couchkeeper 0.6.7

data/Rakefile

@@ -0,0 +1,18 @@
+require 'bundler/setup'
+require 'rspec/core/rake_task'
+
+desc 'Default: run specs.'
+task :default => :spec
+
+desc "Run all specs"
+RSpec::Core::RakeTask.new(:spec)
+
+namespace :doorkeeper do
+  desc "Install doorkeeper in dummy app"
+  task :install do
+    cd 'spec/dummy'
+    system 'bundle exec rails g doorkeeper:install --force'
+  end
+end
+
+Bundler::GemHelper.install_tasks

data/app/assets/javascripts/doorkeeper/application.js

@@ -0,0 +1,2 @@
+//= require jquery
+//= require jquery_ujs

data/app/assets/stylesheets/doorkeeper/application.css

@@ -0,0 +1,18 @@
+/*
+ *= require doorkeeper/bootstrap.min
+ *
+ *= require_self
+ *= require_tree .
+*/
+
+body {
+  padding-top: 60px;
+}
+
+.inline_block {
+  display: inline-block;
+}
+
+table td {
+  vertical-align: middle;
+}

data/app/assets/stylesheets/doorkeeper/form.css

@@ -0,0 +1,13 @@
+.field_with_errors {
+  display: inline;
+}
+
+.field_with_errors input {
+  color: #B94A48;
+  border-color: #EE5F5B;
+}
+
+.input .help-inline.error {
+  color: #B94A48;
+}
+

data/app/controllers/doorkeeper/application_controller.rb

@@ -0,0 +1,7 @@
+module Doorkeeper
+  class ApplicationController < ActionController::Base
+    include Helpers::Controller
+
+    helper "doorkeeper/form_errors"
+  end
+end

data/app/controllers/doorkeeper/applications_controller.rb

@@ -0,0 +1,60 @@
+module Doorkeeper
+  class ApplicationsController < Doorkeeper::ApplicationController
+    respond_to :html
+
+    before_filter :authenticate_admin!
+
+    def index
+        @applications = Application.find_all
+    end
+
+    def new
+      @application = Application.new
+    end
+
+    def create
+      @application = Application.new(application_params)
+      if @application.save
+        flash[:notice] = I18n.t(:notice, :scope => [:doorkeeper, :flash, :applications, :create])
+        p @application
+        respond_with [:oauth, @application]
+      else
+        render :new
+      end
+    end
+
+    def show
+      @application = Application.find(params[:id])
+    end
+
+    def edit
+      @application = Application.find(params[:id])
+    end
+
+    def update
+      @application = Application.find(params[:id])
+      if @application.update_attributes(application_params)
+        flash[:notice] = I18n.t(:notice, :scope => [:doorkeeper, :flash, :applications, :update])
+        respond_with [:oauth, @application]
+      else
+        render :edit
+      end
+    end
+
+    def destroy
+      @application = Application.find(params[:id])
+      flash[:notice] = I18n.t(:notice, :scope => [:doorkeeper, :flash, :applications, :destroy]) if @application.delete
+      redirect_to oauth_applications_url
+    end
+
+    private
+
+    def application_params
+      if params.respond_to?(:permit)
+        params.require(:application).permit(:name, :redirect_uri)
+      else
+        params[:application].slice(:name, :redirect_uri) rescue nil
+      end
+    end
+  end
+end

data/app/controllers/doorkeeper/authorizations_controller.rb

@@ -0,0 +1,57 @@
+module Doorkeeper
+  class AuthorizationsController < ::Doorkeeper::ApplicationController
+    before_filter :authenticate_resource_owner!
+
+    def new
+      if pre_auth.authorizable?
+        #p pre_auth
+        if Doorkeeper::AccessToken.matching_token_for(pre_auth.client, current_resource_owner.id, pre_auth.scopes) || skip_authorization?
+          auth = authorization.authorize
+          redirect_to auth.redirect_uri
+        else
+          render :new
+        end
+      else
+        render :error
+      end
+    end
+
+    def show
+    end
+
+    # TODO: Handle raise invalid authorization
+    def create
+      auth = authorization.authorize
+
+      if auth.redirectable?
+        redirect_to auth.redirect_uri
+      else
+        render :json => auth.body, :status => auth.status
+      end
+    end
+
+    def destroy
+      auth = authorization.deny
+
+      if auth.redirectable?
+        redirect_to auth.redirect_uri
+      else
+        render :json => auth.body, :status => auth.status
+      end
+    end
+
+  private
+
+    def pre_auth
+      @pre_auth ||= OAuth::PreAuthorization.new(Doorkeeper.configuration, server.client_via_uid, params)
+    end
+
+    def authorization
+      @authorization ||= strategy.request
+    end
+
+    def strategy
+      @strategy ||= server.authorization_request pre_auth.response_type
+    end
+  end
+end

