gds-sso 1.1.0 → 1.1.1

data/lib/gds-sso/controller_methods.rb

@@ -26,13 +26,14 @@ module GDS
       def require_signin_permission!
         authorise_user!(GDS::SSO::Config.default_scope, 'signin')
       rescue PermissionDeniedException
-        headers["X-Slimmer-Skip"] = "1" # If slimmer used, without this you would see a generic 400 error page
+        skip_slimmer
         render "authorisations/cant_signin", layout: "unauthorised", status: :forbidden
       end
 
       def authenticate_user!
         if current_user && current_user.remotely_signed_out?
           message = "You have been remotely signed out."
+          skip_slimmer
           render "authorisations/unauthorised", layout: "unauthorised", status: :forbidden, locals: { message: message }
         end
         warden.authenticate!
@@ -53,6 +54,11 @@ module GDS
       def warden
         request.env['warden']
       end
+
+      def skip_slimmer
+        # If slimmer used, without this you would see a generic 400 error page
+        headers["X-Slimmer-Skip"] = "1"
+      end
     end
   end
 end

data/lib/gds-sso/version.rb

@@ -1,5 +1,5 @@
 module GDS
   module SSO
-    VERSION = "1.1.0"
+    VERSION = "1.1.1"
   end
 end

data/spec/internal/log/test.log

@@ -5590,3 +5590,683 @@ GDS_SSO integration test:
    (1.3ms)  commit transaction
 Completed 200 OK in 4ms (ActiveRecord: 1.7ms)
   User Load (0.1ms)  SELECT "users".* FROM "users" WHERE "users"."id" = ? LIMIT 1  [["id", 5]]
+Connecting to database specified by database.yml
+   (3.2ms)  select sqlite_version(*)
+   (30.0ms)  DROP TABLE "users"
+   (1.6ms)  CREATE TABLE "users" ("id" INTEGER PRIMARY KEY AUTOINCREMENT NOT NULL, "name" varchar(255) NOT NULL, "uid" varchar(255) NOT NULL, "email" varchar(255) NOT NULL, "remotely_signed_out" boolean, "permissions" text) 
+
+
+Started GET "/" for 127.0.0.1 at 2012-07-25 14:58:36 +0000
+Processing by ExampleController#index as HTML
+  Rendered text template (0.0ms)
+Completed 200 OK in 54ms (Views: 53.7ms | ActiveRecord: 0.0ms)
+
+
+Started GET "/restricted" for 127.0.0.1 at 2012-07-25 14:58:36 +0000
+Processing by ExampleController#restricted as HTML
+Authenticating with gds_sso strategy
+Completed   in 62ms
+
+
+Started GET "/auth/gds" for 127.0.0.1 at 2012-07-25 14:58:36 +0000
+
+
+Started GET "/auth/gds/callback?code=aa01d7043eaaaec08ce7d0019486d8bd8f7377ceef8c51ec7ff1ea6c812c3ae7&state=56203722a4bb93f86db04be2529945c297d7a5d93a846abc" for 127.0.0.1 at 2012-07-25 14:58:37 +0000
+Processing by AuthenticationsController#callback as HTML
+  Parameters: {"code"=>"aa01d7043eaaaec08ce7d0019486d8bd8f7377ceef8c51ec7ff1ea6c812c3ae7", "state"=>"56203722a4bb93f86db04be2529945c297d7a5d93a846abc"}
+Authenticating with gds_sso strategy
+  User Load (0.7ms)  SELECT "users".* FROM "users" WHERE "users"."uid" = 'integration-uid' LIMIT 1
+   (0.1ms)  begin transaction
+  SQL (48.9ms)  INSERT INTO "users" ("email", "name", "permissions", "remotely_signed_out", "uid") VALUES (?, ?, ?, ?, ?)  [["email", "test@example-client.com"], ["name", "Test User"], ["permissions", "--- \nGDS_SSO integration test: \n- signin\n"], ["remotely_signed_out", nil], ["uid", "integration-uid"]]
+   (12.0ms)  commit transaction
+   (0.0ms)  begin transaction
+   (0.3ms)  UPDATE "users" SET "remotely_signed_out" = 'f', "permissions" = '--- 
+GDS_SSO integration test: 
+- signin
+' WHERE "users"."id" = 1
+   (4.7ms)  commit transaction
+Redirected to http://www.example-client.com/restricted
+Completed 302 Found in 118ms (ActiveRecord: 67.1ms)
+
+
+Started GET "/restricted" for 127.0.0.1 at 2012-07-25 14:58:38 +0000
+Processing by ExampleController#restricted as HTML
+  User Load (0.1ms)  SELECT "users".* FROM "users" WHERE "users"."uid" = 'integration-uid' LIMIT 1
+Completed 200 OK in 2ms (Views: 0.5ms | ActiveRecord: 0.1ms)
+
+
+Started GET "/restricted" for 127.0.0.1 at 2012-07-25 14:58:38 +0000
+Processing by ExampleController#restricted as HTML
+Authenticating with gds_sso strategy
+Completed   in 0ms
+
+
+Started GET "/auth/gds" for 127.0.0.1 at 2012-07-25 14:58:38 +0000
+
+
+Started GET "/auth/gds/callback?code=469c43cb089529a3c01b0663eca13f84367ddd3995d40204d9795d25981d7fc5&state=73b1bbedc5d3fbd495fea43971ca81dee586911631a19c5d" for 127.0.0.1 at 2012-07-25 14:58:38 +0000
+Processing by AuthenticationsController#callback as HTML
+  Parameters: {"code"=>"469c43cb089529a3c01b0663eca13f84367ddd3995d40204d9795d25981d7fc5", "state"=>"73b1bbedc5d3fbd495fea43971ca81dee586911631a19c5d"}
