its-ruby-auth 0.0.1

data/lib/generators/ibrain/auth/install/templates/config/initializers/ibrain_jwt.rb.tt

@@ -0,0 +1,13 @@
+# frozen_string_literal: true
+
+require 'ibrain/auth/failure_app'
+
+# ==> Configuration for jwt
+Devise.jwt do |jwt|
+  jwt.secret = ENV.fetch('JWT_SECRET_KEY', Ibrain::Auth::Config.jwt_secret_key) # Rails.application.credentials.secret_key_base
+  jwt.expiration_time = 3600 * 24 * 30 # 30day
+end
+
+Devise.warden do |manager|
+  manager.failure_app = Ibrain::Auth::FailureApp
+end

data/lib/generators/ibrain/auth/install/templates/config/initializers/omniauth.rb.tt

@@ -0,0 +1,25 @@
+# frozen_string_literal: true
+
+Rails.application.config.middleware.use OmniAuth::Builder do
+  # For twitter authenticate
+  # provider :twitter, ENV['TWITTER_CLIENT_ID'], ENV['TWITTER_CLIENT_SECRET']
+
+  # For line authenticate
+  # provider :line, ENV['LINE_CLIENT_ID'], ENV['LINE_CLIENT_SECRET']
+
+  # For apple authenticate
+  # provider :apple, ENV['APPLE_CLIENT_ID'], '',
+  #          {
+  #            scope: 'email name',
+  #            team_id: ENV['APPLE_TEAM_ID'],
+  #            key_id: ENV['APPLE_KEY_ID'],
+  #            pem: ENV['APPLE_PRIVATE_KEY']
+  #          }
+
+  # For facebook
+  # provider :facebook, ENV['FACEBOOK_APP_ID'], ENV['FACEBOOK_APP_SECRET'] scope: 'public_profile,email',
+                info_fields: 'email,first_name,last_name,gender,birthday,location,picture',
+
+  # For google
+  # provider :google_oauth2, ENV['GOOGLE_CLIENT_ID'], ENV['GOOGLE_CLIENT_SECRET']
+end

data/lib/generators/ibrain/auth/install/templates/db/schemas/users_migrate.erb

@@ -0,0 +1,39 @@
+class CreateTables < ActiveRecord::Migration[6.0]
+  def change
+    create_table 'users', force: :cascade do |t|
+      t.string 'email'
+      t.string 'password_digest', null: false, default: ''
+      
+      ## Recoverable
+      t.string   :reset_password_token
+      t.datetime :reset_password_sent_at
+
+      ## Rememberable
+      t.datetime :remember_created_at
+
+      ## Trackable
+      t.integer  :sign_in_count, default: 0, null: false
+      t.datetime :current_sign_in_at
+      t.datetime :last_sign_in_at
+      t.string   :current_sign_in_ip
+      t.string   :last_sign_in_ip
+      t.string   :uid
+      
+      ## Confirmable
+      # t.string   :confirmation_token
+      # t.datetime :confirmed_at
+      # t.datetime :confirmation_sent_at
+      # t.string   :unconfirmed_email # Only if using reconfirmable
+
+      ## Lockable
+      # t.integer  :failed_attempts, default: 0, null: false # Only if lock strategy is :failed_attempts
+      # t.string   :unlock_token # Only if unlock strategy is :email or :both
+      # t.datetime :locked_at
+      
+      t.timestamps
+
+      t.index :reset_password_token, unique: true
+      t.index :uid, unique: true
+    end
+  end
+end

data/lib/generators/ibrain/auth/install/templates/db/schemas/users_schema.erb

@@ -0,0 +1,37 @@
+# -*- mode: ruby -*-
+# vi: set ft=ruby :
+create_table 'users', force: :cascade do |t|
+  t.string 'email'
+  t.string 'password_digest', null: false, default: ''
+  
+  ## Recoverable
+  t.string   :reset_password_token
+  t.datetime :reset_password_sent_at
+
+  ## Rememberable
+  t.datetime :remember_created_at
+
+  ## Trackable
+  t.integer  :sign_in_count, default: 0, null: false
+  t.datetime :current_sign_in_at
+  t.datetime :last_sign_in_at
+  t.string   :current_sign_in_ip
+  t.string   :last_sign_in_ip
+  t.string   :uid
+  
+  ## Confirmable
+  # t.string   :confirmation_token
+  # t.datetime :confirmed_at
+  # t.datetime :confirmation_sent_at
+  # t.string   :unconfirmed_email # Only if using reconfirmable
+
+  ## Lockable
+  # t.integer  :failed_attempts, default: 0, null: false # Only if lock strategy is :failed_attempts
+  # t.string   :unlock_token # Only if unlock strategy is :email or :both
+  # t.datetime :locked_at
+  
+  t.timestamps
+
+  t.index :reset_password_token, unique: true
+  t.index :uid, unique: true
+end

