doorkeeper 5.1.0 → 5.5.0

data/spec/dummy/config/initializers/backtrace_silencers.rb

@@ -1,9 +0,0 @@
-# frozen_string_literal: true
-
-# Be sure to restart your server when you modify this file.
-
-# You can add backtrace silencers for libraries that you're using but don't wish to see in your backtraces.
-# Rails.backtrace_cleaner.add_silencer { |line| line =~ /my_noisy_library/ }
-
-# You can also remove all the silencers if you're trying to debug a problem that might stem from framework code.
-# Rails.backtrace_cleaner.remove_silencers!

data/spec/dummy/config/initializers/doorkeeper.rb

@@ -1,121 +0,0 @@
-# frozen_string_literal: true
-
-Doorkeeper.configure do
-  # Change the ORM that doorkeeper will use.
-  orm DOORKEEPER_ORM
-
-  # This block will be called to check whether the resource owner is authenticated or not.
-  resource_owner_authenticator do
-    # Put your resource owner authentication logic here.
-    User.where(id: session[:user_id]).first || redirect_to(root_url, alert: "Needs sign in.")
-  end
-
-  # If you didn't skip applications controller from Doorkeeper routes in your application routes.rb
-  # file then you need to declare this block in order to restrict access to the web interface for
-  # adding oauth authorized applications. In other case it will return 403 Forbidden response
-  # every time somebody will try to access the admin web interface.
-  #
-  # admin_authenticator do
-  #   # Put your admin authentication logic here.
-  #   # Example implementation:
-  #   Admin.find_by_id(session[:admin_id]) || redirect_to(new_admin_session_url)
-  # end
-
-  # Authorization Code expiration time (default 10 minutes).
-  # authorization_code_expires_in 10.minutes
-
-  # Access token expiration time (default 2 hours).
-  # If you want to disable expiration, set this to nil.
-  # access_token_expires_in 2.hours
-
-  # Reuse access token for the same resource owner within an application (disabled by default)
-  # Rationale: https://github.com/doorkeeper-gem/doorkeeper/issues/383
-  # reuse_access_token
-
-  # Issue access tokens with refresh token (disabled by default)
-  use_refresh_token
-
-  # Forbids creating/updating applications with arbitrary scopes that are
-  # not in configuration, i.e. `default_scopes` or `optional_scopes`.
-  # (disabled by default)
-  #
-  # enforce_configured_scopes
-
-  # Provide support for an owner to be assigned to each registered application (disabled by default)
-  # Optional parameter confirmation: true (default false) if you want to enforce ownership of
-  # a registered application
-  # Note: you must also run the rails g doorkeeper:application_owner generator to provide the necessary support
-  # enable_application_owner confirmation: false
-
-  # Define access token scopes for your provider
-  # For more information go to
-  # https://github.com/doorkeeper-gem/doorkeeper/wiki/Using-Scopes
-  default_scopes  :public
-  optional_scopes :write, :update
-
-  # Change the way client credentials are retrieved from the request object.
-  # By default it retrieves first from the `HTTP_AUTHORIZATION` header, then
-  # falls back to the `:client_id` and `:client_secret` params from the `params` object.
-  # Check out the wiki for more information on customization
-  # client_credentials :from_basic, :from_params
-
-  # Change the way access token is authenticated from the request object.
-  # By default it retrieves first from the `HTTP_AUTHORIZATION` header, then
-  # falls back to the `:access_token` or `:bearer_token` params from the `params` object.
-  # Check out the wiki for more information on customization
-  # access_token_methods :from_bearer_authorization, :from_access_token_param, :from_bearer_param
-
-  # Change the native redirect uri for client apps
-  # When clients register with the following redirect uri, they won't be redirected to any server and
-  # the authorization code will be displayed within the provider
-  # The value can be any string. Use nil to disable this feature.
-  # When disabled, clients must provide a valid URL
-  # (Similar behaviour: https://developers.google.com/accounts/docs/OAuth2InstalledApp#choosingredirecturi)
-  #
-  # native_redirect_uri 'urn:ietf:wg:oauth:2.0:oob'
-
-  # Forces the usage of the HTTPS protocol in non-native redirect uris (enabled
-  # by default in non-development environments). OAuth2 delegates security in
-  # communication to the HTTPS protocol so it is wise to keep this enabled.
-  #
-  # force_ssl_in_redirect_uri !Rails.env.development?
-
-  # Specify what grant flows are enabled in array of Strings. The valid
-  # strings and the flows they enable are:
-  #
-  # "authorization_code" => Authorization Code Grant Flow
-  # "implicit"           => Implicit Grant Flow
-  # "password"           => Resource Owner Password Credentials Grant Flow
-  # "client_credentials" => Client Credentials Grant Flow
-  #
-  # If not specified, Doorkeeper enables authorization_code and
-  # client_credentials.
-  #
-  # implicit and password grant flows have risks that you should understand
-  # before enabling:
-  #   http://tools.ietf.org/html/rfc6819#section-4.4.2
-  #   http://tools.ietf.org/html/rfc6819#section-4.4.3
-  #
-  # grant_flows %w[authorization_code client_credentials]
-
-  # Hook into the strategies' request & response life-cycle in case your
-  # application needs advanced customization or logging:
-  #
-  # before_successful_strategy_response do |request|
-  #   puts "BEFORE HOOK FIRED! #{request}"
-  # end
-  #
-  # after_successful_strategy_response do |request, response|
-  #   puts "AFTER HOOK FIRED! #{request}, #{response}"
-  # end
-
-  # Under some circumstances you might want to have applications auto-approved,
-  # so that the user skips the authorization step.
-  # For example if dealing with a trusted application.
-  # skip_authorization do |resource_owner, client|
-  #   client.superapp? or resource_owner.admin?
-  # end
-
-  # WWW-Authenticate Realm (default "Doorkeeper").
-  realm "Doorkeeper"
-end