data/app/controllers/doorkeeper/authorized_applications_controller.rb

@@ -0,0 +1,12 @@
+class Doorkeeper::AuthorizedApplicationsController < Doorkeeper::ApplicationController
+  before_filter :authenticate_resource_owner!
+
+  def index
+    @applications = Doorkeeper::Application.authorized_for(current_resource_owner)
+  end
+
+  def destroy
+    Doorkeeper::AccessToken.revoke_all_for params[:id], current_resource_owner
+    redirect_to oauth_authorized_applications_url, :notice => I18n.t(:notice, :scope => [:doorkeeper, :flash, :authorized_applications, :destroy])
+  end
+end

data/app/controllers/doorkeeper/token_info_controller.rb

@@ -0,0 +1,12 @@
+module Doorkeeper
+  class TokenInfoController < ::Doorkeeper::ApplicationController
+    def show
+      if doorkeeper_token && doorkeeper_token.accessible?
+        render :json => doorkeeper_token, :status => :ok
+      else
+        error = OAuth::ErrorResponse.new(:name => :invalid_request)
+        render :json => error.body, :status => error.status
+      end
+    end
+  end
+end

data/app/controllers/doorkeeper/tokens_controller.rb

@@ -0,0 +1,20 @@
+module Doorkeeper
+  class TokensController < ActionController::Metal
+    include Helpers::Controller
+
+    def create
+      response = strategy.authorize
+      self.headers.merge! response.headers
+      self.response_body = response.body.to_json
+      self.status        = response.status
+    rescue Errors::DoorkeeperError => e
+      handle_token_exception e
+    end
+
+  private
+
+    def strategy
+      @strategy ||= server.token_request params[:grant_type]
+    end
+  end
+end

data/app/helpers/doorkeeper/form_errors_helper.rb

@@ -0,0 +1,9 @@
+module Doorkeeper::FormErrorsHelper
+  def errors_for(object, method)
+    if object.errors[method].present?
+      content_tag(:span, :class => "error help-inline") do
+        object.errors[method].join(',')
+      end
+    end
+  end
+end

data/app/validators/redirect_uri_validator.rb

@@ -0,0 +1,23 @@
+require 'uri'
+
+class RedirectUriValidator < ActiveModel::EachValidator
+  def self.test_redirect_uri
+    Doorkeeper.configuration.test_redirect_uri
+  end
+
+  def validate_each(record, attribute, value)
+    uri = ::URI.parse(value)
+    return if test_redirect_uri?(uri)
+    record.errors.add(attribute, :fragment_present) unless uri.fragment.nil?
+    record.errors.add(attribute, :relative_uri) if uri.scheme.nil? || uri.host.nil?
+    record.errors.add(attribute, :has_query_parameter) unless uri.query.nil?
+  rescue URI::InvalidURIError => e
+    record.errors.add(attribute, :invalid_uri)
+  end
+
+private
+
+  def test_redirect_uri?(uri)
+    self.class.test_redirect_uri.present? && uri.to_s == self.class.test_redirect_uri.to_s
+  end
+end

data/app/views/doorkeeper/applications/_form.html.erb

@@ -0,0 +1,34 @@
+<%= form_for([:oauth, application]) do |f| %>
+  <fieldset>
+    <% if application.errors.any? %>
+      <div class="alert-message error" data-alert><a class="close" href="#">×</a><p>Whoops! Check your form for possible errors</p></div>
+    <% end %>
+
+    <div class="clearfix">
+      <%= f.label :name %>
+      <div class="input">
+        <%= f.text_field :name %>
+        <%= errors_for application, :name %>
+      </div>
+    </div>
+
+    <div class="clearfix">
+      <%= f.label :redirect_uri %>
+      <div class="input">
+        <%= f.text_field :redirect_uri %>
+        <%= errors_for application, :redirect_uri %>
+        <% if Doorkeeper.configuration.test_redirect_uri %>
+          <span class="help-inline">Use <%= Doorkeeper.configuration.test_redirect_uri %> for local tests</span>
+        <% end %>
+      </div>
+    </div>
+
+    <div class="clearfix"></div>
+
+    <div class="actions">
+      <%= f.submit :Submit, :class => "btn primary" %>
+      <%= link_to "Cancel", oauth_applications_path, :class => "btn" %>
+    </div>
+  </fieldset>
+<% end %>
+

data/app/views/doorkeeper/applications/edit.html.erb

@@ -0,0 +1,13 @@
+<div class="span16">
+  <header class="page-header"><h2>Edit application</h2></header>
+</div>
+
+<div class="span12">
+  <%= render 'form', :application => @application %>
+</div>
+
+<div class="span4">
+  <h3>Actions</h3>
+  <p><%= link_to 'Back to application list', oauth_applications_path %></p>
+</div>
+

