RubyGems - facebooker-lite - Versions diffs - 1.0.67 - Mend

facebooker-lite 1.0.67

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.

Files changed (118) hide show

data/.autotest +15 -0
data/CHANGELOG.rdoc +24 -0
data/COPYING.rdoc +19 -0
data/Manifest.txt +114 -0
data/README.rdoc +120 -0
data/Rakefile +94 -0
data/TODO.rdoc +4 -0
data/facebooker.gemspec +42 -0
data/generators/xd_receiver/templates/xd_receiver.html +10 -0
data/generators/xd_receiver/templates/xd_receiver_ssl.html +10 -0
data/generators/xd_receiver/xd_receiver_generator.rb +10 -0
data/init.rb +25 -0
data/install.rb +12 -0
data/lib/facebooker.rb +261 -0
data/lib/facebooker/adapters/adapter_base.rb +91 -0
data/lib/facebooker/adapters/bebo_adapter.rb +77 -0
data/lib/facebooker/adapters/facebook_adapter.rb +60 -0
data/lib/facebooker/admin.rb +42 -0
data/lib/facebooker/application.rb +37 -0
data/lib/facebooker/attachment.rb +51 -0
data/lib/facebooker/batch_request.rb +45 -0
data/lib/facebooker/data.rb +57 -0
data/lib/facebooker/feed.rb +78 -0
data/lib/facebooker/logging.rb +44 -0
data/lib/facebooker/mobile.rb +20 -0
data/lib/facebooker/mock/service.rb +50 -0
data/lib/facebooker/mock/session.rb +18 -0
data/lib/facebooker/model.rb +139 -0
data/lib/facebooker/models/affiliation.rb +10 -0
data/lib/facebooker/models/album.rb +11 -0
data/lib/facebooker/models/applicationproperties.rb +39 -0
data/lib/facebooker/models/applicationrestrictions.rb +10 -0
data/lib/facebooker/models/comment.rb +9 -0
data/lib/facebooker/models/cookie.rb +10 -0
data/lib/facebooker/models/education_info.rb +11 -0
data/lib/facebooker/models/event.rb +28 -0
data/lib/facebooker/models/family_relative_info.rb +7 -0
data/lib/facebooker/models/friend_list.rb +16 -0
data/lib/facebooker/models/group.rb +36 -0
data/lib/facebooker/models/info_item.rb +10 -0
data/lib/facebooker/models/info_section.rb +10 -0
data/lib/facebooker/models/location.rb +8 -0
data/lib/facebooker/models/message_thread.rb +89 -0
data/lib/facebooker/models/notifications.rb +17 -0
data/lib/facebooker/models/page.rb +46 -0
data/lib/facebooker/models/photo.rb +19 -0
data/lib/facebooker/models/tag.rb +12 -0
data/lib/facebooker/models/user.rb +751 -0
data/lib/facebooker/models/video.rb +9 -0
data/lib/facebooker/models/work_info.rb +10 -0
data/lib/facebooker/parser.rb +970 -0
data/lib/facebooker/rails/backwards_compatible_param_checks.rb +31 -0
data/lib/facebooker/rails/controller.rb +353 -0
data/lib/facebooker/rails/extensions/action_controller.rb +47 -0
data/lib/facebooker/rails/extensions/rack_setup.rb +16 -0
data/lib/facebooker/rails/extensions/routing.rb +15 -0
data/lib/facebooker/rails/facebook_pretty_errors.rb +22 -0
data/lib/facebooker/rails/facebook_request_fix.rb +28 -0
data/lib/facebooker/rails/facebook_request_fix_2-3.rb +31 -0
data/lib/facebooker/rails/facebook_session_handling.rb +68 -0
data/lib/facebooker/rails/facebook_url_rewriting.rb +60 -0
data/lib/facebooker/rails/helpers/fb_connect.rb +75 -0
data/lib/facebooker/rails/integration_session.rb +38 -0
data/lib/facebooker/rails/profile_publisher_extensions.rb +42 -0
data/lib/facebooker/rails/publisher.rb +608 -0
data/lib/facebooker/rails/routing.rb +49 -0
data/lib/facebooker/rails/test_helpers.rb +68 -0
data/lib/facebooker/rails/utilities.rb +22 -0
data/lib/facebooker/server_cache.rb +24 -0
data/lib/facebooker/service.rb +103 -0
data/lib/facebooker/service/base_service.rb +19 -0
data/lib/facebooker/service/curl_service.rb +44 -0
data/lib/facebooker/service/net_http_service.rb +12 -0
data/lib/facebooker/service/typhoeus_multi_service.rb +27 -0
data/lib/facebooker/service/typhoeus_service.rb +17 -0
data/lib/facebooker/session.rb +786 -0
data/lib/facebooker/stream_post.rb +19 -0
data/lib/facebooker/version.rb +9 -0
data/lib/net/http_multipart_post.rb +123 -0
data/lib/rack/facebook.rb +89 -0
data/lib/rack/facebook_session.rb +21 -0
data/lib/tasks/facebooker.rake +19 -0
data/lib/tasks/facebooker.rb +2 -0
data/lib/tasks/tunnel.rake +46 -0
data/rails/init.rb +1 -0
data/setup.rb +1585 -0
data/templates/layout.erb +24 -0
data/test/facebooker/adapters_test.rb +191 -0
data/test/facebooker/admin_test.rb +102 -0
data/test/facebooker/application_test.rb +110 -0
data/test/facebooker/attachment_test.rb +72 -0
data/test/facebooker/batch_request_test.rb +83 -0
data/test/facebooker/data_test.rb +86 -0
data/test/facebooker/logging_test.rb +43 -0
data/test/facebooker/mobile_test.rb +45 -0
data/test/facebooker/model_test.rb +133 -0
data/test/facebooker/models/event_test.rb +15 -0
data/test/facebooker/models/page_test.rb +56 -0
data/test/facebooker/models/photo_test.rb +16 -0
data/test/facebooker/models/user_test.rb +1074 -0
data/test/facebooker/rails/facebook_request_fix_2-3_test.rb +25 -0
data/test/facebooker/rails/facebook_url_rewriting_test.rb +76 -0
data/test/facebooker/rails/integration_session_test.rb +13 -0
data/test/facebooker/rails/publisher_test.rb +538 -0
data/test/facebooker/rails_integration_test.rb +1543 -0
data/test/facebooker/server_cache_test.rb +44 -0
data/test/facebooker/service_test.rb +58 -0
data/test/facebooker/session_test.rb +883 -0
data/test/facebooker_test.rb +1263 -0
data/test/fixtures/multipart_post_body_with_only_parameters.txt +33 -0
data/test/fixtures/multipart_post_body_with_single_file.txt +38 -0
data/test/fixtures/multipart_post_body_with_single_file_that_has_nil_key.txt +38 -0
data/test/net/http_multipart_post_test.rb +52 -0
data/test/rack/facebook_session_test.rb +34 -0
data/test/rack/facebook_test.rb +73 -0
data/test/rails_test_helper.rb +36 -0
data/test/test_helper.rb +74 -0
metadata +278 -0

