doorkeeper 4.4.0 → 5.6.6

data/spec/dummy/config/initializers/doorkeeper.rb

@@ -1,107 +0,0 @@
-Doorkeeper.configure do
-  # Change the ORM that doorkeeper will use.
-  orm DOORKEEPER_ORM
-
-  # This block will be called to check whether the resource owner is authenticated or not.
-  resource_owner_authenticator do
-    # Put your resource owner authentication logic here.
-    User.where(id: session[:user_id]).first || redirect_to(root_url, alert: 'Needs sign in.')
-  end
-
-  # If you want to restrict access to the web interface for adding oauth authorized applications, you need to declare the block below.
-  # admin_authenticator do
-  #   # Put your admin authentication logic here.
-  #   # Example implementation:
-  #   Admin.find_by_id(session[:admin_id]) || redirect_to(new_admin_session_url)
-  # end
-
-  # Authorization Code expiration time (default 10 minutes).
-  # authorization_code_expires_in 10.minutes
-
-  # Access token expiration time (default 2 hours).
-  # If you want to disable expiration, set this to nil.
-  # access_token_expires_in 2.hours
-
-  # Reuse access token for the same resource owner within an application (disabled by default)
-  # Rationale: https://github.com/doorkeeper-gem/doorkeeper/issues/383
-  # reuse_access_token
-
-  # Issue access tokens with refresh token (disabled by default)
-  use_refresh_token
-
-  # Provide support for an owner to be assigned to each registered application (disabled by default)
-  # Optional parameter confirmation: true (default false) if you want to enforce ownership of
-  # a registered application
-  # Note: you must also run the rails g doorkeeper:application_owner generator to provide the necessary support
-  # enable_application_owner confirmation: false
-
-  # Define access token scopes for your provider
-  # For more information go to
-  # https://github.com/doorkeeper-gem/doorkeeper/wiki/Using-Scopes
-  default_scopes  :public
-  optional_scopes :write, :update
-
-  # Change the way client credentials are retrieved from the request object.
-  # By default it retrieves first from the `HTTP_AUTHORIZATION` header, then
-  # falls back to the `:client_id` and `:client_secret` params from the `params` object.
-  # Check out the wiki for more information on customization
-  # client_credentials :from_basic, :from_params
-
-  # Change the way access token is authenticated from the request object.
-  # By default it retrieves first from the `HTTP_AUTHORIZATION` header, then
-  # falls back to the `:access_token` or `:bearer_token` params from the `params` object.
-  # Check out the wiki for more information on customization
-  # access_token_methods :from_bearer_authorization, :from_access_token_param, :from_bearer_param
-
-  # Change the native redirect uri for client apps
-  # When clients register with the following redirect uri, they won't be redirected to any server and the authorization code will be displayed within the provider
-  # The value can be any string. Use nil to disable this feature. When disabled, clients must provide a valid URL
-  # (Similar behaviour: https://developers.google.com/accounts/docs/OAuth2InstalledApp#choosingredirecturi)
-  #
-  # native_redirect_uri 'urn:ietf:wg:oauth:2.0:oob'
-
-  # Forces the usage of the HTTPS protocol in non-native redirect uris (enabled
-  # by default in non-development environments). OAuth2 delegates security in
-  # communication to the HTTPS protocol so it is wise to keep this enabled.
-  #
-  # force_ssl_in_redirect_uri !Rails.env.development?
-
-  # Specify what grant flows are enabled in array of Strings. The valid
-  # strings and the flows they enable are:
-  #
-  # "authorization_code" => Authorization Code Grant Flow
-  # "implicit"           => Implicit Grant Flow
-  # "password"           => Resource Owner Password Credentials Grant Flow
-  # "client_credentials" => Client Credentials Grant Flow
-  #
-  # If not specified, Doorkeeper enables authorization_code and
-  # client_credentials.
-  #
-  # implicit and password grant flows have risks that you should understand
-  # before enabling:
-  #   http://tools.ietf.org/html/rfc6819#section-4.4.2
-  #   http://tools.ietf.org/html/rfc6819#section-4.4.3
-  #
-  # grant_flows %w[authorization_code client_credentials]
-
-  # Hook into the strategies' request & response life-cycle in case your
-  # application needs advanced customization or logging:
-  #
-  # before_successful_strategy_response do |request|
-  #   puts "BEFORE HOOK FIRED! #{request}"
-  # end
-  #
-  # after_successful_strategy_response do |request, response|
-  #   puts "AFTER HOOK FIRED! #{request}, #{response}"
-  # end
-
-  # Under some circumstances you might want to have applications auto-approved,
-  # so that the user skips the authorization step.
-  # For example if dealing with a trusted application.
-  # skip_authorization do |resource_owner, client|
-  #   client.superapp? or resource_owner.admin?
-  # end
-
-  # WWW-Authenticate Realm (default "Doorkeeper").
-  realm "Doorkeeper"
-end

