jekyll-auth-naked 0.1.17

checksums.yaml

@@ -0,0 +1,7 @@
+---
+SHA1:
+  metadata.gz: 5aef66ac82523d7f44ad306b8ac543317906d467
+  data.tar.gz: f5562e1509db3ff9f6ed625045d9c70d94e4e6dd
+SHA512:
+  metadata.gz: 48365c25a0a2187f740e2a052aa2fddb66c51ae82247e23716afc5e34b4aa27a0541c1ca740c0b1ddeb291850b14d696a2fcb0fb4e25cb9675c1c75cb6425c61
+  data.tar.gz: d555d112e93ad2cba5fd919903bffbbf64406cfae9e156d21e85c619ee18813bc3be34057e02c74534fd9118629b641cab8f3e065159d9e9f6ea12ebdf15e0c5

data/.gitignore

@@ -0,0 +1,3 @@
+_site
+*.gem
+.env

data/Rakefile

@@ -0,0 +1,9 @@
+# This file is auto-generated by Jekyll Auth
+# Feel free to add additional Rake tasks so long as
+# `rake assets:precompile` continues to generate the jekyll site
+
+namespace :assets do
+  task :precompile do
+    sh "bundle exec jekyll-auth build"
+  end
+end

data/bin/jekyll-auth-naked

@@ -0,0 +1,148 @@
+#!/usr/bin/env ruby
+# Command-line interface for jekyll-auth-naked
+
+require 'rubygems'
+require 'active_support/core_ext'
+require 'commander/import'
+require 'rake'
+require 'jekyll-auth-naked'
+require 'git'
+
+def changed?
+  git = Git.init
+  git.diff('HEAD', 'config.ru').entries.length != 0
+end
+
+program :version, JekyllAuthNaked::VERSION
+
+program :description, <<-DESCRIPTION
+A simple way to use Github Oauth to serve a protected jekyll site to your GitHub organization
+DESCRIPTION
+
+command :new do |c|
+
+  c.syntax = 'jekyll-auth-naked new'
+
+  c.description = "Initialize an existing Jekyll site as a Jekyll Auth site"
+
+  c.action do |args, options|
+
+    source = File.expand_path( "../", File.dirname(__FILE__) )
+
+    destination = Dir.pwd
+
+    say "Initiating new Jekyll Auth site in #{destination}"
+
+    ["config.ru", ".gitignore"].each do |file|
+      if File.exist? "#{destination}/#{file}"
+        say "* #{destination}/#{file} already exists... skipping."
+      else
+        say "* creating #{destination}/#{file}"
+        FileUtils.cp "#{source}/#{file}", "#{destination}/#{file}"
+      end
+    end
+
+    if changed?
+      system "git status"
+      say <<-CHANGES.strip_heredoc
+      Looks like you've made some changes, you may want to do a git
+      commit and git push sometime soon
+      CHANGES
+    end
+
+    say <<-COMPLETE
+    Setup complete. Run jekyll-auth-naked to view the authenticated site.
+    COMPLETE
+
+  end
+end
+
+command :setup do |c|
+
+  c.syntax = "jekyll-auth-naked setup"
+
+  c.description = "Configure your Jekyll Auth Naked site"
+
+  c.action do |args, options|
+    git = Git.init
+
+    git.add "config.ru"
+
+    if changed?
+      git.commit "[Jekyll Auth Naked] Initial setup"
+    end
+
+    say "Awesome. Let's config our GitHub settings."
+
+    client_id = ask "What's your GitHub Client ID? "
+    client_secret = ask "What's your GitHub Client Secret? "
+    team_id = ask "What's your GitHub Team ID?"
+
+    config_env = <<-EOConfig.strip_heredoc
+    GITHUB_TEAM_ID=#{team_id}
+    GITHUB_CLIENT_ID=#{client_id}
+    GITHUB_CLIENT_SECRET=#{client_secret}
+    EOConfig
+
+    if File.exist? ".env"
+      say "You already have a .env, make sure it has these vars..."
+      say config_env
+    else
+      File.open(".env", "w") do |f|
+        f.puts config_env
+      end
+    end
+  end
+end
+
+command :serve do |c|
+  c.syntax = "jekyll-auth-naked serve"
+  c.description = "Run Jekyll Auth site locally"
+  c.action do |args, options|
+
+    # Ensure environmental variables are set
+    ["GITHUB_CLIENT_ID", "GITHUB_CLIENT_SECRET"].each do |var|
+      next unless ENV[var].nil?
+
+      say <<-WHOOPS.strip_heredoc
+
+      Whoops. Looks like you forgot to tell Jekyll Auth Naked about
+      your app" Be sure to add these vars to the project's `.env`
+
+      GITHUB_CLIENT_ID=[client id]
+      GITHUB_CLIENT_SECRET=[client secret]
+      GITHUB_TEAM_ID=[team id]
+
+      See the readme for more information on where to find these
+      WHOOPS
+
+      exit(1)
+    end
+
+    # build site
+    command(:build).run
+
+    say <<-SPIN_UP.strip_heredoc
+    Spinning up the server with authentication. Use CTRL-C to stop.
+    To preview the site without authentication, use `jekyll serve`
+    SPIN_UP
+
+    sh "bundle exec rackup -p 4000"
+
+  end
+end
+
+# Run the standard jekyll build command
+# Called by Rake task, to allow the gem
+# to add functionality here in the future
+command :build do |c|
+  c.syntax = 'jekyll-auth build'
+  c.description = "Build Jekyll site"
+  c.action do |args, options|
+    say "building the site..."
+    sh "bundle exec jekyll build"
+    say "site built."
+  end
+end
+
+default_command :serve