data/lib/facebooker/rails/backwards_compatible_param_checks.rb ADDED

@@ -0,0 +1,31 @@
+module Facebooker::Rails::BackwardsCompatibleParamChecks
+    def one_or_true( value )
+      case value
+        when String then
+          value == "1"
+        when Numeric then
+          value.to_f == 1.0
+        when TrueClass then
+          true
+        else
+          false
+      end
+    end
+    def zero_or_false( value )
+      case value
+        when String then
+          value.empty? || value == "0"
+        when Numeric then
+          value.to_f == 0.0
+        when FalseClass then
+          true
+        when NilClass then
+          true
+        else
+          false
+      end
+    end
+end

data/lib/facebooker/rails/controller.rb ADDED

@@ -0,0 +1,353 @@
+require 'facebooker'
+require 'facebooker/rails/profile_publisher_extensions'
+module Facebooker
+  module Rails
+    module Controller
+      include Facebooker::Rails::BackwardsCompatibleParamChecks
+      include Facebooker::Rails::ProfilePublisherExtensions
+      def self.included(controller)
+        controller.extend(ClassMethods)
+        controller.before_filter :set_facebook_request_format
+        controller.helper_attr :facebook_session_parameters
+        controller.helper_method :request_comes_from_facebook?
+      end
+      def initialize *args
+        @facebook_session       = nil
+        @installation_required  = nil
+        super
+      end
+      def facebook_session
+        @facebook_session
+      end
+      def facebook_session_parameters
+        {:fb_sig_session_key=>params[:fb_sig_session_key]}
+      end
+      def create_facebook_session
+        secure_with_facebook_params! || secure_with_cookies! || secure_with_token!
+      end
+      #this is used to proxy a connection through a rails app so the facebook secret key is not needed
+      #iphone apps use this
+      def create_facebook_session_with_secret
+        secure_with_session_secret!
+      end
+      def set_facebook_session
+        # first, see if we already have a session
+        session_set = session_already_secured?
+        # if not, see if we can load it from the environment
+        unless session_set
+          session_set = create_facebook_session
+          session[:facebook_session] = @facebook_session if session_set
+        end
+        if session_set
+          capture_facebook_friends_if_available!
+          Session.current = facebook_session
+        end
+        return session_set
+      end
+      def facebook_params
+        @facebook_params ||= verified_facebook_params
+      end
+      # Redirects the top window to the given url if the content is in an iframe, otherwise performs
+      # a normal redirect_to call.
+      def top_redirect_to(*args)
+        if request_is_facebook_iframe?
+          @redirect_url = url_for(*args)
+          render :layout => false, :inline => <<-HTML
+            <html><head>
+              <script type="text/javascript">
+                window.top.location.href = <%= @redirect_url.to_json -%>;
+              </script>
+              <noscript>
+                <meta http-equiv="refresh" content="0;url=<%=h @redirect_url %>" />
+                <meta http-equiv="window-target" content="_top" />
+              </noscript>
+            </head></html>
+          HTML
+        else
+          redirect_to(*args)
+        end
+      end
+      def redirect_to(*args)
+        if request_is_for_a_facebook_canvas? and !request_is_facebook_tab?
+          render :text => fbml_redirect_tag(*args)
+        else
+          super
+        end
+      end
+      private
+      def session_already_secured?
+        (@facebook_session = session[:facebook_session]) && session[:facebook_session].secured? if valid_session_key_in_session?
+      end
+      def user_has_deauthorized_application?
+        # if we're inside the facebook session and there is no session key,
+        # that means the user revoked our access
+        # we don't want to keep using the old expired key from the cookie.
+        request_comes_from_facebook? and params[:fb_sig_session_key].blank?
+      end
+      def clear_facebook_session_information
+        session[:facebook_session] = nil
+        @facebook_session=nil
+      end
+      def valid_session_key_in_session?
+        #before we access the facebook_params, make sure we have the parameters
+        #otherwise we will blow up trying to access the secure parameters
+        if user_has_deauthorized_application?
+          clear_facebook_session_information
+          false
