ey_gatekeeper 0.1.34

data/spec/impersonation_spec.rb

@@ -0,0 +1,50 @@
+require 'spec_helper'
+
+describe EY::GateKeeper::Client::Consumer do
+  before do
+    user_key_data = {
+      'key' => 'user',
+      'secret' => 'bar',
+      'access_controls' => {
+        'xdna://domains' => [],
+      },
+      'cloudkit_user' => 'xcloud',
+      'user' => 'id://user'
+    }.to_json
+
+    service_key_data = {
+      'key' => 'service',
+      'secret' => 'bar',
+      'access_controls' => {
+        'xdna://domains' => ['GET'],
+      },
+      'cloudkit_user' => 'xcloud',
+      'user' => 'id://service'
+    }.to_json
+
+    store = EY::GateKeeper::AuthStore.new
+    store.post('/gatekeeper_credentials', :json => user_key_data)
+    store.post('/gatekeeper_credentials', :json => service_key_data)
+  end
+
+  context "with valid credentials and an impersonation token" do
+    before do
+      @user = EY::GateKeeper.new('user','bar')
+    end
+    subject { EY::GateKeeper.new('service','bar') }
+
+    it "should be able to impersonate a user" do
+      subject.get('/domains').status.should == 200
+      subject.impersonate!(@user.token.token)
+      subject.get('/domains').status.should == 401
+    end
+
+    it "should be able to stop impersonating a user" do
+      subject.get('/domains').status.should == 200
+      subject.impersonate!(@user.token.token)
+      subject.get('/domains').status.should == 401
+      subject.just_me!
+      subject.get('/domains').status.should == 200
+    end
+  end
+end

data/spec/responses_spec.rb

@@ -0,0 +1,23 @@
+require 'spec_helper'
+
+describe EY::GateKeeper::Responses do
+
+  subject { EY::GateKeeper::Responses }
+
+  its(:possible_responses) { should have_at_least(7).responses }
+
+  context ".string" do
+    it "should return a canned response when a valid response key is passed" do
+      subject.string(subject.possible_responses.first).should_not be_empty
+      subject.string(subject.possible_responses.first).should_not be_nil
+    end
+
+    it "should return an empty string when no response key is passed" do
+      subject.string.should be_empty
+    end
+
+    it "should return an empty string when an unknown response key is passed" do
+      subject.string(:foozle_bam_boozle).should be_empty
+    end
+  end
+end

data/spec/service_token_authentication_spec.rb

@@ -0,0 +1,10 @@
+require 'spec_helper'
+
+describe EY::GateKeeper::Client::Middleware::ServiceTokenAuthentication do
+  let(:service_client) { ServiceClient.new('77zxcvbnm77', '77zxcvbnm77') }
+
+  it "fetches a token and passes it to the service" do
+    service_client.get('/').body.should_not be_empty
+  end
+
+end

data/spec/spec_helper.rb

@@ -0,0 +1,133 @@
+$:.unshift(File.join(File.dirname(__FILE__), 'lib'))
+
+require 'ey_gatekeeper/server'
+require 'ey_gatekeeper'
+
+require 'rack/test'
+
+class ServiceClient < Rack::Client::Simple
+  def initialize(xdna_key, xdna_secret)
+    app = Rack::Builder.new do
+      use EY::GateKeeper::Client::Middleware::ServiceTokenAuthentication, 'http://gatekeeper.local', xdna_key, xdna_secret
+      run lambda {|e| [200, { 'Content-Type' => 'text/plain' }, [e['HTTP_AUTH_TOKEN']]] }
+    end
+    super(app)
+  end
+end
+
+
+EY::GateKeeper.mock!
+
+module EY::GateKeeper::TestMethods
+  def app; EY::GateKeeper::Client.mock_app end
+
+  def test_key
+    "hello"
+  end
+
+  def test_secret
+    "world"
+  end
+
+  def test_role_1_access_controls
+    {
+      "xdna://domains" => ["GET"],
+      "xdna://" => ["GET"]
+    }
+  end
+
+  def test_role_2_access_controls
+    {
+      "xdna://domains" => ["GET","PUT"],
+      "xdna://" => []
+    }
+  end
+
+  def create_test_roles
+    create_role("Test1", test_role_1_access_controls)
+    create_role("Test2", test_role_2_access_controls)
+    [ find_role("Test1"), find_role("Test2") ]
+  end
+
+  def get_token(key = EY::GateKeeper::Client.master_key, secret = EY::GateKeeper::Client.master_secret)
+    get '/_authenticate', {}, {
+      'HTTP_AUTHORIZATION' => ["#{key}:#{secret}"].pack('m*')
+    }
+
+    last_response.status.should == 200
+    last_response.content_type.should == 'application/json'
+
+    JSON.parse(last_response.body)
+  end
+
+  def create_role(name, access_controls)
+    role_data = {
+      'name' => name,
+      'access_controls' => access_controls
+    }
+    auth_store.put("/gatekeeper_roles/#{name}", :json => role_data.to_json).status.should == 201
+  end
+
+  def create_key_with_roles(*roles)
+    key_data = {
+      'access_controls' => { 'xdna://' => [] },
+      'gatekeeper_roles' => roles.map { |role| "/gatekeeper_roles/#{role}" },
+      'key' => test_key,
+      'secret' => test_secret,
+      'cloudkit_user' => 'xcloud'
+    }
+    auth_store.post("/gatekeeper_credentials",
+                    :json => key_data.to_json).status.should == 201
+  end
+
+  def expire_token(token)
+    stored_token_data = find_token(token).parsed_content
+    stored_token_data['expires'] = 0
+    save_token(token, stored_token_data)
+  end
+
+  def restrict_token(token)
+    stored_token_data = find_token(token).parsed_content
+    stored_token_data['access_controls'] = {}
+    save_token(token, stored_token_data)
+  end
+
+  def find_key(key,secret)
+    result = auth_store.get("/gatekeeper_credentials", :search => {:key => key, :secret => secret})
+    result.status.should == 200
+    result.parsed_content["total"].should == 1
+    auth_store.get(result.parsed_content["uris"].first).parsed_content
+  end
+
+  def find_role(role)
+    auth_store.get("/gatekeeper_roles/#{role}")
+  end
+
+  def find_token(token)
+    auth_store.get("/gatekeeper_tokens/#{token}")
+  end
+
+  def save_token(token, data)
+    etag = find_token(token).etag
+    auth_store.put(
+                   "/gatekeeper_tokens/#{token}",
+                   :json => data.to_json,
+                   :etag => etag
+                   ).status.should == 200
+  end
+
+  def auth_store
+    @store ||= EY::GateKeeper::AuthStore.new
+  end
+end
+
+RSpec.configure do |config|
+  config.color_enabled = config.tty = true
+
+  config.before(:each) do
+    EY::GateKeeper.reset!
+  end
+
+  config.include Rack::Test::Methods
+  config.include EY::GateKeeper::TestMethods
+end