data/config.ru

@@ -0,0 +1,4 @@
+# This file is auto-generated by Jekyll Auth Naked
+
+require "jekyll-auth-naked"
+run JekyllAuthNaked.site

data/lib/jekyll-auth-naked.rb

@@ -0,0 +1,20 @@
+require 'rubygems'
+require 'sinatra-index'
+require 'sinatra_auth_github'
+require 'rack'
+require 'dotenv'
+require 'safe_yaml'
+require File.dirname(__FILE__) + '/jekyll-auth-naked/version'
+require File.dirname(__FILE__) + '/jekyll-auth-naked/config'
+require File.dirname(__FILE__) + '/jekyll-auth-naked/auth-site'
+require File.dirname(__FILE__) + '/jekyll-auth-naked/jekyll-site'
+Dotenv.load
+
+class JekyllAuthNaked
+  def self.site
+    Rack::Builder.new do
+      use JekyllAuthNaked::AuthSite
+      run JekyllAuthNaked::JekyllSite
+    end
+  end
+end

data/lib/jekyll-auth-naked/auth-site.rb

@@ -0,0 +1,67 @@
+class JekyllAuthNaked
+  class AuthSite < Sinatra::Base
+
+    require 'json'
+    require 'openssl'
+
+    # require ssl
+    configure :production do
+      require 'rack-ssl-enforcer'
+      use Rack::SslEnforcer if JekyllAuthNaked.ssl?
+    end
+
+    use Rack::Session::Cookie, {
+      http_only: true,
+      secret:    ENV['SESSION_SECRET'] || SecureRandom.hex
+    }
+
+    set :github_options, {
+      client_id:      ENV['GITHUB_CLIENT_ID'],
+      client_secret:  ENV['GITHUB_CLIENT_SECRET'],
+      scopes:         'user'
+    }
+
+    register Sinatra::Auth::Github
+
+    before %r{^(?!/hook$)} do
+      pass if JekyllAuthNaked.whitelist && JekyllAuthNaked.whitelist.match(request.path_info)
+      if ENV['GITHUB_TEAM_ID']
+        github_team_authenticate!(ENV['GITHUB_TEAM_ID'])
+      else
+        puts "ERROR: Jekyll Auth Naked is refusing to serve your site."
+        puts "Looks like your oauth credentials are not properly configured. RTFM."
+        halt 401
+      end
+    end
+
+    post '/hook' do
+
+      secret = ENV['GITHUB_WEBHOOK_SECRET']
+      HMAC_DIGEST = OpenSSL::Digest.new('sha1')
+      body = request.body.read
+      key = "sha1=#{OpenSSL::HMAC.hexdigest(HMAC_DIGEST, secret, body)}"
+
+      unless request.env['HTTP_X_HUB_SIGNATURE'] == key
+        puts "Github webhook secret failed to match"
+        halt 401
+      end
+
+      puts " Hook -------------------------------------------------------- "
+      puts request.env.to_yaml
+
+      puts " Request body ------------------------------------------------ "
+      request.body.rewind
+      data = JSON.parse request.body.read
+      puts data.to_yaml
+
+      system "git pull"
+      system "jekyll build"
+
+    end
+
+    get '/logout' do
+      logout!
+      redirect '/'
+    end
+  end
+end