data/spec/dummy/config/initializers/new_framework_defaults.rb

@@ -1,6 +0,0 @@
-# Require `belongs_to` associations by default. This is a new Rails 5.0
-# default, so it is introduced as a configuration option to ensure that apps
-# made on earlier versions of Rails are not affected when upgrading.
-if Rails::VERSION::MAJOR >= 5
-  Rails.application.config.active_record.belongs_to_required_by_default = true
-end

data/spec/dummy/config/initializers/secret_token.rb

@@ -1,8 +0,0 @@
-# Be sure to restart your server when you modify this file.
-
-# Your secret key for verifying the integrity of signed cookies.
-# If you change this key, all old signed cookies will become invalid!
-# Make sure the secret is at least 30 characters and all random,
-# no regular words or you'll be exposed to dictionary attacks.
-Dummy::Application.config.secret_key_base =
-  'c00157b5a1bb6181792f0f4a8a080485de7bab9987e6cf159dc74c4f0573345c1bfa713b5d756e1491fc0b098567e8a619e2f8d268eda86a20a720d05d633780'

data/spec/dummy/config/initializers/session_store.rb

@@ -1,8 +0,0 @@
-# Be sure to restart your server when you modify this file.
-
-Dummy::Application.config.session_store :cookie_store, key: '_dummy_session'
-
-# Use the database for sessions instead of the cookie-based default,
-# which shouldn't be used to store highly confidential information
-# (create the session table with "rails generate session_migration")
-# Dummy::Application.config.session_store :active_record_store

data/spec/dummy/config/initializers/wrap_parameters.rb

@@ -1,14 +0,0 @@
-# Be sure to restart your server when you modify this file.
-#
-# This file contains settings for ActionController::ParamsWrapper which
-# is enabled by default.
-
-# Enable parameter wrapping for JSON. You can disable this by setting :format to an empty array.
-ActiveSupport.on_load(:action_controller) do
-  wrap_parameters format: [:json]
-end
-
-# Disable root element in JSON by default.
-ActiveSupport.on_load(:active_record) do
-  self.include_root_in_json = false
-end

data/spec/dummy/config/locales/doorkeeper.en.yml

@@ -1,5 +0,0 @@
-en:
-  doorkeeper:
-    scopes:
-      public: "Access your public data"
-      write:  "Update your data"

