0
data/apps/rails-api/test/test_helper.rb +15 -0
data/apps/rails-full/.dockerignore +47 -0
data/apps/rails-full/.gitattributes +9 -0
data/apps/rails-full/.gitignore +34 -0
data/apps/rails-full/.kamal/hooks/docker-setup.sample +3 -0
data/apps/rails-full/.kamal/hooks/post-deploy.sample +14 -0
data/apps/rails-full/.kamal/hooks/post-proxy-reboot.sample +3 -0
data/apps/rails-full/.kamal/hooks/pre-build.sample +51 -0
data/apps/rails-full/.kamal/hooks/pre-connect.sample +47 -0
data/apps/rails-full/.kamal/hooks/pre-deploy.sample +109 -0
data/apps/rails-full/.kamal/hooks/pre-proxy-reboot.sample +3 -0
data/apps/rails-full/.kamal/secrets +17 -0
data/apps/rails-full/.rubocop.yml +8 -0
data/apps/rails-full/.ruby-version +1 -0
data/apps/rails-full/Dockerfile +72 -0
data/apps/rails-full/Gemfile +70 -0
data/apps/rails-full/Gemfile.lock +429 -0
data/apps/rails-full/README.md +24 -0
data/apps/rails-full/Rakefile +6 -0
data/apps/rails-full/app/assets/stylesheets/application.css +10 -0
data/apps/rails-full/app/controllers/application_controller.rb +6 -0
data/apps/rails-full/app/controllers/home_controller.rb +11 -0
data/apps/rails-full/app/helpers/application_helper.rb +2 -0
data/apps/rails-full/app/helpers/home_helper.rb +2 -0
data/apps/rails-full/app/javascript/application.js +3 -0
data/apps/rails-full/app/javascript/controllers/application.js +9 -0
data/apps/rails-full/app/javascript/controllers/hello_controller.js +7 -0
data/apps/rails-full/app/javascript/controllers/index.js +4 -0
data/apps/rails-full/app/jobs/application_job.rb +7 -0
data/apps/rails-full/app/mailers/application_mailer.rb +4 -0
data/apps/rails-full/app/models/application_record.rb +3 -0
data/apps/rails-full/app/views/home/index.html.erb +7 -0
data/apps/rails-full/app/views/layouts/application.html.erb +60 -0
data/apps/rails-full/app/views/layouts/mailer.html.erb +13 -0
data/apps/rails-full/app/views/layouts/mailer.text.erb +1 -0
data/apps/rails-full/app/views/pwa/manifest.json.erb +22 -0
data/apps/rails-full/app/views/pwa/service-worker.js +26 -0
data/apps/rails-full/bin/brakeman +7 -0
data/apps/rails-full/bin/bundle +109 -0
data/apps/rails-full/bin/dev +2 -0
data/apps/rails-full/bin/docker-entrypoint +14 -0
data/apps/rails-full/bin/importmap +4 -0
data/apps/rails-full/bin/jobs +6 -0
data/apps/rails-full/bin/kamal +27 -0
data/apps/rails-full/bin/rails +4 -0
data/apps/rails-full/bin/rake +4 -0
data/apps/rails-full/bin/rubocop +8 -0
data/apps/rails-full/bin/setup +34 -0
data/apps/rails-full/bin/thrust +5 -0
data/apps/rails-full/config/application.rb +31 -0
data/apps/rails-full/config/boot.rb +4 -0
data/apps/rails-full/config/cable.yml +17 -0
data/apps/rails-full/config/cache.yml +16 -0
data/apps/rails-full/config/credentials.yml.enc +1 -0
data/apps/rails-full/config/database.yml +41 -0
data/apps/rails-full/config/deploy.yml +116 -0
data/apps/rails-full/config/environment.rb +5 -0
data/apps/rails-full/config/environments/development.rb +72 -0
data/apps/rails-full/config/environments/production.rb +91 -0
data/apps/rails-full/config/environments/test.rb +53 -0
data/apps/rails-full/config/importmap.rb +7 -0
data/apps/rails-full/config/initializers/assets.rb +7 -0
data/apps/rails-full/config/initializers/clerk.rb +4 -0
data/apps/rails-full/config/initializers/content_security_policy.rb +25 -0
data/apps/rails-full/config/initializers/filter_parameter_logging.rb +8 -0
