gds-sso 0.8.0 → 1.0.0

data/README.md

@@ -28,6 +28,9 @@ Create a `config/initializers/gds-sso.rb` that looks like:
       config.oauth_id     = ENV['OAUTH_ID']
       config.oauth_secret = ENV['OAUTH_SECRET']
 
+      # Application name as per signonotron2's database, used for permissions
+      config.default_scope = "Need-o-Tron"
+
       # optional config for location of sign-on-o-tron
       config.oauth_root_url = "http://localhost:3001"
 
@@ -38,6 +41,10 @@ Create a `config/initializers/gds-sso.rb` that looks like:
 
 The user model needs to respond to klass.find_by_uid(uid), and must include the GDS::SSO::User module.
 
+It also needs to specify the below (or an equivalent):
+
+    attr_accessible :uid, :email, :name, :permissions, as: :oauth
+
 You also need to include `GDS::SSO::ControllerMethods` in your ApplicationController
 
 ## Use in development mode

data/config/routes.rb

@@ -1,6 +1,6 @@
 Rails.application.routes.draw do
-  match '/auth/gds/callback', to: 'authentications#callback', as: :gds_sign_in
-  match '/auth/gds/sign_out', to: 'authentications#sign_out', as: :gds_sign_out
-  match '/auth/failure',      to: 'authentications#failure',  as: :auth_failure
-  match '/auth/gds/api/user', to: "api/user#update", via: "PUT"
+  match '/auth/gds/callback',       to: 'authentications#callback', as: :gds_sign_in
+  match '/auth/gds/sign_out',       to: 'authentications#sign_out', as: :gds_sign_out
+  match '/auth/failure',            to: 'authentications#failure',  as: :auth_failure
+  match '/auth/gds/api/users/:uid', to: "api/user#update", via: "PUT"
 end

data/lib/gds-sso/version.rb

@@ -1,5 +1,5 @@
 module GDS
   module SSO
-    VERSION = "0.8.0"
+    VERSION = "1.0.0"
   end
 end

data/spec/controller/api_user_controller_spec.rb

@@ -32,7 +32,7 @@ describe Api::UserController, type: :controller do
       request.env['warden'] = stub("stub warden", :authenticate! => true, authenticated?: true, user: malicious_user)
 
       request.env['RAW_POST_DATA'] = user_update_json
-      put :update
+      put :update, uid: @user_to_update.uid
       
       assert_equal 403, response.status
     end
@@ -51,7 +51,7 @@ describe Api::UserController, type: :controller do
       User.expects(:find_by_uid).with("a1s2d3").returns(@user_to_update)
 
       request.env['RAW_POST_DATA'] = user_update_json
-      put :update
+      put :update, uid: @user_to_update.uid
     end
   end
 end

data/spec/fixtures/integration/signonotron2.sql

@@ -8,4 +8,4 @@ DELETE FROM `users`;
 -- Setup fixture data
 INSERT INTO `oauth_applications` VALUES (1,'GDS_SSO integration test','gds-sso-test','secret','http://www.example-client.com/auth/gds/callback','2012-04-19 13:26:54','2012-04-19 13:26:54');
 INSERT INTO `users` (id, email, encrypted_password, created_at, updated_at, name, uid, is_admin) VALUES (1,'test@example-client.com','$2a$04$MdMkVFwTq5GLJJkHS8GLIe6dK1.C4ozzba5ZS5Ks2b/NenVsMGGRW','2012-04-19 13:26:54','2012-04-19 13:26:54','Test User','integration-uid', 0);
-INSERT INTO `permissions` (id, user_id, application_id, permissions) VALUES (1,1,1,'["signin"]');
+INSERT INTO `permissions` (id, user_id, application_id) VALUES (1,1,1);

