microsoft_kiota_authentication_oauth 0.2.0 → 0.5.0
Sign up to get free protection for your applications and to get access to all the features.
- checksums.yaml +4 -4
- data/.github/CODEOWNERS +1 -0
- data/.github/dependabot.yml +12 -0
- data/.github/workflows/code-ql.yml +76 -0
- data/.github/workflows/conflicting-pr-label.yml +34 -0
- data/.github/workflows/projectsbot.yml +81 -0
- data/.github/workflows/release.yml +45 -0
- data/.github/workflows/ruby.yml +34 -0
- data/.gitignore +58 -0
- data/CHANGELOG.md +18 -0
- data/CODE_OF_CONDUCT.md +9 -0
- data/Gemfile +6 -0
- data/LICENSE +21 -0
- data/README.md +53 -0
- data/Rakefile +9 -0
- data/SECURITY.md +41 -0
- data/SUPPORT.md +25 -0
- data/lib/microsoft_kiota_authentication_oauth/contexts/authorization_code_context.rb +87 -0
- data/lib/microsoft_kiota_authentication_oauth/contexts/client_credential_context.rb +59 -0
- data/lib/microsoft_kiota_authentication_oauth/contexts/oauth_context.rb +30 -0
- data/lib/microsoft_kiota_authentication_oauth/contexts/oauth_custom_flow.rb +27 -0
- data/lib/microsoft_kiota_authentication_oauth/contexts/on_behalf_of_context.rb +72 -0
- data/lib/microsoft_kiota_authentication_oauth/extensions/oauth2_ext.rb +22 -0
- data/lib/microsoft_kiota_authentication_oauth/oauth_access_token_provider.rb +81 -0
- data/lib/microsoft_kiota_authentication_oauth/oauth_authentication_provider.rb +10 -0
- data/lib/microsoft_kiota_authentication_oauth/version.rb +5 -0
- data/lib/microsoft_kiota_authentication_oauth.rb +13 -4
- data/microsoft_kiota_authentication_oauth.gemspec +38 -0
- metadata +118 -11
checksums.yaml
CHANGED
|
@@ -1,7 +1,7 @@
|
|
|
1
1
|
---
|
|
2
2
|
SHA256:
|
|
3
|
-
metadata.gz:
|
|
4
|
-
data.tar.gz:
|
|
3
|
+
metadata.gz: 1527ce960c8fd9e79baa76159ad270a878c49c2bb9d09975cdafc360d4d8cda0
|
|
4
|
+
data.tar.gz: 930b0578b7ab8a9889b48cc511e2e450b6cfcc4eca61c38c294fab741a91baa1
|
|
5
5
|
SHA512:
|
|
6
|
-
metadata.gz:
|
|
7
|
-
data.tar.gz:
|
|
6
|
+
metadata.gz: 6a2b94d7d00cf56c082585a1280a2fe2e13c2079f6706ff06509e5f23d106112c536a7536f15fba5d0bd515efad375bb5c224f75d37303b68ec8de99066eba14
|
|
7
|
+
data.tar.gz: 2d34b6075c37108cb3fbf008e7447678513f7f2bea644911efaa36cfd1fb763c4f119e76d5a4be39d13afdfed3ba0928164b3216f0fd49af748713a8f0191acd
|
data/.github/CODEOWNERS
ADDED
|
@@ -0,0 +1 @@
|
|
|
1
|
+
* @andrueastman @baywet @darrelmiller @zengin @MichaelMainer @ddyett @peombwa @nikithauc @ramsessanchez @calebkiage @Ndiritu @rkodev @gavinbarron
