factorylabs-castronaut 0.7.5

data/MIT-LICENSE

@@ -0,0 +1,20 @@
+Copyright (c) 2008 Relevance Inc.
+
+Permission is hereby granted, free of charge, to any person obtaining
+a copy of this software and associated documentation files (the
+"Software"), to deal in the Software without restriction, including
+without limitation the rights to use, copy, modify, merge, publish,
+distribute, sublicense, and/or sell copies of the Software, and to
+permit persons to whom the Software is furnished to do so, subject to
+the following conditions:
+
+The above copyright notice and this permission notice shall be
+included in all copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND,
+EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF
+MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND
+NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE
+LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION
+OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION
+WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.

data/README.textile

@@ -0,0 +1,67 @@
+h1. Castronaut
+
+h2. Description
+
+Castronaut is an server implementation for the CAS (version 2.0) protocol.  It is currently a work in progress but should
+function properly with the latest release of Restfult Auth.  More authentication adapters coming soon.
+
+h2. Usage
+
+@castronaut@
+
+or
+
+@castronaut -C /path/to/config@
+
+h2. Support
+
+* Database authentication with the restful authentication encryption routines.  
+* LDAP (openLDAP) annonymous bind only.  Authenticated bind comming soon.
+
+h2. Configuration
+
+Castronaut requires a configuration file to function.  Your configuration should be similar to the following:
+
+ organization_name: Foo Bar Baz Industries, LLC Inc. A division of Holdings Co.
+
+ environment: development
+
+ server_port: 4567
+
+ log_directory: log
+
+ log_level: Logger::DEBUG
+
+ ssl_enabled: false
+
+ cas_database:
+  adapter: sqlite3
+  database: db/cas.db
+  timeout: 5000
+
+ cas_adapter:
+  adapter: database
+  site_key: 03523your093023site0985225key098290here9
+  digest_stretches: 10
+  database:
+    adapter: sqlite3
+    database: db/cas_adapter.db
+    timeout: 5000
+
+ Uncomment these to enable authentication callbacks
+ callbacks:
+  on_authentication_success: http://example.com/authentication/success
+  on_authentication_failed: http://example.com/authentication/failed
+
+ extra_ui_actions:
+  'Forgot Password': http://example.com/
+
+h3. or if you are using LDAP
+
+ Use this example if you are using LDAP as your authentication source
+ cas_adapter:
+  adapter: ldap
+  host: localhost
+  port: 389
+  prefix: cn=
+  base: dc=example, dc=com

data/Rakefile

@@ -0,0 +1,78 @@
+# Copyright 2008-2009 Relevance Inc.
+# All rights reserved
+
+# This file may be distributed under an MIT style license.
+# See MIT-LICENSE for details.
+
+require 'rubygems'
+require 'rake'
+require 'spec/rake/spectask'
+require 'spec/rake/verify_rcov'
+require "fileutils"
+
+begin
+  require 'jeweler'
+  files = ["MIT-LICENSE", "Rakefile", "README.textile", "castronaut.rb", "bin/castronaut"]
+  files << Dir["lib/**/*", "config/**/*",  "vendor/**/*"]
+  
+  Jeweler::Tasks.new do |s|
+    s.name = "factorylabs-castronaut"
+    s.summary = "Your friendly, cigar smoking authentication dicator... From Space!"
+    s.description = "Your friendly, cigar smoking authentication dicator... From Space!"
+    s.homepage = "http://github.com/relevance/castronaut"
+    s.email = "aaron@thinkrelevance.com"
+    s.authors = ["Relevance, Inc."]
+    s.files = files.flatten
+    s.require_path = 'lib'
+    s.has_rdoc = false
+    s.extra_rdoc_files = []
+    s.rdoc_options = []
+    s.bindir = 'bin'
+    s.default_executable = 'castronaut'
+    s.executables = ["castronaut"]    
+    s.add_dependency 'rack'
+    s.add_dependency 'sinatra'
+    s.add_dependency 'sqlite3-ruby'
+    s.add_dependency 'ruby-net-ldap'
+    
+  end
+rescue LoadError
+  puts "Jeweler not available. Install it with: sudo gem install technicalpickles-jeweler -s http://gems.github.com"
+end
+
+desc "Run all examples with RCov"
+Spec::Rake::SpecTask.new('specs_with_rcov') do |t|
+  ENV["test"] = "true"
+  t.spec_files = FileList['spec/**/*.rb']
+  t.rcov = true
+  t.rcov_opts = ['--text-report', '--exclude', "~/.gem,spec,Library,lib/castronaut/db,#{ENV['GEM_HOME']}", '--sort', 'coverage']
+end
+
+desc "Run all examples"
+Spec::Rake::SpecTask.new('spec') do |t|
+  t.spec_files = FileList['spec/**/*.rb']
+  t.rcov = false
+  t.spec_opts = ['-cfn']
+end
+
+RCov::VerifyTask.new(:verify_coverage => :specs_with_rcov) do |t|
+  t.threshold = 96.38
+  t.index_html = 'coverage/index.html'
+end
+
+namespace :ssl do
+
+  desc "Generate a test SSL certificate for development"
+  task :generate do
+    FileUtils.mkdir_p('ssl') unless File.exist?('ssl')
+
+    if %x{which openssl}.strip.size == 0
+      puts "Unable to locate openssl, please make sure you have it installed and in your path."
+    else
+      system("openssl req -x509 -nodes -days 365 -subj '/C=US/ST=NC/L=CH/CN=localhost' -newkey rsa:1024 -keyout ssl/devcert.pem -out ssl/devcert.pem")
+    end
+  end
+
+end
+
+task :default => [:verify_coverage]

