gds-sso 9.2.7 → 9.3.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (13) hide show
  1. data/Gemfile +7 -0
  2. data/lib/gds-sso.rb +2 -5
  3. data/lib/gds-sso/bearer_token.rb +62 -0
  4. data/lib/gds-sso/config.rb +4 -0
  5. data/lib/gds-sso/failure_app.rb +3 -1
  6. data/lib/gds-sso/version.rb +1 -1
  7. data/lib/gds-sso/warden_config.rb +5 -100
  8. data/spec/fixtures/integration/authorize_api_users.sql +5 -2
  9. data/spec/fixtures/integration/signonotron2.sql +8 -2
  10. data/spec/internal/db/combustion_test.sqlite +0 -0
  11. data/spec/internal/log/test.log +260 -224
  12. data/spec/requests/end_to_end_spec.rb +6 -0
  13. metadata +71 -54
data/spec/requests/end_to_end_spec.rb CHANGED
@@ -171,5 +171,11 @@ describe "Integration of client using GDS-SSO with signonotron" do
171
171
  visit "http://#{@client_host}/this_requires_signin_permission"
172
172
  expect(page).to have_content('you have signin permission')
173
173
  end
174
+
175
+ specify "a token for one app cannot be used to access a different app" do
176
+ page.driver.header 'authorization', "Bearer 98c72f4da02fdc43398e029d05567542944d2a9b0df3c20b0accd8bd6c5dc728"
177
+ visit "http://#{@client_host}/restricted"
178
+ expect(page.driver.response.status).to eq(401)
179
+ end
174
180
  end
175
181
  end
metadata CHANGED
@@ -1,7 +1,7 @@
1
1
  --- !ruby/object:Gem::Specification
2
2
  name: gds-sso
3
3
  version: !ruby/object:Gem::Version
4
- version: 9.2.7
4
+ version: 9.3.0
5
5
  prerelease:
6
6
  platform: ruby
7
7
  authors:
@@ -10,7 +10,7 @@ authors:
10
10
  autorequire:
11
11
  bindir: bin
12
12
  cert_chain: []
13
- date: 2014-05-28 00:00:00.000000000 Z
13
+ date: 2014-07-18 00:00:00.000000000 Z
14
14
  dependencies:
15
15
  - !ruby/object:Gem::Dependency
16
16
  name: rails
@@ -45,29 +45,29 @@ dependencies:
45
45
  - !ruby/object:Gem::Version
46
46
  version: '1.2'
47
47
  - !ruby/object:Gem::Dependency
48
- name: omniauth-gds
48
+ name: oauth2
49
49
  requirement: !ruby/object:Gem::Requirement
50
50
  none: false
51
51
  requirements:
52
- - - ! '>='
52
+ - - ~>
53
53
  - !ruby/object:Gem::Version
54
- version: 3.0.0
54
+ version: '1.0'
55
55
  type: :runtime
56
56
  prerelease: false
57
57
  version_requirements: !ruby/object:Gem::Requirement
58
58
  none: false
59
59
  requirements:
60
- - - ! '>='
60
+ - - ~>
61
61
  - !ruby/object:Gem::Version
62
- version: 3.0.0
62
+ version: '1.0'
63
63
  - !ruby/object:Gem::Dependency
64
- name: rack-accept
64
+ name: omniauth
65
65
  requirement: !ruby/object:Gem::Requirement
66
66
  none: false
67
67
  requirements:
68
68
  - - ~>
69
69
  - !ruby/object:Gem::Version
70
- version: 0.4.4
70
+ version: '1.2'
71
71
  type: :runtime
72
72
  prerelease: false
73
73
  version_requirements: !ruby/object:Gem::Requirement
@@ -75,63 +75,79 @@ dependencies:
75
75
  requirements:
76
76
  - - ~>
77
77
  - !ruby/object:Gem::Version
78
- version: 0.4.4
78
+ version: '1.2'
79
79
  - !ruby/object:Gem::Dependency
80
- name: rake
80
+ name: omniauth-gds
81
81
  requirement: !ruby/object:Gem::Requirement
82
82
  none: false
83
83
  requirements:
84
- - - '='
84
+ - - ~>
85
85
  - !ruby/object:Gem::Version
86
- version: 0.9.2.2
87
- type: :development
86
+ version: '3.1'
87
+ type: :runtime
88
88
  prerelease: false
89
89
  version_requirements: !ruby/object:Gem::Requirement
90
90
  none: false
91
91
  requirements:
92
- - - '='
92
+ - - ~>
93
93
  - !ruby/object:Gem::Version
94
- version: 0.9.2.2
94
+ version: '3.1'
95
95
  - !ruby/object:Gem::Dependency
96
