kamiliff 0.29.0 → 0.33.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: a255c2f6b73407c86e8f993716595072c3dc1c8c8a655df0b626c13719eae8d0
-  data.tar.gz: 49b62ebd406218e682cb1fe2b68c7300695c53392cdce0938bc56fceb7c90e9a
+  metadata.gz: c1af1031691e8a44c53de0db7b33a2b0b6780c745e2132045ab423cad8ba8af9
+  data.tar.gz: a8735c527d1aa12471dd28c240e5cebb4e69cb3c15c95bd2e5c77ea5d845d26d
 SHA512:
-  metadata.gz: e9a989ee028a5e130b7ba041e79a57279510e39672411263c5087bb162603d8ccc04bf46f9ef03c7f0e11007f1b6707f2e9b208d6d031d4b53a50aa58e1d327b
-  data.tar.gz: '09fd775c392002cf34d7998ec020f779faa7a00fd977270056ac77ab786507cedc5187a6c2be1ebfe693389635a18fa5b815ef206af9791a72e5ff712533903f'
+  metadata.gz: 0a8b0cf61a6a580a936ea67dfc384d02dbf155ebdcc647a06ee82fd1f1077bf837ca3b4af7d4024701c919f136fcf7680e3fb6f39bcf8e17656b538df8701d25
+  data.tar.gz: a6f69448aa55004ba4561dfb6c95c54fccc27232a97a982f48c0909b932d017a672e50c9e9ef46fde9657cd2d4a23b2c0c82e26f0efe812e6ef3c09c16c05642

data/README.md

@@ -123,3 +123,9 @@ Create by [etrex](https://etrex.tw)
 
 ## License
 The gem is available as open source under the terms of the [MIT License](https://opensource.org/licenses/MIT).
+
+## How to test this gem
+
+```
+rails t
+```

data/app/controllers/liff_controller.rb

@@ -23,7 +23,7 @@ class LiffController < ActionController::Base
     # fix liff 2.0 redirect issue
     @need_reload = query["liff.state"].present?
 
-    # 需要從 session 讀取 @liff_param
+    # 需要從 session 讀取 @liff_param (使用電腦開啟 LIFF 頁面，第一次登入時的情況)
     if query["liffRedirectUri"].present?
       @liff_param = Base64DecodeService.new(session[:liff_param]).run
       session[:liff_param] = nil
@@ -75,22 +75,53 @@ class LiffController < ActionController::Base
     res&.to_s || e.full_message
   end
 
+
+  # profile format
+  # {
+  #   "userId"=>"U1234567890abcdefghijklmnopqrstuv",
+  #   "displayName"=>"user name",
+  #   "statusMessage"=>"user status message",
+  #   "pictureUrl"=>"https://this.is.an.image.url"
+  # }
   def source_info
     context = params["context"]
-    return nil if context.nil?
-
-    source_type = context["type"].gsub("utou", "user")
-    source_group_id = context["roomId"] || context["groupId"] || context["userId"]
-    source_user_id = context["userId"]
+    return {} if context.nil?
 
     profile = params["profile"]
+    return {} if profile.nil?
+
+    # authorize the user id
+    decoded_id_token = get_decoded_id_token
+    return {} unless decoded_id_token["sub"] == profile["userId"] && decoded_id_token["sub"] == profile["userId"]
+
+    source_type = context["type"].gsub("utou", "user")
+    source_group_id = context["roomId"] || context["groupId"] || decoded_id_token["sub"]
+    source_user_id = decoded_id_token["sub"]
 
     {
       platform_type: 'line',
       source_type: source_type,
       source_group_id: source_group_id,
       source_user_id: source_user_id,
-      profile: profile
+      context: context,
+      profile: profile,
+      decoded_id_token: decoded_id_token
     }
   end
+
+  # decoded_id_token is JWT format
+  # {
+  #  "iss"=>"https://access.line.me",
+  #  "sub"=>"U1234567890abcdefghijklmnopqrstuv",
+  #  "aud"=>"1234567890",
+  #  "exp"=>1641638901,
+  #  "iat"=>1641635301,
+  #  "name"=>"user name",
+  #  "picture"=>"https://this.is.an.image.url"
+  # }
+  def get_decoded_id_token
+    id_token = params["idToken"]
+    Kamiliff.line_login_client.verify_id_token(id_token: id_token)
+  end
+
 end

data/app/views/liff/_send_messages.liff.erb

@@ -0,0 +1,16 @@
+<%
+  messages = [messages] if messages.is_a? Hash
+  messages = messages.to_json if messages.is_a? Array
+%>
+
+<script>
+  (function(){
+    async function send_messages(){
+      const messages = <%= raw messages %>;
+      await liff.sendMessages(messages);
+      liff.closeWindow();
+    }
+
+    send_messages();
+  })();
+</script>