data/bin/castronaut

@@ -0,0 +1,75 @@
+#!/usr/bin/env ruby
+
+require 'rubygems'
+gem 'activerecord', '>= 2.1.0'
+gem 'activesupport', '>= 2.1.0'
+gem 'sinatra'
+
+require File.expand_path(File.join(File.dirname(__FILE__), '..', 'lib', 'castronaut'))
+
+$LOAD_PATH.unshift(File.dirname(__FILE__) + '/../vendor/sinatra/lib')
+$LOAD_PATH.unshift(File.dirname(__FILE__) + '/../vendor/rack/lib')
+
+require 'rack'
+require 'sinatra'
+require 'optparse'
+
+options = {}
+OptionParser.new do |opts|
+  opts.banner =  "Usage: castronaut [Options] {/path/to/config/file}\n"
+  opts.banner += "\t --config: \tStart castronaut using the specified config file.\n"  
+  opts.banner += "\t --fresh: \tWrite the castronaut default sample config file to the specified location.\n"
+  opts.banner += "\t --sampledb: \tCreate a sample development database with users for testing.\n"  
+  opts.banner += "\t --nginx: \tWrite the sample nginx configuration file to the specified location.\n"
+
+  opts.on("-h", "--help") do
+    puts opts.banner
+    exit(1)
+  end
+
+  opts.on("-C", "--config", "Config File") do |c|
+    Castronaut.config = Castronaut::Configuration.load(ARGV[0])
+  end
+  
+  opts.on("-F", "--fresh", "Directory") do |f|
+    FileUtils.cp(File.join(File.dirname(__FILE__), '..', 'config', 'castronaut.sample.yml'), "#{ARGV[0]}/castronaut.yml")
+    puts "Writing config file to #{ARGV[0]}/castronaut.yml"
+    exit(1)
+  end
+  
+  opts.on("-S", "--sampledb") do
+    puts "Creating development database"
+    Castronaut::Support::Sample.create_sample_database
+    exit(1)
+  end
+  
+  opts.on("-N", "--nginx") do
+    FileUtils.cp(File.join(File.dirname(__FILE__), '..', 'config', 'nginx_vhost.conf'), "#{ARGV[0]}/castronaut.conf")
+    puts "Writing nginx vhost configuration file to #{ARGV[0]}/castronaut.conf"
+    exit(1)
+  end
+end.parse!
+
+unless Castronaut.config
+  $stderr.puts "No configuration file specified.  Deafaulting to ./config/castronaut.yml"
+  default_config = File.expand_path("./config/castronaut.yml")
+
+  if File.exist?(default_config)
+    Castronaut.config = Castronaut::Configuration.load(default_config)
+  else
+    puts "Unable to locate configuration.  Currently looking at #{default_config}.  You can pass a custom configuration path by using the -C flag."
+    exit(0)
+  end
+end
+
+require File.expand_path(File.join(File.dirname(__FILE__), '..', 'lib', 'castronaut', 'application', 'application'))
+
+# Sinatra::Application.set(
+#   :environment => Castronaut.config.environment.to_sym,
+#   :run => true,
+#   :raise_errors => true,
+#   :logging => true,
+#   :port => Castronaut.config.respond_to?(:server_port) ? Castronaut.config.server_port : Sinatra::Application.default_options[:port]
+# )
+
+Castronaut::Application.run!

