ibrain-auth 0.2.5 → 0.2.7

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 26aeb022ddcbbdd76111478f2940e701d19dd097f2cec23766d3c5ebb12fad17
-  data.tar.gz: fc936d12ad9d6cc5b6346c18e3e0a523d10b281b02506223bb50ed6c3fffdd25
+  metadata.gz: 9deb56fb20025aafc070789b5bfa07422ed6d101c176d02650222e9a79b32736
+  data.tar.gz: 466ef586478d5c5643982d369a85da485601dcaec871b32a7bf7423e089d141b
 SHA512:
-  metadata.gz: 3ac0bfb83423c1b39cd2a4cb0da02cd340a856fe80252fb231b5e1f3fe20b973c3372af3f03406106d73c02dad7fcd572bbd7378df42af951a942c98ac432d9d
-  data.tar.gz: c5f6150f42313cd3ea40a6fe31fa2fabb11c9248a3c9c2dd58153fad1296590630612f89c175167b01dd04a9559afdadeef808b453f941e56dea00859988e32a
+  metadata.gz: 3d92287766c4a26ee54357eb4f966ac4a51a0417228a2f8ba47f779eff4b316e2821f637863be06c18460a5ce2150fe062150653dfc9c3f3a66a567b98a623f0
+  data.tar.gz: 5a20e97b2e6a721f592c8cb4b0a27624c430a4a18e1bb80406328d42efc6ef1e9d787af93564767e17e728992efe8b0cc361840efae12d5353d09058ff6bd6f8

data/app/graphql/ibrain/auth/mutations/generate_firebase_token_mutation.rb

@@ -0,0 +1,35 @@
+# frozen_string_literal: true
+
+module Ibrain::Auth::Mutations
+  class GenerateFirebaseTokenMutation < BaseMutation
+    field :result, Boolean, null: true
+    field :token, String, null: true
+
+    argument :attributes, ::Ibrain::Auth::Types::Input::GenerateFirebaseTokenInput, required: true
+
+    def resolve(_args)
+      token = repo.generate_custom_token!
+
+      graphql_returning(token)
+    end
+
+    private
+
+    def normalize_parameters
+      attribute_params.permit(:uid)
+    rescue StandardError
+      ActionController::Parameters.new({})
+    end
+
+    def repo
+      ::FirebaseRepository.new(nil, normalize_parameters)
+    end
+
+    def graphql_returning(token)
+      OpenStruct.new(
+        token: token,
+        result: true
+      )
+    end
+  end
+end

data/app/graphql/ibrain/auth/mutations/{sso_sign_in_mutation.rb → social_sign_in_mutation.rb}

@@ -1,13 +1,13 @@
 # frozen_string_literal: true
 
 module Ibrain::Auth::Mutations
-  class SsoSignInMutation < BaseMutation
+  class SocialSignInMutation < BaseMutation
     field :user, Types::Objects::UserType, null: true
     field :token, String, null: true
     field :result, Boolean, null: true
     field :is_verified, Boolean, null: true
 
-    argument :id_token, String, description: 'Id Token from SSO', required: true
+    argument :id_token, String, description: 'Id Token from firebase', required: true
     argument :device_token, String, description: 'Device token for notificaiton', required: false
 
     def resolve(args)

data/app/graphql/ibrain/auth/types/input/generate_firebase_token_input.rb

@@ -0,0 +1,13 @@
+# frozen_string_literal: true
+
+module Ibrain
+  module Auth
+    module Types
+      module Input
+        class GenerateFirebaseTokenInput < Ibrain::Types::BaseInputObject
+          argument :uid, String, required: true
+        end
+      end
+    end
+  end
+end

data/app/models/ibrain/auth/user.rb

@@ -40,6 +40,13 @@ module Ibrain
             where(query).first
           end
         end
+
+        def social_find_or_initialize(params)
+          user = find_by(provider: params[:provider], uid: params[:uid])
+          return user if user.present?
+
+          create!(params)
+        end
       end
     end
   end

data/app/repositories/auth_repository.rb

@@ -11,7 +11,7 @@ class AuthRepository < Ibrain::BaseRepository
   end
 
   def create
-    user = is_sso? ? sso_verify : collection.ibrain_find(manual_params, available_columns)
+    user = is_social? ? firebase_verify : collection.ibrain_find(manual_params, available_columns)
     user.assign_attributes(normalize_params.except(:id_token))
     user.save
 
