infinum_azure 0.1.0 → 0.2.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: f06378aa3fb152b879f9ad741a7bc83df51bffe7ca5f716b5769bf4a8ad20db1
-  data.tar.gz: 517a2708e459b1c4d4f6d1577d604c1403aaab6cfe6511b5f382e85525fd2cb9
+  metadata.gz: 91e15ff1b9c4d10efe59515afefabb3d7cf30ab4e5db48a7f6d6a9a0ba0becd9
+  data.tar.gz: 2b9b9d955b4f66d029da9243ce62430988a040ae7995a12bd13d3059f07c1a07
 SHA512:
-  metadata.gz: 7ae21e8407f07e7da940dae6aadc9e43ca5fae05fd8709725013ce09649d96ac205626315bb81e9513bf3ebc5f28550415f54c83ddc583a45f9f1ddb6ea7c954
-  data.tar.gz: a785f790548ef0c29310ac696e796c96be84a7c22610f7be700273bbe9935ef28702582da49834a7cdd86b6c4fdb3ab0ba5da7312c461a359415e0712a41ec55
+  metadata.gz: c99b0116be82397a78d57d24f98de0cc8fbd2d26e1ee22b3a565205c1cfff1ea4598e507ed62071ed4d9f6446e9223e72c5f024f4d7ed968b54a56fff9e41583
+  data.tar.gz: 5c74771724c5bc818b7df7c78cfa27c14ebfb29948e226e01b5fb92014a24371ec39295cda1a06d33b1f92221942f1d00a58c99b023753b40bfc5bb99c63b3d6

data/.rubocop.yml

@@ -18,3 +18,7 @@ Metrics/BlockLength:
   Exclude:
     - '**/*.rake'
     - 'spec/**/*.rb'
+
+Style/FrozenStringLiteralComment:
+  Exclude:
+    - 'spec/**/*.rb'

data/CHANGELOG.md

@@ -1,5 +1,9 @@
 ## [Unreleased]
 
+## [0.2.0] - 2023-04-20
+
+- Added upsert webhook API for creating/updating resources
+
 ## [0.1.0] - 2023-03-15
 
 - Initial release

data/Gemfile.lock

@@ -1,7 +1,7 @@
 PATH
   remote: .
   specs:
-    infinum_azure (0.1.0)
+    infinum_azure (0.2.0)
       bundler
       devise
       dry-configurable

data/README.md

@@ -43,12 +43,14 @@ Or install it yourself as:
 InfinumAzure.configure do |config|
   config.service_name = 'Revisor'
   config.resource_name = 'User'
+  config.resource_attributes = [:uid, :email, :first_name, :last_name]
 end
 ```
 
 Configuration options:
 * Service name - name of application
 * Resource name - name of resource on whom authentication is being done
+* Resource attributes - attributes sent from InfinumAzure when user is created/updated that will be permitted
 
 ### Secrets
 
@@ -102,6 +104,30 @@ or, if you just want to clear the session, but not log out of Infinum Azure, you
 link_to 'Logout', logout_path
 ```
 
+## Known issues
+
+If you don't get what you're looking for, check your terminal output and see if omniauth logs are saying anything similar to:
+
+```
+DEBUG -- omniauth: (google_oauth2) Request phase initiated.
+WARN -- omniauth: Attack prevented by OmniAuth::AuthenticityTokenProtection
+ERROR -- omniauth: (google_oauth2) Authentication failure! authenticity_error: OmniAuth::AuthenticityError, Forbidden
+```
+
+To resolve this issue, install the omniauth-rails_csrf_protection gem:
+
+```ruby
+gem 'omniauth-rails_csrf_protection'
+```
+
+Make sure to use HTTP method POST for authenticating. If you are using a link, you can set the HTTP method to POST like this:
+
+```ruby
+link_to 'Login', user_infinum_azure_omniauth_authorize_path, method: :post
+```
+
+or, simply with `#button_to` as mentioned above.
+
 ## License
 
 The gem is available as open source under the terms of the [MIT License](https://opensource.org/licenses/MIT).

data/app/controllers/infinum_azure/api/webhooks_controller.rb

@@ -0,0 +1,33 @@
+# frozen_string_literal: true
+
+module InfinumAzure
+  module Api
+    class WebhooksController < Api::BaseController
+      def upsert_resource_callback
+        if resource
+          resource.update(user_params)
+          action = 'updated'
+        else
+          resource_class.create(user_params)
+          action = 'created'
+        end
+
+        render json: { resource_name.underscore => action }
+      end
+
+      private
+
+      def resource
+        @resource ||= resource_class.where(uid: user_params[:uid], provider: InfinumAzure.provider).or(
+          resource_class.where(email: user_params[:email])
+        ).first
+      end
+
+      def user_params
+        params.require(:user)
+              .permit(InfinumAzure.resource_attributes)
+              .merge(provider: InfinumAzure.provider)
+      end
+    end
+  end
+end

data/config/routes.rb

@@ -7,4 +7,12 @@ Rails.application.routes.draw do
   devise_for InfinumAzure.resource_name.pluralize.underscore, controllers: {
     omniauth_callbacks: 'infinum_azure/resources/omniauth_callbacks'
   }
+
+  namespace :infinum_azure do
+    namespace :api do
+      scope '/webhooks', controller: :webhooks do
+        post :upsert_resource_callback
+      end
+    end
+  end
 end

data/lib/infinum_azure/version.rb

@@ -1,5 +1,5 @@
 # frozen_string_literal: true
 
 module InfinumAzure
-  VERSION = '0.1.0'
+  VERSION = '0.2.0'
 end

data/lib/infinum_azure.rb

@@ -12,6 +12,11 @@ module InfinumAzure
 
   setting :service_name, reader: true
   setting :resource_name, default: 'User', reader: true
+  setting :resource_attributes, default: [:uid, :email, :first_name, :last_name], reader: true
+
+  def self.provider
+    to_s.underscore
+  end
 
   def self.resource_class
     resource_name.constantize

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: infinum_azure
 version: !ruby/object:Gem::Version
-  version: 0.1.0
+  version: 0.2.0
 platform: ruby
 authors:
 - Marko Ćilimković
 autorequire:
 bindir: exe
 cert_chain: []
-date: 2023-03-15 00:00:00.000000000 Z
+date: 2023-04-20 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: bundler
@@ -299,6 +299,7 @@ files:
 - README.md
 - Rakefile
 - app/controllers/infinum_azure/api/base_controller.rb
+- app/controllers/infinum_azure/api/webhooks_controller.rb
 - app/controllers/infinum_azure/application_controller.rb
 - app/controllers/infinum_azure/resources/omniauth_callbacks_controller.rb
 - app/controllers/infinum_azure/resources_controller.rb