data/apps/rails-full/config/initializers/inflections.rb +16 -0
data/apps/rails-full/config/locales/en.yml +31 -0
data/apps/rails-full/config/puma.rb +41 -0
data/apps/rails-full/config/queue.yml +18 -0
data/apps/rails-full/config/recurring.yml +10 -0
data/apps/rails-full/config/routes.rb +15 -0
data/apps/rails-full/config/storage.yml +34 -0
data/apps/rails-full/config.ru +6 -0
data/apps/rails-full/db/cable_schema.rb +11 -0
data/apps/rails-full/db/cache_schema.rb +14 -0
data/apps/rails-full/db/queue_schema.rb +129 -0
data/apps/rails-full/db/seeds.rb +9 -0
data/apps/rails-full/public/400.html +114 -0
data/apps/rails-full/public/404.html +114 -0
data/apps/rails-full/public/406-unsupported-browser.html +114 -0
data/apps/rails-full/public/422.html +114 -0
data/apps/rails-full/public/500.html +114 -0
data/apps/rails-full/public/icon.png +0 -0
data/apps/rails-full/public/icon.svg +3 -0
data/apps/rails-full/public/robots.txt +1 -0
data/apps/rails-full/test/application_system_test_case.rb +5 -0
data/apps/rails-full/test/controllers/home_controller_test.rb +7 -0
data/apps/rails-full/test/test_helper.rb +15 -0
data/apps/sinatra/app.rb +29 -0
data/apps/sinatra/config.ru +2 -0
data/apps/sinatra/views/index.erb +44 -0
data/clerk-sdk-ruby.gemspec +2 -1
data/lib/clerk/authenticatable.rb +14 -79
data/lib/clerk/authenticate_context.rb +164 -179
data/lib/clerk/authenticate_request.rb +238 -230
data/lib/clerk/configuration.rb +78 -0
data/lib/clerk/constants.rb +68 -46
data/lib/clerk/error.rb +17 -0
data/lib/clerk/jwks_cache.rb +27 -22
data/lib/clerk/proxy.rb +135 -0
data/lib/clerk/rack.rb +2 -0
data/lib/clerk/rack_middleware.rb +88 -73
data/lib/clerk/rails.rb +3 -0
data/lib/clerk/railtie.rb +7 -6
data/lib/clerk/sdk.rb +46 -157
data/lib/clerk/sinatra.rb +52 -0
data/lib/clerk/utils.rb +52 -6
data/lib/clerk/version.rb +1 -1
data/lib/clerk.rb +15 -51
metadata +187 -25
data/CODEOWNERS +0 -1
data/lib/clerk/errors.rb +0 -19
data/lib/clerk/rack_middleware_v2.rb +0 -167
data/lib/clerk/resources/allowlist.rb +0 -16
data/lib/clerk/resources/allowlist_identifiers.rb +0 -16
data/lib/clerk/resources/clients.rb +0 -23
data/lib/clerk/resources/email_addresses.rb +0 -17
data/lib/clerk/resources/emails.rb +0 -16
data/lib/clerk/resources/jwks.rb +0 -18
data/lib/clerk/resources/organizations.rb +0 -73
data/lib/clerk/resources/phone_numbers.rb +0 -17
data/lib/clerk/resources/plural_resource.rb +0 -38
data/lib/clerk/resources/sessions.rb +0 -26
data/lib/clerk/resources/singular_resource.rb +0 -14
data/lib/clerk/resources/users.rb +0 -37
data/lib/clerk/resources.rb +0 -10

data/apps/sinatra/views/index.erb ADDED Viewed

@@ -0,0 +1,44 @@
+<!doctype html>
+<html lang="en">
+  <head>
+    <meta charset="utf-8">
+    <meta name="viewport" content="width=device-width, initial-scale=1">
+    <meta name="description" content="Find a domain's name servers">
+    <title>Sinatra</title>
+    <style>
+      html { font-family: monospace; }
+      @media (prefers-color-scheme: dark) {
+        html {
+          color: #FFE6E6FF;
+          background-color: #201D1E;
+        }
+      }
+    </style>
+    <script
+      async
+      crossorigin="anonymous"
+      data-clerk-publishable-key="<%= Clerk.configuration.publishable_key %>"
+      src="<%= ENV["CLERK_JS_URL"] %>"
+      type="text/javascript"
+    ></script>
+    <script>
+      window.addEventListener('load', async function () {
