fb_graph2 0.4.4 → 0.5.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA1:
-  metadata.gz: 46c56217ed2e8a64b29c609b27c262207e30b19d
-  data.tar.gz: e085831529cf66f05a112f2be74a718e983aded6
+  metadata.gz: e72dbfaf8442748adfa67ef0061aaeff34cdbb27
+  data.tar.gz: bac4bd42aab70b1ebbfd2389dfdd322fe9272810
 SHA512:
-  metadata.gz: b4a59167dba0289797bfb5b6ab2a5fed69e4f9faaffdb8ab5e2cbac82f26e4d340460ac4176a3fb7ab1df62c950c0fc24697ebf49ae138bd2edbd1f7e75b73b7
-  data.tar.gz: 34993428c0a8fca9fec4cfbdeab96acac9aa317e8a2b802a8437d744caa370e13d3c67e02de85c68d401c67dcbd769305eb30e3098a6054904f27d267148e3f3
+  metadata.gz: db1bc100cdbc354df7e41a12debfe3671334564428557bf18ef89e50cbd2f2bee75bee5da01d3e9fe194e115ccc697e3fe7a8e8eff7ecedaac2e7020051e11d8
+  data.tar.gz: fbe23403fc3aa170dd0957209d6395f5e5c29389752db4cd66edf622c18996d7d3dc2cfd4e408e5aed525adccb50890f854ce18b225f4a0f282a85d67b392a0a

data/VERSION

@@ -1 +1 @@
-0.4.4
+0.5.0

data/fb_graph2.gemspec

@@ -15,6 +15,7 @@ Gem::Specification.new do |gem|
 
   gem.add_runtime_dependency 'httpclient', '>= 2.4'
   gem.add_runtime_dependency 'rack-oauth2', '>= 1.0'
+  gem.add_runtime_dependency 'url_safe_base64'
   gem.add_runtime_dependency 'multi_json'
   gem.add_runtime_dependency 'activesupport', '>= 3.2'
   gem.add_development_dependency 'rake'

data/lib/fb_graph2.rb

@@ -40,6 +40,7 @@ module FbGraph2
   end
 end
 
+require 'fb_graph2/exception'
 require 'fb_graph2/attribute_assigner'
 require 'fb_graph2/node'
 require 'fb_graph2/collection'

data/lib/fb_graph2/app.rb

@@ -16,7 +16,7 @@ module FbGraph2
 
     register_attributes(
       raw: [
-        :id, :android_key_hash, :app_domains, :auth_dialog_data_help_url, :auth_dialog_headline,
+        :android_key_hash, :app_domains, :auth_dialog_data_help_url, :auth_dialog_headline,
         :auth_dialog_perms_explanation, :auth_referral_enabled, :auth_referral_extended_perms,
         :auth_referral_friend_perms, :auth_referral_user_perms, :canvas_fluid_height, :canvas_fluid_width,
         :canvas_url, :category, :company, :contact_email, :creator_uid, :daily_active_users, :daily_active_users_rank,

data/lib/fb_graph2/auth.rb

@@ -37,5 +37,23 @@ module FbGraph2
         input_token: input_token.to_s
       )
     end
+
+    def from_cookie(cookie)
+      token = case cookie
+      when String
+        cookie
+      else
+        cookie["fbsr_#{identifier}"]
+      end
+      from_signed_request token
+    end
+
+    def from_signed_request(token)
+      SignedRequest.new(token).verify! self
+    end
   end
+end
+
+Dir[File.join(__dir__, 'auth/*.rb')].each do |file|
+  require file
 end

