factorylabs-casrack_the_authenticator 1.6.0

data/test/service_ticket_validator_test.rb

@@ -0,0 +1,85 @@
+require File.join(File.dirname(__FILE__), 'test_helper')
+require 'net/http'
+
+class ServiceTicketValidatorTest < Test::Unit::TestCase
+  
+  context 'a service-ticket validator' do
+    
+    setup do
+      config = Object.new
+      config.stubs(:service_validate_url).returns('http://cas.example.org/cas/serviceValidate?service=foo&ticket=bar')
+      @validator = CasrackTheAuthenticator::ServiceTicketValidator.new(config, nil, nil)
+    end
+    
+    context 'validating a ticket' do
+      
+      setup do
+        @server = Object.new
+        @connection = Object.new
+        @response = Object.new
+        @body = Object.new
+        Net::HTTP.stubs(:new).returns(@server)
+        @server.stubs(:start).yields(@connection)
+        @connection.stubs(:get).returns(@response)
+        @response.stubs(:body).returns(@body)
+      end
+      
+      should 'return the body from the service-validate URL' do
+        assert_equal @body, @validator.send(:get_validation_response_body)
+        assert_received(Net::HTTP, :new) do |expects|
+          expects.with('cas.example.org', 80)
+        end
+        assert_received(@server, :start)
+        assert_received(@connection, :get) do |expects|
+          expects.with('/cas/serviceValidate?service=foo&ticket=bar', { 'Accept' => '*/*' })
+        end
+        assert_received(@response, :body)
+      end
+      
+      context "but a connection error gets in the way" do
+        
+        setup do
+          @server.stubs(:start).raises(SocketError)
+        end
+      
+        should 'let the error percolate' do
+          assert_raises(SocketError) do
+            @validator.send(:get_validation_response_body)
+          end
+        end
+        
+      end
+      
+    end
+    
+    context 'parsing a successful response' do
+      
+      setup do
+        @body = <<-EOX
+<cas:serviceResponse xmlns:cas='http://www.yale.edu/tp/cas'>
+  <cas:authenticationSuccess>
+    <cas:user>beatrice</cas:user>
+  </cas:authenticationSuccess>
+</cas:serviceResponse>
+EOX
+      end
+      
+      should 'get the user' do
+        assert_equal 'beatrice', @validator.send(:parse_user, @body)
+      end
+    
+    end
+    
+    context 'parsing an unsuccessful response' do
+      setup do
+        @body = ''
+      end
+      
+      should 'return nil' do
+        assert_equal nil, @validator.send(:parse_user, @body)
+      end
+    end
+    
+  end
+  
+end