+        else
+          !session[:facebook_session].blank? &&  (params[:fb_sig_session_key].blank? || session[:facebook_session].session_key == facebook_params[:session_key])
+        end
+      end
+      def clear_fb_cookies!
+        domain_cookie_tag = "base_domain_#{Facebooker.api_key}"
+        cookie_domain = ".#{cookies[domain_cookie_tag]}" if cookies[domain_cookie_tag]
+        fb_cookie_names.each {|name| cookies.delete(name, :domain=>cookie_domain)}
+        cookies.delete Facebooker.api_key
+      end
+      def fb_cookie_prefix
+        Facebooker.api_key+"_"
+      end
+      def fb_cookie_names
+        fb_cookie_names = cookies.keys.select{|k| k && k.starts_with?(fb_cookie_prefix)}
+      end
+      def secure_with_cookies!
+          parsed = {}
+          fb_cookie_names.each { |key| parsed[key[fb_cookie_prefix.size,key.size]] = cookies[key] }
+          #returning gracefully if the cookies aren't set or have expired
+          return unless parsed['session_key'] && parsed['user'] && parsed['expires'] && parsed['ss']
+          return unless (Time.at(parsed['expires'].to_s.to_f) > Time.now) || (parsed['expires'] == "0")
+          #if we have the unexpired cookies, we'll throw an exception if the sig doesn't verify
+          verify_signature(parsed,cookies[Facebooker.api_key], true)
+          @facebook_session = new_facebook_session
+          @facebook_session.secure_with!(parsed['session_key'],parsed['user'],parsed['expires'],parsed['ss'])
+          @facebook_session
+      end
+      def secure_with_token!
+        if params['auth_token']
+          @facebook_session = new_facebook_session
+          @facebook_session.auth_token = params['auth_token']
+          @facebook_session.secure!
+          @facebook_session
+        end
+      end
+      def secure_with_session_secret!
+        if params['auth_token']
+          @facebook_session = new_facebook_session
+          @facebook_session.auth_token = params['auth_token']
+          @facebook_session.secure_with_session_secret!
+          @facebook_session
+        end
+      end
+      def secure_with_facebook_params!
+        return unless request_comes_from_facebook?
+        if ['user', 'session_key'].all? {|element| facebook_params[element]}
+          @facebook_session = new_facebook_session
+          @facebook_session.secure_with!(facebook_params['session_key'], facebook_params['user'], facebook_params['expires'])
+          @facebook_session
+        end
+      end
+      #override to specify where the user should be sent after logging in
+      def after_facebook_login_url
+        nil
+      end
+      def default_after_facebook_login_url
+        omit_keys = ["_method", "format"]
+        options = (params||{}).clone
+        options = options.reject{|k,v| k.to_s.match(/^fb_sig/) or omit_keys.include?(k.to_s)}
+        options = options.merge({:only_path => false})
+        url_for(options)
+      end
+      def create_new_facebook_session_and_redirect!
+        session[:facebook_session] = new_facebook_session
+        next_url = after_facebook_login_url || default_after_facebook_login_url
+        top_redirect_to session[:facebook_session].login_url({:next => next_url, :canvas=>params[:fb_sig_in_canvas]}) unless @installation_required
+        false
+      end
+      def new_facebook_session
+        Facebooker::Session.create(Facebooker.api_key, Facebooker.secret_key)
+      end
+      def capture_facebook_friends_if_available!
+        return unless request_comes_from_facebook?
+        if friends = facebook_params['friends']
+          facebook_session.user.friends = friends.map do |friend_uid|
+            User.new(friend_uid, facebook_session)
+          end
+        end
+      end
+      def verified_facebook_params
+        facebook_sig_params = params.inject({}) do |collection, pair|
+          collection[pair.first.sub(/^fb_sig_/, '')] = pair.last if pair.first[0,7] == 'fb_sig_'
+          collection
+        end
+        verify_signature(facebook_sig_params,params['fb_sig'])
+        facebook_sig_params.inject(HashWithIndifferentAccess.new) do |collection, pair|
+          collection[pair.first] = facebook_parameter_conversions[pair.first].call(pair.last)
+          collection
+        end
+      end
+      def earliest_valid_session
+        48.hours.ago
+      end
+      def verify_signature(facebook_sig_params,expected_signature,force=false)
+        # Don't verify the signature if rack has already done so.
+        unless ::Rails.version >= "2.3" and ActionController::Dispatcher.middleware.include? Rack::Facebook and !force