+Authenticating with gds_sso strategy
+  User Load (0.3ms)  SELECT "users".* FROM "users" WHERE "users"."uid" = 'integration-uid' LIMIT 1
+   (0.1ms)  begin transaction
+   (0.2ms)  UPDATE "users" SET "permissions" = '--- 
+GDS_SSO integration test: 
+- signin
+' WHERE "users"."id" = 1
+   (8.6ms)  commit transaction
+   (0.1ms)  begin transaction
+   (0.2ms)  UPDATE "users" SET "permissions" = '--- 
+GDS_SSO integration test: 
+- signin
+' WHERE "users"."id" = 1
+   (1.9ms)  commit transaction
+Redirected to http://www.example-client.com/restricted
+Completed 302 Found in 17ms (ActiveRecord: 11.3ms)
+
+
+Started GET "/restricted" for 127.0.0.1 at 2012-07-25 14:58:38 +0000
+Processing by ExampleController#restricted as HTML
+  User Load (0.1ms)  SELECT "users".* FROM "users" WHERE "users"."uid" = 'integration-uid' LIMIT 1
+Completed 200 OK in 2ms (Views: 0.5ms | ActiveRecord: 0.1ms)
+
+
+Started GET "/restricted" for 127.0.0.1 at 2012-07-25 14:58:38 +0000
+Processing by ExampleController#restricted as HTML
+Authenticating with gds_sso strategy
+Completed   in 0ms
+
+
+Started GET "/auth/gds" for 127.0.0.1 at 2012-07-25 14:58:38 +0000
+
+
+Started GET "/auth/gds/callback?code=16dc1777a28417b36f490be1a1dcb29300d2988063ea96a477030963558cd042&state=ffa2726bdf755698ca27a1fb8dfbedbbfd2feececfff47bf" for 127.0.0.1 at 2012-07-25 14:58:38 +0000
+Processing by AuthenticationsController#callback as HTML
+  Parameters: {"code"=>"16dc1777a28417b36f490be1a1dcb29300d2988063ea96a477030963558cd042", "state"=>"ffa2726bdf755698ca27a1fb8dfbedbbfd2feececfff47bf"}
+Authenticating with gds_sso strategy
+  User Load (0.2ms)  SELECT "users".* FROM "users" WHERE "users"."uid" = 'integration-uid' LIMIT 1
+   (0.1ms)  begin transaction
+   (0.2ms)  UPDATE "users" SET "permissions" = '--- 
+GDS_SSO integration test: 
+- signin
+' WHERE "users"."id" = 1
+   (10.7ms)  commit transaction
+   (0.0ms)  begin transaction
+   (0.2ms)  UPDATE "users" SET "permissions" = '--- 
+GDS_SSO integration test: 
+- signin
+' WHERE "users"."id" = 1
+   (7.8ms)  commit transaction
+Redirected to http://www.example-client.com/restricted
+Completed 302 Found in 24ms (ActiveRecord: 19.3ms)
+
+
+Started GET "/restricted" for 127.0.0.1 at 2012-07-25 14:58:38 +0000
+Processing by ExampleController#restricted as HTML
+  User Load (0.1ms)  SELECT "users".* FROM "users" WHERE "users"."uid" = 'integration-uid' LIMIT 1
+Completed 200 OK in 1ms (Views: 0.3ms | ActiveRecord: 0.1ms)
+
+
+Started GET "/this_requires_signin_permission" for 127.0.0.1 at 2012-07-25 14:58:38 +0000
+Processing by ExampleController#this_requires_signin_permission as HTML
+Authenticating with gds_sso strategy
+Completed   in 1ms
+
+
+Started GET "/auth/gds" for 127.0.0.1 at 2012-07-25 14:58:38 +0000
+
+
+Started GET "/auth/gds/callback?code=ae498a182100b8004d80059b69d5cd23081bd2ae2e712c45140bbc1d13c3eb86&state=2273f9695939cecd665838bdb71a8a6b141aaa5e4fb4f911" for 127.0.0.1 at 2012-07-25 14:58:39 +0000
+Processing by AuthenticationsController#callback as HTML
+  Parameters: {"code"=>"ae498a182100b8004d80059b69d5cd23081bd2ae2e712c45140bbc1d13c3eb86", "state"=>"2273f9695939cecd665838bdb71a8a6b141aaa5e4fb4f911"}
+Authenticating with gds_sso strategy
+  User Load (0.2ms)  SELECT "users".* FROM "users" WHERE "users"."uid" = 'integration-uid' LIMIT 1
+   (0.1ms)  begin transaction
+   (0.2ms)  UPDATE "users" SET "permissions" = '--- 
+GDS_SSO integration test: 
+- signin
+' WHERE "users"."id" = 1
+   (5.1ms)  commit transaction
+   (0.0ms)  begin transaction
+   (0.2ms)  UPDATE "users" SET "permissions" = '--- 
+GDS_SSO integration test: 
+- signin
+' WHERE "users"."id" = 1
+   (1.4ms)  commit transaction
+Redirected to http://www.example-client.com/this_requires_signin_permission
+Completed 302 Found in 12ms (ActiveRecord: 7.2ms)
+
+
+Started GET "/this_requires_signin_permission" for 127.0.0.1 at 2012-07-25 14:58:39 +0000
+Processing by ExampleController#this_requires_signin_permission as HTML
+  User Load (0.1ms)  SELECT "users".* FROM "users" WHERE "users"."uid" = 'integration-uid' LIMIT 1
+Completed 200 OK in 2ms (Views: 0.5ms | ActiveRecord: 0.1ms)
+
+
+Started GET "/this_requires_signin_permission" for 127.0.0.1 at 2012-07-25 14:58:39 +0000
+Processing by ExampleController#this_requires_signin_permission as HTML
+Authenticating with gds_sso strategy
+Completed   in 0ms
+
+
+Started GET "/auth/gds" for 127.0.0.1 at 2012-07-25 14:58:39 +0000