data/lib/fb_graph2/auth/signed_request.rb

@@ -0,0 +1,40 @@
+require 'url_safe_base64'
+
+module FbGraph2
+  class Auth
+    class SignedRequest
+      class VerificationFailed < Exception::BadRequest; end
+
+      attr_accessor :payload, :access_token, :user
+
+      def initialize(token)
+        signature_str, @payload_str = token.split('.', 2)
+        @signature = UrlSafeBase64.decode64 signature_str
+        payload_json = UrlSafeBase64.decode64 @payload_str
+        self.payload = MultiJson.load(payload_json).with_indifferent_access
+      rescue => e
+        raise VerificationFailed.new 'Decode failed'
+      end
+
+      def verify!(client)
+        digest = OpenSSL::Digest::SHA256.new
+        signature = OpenSSL::HMAC.digest OpenSSL::Digest::SHA256.new, client.secret, @payload_str
+        raise VerificationFailed.new('Verification failed') unless @signature == signature
+        instantiate client
+      end
+
+      private
+
+      def instantiate(client)
+        if payload[:code].present?
+          client.authorization_code = payload[:code]
+          self.access_token = client.access_token!
+        else
+          self.access_token = payload[:oauth_token]
+        end
+        self.user = User.new(payload[:user_id], payload[:user] || {}).authenticate(access_token)
+        self
+      end
+    end
+  end
+end

data/lib/fb_graph2/node.rb

@@ -1,6 +1,7 @@
 module FbGraph2
   class Node
     attr_accessor :id, :access_token, :raw_attributes
+    alias_method :identifier, :id
 
     def self.inherited(klass)
       klass.send :include, AttributeAssigner

data/lib/fb_graph2/tagged_profile.rb

@@ -1,7 +1,7 @@
 module FbGraph2
   class TaggedProfile < Node
     register_attributes(
-      raw: [:id, :name, :type, :offset, :length],
+      raw: [:name, :type, :offset, :length],
       custom: [:object]
     )
 

data/spec/fb_graph2/auth_spec.rb

@@ -1,13 +1,78 @@
 require 'spec_helper'
 
 describe FbGraph2::Auth do
-  describe '.app' do
-    subject { instance }
-    let(:instance) { FbGraph2::Auth.new 'client_id', 'client_secret' }
+  subject { instance }
+  let(:instance) { FbGraph2::Auth.new 'client_id', 'client_secret' }
 
-    it { should be_a Rack::OAuth2::Client }
+  it { should be_a Rack::OAuth2::Client }
 
-    describe 'fb_exchange_token grant' do
+  describe '#debug_token!' do
+    before do
+      mock_graph :post, 'oauth/access_token', 'token_response', params: {
+        grant_type: 'client_credentials',
+        client_id: 'client_id',
+        client_secret: 'client_secret'
+      }, disable_api_versioning: true
+    end
+
+    context 'when user_token given' do
+      subject do
+        mock_graph :get, 'debug_token', 'token_metadata/user_token', params: {
+          input_token: 'user_token'
+        } do
+          instance.debug_token! 'user_token'
+        end
+      end
+      it { should be_instance_of FbGraph2::TokenMetadata }
+      its(:app) { should be_instance_of FbGraph2::App }
+      its(:user) { should be_instance_of FbGraph2::User }
+      its(:page) { should be_nil }
+    end
+
+    context 'when app_token given' do
+      subject do
+        mock_graph :get, 'debug_token', 'token_metadata/app_token', params: {
+          input_token: 'app_token'
+        } do
+          instance.debug_token! 'app_token'
+        end
+      end
+      it { should be_instance_of FbGraph2::TokenMetadata }
+      its(:app) { should be_instance_of FbGraph2::App }
+      its(:user) { should be_nil }
+      its(:page) { should be_nil }
+    end
+
+    context 'when page_token given' do
+      subject do
+        mock_graph :get, 'debug_token', 'token_metadata/page_token', params: {
+          input_token: 'page_token'
+        } do
+          instance.debug_token! 'page_token'
+        end
+      end
+      it { should be_instance_of FbGraph2::TokenMetadata }
+      its(:app) { should be_instance_of FbGraph2::App }
+      its(:user) { should be_instance_of FbGraph2::User }
+      its(:page) { should be_instance_of FbGraph2::Page }
+    end
+  end
+
+  describe '#access_token!' do
+    context 'when error occured' do
+      it do
+        expect do
+          mock_graph :post, 'oauth/access_token', 'error/400/191', status: [400, 'Bad Request'], disable_api_versioning: true do
+            instance.authorization_code = 'auth_code'
+            instance.access_token!
+          end
+        end.to raise_error(FbGraph2::Exception) do |e|
+          e.message.should == 'Missing redirect_uri parameter.'
+        end
+      end
+    end
+
+    context 'when fb_exchange_token grant given' do
       it do
         instance.fb_exchange_token = 'short_lived_access_token'
         access_token = mock_graph :post, 'oauth/access_token', 'token_response', params: {
@@ -21,69 +86,78 @@ describe FbGraph2::Auth do
         access_token.should be_instance_of Rack::OAuth2::AccessToken::Legacy
       end
     end
+  end
 