data/lib/ibrain/auth/devise.rb

@@ -0,0 +1,16 @@
+# frozen_string_literal: true
+
+module Ibrain
+  module Auth
+    # Load the same version defaults for all available Ibrain components
+    #
+    # @see Ibrain::Preferences::Configuration#load_defaults
+    def self.load_defaults(version)
+      Ibrain::Auth::Config.load_defaults(version)
+    end
+
+    def self.config(&_block)
+      yield(Ibrain::Auth::Config)
+    end
+  end
+end

data/lib/ibrain/auth/engine.rb

@@ -0,0 +1,42 @@
+# frozen_string_literal: true
+
+require 'devise'
+require 'devise-encryptable'
+
+module Ibrain
+  module Auth
+    class Engine < Rails::Engine
+      isolate_namespace Ibrain::Auth
+      engine_name 'ibrain_auth'
+      config.generators.api_only = true
+
+      initializer 'ibrain.auth.environment', before: :load_config_initializers do |_app|
+        require 'ibrain/auth_configuration'
+
+        Ibrain::Auth::Config = Ibrain::AuthConfiguration.new
+      end
+
+      config.to_prepare do
+        ApplicationController.include Ibrain::AuthenticationHelpers
+      end
+
+      def self.fallback_on_unauthorized?
+        return false unless Ibrain::Config.respond_to?(:fallback_on_unauthorized)
+
+        if Ibrain::Config.fallback_on_unauthorized
+          true
+        else
+          Ibrain::Deprecation.warn <<-WARN.strip_heredoc, caller
+            Having Ibrain::Config.fallback_on_unauthorized set
+            to `false` is deprecated and will not be supported.
+            Please change this configuration to `true` and be sure that your
+            application does not break trying to redirect back when there is
+            an unauthorized access.
+          WARN
+
+          false
+        end
+      end
+    end
+  end
+end

data/lib/ibrain/auth/failure_app.rb

@@ -0,0 +1,27 @@
+# frozen_string_literal: true
+
+class Ibrain::Auth::FailureApp < Devise::FailureApp
+  include ActionController::Helpers
+
+  def respond
+    json_error_response
+  end
+
+  def json_error_response
+    self.status = 401
+    self.content_type = "application/json"
+    self.response_body = {
+      errors: [{
+              message: i18n_message,
+              extensions: {
+                code: 401,
+                exception: {
+                  stacktrace: []
+                }
+              }
+            }],
+            message: i18n_message,
+            data: nil
+          }.to_json
+  end
+end

data/lib/ibrain/auth/version.rb

@@ -0,0 +1,17 @@
+# frozen_string_literal: true
+
+module Ibrain
+  # frozen_string_literal: true
+
+  module Auth
+    VERSION = '0.0.1'
+
+    def self.ibrain_auth_version
+      VERSION
+    end
+
+    def self.ibrain_auth_gem_version
+      Gem::Version.new(ibrain_auth_version)
+    end
+  end
+end

data/lib/ibrain/auth.rb

@@ -0,0 +1,17 @@
+# frozen_string_literal: true
+
+require 'devise'
+require 'devise-encryptable'
+require 'devise/jwt'
+require 'omniauth'
+require 'omniauth-facebook'
+require 'omniauth-google-oauth2'
+require 'omniauth-line'
+require 'omniauth-apple'
+require 'omniauth-twitter'
+require 'ibrain_core'
+
+require 'ibrain/auth/devise'
+require 'ibrain/auth/version'
+require 'ibrain/auth/engine'
+require 'ibrain/authentication_helpers'