data/spec/internal/log/test.log

@@ -270,3 +270,143 @@ Started GET "/this_requires_signin_permission" for 127.0.0.1 at 2012-07-20 10:20
 Processing by ExampleController#this_requires_signin_permission as JSON
 Authenticating with gds_sso_api_access strategy
 Completed 200 OK in 1ms (Views: 0.3ms)
+Processing by Api::UserController#update as HTML
+  Parameters: {"uid"=>"a1s2d3"}
+  Rendered /mnt/jenkins/workspace/GDS-SSO/app/views/authorisations/unauthorised.html.erb within layouts/unauthorised (71.9ms)
+Completed 403 Forbidden in 161ms (Views: 160.2ms)
+Processing by Api::UserController#update as HTML
+  Parameters: {"uid"=>"a1s2d3"}
+Completed 200 OK in 0ms
+
+
+Started GET "/" for 127.0.0.1 at 2012-07-23 15:13:33 +0000
+Processing by ExampleController#index as HTML
+Completed 200 OK in 6ms (Views: 5.2ms)
+
+
+Started GET "/restricted" for 127.0.0.1 at 2012-07-23 15:13:33 +0000
+Processing by ExampleController#restricted as HTML
+Authenticating with gds_sso strategy
+Completed   in 52ms
+
+
+Started GET "/auth/gds" for 127.0.0.1 at 2012-07-23 15:13:33 +0000
+
+
+Started GET "/auth/gds/callback?code=e19b88da8b62ed431a6d84bbb6b785a51523c9880debd1698871aecc04a58e45&state=78735eb5bf44fb71ac3b14378aab31d5c75897cc156ffa8c" for 127.0.0.1 at 2012-07-23 15:13:34 +0000
+Processing by AuthenticationsController#callback as HTML
+  Parameters: {"code"=>"e19b88da8b62ed431a6d84bbb6b785a51523c9880debd1698871aecc04a58e45", "state"=>"78735eb5bf44fb71ac3b14378aab31d5c75897cc156ffa8c"}
+Authenticating with gds_sso strategy
+Redirected to http://www.example-client.com/restricted
+Completed 302 Found in 1ms
+
+
+Started GET "/restricted" for 127.0.0.1 at 2012-07-23 15:13:34 +0000
+Processing by ExampleController#restricted as HTML
+Completed 200 OK in 1ms (Views: 0.5ms)
+
+
+Started GET "/restricted" for 127.0.0.1 at 2012-07-23 15:13:35 +0000
+Processing by ExampleController#restricted as HTML
+Authenticating with gds_sso strategy
+Completed   in 0ms
+
+
+Started GET "/auth/gds" for 127.0.0.1 at 2012-07-23 15:13:35 +0000
+
+
+Started GET "/auth/gds/callback?code=1618177a54353c3cc96cc7afd0f4cf9e1fd0d793110397f295ddc26cc09986b0&state=1d8cbda47a6a4b8c6a966fcdb34e6aa86a3af0155eee1037" for 127.0.0.1 at 2012-07-23 15:13:35 +0000
+Processing by AuthenticationsController#callback as HTML
+  Parameters: {"code"=>"1618177a54353c3cc96cc7afd0f4cf9e1fd0d793110397f295ddc26cc09986b0", "state"=>"1d8cbda47a6a4b8c6a966fcdb34e6aa86a3af0155eee1037"}
+Authenticating with gds_sso strategy
+Redirected to http://www.example-client.com/restricted
+Completed 302 Found in 1ms
+
+
+Started GET "/restricted" for 127.0.0.1 at 2012-07-23 15:13:35 +0000
+Processing by ExampleController#restricted as HTML
+Completed 200 OK in 1ms (Views: 0.5ms)
+
+
+Started GET "/restricted" for 127.0.0.1 at 2012-07-23 15:13:35 +0000
+Processing by ExampleController#restricted as HTML
+Authenticating with gds_sso strategy
+Completed   in 0ms
+
+
+Started GET "/auth/gds" for 127.0.0.1 at 2012-07-23 15:13:35 +0000
+
+
+Started GET "/auth/gds/callback?code=b12663c46949197625a3da937bf8b0b59f2a076c5400854c3e16004358284f34&state=6b9e2553a52825262899499d96bd34a6c850844f26bf0a9e" for 127.0.0.1 at 2012-07-23 15:13:35 +0000
+Processing by AuthenticationsController#callback as HTML
+  Parameters: {"code"=>"b12663c46949197625a3da937bf8b0b59f2a076c5400854c3e16004358284f34", "state"=>"6b9e2553a52825262899499d96bd34a6c850844f26bf0a9e"}
+Authenticating with gds_sso strategy
+Redirected to http://www.example-client.com/restricted
+Completed 302 Found in 1ms
+
+
+Started GET "/restricted" for 127.0.0.1 at 2012-07-23 15:13:35 +0000
+Processing by ExampleController#restricted as HTML
+Completed 200 OK in 1ms (Views: 0.6ms)