data/test/simple_test.rb

@@ -0,0 +1,131 @@
+require File.join(File.dirname(__FILE__), 'test_helper')
+
+class SimpleTest < Test::Unit::TestCase
+  
+  context 'creating a Simple authenticator' do
+    should 'require a :cas_server' do
+      assert_raises(ArgumentError) do
+        CasrackTheAuthenticator::Simple.new(:anything, {})
+      end
+    end
+  end
+  
+  def self.should_pass_the_request_on_down
+    should "pass the request to the underyling app" do
+      assert_received(@app, :call)
+    end
+  end
+  
+  def self.should_set_the_cas_user_in_the_session_to(username)
+    should "set the CAS user in the session to #{username || '<nil>'}" do
+      assert_equal username, @session[:cas_user]
+    end
+  end
+  
+  def get(url)
+    env = Rack::MockRequest.env_for(url)
+    if @session
+      env['rack.session'] = @session
+    else
+      @session = Rack::Request.new(env).session
+    end
+    Rack::MockRequest.stubs(:env_for).returns(env)
+    @response = @request.get url
+  end
+  
+  def param_from_url(param, url)
+    uri = URI.parse(url)
+    Rack::Utils.parse_nested_query(uri.query)[param]
+  end
+  
+  def return_to_url(response)
+    param_from_url 'service', response.headers['Location']
+  end
+  
+  context 'a Simple authenticator' do
+    
+    setup do
+      @app = Object.new
+      @authenticator = CasrackTheAuthenticator::Simple.new(@app, {:cas_server => 'http://cas.test/'})
+      @request = Rack::MockRequest.new(@authenticator)
+    end
+    
+    context 'when receiving a 200 from below' do
+      
+      setup do
+        @response_from_below = [ 200, {}, 'Success!' ]
+        @app.stubs(:call).returns(@response_from_below)
+        get '/'
+      end
+      
+      should_pass_the_request_on_down
+
+      should 'do nothing to the response' do
+        assert_equal @response_from_below[0], @response.status
+        assert_equal @response_from_below[2], @response.body
+      end
+      
+    end
+    
+    context 'when receiving a 401 from below' do
+      
+      setup do
+        response = [401, {}, 'Unauthorized!']
+        @app.stubs(:call).returns(response)
+        @url = "http://foo.bar/baz?yoo=hoo"
+        get @url
+      end
+      
+      should_pass_the_request_on_down
+      
+      should 'redirect to CAS' do
+        assert((300..399).include?(@response.status))
+        assert @response.headers['Location'] =~ /cas/i
+      end
+      
+      should 'set the content-type to text/plain' do
+        assert_equal 'text/plain', @response.headers['Content-Type']
+      end
+      
+      should 'use the requested URL for the return-to' do
+        assert_equal @url, return_to_url(@response)
+      end
+      
+      context "and the request URL includes a 'ticket' param" do
+        
+        setup do
+          @url = "http://foo.bar/baz?ticket=12345"
+          get @url
+        end
+        
+        should 'strip the ticket from the return-to URL' do
+          return_to = return_to_url(@response)
+          assert_equal nil, param_from_url('ticket', return_to)
+        end
+        
+      end
+      
+    end
+    
+    context 'when receiving a valid result from CAS' do
+      
+      setup do
+        validator = Object.new
+        validator.stubs(:user).returns 'timmy'
+        CasrackTheAuthenticator::ServiceTicketValidator.stubs(:new).returns(validator)
+        @response_from_below = [ 200, {}, 'Success!' ]
+        @app.stubs(:call).returns(@response_from_below)
+        get '/?ticket=ST-77889'
+      end
+      
+      should_set_the_cas_user_in_the_session_to 'timmy'
+      
+      should 'build a service-ticket validator' do
+        assert_received(CasrackTheAuthenticator::ServiceTicketValidator, :new)
+      end
+      
+    end
+    
+  end
+  
+end

data/test/test_helper.rb

@@ -0,0 +1,16 @@
+require 'test/unit'
+require 'test/unit/testcase'
+require 'rubygems'
+require 'shoulda'
+gem 'jferris-mocha'
+require 'mocha'
+require 'redgreen'
+
+I_KNOW_I_AM_USING_AN_OLD_AND_BUGGY_VERSION_OF_LIBXML2 = 1
+
+lib_path = File.expand_path(File.join(File.dirname(__FILE__), '..', 'lib'))
+$: << lib_path unless $:.include?(lib_path)
+
+require 'casrack_the_authenticator'
+require 'rack'
+require 'rack/mock'

