identity 1.0.1

data/Gemfile

@@ -0,0 +1,6 @@
+source "http://rubygems.org"
+
+gemspec
+
+gem "xml-simple", "~> 1.1.1"
+gem "rest-client", "~> 1.6.7"

data/identity.gemspec

@@ -0,0 +1,16 @@
+Gem::Specification.new do |s|
+  s.name        = 'identity'
+  s.version     = '1.0.1'
+  s.date        = '2012-09-17'
+  s.summary     = "Ruby ufp Identity Library"
+  s.description = "A Ruby library for integrations with ufp Identity"
+  s.authors     = ["Richard Levenberg"]
+  s.email       = 'richardl@ufp.com'
+  s.files       = Dir["**/*"] - Dir["*.gem"] - Dir["*.pem"] - Dir["Gemfile.lock"]
+  s.homepage    = 'https://www.ufp.com'
+  s.rubyforge_project = "identity"
+  s.require_paths = ["lib", "lib/warden"]
+
+  s.add_dependency("rest-client", "~> 1.6.7")
+  s.add_dependency("xml-simple", "~> 1.1.1")
+end

data/lib/connection_handler.rb

@@ -0,0 +1,35 @@
+require 'rest-client'
+require 'resolver.rb'
+require 'logger'
+
+log = Logger.new(STDOUT)
+log.level = Logger::DEBUG
+
+RestClient.log = log
+
+module Identity
+  class ConnectionHandler
+    @@resolver = Identity::Resolver::StaticIdentityResolver.new
+    
+    def initialize(key_file, key_pass, cert_file, ca_certs='truststore.pem')
+      @resource = RestClient::Resource.new(
+        @@resolver.get_host,
+        :ssl_client_key   => OpenSSL::PKey::RSA.new(File.read(key_file), key_pass),
+        :ssl_client_cert  => OpenSSL::X509::Certificate.new(File.read(cert_file)),
+        :ssl_ca_file      => ca_certs,
+        :verify_ssl       => OpenSSL::SSL::VERIFY_PEER)
+    end
+
+    def make_request(path, parameters)
+      @resource = @resource.class.new(@@resolver.get_host, @resource.options)
+      response = @resource[path].get :params => parameters
+
+      if response.code != 200
+        result = "<context><name>%s</name><result xmlns:xsi=\"http://www.w3.org/2001/XMLSchema-instance\" xsi:type=\"defaultResult\" message=\"Identity Service Failure : %d\">FAILURE</result></context>" %  (parameters[:name].nil? || parameters[:name].empty?) ? 'Unknown' : parameters[:name], response.code
+      else
+        result = response.to_s
+      end
+      return result
+    end
+  end
+end

data/lib/identity.rb

@@ -0,0 +1,84 @@
+require 'connection_handler.rb'
+require 'xmlsimple'
+require 'warden/strategy.rb'
+
+module Identity
+=begin 
+<?xml version=\"1.0\" encoding=\"UTF-8\" standalone=\"yes\"?>
+<authentication_pretext>
+  <name>guest3f4c5a36a65d46e2</name>
+  <result xmlns:xsi=\"http://www.w3.org/2001/XMLSchema-instance\" xsi:type=\"authenticationResult\" confidence=\"0.0\" level=\"0\" code=\"0\" message=\"OK\">SUCCESS</result>
+  <display_item name=\"passphrase\"><display_name>Password</display_name><form_element>&lt;input id=&quot;AuthParam0&quot; type=&quot;password&quot; name=&quot;passphrase&quot; class=&quot;field required&quot; /&gt;</form_element><nickname>Guest Password</nickname></display_item>
+</authentication_pretext>
+=end
+  class AuthenticationResult
+    attr_accessor :name, :result, :display_items
+    
+    def initialize(xml) 
+      r = XmlSimple.xml_in(xml, { 'ForceArray' => ['display_item'] })
+      self.result = r['result']
+      self.name = r['name']
+
+      if result['content'] == 'SUCCESS' || result['content'] == 'CONTINUE'
+        if r['display_item'] && r['display_item'].length > 0
+          self.display_items = Array.new        
+          r['display_item'].each_with_index { |di, index| self.display_items[index] = di }
+        end
+      end
+    end
+  end
+
+=begin
+<?xml version="1.0" encoding="UTF-8" standalone="yes"?>
+<enrollment_pretext>
+  <name>test</name>
+  <result code="0" message="OK">SUCCESS</result>
+  <form_element display_name="Password" name="passphrase">
+    <element>&lt;input id=&quot;EnrollParam0&quot; type=&quot;password&quot; name=&quot;passphrase&quot; /&gt;</element>
+  </form_element>
+</enrollment_pretext>
+=end
+  class EnrollmentResult 
+    attr_accessor :name, :result, :form_elements
+    
+    def initialize(xml)
+      r = XmlSimple.xml_in(xml, { 'ForceArray' => ['form_element'] })
+      self.name = r['name']
+      self.result = r['result']
+      if self.result['content'] == 'SUCCESS'
+        if r['form_elements'] && r['form_elements'].length > 0
+          self.form_elements = Array.new
+          r['form_elements'].each_with_index { |fe, index| self.form_elements[index] = fe }
+        end
+      end
+    end
+  end
+
+  module Provider 
+    class IdentityServiceProvider 
+      def initialize(handler) 
+        @handler = handler
+      end
+
+      def pre_authenticate(name, remote_host) 
+        xml = @handler.make_request 'preauthenticate', { :name => name, :client_ip => remote_host }
+        return AuthenticationResult.new(xml)
+      end
+
+      def authenticate(name, remote_host, parameters)
+        xml = @handler.make_request 'authenticate', { :name => name, :client_ip => remote_host }.merge(parameters)
+        return AuthenticationResult.new(xml)
+      end
+
+      def pre_enroll(name, remote_host)
+        xml = @handler.make_request 'preenroll', { :name => name, :client_ip => remote_host }
+        return EnrollmentResult.new(xml)
+      end
+
+      def enroll(name, remote_host, parameters)
+        xml = @handler.make_request 'enroll', { :name => name, :client_ip => remote_host }.merge(parameters)
+        return EnrollmentResult.new(xml)
+      end
+    end
+  end
+end

