mais-access 1.0.7 → 1.1.1

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: f4040bf29b94e114552132c19526dad52b00c1a908cc14f5723f4446d4ac1063
-  data.tar.gz: 346fe0f6e32e3a6df68d2898f1964befce19c67f1ab354c62af5e82c45e986aa
+  metadata.gz: f88002e1195c7f1187c27fa7a244619fa3101a2ab91a650260dfcd9acb9d9912
+  data.tar.gz: fdc4e863615ef1ff267d989a0bdd2696ffa2bdbd876695cf4a15b484c4949aaf
 SHA512:
-  metadata.gz: 05f792c13094ecc7694b48d44bb0d3fd20199887c4ffd4a9513c85f4a7796537c5b4b23faee27ef764bfaffc6afe469e23919f33fadf1286224224ff364cc9a2
-  data.tar.gz: 33057723418743e8819f6b318f7e551ef22e24e062a9969acc0b933213416e2da1d0ffbf8302fae0623cf29263db2e62d7983f0795164fec834e7a02fc6f85d3
+  metadata.gz: 59f48ae598a636cfcaa9b82acb728e70977d7dbd384cf85404d3d11179db9ec46b79ce0c479790e4c05e1e13dd12f98f1d3bcd54a4bfa04f53cd662528d69dd9
+  data.tar.gz: e350a1b236ecefb20a7184d301c94c3be458c5ec4a8e1b81c986a17ef59257467c4fe89e324f1de48a5a699318073a0981800f4f8e6d33c90a1e9a58eb1df53c

data/lib/mais-access/dispatcher.rb

@@ -1,6 +1,6 @@
 module MaisAccess
     module Dispatcher
-        require 'net/http'
+        require 'net/https'
         require 'uri'
         require 'json'
         require 'mais-access/user'
@@ -13,14 +13,22 @@ module MaisAccess
             # Prompt the user for HTTP Basic credentials, or authenticate if they are cached in the session
             authenticate_or_request_with_http_basic("access - MAIS - #{MAIS_CLIENT}") do |login, password|
                 begin
+                    # Setup https connection and specify certificate bundle
+                    url = URI("#{ENV['MAIS_ACCOUNTS_HOSTNAME']}/authenticate")
+                    http = Net::HTTP.new(url.host, 443)
+                    http.use_ssl = true
+                    http.verify_mode = OpenSSL::SSL::VERIFY_PEER
+                    http.cert_store = OpenSSL::X509::Store.new
+                    http.cert_store.set_default_paths
+                    http.cert_store.add_file("/etc/pki/tls/certs/server.crt")
+
                     # Get the credentials and POST them to `accounts.scenycwork.net/authenticate`
-                    response = Net::HTTP.post_form(URI("#{ENV['MAIS_ACCOUNTS_HOSTNAME']}/authenticate"), { "username" => login, "password" => password })
-                    # Parse the JSON response
-                    body = JSON.parse(response.body)
+                    request = Net::HTTP::Post.new(url.path, {'Content-Type' => 'application/json'})
+                    request.set_form_data({ "username" => login, "password" => password })
+                    response = http.request(request)
 
-                    Rails.logger.info(response.code)
-                    Rails.logger.info(response.message)
-                    Rails.logger.info(response.class.name)
+                    # Parse the response body as JSON
+                    body = JSON.parse(response.body)
 
                     # If the user is valid, set the current mais user and passes the filter action
                     if response.code == '200' && body["authenticated"]

data/mais-access.gemspec

@@ -3,7 +3,7 @@ $LOAD_PATH.unshift(lib) unless $LOAD_PATH.include?(lib)
 
 Gem::Specification.new do |spec|
 	spec.name          = "mais-access"
-	spec.version       = "1.0.7"
+	spec.version       = "1.1.1"
 	spec.platform      = Gem::Platform::RUBY
 	spec.author        = "Elias Gabriel"
 	spec.email         = "me@eliasfgabriel.com"

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: mais-access
 version: !ruby/object:Gem::Version
-  version: 1.0.7
+  version: 1.1.1
 platform: ruby
 authors:
 - Elias Gabriel