devise_auth0_jwt_strategy 0.0.1

checksums.yaml

@@ -0,0 +1,7 @@
+---
+SHA1:
+  metadata.gz: fe3473e73c106f5b16f8d0763b9ee7ad8f0803ce
+  data.tar.gz: ccf3e456e17b969d76d960eafb2e39e0c81e9fc6
+SHA512:
+  metadata.gz: 68cc319504aba4e87159065fd4091a09734b9512320050d5424fd57e8ae64657e092297613b1663870abf41da23d7fe0dcc2e6fd2f7e385b442c4cca88c014ff
+  data.tar.gz: ab89c4dcecbd259986798fbe9ecaa5eeec40617d2994bff08b001b04ea802e9d6a72f787c2cfa66662ec5d4c423fbca35e04d7614440f9d3ef8909d3255ac0dd

data/lib/devise_auth0_jwt_strategy.rb

@@ -0,0 +1,3 @@
+require 'devise_auth0_jwt_strategy/strategy'
+
+require 'devise_auth0_jwt_strategy/railtie' if defined?(::Rails)

data/lib/devise_auth0_jwt_strategy/railtie.rb

@@ -0,0 +1,26 @@
+module DeviseAuth0JwtStrategy
+  class Railtie < Rails::Railtie
+    #initializer "devise_auth0_jwt_strategy.configure_rails_initialization" do
+    config.after_initialize do
+      print "Wiring up Auth0 JWT Devise Strategy..."
+      if ENV['AUTH0_CLIENT_SECRET']
+
+        ::Devise.setup do |config|
+
+          config.warden do |manager|
+            manager.strategies.add(:auth0jwt, Devise::Strategies::Auth0Jwt)
+            manager.default_strategies(:scope => :user).unshift :auth0jwt
+          end
+
+        end
+
+        print "done.\n"
+
+      else
+        print " no Auth0 Secret Found. Skipping...\n"
+        puts ENV.inspect
+      end
+
+    end
+  end
+end

data/lib/devise_auth0_jwt_strategy/strategy.rb

@@ -0,0 +1,78 @@
+require 'jwt'
+require 'devise'
+
+module Devise
+  module Strategies
+    class Auth0Jwt < Base
+
+      class ClaimInvalid < StandardError; end
+
+      def auth0_client_secret
+        ( ENV['AUTH0_CLIENT_SECRET'] || 0 )
+      end
+
+      def auth0_client_secret?
+        ( !auth0_client_secret.nil? && auth0_client_secret != 0 )
+      end
+
+      def auth0_client_id
+        ( ENV['AUTH0_CLIENT_ID'] || 0 )
+      end
+
+      def auth0_client_id?
+        ( !auth0_client_id.nil? && auth0_client_id != 0 )
+      end
+
+      def valid_jwt_auth_header?(header_split)
+        header_split.length == 2 &&
+        header_split[0] == 'Bearer'
+      end
+
+      def jwt_from_auth_header
+        return nil unless request.authorization
+
+        authorization_split = request.authorization.split(' ')
+        return nil unless valid_jwt_auth_header?(authorization_split)
+
+        return authorization_split.last
+      end
+
+      def jwt_token
+        # Check for params['jwt'] or token = request.headers['Authorization'].split(' ').last
+        @jwt_token ||= ( params['jwt'] || jwt_from_auth_header )
+      end
+
+      def valid?
+        ( auth0_client_secret? and auth0_client_id? and !!jwt_token )
+      end
+
+      def authenticate!
+
+        if valid?
+          # This will throw JWT::DecodeError if it fails
+          payload, header = ::JWT.decode(@jwt_token,
+            ::JWT.base64url_decode(auth0_client_secret))
+
+          raise ClaimInvalid.new('JWT has the wrong client id') unless payload['aud'] == auth0_client_id
+          raise ClaimInvalid.new('JWT has expired') unless payload['exp'].to_i > Time.now.to_i
+
+          u = ::User.find_by_email(payload['email'])
+
+          u.nil? ? fail!("Could not log in") : success!(u)
+
+        else
+          fail("No JWT token passed in")
+
+        end
+
+      rescue ClaimInvalid => e
+        fail! e.message
+
+      rescue ::JWT::DecodeError => e
+        puts "JWT::DecodeError -- #{e.message}"
+        fail!("JWT token is invalid. Please get a new token and try again.")
+      end
+
+    end
+  end
+end

metadata

@@ -0,0 +1,144 @@
+--- !ruby/object:Gem::Specification
+name: devise_auth0_jwt_strategy
+version: !ruby/object:Gem::Version
+  version: 0.0.1
+platform: ruby
+authors:
+- Patrick McGraw
+autorequire: 
+bindir: bin
+cert_chain: []
+date: 2015-03-10 00:00:00.000000000 Z
+dependencies:
+- !ruby/object:Gem::Dependency
+  name: rest-client
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: 1.7.2
+  type: :runtime
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: 1.7.2
+- !ruby/object:Gem::Dependency
+  name: json
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: 1.8.1
+  type: :runtime
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: 1.8.1
+- !ruby/object:Gem::Dependency
+  name: jwt
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: 1.0.0
+  type: :runtime
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: 1.0.0
+- !ruby/object:Gem::Dependency
+  name: devise
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: 3.4.1
+  type: :runtime
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: 3.4.1
+- !ruby/object:Gem::Dependency
+  name: rails
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: 4.0.0
+  type: :development
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: 4.0.0
+- !ruby/object:Gem::Dependency
+  name: rspec-rails
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '3.0'
+  type: :development
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '3.0'
+- !ruby/object:Gem::Dependency
+  name: sqlite3
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '1.0'
+  type: :development
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '1.0'
+description: Authenticate requests using an Auth0 JWT passed by HTTP header
+email: patrick@mcgraw-tech.com
+executables: []
+extensions: []
+extra_rdoc_files: []
+files:
+- lib/devise_auth0_jwt_strategy.rb
+- lib/devise_auth0_jwt_strategy/railtie.rb
+- lib/devise_auth0_jwt_strategy/strategy.rb
+homepage: http://rubygems.org/gems/devise_auth0_jwt_strategy
+licenses:
+- MIT
+metadata: {}
+post_install_message: 
+rdoc_options: []
+require_paths:
+- lib
+required_ruby_version: !ruby/object:Gem::Requirement
+  requirements:
+  - - ">="
+    - !ruby/object:Gem::Version
+      version: '0'
+required_rubygems_version: !ruby/object:Gem::Requirement
+  requirements:
+  - - ">="
+    - !ruby/object:Gem::Version
+      version: '0'
+requirements: []
+rubyforge_project: 
+rubygems_version: 2.4.5
+signing_key: 
+specification_version: 4
+summary: Authenticate requests using an Auth0 JWT passed by HTTP header
+test_files: []