|
|
@@ -0,0 +1,76 @@
|
|
|
1
|
+
# For most projects, this workflow file will not need changing; you simply need
|
|
2
|
+
# to commit it to your repository.
|
|
3
|
+
#
|
|
4
|
+
# You may wish to alter this file to override the set of languages analyzed,
|
|
5
|
+
# or to provide custom queries or build logic.
|
|
6
|
+
#
|
|
7
|
+
# ******** NOTE ********
|
|
8
|
+
# We have attempted to detect the languages in your repository. Please check
|
|
9
|
+
# the `language` matrix defined below to confirm you have the correct set of
|
|
10
|
+
# supported CodeQL languages.
|
|
11
|
+
#
|
|
12
|
+
name: "CodeQL"
|
|
13
|
+
|
|
14
|
+
on:
|
|
15
|
+
push:
|
|
16
|
+
branches: [ "master", main ]
|
|
17
|
+
pull_request:
|
|
18
|
+
# The branches below must be a subset of the branches above
|
|
19
|
+
branches: [ "master" ]
|
|
20
|
+
schedule:
|
|
21
|
+
- cron: '41 2 * * 0'
|
|
22
|
+
|
|
23
|
+
jobs:
|
|
24
|
+
analyze:
|
|
25
|
+
name: Analyze
|
|
26
|
+
runs-on: ubuntu-latest
|
|
27
|
+
permissions:
|
|
28
|
+
actions: read
|
|
29
|
+
contents: read
|
|
30
|
+
security-events: write
|
|
31
|
+
|
|
32
|
+
strategy:
|
|
33
|
+
fail-fast: false
|
|
34
|
+
matrix:
|
|
35
|
+
language: [ 'ruby' ]
|
|
36
|
+
# CodeQL supports [ 'cpp', 'csharp', 'go', 'java', 'javascript', 'python', 'ruby' ]
|
|
37
|
+
# Use only 'java' to analyze code written in Java, Kotlin or both
|
|
38
|
+
# Use only 'javascript' to analyze code written in JavaScript, TypeScript or both
|
|
39
|
+
# Learn more about CodeQL language support at https://aka.ms/codeql-docs/language-support
|
|
40
|
+
|
|
41
|
+
steps:
|
|
42
|
+
- name: Checkout repository
|
|
43
|
+
uses: actions/checkout@v3
|
|
44
|
+
|
|
45
|
+
# Initializes the CodeQL tools for scanning.
|
|
46
|
+
- name: Initialize CodeQL
|
|
47
|
+
uses: github/codeql-action/init@v2
|
|
48
|
+
with:
|
|
49
|
+
languages: ${{ matrix.language }}
|
|
50
|
+
# If you wish to specify custom queries, you can do so here or in a config file.
|
|
51
|
+
# By default, queries listed here will override any specified in a config file.
|
|
52
|
+
# Prefix the list here with "+" to use these queries and those in the config file.
|
|
53
|
+
|
|
54
|
+
# Details on CodeQL's query packs refer to : https://docs.github.com/en/code-security/code-scanning/automatically-scanning-your-code-for-vulnerabilities-and-errors/configuring-code-scanning#using-queries-in-ql-packs