+
+
+Started GET "/auth/gds/callback?code=09ce562298b15567c039fb386488b5056249cfac64de1fd560b5b8cb615a5fcb&state=0f89d35062762f2f34652ac7677cf25d42e5511af656c5e1" for 127.0.0.1 at 2012-07-25 14:58:39 +0000
+Processing by AuthenticationsController#callback as HTML
+  Parameters: {"code"=>"09ce562298b15567c039fb386488b5056249cfac64de1fd560b5b8cb615a5fcb", "state"=>"0f89d35062762f2f34652ac7677cf25d42e5511af656c5e1"}
+Authenticating with gds_sso strategy
+  User Load (0.2ms)  SELECT "users".* FROM "users" WHERE "users"."uid" = 'integration-uid' LIMIT 1
+   (0.0ms)  begin transaction
+   (0.2ms)  UPDATE "users" SET "permissions" = '--- 
+GDS_SSO integration test: 
+- signin
+' WHERE "users"."id" = 1
+   (33.3ms)  commit transaction
+   (0.1ms)  begin transaction
+   (0.2ms)  UPDATE "users" SET "permissions" = '--- 
+GDS_SSO integration test: 
+- signin
+' WHERE "users"."id" = 1
+   (1.4ms)  commit transaction
+Redirected to http://www.example-client.com/this_requires_signin_permission
+Completed 302 Found in 40ms (ActiveRecord: 35.5ms)
+
+
+Started GET "/this_requires_signin_permission" for 127.0.0.1 at 2012-07-25 14:58:39 +0000
+Processing by ExampleController#this_requires_signin_permission as HTML
+  User Load (0.1ms)  SELECT "users".* FROM "users" WHERE "users"."uid" = 'integration-uid' LIMIT 1
+Completed 200 OK in 1ms (Views: 0.3ms | ActiveRecord: 0.1ms)
+
+
+Started GET "/restricted" for 127.0.0.1 at 2012-07-25 14:58:39 +0000
+Processing by ExampleController#restricted as HTML
+Authenticating with gds_sso strategy
+Completed   in 0ms
+
+
+Started GET "/auth/gds" for 127.0.0.1 at 2012-07-25 14:58:39 +0000
+
+
+Started GET "/auth/gds/callback?code=174d4f4126a78b030d4e6b93bb9fecc15ac86d5ab05abc8f99ef724f24f2e516&state=5b49f4ba34272a69617de4a89464edb3909e78aaf5ad069b" for 127.0.0.1 at 2012-07-25 14:58:39 +0000
+Processing by AuthenticationsController#callback as HTML
+  Parameters: {"code"=>"174d4f4126a78b030d4e6b93bb9fecc15ac86d5ab05abc8f99ef724f24f2e516", "state"=>"5b49f4ba34272a69617de4a89464edb3909e78aaf5ad069b"}
+Authenticating with gds_sso strategy
+  User Load (0.3ms)  SELECT "users".* FROM "users" WHERE "users"."uid" = 'integration-uid' LIMIT 1
+   (0.1ms)  begin transaction
+   (0.3ms)  UPDATE "users" SET "permissions" = '--- 
+GDS_SSO integration test: 
+- signin
+' WHERE "users"."id" = 1
+   (2.9ms)  commit transaction
+   (0.1ms)  begin transaction
+   (0.2ms)  UPDATE "users" SET "permissions" = '--- 
+GDS_SSO integration test: 
+- signin
+' WHERE "users"."id" = 1
+   (1.4ms)  commit transaction
+Redirected to http://www.example-client.com/restricted
+Completed 302 Found in 11ms (ActiveRecord: 5.1ms)
+
+
+Started GET "/restricted" for 127.0.0.1 at 2012-07-25 14:58:39 +0000
+Processing by ExampleController#restricted as HTML
+  User Load (0.1ms)  SELECT "users".* FROM "users" WHERE "users"."uid" = 'integration-uid' LIMIT 1
+Completed 200 OK in 1ms (Views: 0.5ms | ActiveRecord: 0.1ms)
+  User Load (0.1ms)  SELECT "users".* FROM "users" WHERE "users"."uid" = 'integration-uid' LIMIT 1
+   (0.0ms)  begin transaction
+   (0.2ms)  UPDATE "users" SET "remotely_signed_out" = 't', "permissions" = '--- 
+GDS_SSO integration test: 
+- signin
+' WHERE "users"."id" = 1
+   (19.6ms)  commit transaction
+
+
+Started GET "/restricted" for 127.0.0.1 at 2012-07-25 14:58:39 +0000
+Processing by ExampleController#restricted as HTML
+  User Load (0.1ms)  SELECT "users".* FROM "users" WHERE "users"."uid" = 'integration-uid' LIMIT 1
+Filter chain halted as :authenticate_user! rendered or redirected
+Completed 403 Forbidden in 104ms (Views: 102.3ms | ActiveRecord: 0.1ms)
+
+
+Started GET "/auth/gds/sign_out" for 127.0.0.1 at 2012-07-25 14:58:40 +0000
+Processing by AuthenticationsController#sign_out as HTML
+Redirected to http://localhost:4567/users/sign_out
+Completed 302 Found in 1ms (ActiveRecord: 0.0ms)
+
+
+Started GET "/restricted" for 127.0.0.1 at 2012-07-25 14:58:40 +0000
+Processing by ExampleController#restricted as HTML
+Authenticating with gds_sso strategy
+Completed   in 0ms
+
+
+Started GET "/auth/gds" for 127.0.0.1 at 2012-07-25 14:58:40 +0000
+
+
+Started GET "/auth/gds/callback?code=c4640b8ac4769968f13a1a8f0c11f0aa1a4500a685fd36c07e964388733520c2&state=c85e1f74d918939fad731d07b717e190763066cf8af44c04" for 127.0.0.1 at 2012-07-25 14:58:40 +0000
+Processing by AuthenticationsController#callback as HTML