+        await Clerk.load()
+        const container = document.getElementById('auth-container')
+        if (Clerk.user) {
+          container.innerHTML = `<div id="user-button"></div>`
+          Clerk.mountUserButton(document.getElementById('user-button'))
+        } else {
+          container.innerHTML = `<div id="sign-in"></div>`
+          Clerk.mountSignIn(document.getElementById('sign-in'))
+        }
+      })
+    </script>
+  </head>
+  <body>
+    <h1>Sinatra</h1>
+    <h2><%= clerk.user ? "Authenticated User: #{clerk.user.first_name} (#{clerk.user.id}) " : "Not Authenticated" %><h2>
+    <div id="auth-container"></div>
+  </body>
+</html>

data/clerk-sdk-ruby.gemspec CHANGED Viewed

@@ -9,7 +9,7 @@ Gem::Specification.new do |spec|
   spec.email         = ["ruby-sdk@clerk.dev"]
   spec.summary       = "Clerk SDK for Ruby."
-  spec.description   = "Client SDK for the Clerk backend API."
+  spec.description   = "Client SDK for the Clerk"
   spec.homepage      = "https://github.com/clerkinc/clerk-sdk-ruby"
   spec.license       = "MIT"
   spec.required_ruby_version = Gem::Requirement.new(">= 2.4.0")
@@ -29,6 +29,7 @@ Gem::Specification.new do |spec|
   spec.add_dependency "faraday", ">= 1.4.1", "< 3.0"
   spec.add_dependency "jwt", '~> 2.5'
+  spec.add_dependency "clerk-http-client", "~> 0.0.1"
   spec.add_dependency "concurrent-ruby", "~> 1.1"
   spec.add_development_dependency "byebug", "~> 11.1"

data/lib/clerk/authenticatable.rb CHANGED Viewed

@@ -1,3 +1,5 @@
+# frozen_string_literal: true
 require "active_support/concern"
 module Clerk
@@ -6,92 +8,25 @@ module Clerk
     protected
-    # Makes a request to the Clerk API to verify the session again and return
-    # the Session object. Subsequent calls to this method will return the cached
-    # Session object.
-    #
-    # NOTE: For better performance, you can instead use `#clerk_verified_session_claims`
-    # which already contains the verified claims as retrieved from the session
-    # token.
-    def clerk_session
-      request.env["clerk"].session
-    end
-    # Makes a request to the Clerk API to verify the session again. Returns the
-    # session object as fetched from the API.
-    #
-    # NOTE: For better performance, you can instead use `#clerk_verified_session_claims`
-    # which already contains the verified claims as retrieved from the session
-    # token.
-    #
-    # See https://clerk.com/docs/reference/backend-api/tag/Sessions#operation/VerifySession
-    def clerk_reverify_session!
-      request.env["clerk"].verify_session
-    end
-    def clerk_verified_session_claims
-      request.env["clerk"].session_claims
-    end
-    def clerk_verified_session_token
-      request.env["clerk"].session_token
-    end
-    # Makes a request to the Clerk API to fetch the data of the authenticated
-    # session's user. If caching is configured (see
-    # Config.middleware_cache_store), subsequent calls will return the cached
-    # object.
-    def clerk_user
-      request.env["clerk"].user
-    end
-    def clerk_user_id
-      request.env["clerk"].user_id
-    end
-    # Makes a request to the Clerk API to fetch the data of the authenticated
-    # session's organization. If caching is configured (see
-    # Config.middleware_cache_store), subsequent calls will return the cached
-    # object.