data/spec/dummy/config/routes.rb

@@ -1,52 +0,0 @@
-Rails.application.routes.draw do
-  use_doorkeeper
-  use_doorkeeper scope: 'scope'
-
-  scope 'inner_space' do
-    use_doorkeeper scope: 'scope' do
-      controllers authorizations: 'custom_authorizations',
-                  tokens: 'custom_authorizations',
-                  applications: 'custom_authorizations',
-                  token_info: 'custom_authorizations'
-
-      as authorizations: 'custom_auth',
-         tokens: 'custom_token',
-         token_info: 'custom_token_info'
-    end
-  end
-
-  scope 'space' do
-    use_doorkeeper do
-      controllers authorizations: 'custom_authorizations',
-                  tokens: 'custom_authorizations',
-                  applications: 'custom_authorizations',
-                  token_info: 'custom_authorizations'
-
-      as authorizations: 'custom_auth',
-         tokens: 'custom_token',
-         token_info: 'custom_token_info'
-    end
-  end
-
-  scope 'outer_space' do
-    use_doorkeeper do
-      controllers authorizations: 'custom_authorizations',
-                  tokens: 'custom_authorizations',
-                  token_info: 'custom_authorizations'
-
-      as authorizations: 'custom_auth',
-         tokens: 'custom_token',
-         token_info: 'custom_token_info'
-
-      skip_controllers :tokens, :applications, :token_info
-    end
-  end
-
-  get 'metal.json' => 'metal#index'
-
-  get '/callback', to: 'home#callback'
-  get '/sign_in',  to: 'home#sign_in'
-  resources :semi_protected_resources
-  resources :full_protected_resources
-  root to: 'home#index'
-end

data/spec/dummy/config.ru

@@ -1,4 +0,0 @@
-# This file is used by Rack-based servers to start the application.
-
-require ::File.expand_path('../config/environment',  __FILE__)
-run Dummy::Application

data/spec/dummy/db/migrate/20111122132257_create_users.rb

@@ -1,11 +0,0 @@
-# frozen_string_literal: true
-
-class CreateUsers < ActiveRecord::Migration[4.2]
-  def change
-    create_table :users do |t|
-      t.string :name
-
-      t.timestamps
-    end
-  end
-end

data/spec/dummy/db/migrate/20120312140401_add_password_to_users.rb

@@ -1,7 +0,0 @@
-# frozen_string_literal: true
-
-class AddPasswordToUsers < ActiveRecord::Migration[4.2]
-  def change
-    add_column :users, :password, :string
-  end
-end

data/spec/dummy/db/migrate/20151223192035_create_doorkeeper_tables.rb

@@ -1,62 +0,0 @@
-# frozen_string_literal: true
-
-class CreateDoorkeeperTables < ActiveRecord::Migration[4.2]
-  def change
-    create_table :oauth_applications do |t|
-      t.string  :name,         null: false
-      t.string  :uid,          null: false
-      t.string  :secret,       null: false
-      t.text    :redirect_uri, null: false
-      t.string  :scopes,       null: false, default: ''
-      t.timestamps             null: false
-    end
-
-    add_index :oauth_applications, :uid, unique: true
-
-    create_table :oauth_access_grants do |t|
-      t.integer  :resource_owner_id, null: false
-      t.references :application,     null: false
-      t.string   :token,             null: false
-      t.integer  :expires_in,        null: false
-      t.text     :redirect_uri,      null: false
-      t.datetime :created_at,        null: false
-      t.datetime :revoked_at
-      t.string   :scopes
-    end
-
-    add_index :oauth_access_grants, :token, unique: true
-    add_foreign_key(
-      :oauth_access_grants,
-      :oauth_applications,
-      column: :application_id,
-    )
-
-    create_table :oauth_access_tokens do |t|
-      t.integer  :resource_owner_id
-      t.references :application
-
-      # If you use a custom token generator you may need to change this column
-      # from string to text, so that it accepts tokens larger than 255
-      # characters. More info on custom token generators in:
-      # https://github.com/doorkeeper-gem/doorkeeper/tree/v3.0.0.rc1#custom-access-token-generator
-      #
-      # t.text     :token,             null: false
-      t.string   :token,             null: false
-
-      t.string   :refresh_token
-      t.integer  :expires_in
-      t.datetime :revoked_at
-      t.datetime :created_at,        null: false
-      t.string   :scopes
-    end
-
-    add_index :oauth_access_tokens, :token, unique: true
-    add_index :oauth_access_tokens, :resource_owner_id
-    add_index :oauth_access_tokens, :refresh_token, unique: true
-    add_foreign_key(
-      :oauth_access_tokens,
-      :oauth_applications,
-      column: :application_id,
-    )
-  end
-end

data/spec/dummy/db/migrate/20151223200000_add_owner_to_application.rb

@@ -1,9 +0,0 @@
-# frozen_string_literal: true
-
-class AddOwnerToApplication < ActiveRecord::Migration[4.2]
-  def change
-    add_column :oauth_applications, :owner_id, :integer, null: true
-    add_column :oauth_applications, :owner_type, :string, null: true
-    add_index :oauth_applications, [:owner_id, :owner_type]
-  end
-end

data/spec/dummy/db/migrate/20160320211015_add_previous_refresh_token_to_access_tokens.rb

