devise_oauth2_providable 0.3.1 → 0.3.2

data/lib/devise_oauth2_providable.rb

@@ -6,8 +6,10 @@ require 'devise_oauth2_providable/schema'
 require 'devise_oauth2_providable/engine'
 require 'devise_oauth2_providable/strategies/oauth2_password_grant_type_strategy'
 require 'devise_oauth2_providable/strategies/oauth2_refresh_token_grant_type_strategy'
+require 'devise_oauth2_providable/strategies/oauth2_authorization_code_grant_type_strategy'
 require 'devise_oauth2_providable/models/oauth2_password_grantable'
 require 'devise_oauth2_providable/models/oauth2_refresh_token_grantable'
+require 'devise_oauth2_providable/models/oauth2_authorization_code_grantable'
 
 module Devise
   module Oauth2Providable
@@ -28,3 +30,6 @@ Devise.add_module(:oauth2_password_grantable,
 Devise.add_module(:oauth2_refresh_token_grantable, 
   :strategy => true,
   :model => 'devise_oauth2_providable/models/oauth2_refresh_token_grantable')
+Devise.add_module(:oauth2_authorization_code_grantable,
+  :strategy => true,
+  :model => 'devise_oauth2_providable/models/oauth2_authorization_code_grantable')

data/lib/devise_oauth2_providable/models/oauth2_authorization_code_grantable.rb

@@ -0,0 +1,6 @@
+module Devise
+  module Models
+    module Oauth2AuthorizationCodeGrantable
+    end
+  end
+end

data/lib/devise_oauth2_providable/strategies/oauth2_authorization_code_grant_type_strategy.rb

@@ -0,0 +1,21 @@
+require 'devise_oauth2_providable/strategies/oauth2_grant_type_strategy'
+
+module Devise
+  module Strategies
+    class Oauth2AuthorizationCodeGrantTypeStrategy < Oauth2GrantTypeStrategy
+      def grant_type
+        'authorization_code'
+      end
+
+      def authenticate!
+        if client && code = AuthorizationCode.valid.find_by_token(params[:code])
+          success! code.user
+        elsif !halted?
+          oauth_error! :invalid_grant, 'invalid authorization code request'
+        end
+      end
+    end
+  end
+end
+
+Warden::Strategies.add(:oauth2_authorization_code_grantable, Devise::Strategies::Oauth2AuthorizationCodeGrantTypeStrategy)

data/lib/devise_oauth2_providable/version.rb

@@ -1,5 +1,5 @@
 module Devise
   module Oauth2Providable
-    VERSION = "0.3.1"
+    VERSION = "0.3.2"
   end
 end

data/spec/rails_app/app/models/user.rb

@@ -1,3 +1,3 @@
 class User < ActiveRecord::Base
-  devise :database_authenticatable, :oauth2_providable, :oauth2_password_grantable, :oauth2_refresh_token_grantable
+  devise :database_authenticatable, :oauth2_providable, :oauth2_password_grantable, :oauth2_refresh_token_grantable, :oauth2_authorization_code_grantable
 end

data/spec/rails_app/spec/integration/oauth2_authorization_token_grant_type_strategy_spec.rb

