devise-auth0 0.0.3 → 0.1.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA1:
-  metadata.gz: a9ebedfc7f681b212887f7eb792de3f95699b06f
-  data.tar.gz: b3d048af9d4e2ef6040565e7f0c801eb40e309f4
+  metadata.gz: 3d4c2ff183e811e6ca8638b897c212dfda57bb62
+  data.tar.gz: 112312295075193d8d6a255f06fda5a29789df60
 SHA512:
-  metadata.gz: b10717d8b1ce99f92d0cc5fbcffc57c8bf635cf9a913f4f469e94c5a6dacc2cb4fc57022b23680f4d02f4c6040c314eb84509e94739af54847bfecefe932712f
-  data.tar.gz: 8714436aa44207a2744b8eef2115f6841ac186689be1d2a020ec7314ef15ec70f54e2f2d3077dcbd6d774d34fa0ee3c94f3290a227672709fb947d18a24fc5b1
+  metadata.gz: 7fa99c079ff1b5553df2fa28fba05fe8dcce45d492533e680de3ff706fb4a3e4c9529c188b96d79674cbddb8e4c950ecae729bebaa0e7b59a84f7e44f215fc8c
+  data.tar.gz: d02dc31f59da051643fe3c5efbff4ab01ae8393778a4cfb9148dcd4e06f5335ae4e63aa1ef62f8bc909f19c26a21b0659bbc3e01fcdddf4103a09edb33f5d6d3

data/CHANGELOG

@@ -1,3 +1,11 @@
+0.1.0 / 2016-01-04
+
+  * Breaking changes
+    
+    * Auth0 client ID and secret are no longer assumed to be in ENV vars at
+      startup time. Instead, configure them when adding the strategy to warden 
+      (see README under Configuration).
+
 0.0.3 / 2016-09-07
 
   * Official user identifier is the `sub` field. Use it first before `user_id`

data/README.md

@@ -1,6 +1,8 @@
 # Devise::Auth0
 
-Allow signed-in auth0 users to areas protected by devise.
+A devise/warden strategy for authenticating users with an Auth0-issued JSON web
+token (JWT). This token is assumed to be provided via the Authorization HTTP
+header.
 
 ## Installation
 
@@ -34,7 +36,12 @@ Devise.setup do |config|
   config.skip_session_storage = [:auth0_authenticatable] unless Rails.env.test?
 
   config.warden do |manager|
-    manager.strategies.add(:auth0_authenticatable, Devise::Strategies::Auth0Authenticatable)
+
+    manager.strategies.add(:auth0_authenticatable, Devise::Strategies::Auth0Authenticatable) do
+      config.client_id = "abc123"
+      config.secret = "shhhh"
+    end
+
     manager.default_strategies(scope: :user).unshift :auth0_authenticatable
   end
 end

data/lib/devise/auth0/config.rb

@@ -0,0 +1,13 @@
+module Devise
+
+  module Auth0
+
+    class Config
+
+      attr_accessor :client_id, :secret
+
+    end
+
+  end
+
+end

data/lib/devise/auth0/version.rb

@@ -1,5 +1,5 @@
 module Devise
   module Auth0
-    VERSION = "0.0.3"
+    VERSION = "0.1.0"
   end
 end

data/lib/devise/auth0.rb

@@ -4,7 +4,12 @@ require 'devise/strategies/auth0_authenticatable'
 
 module Devise
   module Auth0
-    CLIENT_ID = ENV.fetch 'AUTH0_CLIENT_ID'
-    SECRET = Base64.decode64 ENV.fetch('AUTH0_SECRET').gsub('-', '+').gsub('_','/')
+    def self.client_id
+      ENV.fetch 'AUTH0_CLIENT_ID'
+    end
+
+    def self.secret
+      Base64.decode64 ENV.fetch('AUTH0_SECRET').gsub('-', '+').gsub('_','/')
+    end
   end
 end

data/lib/devise/strategies/auth0_authenticatable.rb

@@ -1,15 +1,20 @@
 require 'devise'
+require 'devise/auth0/config'
 
 module Devise
   module Strategies
 
     class Auth0Authenticatable < Base
 
+      def self.config
+        @config ||= Devise::Auth0::Config.new
+      end
+
       def authenticate!
         token = env['HTTP_AUTHORIZATION'].to_s.gsub('Bearer ', '')
 
         begin
-          decoded_token, header = JWT.decode(token, Devise::Auth0::SECRET)
+          decoded_token, header = JWT.decode(token, self.class.config.secret)
         rescue JWT::DecodeError
           Rails.logger.warn 'Unreadable Auth0 token'
           fail! 'Unreadable Auth0 token'
@@ -22,7 +27,7 @@ module Devise
           return
         end
 
-        if decoded_token['aud'] == Auth0::CLIENT_ID
+        if decoded_token['aud'] == self.class.config.client_id
           user = mapping.to.find_or_sync_auth0(decoded_token)
           success! user
           return

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: devise-auth0
 version: !ruby/object:Gem::Version
-  version: 0.0.3
+  version: 0.1.0
 platform: ruby
 authors:
 - Derek Kastner
 autorequire: 
 bindir: bin
 cert_chain: []
-date: 2016-09-07 00:00:00.000000000 Z
+date: 2017-01-04 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: bundler
@@ -53,6 +53,7 @@ files:
 - Rakefile
 - devise-auth0.gemspec
 - lib/devise/auth0.rb
+- lib/devise/auth0/config.rb
 - lib/devise/auth0/failure_app.rb
 - lib/devise/auth0/version.rb
 - lib/devise/models/auth0_authenticatable.rb