data/lib/resolver.rb

@@ -0,0 +1,9 @@
+module Identity
+  module Resolver
+    class StaticIdentityResolver
+      def get_host
+        'https://staging.ufp.com:8443/identity-services/services'
+      end
+    end
+  end
+end

data/lib/warden/strategy.rb

@@ -0,0 +1,65 @@
+require 'warden'
+
+module Warden
+  module Strategies
+    class IdentityStrategy < Warden::Strategies::Base
+      def initialize(env, scope)
+        super(env, scope)
+        Rails.logger.debug("initialize, #{self}")
+        config = Rails.configuration
+        handler = Identity::ConnectionHandler.new config.identity_key, config.identity_key_password, config.identity_certificate, config.identity_truststore
+        # create the provider
+        @provider = Identity::Provider::IdentityServiceProvider.new handler
+      end
+
+      def valid?
+        Rails.logger.debug("valid?, #{self}")
+        #Rails.logger.debug("session #{session.inspect}")
+        #Rails.logger.debug("params #{params.inspect}")
+        params["username"] || session[:identity_username_key]
+      end
+
+      def authenticate!
+        Rails.logger.debug("authenticate!, #{self}")
+        #Rails.logger.debug("session #{session.inspect}")
+        #Rails.logger.debug("params #{params.inspect}")
+
+        if session[:identity_username_key].nil? && session[:identity_display_items].nil?
+          pretext = @provider.pre_authenticate params["username"], request.ip
+          if pretext.result['content'] == 'SUCCESS'
+            session[:identity_username_key] = pretext.name
+            session[:identity_display_items] = pretext.display_items
+          else
+            fail! pretext.result['message']
+          end
+        elsif !session[:identity_display_items].nil?
+          parameters = {}
+          session[:identity_display_items].each do |display_item|
+            key = display_item['name']
+            Rails.logger.debug "looking for #{key}"
+            parameters[key] = params[key]
+          end
+          context = @provider.authenticate session[:identity_username_key], request.ip, parameters
+          case context.result['content']
+          when 'CONTINUE'
+            session[:identity_display_items] = context.display_items
+            flash[:notice] = context.result['message']
+          when 'RESET'
+            session[:identity_username_key] = nil
+            session[:identity_display_items] = nil
+          when 'SUCCESS'
+            username = context.name
+            session[:identity_username_key] = nil
+            session[:identity_display_items] = nil
+            # this is an ephemeral user that needs to be handled in your custom login controller to associate with a "real" user account
+            # password is explicitly nil, keep it that way
+            user = User.new(:username => username)
+            success! user
+          else
+            fail! context.result['message']
+          end
+        end
+      end
+    end
+  end
+end

metadata

@@ -0,0 +1,95 @@
+--- !ruby/object:Gem::Specification 
+name: identity
+version: !ruby/object:Gem::Version 
+  prerelease: false
+  segments: 
+  - 1
+  - 0
+  - 1
+  version: 1.0.1
+platform: ruby
+authors: 
+- Richard Levenberg
+autorequire: 
+bindir: bin
+cert_chain: []
+
+date: 2012-09-17 00:00:00 -07:00
+default_executable: 
+dependencies: 
+- !ruby/object:Gem::Dependency 
+  name: rest-client
+  prerelease: false
+  requirement: &id001 !ruby/object:Gem::Requirement 
+    requirements: 
+    - - ~>
+      - !ruby/object:Gem::Version 
+        segments: 
+        - 1
+        - 6
+        - 7
+        version: 1.6.7
+  type: :runtime
+  version_requirements: *id001
+- !ruby/object:Gem::Dependency 
+  name: xml-simple
+  prerelease: false
+  requirement: &id002 !ruby/object:Gem::Requirement 
+    requirements: 
+    - - ~>
+      - !ruby/object:Gem::Version 
+        segments: 
+        - 1
+        - 1
+        - 1
+        version: 1.1.1
+  type: :runtime
+  version_requirements: *id002
+description: A Ruby library for integrations with ufp Identity
+email: richardl@ufp.com
+executables: []
+
+extensions: []
+
+extra_rdoc_files: []
+
+files: 
+- Gemfile
+- identity.gemspec
+- lib/connection_handler.rb
+- lib/identity.rb
+- lib/resolver.rb
+- lib/warden/strategy.rb
+has_rdoc: true
+homepage: https://www.ufp.com
+licenses: []
+
+post_install_message: 
+rdoc_options: []
+
+require_paths: 
+- lib
+- lib/warden
+required_ruby_version: !ruby/object:Gem::Requirement 
+  requirements: 
+  - - ">="
+    - !ruby/object:Gem::Version 
+      segments: 
+      - 0
+      version: "0"
+required_rubygems_version: !ruby/object:Gem::Requirement 
+  requirements: 
+  - - ">="
+    - !ruby/object:Gem::Version 
+      segments: 
+      - 0
+      version: "0"
+requirements: []
+
+rubyforge_project: identity
+rubygems_version: 1.3.6
+signing_key: 
+specification_version: 3
+summary: Ruby ufp Identity Library
+test_files: []
+