googleauth 0.9.0 → 0.17.1

data/Rakefile

@@ -1,89 +0,0 @@
-# -*- ruby -*-
-require "bundler/gem_tasks"
-
-task :ci do
-  header "Using Ruby - #{RUBY_VERSION}"
-  sh "bundle exec rubocop"
-  sh "bundle exec rspec"
-end
-
-task :release, :tag do |_t, args|
-  tag = args[:tag]
-  raise "You must provide a tag to release." if tag.nil?
-
-  # Verify the tag format "vVERSION"
-  m = tag.match(/v(?<version>\S*)/)
-  raise "Tag #{tag} does not match the expected format." if m.nil?
-
-  version = m[:version]
-  raise "You must provide a version." if version.nil?
-
-  api_token = ENV["RUBYGEMS_API_TOKEN"]
-
-  require "gems"
-  if api_token
-    ::Gems.configure do |config|
-      config.key = api_token
-    end
-  end
-
-  Bundler.with_clean_env do
-    sh "rm -rf pkg"
-    sh "bundle update"
-    sh "bundle exec rake build"
-  end
-
-  path_to_be_pushed = "pkg/#{version}.gem"
-  if File.file? path_to_be_pushed
-    begin
-      ::Gems.push File.new(path_to_be_pushed)
-      puts "Successfully built and pushed googleauth for version #{version}"
-    rescue StandardError => e
-      puts "Error while releasing googleauth version #{version}: #{e.message}"
-    end
-  else
-    raise "Cannot build googleauth for version #{version}"
-  end
-end
-
-namespace :kokoro do
-  task :load_env_vars do
-    service_account = "#{ENV['KOKORO_GFILE_DIR']}/service-account.json"
-    ENV["GOOGLE_APPLICATION_CREDENTIALS"] = service_account
-    filename = "#{ENV['KOKORO_GFILE_DIR']}/env_vars.json"
-    env_vars = JSON.parse File.read(filename)
-    env_vars.each { |k, v| ENV[k] = v }
-  end
-
-  task :presubmit do
-    Rake::Task["ci"].invoke
-  end
-
-  task :continuous do
-    Rake::Task["ci"].invoke
-  end
-
-  task :nightly do
-    Rake::Task["ci"].invoke
-  end
-
-  task :release do
-    version = "0.1.0"
-    Bundler.with_clean_env do
-      version = `bundle exec gem list`
-                .split("\n").select { |line| line.include? "googleauth" }
-                .first.split("(").last.split(")").first || "0.1.0"
-    end
-    Rake::Task["kokoro:load_env_vars"].invoke
-    Rake::Task["release"].invoke "v/#{version}"
-  end
-end
-
-def header str, token = "#"
-  line_length = str.length + 8
-  puts ""
-  puts token * line_length
-  puts "#{token * 3} #{str} #{token * 3}"
-  puts token * line_length
-  puts ""
-end

data/googleauth.gemspec

@@ -1,35 +0,0 @@
-# -*- ruby -*-
-# encoding: utf-8
-
-$LOAD_PATH.push File.expand_path("../lib", __FILE__)
-require "googleauth/version"
-
-Gem::Specification.new do |gem|
-  gem.name          = "googleauth"
-  gem.version       = Google::Auth::VERSION
-  gem.authors       = ["Tim Emiola"]
-  gem.email         = "temiola@google.com"
-  gem.homepage      = "https://github.com/google/google-auth-library-ruby"
-  gem.summary       = "Google Auth Library for Ruby"
-  gem.license       = "Apache-2.0"
-  gem.description   = <<-DESCRIPTION
-   Allows simple authorization for accessing Google APIs.
-   Provide support for Application Default Credentials, as described at
-   https://developers.google.com/accounts/docs/application-default-credentials
-  DESCRIPTION
-
-  gem.files         = `git ls-files`.split "\n"
-  gem.test_files    = `git ls-files -- spec/*`.split "\n"
-  gem.executables   = `git ls-files -- bin/*.rb`.split("\n").map do |f|
-    File.basename f
-  end
-  gem.require_paths = ["lib"]
-  gem.platform      = Gem::Platform::RUBY
-
-  gem.add_dependency "faraday", "~> 0.12"
-  gem.add_dependency "jwt", ">= 1.4", "< 3.0"
-  gem.add_dependency "memoist", "~> 0.16"
-  gem.add_dependency "multi_json", "~> 1.11"
-  gem.add_dependency "os", ">= 0.9", "< 2.0"
-  gem.add_dependency "signet", "~> 0.7"
-end