-    def clerk_organization
-      request.env["clerk"].org
-    end
-    def clerk_organization_id
-      request.env["clerk"].org_id
-    end
-    def clerk_organization_role
-      request.env["clerk"].org_role
-    end
-    def clerk_organization_permissions
-      request.env["clerk"].org_permissions
-    end
-    def clerk_user_signed_in?
-      !!clerk_verified_session_claims
-    end
-    def clerk_sign_in_url
-      ENV.fetch("CLERK_SIGN_IN_URL")
+    def clerk
+      request.env["clerk"]
     end
-    def clerk_sign_up_url
-      ENV.fetch("CLERK_SIGN_UP_URL")
+    def require_reverification!(preset = StepUp::Preset::STRICT, &block)
+      clerk.user_require_reverification!(preset) do
+        return yield(preset) if block_given?
+        render_reverification!(preset)
+      end
     end
-    def clerk_user_profile_url
-      ENV.fetch("CLERK_USER_PROFILE_URL")
+    def render_reverification!(preset = nil)
+      render status: 403, json: StepUp::Reverification.error_payload(preset)
     end
     included do
-      helper_method :clerk_session, :clerk_reverify_session!,
-        :clerk_verified_session_claims, :clerk_verified_session_token,
-        :clerk_user, :clerk_user_id, :clerk_user_signed_in?, :clerk_sign_in_url,
-        :clerk_sign_up_url, :clerk_user_profile_url,
-        :clerk_organization, :clerk_organization_id, :clerk_organization_role,
-        :clerk_organization_permissions
+      if respond_to?(:helper_method)
+        helper_method :clerk, :require_reverification!, :render_reverification!
+      end
     end
   end
 end

data/lib/clerk/authenticate_context.rb CHANGED Viewed

@@ -1,183 +1,168 @@
+# frozen_string_literal: true
 require "ostruct"
 require "forwardable"
-require "base64"
 module Clerk
-    ##
-    # This class represents a parameter object used to contain all request and configuration
-    # information required by the middleware to resolve the current request state.
-    # link: https://refactoring.guru/introduce-parameter-object
-    class AuthenticateContext
-        extend Forwardable
-        ##
-        # Expose the url of the request that this parameter object was created from as a URI object.
-        attr_reader :clerk_url
-        ##
-        # Expose properties that does not require validations or complex logic to retrieve
-        # values by delegating them to the cookies or headers variables.
-        def_delegators :@cookies, :session_token_in_cookie, :client_uat
-        def_delegators :@headers, :session_token_in_header, :sec_fetch_dest
-        ##
-        # Creates a new parameter object using Rack::Request and Clerk::Config objects.
-        def initialize(request, config)
-            @clerk_url = URI.parse(request.url)
-            @config = config
-            @cookies = OpenStruct.new({
-                session_token_in_cookie: request.cookies[SESSION_COOKIE],
-                client_uat: request.cookies[CLIENT_UAT_COOKIE],
-                handshake_token: request.cookies[HANDSHAKE_COOKIE],
-                dev_browser: request.cookies[DEV_BROWSER_COOKIE]
-            })
-            @headers = OpenStruct.new({
-                session_token_in_header: request.env[AUTHORIZATION_HEADER].to_s.gsub(/bearer/i, '').strip,
-                sec_fetch_dest: request.env[SEC_FETCH_DEST_HEADER],
-                accept: request.env[ACCEPT_HEADER].to_s,
-                origin: request.env[ORIGIN_HEADER].to_s,
-                host: request.host,
-                port: request.port
-            })
-        end
-        ##
-        # The following properties are part of the props supported in all the AuthenticateContext
-        # objects across all of our SDKs (eg JS, Go)
-        def secret_key
-            @config.api_key.to_s
-        end
-        def publishable_key
-            @config.publishable_key.to_s
-        end
-        def domain
-            # TODO(dimkl): Add multi-domain support
-            ""
-        end
-        def is_satellite?
-            # TODO(dimkl): Add multi-domain support
-            false
-        end
-        def proxy_url
-            # TODO(dimkl): Add multi-domain support
-            ""
-        end
-        def handshake_token
-            @handshake_token ||= retrieve_from_query_string(@clerk_url, HANDSHAKE_COOKIE) || @cookies.handshake_token.to_s
-        end
-        def clerk_synced?