data/app/views/liff/_share_target_picker.liff.erb

@@ -1,3 +1,8 @@
+<%
+  messages = [messages] if messages.is_a? Hash
+  messages = messages.to_json if messages.is_a? Array
+%>
+
 <script>
   (function(){
     async function share_target_picker(messages){

data/app/views/liff/entry.html.erb

@@ -38,12 +38,22 @@ let open_liff_page = (function(){
     }
   }
 
+  async function get_liff_profile(){
+    try{
+      return await liff.getProfile();
+    }catch(error){
+      return {};
+    }
+  }
+
   async function get_liff_data(){
-    const profile = await liff.getProfile();
+    const profile = await get_liff_profile();
     const context = liff.getContext();
+    const idToken = liff.getIDToken();
     return {
-      profile,
-      context
+      context,
+      idToken,
+      profile
     }
   }
 

data/config/initializers/mime_types.rb

@@ -3,4 +3,4 @@
 # Add new mime types for use in respond_to blocks:
 # Mime::Type.register "text/richtext", :rtf
 
-Mime::Type.register "text/html", :liff
+Mime::Type.register_alias "text/html", :liff

data/lib/kamiliff/services/base64_decode_service.rb

@@ -7,7 +7,8 @@ class Base64DecodeService
   end
 
   def run
-    json = Base64.decode64(@base64_string)
+    string = @base64_string.tr('-','+').tr('_','/')
+    json = Base64.decode64(string)
     options = JSON.parse(json)
     options.with_indifferent_access
   end

data/lib/kamiliff/version.rb

@@ -1,3 +1,3 @@
 module Kamiliff
-  VERSION = '0.29.0'
+  VERSION = '0.33.0'
 end

data/lib/kamiliff.rb

@@ -2,7 +2,50 @@ require "kamiliff/engine"
 require "kamiliff/services/base64_encode_service"
 require "kamiliff/services/base64_decode_service"
 require "kamiliff/services/liff_service"
+require "line_login"
 
 module Kamiliff
-  # Your code goes here...
+  # env
+  mattr_writer :line_login_channel_id
+  mattr_writer :line_login_channel_secret
+  mattr_writer :line_login_redirect_uri
+
+  mattr_writer :liff_url_compact
+  mattr_writer :liff_url_tall
+  mattr_writer :liff_url_full
+
+  def self.line_login_channel_id
+    @@line_login_channel_id || ENV["LINE_LOGIN_CHANNEL_ID"]
+  end
+
+  def self.line_login_channel_secret
+    @@line_login_channel_secret || ENV["LINE_LOGIN_CHANNEL_SECRET"]
+  end
+
+  def self.line_login_redirect_uri
+    @@line_login_redirect_uri || ENV["LINE_LOGIN_REDIRECT_URI"]
+  end
+
+  def self.liff_url_compact
+    @@liff_url_compact || ENV["LIFF_COMPACT"]
+  end
+
+  def self.liff_url_tall
+    @@liff_url_tall || ENV["LIFF_TALL"]
+  end
+
+  def self.liff_url_full
+    @@liff_url_full || ENV["LIFF_FULL"]
+  end
+
+  def self.line_login_client
+    @line_login_client ||= LineLogin::Client.new(
+      client_id: Kamiliff.line_login_channel_id,
+      client_secret: Kamiliff.line_login_channel_secret
+    )
+  end
+
+  def self.setup
+    yield self
+  end
 end

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: kamiliff
 version: !ruby/object:Gem::Version
-  version: 0.29.0
+  version: 0.33.0
 platform: ruby
 authors:
 - etrex kuo
 autorequire:
 bindir: bin
 cert_chain: []
-date: 2021-06-29 00:00:00.000000000 Z
+date: 2022-01-09 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: rails
@@ -24,6 +24,20 @@ dependencies:
     - - ">="
       - !ruby/object:Gem::Version
         version: 5.0.0
+- !ruby/object:Gem::Dependency
+  name: line_login
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: 0.1.0
+  type: :runtime
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: 0.1.0
 description: An easy way to use LINE Front-end Framework(LIFF) on rails.
 email:
 - et284vu065k3@gmail.com
@@ -39,6 +53,7 @@ files:
 - app/helpers/liff_helper.rb
 - app/views/layouts/application.liff.erb
 - app/views/layouts/liff.html.erb
+- app/views/liff/_send_messages.liff.erb
 - app/views/liff/_share_target_picker.liff.erb
 - app/views/liff/entry.html.erb
 - app/views/liff/route.html.erb
@@ -72,7 +87,7 @@ required_rubygems_version: !ruby/object:Gem::Requirement
     - !ruby/object:Gem::Version
       version: '0'
 requirements: []
-rubygems_version: 3.1.2
+rubygems_version: 3.1.4
 signing_key:
 specification_version: 4
 summary: An easy way to use LINE Front-end Framework(LIFF) on rails.