metadata

@@ -0,0 +1,165 @@
+--- !ruby/object:Gem::Specification 
+name: factorylabs-casrack_the_authenticator
+version: !ruby/object:Gem::Version 
+  prerelease: false
+  segments: 
+  - 1
+  - 6
+  - 0
+  version: 1.6.0
+platform: ruby
+authors: 
+- James Rosen
+autorequire: 
+bindir: bin
+cert_chain: []
+
+date: 2010-04-07 00:00:00 -06:00
+default_executable: 
+dependencies: 
+- !ruby/object:Gem::Dependency 
+  name: nokogiri
+  prerelease: false
+  requirement: &id001 !ruby/object:Gem::Requirement 
+    requirements: 
+    - - ~>
+      - !ruby/object:Gem::Version 
+        segments: 
+        - 1
+        - 4
+        - 1
+        version: 1.4.1
+  type: :runtime
+  version_requirements: *id001
+- !ruby/object:Gem::Dependency 
+  name: thoughtbot-shoulda
+  prerelease: false
+  requirement: &id002 !ruby/object:Gem::Requirement 
+    requirements: 
+    - - ~>
+      - !ruby/object:Gem::Version 
+        segments: 
+        - 2
+        - 10
+        - 2
+        version: 2.10.2
+  type: :development
+  version_requirements: *id002
+- !ruby/object:Gem::Dependency 
+  name: jferris-mocha
+  prerelease: false
+  requirement: &id003 !ruby/object:Gem::Requirement 
+    requirements: 
+    - - ~>
+      - !ruby/object:Gem::Version 
+        segments: 
+        - 0
+        - 9
+        - 7
+        version: 0.9.7
+  type: :development
+  version_requirements: *id003
+- !ruby/object:Gem::Dependency 
+  name: redgreen
+  prerelease: false
+  requirement: &id004 !ruby/object:Gem::Requirement 
+    requirements: 
+    - - ~>
+      - !ruby/object:Gem::Version 
+        segments: 
+        - 1
+        - 2
+        - 2
+        version: 1.2.2
+  type: :development
+  version_requirements: *id004
+- !ruby/object:Gem::Dependency 
+  name: rack
+  prerelease: false
+  requirement: &id005 !ruby/object:Gem::Requirement 
+    requirements: 
+    - - ~>
+      - !ruby/object:Gem::Version 
+        segments: 
+        - 1
+        - 0
+        - 0
+        version: 1.0.0
+  type: :development
+  version_requirements: *id005
+description: CAS Authentication via Rack Middleware
+email: james.a.rosen@gmail.com
+executables: []
+
+extensions: []
+
+extra_rdoc_files: 
+- README.rdoc
+files: 
+- .gitignore
+- README.rdoc
+- Rakefile
+- VERSION
+- casrack_the_authenticator.gemspec
+- developer_tasks/doc.rake
+- developer_tasks/gem.rake
+- developer_tasks/test.rake
+- features/fake.feature
+- features/require_cas.feature
+- features/simple.feature
+- features/step_definitions/fake_cas_steps.rb
+- features/step_definitions/rack_steps.rb
+- features/support/assertions.rb
+- features/support/rack_support.rb
+- lib/casrack_the_authenticator.rb
+- lib/casrack_the_authenticator/configuration.rb
+- lib/casrack_the_authenticator/fake.rb
+- lib/casrack_the_authenticator/require_cas.rb
+- lib/casrack_the_authenticator/service_ticket_validator.rb
+- lib/casrack_the_authenticator/simple.rb
+- test/configuration_test.rb
+- test/fake_test.rb
+- test/service_ticket_validator_test.rb
+- test/simple_test.rb
+- test/test_helper.rb
+has_rdoc: true
+homepage: http://github.com/gcnovus/casrack_the_authenticator
+licenses: []
+
+post_install_message: 
+rdoc_options: 
+- --line-numbers
+- --inline-source
+- --title
+- "Casrack the Authenticator: RDoc"
+- --charset
+- utf-8
+require_paths: 
+- lib
+required_ruby_version: !ruby/object:Gem::Requirement 
+  requirements: 
+  - - ">="
+    - !ruby/object:Gem::Version 
+      segments: 
+      - 0
+      version: "0"
+required_rubygems_version: !ruby/object:Gem::Requirement 
+  requirements: 
+  - - ">="
+    - !ruby/object:Gem::Version 
+      segments: 
+      - 0
+      version: "0"
+requirements: []
+
+rubyforge_project: 
+rubygems_version: 1.3.6
+signing_key: 
+specification_version: 3
+summary: CAS Authentication via Rack Middleware
+test_files: 
+- test/configuration_test.rb
+- test/fake_test.rb
+- test/service_ticket_validator_test.rb
+- test/simple_test.rb
+- test/test_helper.rb