-            # TODO(dimkl): Add multi-domain support
-            false
-        end
-        def clerk_redirect_url
-             # TODO(dimkl): Add multi-domain support
-             ""
-        end
-        def dev_browser
-            @dev_browser ||= retrieve_from_query_string(@clerk_url, DEV_BROWSER_COOKIE) || @cookies.dev_browser.to_s
-        end
-        # The frontend_api returned is without protocol prefix
-        def frontend_api
-            return "" if !valid_publishable_key?(publishable_key.to_s)
-            @frontend_api ||= if !proxy_url.empty?
-                proxy_url
-            elsif development_instance? && !domain.empty?
-                "clerk.#{domain}"
-            else
-                # remove $ postfix
-                decode_publishable_key(publishable_key).chop
-            end
-        end
-        def development_instance?
-            secret_key.start_with?("sk_test_")
-        end
-        def production_instance?
-            secret_key.start_with?("sk_live_")
-        end
-        def document_request?
-            @headers.sec_fetch_dest == "document"
-        end
-        def accepts_html?
-            @headers.accept && @headers.accept.start_with?('text/html')
-        end
-        def eligible_for_multi_domain?
-            is_satellite? && document_request? && !clerk_synced?
-        end
-        def active_client?
-            @cookies.client_uat.to_i > 0
-        end
-        def cross_origin_request?
-            # origin contains scheme+host and optionally port (omitted if 80 or 443)
-            # ref. https://www.rfc-editor.org/rfc/rfc6454#section-6.1
-            return false if @headers.origin.nil?
-            # strip scheme
-            origin = @headers.origin.strip.sub(/\A(\w+:)?\/\//, '')
-            return false if origin.empty?
-            # Rack's host and port helpers are reverse-proxy-aware; that
-            # is, they prefer the de-facto X-Forwarded-* headers if they're set
-            request_host = @headers.host
-            request_host << ":#{@headers.port}" if @headers.port != 80 && @headers.port != 443
-            origin != request_host
-        end
-        def dev_browser?
-            !dev_browser.empty?
-        end
-        def session_token_in_header?
-            !session_token_in_header.to_s.empty?
-        end
-        def handshake_token?
-            !handshake_token.to_s.empty?
-        end
-        def session_token_in_cookie?
-            !session_token_in_cookie.to_s.empty?
-        end
-        private
-        def valid_publishable_key?(pk)
-            valid_publishable_key_prefix?(pk) && valid_publishable_key_postfix?(pk)
-        end
-        def valid_publishable_key_prefix?(pk)
-            pk.start_with?("pk_live_") || pk.start_with?("pk_test_")
-        end
-        def valid_publishable_key_postfix?(pk)
-            decode_publishable_key(pk).end_with?("$")
-        end
-        def decode_publishable_key(pk)
-            Base64.decode64(pk.split("_")[2].to_s)
-        end
-        def retrieve_from_query_string(url, key)
-            Rack::Utils.parse_query(url.query)[key]
-        end
-    end
-end
+  # This class represents a parameter object used to contain all request and configuration
+  # information required by the middleware to resolve the current request state.
+  # link: https://refactoring.guru/introduce-parameter-object
+  class AuthenticateContext
+    extend Forwardable
+    # Expose the url of the request that this parameter object was created from as a URI object.
+    attr_reader :clerk_url
+    # Expose properties that does not require validations or complex logic to retrieve
+    # values by delegating them to the cookies or headers variables.
+    def_delegators :@cookies, :session_token_in_cookie, :client_uat
+    def_delegators :@headers, :session_token_in_header, :sec_fetch_dest
+    # Creates a new parameter object using ::Rack::Request and Clerk::Config objects.
