RubyGems - doorkeeper-sequel - Versions diffs - 1.2.1 - Mend

doorkeeper-sequel 1.2.1

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.

Files changed (197) hide show

data/spec/dummy/app/controllers/semi_protected_resources_controller.rb ADDED Viewed

@@ -0,0 +1,11 @@
+class SemiProtectedResourcesController < ApplicationController
+  before_action :doorkeeper_authorize!, only: :index
+  def index
+    render plain: 'protected index'
+  end
+  def show
+    render plain: 'non protected show'
+  end
+end

data/spec/dummy/app/helpers/application_helper.rb ADDED Viewed

@@ -0,0 +1,5 @@
+module ApplicationHelper
+  def current_user
+    @current_user ||= User.find_by_id(session[:user_id])
+  end
+end

data/spec/dummy/app/models/user.rb ADDED Viewed

@@ -0,0 +1,11 @@
+class User < Sequel::Model
+  class << self
+    def authenticate!(name, password)
+      User.where(name: name, password: password).first
+    end
+    def create!(values = {}, &block)
+      new(values, &block).save(raise_on_failure: true)
+    end
+  end
+end

data/spec/dummy/app/views/home/index.html.erb ADDED Viewed

File without changes

data/spec/dummy/app/views/layouts/application.html.erb ADDED Viewed

@@ -0,0 +1,14 @@
+<!DOCTYPE html>
+<html>
+<head>
+  <title>Dummy</title>
+  <%= csrf_meta_tags %>
+</head>
+<body>
+<%= link_to "Sign in", '/sign_in' %>
+<%= yield %>
+</body>
+</html>

data/spec/dummy/config/application.rb ADDED Viewed

@@ -0,0 +1,29 @@
+require File.expand_path('../boot', __FILE__)
+require "rails"
+%w(
+  action_controller
+  action_view
+  action_mailer
+  active_job
+  rails/test_unit
+  sprockets
+).each do |framework|
+  begin
+    require "#{framework}/railtie"
+  rescue LoadError
+  end
+end
+Bundler.require(*Rails.groups)
+require 'yaml'
+module Dummy
+  class Application < Rails::Application
+    # Settings in config/environments/* take precedence over those specified here.
+    # Application configuration should go into files in config/initializers
+    # -- all .rb files in that directory are automatically loaded.
+  end
+end

data/spec/dummy/config/boot.rb ADDED Viewed

@@ -0,0 +1,9 @@
+require 'rubygems'
+require 'bundler/setup'
+orm = ENV['BUNDLE_GEMFILE'].match(/Gemfile\.(.+)\.rb/)
+unless defined?(DOORKEEPER_ORM)
+  DOORKEEPER_ORM = (orm && orm[1]) || :active_record
+end
+$LOAD_PATH.unshift File.expand_path('../../../../lib', __FILE__)

data/spec/dummy/config/database.yml ADDED Viewed

@@ -0,0 +1,15 @@
+development:
+  adapter: sqlite3
+  database: db/development.sqlite3
+  pool: 5
+  timeout: 5000
+test:
+  adapter: sqlite3
+  database: ":memory:"
+  timeout: 500
+production:
+  adapter: sqlite3
+  database: ":memory:"
+  timeout: 500

data/spec/dummy/config/environment.rb ADDED Viewed

@@ -0,0 +1,5 @@
+# Load the rails application
+require File.expand_path('../application', __FILE__)
+# Initialize the rails application
+Rails.application.initialize!

