gcp_iap_warden 0.1.1 → 0.2.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 4d92337a92e1d522131bfecb184a047688861374e97f76bb4b0c78af1fc442d2
-  data.tar.gz: f3fef4eeca0b8d1c0a09f87866969c5ce6d1faabe9b4ccb51ab0582ff5edfa18
+  metadata.gz: 416a9d503695d5167b83f34a24326af75a48b178f4af79edc7cd048df41fc809
+  data.tar.gz: e1204729ae7320df2a701f8b0fb53b8a8e4f1a8a7d0eb1cb5a4b4b9b1a8d402d
 SHA512:
-  metadata.gz: 5d0b1513fbe66cd315eb038cdbb5efe69dd2c503ce368ff90437e18b4787a08e5c1a5a5b8da59ec7ab483f87ccd5936892a43d1620cc6a05903fa5e3dd5ba4d6
-  data.tar.gz: 5a7ec499cbc9755c68c7daa8aa72c904430f625448d735c23533cdb8b6b95a917a0ff82e90efddb9fdc2cd463b4d8eec084c5bef44fb6d137d9d1bd782ad6a2a
+  metadata.gz: ce1853514e70a2eb6afd00e030a3c7769852d44572bbe70d3657de8b398a2931be81c113b496a6eb1a631c6d0f38f803329c446466360f52cbf0a593bdef7dbb
+  data.tar.gz: 64d2ddbf8a1ce630ce22990557c6a507f662a9dffd87d8d2b61a62ff4bc9a27e2b358de2bc7beac91b3858121bc4abd14b09cdd130c48e2860c492626b4108cc

data/Gemfile.lock

@@ -1,7 +1,7 @@
 PATH
   remote: .
   specs:
-    gcp_iap_warden (0.1.1)
+    gcp_iap_warden (0.2.0)
       jwt (~> 2.1.0)
       warden (~> 1.2.0)
 
@@ -118,4 +118,4 @@ DEPENDENCIES
   webmock (~> 3.3.0)
 
 BUNDLED WITH
-   1.17.1
+   1.17.2

data/README.md

@@ -35,6 +35,27 @@ Rails.application.config.middleware.insert_after(
 end
 ```
 
+Or for AppEngine like
+
+```
+# ./config/initializers/warden.rb
+
+require "gcp_iap_warden"
+
+GcpIapWarden::Strategy::GoogleJWTHeader.config(
+  project: ENV.fetch("GCP_PROJECT_ID"),
+  backend: ENV.fetch("APP_ENGINE_PROJECT_ID")
+  platform: :app_engine
+)
+
+Rails.application.config.middleware.insert_after(
+  ActionDispatch::Session::CookieStore, Warden::Manager
+) do |manager|
+  manager.default_strategies :gcp_iap_google_jwt_header
+  manager.failure_app = UnauthorizedController
+end
+```
+
 Your `UnauthorizedController` may look like
 
 ```

data/lib/gcp_iap_warden/strategy/google_jwt_header.rb

@@ -10,28 +10,41 @@ module GcpIapWarden::Strategy
     JWT_ISS = "https://cloud.google.com/iap"
     JWT_HEADER = "HTTP_X_GOOG_IAP_JWT_ASSERTION"
 
+    PLATFORMS = {
+      app_engine: "apps",
+      gce:        "global/backendServices",
+      gke:        "global/backendServices",
+    }.freeze
+
     @key_store = GcpIapWarden::KeyStore.new
 
     class << self
       attr_accessor :jwt_options, :key_store
 
-      def config(project:, backend:)
-        raise "Invalid config for project" if project.nil?
-        raise "Invalid config for backend" if backend.nil?
-
+      def config(project:, backend:, platform: :gce)
         @jwt_options = {
           algorithm: JWT_ALG,
           verify_iss: true,
           verify_iat: true,
           verify_aud: true,
           iss: JWT_ISS,
-          aud:  "/projects/#{project}/global/backendServices/#{backend}",
+          aud:  aud(project, platform, backend),
         }
       end
 
       def config_reset!
         @jwt_options = nil
       end
+
+      private
+
+      def aud(project, platform, backend)
+        platform = PLATFORMS[platform]
+        raise "Invalid config for project" if project.nil?
+        raise "Invalid config for backend" if backend.nil?
+        raise "Invalid config for platform" if platform.nil?
+        "/projects/#{project}/#{platform}/#{backend}"
+      end
     end
 
     private

data/lib/gcp_iap_warden/version.rb

@@ -1,5 +1,5 @@
 # frozen_string_literal: true
 
 module GcpIapWarden
-  VERSION = "0.1.1"
+  VERSION = "0.2.0"
 end

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: gcp_iap_warden
 version: !ruby/object:Gem::Version
-  version: 0.1.1
+  version: 0.2.0
 platform: ruby
 authors:
 - Max Shytikov
 autorequire: 
 bindir: exe
 cert_chain: []
-date: 2018-12-03 00:00:00.000000000 Z
+date: 2019-03-13 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: jwt
@@ -238,8 +238,7 @@ required_rubygems_version: !ruby/object:Gem::Requirement
     - !ruby/object:Gem::Version
       version: '0'
 requirements: []
-rubyforge_project: 
-rubygems_version: 2.7.6
+rubygems_version: 3.0.1
 signing_key: 
 specification_version: 4
 summary: GCP Cloud IAP strategy for Warden