-    describe '#debug_token!' do
-      before do
-        mock_graph :post, 'oauth/access_token', 'token_response', params: {
-          grant_type: 'client_credentials',
-          client_id: 'client_id',
-          client_secret: 'client_secret'
-        }, disable_api_versioning: true
+  describe '#from_cookie' do
+    let(:token) do
+      '9heZHFs6tDH/Nif4CqmBaMQ8nKEOc5g2WgVJa10LF00.eyJhbGdvcml0aG0iOiJITUFDLVNIQTI1NiIsImNvZGUiOiI4ZDYwZDY4NDA4MmQ1NjczMjY3MWUxNzAuMS01Nzk2MTIyNzZ8N2pkVlp6MlNLNUY2b0gtQ21FQWtZZVpuVjEwIiwiaXNzdWVkX2F0IjoxMzEyOTUzOTcxLCJ1c2VyX2lkIjo1Nzk2MTIyNzZ9'
+    end
+
+    it 'should return FbGraph2::Auth::SignedRequest' do
+      signed_request = mock_graph :post, 'oauth/access_token', 'token_response', params: {
+        grant_type: 'authorization_code',
+        code: '8d60d684082d56732671e170.1-579612276|7jdVZz2SK5F6oH-CmEAkYeZnV10',
+        client_id: 'client_id',
+        client_secret: 'client_secret'
+      }, disable_api_versioning: true do
+        instance.from_cookie token
       end
+      signed_request.should be_instance_of FbGraph2::Auth::SignedRequest
+      signed_request.access_token.should be_instance_of Rack::OAuth2::AccessToken::Legacy
+      signed_request.access_token.access_token.should == 'access_token'
+      signed_request.user.should be_instance_of FbGraph2::User
+    end
 
-      context 'when user_token given' do
-        subject do
-          mock_graph :get, 'debug_token', 'token_metadata/user_token', params: {
-            input_token: 'user_token'
-          } do
-            instance.debug_token! 'user_token'
-          end
-        end
-        it { should be_instance_of FbGraph2::TokenMetadata }
-        its(:app) { should be_instance_of FbGraph2::App }
-        its(:user) { should be_instance_of FbGraph2::User }
-        its(:page) { should be_nil }
+    context 'when cookie object given' do
+      let(:cookie) do
+        {'fbsr_client_id' => token}
       end
 
-      context 'when app_token given' do
-        subject do
-          mock_graph :get, 'debug_token', 'token_metadata/app_token', params: {
-            input_token: 'app_token'
-          } do
-            instance.debug_token! 'app_token'
-          end
+      it 'should handle it too' do
+        signed_request = mock_graph :post, 'oauth/access_token', 'token_response', params: {
+          grant_type: 'authorization_code',
+          code: '8d60d684082d56732671e170.1-579612276|7jdVZz2SK5F6oH-CmEAkYeZnV10',
+          client_id: 'client_id',
+          client_secret: 'client_secret'
+        }, disable_api_versioning: true do
+          instance.from_cookie cookie
         end
-        it { should be_instance_of FbGraph2::TokenMetadata }
-        its(:app) { should be_instance_of FbGraph2::App }
-        its(:user) { should be_nil }
-        its(:page) { should be_nil }
+        signed_request.should be_instance_of FbGraph2::Auth::SignedRequest
       end
+    end
+  end
 