+  Parameters: {"code"=>"c4640b8ac4769968f13a1a8f0c11f0aa1a4500a685fd36c07e964388733520c2", "state"=>"c85e1f74d918939fad731d07b717e190763066cf8af44c04"}
+Authenticating with gds_sso strategy
+  User Load (0.2ms)  SELECT "users".* FROM "users" WHERE "users"."uid" = 'integration-uid' LIMIT 1
+   (0.0ms)  begin transaction
+   (0.2ms)  UPDATE "users" SET "permissions" = '--- 
+GDS_SSO integration test: 
+- signin
+' WHERE "users"."id" = 1
+   (4.5ms)  commit transaction
+   (0.1ms)  begin transaction
+   (0.2ms)  UPDATE "users" SET "remotely_signed_out" = 'f', "permissions" = '--- 
+GDS_SSO integration test: 
+- signin
+' WHERE "users"."id" = 1
+   (4.4ms)  commit transaction
+Redirected to http://www.example-client.com/restricted
+Completed 302 Found in 14ms (ActiveRecord: 9.7ms)
+
+
+Started GET "/restricted" for 127.0.0.1 at 2012-07-25 14:58:40 +0000
+Processing by ExampleController#restricted as HTML
+  User Load (0.1ms)  SELECT "users".* FROM "users" WHERE "users"."uid" = 'integration-uid' LIMIT 1
+Completed 200 OK in 1ms (Views: 0.4ms | ActiveRecord: 0.1ms)
+
+
+Started GET "/restricted" for 127.0.0.1 at 2012-07-25 14:58:40 +0000
+Processing by ExampleController#restricted as JSON
+Authenticating with gds_sso_api_access strategy
+Completed   in 35ms
+
+
+Started GET "/restricted" for 127.0.0.1 at 2012-07-25 14:58:40 +0000
+Processing by ExampleController#restricted as JSON
+Authenticating with gds_sso_api_access strategy
+Completed 200 OK in 1ms (Views: 0.6ms | ActiveRecord: 0.0ms)
+
+
+Started GET "/this_requires_signin_permission" for 127.0.0.1 at 2012-07-25 14:58:40 +0000
+Processing by ExampleController#this_requires_signin_permission as JSON
+Authenticating with gds_sso_api_access strategy
+Completed 200 OK in 1ms (Views: 0.3ms | ActiveRecord: 0.0ms)
+   (0.2ms)  begin transaction
+  SQL (0.3ms)  INSERT INTO "users" ("email", "name", "permissions", "remotely_signed_out", "uid") VALUES (?, ?, ?, ?, ?)  [["email", "old@domain.com"], ["name", "Moshua Jarshall"], ["permissions", "--- \nGDS_SSO integration test: \n- signin\n"], ["remotely_signed_out", nil], ["uid", "a1s2d31081"]]
+   (8.8ms)  commit transaction
+WARNING: Can't mass-assign protected attributes: uid, name, permissions
+Processing by Api::UserController#update as HTML
+  Parameters: {"uid"=>"a1s2d31081"}
+Completed 403 Forbidden in 3ms (Views: 1.9ms | ActiveRecord: 0.0ms)
+   (0.1ms)  begin transaction
+  SQL (0.3ms)  INSERT INTO "users" ("email", "name", "permissions", "remotely_signed_out", "uid") VALUES (?, ?, ?, ?, ?)  [["email", "old@domain.com"], ["name", "Moshua Jarshall"], ["permissions", "--- \nGDS_SSO integration test: \n- signin\n"], ["remotely_signed_out", nil], ["uid", "a1s2d37927"]]
+   (1.7ms)  commit transaction
+Processing by Api::UserController#update as HTML
+  Parameters: {"uid"=>"a1s2d37927"}
+  User Load (0.2ms)  SELECT "users".* FROM "users" WHERE "users"."uid" = 'a1s2d37927' LIMIT 1
+   (0.0ms)  begin transaction
+   (0.2ms)  UPDATE "users" SET "email" = 'user@domain.com', "name" = 'Joshua Marshall', "permissions" = '--- 
+GDS_SSO integration test: 
+- signin
+- new permission
+' WHERE "users"."id" = 3
+   (2.0ms)  commit transaction
+Completed 200 OK in 6ms (ActiveRecord: 2.5ms)
+  User Load (0.2ms)  SELECT "users".* FROM "users" WHERE "users"."id" = ? LIMIT 1  [["id", 3]]
+   (0.1ms)  begin transaction
+  SQL (0.2ms)  INSERT INTO "users" ("email", "name", "permissions", "remotely_signed_out", "uid") VALUES (?, ?, ?, ?, ?)  [["email", "old@domain.com"], ["name", "Moshua Jarshall"], ["permissions", "--- \nGDS_SSO integration test: \n- signin\n"], ["remotely_signed_out", nil], ["uid", "a1s2d3972"]]
+   (4.2ms)  commit transaction
+WARNING: Can't mass-assign protected attributes: uid, name, permissions
+Processing by Api::UserController#reauth as HTML
+  Parameters: {"uid"=>"a1s2d3972"}
+Completed 403 Forbidden in 2ms (Views: 1.1ms | ActiveRecord: 0.0ms)
+   (0.1ms)  begin transaction
+  SQL (0.2ms)  INSERT INTO "users" ("email", "name", "permissions", "remotely_signed_out", "uid") VALUES (?, ?, ?, ?, ?)  [["email", "old@domain.com"], ["name", "Moshua Jarshall"], ["permissions", "--- \nGDS_SSO integration test: \n- signin\n"], ["remotely_signed_out", nil], ["uid", "a1s2d33256"]]
+   (1.6ms)  commit transaction
+Processing by Api::UserController#reauth as HTML
+  Parameters: {"uid"=>"a1s2d33256"}
+  User Load (0.2ms)  SELECT "users".* FROM "users" WHERE "users"."uid" = 'a1s2d33256' LIMIT 1
+   (0.0ms)  begin transaction