- name: capybara
96
+ name: warden-oauth2
97
97
  requirement: !ruby/object:Gem::Requirement
98
98
  none: false
99
99
  requirements:
100
- - - '='
100
+ - - ~>
101
101
  - !ruby/object:Gem::Version
102
- version: 1.1.2
103
- type: :development
102
+ version: 0.0.1
103
+ type: :runtime
104
104
  prerelease: false
105
105
  version_requirements: !ruby/object:Gem::Requirement
106
106
  none: false
107
107
  requirements:
108
- - - '='
108
+ - - ~>
109
109
  - !ruby/object:Gem::Version
110
- version: 1.1.2
110
+ version: 0.0.1
111
111
  - !ruby/object:Gem::Dependency
112
- name: rspec-rails
112
+ name: rack-accept
113
113
  requirement: !ruby/object:Gem::Requirement
114
114
  none: false
115
115
  requirements:
116
- - - '='
116
+ - - ~>
117
117
  - !ruby/object:Gem::Version
118
- version: 2.14.1
119
- type: :development
118
+ version: 0.4.4
119
+ type: :runtime
120
120
  prerelease: false
121
121
  version_requirements: !ruby/object:Gem::Requirement
122
122
  none: false
123
123
  requirements:
124
- - - '='
124
+ - - ~>
125
125
  - !ruby/object:Gem::Version
126
- version: 2.14.1
126
+ version: 0.4.4
127
127
  - !ruby/object:Gem::Dependency
128
- name: capybara-mechanize
128
+ name: multi_json
129
+ requirement: !ruby/object:Gem::Requirement
130
+ none: false
131
+ requirements:
132
+ - - ~>
133
+ - !ruby/object:Gem::Version
134
+ version: '1.0'
135
+ type: :runtime
136
+ prerelease: false
137
+ version_requirements: !ruby/object:Gem::Requirement
138
+ none: false
139
+ requirements:
140
+ - - ~>
141
+ - !ruby/object:Gem::Version
142
+ version: '1.0'
143
+ - !ruby/object:Gem::Dependency
144
+ name: rake
129
145
  requirement: !ruby/object:Gem::Requirement
130
146
  none: false
131
147
  requirements:
132
148
  - - '='
133
149
  - !ruby/object:Gem::Version
134
- version: 0.3.0
150
+ version: 0.9.2.2
135
151
  type: :development
136
152
  prerelease: false
137
153
  version_requirements: !ruby/object:Gem::Requirement
@@ -139,15 +155,15 @@ dependencies:
139
155
  requirements:
140
156
  - - '='
141
157
  - !ruby/object:Gem::Version
142
- version: 0.3.0
158
+ version: 0.9.2.2
143
159
  - !ruby/object:Gem::Dependency
144
- name: combustion
160
+ name: capybara
145
161
  requirement: !ruby/object:Gem::Requirement
146
162
  none: false
147
163
  requirements:
148
164
  - - '='
149
165
  - !ruby/object:Gem::Version
150
- version: 0.5.1
166
+ version: 1.1.2
151
167
  type: :development
152
168
  prerelease: false
153
169
  version_requirements: !ruby/object:Gem::Requirement
@@ -155,15 +171,15 @@ dependencies:
155
171
  requirements:
156
172
  - - '='
157
173
  - !ruby/object:Gem::Version
158
- version: 0.5.1
174
+ version: 1.1.2
159
175
  - !ruby/object:Gem::Dependency
160
- name: gem_publisher
176
+ name: rspec-rails
161
177
  requirement: !ruby/object:Gem::Requirement
162
178
  none: false
163
179
  requirements:
164
180
  - - '='
165
181
  - !ruby/object:Gem::Version
166
- version: 1.0.0
182
+ version: 2.14.1
167
183
  type: :development
168
184
  prerelease: false
169
185
  version_requirements: !ruby/object:Gem::Requirement
@@ -171,15 +187,15 @@ dependencies:
171
187
  requirements:
172
188
  - - '='
173
189
  - !ruby/object:Gem::Version
174
- version: 1.0.0
190
+ version: 2.14.1
175
191
  - !ruby/object:Gem::Dependency
176
- name: sqlite3
192
+ name: capybara-mechanize
177
193
  requirement: !ruby/object:Gem::Requirement
178
194
  none: false
179
195
  requirements:
180
196
  - - '='
181
197
  - !ruby/object:Gem::Version
182
- version: 1.3.6
198
+ version: 0.3.0
183
199
