j1_template_mde 2018.4.10

data/lib/j1_app/omniauth/facebook/signed_request.rb

@@ -0,0 +1,52 @@
+require 'openssl'
+
+module OmniAuth
+  module Facebook
+    class SignedRequest
+      class UnknownSignatureAlgorithmError < NotImplementedError; end
+      SUPPORTED_ALGORITHM = 'HMAC-SHA256'
+
+      attr_reader :value, :secret
+
+      def self.parse(value, secret)
+        new(value, secret).payload
+      end
+
+      def initialize(value, secret)
+        @value = value
+        @secret = secret
+      end
+
+      def payload
+        @payload ||= parse_signed_request
+      end
+
+      private
+
+      def parse_signed_request
+        signature, encoded_payload = value.split('.')
+        return if signature.nil?
+
+        decoded_hex_signature = base64_decode_url(signature)
+        decoded_payload = MultiJson.decode(base64_decode_url(encoded_payload))
+
+        unless decoded_payload['algorithm'] == SUPPORTED_ALGORITHM
+          raise UnknownSignatureAlgorithmError, "unknown algorithm: #{decoded_payload['algorithm']}"
+        end
+
+        if valid_signature?(decoded_hex_signature, encoded_payload)
+          decoded_payload
+        end
+      end
+
+      def valid_signature?(signature, payload, algorithm = OpenSSL::Digest::SHA256.new)
+        OpenSSL::HMAC.digest(algorithm, secret, payload) == signature
+      end
+
+      def base64_decode_url(value)
+        value += '=' * (4 - value.size.modulo(4))
+        Base64.decode64(value.tr('-_', '+/'))
+      end
+    end
+  end
+end

data/lib/j1_app/omniauth/strategies/_unused/doumart_patreon.rb

@@ -0,0 +1,75 @@
+require 'omniauth/strategies/oauth2'
+require 'json'
+
+module OmniAuth
+  module Strategies
+    class Patreon < OmniAuth::Strategies::OAuth2
+
+	  DEFAULT_SCOPE = 'identity identity[email]'
+
+	  option :name, 'patreon'
+      option :client_options, {
+        :authorize_url => '/oauth2/authorize',
+        :site => 'https://www.patreon.com',
+        :token_url => '/api/oauth2/token'
+      }
+
+      uid { raw_info["data"]["id"] }
+
+      info do
+       	prune!({
+          :first_name => raw_info["data"]["attributes"]['first_name'],
+          :last_name => raw_info["data"]["attributes"]['last_name'],
+          :full_name => raw_info["data"]["attributes"]['full_name'],
+          :image_url => raw_info["data"]["attributes"]['image_url'],
+          :email => raw_info["data"]["attributes"]['email']
+        })
+      end
+
+	  def authorize_params
+        super.tap do |params|
+          options[:authorize_options].each do |k|
+            params[k] = request.params[k.to_s] unless [nil, ''].include?(request.params[k.to_s])
+          end
+          params[:scope] = get_scope(params)
+          session['omniauth.state'] = params[:state] if params[:state]
+        end
+      end
+
+      extra do
+        hash = {}
+        hash['raw_info'] = raw_info unless skip_info?
+        prune! hash
+      end
+
+      def raw_info
+        @raw_info =  MultiJson.decode(access_token.get('/api/oauth2/v2/identity', info_options).body)
+      end
+
+	  def info_options
+        params = {}
+        params.merge!({fields: {user: (options[:info_fields] || 'full_name,email')}})
+        params.merge!({locale: options[:locale]}) if options[:locale]
+
+        { params: params }
+      end
+
+
+	  def callback_url
+		options[:redirect_uri] || full_host + script_name + callback_path
+	  end
+
+	   def get_scope(params)
+        raw_scope = params[:scope] || DEFAULT_SCOPE
+        scope_list = raw_scope.split(' ').map { |item| item.split(',') }.flatten
+        scope_list.join(' ')
+      end
+	 def prune!(hash)
+        hash.delete_if do |_, value|
+          prune!(value) if value.is_a?(Hash)
+          value.nil? || (value.respond_to?(:empty?) && value.empty?)
+        end
+      end
+    end
+  end
+end