data/spec/googleauth/apply_auth_examples.rb

@@ -1,148 +0,0 @@
-# Copyright 2015, Google Inc.
-# All rights reserved.
-#
-# Redistribution and use in source and binary forms, with or without
-# modification, are permitted provided that the following conditions are
-# met:
-#
-#     * Redistributions of source code must retain the above copyright
-# notice, this list of conditions and the following disclaimer.
-#     * Redistributions in binary form must reproduce the above
-# copyright notice, this list of conditions and the following disclaimer
-# in the documentation and/or other materials provided with the
-# distribution.
-#     * Neither the name of Google Inc. nor the names of its
-# contributors may be used to endorse or promote products derived from
-# this software without specific prior written permission.
-#
-# THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS
-# "AS IS" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT
-# LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR
-# A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT
-# OWNER OR CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL,
-# SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT
-# LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE,
-# DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY
-# THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT
-# (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE
-# OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
-
-spec_dir = File.expand_path File.join(File.dirname(__FILE__))
-$LOAD_PATH.unshift spec_dir
-$LOAD_PATH.uniq!
-
-require "faraday"
-require "spec_helper"
-
-shared_examples "apply/apply! are OK" do
-  let(:auth_key) { :authorization }
-
-  # tests that use these examples need to define
-  #
-  # @client which should be an auth client
-  #
-  # @make_auth_stubs, which should stub out the expected http behaviour of the
-  # auth client
-  describe "#fetch_access_token" do
-    let(:token) { "1/abcdef1234567890" }
-    let :stub do
-      make_auth_stubs access_token: token
-    end
-
-    it "should set access_token to the fetched value" do
-      stub
-      @client.fetch_access_token!
-      expect(@client.access_token).to eq(token)
-      expect(stub).to have_been_requested
-    end
-
-    it "should notify refresh listeners after updating" do
-      stub
-      expect do |b|
-        @client.on_refresh(&b)
-        @client.fetch_access_token!
-      end.to yield_with_args(have_attributes(
-                               access_token: "1/abcdef1234567890"
-                             ))
-      expect(stub).to have_been_requested
-    end
-  end
-
-  describe "#apply!" do
-    it "should update the target hash with fetched access token" do
-      token = "1/abcdef1234567890"
-      stub = make_auth_stubs access_token: token
-
-      md = { foo: "bar" }
-      @client.apply! md
-      want = { :foo => "bar", auth_key => "Bearer #{token}" }
-      expect(md).to eq(want)
-      expect(stub).to have_been_requested
-    end
-  end
-
-  describe "updater_proc" do
-    it "should provide a proc that updates a hash with the access token" do
-      token = "1/abcdef1234567890"
-      stub = make_auth_stubs access_token: token
-      md = { foo: "bar" }
-      the_proc = @client.updater_proc
-      got = the_proc.call md
-      want = { :foo => "bar", auth_key => "Bearer #{token}" }
-      expect(got).to eq(want)
-      expect(stub).to have_been_requested
-    end
-  end
-
-  describe "#apply" do
-    it "should not update the original hash with the access token" do
-      token = "1/abcdef1234567890"
-      stub = make_auth_stubs access_token: token
-
-      md = { foo: "bar" }
-      @client.apply md
-      want = { foo: "bar" }
-      expect(md).to eq(want)
-      expect(stub).to have_been_requested
-    end
-
-    it "should add the token to the returned hash" do
-      token = "1/abcdef1234567890"
-      stub = make_auth_stubs access_token: token
-
-      md = { foo: "bar" }
-      got = @client.apply md
-      want = { :foo => "bar", auth_key => "Bearer #{token}" }
-      expect(got).to eq(want)
-      expect(stub).to have_been_requested
-    end
-
-    it "should not fetch a new token if the current is not expired" do
-      token = "1/abcdef1234567890"
-      stub = make_auth_stubs access_token: token
-
-      n = 5 # arbitrary
-      n.times do |_t|
-        md = { foo: "bar" }
-        got = @client.apply md
-        want = { :foo => "bar", auth_key => "Bearer #{token}" }
-        expect(got).to eq(want)
-      end
-      expect(stub).to have_been_requested
-    end
-
-    it "should fetch a new token if the current one is expired" do
-      token1 = "1/abcdef1234567890"
-      token2 = "2/abcdef1234567891"
-
-      [token1, token2].each do |t|
-        make_auth_stubs access_token: t
-        md = { foo: "bar" }
-        got = @client.apply md
-        want = { :foo => "bar", auth_key => "Bearer #{t}" }
-        expect(got).to eq(want)
-        @client.expires_at -= 3601 # default is to expire in 1hr
-      end
-    end
-  end
-end