data/spec/dummy/config/initializers/secret_token.rb

@@ -1,10 +0,0 @@
-# frozen_string_literal: true
-
-# Be sure to restart your server when you modify this file.
-
-# Your secret key for verifying the integrity of signed cookies.
-# If you change this key, all old signed cookies will become invalid!
-# Make sure the secret is at least 30 characters and all random,
-# no regular words or you'll be exposed to dictionary attacks.
-Dummy::Application.config.secret_key_base =
-  "c00157b5a1bb6181792f0f4a8a080485de7bab9987e6cf159"

data/spec/dummy/config/initializers/session_store.rb

@@ -1,10 +0,0 @@
-# frozen_string_literal: true
-
-# Be sure to restart your server when you modify this file.
-
-Dummy::Application.config.session_store :cookie_store, key: "_dummy_session"
-
-# Use the database for sessions instead of the cookie-based default,
-# which shouldn't be used to store highly confidential information
-# (create the session table with "rails generate session_migration")
-# Dummy::Application.config.session_store :active_record_store

data/spec/dummy/config/initializers/wrap_parameters.rb

@@ -1,16 +0,0 @@
-# frozen_string_literal: true
-
-# Be sure to restart your server when you modify this file.
-#
-# This file contains settings for ActionController::ParamsWrapper which
-# is enabled by default.
-
-# Enable parameter wrapping for JSON. You can disable this by setting :format to an empty array.
-ActiveSupport.on_load(:action_controller) do
-  wrap_parameters format: [:json]
-end
-
-# Disable root element in JSON by default.
-ActiveSupport.on_load(:active_record) do
-  self.include_root_in_json = false
-end

data/spec/dummy/config/locales/doorkeeper.en.yml

@@ -1,5 +0,0 @@
-en:
-  doorkeeper:
-    scopes:
-      public: "Access your public data"
-      write:  "Update your data"

data/spec/dummy/config/routes.rb

@@ -1,13 +0,0 @@
-Rails.application.routes.draw do
-  use_doorkeeper
-
-  resources :semi_protected_resources
-  resources :full_protected_resources
-
-  get 'metal.json' => 'metal#index'
-
-  get '/callback', to: 'home#callback'
-  get '/sign_in',  to: 'home#sign_in'
-
-  root to: 'home#index'
-end

