factorylabs-castronaut 0.7.5

data/lib/castronaut/models/ticket_granting_ticket.rb

@@ -0,0 +1,52 @@
+module Castronaut
+  module Models
+
+    class TicketGrantingTicket < ActiveRecord::Base
+      include Castronaut::Models::Consumeable
+      include Castronaut::Models::Dispenser
+
+      has_many :service_tickets, :dependent => :destroy
+
+      before_validation :dispense_ticket, :if => :new_record?
+      validates_presence_of :ticket, :username
+
+      def self.validate_cookie(ticket_cookie)
+        Castronaut.logger.debug("#{self} - Validating ticket for #{ticket_cookie}")
+
+        return Castronaut::TicketResult.new(nil, "No ticket granting ticket given", 'warn') if ticket_cookie.nil?
+
+        ticket_granting_ticket = find_by_ticket(ticket_cookie)
+
+        if ticket_granting_ticket
+          Castronaut.logger.debug("#{self} -[#{ticket_cookie}] for [#{ticket_granting_ticket.username}] successfully validated.")
+          return Castronaut::TicketResult.new(ticket_granting_ticket, "Your session has expired. Please log in again.", 'warn') if ticket_granting_ticket.expired?
+        else
+          Castronaut.logger.debug("#{self} - [#{ticket_cookie}] was not found in the database.")
+        end
+
+        Castronaut::TicketResult.new(ticket_granting_ticket)
+      end
+
+      def self.generate_for(username, client_host)
+        create! :username => username, :client_hostname => client_host
+      end
+      
+      def ticket_prefix
+        "TGC"
+      end
+      
+      def proxies
+      end
+
+      def to_cookie
+        ticket
+      end
+
+      def expired? 
+        false
+      end
+
+    end
+
+  end
+end

data/lib/castronaut/presenters/login.rb

@@ -0,0 +1,84 @@
+module Castronaut
+  module Presenters
+
+    class Login
+      attr_reader :controller, :your_mission
+      attr_accessor :messages
+
+      delegate :params, :request, :to => :controller
+      delegate :cookies, :env, :to => :request
+
+      def initialize(controller)
+        @controller = controller
+        @messages = []
+        @your_mission = nil
+      end
+
+      def service
+        params['service']
+      end
+
+      def renewal
+        params['renew']
+      end
+
+      def gateway?
+        return true if params['gateway'] == 'true'
+        return true if params['gateway'] == '1'
+        false
+      end
+
+      def ticket_generating_ticket_cookie
+        cookies['tgt']
+      end
+
+      def redirection_loop?
+        params.has_key?('redirection_loop_intercepted')
+      end
+      
+      def client_host
+        env['HTTP_X_FORWARDED_FOR'] || env['REMOTE_HOST'] || env['REMOTE_ADDR']
+      end
+      
+      def login_ticket
+        Castronaut::Models::LoginTicket.generate_from(client_host).ticket
+      end
+
+      def represent!
+        ticket_granting_ticket_result = Castronaut::Models::TicketGrantingTicket.validate_cookie(ticket_generating_ticket_cookie)
+
+        if ticket_granting_ticket_result.valid?
+          messages << "You are currently logged in as #{ticket_granting_ticket_result.username}.  If this is not you, please log in below."
+        end
+
+        if redirection_loop?
+          messages << "The client and server are unable to negotiate authentication.  Please try logging in again later."
+        else
+
+          if service
+            if !renewal && ticket_granting_ticket_result.valid?
+              service_ticket = Castronaut::Models::ServiceTicket.generate_ticket_for(service, client_host, ticket_granting_ticket_result.ticket)
+          
+              if service_ticket.service_uri
+                return controller.redirect(service_ticket.service_uri, 303)
+              else
+                messages << "The target service your browser supplied appears to be invalid. Please contact your system administrator for help."
+              end            
+            end
+          elsif gateway?
+            messages << "The server cannot fulfill this gateway request because no service parameter was given."
+          end
+        
+        end
+      
+        @your_mission = lambda { controller.erb :login, :locals => { :presenter => self } }
+              
+        self
+      end
+    
+    end
+
+  end
+  
+end
+