data/lib/jekyll-auth-naked/config.rb

@@ -0,0 +1,20 @@
+class JekyllAuthNaked
+  def self.setup_config
+    @config_file ||= YAML.safe_load_file(File.join(Dir.pwd, "_config.yml"))
+  end
+
+  def self.config
+    config_file = JekyllAuthNaked.setup_config
+    return {} if config_file.nil? || config_file["jekyll_auth_naked"].nil?
+    config_file["jekyll_auth_naked"]
+  end
+
+  def self.whitelist
+    whitelist = JekyllAuthNaked::config["whitelist"]
+    Regexp.new(whitelist.join("|")) unless whitelist.nil?
+  end
+
+  def self.ssl?
+    !!JekyllAuthNaked::config["ssl"]
+  end
+end

data/lib/jekyll-auth-naked/jekyll-site.rb

@@ -0,0 +1,7 @@
+class JekyllAuthNaked
+  class JekyllSite < Sinatra::Base
+    register Sinatra::Index
+    set :public_folder, '_site'
+    use_static_index 'index.html'
+  end
+end

data/lib/jekyll-auth-naked/version.rb

@@ -0,0 +1,3 @@
+class JekyllAuthNaked
+  VERSION = '0.1.17'
+end

metadata

@@ -0,0 +1,197 @@
+--- !ruby/object:Gem::Specification
+name: jekyll-auth-naked
+version: !ruby/object:Gem::Version
+  version: 0.1.17
+platform: ruby
+authors:
+- Jason Milkins
+autorequire: 
+bindir: bin
+cert_chain: []
+date: 2014-07-03 00:00:00.000000000 Z
+dependencies:
+- !ruby/object:Gem::Dependency
+  name: jekyll
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '2.0'
+  type: :runtime
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '2.0'
+- !ruby/object:Gem::Dependency
+  name: activesupport
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '4.1'
+  type: :runtime
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '4.1'
+- !ruby/object:Gem::Dependency
+  name: sinatra-index
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '0.0'
+  type: :runtime
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '0.0'
+- !ruby/object:Gem::Dependency
+  name: sinatra_auth_github
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '1.0'
+  type: :runtime
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '1.0'
+- !ruby/object:Gem::Dependency
+  name: commander
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '4.1'
+  type: :runtime
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '4.1'
+- !ruby/object:Gem::Dependency
+  name: git
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '1.2'
+  type: :runtime
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '1.2'
+- !ruby/object:Gem::Dependency
+  name: dotenv
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '0.11'
+  type: :runtime
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '0.11'
+- !ruby/object:Gem::Dependency
+  name: rake
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '10.3'
+  type: :runtime
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '10.3'
+- !ruby/object:Gem::Dependency
+  name: rack-ssl-enforcer
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '0.2'
+  type: :runtime
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '0.2'
+- !ruby/object:Gem::Dependency
+  name: safe_yaml
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '1.0'
+  type: :runtime
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '1.0'
+description: |2
+                              A simple way to self-host a Github OAuth protected jekyll site to your
+                              GitHub Team. Forked from Jekyll-Auth, without the Heroku dependency, add
+                              github webhook support, and intended for a self-hosted environment.
+email: jasonm23@gmail.com
+executables:
+- jekyll-auth-naked
+extensions: []
+extra_rdoc_files: []
+files:
+- ".gitignore"
+- Rakefile
+- bin/jekyll-auth-naked
+- config.ru
+- lib/jekyll-auth-naked.rb
+- lib/jekyll-auth-naked/auth-site.rb
+- lib/jekyll-auth-naked/config.rb
+- lib/jekyll-auth-naked/jekyll-site.rb
+- lib/jekyll-auth-naked/version.rb
+homepage: https://github.com/jasonm23/jekyll-auth-naked
+licenses:
+- MIT
+metadata: {}
+post_install_message: 
+rdoc_options: []
+require_paths:
+- lib
+required_ruby_version: !ruby/object:Gem::Requirement
+  requirements:
+  - - ">="
+    - !ruby/object:Gem::Version
+      version: '0'
+required_rubygems_version: !ruby/object:Gem::Requirement
+  requirements:
+  - - ">="
+    - !ruby/object:Gem::Version
+      version: '0'
+requirements: []
+rubyforge_project: 
+rubygems_version: 2.2.2
+signing_key: 
+specification_version: 4
+summary: A simple way to self-host a Github OAuth protected jekyll site to your GitHub
+  Team.
+test_files: []