data/app/views/doorkeeper/applications/index.html.erb

@@ -0,0 +1,29 @@
+<div class="span16">
+  <header class="page-header">
+    <h2>Your applications</h2>
+  </header>
+
+  <p><%= link_to 'New Application', new_oauth_application_path %></p>
+
+  <table class="zebra-striped">
+    <thead>
+      <tr>
+        <th>Name</th>
+        <th>Callback url</th>
+        <th></th>
+        <th></th>
+      </tr>
+    </thead>
+    <tbody>
+      <% @applications.each do |application| %>
+        <tr id="application_<%= application.id %>">
+          <td><%= link_to application.name, [:oauth, application] %></td>
+          <td><%= application.redirect_uri %></td>
+          <td><%= link_to 'Edit', edit_oauth_application_path(application) %></td>
+          <td><%= link_to 'Destroy', [:oauth, application], :data => { :confirm => 'Are you sure?' }, :method => :delete %></td>
+        </tr>
+      <% end %>
+    </tbody>
+  </table>
+
+</div>

data/app/views/doorkeeper/applications/new.html.erb

@@ -0,0 +1,13 @@
+<div class="span16">
+  <header class="page-header"><h2>New application</h2></header>
+</div>
+
+<div class="span12">
+  <%= render 'form', :application => @application %>
+</div>
+
+<div class="span4">
+  <h3>Actions</h3>
+  <p><%= link_to 'Back to application list', oauth_applications_path %></p>
+</div>
+

data/app/views/doorkeeper/applications/show.html.erb

@@ -0,0 +1,26 @@
+<div class="span16">
+  <header class="page-header">
+    <h1>Application: <%= @application.name %></h1>
+  </header>
+</div>
+
+<div class="span10">
+  <h4>Callback url:</h4>
+  <p><code id="callback_url"><%= @application.redirect_uri %></code></p>
+
+  <h4>Application Id:</h4>
+  <p><code id="application_id"><%= @application.id %></code></p>
+
+  <h4>Secret:</h4>
+  <p><code id="secret"><%= @application.secret %></code></p>
+
+  <h4>Link to authorization code:</h4>
+  <p><%= link_to 'Authorize', oauth_authorization_path(:client_id => @application.id, :redirect_uri => @application.redirect_uri, :response_type => 'code' ) %></p>
+</div>
+
+<div class="span6">
+  <h3>Actions</h3>
+  <p><%= link_to 'List all', oauth_applications_path %></p>
+  <p><%= link_to 'Edit', edit_oauth_application_path(@application) %></p>
+  <p><%= link_to 'Remove', [:oauth, @application], :method => :delete, :data => { :confirm => "Are you sure?" } %></p>
+</div>

data/app/views/doorkeeper/authorizations/error.html.erb

@@ -0,0 +1,6 @@
+<div class="span16">
+  <h2>An error has occurred</h2>
+  <p>
+    <pre><%= @pre_auth.error_response.body[:error_description] %></pre>
+  </p>
+</div>

data/app/views/doorkeeper/authorizations/new.html.erb

@@ -0,0 +1,37 @@
+<div class="span16">
+  <h2>Authorize <%= @pre_auth.client.name %> to use your account?</h2>
+</div>
+
+<div class="span16">
+  <% if @pre_auth.scopes %>
+  <p>
+    This application will be able to:
+  </p>
+  <ul>
+    <% @pre_auth.scopes.each do |scope| %>
+      <li><%= t scope, :scope => [:doorkeeper, :scopes]  %></li>
+    <% end %>
+  </ul>
+  <% end %>
+
+  <div class="inline_block">
+    <%= form_tag oauth_authorization_path, :method => :post do %>
+      <%= hidden_field_tag :client_id, @pre_auth.client.id %>
+      <%= hidden_field_tag :redirect_uri, @pre_auth.redirect_uri %>
+      <%= hidden_field_tag :state, @pre_auth.state %>
+      <%= hidden_field_tag :response_type, @pre_auth.response_type %>
+      <%= hidden_field_tag :scope, @pre_auth.scope %>
+      <%= submit_tag "Authorize", :class => "btn success" %> or
+    <% end %>
+  </div>
+  <div class="inline_block">
+    <%= form_tag oauth_authorization_path, :method => :delete do %>
+      <%= hidden_field_tag :client_id, @pre_auth.client.id %>
+      <%= hidden_field_tag :redirect_uri, @pre_auth.redirect_uri %>
+      <%= hidden_field_tag :state, @pre_auth.state %>
+      <%= hidden_field_tag :response_type, @pre_auth.response_type %>
+      <%= hidden_field_tag :scope, @pre_auth.scope %>
+      <%= submit_tag "Deny", :class => "btn" %>
+    <% end %>
+  </div>
+</div>

data/app/views/doorkeeper/authorizations/show.html.erb

@@ -0,0 +1,4 @@
+<div class="span16">
+  <h3>Authorization code:</h3>
+  <code id="authorization_code"><%= params[:code] %></code>
+</div>