metadata

@@ -0,0 +1,129 @@
+--- !ruby/object:Gem::Specification
+name: ey_gatekeeper
+version: !ruby/object:Gem::Version
+  version: 0.1.34
+  prerelease: 
+platform: ruby
+authors:
+- Engine Yard
+autorequire: 
+bindir: bin
+cert_chain: []
+date: 2011-06-22 00:00:00.000000000 -03:00
+default_executable: 
+dependencies:
+- !ruby/object:Gem::Dependency
+  name: json
+  requirement: &2169581240 !ruby/object:Gem::Requirement
+    none: false
+    requirements:
+    - - ! '>='
+      - !ruby/object:Gem::Version
+        version: '0'
+  type: :runtime
+  prerelease: false
+  version_requirements: *2169581240
+- !ruby/object:Gem::Dependency
+  name: rack-client
+  requirement: &2169580620 !ruby/object:Gem::Requirement
+    none: false
+    requirements:
+    - - ~>
+      - !ruby/object:Gem::Version
+        version: 0.3.1.pre.j
+  type: :runtime
+  prerelease: false
+  version_requirements: *2169580620
+- !ruby/object:Gem::Dependency
+  name: excon
+  requirement: &2169580020 !ruby/object:Gem::Requirement
+    none: false
+    requirements:
+    - - ! '>='
+      - !ruby/object:Gem::Version
+        version: '0'
+  type: :runtime
+  prerelease: false
+  version_requirements: *2169580020
+- !ruby/object:Gem::Dependency
+  name: rspec
+  requirement: &2169579520 !ruby/object:Gem::Requirement
+    none: false
+    requirements:
+    - - ! '>='
+      - !ruby/object:Gem::Version
+        version: '0'
+  type: :development
+  prerelease: false
+  version_requirements: *2169579520
+- !ruby/object:Gem::Dependency
+  name: rack-test
+  requirement: &2169578900 !ruby/object:Gem::Requirement
+    none: false
+    requirements:
+    - - ! '>='
+      - !ruby/object:Gem::Version
+        version: '0'
+  type: :development
+  prerelease: false
+  version_requirements: *2169578900
+description: I am the gatekeeper, are you the keymaster?
+email:
+- gems@engineyard.com
+executables: []
+extensions: []
+extra_rdoc_files: []
+files:
+- lib/ey_gatekeeper/access_control_list.rb
+- lib/ey_gatekeeper/client/consumer.rb
+- lib/ey_gatekeeper/client/middlewares/authentication.rb
+- lib/ey_gatekeeper/client/middlewares/service_token_authentication.rb
+- lib/ey_gatekeeper/client/server_response.rb
+- lib/ey_gatekeeper/client.rb
+- lib/ey_gatekeeper/responses.rb
+- lib/ey_gatekeeper/token.rb
+- lib/ey_gatekeeper/util.rb
+- lib/ey_gatekeeper/version.rb
+- lib/ey_gatekeeper.rb
+- spec/access_control_list_spec.rb
+- spec/auth_service_spec.rb
+- spec/consumer_spec.rb
+- spec/fallback_spec.rb
+- spec/impersonation_spec.rb
+- spec/responses_spec.rb
+- spec/service_token_authentication_spec.rb
+- spec/spec_helper.rb
+has_rdoc: true
+homepage: http://github.com/engineyard/ey_gatekeeper
+licenses: []
+post_install_message: 
+rdoc_options: []
+require_paths:
+- lib
+required_ruby_version: !ruby/object:Gem::Requirement
+  none: false
+  requirements:
+  - - ! '>='
+    - !ruby/object:Gem::Version
+      version: '0'
+required_rubygems_version: !ruby/object:Gem::Requirement
+  none: false
+  requirements:
+  - - ! '>='
+    - !ruby/object:Gem::Version
+      version: '0'
+requirements: []
+rubyforge_project: 
+rubygems_version: 1.5.2
+signing_key: 
+specification_version: 3
+summary: I am the gatekeeper, are you the keymaster?
+test_files:
+- spec/access_control_list_spec.rb
+- spec/auth_service_spec.rb
+- spec/consumer_spec.rb
+- spec/fallback_spec.rb
+- spec/impersonation_spec.rb
+- spec/responses_spec.rb
+- spec/service_token_authentication_spec.rb
+- spec/spec_helper.rb