data/spec/googleauth/client_id_spec.rb

@@ -1,160 +0,0 @@
-# Copyright 2015, Google Inc.
-# All rights reserved.
-#
-# Redistribution and use in source and binary forms, with or without
-# modification, are permitted provided that the following conditions are
-# met:
-#
-#     * Redistributions of source code must retain the above copyright
-# notice, this list of conditions and the following disclaimer.
-#     * Redistributions in binary form must reproduce the above
-# copyright notice, this list of conditions and the following disclaimer
-# in the documentation and/or other materials provided with the
-# distribution.
-#     * Neither the name of Google Inc. nor the names of its
-# contributors may be used to endorse or promote products derived from
-# this software without specific prior written permission.
-#
-# THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS
-# "AS IS" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT
-# LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR
-# A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT
-# OWNER OR CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL,
-# SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT
-# LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE,
-# DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY
-# THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT
-# (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE
-# OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
-
-spec_dir = File.expand_path File.join(File.dirname(__FILE__))
-$LOAD_PATH.unshift spec_dir
-$LOAD_PATH.uniq!
-
-require "spec_helper"
-require "fakefs/safe"
-require "googleauth"
-
-describe Google::Auth::ClientId do
-  shared_examples "it has a valid config" do
-    it "should include a valid id" do
-      expect(client_id.id).to eql "abc@example.com"
-    end
-
-    it "should include a valid secret" do
-      expect(client_id.secret).to eql "notasecret"
-    end
-  end
-
-  shared_examples "it can successfully load client_id" do
-    context "loaded from hash" do
-      let(:client_id) { Google::Auth::ClientId.from_hash config }
-
-      it_behaves_like "it has a valid config"
-    end
-
-    context "loaded from file" do
-      file_path = "/client_secrets.json"
-
-      let :client_id do
-        FakeFS do
-          content = MultiJson.dump config
-          File.write file_path, content
-          Google::Auth::ClientId.from_file file_path
-        end
-      end
-
-      it_behaves_like "it has a valid config"
-    end
-  end
-
-  describe "with web config" do
-    let :config do
-      {
-        "web" => {
-          "client_id"     => "abc@example.com",
-          "client_secret" => "notasecret"
-        }
-      }
-    end
-    it_behaves_like "it can successfully load client_id"
-  end
-
-  describe "with installed app config" do
-    let :config do
-      {
-        "installed" => {
-          "client_id"     => "abc@example.com",
-          "client_secret" => "notasecret"
-        }
-      }
-    end
-    it_behaves_like "it can successfully load client_id"
-  end
-
-  context "with missing top level property" do
-    let :config do
-      {
-        "notvalid" => {
-          "client_id"     => "abc@example.com",
-          "client_secret" => "notasecret"
-        }
-      }
-    end
-
-    it "should raise error" do
-      expect { Google::Auth::ClientId.from_hash config }.to raise_error(
-        /Expected top level property/
-      )
-    end
-  end
-
-  context "with missing client id" do
-    let :config do
-      {
-        "web" => {
-          "client_secret" => "notasecret"
-        }
-      }
-    end
-
-    it "should raise error" do
-      expect { Google::Auth::ClientId.from_hash config }.to raise_error(
-        /Client id can not be nil/
-      )
-    end
-  end
-
-  context "with missing client secret" do
-    let :config do
-      {
-        "web" => {
-          "client_id" => "abc@example.com"
-        }
-      }
-    end
-
-    it "should raise error" do
-      expect { Google::Auth::ClientId.from_hash config }.to raise_error(
-        /Client secret can not be nil/
-      )
-    end
-  end
-
-  context "with cloud sdk credentials" do
-    let :config do
-      {
-        "web" => {
-          "client_id"     => Google::Auth::CredentialsLoader::CLOUD_SDK_CLIENT_ID,
-          "client_secret" => "notasecret"
-        }
-      }
-    end
-
-    it "should raise warning" do
-      expect { Google::Auth::ClientId.from_hash config }.to output(
-        Google::Auth::CredentialsLoader::CLOUD_SDK_CREDENTIALS_WARNING + "\n"
-      ).to_stderr
-    end
-  end
-end