-      context 'when page_token given' do
-        subject do
-          mock_graph :get, 'debug_token', 'token_metadata/page_token', params: {
-            input_token: 'page_token'
-          } do
-            instance.debug_token! 'page_token'
-          end
-        end
-        it { should be_instance_of FbGraph2::TokenMetadata }
-        its(:app) { should be_instance_of FbGraph2::App }
-        its(:user) { should be_instance_of FbGraph2::User }
-        its(:page) { should be_instance_of FbGraph2::Page }
+  describe '#from_signed_request' do
+    let(:token) do
+      'LqsgnfcsRdfjOgyW6ZuSLpGBVsxUBegEqai4EcrWS0A=.eyJhbGdvcml0aG0iOiJITUFDLVNIQTI1NiIsImV4cGlyZXMiOjAsImlzc3VlZF9hdCI6MTI5ODc4MzczOSwib2F1dGhfdG9rZW4iOiIxMzQxNDU2NDMyOTQzMjJ8MmI4YTZmOTc1NTJjNmRjZWQyMDU4MTBiLTU3OTYxMjI3NnxGS1o0akdKZ0JwN2k3bFlrOVhhUk1QZ3lhNnMiLCJ1c2VyIjp7ImNvdW50cnkiOiJqcCIsImxvY2FsZSI6ImVuX1VTIiwiYWdlIjp7Im1pbiI6MjF9fSwidXNlcl9pZCI6IjU3OTYxMjI3NiJ9'
+    end
+
+    it 'should return FbGraph2::Auth::SignedRequest' do
+      signed_request = instance.from_signed_request token
+      signed_request.should be_instance_of FbGraph2::Auth::SignedRequest
+      signed_request.access_token.should == '134145643294322|2b8a6f97552c6dced205810b-579612276|FKZ4jGJgBp7i7lYk9XaRMPgya6s'
+      signed_request.user.should be_instance_of FbGraph2::User
+    end
+
+    context 'when invalid format' do
+      let(:token) { 'invalid.invalid' }
+
+      it do
+        expect do
+          instance.from_cookie token
+        end.to raise_error FbGraph2::Auth::SignedRequest::VerificationFailed
       end
     end
 
-    context 'when error occured' do
+    context 'when signature invalid' do
+      let(:token) do
+        '4Xnb6TwumZfUQcrflVQHYLOmaWq1oMHbZmI7_pxZXeU.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'
+      end
+
       it do
         expect do
-          mock_graph :post, 'oauth/access_token', 'error/400/191', status: [400, 'Bad Request'], disable_api_versioning: true do
-            instance.authorization_code = 'auth_code'
-            instance.access_token!
-          end
-        end.to raise_error(FbGraph2::Exception) do |e|
-          e.message.should == 'Missing redirect_uri parameter.'
-        end
+          instance.from_cookie token
+        end.to raise_error FbGraph2::Auth::SignedRequest::VerificationFailed
       end
     end
   end

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: fb_graph2
 version: !ruby/object:Gem::Version
-  version: 0.4.4
+  version: 0.5.0
 platform: ruby
 authors:
 - nov matake
 autorequire: 
 bindir: bin
 cert_chain: []
-date: 2015-01-13 00:00:00.000000000 Z
+date: 2015-02-06 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: httpclient
@@ -38,6 +38,20 @@ dependencies:
     - - ">="
       - !ruby/object:Gem::Version
         version: '1.0'
+- !ruby/object:Gem::Dependency
+  name: url_safe_base64
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: '0'
+  type: :runtime
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: '0'
 - !ruby/object:Gem::Dependency
   name: multi_json
   requirement: !ruby/object:Gem::Requirement
@@ -160,6 +174,7 @@ files:
 - lib/fb_graph2/app_link_host.rb
 - lib/fb_graph2/attribute_assigner.rb
 - lib/fb_graph2/auth.rb
+- lib/fb_graph2/auth/signed_request.rb
 - lib/fb_graph2/collection.rb
 - lib/fb_graph2/comment.rb
 - lib/fb_graph2/domain.rb
@@ -448,7 +463,7 @@ required_rubygems_version: !ruby/object:Gem::Requirement
       version: '0'
 requirements: []
 rubyforge_project: 
-rubygems_version: 2.2.2
+rubygems_version: 2.4.5
 signing_key: 
 specification_version: 4
 summary: Facebook Graph API v2.0 Wrapper in Ruby