+   (0.2ms)  UPDATE "users" SET "remotely_signed_out" = 't', "permissions" = '--- 
+GDS_SSO integration test: 
+- signin
+' WHERE "users"."id" = 5
+   (3.5ms)  commit transaction
+Completed 200 OK in 6ms (ActiveRecord: 3.9ms)
+  User Load (0.1ms)  SELECT "users".* FROM "users" WHERE "users"."id" = ? LIMIT 1  [["id", 5]]
+Connecting to database specified by database.yml
+   (2.8ms)  select sqlite_version(*)
+   (33.0ms)  DROP TABLE "users"
+   (1.9ms)  CREATE TABLE "users" ("id" INTEGER PRIMARY KEY AUTOINCREMENT NOT NULL, "name" varchar(255) NOT NULL, "uid" varchar(255) NOT NULL, "email" varchar(255) NOT NULL, "remotely_signed_out" boolean, "permissions" text) 
+
+
+Started GET "/" for 127.0.0.1 at 2012-07-25 15:01:46 +0000
+Processing by ExampleController#index as HTML
+  Rendered text template (0.0ms)
+Completed 200 OK in 57ms (Views: 56.8ms | ActiveRecord: 0.0ms)
+
+
+Started GET "/restricted" for 127.0.0.1 at 2012-07-25 15:01:46 +0000
+Processing by ExampleController#restricted as HTML
+Authenticating with gds_sso strategy
+Completed   in 65ms
+
+
+Started GET "/auth/gds" for 127.0.0.1 at 2012-07-25 15:01:46 +0000
+
+
+Started GET "/auth/gds/callback?code=377d050cf1e2ae4c1436961eca2ebfa4be34ff7eef0dd294db302cd52b03cb2d&state=020c2bfb3c1897ea74f0a39847286ebcf7a6ddb22ee0ea8d" for 127.0.0.1 at 2012-07-25 15:01:47 +0000
+Processing by AuthenticationsController#callback as HTML
+  Parameters: {"code"=>"377d050cf1e2ae4c1436961eca2ebfa4be34ff7eef0dd294db302cd52b03cb2d", "state"=>"020c2bfb3c1897ea74f0a39847286ebcf7a6ddb22ee0ea8d"}
+Authenticating with gds_sso strategy
+  User Load (0.2ms)  SELECT "users".* FROM "users" WHERE "users"."uid" = 'integration-uid' LIMIT 1
+   (0.1ms)  begin transaction
+  SQL (48.3ms)  INSERT INTO "users" ("email", "name", "permissions", "remotely_signed_out", "uid") VALUES (?, ?, ?, ?, ?)  [["email", "test@example-client.com"], ["name", "Test User"], ["permissions", "--- \nGDS_SSO integration test: \n- signin\n"], ["remotely_signed_out", nil], ["uid", "integration-uid"]]
+   (26.2ms)  commit transaction
+   (0.1ms)  begin transaction
+   (0.3ms)  UPDATE "users" SET "remotely_signed_out" = 'f', "permissions" = '--- 
+GDS_SSO integration test: 
+- signin
+' WHERE "users"."id" = 1
+   (3.1ms)  commit transaction
+Redirected to http://www.example-client.com/restricted
+Completed 302 Found in 109ms (ActiveRecord: 78.7ms)
+
+
+Started GET "/restricted" for 127.0.0.1 at 2012-07-25 15:01:48 +0000
+Processing by ExampleController#restricted as HTML
+  User Load (0.2ms)  SELECT "users".* FROM "users" WHERE "users"."uid" = 'integration-uid' LIMIT 1
+Completed 200 OK in 2ms (Views: 0.6ms | ActiveRecord: 0.2ms)
+
+
+Started GET "/restricted" for 127.0.0.1 at 2012-07-25 15:01:48 +0000
+Processing by ExampleController#restricted as HTML
+Authenticating with gds_sso strategy
+Completed   in 1ms
+
+
+Started GET "/auth/gds" for 127.0.0.1 at 2012-07-25 15:01:48 +0000
+
+
+Started GET "/auth/gds/callback?code=c68498679d394f8863ef481f1d52a6348f772be2c1e163ef057610a3cb7e86ea&state=2d0ff415a6871126573b44f5c736eac0e431abb00f5b44ad" for 127.0.0.1 at 2012-07-25 15:01:48 +0000
+Processing by AuthenticationsController#callback as HTML
+  Parameters: {"code"=>"c68498679d394f8863ef481f1d52a6348f772be2c1e163ef057610a3cb7e86ea", "state"=>"2d0ff415a6871126573b44f5c736eac0e431abb00f5b44ad"}
+Authenticating with gds_sso strategy
+  User Load (0.3ms)  SELECT "users".* FROM "users" WHERE "users"."uid" = 'integration-uid' LIMIT 1
+   (0.1ms)  begin transaction
+   (0.3ms)  UPDATE "users" SET "permissions" = '--- 
+GDS_SSO integration test: 
+- signin
+' WHERE "users"."id" = 1
+   (19.9ms)  commit transaction
+   (0.1ms)  begin transaction
+   (0.3ms)  UPDATE "users" SET "permissions" = '--- 
+GDS_SSO integration test: 
+- signin
+' WHERE "users"."id" = 1
+   (1.5ms)  commit transaction
+Redirected to http://www.example-client.com/restricted
+Completed 302 Found in 29ms (ActiveRecord: 22.4ms)
+
+
+Started GET "/restricted" for 127.0.0.1 at 2012-07-25 15:01:48 +0000
+Processing by ExampleController#restricted as HTML
+  User Load (0.2ms)  SELECT "users".* FROM "users" WHERE "users"."uid" = 'integration-uid' LIMIT 1
+Completed 200 OK in 2ms (Views: 0.6ms | ActiveRecord: 0.2ms)
+
+
+Started GET "/restricted" for 127.0.0.1 at 2012-07-25 15:01:48 +0000
+Processing by ExampleController#restricted as HTML
+Authenticating with gds_sso strategy
+Completed   in 0ms
+
+
+Started GET "/auth/gds" for 127.0.0.1 at 2012-07-25 15:01:48 +0000