data/spec/dummy/config.ru

@@ -1,6 +0,0 @@
-# frozen_string_literal: true
-
-# This file is used by Rack-based servers to start the application.
-
-require ::File.expand_path("../config/environment", __FILE__)
-run Dummy::Application

data/spec/dummy/db/migrate/20111122132257_create_users.rb

@@ -1,11 +0,0 @@
-# frozen_string_literal: true
-
-class CreateUsers < ActiveRecord::Migration[4.2]
-  def change
-    create_table :users do |t|
-      t.string :name
-
-      t.timestamps
-    end
-  end
-end

data/spec/dummy/db/migrate/20120312140401_add_password_to_users.rb

@@ -1,7 +0,0 @@
-# frozen_string_literal: true
-
-class AddPasswordToUsers < ActiveRecord::Migration[4.2]
-  def change
-    add_column :users, :password, :string
-  end
-end

data/spec/dummy/db/migrate/20151223192035_create_doorkeeper_tables.rb

@@ -1,69 +0,0 @@
-# frozen_string_literal: true
-
-class CreateDoorkeeperTables < ActiveRecord::Migration[4.2]
-  def change
-    create_table :oauth_applications do |t|
-      t.string  :name,    null: false
-      t.string  :uid,     null: false
-      t.string  :secret,  null: false
-
-      # Remove `null: false` if you are planning to use grant flows
-      # that doesn't require redirect URI to be used during authorization
-      # like Client Credentials flow or Resource Owner Password.
-      t.text    :redirect_uri, null: false
-      t.string  :scopes,       null: false, default: ""
-      t.timestamps             null: false
-    end
-
-    add_index :oauth_applications, :uid, unique: true
-
-    create_table :oauth_access_grants do |t|
-      t.references :resource_owner,  null: false
-      t.references :application,     null: false
-      t.string   :token,             null: false
-      t.integer  :expires_in,        null: false
-      t.text     :redirect_uri,      null: false
-      t.datetime :created_at,        null: false
-      t.datetime :revoked_at
-      t.string   :scopes
-    end
-
-    add_index :oauth_access_grants, :token, unique: true
-    add_foreign_key(
-      :oauth_access_grants,
-      :oauth_applications,
-      column: :application_id
-    )
-
-    create_table :oauth_access_tokens do |t|
-      t.references :resource_owner, index: true
-      t.references :application,    null: false
-
-      # If you use a custom token generator you may need to change this column
-      # from string to text, so that it accepts tokens larger than 255
-      # characters. More info on custom token generators in:
-      # https://github.com/doorkeeper-gem/doorkeeper/tree/v3.0.0.rc1#custom-access-token-generator
-      #
-      # t.text :token, null: false
-      t.string :token, null: false
-
-      t.string   :refresh_token
-      t.integer  :expires_in
-      t.datetime :revoked_at
-      t.datetime :created_at, null: false
-      t.string   :scopes
-    end
-
-    add_index :oauth_access_tokens, :token, unique: true
-    add_index :oauth_access_tokens, :refresh_token, unique: true
-    add_foreign_key(
-      :oauth_access_tokens,
-      :oauth_applications,
-      column: :application_id
-    )
-
-    # Uncomment below to ensure a valid reference to the resource owner's table
-    add_foreign_key :oauth_access_grants, :users, column: :resource_owner_id
-    add_foreign_key :oauth_access_tokens, :users, column: :resource_owner_id
-  end
-end

data/spec/dummy/db/migrate/20151223200000_add_owner_to_application.rb

@@ -1,9 +0,0 @@
-# frozen_string_literal: true
-
-class AddOwnerToApplication < ActiveRecord::Migration[4.2]
-  def change
-    add_column :oauth_applications, :owner_id, :integer, null: true
-    add_column :oauth_applications, :owner_type, :string, null: true
-    add_index :oauth_applications, %i[owner_id owner_type]
-  end
-end

data/spec/dummy/db/migrate/20160320211015_add_previous_refresh_token_to_access_tokens.rb