|
|
55
|
+
# queries: security-extended,security-and-quality
|
|
56
|
+
|
|
57
|
+
|
|
58
|
+
# Autobuild attempts to build any compiled languages (C/C++, C#, Go, or Java).
|
|
59
|
+
# If this step fails, then you should remove it and run the build manually (see below)
|
|
60
|
+
- name: Autobuild
|
|
61
|
+
uses: github/codeql-action/autobuild@v2
|
|
62
|
+
|
|
63
|
+
# ℹ️ Command-line programs to run using the OS shell.
|
|
64
|
+
# 📚 See https://docs.github.com/en/actions/using-workflows/workflow-syntax-for-github-actions#jobsjob_idstepsrun
|
|
65
|
+
|
|
66
|
+
# If the Autobuild fails above, remove it and uncomment the following three lines.
|
|
67
|
+
# modify them (or add more) to build your code if your project, please refer to the EXAMPLE below for guidance.
|
|
68
|
+
|
|
69
|
+
# - run: |
|
|
70
|
+
# echo "Run, Build Application using script"
|
|
71
|
+
# ./location_of_script_within_repo/buildscript.sh
|
|
72
|
+
|
|
73
|
+
- name: Perform CodeQL Analysis
|
|
74
|
+
uses: github/codeql-action/analyze@v2
|
|
75
|
+
with:
|
|
76
|
+
category: "/language:${{matrix.language}}"
|
|
@@ -0,0 +1,34 @@
|
|
|
1
|
+
# This is a basic workflow to help you get started with Actions
|
|
2
|
+
|
|
3
|
+
name: PullRequestConflicting
|
|
4
|
+
|
|
5
|
+
# Controls when the action will run. Triggers the workflow on push or pull request
|
|
6
|
+
# events but only for the master branch
|
|
7
|
+
on:
|
|
8
|
+
push:
|
|
9
|
+
branches: [ main ]
|
|
10
|
+
pull_request:
|
|
11
|
+
types: [synchronize]
|
|
12
|
+
branches: [ main ]
|
|
13
|
+
|
|
14
|
+
# A workflow run is made up of one or more jobs that can run sequentially or in parallel
|
|
15
|
+
jobs:
|
|
16
|
+
# This workflow contains a single job called "build"
|
|
17
|
+
build:
|
|
18
|
+
# The type of runner that the job will run on
|
|
19
|
+
runs-on: ubuntu-latest
|
|
20
|
+
|
|
21
|
+
# Steps represent a sequence of tasks that will be executed as part of the job
|
|
22
|
+
steps:
|
|
23
|
+
- name: check if prs are dirty
|
|
24
|
+
uses: eps1lon/actions-label-merge-conflict@releases/2.x
|
|
25
|
+
if: env.LABELING_TOKEN != '' && env.LABELING_TOKEN != null
|
|
26
|
+
id: check
|
|
27
|
+
with:
|
|
28
|
+
dirtyLabel: "conflicting"
|
|
29
|
+
repoToken: "${{ secrets.GITHUB_TOKEN }}"
|
|
30
|
+
continueOnMissingPermissions: true
|
|
31
|
+
commentOnDirty: 'This pull request has conflicting changes, the author must resolve the conflicts before this pull request can be merged.'
|
|
32
|
+
commentOnClean: 'Conflicts have been resolved. A maintainer will take a look shortly.'
|
|
33
|
+
env:
|
|
34
|
+
LABELING_TOKEN: ${{secrets.GITHUB_TOKEN }}
|
|
@@ -0,0 +1,81 @@
|
|
|
1
|
+
# This workflow is used to add new issues to GitHub Projects (Beta)
|
|
2
|
+
|
|
3
|
+
name: Add PR to project
|
|
4
|
+
on:
|
|
5
|
+
issues:
|
|
6
|
+
types: [opened]
|
|
7
|
+
jobs:
|
|
8
|
+
track_issue:
|
|
9
|
+
runs-on: ubuntu-latest
|
|
10
|
+
steps:
|
|
11
|
+
- name: Generate token
|
|
12
|
+
id: generate_token
|
|
13
|
+
uses: tibdex/github-app-token@021a2405c7f990db57f5eae5397423dcc554159c
|
|
14
|
+
with:
|
|
15
|
+
app_id: ${{ secrets.GRAPHBOT_APP_ID }}
|
|
16
|
+
private_key: ${{ secrets.GRAPHBOT_APP_PEM }}
|
|
17
|
+
|
|
18
|
+
- name: Get project data
|
|
19
|
+
env:
|