data/lib/castronaut/presenters/logout.rb

@@ -0,0 +1,56 @@
+module Castronaut
+  module Presenters
+
+    class Logout
+      attr_reader :controller, :your_mission
+      attr_accessor :messages
+
+      delegate :params, :request, :to => :controller
+      delegate :cookies, :env, :to => :request
+
+      def initialize(controller)
+        @controller = controller
+        @messages = []
+        @your_mission = nil
+      end
+
+      def url
+        params['url']
+      end
+
+      def ticket_granting_ticket_cookie
+        cookies['tgt']
+      end
+
+      def client_host
+        env['HTTP_X_FORWARDED_FOR'] || env['REMOTE_HOST'] || env['REMOTE_ADDR']
+      end
+      
+      def login_ticket
+        Castronaut::Models::LoginTicket.generate_from(client_host).ticket
+      end
+
+      def represent!
+        ticket_granting_ticket = Castronaut::Models::TicketGrantingTicket.find_by_ticket(ticket_granting_ticket_cookie) 
+        
+        cookies.delete 'tgt'
+        controller.response.delete_cookie('tgt')
+
+        if ticket_granting_ticket
+          Castronaut::Models::ProxyGrantingTicket.clean_up_proxy_granting_tickets_for(ticket_granting_ticket.username)
+          ticket_granting_ticket.destroy
+        end
+        
+        messages << "You have successfully logged out."
+        
+        @your_mission = lambda { controller.erb :logout, :locals => { :presenter => self } }
+                
+        self
+      end
+    
+    end
+
+  end
+  
+end
+

data/lib/castronaut/presenters/process_login.rb

@@ -0,0 +1,149 @@
+require 'json'
+require 'json/add/rails'
+
+module Castronaut
+  module Presenters
+
+    class ProcessLogin
+      MissingCredentialsMessage = "Please supply a username and password to login."
+
+      attr_reader :controller, :your_mission
+      attr_accessor :messages, :login_ticket
+
+      delegate :params, :request, :to => :controller
+      delegate :cookies, :env, :to => :request
+
+      def initialize(controller)
+        @controller = controller
+        @messages = []
+        @your_mission = nil
+      end
+
+      def service
+        params['service']
+      end
+
+      def renewal
+        params['renew']
+      end
+
+      def gateway?
+        return true if params['gateway'] == 'true'
+        return true if params['gateway'] == '1'
+        false
+      end
+
+      def ticket_generating_ticket_cookie
+        cookies['tgt']
+      end
+
+      def redirection_loop?
+        params.has_key?('redirection_loop_intercepted')
+      end
+
+      def client_host
+        env['HTTP_X_FORWARDED_FOR'] || env['REMOTE_HOST'] || env['REMOTE_ADDR']
+      end
+
+      def username
+        params['username'].to_s.strip
+      end
+
+      def password
+        params['password'].to_s.strip
+      end
+
+      def setup_http_request(url, auth_status, payload)
+        request = Net::HTTP::Post.new(url.path, { 'port' => url.port.to_s })
+        request.set_form_data('cas_json_payload' => {'cas_status' => auth_status, 'cas_details' => payload}.to_json)
+        request
+      end
+      
+      def setup_http_session(url)
+        session = Net::HTTP.new(url.host, url.port.to_s)
+        session.use_ssl = true if url.scheme == 'https'
+        session
+      end
+      
+      def fire_notice(auth_status, payload)
+        return unless Castronaut.config.can_fire_callbacks?
+
+        callback_url = Castronaut.config.callbacks["on_authentication_#{auth_status}"]
+        return if callback_url.blank?
+
+        url = URI.parse(callback_url)
+        request = setup_http_request(url, auth_status, payload)
+        
+        session = setup_http_session(url)
+        session.start { |http| http.request(request) }
+      end
+
+      def fire_authentication_success_notice(details)
+        Thread.new do
+          fire_notice 'success', details
+        end
+      end
+
+      def fire_authentication_failure_notice(details)
+        fire_notice 'failed', details
+      end
+
+      def represent!
+        @login_ticket = params['lt']
+
+        login_ticket_validation_result = Castronaut::Models::LoginTicket.validate_ticket(@login_ticket)
+
+        if login_ticket_validation_result.invalid?
+          messages << login_ticket_validation_result.message
+          @login_ticket = Castronaut::Models::LoginTicket.generate_from(client_host).ticket
+          @your_mission = lambda { controller.erb :login, :locals => { :presenter => self } } # TODO: STATUS 401
+          return self
+        end
+
+        if username.blank? || password.blank?
+          messages << MissingCredentialsMessage
+          @login_ticket = Castronaut::Models::LoginTicket.generate_from(client_host).ticket
+          @your_mission = lambda { controller.erb :login, :locals => { :presenter => self } } # TODO: STATUS 401
+          return self
+        end
+
+        @login_ticket = Castronaut::Models::LoginTicket.generate_from(client_host).ticket
+
+        Castronaut.logger.info("#{self.class} - Logging in with username: #{username}, login ticket: #{login_ticket}, service: #{service}")
+
+        authentication_result = Castronaut::Adapters.selected_adapter.authenticate(username, password)
+
+        if authentication_result.valid?
+          fire_authentication_success_notice('username' => username, 'client_host' => client_host, 'service' => service)
+
+          ticket_granting_ticket = Castronaut::Models::TicketGrantingTicket.generate_for(username, client_host)
+          controller.response.set_cookie "tgt", ticket_granting_ticket.to_cookie
+          if service.blank?
+            messages << "You have successfully logged in."
+          else
+            service_ticket = Castronaut::Models::ServiceTicket.generate_ticket_for(service, client_host, ticket_granting_ticket)
+
+            if service_ticket && service_ticket.service_uri
+              @your_mission = lambda { controller.redirect(service_ticket.service_uri, 303) }
+              return self
+            else
+              messages << "The target service your browser supplied appears to be invalid. Please contact your system administrator for help."
+            end
+          end
+
+        else
+          fire_authentication_failure_notice('username' => username, 'client_host' => client_host, 'service' => service)
+          messages << authentication_result.error_message
+        end
+
+        if messages.any?
+          @your_mission = lambda { controller.erb :login, :locals => { :presenter => self } }
+        end
+
+        self
+      end
+
+    end
+
+  end
+end

