cohesive_marketplace_middleware 0.1.3 → 0.1.4

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: e49e5d662b2d2b9e3cb29b3434720f195400a502f70544ee56166a8c270ef223
-  data.tar.gz: 8403c6a4d544943e673a20ca93143f6f9dc953f5a329a9a625d1e9a1e5682b27
+  metadata.gz: a34773a0133414482f6c51355c2fed3e3a74c115a5c7029311f93273983444a7
+  data.tar.gz: 13bd370b078dafd52eabb562df66580decd46c69916ff9a315128cc116329847
 SHA512:
-  metadata.gz: 9cc5a7871634bc04f4b992312816e96d6d56a13858bd5e37197f8aae8be6af54f2eb2733a0e6f47972ef54937a1047a068291745cf70f080a50d65d884285308
-  data.tar.gz: cbc0d875d3d2fc71dfb9e4f1ae93f1c76cf2599c6cfaf4afe965b5f8a77fcab5c9c879848407b7dfda237532c4624a4e8eb51ae68ad6841a16e8b0e063403e55
+  metadata.gz: e7882e14c2094dd1dd41d946596451144b6b2508a0e65af24a3e427257f9820217f9e0fd2c11f1474bcf9743012ddcd6ddd6f928d7ca9dbbdc978fb234cde5e8
+  data.tar.gz: 949f6ea4cda78f97492afffe2e17bb49db5274b84f68b4d530d533eba603d9058972a25146e48970d4f95cfbfa4e1c212cd5b6e7f9998f8e45e4c073c4d08021

data/CHANGELOG.md

@@ -1,5 +1,5 @@
-## [Unreleased]
+## [Released]
 
-## [0.1.2] - 2023-02-22
+## [0.1.3] - 2023-02-24
 
 - Initial release

data/Gemfile.lock

@@ -1,7 +1,7 @@
 PATH
   remote: .
   specs:
-    cohesive_marketplace_middleware (0.1.3)
+    cohesive_marketplace_middleware (0.1.4)
       cohesive_marketplace_sdk (~> 0.1.1, >= 0.1.1)
       jwt (~> 1.5, >= 1.5.0)
 
@@ -44,7 +44,7 @@ GEM
       rubocop-ast (>= 1.24.1, < 2.0)
       ruby-progressbar (~> 1.7)
       unicode-display_width (>= 2.4.0, < 3.0)
-    rubocop-ast (1.26.0)
+    rubocop-ast (1.27.0)
       parser (>= 3.2.1.0)
     rubocop-performance (1.15.2)
       rubocop (>= 1.7.0, < 2.0)

data/lib/cohesive_marketplace_middleware/railtie.rb

@@ -1,9 +1,10 @@
-require 'cohesive_marketplace_middleware'
+require "cohesive_marketplace_middleware"
 
 module AuthMiddleware
   class Railtie < Rails::Railtie
     initializer "cohesive_marketplace_middleware.configure_rails_initialization" do |app|
       app.middleware.use AuthMiddleware
+      app.middleware.use CookieAuthMiddleware
     end
   end
 end

data/lib/cohesive_marketplace_middleware/version.rb

@@ -1,5 +1,5 @@
 # frozen_string_literal: true
 
 module CohesiveMarketplaceMiddleware
-  VERSION = "0.1.3"
+  VERSION = "0.1.4"
 end

data/lib/cohesive_marketplace_middleware.rb

@@ -3,29 +3,108 @@
 require_relative "cohesive_marketplace_middleware/version"
 require "cohesive_marketplace_sdk"
 
+AUTH_DETAILS_ENV_KEY = "auth_details"
+COHESIVE_MIDDLEWARE_IGNORE_PATH_PREFIX = "COHESIVE_MIDDLEWARE_IGNORE_PATH_PREFIX"
+COHESIVE_MIDDLEWARE_LOGIN_PATH = "COHESIVE_MIDDLEWARE_LOGIN_PATH"
+COHESIVE_MIDDLEWARE_LOGIN_PATH_DEFAULT = "/cohesive_login"
+
 module CohesiveMarketplaceMiddleware
-  class Error < StandardError; end
+  def getCohesiveAuthDetails(env)
+    env[AUTH_DETAILS_ENV_KEY]
+  end
+
+  def collect_ignore_paths
+    # Get the path prefixes to ignore from an environment variable.
+    ignore_path_prefix_string = ENV[COHESIVE_MIDDLEWARE_IGNORE_PATH_PREFIX]
+    # Split the prefixes into an array.
+    result = ignore_path_prefix_string.split(",")
+    # Output some information for debugging.
+    puts("Cohesive middleware ignoring paths: ", result)
+    result
+  end
 