data/spec/dummy/config/environments/development.rb ADDED Viewed

@@ -0,0 +1,29 @@
+Dummy::Application.configure do
+  # Settings specified here will take precedence over those in config/application.rb
+  # In the development environment your application's code is reloaded on
+  # every request.  This slows down response time but is perfect for development
+  # since you don't have to restart the web server when you make code changes.
+  config.cache_classes = false
+  # Show full error reports and disable caching
+  config.consider_all_requests_local       = true
+  config.action_controller.perform_caching = false
+  # Don't care if the mailer can't send
+  # config.action_mailer.raise_delivery_errors = false
+  # Print deprecation notices to the Rails logger
+  config.active_support.deprecation = :log
+  # Only use best-standards-support built into browsers
+  config.action_dispatch.best_standards_support = :builtin
+  # Do not compress assets
+  config.assets.compress = false
+  # Expands the lines which load the assets
+  config.assets.debug = true
+  config.eager_load = false
+end

data/spec/dummy/config/environments/production.rb ADDED Viewed

@@ -0,0 +1,62 @@
+Dummy::Application.configure do
+  # Settings specified here will take precedence over those in config/application.rb
+  # Code is not reloaded between requests
+  config.cache_classes = true
+  # Full error reports are disabled and caching is turned on
+  config.consider_all_requests_local       = false
+  config.action_controller.perform_caching = true
+  # Disable Rails's static asset server (Apache or nginx will already do this)
+  config.serve_static_assets = false
+  # Compress JavaScripts and CSS
+  config.assets.compress = true
+  # Don't fallback to assets pipeline if a precompiled asset is missed
+  config.assets.compile = false
+  # Generate digests for assets URLs
+  config.assets.digest = true
+  # Defaults to Rails.root.join("public/assets")
+  # config.assets.manifest = YOUR_PATH
+  # Specifies the header that your server uses for sending files
+  # config.action_dispatch.x_sendfile_header = "X-Sendfile" # for apache
+  # config.action_dispatch.x_sendfile_header = 'X-Accel-Redirect' # for nginx
+  # Force all access to the app over SSL, use Strict-Transport-Security, and use secure cookies.
+  # config.force_ssl = true
+  # See everything in the log (default is :info)
+  # config.log_level = :debug
+  # Use a different logger for distributed setups
+  # config.logger = SyslogLogger.new
+  # Use a different cache store in production
+  # config.cache_store = :mem_cache_store
+  # Enable serving of images, stylesheets, and JavaScripts from an asset server
+  # config.action_controller.asset_host = "http://assets.example.com"
+  # Precompile additional assets (application.js, application.css, and all non-JS/CSS are already added)
+  # config.assets.precompile += %w( search.js )
+  # Disable delivery errors, bad email addresses will be ignored
+  # config.action_mailer.raise_delivery_errors = false
+  # Enable threaded mode
+  # config.threadsafe!
+  # Enable locale fallbacks for I18n (makes lookups for any locale fall back to
+  # the I18n.default_locale when a translation can not be found)
+  config.i18n.fallbacks = true
+  # Send deprecation notices to registered listeners
+  config.active_support.deprecation = :notify
+  config.eager_load = true
+end

data/spec/dummy/config/environments/test.rb ADDED Viewed

@@ -0,0 +1,44 @@
+Dummy::Application.configure do
+  # Settings specified here will take precedence over those in config/application.rb
+  # The test environment is used exclusively to run your application's
+  # test suite.  You never need to work with it otherwise.  Remember that
+  # your test database is "scratch space" for the test suite and is wiped
+  # and recreated between test runs.  Don't rely on the data there!
+  config.cache_classes = true
+  # Do not eager load code on boot. This avoids loading your whole application
+  # just for the purpose of running a single test. If you are using a tool that
+  # preloads Rails for running tests, you may have to set it to true.
+  config.eager_load = false
+  # Show full error reports and disable caching
+  config.consider_all_requests_local       = true
+  config.action_controller.perform_caching = false
+  # Raise exceptions instead of rendering exception templates
+  config.action_dispatch.show_exceptions = false
+  # Disable request forgery protection in test environment
+  config.action_controller.allow_forgery_protection    = false
+  # Tell Action Mailer not to deliver emails to the real world.
+  # The :test delivery method accumulates sent emails in the
+  # ActionMailer::Base.deliveries array.
+  # config.action_mailer.delivery_method = :test
+  # Use SQL instead of Active Record's schema dumper when creating the test database.
+  # This is necessary if your schema can't be completely dumped by the schema dumper,
+  # like if you have constraints or database-specific column types
+  # config.active_record.schema_format = :sql
+  # Print deprecation notices to the stderr
+  config.active_support.deprecation = :stderr
+  config.eager_load = true
+  if DOORKEEPER_ORM == :active_record
+    config.active_record.table_name_prefix = TABLE_NAME_PREFIX.to_s
+    config.active_record.table_name_suffix = TABLE_NAME_SUFFIX.to_s
+  end
+end