+          raw_string = facebook_sig_params.map{ |*args| args.join('=') }.sort.join
+          actual_sig = Digest::MD5.hexdigest([raw_string, Facebooker::Session.secret_key].join)
+          raise Facebooker::Session::IncorrectSignature if actual_sig != expected_signature
+        end
+        raise Facebooker::Session::SignatureTooOld if facebook_sig_params['time'] && Time.at(facebook_sig_params['time'].to_f) < earliest_valid_session
+        true
+      end
+      def facebook_parameter_conversions
+        @facebook_parameter_conversions ||= Hash.new do |hash, key|
+          lambda{|value| value}
+        end.merge(
+          'time'      => lambda{|value| Time.at(value.to_f)},
+          'in_canvas' => lambda{|value| one_or_true(value)},
+          'added'     => lambda{|value| one_or_true(value)},
+          'expires'   => lambda{|value| zero_or_false(value) ? nil : Time.at(value.to_f)},
+          'friends'   => lambda{|value| value.split(/,/)}
+        )
+      end
+      def fbml_redirect_tag(url,*args)
+        "<fb:redirect url=\"#{url_for(url)}\" />"
+      end
+      def request_comes_from_facebook?
+        request_is_for_a_facebook_canvas? || request_is_facebook_ajax? || request_is_fb_ping?
+      end
+      def request_is_fb_ping?
+        !params['fb_sig'].blank?
+      end
+      def request_is_for_a_facebook_canvas?
+        !params['fb_sig_in_canvas'].blank?
+      end
+      def request_is_facebook_tab?
+        !params["fb_sig_in_profile_tab"].blank?
+      end
+      def request_is_facebook_iframe?
+        !params["fb_sig_in_iframe"].blank?
+      end
+      def request_is_facebook_ajax?
+        one_or_true(params["fb_sig_is_mockajax"]) || one_or_true(params["fb_sig_is_ajax"])
+      end
+      def xml_http_request?
+        request_is_facebook_ajax? || super
+      end
+      def application_is_installed?
+        facebook_params['added']
+      end
+      def ensure_has_status_update
+        has_extended_permission?("status_update") || application_needs_permission("status_update")
+      end
+      def ensure_has_photo_upload
+        has_extended_permission?("photo_upload") || application_needs_permission("photo_upload")
+      end
+      def ensure_has_video_upload
+        has_extended_permission?("video_upload") || application_needs_permission("video_upload")
+      end
+      def ensure_has_create_listing
+        has_extended_permission?("create_listing") || application_needs_permission("create_listing")
+      end
+      def ensure_has_create_event
+        has_extended_permission?("create_event") || application_needs_permission("create_event")
+      end
+      def application_needs_permission(perm)
+        top_redirect_to(facebook_session.permission_url(perm))
+      end
+      def has_extended_permission?(perm)
+        params["fb_sig_ext_perms"] and params["fb_sig_ext_perms"].include?(perm)
+      end
+      def ensure_authenticated_to_facebook
+        set_facebook_session || create_new_facebook_session_and_redirect!
+      end
+      def ensure_application_is_installed_by_facebook_user
+        @installation_required = true
+        returning ensure_authenticated_to_facebook && application_is_installed? do |authenticated_and_installed|
+           application_is_not_installed_by_facebook_user unless authenticated_and_installed
+        end
+      end
+      def application_is_not_installed_by_facebook_user
+        next_url = after_facebook_login_url || default_after_facebook_login_url
+        top_redirect_to session[:facebook_session].install_url({:next => next_url})
+      end
+      def set_facebook_request_format
+        if request_is_facebook_ajax?
+          request.format = :fbjs
+        elsif request_comes_from_facebook? && !request_is_facebook_iframe?
+          request.format = :fbml
+        end
+      end
+      module ClassMethods
+        #
+        # Creates a filter which reqires a user to have already authenticated to
+        # Facebook before executing actions.  Accepts the same optional options hash which
+        # before_filter and after_filter accept.
+        def ensure_authenticated_to_facebook(options = {})
+          before_filter :ensure_authenticated_to_facebook, options
+        end
+        def ensure_application_is_installed_by_facebook_user(options = {})
+          before_filter :ensure_application_is_installed_by_facebook_user, options
+        end
+        def request_comes_from_facebook?
+          request_is_for_a_facebook_canvas? || request_is_facebook_ajax?
+        end
+      end
+    end
+  end
+end

