contrib-auth 0.3.1 → 0.4.2

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: cb10ef1984df8036c7cc625c7560808a2da9e8613a953fbf3b2b715dbccab364
-  data.tar.gz: 759d43d360a3c22b074963a41e5f69b9899dfb509b7db106da49a480cc7a3139
+  metadata.gz: 0c1695b4715a11c8631ac8a52cf6839a1497ecc621e87d4404bc2c7a6c14fe6a
+  data.tar.gz: 7c3702e193cae4e60772a35b3940691a90a34c56b8cd18cc8f1bbf508db876cb
 SHA512:
-  metadata.gz: 41467b432ea48e15fd651813769e525b57e1af206e07c9afb628244a6b3dd71e11d1cd6e73322b07c9129d456544a00ee3211e6871a89b4523dc4ee77bdad2cc
-  data.tar.gz: 9076f1eead44bc2ea93994484352ba77dd52558f45ff03d1fbb13ae626825a15f90540e50ef24fd510e1c81762f4625a10c0a9d856e7580ab7cfe28dc4d87132
+  metadata.gz: ac13c1ae9640fb29c2efde87293465e8a56b11d9a0103be1a838300b8ee57a77956a830aa538d527c8b75eef6ec66b009195bcc4c3700cb8d10221d0dbabe322
+  data.tar.gz: fb3750efea0e27c842ae6ab691639e66d0490af6fb29cefda8e56de850fe458ad5e41c1472813f543abd445045894b3d5cb5529c5897dc24f431a14ac0285d23

data/app/controllers/contrib/auth/authentication_controller.rb

@@ -7,6 +7,33 @@ module Contrib
           params[:password]
         )
       end
+
+      def reset_password
+        @response = Contrib::Auth::api.reset_password(
+          params[:email_or_username]
+        )
+
+        render json: {}, status: :ok
+      end
+
+      def sign_up_with_email_or_username_and_password
+        @response = Contrib::Auth.api.sign_up_with_email_and_password(
+          params[:email_or_username],
+          params[:password]
+        )
+      end
+
+      def change_password
+        @response = Contrib::Auth.api.change_password(
+          params[:id_token],
+          params[:password],
+          params[:password_confirmation],
+        )
+      end
+
+      def certificates
+        render json: Contrib::Auth.api.certificates, status: :ok
+      end
     end
   end
 end

data/app/views/contrib/auth/authentication/change_password.json.jbuilder

@@ -0,0 +1 @@
+json.extract!(@response, :id_token, :refresh_token, :expires_in, :email)

data/app/views/contrib/auth/authentication/sign_up_with_email_or_username_and_password.json.jbuilder

@@ -0,0 +1 @@
+json.extract!(@response, :id_token, :refresh_token, :expires_in)

data/config/routes.rb

@@ -1,5 +1,9 @@
 Contrib::Auth::Engine.routes.draw do
   defaults format: :json do
     post '/sign_in_with_password' => 'authentication#sign_in_with_password'
+    post '/reset_password'        => 'authentication#reset_password'
+    post '/change_password'       => 'authentication#change_password'
+    get  '/certificates'          => 'authentication#certificates'
+    post '/sign_up_with_email_or_username_and_password' => 'authentication#sign_up_with_email_or_username_and_password'
   end
 end

data/lib/contrib/auth/api.rb

@@ -6,7 +6,10 @@ module Contrib
       end
 
       def sign_in_with_password(email_or_username, password)
+        raise ArgumentError unless email_or_username
+        raise ArgumentError unless password
         # TODO: Implement retryable
+        # TODO: Validate incoming attributes
         @provider.sign_in_with_password(email_or_username, password)
       end
 
@@ -15,8 +18,22 @@ module Contrib
       end
 
       def sign_up_with_email_and_password(email_or_username, password)
+        raise ArgumentError unless email_or_username
+        raise ArgumentError unless password
+
+        # TODO: ask for password confirmation
         @provider.sign_up_with_email_and_password(email_or_username, password)
       end
+
+      def change_password(id_token, password, password_confirmation)
+        raise ArgumentError unless password == password_confirmation
+
+        @provider.change_password(id_token, password)
+      end
+
+      def certificates
+        @provider.certificates
+      end
     end
   end
 end

data/lib/contrib/auth/provider/google_auth.rb

@@ -5,6 +5,7 @@ module Contrib
     module Provider
       class GoogleAuth
         DEFAULT_BASE_ENDPOINT = 'https://identitytoolkit.googleapis.com'.freeze
+        PUBLIC_KEYS_URI       = 'https://www.googleapis.com/robot/v1/metadata/x509/securetoken@system.gserviceaccount.com'.freeze
 