@@ -0,0 +1,62 @@
+require 'spec_helper'
+
+describe Devise::Strategies::Oauth2AuthorizationCodeGrantTypeStrategy do
+  describe 'POST /oauth2/token' do
+    describe 'with grant_type=authorization_code' do
+      context 'with valid params' do
+        before do
+          @user = User.create! :email => 'ryan@socialcast.com', :name => 'ryan sonnek', :password => 'test'
+          @client = Client.create! :name => 'example', :redirect_uri => 'http://localhost', :website => 'http://localhost'
+          @authorization_code = @user.authorization_codes.create(:client_id => @client, :redirect_uri => @client.redirect_uri)
+          params = {
+            :grant_type => 'authorization_code',
+            :client_id => @client.identifier,
+            :client_secret => @client.secret,
+            :code => @authorization_code.token
+          }
+
+          post '/oauth2/token', params
+        end
+        it { response.code.to_i.should == 200 }
+        it { response.content_type.should == 'application/json' }
+        it 'returns json' do
+          token = AccessToken.last
+          refresh_token = RefreshToken.last
+          expected = {
+            :token_type => 'bearer',
+            :expires_in => 899,
+            :refresh_token => refresh_token.token,
+            :access_token => token.token
+          }
+          response.body.should match_json(expected)
+        end
+      end
+      context 'with invalid authorization_code' do
+        before do
+          @user = User.create! :email => 'ryan@socialcast.com', :name => 'ryan sonnek', :password => 'test'
+          @client = Client.create! :name => 'example', :redirect_uri => 'http://localhost', :website => 'http://localhost'
+          @authorization_code = @user.authorization_codes.create(:client_id => @client, :redirect_uri => @client.redirect_uri)
+          params = {
+            :grant_type => 'authorization_code',
+            :client_id => @client.identifier,
+            :client_secret => @client.secret,
+            :refresh_token => 'invalid'
+          }
+
+          post '/oauth2/token', params
+        end
+        it { response.code.to_i.should == 400 }
+        it { response.content_type.should == 'application/json' }
+        it 'returns json' do
+          token = AccessToken.last
+          refresh_token = @refresh_token
+          expected = {
+            :error => 'invalid_grant',
+            :error_description => 'invalid authorization code request'
+          }
+          response.body.should match_json(expected)
+        end
+      end
+    end
+  end
+end

metadata

@@ -1,13 +1,13 @@
 --- !ruby/object:Gem::Specification 
 name: devise_oauth2_providable
 version: !ruby/object:Gem::Version 
-  hash: 17
+  hash: 23
   prerelease: 
   segments: 
   - 0
   - 3
-  - 1
-  version: 0.3.1
+  - 2
+  version: 0.3.2
 platform: ruby
 authors: 
 - Ryan Sonnek
@@ -112,9 +112,11 @@ files:
 - lib/devise_oauth2_providable.rb
 - lib/devise_oauth2_providable/engine.rb
 - lib/devise_oauth2_providable/model.rb
+- lib/devise_oauth2_providable/models/oauth2_authorization_code_grantable.rb
 - lib/devise_oauth2_providable/models/oauth2_password_grantable.rb
 - lib/devise_oauth2_providable/models/oauth2_refresh_token_grantable.rb
 - lib/devise_oauth2_providable/schema.rb
+- lib/devise_oauth2_providable/strategies/oauth2_authorization_code_grant_type_strategy.rb
 - lib/devise_oauth2_providable/strategies/oauth2_grant_type_strategy.rb
 - lib/devise_oauth2_providable/strategies/oauth2_password_grant_type_strategy.rb
 - lib/devise_oauth2_providable/strategies/oauth2_refresh_token_grant_type_strategy.rb
@@ -169,6 +171,7 @@ files:
 - spec/rails_app/script/rails
 - spec/rails_app/spec/controllers/protected_controller_spec.rb
 - spec/rails_app/spec/controllers/tokens_controller_spec.rb
+- spec/rails_app/spec/integration/oauth2_authorization_token_grant_type_strategy_spec.rb
 - spec/rails_app/spec/integration/oauth2_password_grant_type_strategy_spec.rb
 - spec/rails_app/spec/integration/oauth2_refresh_token_grant_type_strategy_spec.rb
 - spec/rails_app/spec/models/access_token_spec.rb
@@ -261,6 +264,7 @@ test_files:
 - spec/rails_app/script/rails
 - spec/rails_app/spec/controllers/protected_controller_spec.rb
 - spec/rails_app/spec/controllers/tokens_controller_spec.rb
+- spec/rails_app/spec/integration/oauth2_authorization_token_grant_type_strategy_spec.rb
 - spec/rails_app/spec/integration/oauth2_password_grant_type_strategy_spec.rb
 - spec/rails_app/spec/integration/oauth2_refresh_token_grant_type_strategy_spec.rb
 - spec/rails_app/spec/models/access_token_spec.rb