jpablobr-sinatra-authorization 0.1.0

data/.gitignore

@@ -0,0 +1 @@
+dist

data/README.rdoc

@@ -0,0 +1,25 @@
+= Sinatra Authorization
+
+HTTP Authorization helpers for Sinatra.
+
+== Example
+
+require "sinatra/authorization"
+
+set :authorization_realm, "Protected zone"
+
+helpers do
+  def authorize(login, password)
+    login == "admin" && password == "secret"
+  end
+end
+
+get "/" do
+  "Hello"
+end
+
+get "/admin" do
+  login_required
+
+  "Welcome in protected zone"
+end

data/Rakefile

@@ -0,0 +1,19 @@
+require 'rubygems'
+require 'rake'
+
+begin
+  require 'jeweler'
+  Jeweler::Tasks.new do |gemspec|
+    gemspec.name = "jpablobr-sinatra-authorization"
+    gemspec.summary = "jpablobr-sinatra-authorization HTTP Authorization helpers for Sinatra."
+    gemspec.description = "jpablobr-sinatra-authorization HTTP Authorization helpers for Sinatra."
+    gemspec.email = "xjpablobrx@gmail.com"
+    gemspec.homepage = "http://github.com/jpablobr/sinatra-authorization"
+    gemspec.authors = ["Jose Pablo Barrantes"]
+  end
+  Jeweler::GemcutterTasks.new
+rescue LoadError
+  puts "Jeweler not available. Install it with: sudo gem install jeweler -s http://gemcutter.org"
+end
+
+Dir["#{File.dirname(__FILE__)}/tasks/*.rake"].sort.each { |ext| load ext }

data/VERSION

@@ -0,0 +1 @@
+0.1.0

data/lib/sinatra/authorization.rb

@@ -0,0 +1,64 @@
+require "sinatra/base"
+
+module Sinatra
+  # HTTP Authorization helpers for Sinatra.
+  #
+  # In your helpers module, include Sinatra::Authorization and then define
+  # an #authorize(user, password) method to handle user provided
+  # credentials.
+  #
+  # Inside your events, call #login_required to trigger the HTTP
+  # Authorization window to pop up in the browser.
+  #
+  # Code adapted from {Ryan Tomayko}[http://tomayko.com/about] and
+  # {Christopher Schneid}[http://gittr.com], shared under an MIT License
+  module Authorization
+    # Redefine this method on your helpers block to actually contain
+    # your authorization logic.
+    def authorize(username, password)
+      false
+    end
+
+    # From you app, call set :authorization_realm, "my app" to set this
+    # or define a #authorization_realm method in your helpers block.
+    def authorization_realm
+      Sinatra::Default.authorization_realm
+    end
+
+    # Call in any event that requires authentication
+    def login_required
+      return if authorized?
+      unauthorized! unless auth.provided?
+      bad_request!  unless auth.basic?
+      unauthorized! unless authorize(*auth.credentials)
+      request.env['REMOTE_USER'] = auth.username
+    end
+
+    # Convenience method to determine if a user is logged in
+    def authorized?
+      !!request.env['REMOTE_USER']
+    end
+    alias :logged_in? :authorized?
+
+    # Name provided by the current user to log in
+    def current_user
+      request.env['REMOTE_USER']
+    end
+
+    private
+      def auth
+        @auth ||= Rack::Auth::Basic::Request.new(request.env)
+      end
+
+      def unauthorized!(realm=authorization_realm)
+        response["WWW-Authenticate"] = %(Basic realm="#{realm}")
+        throw :halt, [ 401, 'Authorization Required' ]
+      end
+
+      def bad_request!
+        throw :halt, [ 400, 'Bad Request' ]
+      end
+  end
+
+  helpers Authorization
+end

data/test/authorization_test.rb

@@ -0,0 +1,66 @@
+require "test/unit"
+require "rack/test"
+require "context"
+require "pending"
+
+require File.dirname(__FILE__) + "/../lib/sinatra/authorization"
+
+class AuthorizationApp < Sinatra::Default
+  set :environment, :test
+
+  get "/" do
+    login_required
+
+    "Welcome in protected zone"
+  end
+
+  def authorize(username, password)
+    username == "user" && password = "test"
+  end
+
+  def authorization_realm
+    "Move on"
+  end
+end
+
+class SinatraAuthorizationTest < Test::Unit::TestCase
+  before do
+    @session = Rack::Test::Session.new(AuthorizationApp)
+  end
+
+  def basic_auth(user="user", password="test")
+    credentials = ["#{user}:#{password}"].pack("m*")
+
+    { "HTTP_AUTHORIZATION" => "Basic #{credentials}" }
+  end
+
+  it "is authorized with correct credentials" do
+    @session.get "/", {}, basic_auth
+    assert_equal 200, @session.last_response.status
+    assert_equal ["Welcome in protected zone"], @session.last_response.body
+  end
+
+  it "sets REMOTE_USER" do
+    pending "TODO"
+  end
+
+  it "is unauthorized without credentials" do
+    @session.get "/"
+    assert_equal 401, @session.last_response.status
+  end
+
+  it "is unauthorized with incorrect credentials" do
+    @session.get "/", {}, basic_auth("evil", "wrong")
+    assert_equal 401, @session.last_response.status
+  end
+
+  it "returns specified realm" do
+    @session.get "/"
+    assert_equal %Q(Basic realm="Move on"), @session.last_response["WWW-Authenticate"]
+  end
+
+  it "returns a 400, Bad Request if not basic auth" do
+    @session.get "/", {}, { "HTTP_AUTHORIZATION" => "Foo bar" }
+    assert_equal 400, @session.last_response.status
+  end
+end

metadata

@@ -0,0 +1,67 @@
+--- !ruby/object:Gem::Specification 
+name: jpablobr-sinatra-authorization
+version: !ruby/object:Gem::Version 
+  prerelease: false
+  segments: 
+  - 0
+  - 1
+  - 0
+  version: 0.1.0
+platform: ruby
+authors: 
+- Jose Pablo Barrantes
+autorequire: 
+bindir: bin
+cert_chain: []
+
+date: 2010-04-25 00:00:00 -06:00
+default_executable: 
+dependencies: []
+
+description: jpablobr-sinatra-authorization HTTP Authorization helpers for Sinatra.
+email: xjpablobrx@gmail.com
+executables: []
+
+extensions: []
+
+extra_rdoc_files: 
+- README.rdoc
+files: 
+- .gitignore
+- README.rdoc
+- Rakefile
+- VERSION
+- lib/sinatra/authorization.rb
+- test/authorization_test.rb
+has_rdoc: true
+homepage: http://github.com/jpablobr/sinatra-authorization
+licenses: []
+
+post_install_message: 
+rdoc_options: 
+- --charset=UTF-8
+require_paths: 
+- lib
+required_ruby_version: !ruby/object:Gem::Requirement 
+  requirements: 
+  - - ">="
+    - !ruby/object:Gem::Version 
+      segments: 
+      - 0
+      version: "0"
+required_rubygems_version: !ruby/object:Gem::Requirement 
+  requirements: 
+  - - ">="
+    - !ruby/object:Gem::Version 
+      segments: 
+      - 0
+      version: "0"
+requirements: []
+
+rubyforge_project: 
+rubygems_version: 1.3.6
+signing_key: 
+specification_version: 3
+summary: jpablobr-sinatra-authorization HTTP Authorization helpers for Sinatra.
+test_files: 
+- test/authorization_test.rb