+    def initialize(request, config)
+      @clerk_url = URI.parse(request.url)
+      @config = config
+      @cookies = OpenStruct.new({
+        client_uat: request.cookies[CLIENT_UAT_COOKIE],
+        dev_browser: request.cookies[DEV_BROWSER_COOKIE],
+        handshake_token: request.cookies[HANDSHAKE_COOKIE],
+        session_token_in_cookie: request.cookies[SESSION_COOKIE]
+      })
+      @headers = OpenStruct.new({
+        accept: request.env[ACCEPT_HEADER].to_s,
+        host: request.host,
+        origin: request.env[ORIGIN_HEADER].to_s,
+        port: request.port,
+        sec_fetch_dest: request.env[SEC_FETCH_DEST_HEADER],
+        session_token_in_header: request.env[AUTHORIZATION_HEADER].to_s.gsub(/bearer/i, "").strip
+      })
+    end
+    # The following properties are part of the props supported in all the AuthenticateContext
+    # objects across all of our SDKs (eg JS, Go)
+    def secret_key
+      raise ConfigurationError, "Clerk secret key is not set" if @config.secret_key.to_s.empty?
+      @config.secret_key.to_s
+    end
+    def publishable_key
+      raise ConfigurationError, "Clerk publishable key is not set" if @config.publishable_key.to_s.to_s.empty?
+      @config.publishable_key.to_s
+    end
+    def proxy_url?
+      !proxy_url.empty?
+    end
+    def handshake_token
+      @handshake_token ||= Utils.retrieve_from_query_string(@clerk_url, HANDSHAKE_COOKIE) || @cookies.handshake_token.to_s
+    end
+    def dev_browser
+      @dev_browser ||= dev_browser_in_url || @cookies.dev_browser.to_s
+    end
+    # The frontend_api returned is without protocol prefix
+    def frontend_api
+      return "" unless Utils.valid_publishable_key?(publishable_key.to_s)
+      @frontend_api ||= if proxy_url?
+        proxy_url
+      elsif development_instance? && !domain.empty?
+        "clerk.#{domain}"
+      else
+        # remove $ postfix
+        Utils.decode_publishable_key(publishable_key).chop.to_s
+      end
+    end
+    def development_instance?
+      secret_key.start_with?("sk_test_")
+    end
+    def production_instance?
+      secret_key.start_with?("sk_live_")
+    end
+    def document_request?
+      @headers.sec_fetch_dest == "document"
+    end
+    def accepts_html?
+      @headers.accept&.start_with?("text/html")
+    end
+    def eligible_for_multi_domain?
+      is_satellite? && document_request? && !clerk_synced?
+    end
+    def active_client?
+      @cookies.client_uat.to_i.positive?
+    end
+    def cross_origin_request?
+      # origin contains scheme+host and optionally port (omitted if 80 or 443)
+      # ref. https://www.rfc-editor.org/rfc/rfc6454#section-6.1
+      return false if @headers.origin.nil?
+      # strip scheme
+      origin = @headers.origin.strip.sub(%r{\A(\w+:)?//}, "")
+      return false if origin.empty?
+      # Rack's host and port helpers are reverse-proxy-aware; that
+      # is, they prefer the de-facto X-Forwarded-* headers if they're set
+      request_host = @headers.host
+      request_host << ":#{@headers.port}" if @headers.port != 80 && @headers.port != 443
+      origin != request_host
+    end
+    def dev_browser?
+      !dev_browser.empty?
+    end
+    def session_token_in_header?
+      !session_token_in_header.to_s.empty?
+    end
+    def handshake_token?
+      !handshake_token.to_s.empty?
+    end
+    def session_token_in_cookie?
+      !session_token_in_cookie.to_s.empty?
+    end
+    def dev_browser_in_url
+      Utils.retrieve_from_query_string(@clerk_url, DEV_BROWSER_COOKIE)
+    end
+    def dev_browser_in_url?
+      !!dev_browser_in_url
+    end
+    def domain
+      "" # TODO: Add multi-domain support
+    end
+    def is_satellite?
+      false # TODO: Add multi-domain support
+    end
+    def proxy_url
+      "" # TODO: Add multi-domain support
+    end
+    def clerk_synced?
+      false # TODO: Add multi-domain support
+    end
+    def clerk_redirect_url
+      "" # TODO: Add multi-domain support
+    end
+  end
+end