@@ -1,13 +0,0 @@
-# frozen_string_literal: true
-
-class AddPreviousRefreshTokenToAccessTokens < ActiveRecord::Migration[4.2]
-  def change
-    add_column(
-      :oauth_access_tokens,
-      :previous_refresh_token,
-      :string,
-      default: "",
-      null: false
-    )
-  end
-end

data/spec/dummy/db/migrate/20170822064514_enable_pkce.rb

@@ -1,8 +0,0 @@
-# frozen_string_literal: true
-
-class EnablePkce < ActiveRecord::Migration[4.2]
-  def change
-    add_column :oauth_access_grants, :code_challenge, :string, null: true
-    add_column :oauth_access_grants, :code_challenge_method, :string, null: true
-  end
-end

data/spec/dummy/db/migrate/20180210183654_add_confidential_to_applications.rb

@@ -1,13 +0,0 @@
-# frozen_string_literal: true
-
-class AddConfidentialToApplications < ActiveRecord::Migration[5.1]
-  def change
-    add_column(
-      :oauth_applications,
-      :confidential,
-      :boolean,
-      null: false,
-      default: true # maintaining backwards compatibility: require secrets
-    )
-  end
-end

data/spec/dummy/db/schema.rb

@@ -1,68 +0,0 @@
-# This file is auto-generated from the current state of the database. Instead
-# of editing this file, please use the migrations feature of Active Record to
-# incrementally modify your database, and then regenerate this schema definition.
-#
-# Note that this schema.rb definition is the authoritative source for your
-# database schema. If you need to create the application database on another
-# system, you should be using db:schema:load, not running all the migrations
-# from scratch. The latter is a flawed and unsustainable approach (the more migrations
-# you'll amass, the slower it'll run and the greater likelihood for issues).
-#
-# It's strongly recommended that you check this file into your version control system.
-
-ActiveRecord::Schema.define(version: 20180210183654) do
-
-  create_table "oauth_access_grants", force: :cascade do |t|
-    t.integer "resource_owner_id", null: false
-    t.integer "application_id", null: false
-    t.string "token", null: false
-    t.integer "expires_in", null: false
-    t.text "redirect_uri", null: false
-    t.datetime "created_at", null: false
-    t.datetime "revoked_at"
-    t.string "scopes"
-    unless ENV['WITHOUT_PKCE']
-      t.string   "code_challenge"
-      t.string   "code_challenge_method"
-    end
-    t.index ["token"], name: "index_oauth_access_grants_on_token", unique: true
-  end
-
-  create_table "oauth_access_tokens", force: :cascade do |t|
-    t.integer "resource_owner_id"
-    t.integer "application_id"
-    t.string "token", null: false
-    t.string "refresh_token"
-    t.integer "expires_in"
-    t.datetime "revoked_at"
-    t.datetime "created_at", null: false
-    t.string "scopes"
-    t.string "previous_refresh_token", default: "", null: false
-    t.index ["refresh_token"], name: "index_oauth_access_tokens_on_refresh_token", unique: true
-    t.index ["resource_owner_id"], name: "index_oauth_access_tokens_on_resource_owner_id"
-    t.index ["token"], name: "index_oauth_access_tokens_on_token", unique: true
-  end
-
-  create_table "oauth_applications", force: :cascade do |t|
-    t.string "name", null: false
-    t.string "uid", null: false
-    t.string "secret", null: false
-    t.text "redirect_uri"
-    t.string "scopes", default: "", null: false
-    t.datetime "created_at", null: false
-    t.datetime "updated_at", null: false
-    t.integer "owner_id"
-    t.string "owner_type"
-    t.boolean "confidential", default: true, null: false
-    t.index ["owner_id", "owner_type"], name: "index_oauth_applications_on_owner_id_and_owner_type"
-    t.index ["uid"], name: "index_oauth_applications_on_uid", unique: true
-  end
-
-  create_table "users", force: :cascade do |t|
-    t.string "name"
-    t.datetime "created_at"
-    t.datetime "updated_at"
-    t.string "password"
-  end
-
-end