  type: :development
184
200
  prerelease: false
185
201
  version_requirements: !ruby/object:Gem::Requirement
@@ -187,15 +203,15 @@ dependencies:
187
203
  requirements:
188
204
  - - '='
189
205
  - !ruby/object:Gem::Version
190
- version: 1.3.6
206
+ version: 0.3.0
191
207
  - !ruby/object:Gem::Dependency
192
- name: timecop
208
+ name: combustion
193
209
  requirement: !ruby/object:Gem::Requirement
194
210
  none: false
195
211
  requirements:
196
212
  - - '='
197
213
  - !ruby/object:Gem::Version
198
- version: 0.3.5
214
+ version: 0.5.1
199
215
  type: :development
200
216
  prerelease: false
201
217
  version_requirements: !ruby/object:Gem::Requirement
@@ -203,15 +219,15 @@ dependencies:
203
219
  requirements:
204
220
  - - '='
205
221
  - !ruby/object:Gem::Version
206
- version: 0.3.5
222
+ version: 0.5.1
207
223
  - !ruby/object:Gem::Dependency
208
- name: selenium-webdriver
224
+ name: gem_publisher
209
225
  requirement: !ruby/object:Gem::Requirement
210
226
  none: false
211
227
  requirements:
212
228
  - - '='
213
229
  - !ruby/object:Gem::Version
214
- version: 2.35.1
230
+ version: 1.0.0
215
231
  type: :development
216
232
  prerelease: false
217
233
  version_requirements: !ruby/object:Gem::Requirement
@@ -219,15 +235,15 @@ dependencies:
219
235
  requirements:
220
236
  - - '='
221
237
  - !ruby/object:Gem::Version
222
- version: 2.35.1
238
+ version: 1.0.0
223
239
  - !ruby/object:Gem::Dependency
224
- name: mechanize
240
+ name: sqlite3
225
241
  requirement: !ruby/object:Gem::Requirement
226
242
  none: false
227
243
  requirements:
228
244
  - - '='
229
245
  - !ruby/object:Gem::Version
230
- version: 2.6.0
246
+ version: 1.3.6
231
247
  type: :development
232
248
  prerelease: false
233
249
  version_requirements: !ruby/object:Gem::Requirement
@@ -235,15 +251,15 @@ dependencies:
235
251
  requirements:
236
252
  - - '='
237
253
  - !ruby/object:Gem::Version
238
- version: 2.6.0
254
+ version: 1.3.6
239
255
  - !ruby/object:Gem::Dependency
240
- name: thor
256
+ name: timecop
241
257
  requirement: !ruby/object:Gem::Requirement
242
258
  none: false
243
259
  requirements:
244
260
  - - '='
245
261
  - !ruby/object:Gem::Version
246
- version: 0.14.6
262
+ version: 0.3.5
247
263
  type: :development
248
264
  prerelease: false
249
265
  version_requirements: !ruby/object:Gem::Requirement
@@ -251,7 +267,7 @@ dependencies:
251
267
  requirements:
252
268
  - - '='
253
269
  - !ruby/object:Gem::Version
254
- version: 0.14.6
270
+ version: 0.3.5
255
271
  description: Client for GDS' OAuth 2-based SSO
256
272
  email:
257
273
  - matt@constituentparts.com
@@ -268,6 +284,7 @@ files:
268
284
  - app/controllers/api/user_controller.rb
269
285
  - config/routes.rb
270
286
  - lib/gds-sso/controller_methods.rb
287
+ - lib/gds-sso/bearer_token.rb
271
288
  - lib/gds-sso/version.rb
272
289
  - lib/gds-sso/config.rb
273
290
  - lib/gds-sso/failure_app.rb
@@ -315,7 +332,7 @@ required_ruby_version: !ruby/object:Gem::Requirement
315
332
  version: '0'
316
333
  segments:
317
334
  - 0
318
- hash: 2232045673608108883
335
+ hash: -273519884690560048
319
336
  required_rubygems_version: !ruby/object:Gem::Requirement
320
337
  none: false
321
338
  requirements:
@@ -324,7 +341,7 @@ required_rubygems_version: !ruby/object:Gem::Requirement
324
341
  version: '0'
325
342
  segments:
326
343
  - 0
327
- hash: 2232045673608108883
344
+ hash: -273519884690560048
328
345
  requirements: []
329
346
  rubyforge_project: gds-sso
330
347
  rubygems_version: 1.8.23