+
+
+Started GET "/auth/gds/callback?code=9d4a86d42e04801ca337773f706436181fba093e934da75a471876fc452e33bd&state=27259dd098862407ee6a71530faef6dd8e6dc291d9e8da97" for 127.0.0.1 at 2012-07-25 15:01:48 +0000
+Processing by AuthenticationsController#callback as HTML
+  Parameters: {"code"=>"9d4a86d42e04801ca337773f706436181fba093e934da75a471876fc452e33bd", "state"=>"27259dd098862407ee6a71530faef6dd8e6dc291d9e8da97"}
+Authenticating with gds_sso strategy
+  User Load (0.2ms)  SELECT "users".* FROM "users" WHERE "users"."uid" = 'integration-uid' LIMIT 1
+   (0.0ms)  begin transaction
+   (0.2ms)  UPDATE "users" SET "permissions" = '--- 
+GDS_SSO integration test: 
+- signin
+' WHERE "users"."id" = 1
+   (10.6ms)  commit transaction
+   (0.1ms)  begin transaction
+   (0.2ms)  UPDATE "users" SET "permissions" = '--- 
+GDS_SSO integration test: 
+- signin
+' WHERE "users"."id" = 1
+   (1.4ms)  commit transaction
+Redirected to http://www.example-client.com/restricted
+Completed 302 Found in 17ms (ActiveRecord: 12.8ms)
+
+
+Started GET "/restricted" for 127.0.0.1 at 2012-07-25 15:01:49 +0000
+Processing by ExampleController#restricted as HTML
+  User Load (0.1ms)  SELECT "users".* FROM "users" WHERE "users"."uid" = 'integration-uid' LIMIT 1
+Completed 200 OK in 1ms (Views: 0.4ms | ActiveRecord: 0.1ms)
+
+
+Started GET "/this_requires_signin_permission" for 127.0.0.1 at 2012-07-25 15:01:49 +0000
+Processing by ExampleController#this_requires_signin_permission as HTML
+Authenticating with gds_sso strategy
+Completed   in 1ms
+
+
+Started GET "/auth/gds" for 127.0.0.1 at 2012-07-25 15:01:49 +0000
+
+
+Started GET "/auth/gds/callback?code=9617c48224c11899d6e5a1a6423cebecb64545c71bb8f3b532ce1e69ee6cf520&state=69ec73133bb0ef487acaf98d98fc76440d9a3ff36b74f62a" for 127.0.0.1 at 2012-07-25 15:01:49 +0000
+Processing by AuthenticationsController#callback as HTML
+  Parameters: {"code"=>"9617c48224c11899d6e5a1a6423cebecb64545c71bb8f3b532ce1e69ee6cf520", "state"=>"69ec73133bb0ef487acaf98d98fc76440d9a3ff36b74f62a"}
+Authenticating with gds_sso strategy
+  User Load (0.3ms)  SELECT "users".* FROM "users" WHERE "users"."uid" = 'integration-uid' LIMIT 1
+   (0.1ms)  begin transaction
+   (0.2ms)  UPDATE "users" SET "permissions" = '--- 
+GDS_SSO integration test: 
+- signin
+' WHERE "users"."id" = 1
+   (7.0ms)  commit transaction
+   (0.0ms)  begin transaction
+   (0.2ms)  UPDATE "users" SET "permissions" = '--- 
+GDS_SSO integration test: 
+- signin
+' WHERE "users"."id" = 1
+   (4.1ms)  commit transaction
+Redirected to http://www.example-client.com/this_requires_signin_permission
+Completed 302 Found in 18ms (ActiveRecord: 12.0ms)
+
+
+Started GET "/this_requires_signin_permission" for 127.0.0.1 at 2012-07-25 15:01:49 +0000
+Processing by ExampleController#this_requires_signin_permission as HTML
+  User Load (0.1ms)  SELECT "users".* FROM "users" WHERE "users"."uid" = 'integration-uid' LIMIT 1
+Completed 200 OK in 2ms (Views: 0.7ms | ActiveRecord: 0.1ms)
+
+
+Started GET "/this_requires_signin_permission" for 127.0.0.1 at 2012-07-25 15:01:49 +0000
+Processing by ExampleController#this_requires_signin_permission as HTML
+Authenticating with gds_sso strategy
+Completed   in 0ms
+
+
+Started GET "/auth/gds" for 127.0.0.1 at 2012-07-25 15:01:49 +0000
+
+
+Started GET "/auth/gds/callback?code=147139bc222243b09406437dcfbe219d03e90c29444e396050fb782e84c0ad05&state=8829fe4ab1ad79350c9ee7e9d0d4d73dbd53f87cf180c385" for 127.0.0.1 at 2012-07-25 15:01:49 +0000
+Processing by AuthenticationsController#callback as HTML
+  Parameters: {"code"=>"147139bc222243b09406437dcfbe219d03e90c29444e396050fb782e84c0ad05", "state"=>"8829fe4ab1ad79350c9ee7e9d0d4d73dbd53f87cf180c385"}
+Authenticating with gds_sso strategy
+  User Load (0.2ms)  SELECT "users".* FROM "users" WHERE "users"."uid" = 'integration-uid' LIMIT 1
+   (0.1ms)  begin transaction
+   (0.2ms)  UPDATE "users" SET "permissions" = '--- 
+GDS_SSO integration test: 
+- signin
+' WHERE "users"."id" = 1
+   (11.6ms)  commit transaction
+   (0.1ms)  begin transaction
+   (0.2ms)  UPDATE "users" SET "permissions" = '--- 
+GDS_SSO integration test: 
+- signin
+' WHERE "users"."id" = 1
+   (1.6ms)  commit transaction
+Redirected to http://www.example-client.com/this_requires_signin_permission
+Completed 302 Found in 19ms (ActiveRecord: 13.9ms)
+
+
+Started GET "/this_requires_signin_permission" for 127.0.0.1 at 2012-07-25 15:01:49 +0000