data/spec/dummy/public/404.html

@@ -1,26 +0,0 @@
-<!DOCTYPE html>
-<html>
-<head>
-  <title>The page you were looking for doesn't exist (404)</title>
-  <style type="text/css">
-    body { background-color: #fff; color: #666; text-align: center; font-family: arial, sans-serif; }
-    div.dialog {
-      width: 25em;
-      padding: 0 4em;
-      margin: 4em auto 0 auto;
-      border: 1px solid #ccc;
-      border-right-color: #999;
-      border-bottom-color: #999;
-    }
-    h1 { font-size: 100%; color: #f00; line-height: 1.5em; }
-  </style>
-</head>
-
-<body>
-  <!-- This file lives in public/404.html -->
-  <div class="dialog">
-    <h1>The page you were looking for doesn't exist.</h1>
-    <p>You may have mistyped the address or the page may have moved.</p>
-  </div>
-</body>
-</html>

data/spec/dummy/public/422.html

@@ -1,26 +0,0 @@
-<!DOCTYPE html>
-<html>
-<head>
-  <title>The change you wanted was rejected (422)</title>
-  <style type="text/css">
-    body { background-color: #fff; color: #666; text-align: center; font-family: arial, sans-serif; }
-    div.dialog {
-      width: 25em;
-      padding: 0 4em;
-      margin: 4em auto 0 auto;
-      border: 1px solid #ccc;
-      border-right-color: #999;
-      border-bottom-color: #999;
-    }
-    h1 { font-size: 100%; color: #f00; line-height: 1.5em; }
-  </style>
-</head>
-
-<body>
-  <!-- This file lives in public/422.html -->
-  <div class="dialog">
-    <h1>The change you wanted was rejected.</h1>
-    <p>Maybe you tried to change something you didn't have access to.</p>
-  </div>
-</body>
-</html>

data/spec/dummy/public/500.html

@@ -1,26 +0,0 @@
-<!DOCTYPE html>
-<html>
-<head>
-  <title>We're sorry, but something went wrong (500)</title>
-  <style type="text/css">
-    body { background-color: #fff; color: #666; text-align: center; font-family: arial, sans-serif; }
-    div.dialog {
-      width: 25em;
-      padding: 0 4em;
-      margin: 4em auto 0 auto;
-      border: 1px solid #ccc;
-      border-right-color: #999;
-      border-bottom-color: #999;
-    }
-    h1 { font-size: 100%; color: #f00; line-height: 1.5em; }
-  </style>
-</head>
-
-<body>
-  <!-- This file lives in public/500.html -->
-  <div class="dialog">
-    <h1>We're sorry, but something went wrong.</h1>
-    <p>We've been notified about this issue and we'll take a look at it shortly.</p>
-  </div>
-</body>
-</html>

data/spec/dummy/script/rails

@@ -1,9 +0,0 @@
-#!/usr/bin/env ruby
-# frozen_string_literal: true
-
-# This command will automatically be run when you run "rails" with Rails 3 gems
-# installed from the root of your application.
-
-APP_PATH = File.expand_path("../config/application", __dir__)
-require File.expand_path("../config/boot", __dir__)
-require "rails/commands"

data/spec/factories.rb

@@ -1,30 +0,0 @@
-# frozen_string_literal: true
-
-FactoryBot.define do
-  factory :access_grant, class: "Doorkeeper::AccessGrant" do
-    sequence(:resource_owner_id) { |n| n }
-    application
-    redirect_uri { "https://app.com/callback" }
-    expires_in { 100 }
-    scopes { "public write" }
-  end
-
-  factory :access_token, class: "Doorkeeper::AccessToken" do
-    sequence(:resource_owner_id) { |n| n }
-    application
-    expires_in { 2.hours }
-
-    factory :clientless_access_token do
-      application { nil }
-    end
-  end
-
-  factory :application, class: "Doorkeeper::Application" do
-    sequence(:name) { |n| "Application #{n}" }
-    redirect_uri { "https://app.com/callback" }
-  end
-
-  # do not name this factory :user, otherwise it will conflict with factories
-  # from applications that use doorkeeper factories in their own tests
-  factory :doorkeeper_testing_user, class: :user
-end