@@ -19,7 +19,7 @@ class AuthRepository < Ibrain::BaseRepository
   end
 
   def sign_in
-    return sso_verify if is_sso?
+    return firebase_verify if is_social?
 
     user = collection.ibrain_find(manual_params, available_columns)
     return unless user.try(:valid_password?, manual_params[:password])
@@ -57,21 +57,31 @@ class AuthRepository < Ibrain::BaseRepository
     params.permit(:username, :password)
   end
 
-  def sso_verify
+  def firebase_verify
     response = HTTParty.post(firebase_url, headers: base_headers, body: { 'idToken' => normalize_params[:id_token] }.to_json )
     user_information = response.try(:fetch, 'users', []).try(:at, 0)
 
     uid = user_information.try(:fetch, 'localId', nil)
+    provider = user_information.
+      try(:fetch, 'providerUserInfo', []).
+      try(:at, 0).try(:fetch, 'providerId', '').
+      try(:gsub, '.com', '')
     raise ActiveRecord::RecordNotFound, I18n.t('ibrain.errors.account.not_found') if uid.blank?
 
-    collection.find_by(uid: uid)
+    collection.social_find_or_initialize({
+      uid: uid,
+      provider: provider,
+      remote_avatar_url: user_information.try(:fetch, 'photoUrl', nil),
+      email: user_information.try(:fetch, 'email', nil),
+      password: 'Eco@123456'
+    })
   end
 
   def available_columns
     collection.column_names.select { |f| ACCOUNT_COUMNS.include?(f) }
   end
 
-  def is_sso?
+  def is_social?
     normalize_params[:id_token].present?
   end
 

data/app/repositories/firebase_repository.rb

@@ -0,0 +1,41 @@
+# frozen_string_literal: true
+
+class FirebaseRepository < Ibrain::BaseRepository
+  def initialize(record, _params)
+    super(nil, record)
+
+    @private_key_json = File.open(Ibrain::Auth::Config.firebase_private_key_path).read
+    @firebase_owner_email = Ibrain::Auth::Config.firebase_owner_email
+  end
+
+  def generate_custom_token!
+    now = Time.now.to_i
+
+    payload = {
+      iss: firebase_owner_email,
+      sub: firebase_owner_email,
+      aud: Ibrain::Auth::Config.firebase_aud_url,
+      iat: now,
+      exp: now + 3600,
+      uid: params[:uid],
+      claims: {}
+    }
+
+    JWT.encode payload, private_key, "RS256"
+  end
+
+  private
+
+  attr_reader :private_key_json, :firebase_owner_email
+
+  def method_name
+  end
+
+  def json_firebase
+    JSON.parse(private_key_json, symbolize_names: true)
+  end
+
+  def private_key
+    OpenSSL::PKey::RSA.new json_firebase[:private_key]
+  end
+end

data/lib/generators/ibrain/auth/install/templates/config/initializers/ibrain_auth.rb.tt

@@ -16,4 +16,13 @@ Ibrain::Auth.config do |config|
 
   # sign_in graphql input
   config.sign_up_input = Ibrain::Auth::Types::Input::SignInInput
+
+  # firebase private json path
+  config.firebase_private_key_path = Rails.root.join('static/firebase.json')
+
+  # firebase aud url
+  config.firebase_auth_url = "https://identitytoolkit.googleapis.com/google.identity.identitytoolkit.v1.IdentityToolkit"
+
+  # firebase owner email
+  config.firebase_owner_email = nil
 end

data/lib/ibrain/auth/version.rb

@@ -4,14 +4,14 @@ module Ibrain
   # frozen_string_literal: true
 
   module Auth
-    VERSION = '0.2.5'
+    VERSION = '0.2.7'
 
     def self.ibrain_auth_version
       VERSION
     end
 
     def self.previous_ibrain_auth_minor_version
-      '0.2.4'
+      '0.2.6'
     end
 
     def self.ibrain_auth_gem_version

data/lib/ibrain/auth_configuration.rb

@@ -17,5 +17,14 @@ module Ibrain
 
     # sign_in input
     preference :sign_in_input, :class, default: Ibrain::Auth::Types::Input::SignInInput
+
+    # firebase private json path
+    preference :firebase_private_key_path, :string, default: Rails.root.join('static/firebase.json')
+
+    # firebase aud url
+    preference :firebase_auth_url, :string, default: "https://identitytoolkit.googleapis.com/google.identity.identitytoolkit.v1.IdentityToolkit"
+
+    # firebase owner email
+    preference :firebase_owner_email, :string, default: nil
   end
 end