data/config/castronaut.example.yml

@@ -0,0 +1,41 @@
+organization_name: Foo Bar Baz Industries, LLC Inc. A division of Holdings Co.
+
+environment: development
+# The port the CAS webserver will start on
+server_port: 4567
+
+log_directory: log
+
+log_level: Logger::DEBUG
+
+ssl_enabled: false
+
+cas_database:
+  adapter: sqlite3
+  database: db/cas.db
+  timeout: 5000
+
+cas_adapter:
+  adapter: database
+  site_key: 03523your093023site0985225key098290here9
+  digest_stretches: 10
+  database:
+    adapter: sqlite3
+    database: db/cas_adapter.db
+    timeout: 5000
+
+# Use this example if you are using LDAP as your authentication source
+# cas_adapter:
+#   adapter: ldap
+#   host: localhost
+#   port: 389
+#   prefix: cn=
+#   base: dc=example, dc=com
+
+# Uncomment these to enable authentication callbacks
+# callbacks:
+#  on_authentication_success: http://example.com/authentication/success
+#  on_authentication_failed: http://example.com/authentication/failed
+
+extra_ui_actions:
+  'Forgot Password': http://example.com/

data/config/castronaut.sample.yml

@@ -0,0 +1,40 @@
+organization_name: Foo Bar Baz Industries, LLC Inc. A division of Holdings Co.
+
+environment: development
+# The port the CAS webserver will start on
+server_port: 4567
+
+log_directory: log
+
+log_level: Logger::DEBUG
+
+ssl_enabled: false
+
+cas_database:
+  adapter: sqlite3
+  database: db/cas.db
+  timeout: 5000
+
+cas_adapter:
+  adapter: development
+  database:
+    adapter: sqlite3
+    database: development.db
+    timeout: 5000
+
+# Use this example if you are using LDAP as your authentication source
+# cas_adapter:
+#   adapter: ldap
+#   host: localhost
+#   port: 389
+#   prefix: cn=
+#   base: dc=example, dc=com
+
+# Uncomment these to enable authentication callbacks
+# callbacks:
+#  on_authentication_success: http://example.com/authentication/success
+#  on_authentication_failed: http://example.com/authentication/failed
+
+# Uncomment this to enable a forgot password link on the login page
+# extra_ui_actions:
+#  'Forgot Password': http://example.com/forgot_password

data/config/castronaut.yml

@@ -0,0 +1,40 @@
+organization_name: 'FDL :: Single Sign-On'
+
+environment: production
+# The port the CAS webserver will start on
+server_port: 4567
+
+log_directory: log
+
+log_level: Logger::INFO
+
+ssl_enabled: false
+
+cas_database:
+  adapter: sqlite3
+  database: db/cas.db
+  timeout: 5000
+
+# cas_adapter:
+#   adapter: development
+#   database:
+#     adapter: sqlite3
+#     database: development.db
+#     timeout: 5000
+
+# Use this example if you are using LDAP as your authentication source
+cas_adapter:
+  adapter: ldap
+  host: ldap.factorylabs.com
+  port: 389
+  prefix: 'uid='
+  base: 'cn=users,dc=ldap,dc=factorylabs,dc=com'
+
+# Uncomment these to enable authentication callbacks
+# callbacks:
+#  on_authentication_success: http://example.com/authentication/success
+#  on_authentication_failed: http://example.com/authentication/failed
+
+# Uncomment this to enable a forgot password link on the login page
+# extra_ui_actions:
+#  'Forgot Password': http://example.com/forgot_password

data/config/nginx_vhost.conf

@@ -0,0 +1,17 @@
+upstream castronaut { 
+	server 127.0.0.1:4567; 
+}
+
+server { 
+       listen 80; 
+       # server_name cas.example.com; 
+
+       location / { 
+       		proxy_pass http://castronaut; 
+		proxy_redirect off; 
+		proxy_set_header Host $host; 
+	} 
+
+	access_log /var/log/nginx/castronaut/access.log; 
+	error_log /var/log/nginx/castronaut/error.log; 
+}