data/lib/j1_app/omniauth/strategies/_unused/my_patreon.rb

@@ -0,0 +1,78 @@
+# require 'omniauth/strategies/oauth2'
+# require 'json'
+
+module OmniAuth
+  module Strategies
+    class Patreon < OmniAuth::Strategies::OAuth2
+
+      DEFAULT_SCOPE = 'users'
+
+      option :name, 'patreon'
+      option :client_options, {
+        :authorize_url  => '/oauth2/authorize',
+        :site           => 'https://www.patreon.com',
+        :token_url      => '/api/oauth2/token'
+      }
+
+      uid { raw_info["data"]["id"] }
+
+      info do
+        prune!({
+         :first_name  => raw_info["data"]["attributes"]['first_name'],
+         :last_name   => raw_info["data"]["attributes"]['last_name'],
+         :full_name   => raw_info["data"]["attributes"]['full_name'],
+         :image_url   => raw_info["data"]["attributes"]['image_url'],
+         :email       => raw_info["data"]["attributes"]['email']
+        })
+      end
+
+      def authorize_params
+        super.tap do |params|
+          options[:authorize_options].each do |k|
+            params[k] = request.params[k.to_s] unless [nil, ''].include?(request.params[k.to_s])
+          end
+          params[:scope] = get_scope(params)
+          session['omniauth.state'] = params[:state] if params[:state]
+        end
+      end
+
+      extra do
+        hash = {}
+        hash['raw_info'] = raw_info unless skip_info?
+        prune! hash
+      end
+
+      def raw_info
+        @raw_info =  MultiJson.decode(access_token.get('/api/oauth2/v2/identity', info_options).body)
+      end
+
+      def info_options
+        params = {}
+        params.merge!({fields: {user: (options[:info_fields] || 'full_name,email')}})
+        params.merge!({locale: options[:locale]}) if options[:locale]
+        {
+          params: params
+        }
+      end
+
+      def callback_url
+        options[:redirect_uri] || full_host + script_name + callback_path
+#       options[:redirect_uri]
+      end
+
+      def get_scope(params)
+        raw_scope = params[:scope] || DEFAULT_SCOPE
+        scope_list = raw_scope.split(' ').map { |item| item.split(',') }.flatten
+        scope_list.join(' ')
+      end
+
+      def prune!(hash)
+        hash.delete_if do |_, value|
+          prune!(value) if value.is_a?(Hash)
+          value.nil? || (value.respond_to?(:empty?) && value.empty?)
+        end
+      end
+
+    end
+  end
+end

data/lib/j1_app/omniauth/strategies/disqus.rb

@@ -0,0 +1,56 @@
+module OmniAuth
+  module Strategies
+    class Disqus < OmniAuth::Strategies::OAuth2
+
+      DEFAULT_SCOPE = 'read'
+
+      option :name, 'disqus'
+      option :client_options, {
+        :site          => 'https://disqus.com',
+        :authorize_url => '/api/oauth/2.0/authorize/',
+        :token_url     => '/api/oauth/2.0/access_token/'
+      }
+
+      uid { access_token.params['user_id'] }
+
+      info do
+        {
+          :name        => raw_info['name'],
+          :nickname    => raw_info['username'],
+          :location    => raw_info['location'],
+          :description => raw_info['about'],
+          :image       => raw_info['avatar']['small']['permalink'],
+          :urls        => {
+            'profileUrl' => raw_info['profileUrl']
+          }
+        }
+      end
+
+      extra do
+        {
+          :raw_info => raw_info
+        }
+      end
+
+      def callback_url
+        options[:redirect_uri] || full_host + script_name + callback_path
+      end
+
+      def get_scope(params)
+        raw_scope = params[:scope] || DEFAULT_SCOPE
+        scope_list = raw_scope.split(' ').map { |item| item.split(',') }.flatten
+        scope_list.join(' ')
+      end
+
+      def raw_info
+        url    = '/api/3.0/users/details.json'
+        params = {
+          'api_key'      => access_token.client.id,
+          'access_token' => access_token.token
+        }
+        @raw_info ||= access_token.get(url, :params => params).parsed['response']
+      end
+
+    end
+  end
+end

