iap_authenticator 0.1.0

checksums.yaml

@@ -0,0 +1,7 @@
+---
+SHA256:
+  metadata.gz: e7d44fd34a60c35266cca3d5dd8bff570dd910f59968b35cde972d38ebccdc71
+  data.tar.gz: 1f653bc70f6f01e2133c39953238adfe81f249e38b78c716ebd1f48ad9554689
+SHA512:
+  metadata.gz: 3029eb2689b19c6b1f6050a78511161fd91c3bbcd3d6d869d5b06df313bfab9c3eab346394a5919ad51987266b0468d2d55fcb38c559dee5546cd6284dd85a52
+  data.tar.gz: b6f0eb602ea1be001072ab38feffd320774843b0987bbac567900dec5eee8f54221e9434ac22aa93213dfeec3205783b53a3ef8c01adf7b36cbba224bca35a33

data/lib/iap_authenticator/configuration.rb

@@ -0,0 +1,54 @@
+module IapAuthenticator
+  class Configuration
+    def initialize
+      @configuration = OpenStruct.new
+    end
+
+    def service_account_credentials_path
+      @configuration.service_account_credentials_path
+    end
+
+    def service_account_credentials_path=(service_account_credentials_path)
+      @configuration.service_account_credentials_path = service_account_credentials_path
+    end
+
+    def client_id
+      @configuration.client_id
+    end
+
+    def client_id=(client_id)
+      @configuration.client_id = client_id
+    end
+
+    def refresh_time_seconds
+      @configuration.refresh_time_seconds ||= 3600
+    end
+
+    def refresh_time_seconds=(refresh_time_seconds)
+      @refresh_time_seconds = refresh_time_seconds.to_i
+    end
+
+    def logger=(log_handler)
+      @logger = log_handler
+    end
+
+    def logger
+      @logger ||= Ougai::Logger.new(STDOUT)
+    end
+  end
+
+  def self.configuration
+    @configuration ||= initialize_configuration!
+  end
+
+  def self.configure
+    configuration = self.initialize_configuration!
+    yield(configuration)
+    configuration
+  end
+
+  def self.initialize_configuration!
+    @configuration = Configuration.new
+    @configuration
+  end
+end

data/lib/iap_authenticator/iap_auth.rb

@@ -0,0 +1,18 @@
+module IapAuthenticator
+  class IapAuth
+	  attr_reader :jws
+	  def initialize
+		  @configuration = IapAuthenticator.configuration
+		  json_from_file = File.read(@configuration.service_account_credentials_path)
+		  service_account = JSON.parse(json_from_file)
+		  private_key = IapAuthenticator::Pkey.parse(service_account['private_key'])
+		  @jws = IapAuthenticator::JWS.new(private_key, @configuration.refresh_time_seconds, service_account['client_email'], @configuration.client_id)
+	  end
+
+	  def token
+		  assertion = self.jws.assertion
+		  token = IapAuthenticator::Token.generate_bearer_token( assertion)
+		  return token
+	  end
+  end
+end

data/lib/iap_authenticator/jws.rb

@@ -0,0 +1,32 @@
+module IapAuthenticator
+	class JWS
+		ALGORITHM = 'RS256'
+
+		def initialize(private_key, refresh_time_seconds, iss, target_audience)
+			@private_key = private_key
+			@refresh_time_seconds = refresh_time_seconds
+			@iss = iss
+			@aud = IapAuthenticator::Token::TokenURI
+			@target_audience = target_audience
+		end
+
+		def assertion
+			exp = Time.now.to_i + @refresh_time_seconds
+			iat = Time.now.to_i
+			payload = {
+				iss: @iss,
+				aud: @aud,
+				exp: exp,
+				iat: iat,
+				target_audience: @target_audience
+			}
+
+			begin
+				token = JWT.encode payload, @private_key, ALGORITHM
+			rescue
+				raise "Unable to create JWT"
+			end
+			return token
+		end
+        end
+end

data/lib/iap_authenticator/pkey.rb

@@ -0,0 +1,12 @@
+module IapAuthenticator
+	class Pkey
+		def self.parse( private_key_string )
+			begin
+				rsa_private_key = OpenSSL::PKey::RSA.new(private_key_string)
+			rescue
+				raise "Invalid Private Key in service account credentials."
+			end
+			return rsa_private_key
+		end
+	end
+end

data/lib/iap_authenticator/token.rb

@@ -0,0 +1,23 @@
+module IapAuthenticator
+	class Token
+		TokenURI = "https://www.googleapis.com/oauth2/v4/token"
+		JWTBearerType = "urn:ietf:params:oauth:grant-type:jwt-bearer"
+
+		def self.generate_bearer_token( assertion )
+			uri = URI(TokenURI)
+			begin
+				res = Net::HTTP.post_form(uri, 'grant_type' => JWTBearerType, 'assertion' => assertion)
+			rescue => e
+				raise e
+			end
+			if res.code.to_i != 200
+				error_description = JSON.parse(res.body)["error_description"]
+				error = JSON.parse(res.body)["error"]
+			 	raise("Request failed with error: #{error} and description: #{error_description}")
+			end
+
+			response_jwt = JSON.parse(res.body)["id_token"]
+			return response_jwt
+		end
+	end
+end

data/lib/iap_authenticator/version.rb

@@ -0,0 +1,3 @@
+module IapAuthenticator
+  VERSION = '0.1.0'
+end

data/lib/iap_authenticator.rb

@@ -0,0 +1,15 @@
+require 'iap_authenticator/configuration'
+require 'iap_authenticator/version'
+require 'iap_authenticator/iap_auth'
+require 'iap_authenticator/jws'
+require 'iap_authenticator/pkey'
+require 'iap_authenticator/token'
+require 'json'
+require 'openssl'
+require 'jwt'
+require 'net/http'
+require 'uri'
+
+module IapAuthenticator
+end
+

metadata

@@ -0,0 +1,77 @@
+--- !ruby/object:Gem::Specification
+name: iap_authenticator
+version: !ruby/object:Gem::Version
+  version: 0.1.0
+platform: ruby
+authors:
+- Sankalp Singh
+autorequire: 
+bindir: bin
+cert_chain: []
+date: 2019-03-25 00:00:00.000000000 Z
+dependencies:
+- !ruby/object:Gem::Dependency
+  name: rake
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '10.0'
+  type: :development
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '10.0'
+- !ruby/object:Gem::Dependency
+  name: rspec
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '3.0'
+  type: :development
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '3.0'
+description: This gem created authentication token for services running behind IAP
+email: sankalps@go-jek.com
+executables: []
+extensions: []
+extra_rdoc_files: []
+files:
+- lib/iap_authenticator.rb
+- lib/iap_authenticator/configuration.rb
+- lib/iap_authenticator/iap_auth.rb
+- lib/iap_authenticator/jws.rb
+- lib/iap_authenticator/pkey.rb
+- lib/iap_authenticator/token.rb
+- lib/iap_authenticator/version.rb
+homepage: http://rubygems.org/gems/iap_authenticator
+licenses:
+- MIT
+metadata: {}
+post_install_message: 
+rdoc_options: []
+require_paths:
+- lib
+required_ruby_version: !ruby/object:Gem::Requirement
+  requirements:
+  - - ">="
+    - !ruby/object:Gem::Version
+      version: '0'
+required_rubygems_version: !ruby/object:Gem::Requirement
+  requirements:
+  - - ">="
+    - !ruby/object:Gem::Version
+      version: '0'
+requirements: []
+rubygems_version: 3.0.3
+signing_key: 
+specification_version: 4
+summary: This gem created authentication token for services running behind IAP
+test_files: []