gamora 0.12.0 → 0.14.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: b42990c52c0cce68d2464f8479c8de617b42c11475971194b15874ee570fefc5
-  data.tar.gz: d03c696925417027a34bf19b9cf9f9c40a00e625a2f7bf14d59d01a31158747e
+  metadata.gz: d73a2356c80a3ae90435c16aaed089ceb8bab96a4c424fd66a819d7dbd9843c5
+  data.tar.gz: 950a900f569d1bd94c039bcbac19df6919ce83953122a71dcd3769dd26a9a848
 SHA512:
-  metadata.gz: f03be26d3851c500561b50903bbc03475608822c69f21024fc4f969231b149049a2c3711ab4c234071a2f956efe01a5a9779a7bd105173cadad0e52dc998e119
-  data.tar.gz: 6177e2b7e04290502fb6395d29be8389e5ee6e743aeecf6e23efc401cce42e743aa6f88a140deb0e92190f0444b2272776269044e7ed3b52a693279b16fd400a
+  metadata.gz: 95a2b078b3546d2a5ad193b45db7ab5c710847db8096ac7a813ddd1af644450fe5e30e443055af43c1860bf26526985eadab8d31500fbed943b9d8fc3fbaf7c9
+  data.tar.gz: d224336f131f0d1c0ff4ef68af57f460f2194288a3d61788d653abd994d20e43a43d9c03151c84400d2a2afcdfed00d954e346dba5488e877a4d3bde24a09ff6

data/README.md

@@ -132,6 +132,23 @@ Gamora.setup do |config|
 end
 ```
 
+## Authorization
+
+In order to inform if a user's access token is granted to access the IDP
+client, it is possible to configure the authorization method in the initializer
+that will be used in the `/auth/amco/authorized` endpoint.
+
+```ruby
+Gamora.setup do |config|
+  ...
+
+  config.authorization_method = -> (user) { MyAuthorizationService.call(user) }
+end
+```
+
+Then implement the `MyAuthorizationService` based on your needs and return
+true if the user is granted, otherwise return false.
+
 ## Development
 
 After checking out the repo, run `bin/setup` to install dependencies. Then,

data/app/controllers/gamora/authorization_controller.rb

@@ -0,0 +1,17 @@
+# frozen_string_literal: true
+
+module Gamora
+  class AuthorizationController < ApplicationController
+    include Gamora::Authentication::Headers
+
+    before_action :authenticate_user!
+
+    def show
+      if Configuration.authorization_method.call(current_user)
+        render json: { message: "Authorized user" }, status: :ok
+      else
+        render json: { error: "Unauthorized user" }, status: :forbidden
+      end
+    end
+  end
+end

data/config/routes.rb

@@ -2,6 +2,7 @@
 
 Gamora::Engine.routes.draw do
   get "amco", to: "authentication#show", as: :authentication
-  get "logout", to: "unauthentication#show", as: :logout
+  get "amco/logout", to: "unauthentication#show", as: :logout
+  get "amco/authorized", to: "authorization#show", as: :authorized
   get "amco/callback", to: "callback#show", as: :callback
 end

data/lib/gamora/authentication/base.rb

@@ -12,6 +12,7 @@ module Gamora
         family_name: :last_name,
         phone_number: :phone_number,
         email_verified: :email_verified,
+        associated_user_id: :associated_user_id,
         phone_number_verified: :phone_number_verified
       }.freeze
 

data/lib/gamora/configuration.rb

@@ -20,6 +20,7 @@ module Gamora
     mattr_accessor :allow_create, default: true
     mattr_accessor :userinfo_cache_expires_in, default: 1.minute
     mattr_accessor :introspect_cache_expires_in, default: 0.seconds
+    mattr_accessor :authorization_method, default: ->(user) { user }
 
     def setup
       yield(self) if block_given?

data/lib/gamora/user.rb

@@ -12,6 +12,7 @@ module Gamora
                   :first_name,
                   :phone_number,
                   :email_verified,
+                  :associated_user_id,
                   :phone_number_verified
   end
 end

data/lib/gamora/version.rb

@@ -1,5 +1,5 @@
 # frozen_string_literal: true
 
 module Gamora
-  VERSION = "0.12.0"
+  VERSION = "0.14.0"
 end

data/lib/generators/gamora/templates/gamora.rb

@@ -22,4 +22,5 @@ Gamora.setup do |config|
   # config.allow_create = true
   # config.userinfo_cache_expires_in = 1.minute
   # config.introspect_cache_expires_in = 0.seconds
+  # config.authorization_method = ->(user) { user.authorized? }
 end

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: gamora
 version: !ruby/object:Gem::Version
-  version: 0.12.0
+  version: 0.14.0
 platform: ruby
 authors:
 - Alejandro Gutiérrez
 autorequire:
 bindir: bin
 cert_chain: []
-date: 2024-07-22 00:00:00.000000000 Z
+date: 2024-11-14 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: oauth2
@@ -52,6 +52,7 @@ files:
 - app/controllers/concerns/gamora/authorization_url.rb
 - app/controllers/gamora/application_controller.rb
 - app/controllers/gamora/authentication_controller.rb
+- app/controllers/gamora/authorization_controller.rb
 - app/controllers/gamora/callback_controller.rb
 - app/controllers/gamora/unauthentication_controller.rb
 - app/models/gamora/application_record.rb
@@ -91,7 +92,7 @@ required_rubygems_version: !ruby/object:Gem::Requirement
     - !ruby/object:Gem::Version
       version: '0'
 requirements: []
-rubygems_version: 3.4.17
+rubygems_version: 3.5.11
 signing_key:
 specification_version: 4
 summary: OpenID Connect Relying Party for rails apps.