data/lib/j1_app/omniauth/strategies/facebook.rb

@@ -0,0 +1,181 @@
+require 'omniauth-oauth2'
+#require 'omniauth/facebook/signed_request'
+require 'openssl'
+require 'rack/utils'
+require 'uri'
+
+require_relative '../facebook/signed_request'
+
+module OmniAuth
+  module Strategies
+    class Facebook < OmniAuth::Strategies::OAuth2
+
+      class NoAuthorizationCodeError < StandardError; end
+
+      DEFAULT_SCOPE = 'email'
+
+      option :client_options, {
+          site: 'https://graph.facebook.com/v2.10',
+          authorize_url: "https://www.facebook.com/v2.10/dialog/oauth",
+          token_url: 'oauth/access_token'
+      }
+
+      option :access_token_options, {
+          header_format: 'OAuth %s',
+          param_name: 'access_token'
+      }
+
+      option :authorize_options, [:scope, :display, :auth_type]
+
+      uid { raw_info['id'] }
+
+      info do
+        prune!({
+                   'nickname' => raw_info['username'],
+                   'email' => raw_info['email'],
+                   'name' => raw_info['name'],
+                   'first_name' => raw_info['first_name'],
+                   'last_name' => raw_info['last_name'],
+                   'image' => image_url(uid, options),
+                   'description' => raw_info['bio'],
+                   'urls' => {
+                       'Facebook' => raw_info['link'],
+                       'Website' => raw_info['website']
+                   },
+                   'location' => (raw_info['location'] || {})['name'],
+                   'verified' => raw_info['verified']
+               })
+      end
+
+      extra do
+        hash = {}
+        hash['raw_info'] = raw_info unless skip_info?
+        prune! hash
+      end
+
+      def raw_info
+        @raw_info ||= access_token.get('me', info_options).parsed || {}
+      end
+
+      def info_options
+        params = {appsecret_proof: appsecret_proof}
+        params.merge!({fields: (options[:info_fields] || 'name,email')})
+        params.merge!({locale: options[:locale]}) if options[:locale]
+
+        { params: params }
+      end
+
+      def callback_phase
+        with_authorization_code! do
+          super
+        end
+      rescue NoAuthorizationCodeError => e
+        fail!(:no_authorization_code, e)
+      rescue OmniAuth::Facebook::SignedRequest::UnknownSignatureAlgorithmError => e
+        fail!(:unknown_signature_algorithm, e)
+      end
+
+      # NOTE If we're using code from the signed request then FB sets the redirect_uri to '' during the authorize
+      #      phase and it must match during the access_token phase:
+      #      https://github.com/facebook/facebook-php-sdk/blob/master/src/base_facebook.php#L477
+      def callback_url
+        if @authorization_code_from_signed_request_in_cookie
+          ''
+        else
+          # Fixes regression in omniauth-oauth2 v1.4.0 by https://github.com/intridea/omniauth-oauth2/commit/85fdbe117c2a4400d001a6368cc359d88f40abc7
+          options[:callback_url] || (full_host + script_name + callback_path)
+        end
+      end
+
+      def access_token_options
+        options.access_token_options.inject({}) { |h,(k,v)| h[k.to_sym] = v; h }
+      end
+
+      # You can pass +display+, +scope+, or +auth_type+ params to the auth request, if you need to set them dynamically.
+      # You can also set these options in the OmniAuth config :authorize_params option.
+      #
+      # For example: /auth/facebook?display=popup
+      def authorize_params
+        super.tap do |params|
+          %w[display scope auth_type].each do |v|
+            if request.params[v]
+              params[v.to_sym] = request.params[v]
+            end
+          end
+
+          params[:scope] ||= DEFAULT_SCOPE
+        end
+      end
+
+      protected
+
+      def build_access_token
+        super.tap do |token|
+          token.options.merge!(access_token_options)
+        end
+      end
+
+      private
+
+      def signed_request_from_cookie
+        @signed_request_from_cookie ||= raw_signed_request_from_cookie && OmniAuth::Facebook::SignedRequest.parse(raw_signed_request_from_cookie, client.secret)
+      end
+
+      def raw_signed_request_from_cookie
+        request.cookies["fbsr_#{client.id}"]
+      end
+
+      # Picks the authorization code in order, from:
+      #
+      # 1. The request 'code' param (manual callback from standard server-side flow)
+      # 2. A signed request from cookie (passed from the client during the client-side flow)
+      def with_authorization_code!
+        if request.params.key?('code')
+          yield
+        elsif code_from_signed_request = signed_request_from_cookie && signed_request_from_cookie['code']
+          request.params['code'] = code_from_signed_request
+          @authorization_code_from_signed_request_in_cookie = true
+          # NOTE The code from the signed fbsr_XXX cookie is set by the FB JS SDK will confirm that the identity of the
+          #      user contained in the signed request matches the user loading the app.
+          original_provider_ignores_state = options.provider_ignores_state
+          options.provider_ignores_state = true
+          begin
+            yield
+          ensure
+            request.params.delete('code')
+            @authorization_code_from_signed_request_in_cookie = false
+            options.provider_ignores_state = original_provider_ignores_state
+          end
+        else
+          raise NoAuthorizationCodeError, 'must pass either a `code` (via URL or by an `fbsr_XXX` signed request cookie)'
+        end
+      end
+
+      def prune!(hash)
+        hash.delete_if do |_, value|
+          prune!(value) if value.is_a?(Hash)
+          value.nil? || (value.respond_to?(:empty?) && value.empty?)
+        end
+      end
+
+      def image_url(uid, options)
+        uri_class = options[:secure_image_url] ? URI::HTTPS : URI::HTTP
+        site_uri = URI.parse(client.site)
+        url = uri_class.build({host: site_uri.host, path: "#{site_uri.path}/#{uid}/picture"})
+
+        query = if options[:image_size].is_a?(String) || options[:image_size].is_a?(Symbol)
+                  { type: options[:image_size] }
+                elsif options[:image_size].is_a?(Hash)
+                  options[:image_size]
+                end
+        url.query = Rack::Utils.build_query(query) if query
+
+        url.to_s
+      end
+
+      def appsecret_proof
+        @appsecret_proof ||= OpenSSL::HMAC.hexdigest(OpenSSL::Digest::SHA256.new, client.secret, access_token.token)
+      end
+    end
+  end
+end

