devise_oauth2_rails4 1.1.8 → 2.0.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA1:
-  metadata.gz: dde5059996e6ed80714f26ee8fceea75f5986338
-  data.tar.gz: b2e8d105f9cd9e9578dc4fb30ac7b67c834477ca
+  metadata.gz: 33c54215d3c1ae10af1985f18232be30930bcc19
+  data.tar.gz: 2d0a606906dc51e410d2ca8f2269b044022bfa93
 SHA512:
-  metadata.gz: 470bfe61faeb2a2b3c914ca9018a8f29c5a4e16fe30d90b64539d4b77b18fe4c13d65004c5e35f947226ee301bb36545faa69900de798eadaf764e0b2987a4fb
-  data.tar.gz: aec96500ab3a0b4df580e51d5d45c99bd6712cd5dc207a2558a0b0f66542df25a0378e70c01118b0d4c374826a9f92cb13ce8260d70fe7fb32653f59cd6d0f4f
+  metadata.gz: 691faeaa04261f14093c3867041dc22d6077304d0e6224baec120d00c6f46d26e57121f313ffaa2bcd8705f1b5bbee70841510670f3df7eea1b1c2d066058571
+  data.tar.gz: c51c40f5e4a52db1d850ca115609a72807798931240fedb5331c99f483ac125f5849c76258608d039dfb5556241d89abacab106957001bec8ac56f9907965f0c

data/README.md

@@ -1,6 +1,6 @@
 # devise_oauth2_providable
 
-Rails3 engine that brings OAuth2 Provider support to your application.
+Rails 4 engine that brings OAuth2 Provider support to your application.
 
 Current OAuth2 Specification Draft:
 http://tools.ietf.org/html/draft-ietf-oauth-v2-22
@@ -103,7 +103,7 @@ expires after 1min by default. to customize the duration of the
 authorization code:
 
 ```ruby
-Devise::Oauth2Providable::AuthorizationCode.default_lifetime = 5.minutes
+Devise::Oauth2::AuthorizationCode.default_lifetime = 5.minutes
 ```
 
 ## Routes
@@ -122,6 +122,27 @@ http://tools.ietf.org/html/draft-ietf-oauth-v2-15#section-2.2
 Endpoint to request access token.  See grant type documentation for
 supported flows.
 
+## Permissions
+
+Rails 4 version of this gem adds support for dynamic permissions!
+
+In the `Client` model, there is a field for `default_permissions`, which each access_token
+will inherit from by default. Much like the Facebook Graph API, clients can specify the permissions
+on a request-per-request basis.
+
+```
+http://localhost:3000/oauth/authorize?client_id=my_client_id&response_type=token&permissions=read_feed,post_to_wall,edit_profile
+```
+
+### Checking Permissions
+
+```ruby
+@access_token = Devise::Oauth2::AccessToken.find_by_token('my_access_token')
+@access_token.can? :read_feed
+# => true
+```
+
+
 ## Grant Types
 
 ### Resource Owner Password Credentials Grant Type

data/app/controllers/devise/oauth2/authorizations_controller.rb

@@ -5,6 +5,7 @@ module Devise
       #include ::PermissionsHelper
 
       before_action :authenticate_user!
+      around_action :perform_callbacks
 
       rescue_from Rack::OAuth2::Server::Authorize::BadRequest do |e|
         @error = e
@@ -51,8 +52,12 @@ module Devise
                     res.access_token = bearer_token
                     # res.uid = current_user.id
                 end
+                after_allowed_authorization if defined? after_allowed_authorization
+                return if performed?
                 res.approve!
               else
+                after_denied_authorization if defined? after_denied_authorization
+                return if performed?
                 req.access_denied!
               end
             else
@@ -68,6 +73,14 @@ module Devise
         params[:permissions] || @client.default_permissions
       end
 
+      def perform_callbacks
+
+        before_authorize if defined? before_authorize
+        return if performed?
+        yield
+        after_authorize if defined? after_authorize
+      end
+
     end
   end
 end

data/app/models/devise/oauth2/access_token.rb

@@ -23,13 +23,8 @@ class Devise::Oauth2::AccessToken < ActiveRecord::Base
     response
   end
 
-  def method_missing(method, *args, &block)
-    if method.to_s.match /^can_.*\?$/
-      permission = method.to_s.match(/^can_(.*)\?$/)[1]
-      return true if permission.in? self.permissions
-      return false
-    end
-    super(method, *args, &block)
+  def can?(do_permission)
+    do_permission.to_s.in? Array(self.permissions)
   end
 
   private

data/lib/devise/oauth2/version.rb

@@ -1,5 +1,5 @@
 module Devise
   module Oauth2
-    VERSION = "1.1.8"
+    VERSION = "2.0.0"
   end
 end

data/spec/dummy/app/controllers/application_controller.rb

@@ -1,3 +1,16 @@
 class ApplicationController < ActionController::Base
   protect_from_forgery
+
+  #def before_authorize
+  #  Rails.logger.info 'We are calling before authorize! :D'
+  #end
+  #
+  #def after_authorize
+  #  Rails.logger.info 'We are calling after authorize!!!'
+  #end
+  #
+  #def after_denied_authorization
+  #  redirect_to '/'
+  #end
+
 end

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: devise_oauth2_rails4
 version: !ruby/object:Gem::Version
-  version: 1.1.8
+  version: 2.0.0
 platform: ruby
 authors:
 - Brian Wheeler
 autorequire: 
 bindir: bin
 cert_chain: []
-date: 2014-03-07 00:00:00.000000000 Z
+date: 2014-03-11 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: rails