+Processing by ExampleController#this_requires_signin_permission as HTML
+  User Load (0.1ms)  SELECT "users".* FROM "users" WHERE "users"."uid" = 'integration-uid' LIMIT 1
+Completed 200 OK in 2ms (Views: 0.4ms | ActiveRecord: 0.1ms)
+
+
+Started GET "/restricted" for 127.0.0.1 at 2012-07-25 15:01:49 +0000
+Processing by ExampleController#restricted as HTML
+Authenticating with gds_sso strategy
+Completed   in 0ms
+
+
+Started GET "/auth/gds" for 127.0.0.1 at 2012-07-25 15:01:49 +0000
+
+
+Started GET "/auth/gds/callback?code=cc896fedfc7a941965aa3a4730ab328ecaeea30e6437753ea9830877b26fe415&state=e88cb6f488686f4b7c6cc43f28baa3695d0f5112dd84421a" for 127.0.0.1 at 2012-07-25 15:01:50 +0000
+Processing by AuthenticationsController#callback as HTML
+  Parameters: {"code"=>"cc896fedfc7a941965aa3a4730ab328ecaeea30e6437753ea9830877b26fe415", "state"=>"e88cb6f488686f4b7c6cc43f28baa3695d0f5112dd84421a"}
+Authenticating with gds_sso strategy
+  User Load (0.3ms)  SELECT "users".* FROM "users" WHERE "users"."uid" = 'integration-uid' LIMIT 1
+   (0.1ms)  begin transaction
+   (0.3ms)  UPDATE "users" SET "permissions" = '--- 
+GDS_SSO integration test: 
+- signin
+' WHERE "users"."id" = 1
+   (37.8ms)  commit transaction
+   (0.1ms)  begin transaction
+   (0.3ms)  UPDATE "users" SET "permissions" = '--- 
+GDS_SSO integration test: 
+- signin
+' WHERE "users"."id" = 1
+   (3.6ms)  commit transaction
+Redirected to http://www.example-client.com/restricted
+Completed 302 Found in 49ms (ActiveRecord: 42.4ms)
+
+
+Started GET "/restricted" for 127.0.0.1 at 2012-07-25 15:01:50 +0000
+Processing by ExampleController#restricted as HTML
+  User Load (0.2ms)  SELECT "users".* FROM "users" WHERE "users"."uid" = 'integration-uid' LIMIT 1
+Completed 200 OK in 2ms (Views: 0.6ms | ActiveRecord: 0.2ms)
+  User Load (0.1ms)  SELECT "users".* FROM "users" WHERE "users"."uid" = 'integration-uid' LIMIT 1
+   (0.1ms)  begin transaction
+   (1.1ms)  UPDATE "users" SET "remotely_signed_out" = 't', "permissions" = '--- 
+GDS_SSO integration test: 
+- signin
+' WHERE "users"."id" = 1
+   (2.6ms)  commit transaction
+
+
+Started GET "/restricted" for 127.0.0.1 at 2012-07-25 15:01:50 +0000
+Processing by ExampleController#restricted as HTML
+  User Load (0.2ms)  SELECT "users".* FROM "users" WHERE "users"."uid" = 'integration-uid' LIMIT 1
+Filter chain halted as :authenticate_user! rendered or redirected
+Completed 403 Forbidden in 16ms (Views: 14.8ms | ActiveRecord: 0.2ms)
+
+
+Started GET "/auth/gds/sign_out" for 127.0.0.1 at 2012-07-25 15:01:50 +0000
+Processing by AuthenticationsController#sign_out as HTML
+Redirected to http://localhost:4567/users/sign_out
+Completed 302 Found in 63ms (ActiveRecord: 0.0ms)
+
+
+Started GET "/restricted" for 127.0.0.1 at 2012-07-25 15:01:50 +0000
+Processing by ExampleController#restricted as HTML
+Authenticating with gds_sso strategy
+Completed   in 0ms
+
+
+Started GET "/auth/gds" for 127.0.0.1 at 2012-07-25 15:01:50 +0000
+
+
+Started GET "/auth/gds/callback?code=102a2cbbb16ff4b2c06f6c1f0849cfe2e0042d7af75dd713137cf9e321c98300&state=2730f3347a63616a407034c1a593af073c32a3b7725e0409" for 127.0.0.1 at 2012-07-25 15:01:51 +0000
+Processing by AuthenticationsController#callback as HTML
+  Parameters: {"code"=>"102a2cbbb16ff4b2c06f6c1f0849cfe2e0042d7af75dd713137cf9e321c98300", "state"=>"2730f3347a63616a407034c1a593af073c32a3b7725e0409"}
+Authenticating with gds_sso strategy
+  User Load (0.2ms)  SELECT "users".* FROM "users" WHERE "users"."uid" = 'integration-uid' LIMIT 1
+   (0.0ms)  begin transaction
+   (0.3ms)  UPDATE "users" SET "permissions" = '--- 
+GDS_SSO integration test: 
+- signin
+' WHERE "users"."id" = 1
+   (43.6ms)  commit transaction
+   (0.1ms)  begin transaction
+   (0.3ms)  UPDATE "users" SET "remotely_signed_out" = 'f', "permissions" = '--- 
+GDS_SSO integration test: 
+- signin
+' WHERE "users"."id" = 1
+   (3.5ms)  commit transaction
+Redirected to http://www.example-client.com/restricted
+Completed 302 Found in 53ms (ActiveRecord: 48.0ms)
+
+
+Started GET "/restricted" for 127.0.0.1 at 2012-07-25 15:01:51 +0000
+Processing by ExampleController#restricted as HTML
+  User Load (0.1ms)  SELECT "users".* FROM "users" WHERE "users"."uid" = 'integration-uid' LIMIT 1
+Completed 200 OK in 1ms (Views: 0.4ms | ActiveRecord: 0.1ms)
+
+
+Started GET "/restricted" for 127.0.0.1 at 2012-07-25 15:01:51 +0000
+Processing by ExampleController#restricted as JSON