data/lib/castronaut/presenters/proxy_validate.rb

@@ -0,0 +1,67 @@
+module Castronaut
+  module Presenters
+
+    class ProxyValidate
+      MissingCredentialsMessage = "Please supply a username and password to login."
+
+      attr_reader :controller, :your_mission, :proxy_ticket_result, :proxies
+      attr_accessor :messages, :login_ticket
+
+      delegate :params, :request, :to => :controller
+      delegate :cookies, :env, :to => :request
+
+      def initialize(controller)
+        @controller = controller
+        @messages = []
+        @your_mission = nil
+      end
+
+      def service
+        params['service']
+      end
+
+      def renewal
+        params['renew']
+      end
+
+      def ticket
+        params['ticket']
+      end
+
+      def proxy_granting_ticket_url
+        params['pgtUrl']
+      end
+
+      def proxy_granting_ticket_iou
+        @proxy_granting_ticket_result && @proxy_granting_ticket_result.iou
+      end
+
+      def username
+        @proxy_ticket_result.username
+      end
+
+      def client_host
+        env['HTTP_X_FORWARDED_FOR'] || env['REMOTE_HOST'] || env['REMOTE_ADDR']
+      end
+
+      def represent!
+        @proxy_ticket_result = Castronaut::Models::ProxyTicket.validate_ticket(service, ticket)
+
+        if @proxy_ticket_result.valid?
+          @proxies = @proxy_ticket_result.proxies
+
+          if proxy_granting_ticket_url
+            @proxy_granting_ticket_result = Castronaut::Models::ProxyGrantingTicket.generate_ticket(proxy_granting_ticket_url, client_host, @proxy_ticket_result.ticket)
+          end
+        end
+
+        @your_mission = lambda { controller.erb :proxy_validate, :layout => false, :locals => { :presenter => self } }
+
+        self
+      end
+
+    end
+
+  end
+end
+

data/lib/castronaut/presenters/service_validate.rb

@@ -0,0 +1,68 @@
+module Castronaut
+  module Presenters
+
+    class ServiceValidate
+      MissingCredentialsMessage = "Please supply a username and password to login."
+
+      attr_reader :controller, :your_mission
+      attr_accessor :messages, :login_ticket
+
+      delegate :params, :request, :to => :controller
+      delegate :cookies, :env, :to => :request
+
+      def initialize(controller)
+        @controller = controller
+        @messages = []
+        @your_mission = nil
+      end
+
+      def service
+        params['service']
+      end
+
+      def renewal
+        params['renew']
+      end
+
+      def ticket
+        params['ticket']
+      end
+
+      def proxy_granting_ticket_url
+        params['pgtUrl']
+      end
+
+      def proxy_granting_ticket_iou
+        @proxy_granting_ticket_result && @proxy_granting_ticket_result.iou
+      end
+
+      def username
+        @service_ticket_result.username
+      end
+
+      def client_host
+        env['HTTP_X_FORWARDED_FOR'] || env['REMOTE_HOST'] || env['REMOTE_ADDR']
+      end
+
+      def service_ticket_result
+        @service_ticket_result
+      end
+
+      def represent!
+        @service_ticket_result = Castronaut::Models::ServiceTicket.validate_ticket(service, ticket)
+
+        if @service_ticket_result.valid?
+          if proxy_granting_ticket_url
+            @proxy_granting_ticket_result = Castronaut::Models::ProxyGrantingTicket.generate_ticket(proxy_granting_ticket_url, client_host, @service_ticket_result.ticket)
+          end
+        end
+
+        @your_mission = lambda { controller.erb :service_validate, :layout => false, :locals => { :presenter => self } }
+
+        self
+      end
+
+    end
+
+  end
+end