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: ibrain-auth
 version: !ruby/object:Gem::Version
-  version: 0.2.5
+  version: 0.2.7
 platform: ruby
 authors:
 - Tai Nguyen Van
 autorequire:
 bindir: bin
 cert_chain: []
-date: 2022-09-13 00:00:00.000000000 Z
+date: 2022-10-01 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: devise-encryptable
@@ -194,16 +194,18 @@ files:
 - app/controllers/ibrain/auth/sessions_controller.rb
 - app/controllers/ibrain/auth/unlocks_controller.rb
 - app/graphql/ibrain/auth/mutations/base_mutation.rb
+- app/graphql/ibrain/auth/mutations/generate_firebase_token_mutation.rb
 - app/graphql/ibrain/auth/mutations/sign_in_mutation.rb
 - app/graphql/ibrain/auth/mutations/sign_out_mutation.rb
 - app/graphql/ibrain/auth/mutations/sign_up_mutation.rb
-- app/graphql/ibrain/auth/mutations/sso_sign_in_mutation.rb
-- app/graphql/ibrain/auth/mutations/sso_sign_up_mutation.rb
+- app/graphql/ibrain/auth/mutations/social_sign_in_mutation.rb
+- app/graphql/ibrain/auth/types/input/generate_firebase_token_input.rb
 - app/graphql/ibrain/auth/types/input/sign_in_input.rb
 - app/graphql/ibrain/auth/types/input/sign_up_input.rb
 - app/models/ibrain/auth/user.rb
 - app/repositories/apple_repository.rb
 - app/repositories/auth_repository.rb
+- app/repositories/firebase_repository.rb
 - app/repositories/twitter_repository.rb
 - config/initializers/devise.rb
 - config/locales/en.yml
@@ -246,7 +248,7 @@ required_rubygems_version: !ruby/object:Gem::Requirement
     - !ruby/object:Gem::Version
       version: '0'
 requirements: []
-rubygems_version: 3.3.20
+rubygems_version: 3.2.22
 signing_key:
 specification_version: 4
 summary: Its Auth is an sso authen gem for Ruby on Rails.

data/app/graphql/ibrain/auth/mutations/sso_sign_up_mutation.rb

@@ -1,57 +0,0 @@
-# frozen_string_literal: true
-
-module Ibrain::Auth::Mutations
-  class SsoSignUpMutation < BaseMutation
-    field :user, Types::Objects::UserType, null: true
-    field :token, String, null: true
-    field :result, Boolean, null: true
-
-    argument :id_token, String, description: 'Id Token from SSO', required: true
-    argument :user, Ibrain::Auth::Config.sign_up_input, required: true
-    argument :device_token, String, description: 'Device token for notificaiton', required: false
-
-    def resolve(args)
-      # TODO: define logic inside repository
-      repo = ::AuthRepository.new(nil, normalize_params(args))
-      user = repo.sign_up
-
-      return OpenStruct.new({ user: nil, token: nil, result: false, is_verified: false }) if user.blank?
-
-      sign_in(resource_name, user)
-      @current_user = warden.authenticate!(auth_options)
-
-      warden.set_user(current_user)
-      current_user.jwt_token, jti = auth_headers(request, user)
-
-      current_user.jti = jti
-      current_user.save!
-
-      if args[:device_token].present?
-        device_token = current_user.device_tokens.find_by(token: args[:device_token])
-
-        current_user.device_tokens.create!({ token: args[:device_token] }) if device_token.blank?
-      end
-
-      context[:current_user] = current_user
-
-      OpenStruct.new(
-        user: user_signed_in? ? current_user : nil,
-        token: current_user.try(:jwt_token),
-        result: user_signed_in?,
-        is_verified: true
-      )
-    end
-
-    private
-
-    def normalize_params(args)
-      ActionController::Parameters.new(args.as_json)
-    rescue StandardError
-      ActionController::Parameters.new({})
-    end
-
-    def auth_options
-      { scope: resource_name }
-    end
-  end
-end