data/lib/ibrain/auth_configuration.rb

@@ -0,0 +1,45 @@
+# frozen_string_literal: true
+
+module Ibrain
+  class AuthConfiguration < Preferences::Configuration
+    preference :api_version, :string, default: 'v1'
+    # Firebase API Key
+    preference :firebase_api_key, :string, default: nil
+
+    # JWT Secret key
+    preference :jwt_secret_key, :string, default: nil
+
+    # JWT user table name
+    preference :user_table_name, :string, default: 'ibrain_users'
+
+    # sign_up input
+    preference :sign_up_input, :class, default: Ibrain::Types::Input::SignUpInput
+
+    # sign_in input
+    preference :sign_in_input, :class, default: Ibrain::Types::Input::SignInInput
+
+    # firebase private json path
+    preference :firebase_private_key_path, :string, default: Rails.root.join('static/firebase.json')
+
+    # firebase aud url
+    preference :firebase_auth_url, :string, default: "https://identitytoolkit.googleapis.com/google.identity.identitytoolkit.v1.IdentityToolkit"
+
+    # firebase owner email
+    preference :firebase_owner_email, :string, default: nil
+
+    # social login graphql input
+    preference :social_sign_in_input, :class, default: Ibrain::Types::Input::SocialSignInInput
+
+    # devise modules setting
+    preference :devise_enabled_modules, :array, default: %i[database_authenticatable registerable confirmable recoverable validatable timeoutable omniauthable jwt_authenticatable]
+
+    # devise social providers setting
+    preference :devise_omniauth_providers, :array, default: %i[apple facebook twitter line]
+
+    # line client id
+    preference :line_client_id, :string, default: nil
+
+    # line client secret
+    preference :line_client_secret, :string, default: nil
+  end
+end

data/lib/ibrain/authentication_helpers.rb

@@ -0,0 +1,13 @@
+# frozen_string_literal: true
+
+module Ibrain
+  module AuthenticationHelpers
+    def self.included(receiver)
+      receiver.send(:helper_method, :ibrain_current_user) if receiver.send(:respond_to?, :helper_method)
+    end
+
+    def ibrain_current_user
+      current_user
+    end
+  end
+end

data/lib/ibrain_auth.rb

@@ -0,0 +1,9 @@
+# frozen_string_literal: true
+
+require "zeitwerk"
+loader = Zeitwerk::Loader.new
+loader.tag = File.basename(__FILE__, ".rb")
+loader.inflector = Zeitwerk::GemInflector.new(__FILE__)
+loader.enable_reloading
+loader.setup
+loader.reload

data/lib/tasks/ibrain/auth_tasks.rake

@@ -0,0 +1,5 @@
+# frozen_string_literal: true
+# desc "Explaining what the task does"
+# task :ibrain_auth do
+#   # Task goes here
+# end