data/config/thin_config.yml

@@ -0,0 +1,13 @@
+--- 
+pid: /path/to/thin/pid/thin.pid 
+log: /path/to/thin/log/thin.log 
+timeout: 30 
+port: 4567 
+max_conns: 1024 
+chdir: /path/to/castronaut/files 
+rackup: /path/to/castronaut/config.ru 
+max_persistent_conns: 512 
+environment: production 
+address: 127.0.0.1 
+servers: 1 
+daemonize: true

data/lib/castronaut.rb

@@ -0,0 +1,50 @@
+Dir[File.dirname(__FILE__) + "/../vendor/**"].each do |dir| 
+  $LOAD_PATH.unshift(File.directory?(lib = "#{dir}/lib") ? lib : dir)
+end
+
+require 'active_support'
+require 'activerecord'
+
+require 'sinatra/base'
+
+module Castronaut
+
+  def self.config
+    @cas_config
+  end
+
+  def self.config=(config)
+    @cas_config = config
+  end
+
+  def self.logger
+    @cas_config.logger
+  end
+
+end
+
+require File.expand_path(File.join(File.dirname(__FILE__), 'castronaut', 'configuration'))
+require File.expand_path(File.join(File.dirname(__FILE__), 'castronaut', 'authentication_result'))
+require File.expand_path(File.join(File.dirname(__FILE__), 'castronaut', 'support', 'sample'))
+require File.expand_path(File.join(File.dirname(__FILE__), 'castronaut', 'utilities', 'random_string'))
+require File.expand_path(File.join(File.dirname(__FILE__), 'castronaut', 'models', 'consumeable'))
+require File.expand_path(File.join(File.dirname(__FILE__), 'castronaut', 'models', 'dispenser'))
+require File.expand_path(File.join(File.dirname(__FILE__), 'castronaut', 'models', 'login_ticket'))
+require File.expand_path(File.join(File.dirname(__FILE__), 'castronaut', 'models', 'service_ticket'))
+require File.expand_path(File.join(File.dirname(__FILE__), 'castronaut', 'models', 'proxy_ticket'))
+require File.expand_path(File.join(File.dirname(__FILE__), 'castronaut', 'models', 'ticket_granting_ticket'))
+require File.expand_path(File.join(File.dirname(__FILE__), 'castronaut', 'models', 'proxy_granting_ticket'))
+require File.expand_path(File.join(File.dirname(__FILE__), 'castronaut', 'authentication_result'))
+require File.expand_path(File.join(File.dirname(__FILE__), 'castronaut', 'ticket_result'))
+require File.expand_path(File.join(File.dirname(__FILE__), 'castronaut', 'presenters', 'login'))
+require File.expand_path(File.join(File.dirname(__FILE__), 'castronaut', 'presenters', 'logout'))
+require File.expand_path(File.join(File.dirname(__FILE__), 'castronaut', 'presenters', 'process_login'))
+require File.expand_path(File.join(File.dirname(__FILE__), 'castronaut', 'presenters', 'service_validate'))
+require File.expand_path(File.join(File.dirname(__FILE__), 'castronaut', 'presenters', 'proxy_validate'))
+require File.expand_path(File.join(File.dirname(__FILE__), 'castronaut', 'adapters'))
+require File.expand_path(File.join(File.dirname(__FILE__), 'castronaut', 'adapters', 'restful_authentication', 'adapter'))
+require File.expand_path(File.join(File.dirname(__FILE__), 'castronaut', 'adapters', 'restful_authentication', 'user'))
+require File.expand_path(File.join(File.dirname(__FILE__), 'castronaut', 'adapters', 'development', 'adapter'))
+require File.expand_path(File.join(File.dirname(__FILE__), 'castronaut', 'adapters', 'development', 'user'))
+require File.expand_path(File.join(File.dirname(__FILE__), 'castronaut', 'adapters', 'ldap', 'adapter'))
+require File.expand_path(File.join(File.dirname(__FILE__), 'castronaut', 'adapters', 'ldap', 'user'))