data/spec/googleauth/compute_engine_spec.rb

@@ -1,122 +0,0 @@
-# Copyright 2015, Google Inc.
-# All rights reserved.
-#
-# Redistribution and use in source and binary forms, with or without
-# modification, are permitted provided that the following conditions are
-# met:
-#
-#     * Redistributions of source code must retain the above copyright
-# notice, this list of conditions and the following disclaimer.
-#     * Redistributions in binary form must reproduce the above
-# copyright notice, this list of conditions and the following disclaimer
-# in the documentation and/or other materials provided with the
-# distribution.
-#     * Neither the name of Google Inc. nor the names of its
-# contributors may be used to endorse or promote products derived from
-# this software without specific prior written permission.
-#
-# THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS
-# "AS IS" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT
-# LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR
-# A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT
-# OWNER OR CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL,
-# SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT
-# LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE,
-# DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY
-# THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT
-# (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE
-# OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
-
-spec_dir = File.expand_path File.join(File.dirname(__FILE__))
-$LOAD_PATH.unshift spec_dir
-$LOAD_PATH.uniq!
-
-require "apply_auth_examples"
-require "faraday"
-require "googleauth/compute_engine"
-require "spec_helper"
-
-describe Google::Auth::GCECredentials do
-  MD_URI = "http://169.254.169.254/computeMetadata/v1/instance/service-accounts/default/token".freeze
-  GCECredentials = Google::Auth::GCECredentials
-
-  before :example do
-    @client = GCECredentials.new
-  end
-
-  def make_auth_stubs opts = {}
-    access_token = opts[:access_token] || ""
-    body = MultiJson.dump("access_token" => access_token,
-                          "token_type"   => "Bearer",
-                          "expires_in"   => 3600)
-    stub_request(:get, MD_URI)
-      .with(headers: { "Metadata-Flavor" => "Google" })
-      .to_return(body:    body,
-                 status:  200,
-                 headers: { "Content-Type" => "application/json" })
-  end
-
-  it_behaves_like "apply/apply! are OK"
-
-  context "metadata is unavailable" do
-    describe "#fetch_access_token" do
-      it "should fail if the metadata request returns a 404" do
-        stub = stub_request(:get, MD_URI)
-               .to_return(status:  404,
-                          headers: { "Metadata-Flavor" => "Google" })
-        expect { @client.fetch_access_token! }
-          .to raise_error Signet::AuthorizationError
-        expect(stub).to have_been_requested
-      end
-
-      it "should fail if the metadata request returns an unexpected code" do
-        stub = stub_request(:get, MD_URI)
-               .to_return(status:  503,
-                          headers: { "Metadata-Flavor" => "Google" })
-        expect { @client.fetch_access_token! }
-          .to raise_error Signet::AuthorizationError
-        expect(stub).to have_been_requested
-      end
-
-      it "should fail with Signet::AuthorizationError if request times out" do
-        allow_any_instance_of(Faraday::Connection).to receive(:get)
-          .and_raise(Faraday::TimeoutError)
-        expect { @client.fetch_access_token! }
-          .to raise_error Signet::AuthorizationError
-      end
-
-      it "should fail with Signet::AuthorizationError if request fails" do
-        allow_any_instance_of(Faraday::Connection).to receive(:get)
-          .and_raise(Faraday::ConnectionFailed, nil)
-        expect { @client.fetch_access_token! }
-          .to raise_error Signet::AuthorizationError
-      end
-    end
-  end
-
-  describe "#on_gce?" do
-    it "should be true when Metadata-Flavor is Google" do
-      stub = stub_request(:get, "http://169.254.169.254")
-             .to_return(status:  200,
-                        headers: { "Metadata-Flavor" => "Google" })
-      expect(GCECredentials.on_gce?({}, true)).to eq(true)
-      expect(stub).to have_been_requested
-    end
-
-    it "should be false when Metadata-Flavor is not Google" do
-      stub = stub_request(:get, "http://169.254.169.254")
-             .to_return(status:  200,
-                        headers: { "Metadata-Flavor" => "NotGoogle" })
-      expect(GCECredentials.on_gce?({}, true)).to eq(false)
-      expect(stub).to have_been_requested
-    end
-
-    it "should be false if the response is not 200" do
-      stub = stub_request(:get, "http://169.254.169.254")
-             .to_return(status:  404,
-                        headers: { "Metadata-Flavor" => "NotGoogle" })
-      expect(GCECredentials.on_gce?({}, true)).to eq(false)
-      expect(stub).to have_been_requested
-    end
-  end
-end