data/lib/facebooker/rails/extensions/action_controller.rb ADDED

@@ -0,0 +1,47 @@
+module ::ActionController
+  class Base
+    def self.inherited_with_facebooker(subclass)
+      inherited_without_facebooker(subclass)
+      if subclass.to_s == "ApplicationController"
+        subclass.send(:include,Facebooker::Rails::Controller)
+      end
+    end
+    class << self
+      alias_method_chain :inherited, :facebooker
+    end
+  end
+end
+# When making get requests, Facebook sends fb_sig parameters both in the query string
+# and also in the post body. We want to ignore the query string ones because they are one
+# request out of date
+# We only do thise when there are POST parameters so that IFrame linkage still works
+if Rails.version < '2.3'
+  class ActionController::AbstractRequest
+    def query_parameters_with_facebooker
+      if request_parameters.blank?
+        query_parameters_without_facebooker
+      else
+        (query_parameters_without_facebooker||{}).reject {|key,value| key.to_s =~ /^fb_sig/}
+      end
+    end
+    alias_method_chain :query_parameters, :facebooker
+  end
+else
+  class ActionController::Request
+    def query_parameters_with_facebooker
+      if request_parameters.blank?
+        query_parameters_without_facebooker
+      else
+        (query_parameters_without_facebooker||{}).reject {|key,value| key.to_s =~ /^fb_sig/}
+      end
+    end
+    alias_method_chain :query_parameters, :facebooker
+  end
+end
+Mime::Type.register_alias "text/html", :fbml
+Mime::Type.register_alias "text/javascript", :fbjs

data/lib/facebooker/rails/extensions/rack_setup.rb ADDED

@@ -0,0 +1,16 @@
+# Somewhere in 2.3 RewindableInput was removed- rack supports it natively
+require 'rack/facebook'
+require 'rack/facebook_session'
+ActionController::Dispatcher.middleware.insert_before(
+  ActionController::ParamsParser,
+  Rack::Facebook
+)
+#use this if you aren't using the cookie store and want to use
+# the facebook session key for your session id
+# ActionController::Dispatcher.middleware.insert_before(
+#   ActionController::Base.session_store,
+#   Rack::FacebookSession,
+#   ActionController::Base.session_options[:key]
+# )