+
+
+Started GET "/this_requires_signin_permission" for 127.0.0.1 at 2012-07-23 15:13:35 +0000
+Processing by ExampleController#this_requires_signin_permission as HTML
+Authenticating with gds_sso strategy
+Completed   in 1ms
+
+
+Started GET "/auth/gds" for 127.0.0.1 at 2012-07-23 15:13:35 +0000
+
+
+Started GET "/auth/gds/callback?code=738cff1cdcb61b06802fd619be2790fefe98b8b5b7f63402921bb093d7bd4b21&state=ae27fcda0bafc180bde5737e00c1b5e50fcdc12dc4a934c6" for 127.0.0.1 at 2012-07-23 15:13:35 +0000
+Processing by AuthenticationsController#callback as HTML
+  Parameters: {"code"=>"738cff1cdcb61b06802fd619be2790fefe98b8b5b7f63402921bb093d7bd4b21", "state"=>"ae27fcda0bafc180bde5737e00c1b5e50fcdc12dc4a934c6"}
+Authenticating with gds_sso strategy
+Redirected to http://www.example-client.com/this_requires_signin_permission
+Completed 302 Found in 1ms
+
+
+Started GET "/this_requires_signin_permission" for 127.0.0.1 at 2012-07-23 15:13:35 +0000
+Processing by ExampleController#this_requires_signin_permission as HTML
+Completed 200 OK in 1ms (Views: 0.5ms)
+
+
+Started GET "/this_requires_signin_permission" for 127.0.0.1 at 2012-07-23 15:13:35 +0000
+Processing by ExampleController#this_requires_signin_permission as HTML
+Authenticating with gds_sso strategy
+Completed   in 0ms
+
+
+Started GET "/auth/gds" for 127.0.0.1 at 2012-07-23 15:13:35 +0000
+
+
+Started GET "/auth/gds/callback?code=ba11239893e82fd223671f000804f09b1f1934a4077eec65704290cd9f076ba9&state=960ae8a3c3eb6d94619c63f47a6dbe07c49cf8ab1e7c328e" for 127.0.0.1 at 2012-07-23 15:13:36 +0000
+Processing by AuthenticationsController#callback as HTML
+  Parameters: {"code"=>"ba11239893e82fd223671f000804f09b1f1934a4077eec65704290cd9f076ba9", "state"=>"960ae8a3c3eb6d94619c63f47a6dbe07c49cf8ab1e7c328e"}
+Authenticating with gds_sso strategy
+Redirected to http://www.example-client.com/this_requires_signin_permission
+Completed 302 Found in 1ms
+
+
+Started GET "/this_requires_signin_permission" for 127.0.0.1 at 2012-07-23 15:13:36 +0000
+Processing by ExampleController#this_requires_signin_permission as HTML
+Completed 200 OK in 8ms (Views: 0.3ms)
+
+
+Started GET "/restricted" for 127.0.0.1 at 2012-07-23 15:13:36 +0000
+Processing by ExampleController#restricted as JSON
+Authenticating with gds_sso_api_access strategy
+Completed   in 11ms
+
+
+Started GET "/restricted" for 127.0.0.1 at 2012-07-23 15:13:36 +0000
+Processing by ExampleController#restricted as JSON
+Authenticating with gds_sso_api_access strategy
+Completed 200 OK in 1ms (Views: 0.5ms)
+
+
+Started GET "/this_requires_signin_permission" for 127.0.0.1 at 2012-07-23 15:13:36 +0000
+Processing by ExampleController#this_requires_signin_permission as JSON
+Authenticating with gds_sso_api_access strategy
+Completed 200 OK in 1ms (Views: 0.3ms)

metadata

@@ -2,7 +2,7 @@
 name: gds-sso
 version: !ruby/object:Gem::Version 
   prerelease: 
-  version: 0.8.0
+  version: 1.0.0
 platform: ruby
 authors: 
 - Matt Patterson
@@ -11,7 +11,7 @@ autorequire:
 bindir: bin
 cert_chain: []
 
-date: 2012-07-20 00:00:00 Z
+date: 2012-07-23 00:00:00 Z
 dependencies: 
 - !ruby/object:Gem::Dependency 
   name: rails
@@ -207,7 +207,7 @@ required_ruby_version: !ruby/object:Gem::Requirement
   requirements: 
   - - ">="
     - !ruby/object:Gem::Version 
-      hash: 23474346759062133
+      hash: -3724830657426033067
       segments: 
       - 0
       version: "0"
@@ -216,7 +216,7 @@ required_rubygems_version: !ruby/object:Gem::Requirement
   requirements: 
   - - ">="
     - !ruby/object:Gem::Version 
-      hash: 23474346759062133
+      hash: -3724830657426033067
       segments: 
       - 0
       version: "0"