   class AuthMiddleware
+    # Initializes a new instance of the middleware.
+    #
+    # @param app [Object] The application object.
+    #
+    # @return [void]
     def initialize(app)
       @app = app
-      puts @secret_key
+      @ignore_paths = collect_ignore_paths
     end
 
     def call(env)
-      authorization_header = env["HTTP_AUTHORIZATION"]
-      if authorization_header&.start_with?("Bearer ")
-        token = authorization_header.sub("Bearer ", "")
-        begin
-          env["auth_details"] = CohesiveMarketplaceSDK.validate_jwt token
-        rescue => exception
-          puts exception
-          return [401, {"Content-Type" => "text/plain"}, [exception.message]]
+      # Check if the current path should be ignored.
+      if !(@ignore_paths.any? { |prefix| env["REQUEST_PATH"].start_with?(prefix) })
+        authorization_header = env["HTTP_AUTHORIZATION"]
+        if authorization_header&.start_with?("Bearer ")
+          token = authorization_header.sub("Bearer ", "")
+          begin
+            env[AUTH_DETAILS_ENV_KEY] = CohesiveMarketplaceSDK.validate_jwt token
+          rescue => exception
+            puts exception
+            return [401, {"Content-Type" => "text/plain"}, [exception.message]]
+          end
+        else
+          return [401, {"Content-Type" => "text/plain"}, ["No Token in auth header"]]
         end
-      else
-        return [401, {"Content-Type" => "text/plain"}, ["No Token"]]
+      end
+      @app.call(env)
+    end
+  end
+
+  class CookieAuthMiddleware
+    # Initializes a new instance of the middleware.
+    #
+    # @param app [Object] The application object.
+    #
+    # @return [void]
+    def initialize(app)
+      @app = app
+      @ignore_paths = collect_ignore_paths
+
+      # Get the login redirect URI from an environment variable.
+      @redirect_uri = ENV[COHESIVE_MIDDLEWARE_LOGIN_PATH]
+      # Set a default URI if the environment variable is not set.
+      if @redirect_uri == ""
+        @redirect_uri = COHESIVE_MIDDLEWARE_LOGIN_PATH_DEFAULT
       end
 
+      # Add the login redirect URI to the list of ignored paths.
+      @ignore_paths.append(@redirect_uri)
+
+      # Output some information for debugging.
+      puts("Cohesive middleware login redirect: ", @redirect_uri)
+    end
+
+    # Processes a request and authenticates the user if necessary.
+    #
+    # @param env [Hash] The Rack environment hash.
+    #
+    # @return [Array] A Rack-compatible response triplet.
+    def call(env)
+      # Check if the current path should be ignored.
+      if !(@ignore_paths.any? { |prefix| env["REQUEST_PATH"].start_with?(prefix) })
+        # Create a new request object.
+        request = ActionDispatch::Request.new(env)
+        # Get the authentication token from the cookie.
+        token = request.cookie_jar[:chAppToken]
+        if token
+          begin
+            # Validate the JWT token and store the result in the environment hash.
+            env[AUTH_DETAILS_ENV_KEY] = CohesiveMarketplaceSDK.validate_jwt token
+          rescue => exception
+            # Return a 401 Unauthorized response if the token is invalid.
+            puts exception
+            return [401, {"Content-Type" => "text/plain"}, [exception.message]]
+          end
+        else
+          # Redirect the user to the login page if the token is missing.
+          return [301, {"Location" => "/cohesive_login", "Content-Type" => "text/plain"}, ["token not in cookie"]]
+        end
+      end
+      # Call the next middleware or application in the chain.
       @app.call(env)
     end
   end

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: cohesive_marketplace_middleware
 version: !ruby/object:Gem::Version
-  version: 0.1.3
+  version: 0.1.4
 platform: ruby
 authors:
 - Chinmay Relkar
 autorequire:
 bindir: exe
 cert_chain: []
-date: 2023-02-24 00:00:00.000000000 Z
+date: 2023-02-28 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: jwt