data/spec/dummy/config/initializers/backtrace_silencers.rb ADDED Viewed

@@ -0,0 +1,7 @@
+# Be sure to restart your server when you modify this file.
+# You can add backtrace silencers for libraries that you're using but don't wish to see in your backtraces.
+# Rails.backtrace_cleaner.add_silencer { |line| line =~ /my_noisy_library/ }
+# You can also remove all the silencers if you're trying to debug a problem that might stem from framework code.
+# Rails.backtrace_cleaner.remove_silencers!

data/spec/dummy/config/initializers/db.rb ADDED Viewed

@@ -0,0 +1,74 @@
+# SQLite memory database
+DB = if defined?(JRUBY_VERSION)
+       Sequel.connect('jdbc:sqlite::memory:')
+     else
+       Sequel.sqlite
+     end
+DB.create_table :oauth_applications do
+  primary_key :id
+  column :name, String, size: 255, null: false
+  column :uid, String, size: 255, null: false, index: { unique: true }
+  column :secret, String, size: 255, null: false
+  column :scopes, String, size: 255, null: false, default: ''
+  column :redirect_uri, String
+  column :created_at, DateTime
+  column :updated_at, DateTime
+  column :owner_id, Integer
+  column :owner_type, String
+  index [:owner_id, :owner_type]
+end
+DB.create_table :oauth_access_grants do
+  primary_key :id
+  column :application_id, Integer
+  column :resource_owner_id, Integer, null: false
+  column :token, String, size: 255, null: false, index: { unique: true }
+  column :expires_in, Integer, null: false
+  column :redirect_uri, String, null: false
+  column :created_at, DateTime, null: false
+  column :revoked_at, DateTime
+  column :scopes, String, size: 255
+end
+DB.create_table :oauth_access_tokens do
+  primary_key :id
+  column :application_id, Integer
+  column :resource_owner_id, Integer, index: true
+  # If you use a custom token generator you may need to change this column
+  # from string to text, so that it accepts tokens larger than 255
+  # characters. More info on custom token generators in:
+  # https://github.com/doorkeeper-gem/doorkeeper/tree/v3.0.0.rc1#custom-access-token-generator
+  #
+  # column :token, String, null: false
+  column :token, String, size: 255, null: false, index: { unique: true }
+  column :refresh_token, String, size: 255, index: { unique: true }
+  # If there is a previous_refresh_token column,
+  # refresh tokens will be revoked after a related access token is used.
+  # If there is no previous_refresh_token column,
+  # previous tokens are revoked as soon as a new access token is created.
+  # Comment out this line if you'd rather have refresh tokens
+  # instantly revoked.
+  column :previous_refresh_token, String, size: 255, null: false, default: ''
+  column :expires_in, Integer
+  column :revoked_at, DateTime
+  column :created_at, DateTime, null: false
+  column :scopes, String, size: 255
+end
+DB.create_table :users do
+  primary_key :id
+  column :name, String, size: 255
+  column :created_at, DateTime
+  column :updated_at, DateTime
+  column :password, String, size: 255
+end