data/lib/j1_app/omniauth/strategies/github.rb

@@ -0,0 +1,79 @@
+module OmniAuth
+  module Strategies
+    class GitHub < OmniAuth::Strategies::OAuth2
+
+      option :client_options, {
+        :site => 'https://api.github.com',
+        :authorize_url => 'https://github.com/login/oauth/authorize',
+        :token_url => 'https://github.com/login/oauth/access_token'
+      }
+
+      def request_phase
+        super
+      end
+
+      def authorize_params
+        super.tap do |params|
+          %w[scope client_options].each do |v|
+            if request.params[v]
+              params[v.to_sym] = request.params[v]
+            end
+          end
+        end
+      end
+
+      uid { raw_info['id'].to_s }
+
+      info do
+        {
+          'nickname' => raw_info['login'],
+          'email' => email,
+          'name' => raw_info['name'],
+          'image' => raw_info['avatar_url'],
+          'urls' => {
+              'GitHub' => raw_info['html_url'],
+              'Blog' => raw_info['blog'],
+          }
+        }
+      end
+
+      extra do
+        {:raw_info => raw_info, :all_emails => emails}
+      end
+
+      def raw_info
+        access_token.options[:mode] = :query
+        @raw_info ||= access_token.get('user').parsed
+      end
+
+      def email
+        (email_access_allowed?) ? primary_email : raw_info['email']
+      end
+
+      def primary_email
+        primary = emails.find{ |i| i['primary'] && i['verified'] }
+        primary && primary['email'] || nil
+      end
+
+      # The new /user/emails API - http://developer.github.com/v3/users/emails/#future-response
+      def emails
+        return [] unless email_access_allowed?
+        access_token.options[:mode] = :query
+        @emails ||= access_token.get('user/emails', :headers => { 'Accept' => 'application/vnd.github.v3' }).parsed
+      end
+
+      def email_access_allowed?
+        return false unless options['scope']
+        email_scopes = ['user', 'user:email']
+        scopes = options['scope'].split(',')
+        (scopes & email_scopes).any?
+      end
+
+      def callback_url
+        full_host + script_name + callback_path
+      end
+    end
+  end
+end
+
+OmniAuth.config.add_camelization 'github', 'GitHub'