         def initialize(api_key, http_client = Faraday.new(DEFAULT_BASE_ENDPOINT))
           @api_key       = api_key
@@ -70,6 +71,34 @@ module Contrib
 
           response.success?
         end
+
+        # refers to: https://firebase.google.com/docs/auth/admin/verify-id-tokens
+        def certificates
+          response = @http_client.get(PUBLIC_KEYS_URI)
+          JSON.parse(response.body)
+        end
+
+        def change_password(id_token, password)
+          response = @http_client.post('/v1/accounts:update') do |req|
+            req.params[:key] = @api_key
+            req.headers['Content-Type'] = 'application/json'
+
+            req.body = JSON.generate(
+              idToken: id_token,
+              password: password,
+              returnSecureToken: true,
+            )
+          end
+
+          parsed_response = JSON.parse(response.body)
+
+          Contrib::Auth::Provider::Responses::ChangePassword.new(
+            id_token:       parsed_response['idToken'],
+            refresh_token:  parsed_response['refreshToken'],
+            expires_in:     parsed_response['expiresIn'],
+            email:          parsed_response['email'],
+          )
+        end
       end
     end
   end

data/lib/contrib/auth/provider/responses/change_password.rb

@@ -0,0 +1,20 @@
+module Contrib
+  module Auth
+    module Provider
+      module Responses
+        class ChangePassword
+          attr_accessor :id_token
+          attr_accessor :refresh_token
+          attr_accessor :expires_in
+          attr_accessor :email
+
+          def initialize(params = {})
+            params.each do  |param, key|
+              public_send("#{param}=", key)
+            end
+          end
+        end
+      end
+    end
+  end
+end

data/lib/contrib/auth/provider/responses.rb

@@ -1,2 +1,3 @@
 require 'contrib/auth/provider/responses/sign_in_with_password'
 require 'contrib/auth/provider/responses/sign_up_with_email_and_password'
+require 'contrib/auth/provider/responses/change_password'

data/lib/contrib/auth/version.rb

@@ -1,5 +1,5 @@
 module Contrib
   module Auth
-    VERSION = '0.3.1'
+    VERSION = '0.4.2'
   end
 end

metadata

@@ -1,22 +1,19 @@
 --- !ruby/object:Gem::Specification
 name: contrib-auth
 version: !ruby/object:Gem::Version
-  version: 0.3.1
+  version: 0.4.2
 platform: ruby
 authors:
 - Contribyard Developers
 autorequire: 
 bindir: bin
 cert_chain: []
-date: 2021-10-28 00:00:00.000000000 Z
+date: 2023-07-29 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: rails
   requirement: !ruby/object:Gem::Requirement
     requirements:
-    - - "~>"
-      - !ruby/object:Gem::Version
-        version: 6.1.4
     - - ">="
       - !ruby/object:Gem::Version
         version: 6.1.4.1
@@ -24,9 +21,6 @@ dependencies:
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
-    - - "~>"
-      - !ruby/object:Gem::Version
-        version: 6.1.4
     - - ">="
       - !ruby/object:Gem::Version
         version: 6.1.4.1
@@ -76,7 +70,9 @@ files:
 - app/jobs/contrib/auth/application_job.rb
 - app/mailers/contrib/auth/application_mailer.rb
 - app/models/contrib/auth/application_record.rb
+- app/views/contrib/auth/authentication/change_password.json.jbuilder
 - app/views/contrib/auth/authentication/sign_in_with_password.json.jbuilder
+- app/views/contrib/auth/authentication/sign_up_with_email_or_username_and_password.json.jbuilder
 - config/routes.rb
 - lib/contrib/auth.rb
 - lib/contrib/auth/api.rb
@@ -84,6 +80,7 @@ files:
 - lib/contrib/auth/engine.rb
 - lib/contrib/auth/provider/google_auth.rb
 - lib/contrib/auth/provider/responses.rb
+- lib/contrib/auth/provider/responses/change_password.rb
 - lib/contrib/auth/provider/responses/sign_in_with_password.rb
 - lib/contrib/auth/provider/responses/sign_up_with_email_and_password.rb
 - lib/contrib/auth/version.rb
@@ -108,7 +105,7 @@ required_rubygems_version: !ruby/object:Gem::Requirement
     - !ruby/object:Gem::Version
       version: '0'
 requirements: []
-rubygems_version: 3.2.22
+rubygems_version: 3.4.10
 signing_key: 
 specification_version: 4
 summary: Vendor-agnostic authentication component for Rails APIs