data/spec/dummy/config/initializers/doorkeeper.rb ADDED Viewed

@@ -0,0 +1,96 @@
+Doorkeeper.configure do
+  # Change the ORM that doorkeeper will use.
+  orm DOORKEEPER_ORM
+  # This block will be called to check whether the resource owner is authenticated or not.
+  resource_owner_authenticator do
+    # Put your resource owner authentication logic here.
+    User.where(id: session[:user_id]).first || redirect_to(root_url, alert: 'Needs sign in.')
+  end
+  # If you want to restrict access to the web interface for adding oauth authorized applications, you need to declare the block below.
+  # admin_authenticator do
+  #   # Put your admin authentication logic here.
+  #   # Example implementation:
+  #   Admin.find_by_id(session[:admin_id]) || redirect_to(new_admin_session_url)
+  # end
+  # Authorization Code expiration time (default 10 minutes).
+  # authorization_code_expires_in 10.minutes
+  # Access token expiration time (default 2 hours).
+  # If you want to disable expiration, set this to nil.
+  # access_token_expires_in 2.hours
+  # Reuse access token for the same resource owner within an application (disabled by default)
+  # Rationale: https://github.com/doorkeeper-gem/doorkeeper/issues/383
+  # reuse_access_token
+  # Issue access tokens with refresh token (disabled by default)
+  use_refresh_token
+  # Provide support for an owner to be assigned to each registered application (disabled by default)
+  # Optional parameter confirmation: true (default false) if you want to enforce ownership of
+  # a registered application
+  # Note: you must also run the rails g doorkeeper:application_owner generator to provide the necessary support
+  # enable_application_owner confirmation: false
+  # Define access token scopes for your provider
+  # For more information go to
+  # https://github.com/doorkeeper-gem/doorkeeper/wiki/Using-Scopes
+  default_scopes  :public
+  optional_scopes :write, :update
+  # Change the way client credentials are retrieved from the request object.
+  # By default it retrieves first from the `HTTP_AUTHORIZATION` header, then
+  # falls back to the `:client_id` and `:client_secret` params from the `params` object.
+  # Check out the wiki for more information on customization
+  # client_credentials :from_basic, :from_params
+  # Change the way access token is authenticated from the request object.
+  # By default it retrieves first from the `HTTP_AUTHORIZATION` header, then
+  # falls back to the `:access_token` or `:bearer_token` params from the `params` object.
+  # Check out the wiki for more information on customization
+  # access_token_methods :from_bearer_authorization, :from_access_token_param, :from_bearer_param
+  # Change the native redirect uri for client apps
+  # When clients register with the following redirect uri, they won't be redirected to any server and the authorization code will be displayed within the provider
+  # The value can be any string. Use nil to disable this feature. When disabled, clients must provide a valid URL
+  # (Similar behaviour: https://developers.google.com/accounts/docs/OAuth2InstalledApp#choosingredirecturi)
+  #
+  # native_redirect_uri 'urn:ietf:wg:oauth:2.0:oob'
+  # Forces the usage of the HTTPS protocol in non-native redirect uris (enabled
+  # by default in non-development environments). OAuth2 delegates security in
+  # communication to the HTTPS protocol so it is wise to keep this enabled.
+  #
+  # force_ssl_in_redirect_uri !Rails.env.development?
+  # Specify what grant flows are enabled in array of Strings. The valid
+  # strings and the flows they enable are:
+  #
+  # "authorization_code" => Authorization Code Grant Flow
+  # "implicit"           => Implicit Grant Flow
+  # "password"           => Resource Owner Password Credentials Grant Flow
+  # "client_credentials" => Client Credentials Grant Flow
+  #
+  # If not specified, Doorkeeper enables authorization_code and
+  # client_credentials.
+  #
+  # implicit and password grant flows have risks that you should understand
+  # before enabling:
+  #   http://tools.ietf.org/html/rfc6819#section-4.4.2
+  #   http://tools.ietf.org/html/rfc6819#section-4.4.3
+  #
+  # grant_flows %w(authorization_code client_credentials)
+  # Under some circumstances you might want to have applications auto-approved,
+  # so that the user skips the authorization step.
+  # For example if dealing with a trusted application.
+  # skip_authorization do |resource_owner, client|
+  #   client.superapp? or resource_owner.admin?
+  # end
+  # WWW-Authenticate Realm (default "Doorkeeper").
+  realm "Doorkeeper"
+end