metadata

@@ -0,0 +1,287 @@
+--- !ruby/object:Gem::Specification
+name: its-ruby-auth
+version: !ruby/object:Gem::Version
+  version: 0.0.1
+platform: ruby
+authors:
+- ITS GLOBAL
+autorequire:
+bindir: bin
+cert_chain: []
+date: 2024-04-15 00:00:00.000000000 Z
+dependencies:
+- !ruby/object:Gem::Dependency
+  name: devise
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: '0'
+  type: :runtime
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: '0'
+- !ruby/object:Gem::Dependency
+  name: devise-encryptable
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: '0'
+  type: :runtime
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: '0'
+- !ruby/object:Gem::Dependency
+  name: devise-i18n
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: '0'
+  type: :runtime
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: '0'
+- !ruby/object:Gem::Dependency
+  name: devise-jwt
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: '0'
+  type: :runtime
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: '0'
+- !ruby/object:Gem::Dependency
+  name: ibrain-core
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: '0'
+  type: :runtime
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: '0'
+- !ruby/object:Gem::Dependency
+  name: rails
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: '0'
+  type: :runtime
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: '0'
+- !ruby/object:Gem::Dependency
+  name: warden-jwt_auth
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - '='
+      - !ruby/object:Gem::Version
+        version: 0.6.0
+  type: :runtime
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - '='
+      - !ruby/object:Gem::Version
+        version: 0.6.0
+- !ruby/object:Gem::Dependency
+  name: omniauth
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: '0'
+  type: :runtime
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: '0'
+- !ruby/object:Gem::Dependency
+  name: omniauth-apple
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: '0'
+  type: :runtime
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: '0'
+- !ruby/object:Gem::Dependency
+  name: omniauth-facebook
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: '0'
+  type: :runtime
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: '0'
+- !ruby/object:Gem::Dependency
+  name: omniauth-google-oauth2
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: '0'
+  type: :runtime
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: '0'
+- !ruby/object:Gem::Dependency
+  name: omniauth-line
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: '0'
+  type: :runtime
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: '0'
+- !ruby/object:Gem::Dependency
+  name: omniauth-rails_csrf_protection
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: '0'
+  type: :runtime
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: '0'
+- !ruby/object:Gem::Dependency
+  name: omniauth-twitter
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: '0'
+  type: :runtime
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: '0'
+description: Its Auth is an sso authen gem for Ruby on Rails.
+email:
+- dev@its-global.vn
+executables: []
+extensions: []
+extra_rdoc_files: []
+files:
+- MIT-LICENSE
+- README.md
+- Rakefile
+- app/controllers/ibrain/social_callbacks_controller.rb
+- app/graphql/ibrain/mutations/auth_mutation.rb
+- app/graphql/ibrain/mutations/generate_firebase_token_mutation.rb
+- app/graphql/ibrain/mutations/sign_in_mutation.rb
+- app/graphql/ibrain/mutations/sign_out_mutation.rb
+- app/graphql/ibrain/mutations/sign_up_mutation.rb
+- app/graphql/ibrain/mutations/social_sign_in_mutation.rb
+- app/graphql/ibrain/types/input/generate_firebase_token_input.rb
+- app/graphql/ibrain/types/input/sign_in_input.rb
+- app/graphql/ibrain/types/input/sign_up_input.rb
+- app/graphql/ibrain/types/input/social_login_input.rb
+- app/graphql/ibrain/types/input/social_sign_in_input.rb
+- app/models/ibrain/user.rb
+- app/repositories/apple_repository.rb
+- app/repositories/auth_repository.rb
+- app/repositories/firebase_repository.rb
+- app/repositories/line_repository.rb
+- config/initializers/devise.rb
+- config/initializers/ibrain_jwt_expiration.rb
+- config/locales/en.yml
+- config/locales/ja.yml
+- config/locales/vi.yml
+- config/routes.rb
+- lib/controllers/ibrain/user_confirmations_controller.rb
+- lib/controllers/ibrain/user_passwords_controller.rb
+- lib/controllers/ibrain/user_registrations_controller.rb
+- lib/controllers/ibrain/user_sessions_controller.rb
+- lib/controllers/ibrain/user_unlocks_controller.rb
+- lib/generators/ibrain/auth/install/install_generator.rb
+- lib/generators/ibrain/auth/install/templates/config/initializers/devise.rb.tt
+- lib/generators/ibrain/auth/install/templates/config/initializers/ibrain_auth.rb.tt
+- lib/generators/ibrain/auth/install/templates/config/initializers/ibrain_jwt.rb.tt
+- lib/generators/ibrain/auth/install/templates/config/initializers/omniauth.rb.tt
+- lib/generators/ibrain/auth/install/templates/db/schemas/users_migrate.erb
+- lib/generators/ibrain/auth/install/templates/db/schemas/users_schema.erb
+- lib/ibrain/auth.rb
+- lib/ibrain/auth/devise.rb
+- lib/ibrain/auth/engine.rb
+- lib/ibrain/auth/failure_app.rb
+- lib/ibrain/auth/version.rb
+- lib/ibrain/auth_configuration.rb
+- lib/ibrain/authentication_helpers.rb
+- lib/ibrain_auth.rb
+- lib/tasks/ibrain/auth_tasks.rake
+homepage: https://its-global.vn
+licenses:
+- MIT
+metadata:
+  rubygems_mfa_required: 'true'
+post_install_message:
+rdoc_options: []
+require_paths:
+- lib
+required_ruby_version: !ruby/object:Gem::Requirement
+  requirements:
+  - - ">="
+    - !ruby/object:Gem::Version
+      version: '0'
+required_rubygems_version: !ruby/object:Gem::Requirement
+  requirements:
+  - - ">="
+    - !ruby/object:Gem::Version
+      version: '0'
+requirements: []
+rubygems_version: 3.5.5
+signing_key:
+specification_version: 4
+summary: Its Auth is an sso authen gem for Ruby on Rails.
+test_files: []