data/spec/generators/application_owner_generator_spec.rb

@@ -1,28 +0,0 @@
-# frozen_string_literal: true
-
-require "spec_helper"
-require "generators/doorkeeper/application_owner_generator"
-
-describe "Doorkeeper::ApplicationOwnerGenerator" do
-  include GeneratorSpec::TestCase
-
-  tests Doorkeeper::ApplicationOwnerGenerator
-  destination ::File.expand_path("../tmp/dummy", __FILE__)
-
-  describe "after running the generator" do
-    before :each do
-      prepare_destination
-    end
-
-    it "creates a migration with a version specifier" do
-      stub_const("ActiveRecord::VERSION::MAJOR", 5)
-      stub_const("ActiveRecord::VERSION::MINOR", 0)
-
-      run_generator
-
-      assert_migration "db/migrate/add_owner_to_application.rb" do |migration|
-        assert migration.include?("ActiveRecord::Migration[5.0]\n")
-      end
-    end
-  end
-end

data/spec/generators/confidential_applications_generator_spec.rb

@@ -1,29 +0,0 @@
-# frozen_string_literal: true
-
-require "spec_helper"
-require "generators/doorkeeper/confidential_applications_generator"
-
-describe "Doorkeeper::ConfidentialApplicationsGenerator" do
-  include GeneratorSpec::TestCase
-
-  tests Doorkeeper::ConfidentialApplicationsGenerator
-  destination ::File.expand_path("../tmp/dummy", __FILE__)
-
-  describe "after running the generator" do
-    before :each do
-      prepare_destination
-    end
-
-    it "creates a migration with a version specifier" do
-      stub_const("ActiveRecord::VERSION::MAJOR", 5)
-      stub_const("ActiveRecord::VERSION::MINOR", 0)
-
-      run_generator
-
-      assert_migration "db/migrate/add_confidential_to_applications.rb" do |migration|
-        assert migration.include?("ActiveRecord::Migration[5.0]\n")
-        assert migration.include?(":confidential")
-      end
-    end
-  end
-end

data/spec/generators/install_generator_spec.rb

@@ -1,36 +0,0 @@
-# frozen_string_literal: true
-
-require "spec_helper"
-require "generators/doorkeeper/install_generator"
-
-describe "Doorkeeper::InstallGenerator" do
-  include GeneratorSpec::TestCase
-
-  tests Doorkeeper::InstallGenerator
-  destination ::File.expand_path("../tmp/dummy", __FILE__)
-
-  describe "after running the generator" do
-    before :each do
-      prepare_destination
-      FileUtils.mkdir(::File.expand_path("config", Pathname(destination_root)))
-      FileUtils.mkdir(::File.expand_path("db", Pathname(destination_root)))
-      FileUtils.copy_file(
-        ::File.expand_path("../templates/routes.rb", __FILE__),
-        ::File.expand_path("config/routes.rb", Pathname.new(destination_root))
-      )
-      run_generator
-    end
-
-    it "creates an initializer file" do
-      assert_file "config/initializers/doorkeeper.rb"
-    end
-
-    it "copies the locale file" do
-      assert_file "config/locales/doorkeeper.en.yml"
-    end
-
-    it "adds sample route" do
-      assert_file "config/routes.rb", /use_doorkeeper/
-    end
-  end
-end

data/spec/generators/migration_generator_spec.rb

@@ -1,28 +0,0 @@
-# frozen_string_literal: true
-
-require "spec_helper"
-require "generators/doorkeeper/migration_generator"
-
-describe "Doorkeeper::MigrationGenerator" do
-  include GeneratorSpec::TestCase
-
-  tests Doorkeeper::MigrationGenerator
-  destination ::File.expand_path("../tmp/dummy", __FILE__)
-
-  describe "after running the generator" do
-    before :each do
-      prepare_destination
-    end
-
-    it "creates a migration with a version specifier" do
-      stub_const("ActiveRecord::VERSION::MAJOR", 5)
-      stub_const("ActiveRecord::VERSION::MINOR", 0)
-
-      run_generator
-
-      assert_migration "db/migrate/create_doorkeeper_tables.rb" do |migration|
-        assert migration.include?("ActiveRecord::Migration[5.0]\n")
-      end
-    end
-  end
-end