data/spec/dummy/config/initializers/secret_token.rb ADDED Viewed

@@ -0,0 +1,9 @@
+# Be sure to restart your server when you modify this file.
+# Your secret key for verifying the integrity of signed cookies.
+# If you change this key, all old signed cookies will become invalid!
+# Make sure the secret is at least 30 characters and all random,
+# no regular words or you'll be exposed to dictionary attacks.
+Dummy::Application.config.secret_key_base =
+  Dummy::Application.config.secret_token =
+  'c00157b5a1bb6181792f0f4a8a080485de7bab9987e6cf159dc74c4f0573345c1bfa713b5d756e1491fc0b098567e8a619e2f8d268eda86a20a720d05d633780'

data/spec/dummy/config/initializers/session_store.rb ADDED Viewed

@@ -0,0 +1,8 @@
+# Be sure to restart your server when you modify this file.
+Dummy::Application.config.session_store :cookie_store, key: '_dummy_session'
+# Use the database for sessions instead of the cookie-based default,
+# which shouldn't be used to store highly confidential information
+# (create the session table with "rails generate session_migration")
+# Dummy::Application.config.session_store :active_record_store

data/spec/dummy/config/initializers/wrap_parameters.rb ADDED Viewed

@@ -0,0 +1,14 @@
+# Be sure to restart your server when you modify this file.
+#
+# This file contains settings for ActionController::ParamsWrapper which
+# is enabled by default.
+# Enable parameter wrapping for JSON. You can disable this by setting :format to an empty array.
+ActiveSupport.on_load(:action_controller) do
+  wrap_parameters format: [:json]
+end
+# Disable root element in JSON by default.
+ActiveSupport.on_load(:active_record) do
+  self.include_root_in_json = false
+end

data/spec/dummy/config/locales/doorkeeper.en.yml ADDED Viewed

@@ -0,0 +1,5 @@
+en:
+  doorkeeper:
+    scopes:
+      public: "Access your public data"
+      write:  "Update your data"

data/spec/dummy/config/routes.rb ADDED Viewed

@@ -0,0 +1,52 @@
+Rails.application.routes.draw do
+  use_doorkeeper
+  use_doorkeeper scope: 'scope'
+  scope 'inner_space' do
+    use_doorkeeper scope: 'scope' do
+      controllers authorizations: 'custom_authorizations',
+                  tokens: 'custom_authorizations',
+                  applications: 'custom_authorizations',
+                  token_info: 'custom_authorizations'
+      as authorizations: 'custom_auth',
+         tokens: 'custom_token',
+         token_info: 'custom_token_info'
+    end
+  end
+  scope 'space' do
+    use_doorkeeper do
+      controllers authorizations: 'custom_authorizations',
+                  tokens: 'custom_authorizations',
+                  applications: 'custom_authorizations',
+                  token_info: 'custom_authorizations'
+      as authorizations: 'custom_auth',
+         tokens: 'custom_token',
+         token_info: 'custom_token_info'
+    end
+  end
+  scope 'outer_space' do
+    use_doorkeeper do
+      controllers authorizations: 'custom_authorizations',
+                  tokens: 'custom_authorizations',
+                  token_info: 'custom_authorizations'
+      as authorizations: 'custom_auth',
+         tokens: 'custom_token',
+         token_info: 'custom_token_info'
+      skip_controllers :tokens, :applications, :token_info
+    end
+  end
+  get 'metal.json' => 'metal#index'
+  get '/callback', to: 'home#callback'
+  get '/sign_in',  to: 'home#sign_in'
+  resources :semi_protected_resources
+  resources :full_protected_resources
+  root to: 'home#index'
+end