@@ -1,13 +0,0 @@
-# frozen_string_literal: true
-
-class AddPreviousRefreshTokenToAccessTokens < ActiveRecord::Migration[4.2]
-  def change
-    add_column(
-      :oauth_access_tokens,
-      :previous_refresh_token,
-      :string,
-      default: "",
-      null: false
-    )
-  end
-end

data/spec/dummy/db/schema.rb

@@ -1,68 +0,0 @@
-# encoding: UTF-8
-# This file is auto-generated from the current state of the database. Instead
-# of editing this file, please use the migrations feature of Active Record to
-# incrementally modify your database, and then regenerate this schema definition.
-#
-# Note that this schema.rb definition is the authoritative source for your
-# database schema. If you need to create the application database on another
-# system, you should be using db:schema:load, not running all the migrations
-# from scratch. The latter is a flawed and unsustainable approach (the more migrations
-# you'll amass, the slower it'll run and the greater likelihood for issues).
-#
-# It's strongly recommended that you check this file into your version control system.
-
-ActiveRecord::Schema.define(version: 20180210183654) do
-
-  create_table "oauth_access_grants", force: :cascade do |t|
-    t.integer  "resource_owner_id", null: false
-    t.integer  "application_id",    null: false
-    t.string   "token",             null: false
-    t.integer  "expires_in",        null: false
-    t.text     "redirect_uri",      null: false
-    t.datetime "created_at",        null: false
-    t.datetime "revoked_at"
-    t.string   "scopes"
-  end
-
-  add_index "oauth_access_grants", ["token"], name: "index_oauth_access_grants_on_token", unique: true
-
-  create_table "oauth_access_tokens", force: :cascade do |t|
-    t.integer  "resource_owner_id"
-    t.integer  "application_id"
-    t.string   "token",                               null: false
-    t.string   "refresh_token"
-    t.integer  "expires_in"
-    t.datetime "revoked_at"
-    t.datetime "created_at",                          null: false
-    t.string   "scopes"
-    t.string   "previous_refresh_token", default: "", null: false
-  end
-
-  add_index "oauth_access_tokens", ["refresh_token"], name: "index_oauth_access_tokens_on_refresh_token", unique: true
-  add_index "oauth_access_tokens", ["resource_owner_id"], name: "index_oauth_access_tokens_on_resource_owner_id"
-  add_index "oauth_access_tokens", ["token"], name: "index_oauth_access_tokens_on_token", unique: true
-
-  create_table "oauth_applications", force: :cascade do |t|
-    t.string   "name",                      null: false
-    t.string   "uid",                       null: false
-    t.string   "secret",                    null: false
-    t.text     "redirect_uri",              null: false
-    t.string   "scopes",       default: "", null: false
-    t.datetime "created_at"
-    t.datetime "updated_at"
-    t.integer  "owner_id"
-    t.string   "owner_type"
-    t.boolean "confidential", default: true, null: false
-  end
-
-  add_index "oauth_applications", ["owner_id", "owner_type"], name: "index_oauth_applications_on_owner_id_and_owner_type"
-  add_index "oauth_applications", ["uid"], name: "index_oauth_applications_on_uid", unique: true
-
-  create_table "users", force: :cascade do |t|
-    t.string   "name"
-    t.datetime "created_at"
-    t.datetime "updated_at"
-    t.string   "password"
-  end
-
-end