+Authenticating with gds_sso_api_access strategy
+Completed   in 15ms
+
+
+Started GET "/restricted" for 127.0.0.1 at 2012-07-25 15:01:51 +0000
+Processing by ExampleController#restricted as JSON
+Authenticating with gds_sso_api_access strategy
+Completed 200 OK in 1ms (Views: 0.6ms | ActiveRecord: 0.0ms)
+
+
+Started GET "/this_requires_signin_permission" for 127.0.0.1 at 2012-07-25 15:01:51 +0000
+Processing by ExampleController#this_requires_signin_permission as JSON
+Authenticating with gds_sso_api_access strategy
+Completed 200 OK in 1ms (Views: 0.4ms | ActiveRecord: 0.0ms)
+   (0.2ms)  begin transaction
+  SQL (0.4ms)  INSERT INTO "users" ("email", "name", "permissions", "remotely_signed_out", "uid") VALUES (?, ?, ?, ?, ?)  [["email", "old@domain.com"], ["name", "Moshua Jarshall"], ["permissions", "--- \nGDS_SSO integration test: \n- signin\n"], ["remotely_signed_out", nil], ["uid", "a1s2d38574"]]
+   (20.2ms)  commit transaction
+WARNING: Can't mass-assign protected attributes: uid, name, permissions
+Processing by Api::UserController#update as HTML
+  Parameters: {"uid"=>"a1s2d38574"}
+Completed 403 Forbidden in 3ms (Views: 2.0ms | ActiveRecord: 0.0ms)
+   (0.1ms)  begin transaction
+  SQL (0.3ms)  INSERT INTO "users" ("email", "name", "permissions", "remotely_signed_out", "uid") VALUES (?, ?, ?, ?, ?)  [["email", "old@domain.com"], ["name", "Moshua Jarshall"], ["permissions", "--- \nGDS_SSO integration test: \n- signin\n"], ["remotely_signed_out", nil], ["uid", "a1s2d32453"]]
+   (13.1ms)  commit transaction
+Processing by Api::UserController#update as HTML
+  Parameters: {"uid"=>"a1s2d32453"}
+  User Load (0.2ms)  SELECT "users".* FROM "users" WHERE "users"."uid" = 'a1s2d32453' LIMIT 1
+   (0.0ms)  begin transaction
+   (0.2ms)  UPDATE "users" SET "email" = 'user@domain.com', "name" = 'Joshua Marshall', "permissions" = '--- 
+GDS_SSO integration test: 
+- signin
+- new permission
+' WHERE "users"."id" = 3
+   (7.1ms)  commit transaction
+Completed 200 OK in 11ms (ActiveRecord: 7.6ms)
+  User Load (0.2ms)  SELECT "users".* FROM "users" WHERE "users"."id" = ? LIMIT 1  [["id", 3]]
+   (0.1ms)  begin transaction
+  SQL (0.2ms)  INSERT INTO "users" ("email", "name", "permissions", "remotely_signed_out", "uid") VALUES (?, ?, ?, ?, ?)  [["email", "old@domain.com"], ["name", "Moshua Jarshall"], ["permissions", "--- \nGDS_SSO integration test: \n- signin\n"], ["remotely_signed_out", nil], ["uid", "a1s2d3809"]]
+   (4.6ms)  commit transaction
+WARNING: Can't mass-assign protected attributes: uid, name, permissions
+Processing by Api::UserController#reauth as HTML
+  Parameters: {"uid"=>"a1s2d3809"}
+Completed 403 Forbidden in 2ms (Views: 1.1ms | ActiveRecord: 0.0ms)
+   (0.1ms)  begin transaction
+  SQL (0.3ms)  INSERT INTO "users" ("email", "name", "permissions", "remotely_signed_out", "uid") VALUES (?, ?, ?, ?, ?)  [["email", "old@domain.com"], ["name", "Moshua Jarshall"], ["permissions", "--- \nGDS_SSO integration test: \n- signin\n"], ["remotely_signed_out", nil], ["uid", "a1s2d3371"]]
+   (3.0ms)  commit transaction
+Processing by Api::UserController#reauth as HTML
+  Parameters: {"uid"=>"a1s2d3371"}
+  User Load (0.2ms)  SELECT "users".* FROM "users" WHERE "users"."uid" = 'a1s2d3371' LIMIT 1
+   (0.0ms)  begin transaction
+   (0.2ms)  UPDATE "users" SET "remotely_signed_out" = 't', "permissions" = '--- 
+GDS_SSO integration test: 
+- signin
+' WHERE "users"."id" = 5
+   (20.5ms)  commit transaction
+Completed 200 OK in 24ms (ActiveRecord: 21.0ms)
+  User Load (0.1ms)  SELECT "users".* FROM "users" WHERE "users"."id" = ? LIMIT 1  [["id", 5]]

metadata

@@ -2,7 +2,7 @@
 name: gds-sso
 version: !ruby/object:Gem::Version 
   prerelease: 
-  version: 1.1.0
+  version: 1.1.1
 platform: ruby
 authors: 
 - Matt Patterson
@@ -11,7 +11,7 @@ autorequire:
 bindir: bin
 cert_chain: []
 
-date: 2012-07-24 00:00:00 Z
+date: 2012-07-25 00:00:00 Z
 dependencies: 
 - !ruby/object:Gem::Dependency 
   name: rails
@@ -219,7 +219,7 @@ required_ruby_version: !ruby/object:Gem::Requirement
   requirements: 
   - - ">="
     - !ruby/object:Gem::Version 
-      hash: 345014879888302540
+      hash: 914790435544343871
       segments: 
       - 0
       version: "0"
@@ -228,7 +228,7 @@ required_rubygems_version: !ruby/object:Gem::Requirement
   requirements: 
   - - ">="
     - !ruby/object:Gem::Version 
-      hash: 345014879888302540
+      hash: 914790435544343871
       segments: 
       - 0
       version: "0"