data/spec/dummy/config.ru ADDED Viewed

@@ -0,0 +1,4 @@
+# This file is used by Rack-based servers to start the application.
+require ::File.expand_path('../config/environment',  __FILE__)
+run Dummy::Application

data/spec/dummy/db/migrate/20111122132257_create_users.rb ADDED Viewed

@@ -0,0 +1,9 @@
+class CreateUsers < ActiveRecord::Migration
+  def change
+    create_table :users do |t|
+      t.string :name
+      t.timestamps
+    end
+  end
+end

data/spec/dummy/db/migrate/20120312140401_add_password_to_users.rb ADDED Viewed

@@ -0,0 +1,5 @@
+class AddPasswordToUsers < ActiveRecord::Migration
+  def change
+    add_column :users, :password, :string
+  end
+end

data/spec/dummy/db/migrate/20151223192035_create_doorkeeper_tables.rb ADDED Viewed

@@ -0,0 +1,60 @@
+class CreateDoorkeeperTables < ActiveRecord::Migration
+  def change
+    create_table :oauth_applications do |t|
+      t.string  :name,         null: false
+      t.string  :uid,          null: false
+      t.string  :secret,       null: false
+      t.text    :redirect_uri, null: false
+      t.string  :scopes,       null: false, default: ''
+      t.timestamps             null: false
+    end
+    add_index :oauth_applications, :uid, unique: true
+    create_table :oauth_access_grants do |t|
+      t.integer  :resource_owner_id, null: false
+      t.references :application,     null: false
+      t.string   :token,             null: false
+      t.integer  :expires_in,        null: false
+      t.text     :redirect_uri,      null: false
+      t.datetime :created_at,        null: false
+      t.datetime :revoked_at
+      t.string   :scopes
+    end
+    add_index :oauth_access_grants, :token, unique: true
+    add_foreign_key(
+      :oauth_access_grants,
+      :oauth_applications,
+      column: :application_id,
+    )
+    create_table :oauth_access_tokens do |t|
+      t.integer  :resource_owner_id
+      t.references :application
+      # If you use a custom token generator you may need to change this column
+      # from string to text, so that it accepts tokens larger than 255
+      # characters. More info on custom token generators in:
+      # https://github.com/doorkeeper-gem/doorkeeper/tree/v3.0.0.rc1#custom-access-token-generator
+      #
+      # t.text     :token,             null: false
+      t.string   :token,             null: false
+      t.string   :refresh_token
+      t.integer  :expires_in
+      t.datetime :revoked_at
+      t.datetime :created_at,        null: false
+      t.string   :scopes
+    end
+    add_index :oauth_access_tokens, :token, unique: true
+    add_index :oauth_access_tokens, :resource_owner_id
+    add_index :oauth_access_tokens, :refresh_token, unique: true
+    add_foreign_key(
+      :oauth_access_tokens,
+      :oauth_applications,
+      column: :application_id,
+    )
+  end
+end

data/spec/dummy/db/migrate/20151223200000_add_owner_to_application.rb ADDED Viewed

@@ -0,0 +1,7 @@
+class AddOwnerToApplication < ActiveRecord::Migration
+  def change
+    add_column :oauth_applications, :owner_id, :integer, null: true
+    add_column :oauth_applications, :owner_type, :string, null: true
+    add_index :oauth_applications, [:owner_id, :owner_type]
+  end
+end

data/spec/dummy/db/migrate/20160320211015_add_previous_refresh_token_to_access_tokens.rb ADDED Viewed

@@ -0,0 +1,11 @@
+class AddPreviousRefreshTokenToAccessTokens < ActiveRecord::Migration
+  def change
+    add_column(
+      :oauth_access_tokens,
+      :previous_refresh_token,
+      :string,
+      default: "",
+      null: false
+    )
+  end
+end