data/spec/dummy/public/404.html

@@ -1,26 +0,0 @@
-<!DOCTYPE html>
-<html>
-<head>
-  <title>The page you were looking for doesn't exist (404)</title>
-  <style type="text/css">
-    body { background-color: #fff; color: #666; text-align: center; font-family: arial, sans-serif; }
-    div.dialog {
-      width: 25em;
-      padding: 0 4em;
-      margin: 4em auto 0 auto;
-      border: 1px solid #ccc;
-      border-right-color: #999;
-      border-bottom-color: #999;
-    }
-    h1 { font-size: 100%; color: #f00; line-height: 1.5em; }
-  </style>
-</head>
-
-<body>
-  <!-- This file lives in public/404.html -->
-  <div class="dialog">
-    <h1>The page you were looking for doesn't exist.</h1>
-    <p>You may have mistyped the address or the page may have moved.</p>
-  </div>
-</body>
-</html>

data/spec/dummy/public/422.html

@@ -1,26 +0,0 @@
-<!DOCTYPE html>
-<html>
-<head>
-  <title>The change you wanted was rejected (422)</title>
-  <style type="text/css">
-    body { background-color: #fff; color: #666; text-align: center; font-family: arial, sans-serif; }
-    div.dialog {
-      width: 25em;
-      padding: 0 4em;
-      margin: 4em auto 0 auto;
-      border: 1px solid #ccc;
-      border-right-color: #999;
-      border-bottom-color: #999;
-    }
-    h1 { font-size: 100%; color: #f00; line-height: 1.5em; }
-  </style>
-</head>
-
-<body>
-  <!-- This file lives in public/422.html -->
-  <div class="dialog">
-    <h1>The change you wanted was rejected.</h1>
-    <p>Maybe you tried to change something you didn't have access to.</p>
-  </div>
-</body>
-</html>

data/spec/dummy/public/500.html

@@ -1,26 +0,0 @@
-<!DOCTYPE html>
-<html>
-<head>
-  <title>We're sorry, but something went wrong (500)</title>
-  <style type="text/css">
-    body { background-color: #fff; color: #666; text-align: center; font-family: arial, sans-serif; }
-    div.dialog {
-      width: 25em;
-      padding: 0 4em;
-      margin: 4em auto 0 auto;
-      border: 1px solid #ccc;
-      border-right-color: #999;
-      border-bottom-color: #999;
-    }
-    h1 { font-size: 100%; color: #f00; line-height: 1.5em; }
-  </style>
-</head>
-
-<body>
-  <!-- This file lives in public/500.html -->
-  <div class="dialog">
-    <h1>We're sorry, but something went wrong.</h1>
-    <p>We've been notified about this issue and we'll take a look at it shortly.</p>
-  </div>
-</body>
-</html>

data/spec/dummy/script/rails

@@ -1,6 +0,0 @@
-#!/usr/bin/env ruby
-# This command will automatically be run when you run "rails" with Rails 3 gems installed from the root of your application.
-
-APP_PATH = File.expand_path('../../config/application',  __FILE__)
-require File.expand_path('../../config/boot',  __FILE__)
-require 'rails/commands'

data/spec/factories.rb

@@ -1,28 +0,0 @@
-FactoryBot.define do
-  factory :access_grant, class: Doorkeeper::AccessGrant do
-    sequence(:resource_owner_id) { |n| n }
-    application
-    redirect_uri 'https://app.com/callback'
-    expires_in 100
-    scopes 'public write'
-  end
-
-  factory :access_token, class: Doorkeeper::AccessToken do
-    sequence(:resource_owner_id) { |n| n }
-    application
-    expires_in 2.hours
-
-    factory :clientless_access_token do
-      application nil
-    end
-  end
-
-  factory :application, class: Doorkeeper::Application do
-    sequence(:name) { |n| "Application #{n}" }
-    redirect_uri 'https://app.com/callback'
-  end
-
-  # do not name this factory :user, otherwise it will conflict with factories
-  # from applications that use doorkeeper factories in their own tests
-  factory :doorkeeper_testing_user, class: :user
-end

data/spec/generators/application_owner_generator_spec.rb

@@ -1,41 +0,0 @@
-require 'spec_helper_integration'
-require 'generators/doorkeeper/application_owner_generator'
-
-describe 'Doorkeeper::ApplicationOwnerGenerator' do
-  include GeneratorSpec::TestCase
-
-  tests Doorkeeper::ApplicationOwnerGenerator
-  destination ::File.expand_path('../tmp/dummy', __FILE__)
-
-  describe 'after running the generator' do
-    before :each do
-      prepare_destination
-    end
-
-    context 'pre Rails 5.0.0' do
-      it 'creates a migration with no version specifier' do
-        stub_const("ActiveRecord::VERSION::MAJOR", 4)
-        stub_const("ActiveRecord::VERSION::MINOR", 2)
-
-        run_generator
-
-        assert_migration 'db/migrate/add_owner_to_application.rb' do |migration|
-          assert migration.include?("ActiveRecord::Migration\n")
-        end
-      end
-    end
-
-    context 'post Rails 5.0.0' do
-      it 'creates a migration with a version specifier' do
-        stub_const("ActiveRecord::VERSION::MAJOR", 5)
-        stub_const("ActiveRecord::VERSION::MINOR", 0)
-
-        run_generator
-
-        assert_migration 'db/migrate/add_owner_to_application.rb' do |migration|
-          assert migration.include?("ActiveRecord::Migration[5.0]\n")
-        end
-      end
-    end
-  end
-end

data/spec/generators/install_generator_spec.rb

@@ -1,31 +0,0 @@
-require 'spec_helper_integration'
-require 'generators/doorkeeper/install_generator'
-
-describe 'Doorkeeper::InstallGenerator' do
-  include GeneratorSpec::TestCase
-
-  tests Doorkeeper::InstallGenerator
-  destination ::File.expand_path('../tmp/dummy', __FILE__)
-
-  describe 'after running the generator' do
-    before :each do
-      prepare_destination
-      FileUtils.mkdir(::File.expand_path('config', Pathname(destination_root)))
-      FileUtils.mkdir(::File.expand_path('db', Pathname(destination_root)))
-      FileUtils.copy_file(::File.expand_path('../templates/routes.rb', __FILE__), ::File.expand_path('config/routes.rb', Pathname.new(destination_root)))
-      run_generator
-    end
-
-    it 'creates an initializer file' do
-      assert_file 'config/initializers/doorkeeper.rb'
-    end
-
-    it 'copies the locale file' do
-      assert_file 'config/locales/doorkeeper.en.yml'
-    end
-
-    it 'adds sample route' do
-      assert_file 'config/routes.rb', /use_doorkeeper/
-    end
-  end
-end

data/spec/generators/migration_generator_spec.rb

@@ -1,41 +0,0 @@
-require 'spec_helper_integration'
-require 'generators/doorkeeper/migration_generator'
-
-describe 'Doorkeeper::MigrationGenerator' do
-  include GeneratorSpec::TestCase
-
-  tests Doorkeeper::MigrationGenerator
-  destination ::File.expand_path('../tmp/dummy', __FILE__)
-
-  describe 'after running the generator' do
-    before :each do
-      prepare_destination
-    end
-
-    context 'pre Rails 5.0.0' do
-      it 'creates a migration with no version specifier' do
-        stub_const('ActiveRecord::VERSION::MAJOR', 4)
-        stub_const('ActiveRecord::VERSION::MINOR', 2)
-
-        run_generator
-
-        assert_migration 'db/migrate/create_doorkeeper_tables.rb' do |migration|
-          assert migration.include?("ActiveRecord::Migration\n")
-        end
-      end
-    end
-
-    context 'post Rails 5.0.0' do
-      it 'creates a migration with a version specifier' do
-        stub_const('ActiveRecord::VERSION::MAJOR', 5)
-        stub_const('ActiveRecord::VERSION::MINOR', 0)
-
-        run_generator
-
-        assert_migration 'db/migrate/create_doorkeeper_tables.rb' do |migration|
-          assert migration.include?("ActiveRecord::Migration[5.0]\n")
-        end
-      end
-    end
-  end
-end