|
20
|
+
GITHUB_TOKEN: ${{ steps.generate_token.outputs.token }}
|
|
21
|
+
ORGANIZATION: microsoftgraph
|
|
22
|
+
PROJECT_NUMBER: 38
|
|
23
|
+
run: |
|
|
24
|
+
gh api graphql -f query='
|
|
25
|
+
query($org: String!, $number: Int!) {
|
|
26
|
+
organization(login: $org){
|
|
27
|
+
projectNext(number: $number) {
|
|
28
|
+
id
|
|
29
|
+
fields(first:20) {
|
|
30
|
+
nodes {
|
|
31
|
+
id
|
|
32
|
+
name
|
|
33
|
+
settings
|
|
34
|
+
}
|
|
35
|
+
}
|
|
36
|
+
}
|
|
37
|
+
}
|
|
38
|
+
}' -f org=$ORGANIZATION -F number=$PROJECT_NUMBER > project_data.json
|
|
39
|
+
|
|
40
|
+
echo 'PROJECT_ID='$(jq '.data.organization.projectNext.id' project_data.json) >> $GITHUB_ENV
|
|
41
|
+
echo 'STATUS_FIELD_ID='$(jq '.data.organization.projectNext.fields.nodes[] | select(.name== "Status") | .id' project_data.json) >> $GITHUB_ENV
|
|
42
|
+
echo 'TRIAGE_OPTION_ID='$(jq '.data.organization.projectNext.fields.nodes[] | select(.name== "Status") |.settings | fromjson.options[] | select(.name=="Needs Triage 🔍") |.id' project_data.json) >> $GITHUB_ENV
|
|
43
|
+
|
|
44
|
+
- name: Add Issue to project
|
|
45
|
+
env:
|
|
46
|
+
GITHUB_TOKEN: ${{ steps.generate_token.outputs.token }}
|
|
47
|
+
ISSUE_ID: ${{ github.event.issue.node_id }}
|
|
48
|
+
run: |
|
|
49
|
+
item_id="$( gh api graphql -f query='
|
|
50
|
+
mutation($project:ID!, $issue:ID!) {
|
|
51
|
+
addProjectNextItem(input: {projectId: $project, contentId: $issue}) {
|
|
52
|
+
projectNextItem {
|
|
53
|
+
id
|
|
54
|
+
}
|
|
55
|
+
}
|
|
56
|
+
}' -f project=$PROJECT_ID -f issue=$ISSUE_ID --jq '.data.addProjectNextItem.projectNextItem.id')"
|
|
57
|
+
|
|
58
|
+
echo 'ITEM_ID='$item_id >> $GITHUB_ENV
|
|
59
|
+
|
|
60
|
+
- name: Set Triage
|
|
61
|
+
env:
|
|
62
|
+
GITHUB_TOKEN: ${{ steps.generate_token.outputs.token }}
|
|
63
|
+
run: |
|
|
64
|
+
gh api graphql -f query='
|
|
65
|
+
mutation (
|
|
66
|
+
$project: ID!
|
|
67
|
+
$item: ID!
|
|
68
|
+
$status_field: ID!
|
|
69
|
+
$status_value: String!
|
|
70
|
+
) {
|
|
71
|
+
set_status: updateProjectNextItemField(input: {
|
|
72
|
+
projectId: $project
|
|
73
|
+
itemId: $item
|
|
74
|
+
fieldId: $status_field
|
|
75
|
+
value: $status_value
|
|
76
|
+
}) {
|
|
77
|
+
projectNextItem {
|
|
78
|
+
id
|
|
79
|
+
}
|
|
80
|
+
}
|
|
81
|
+
}' -f project=$PROJECT_ID -f item=$ITEM_ID -f status_field=$STATUS_FIELD_ID -f status_value=${{ env.TRIAGE_OPTION_ID }} --silent
|
|
@@ -0,0 +1,45 @@
|
|
|
1
|
+
name: Git Release
|
|
2
|
+
|
|
3
|
+
on:
|
|
4
|
+
push:
|
|
5
|
+
tags:
|
|
6
|
+
- "v[0-9]+.[0-9]+.[0-9]+"
|
|
7
|
+
workflow_dispatch:
|
|
8
|
+
|
|
9
|
+
jobs:
|
|
10
|
+
Git_Release:
|
|
11
|
+
runs-on: ubuntu-latest
|
|
12
|
+
steps:
|
|
13
|
+
- uses: actions/checkout@v3
|
|
14
|
+
- name: Github Release
|
|
15
|
+
uses: anton-yurchenko/git-release@v5.0
|
|
16
|
+
env:
|
|
17
|
+
GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN}}
|
|
18
|
+
DRAFT_RELEASE: "false"
|
|
19
|
+
PRE_RELEASE: "false"
|
|
20
|
+
CHANGELOG_FILE: "CHANGELOG.md"
|
|
21
|
+
ALLOW_EMPTY_CHANGELOG: "true"
|
|
22
|
+
|
|
23
|
+
deploy_prod:
|
|
24
|
+
environment:
|
|
25
|
+
name: production_feeds
|
|
26
|
+
runs-on: ubuntu-latest
|
|
27
|
+
steps:
|
|
28
|
+
- uses: actions/checkout@v3
|
|
29
|
+
- uses: ruby/setup-ruby@v1
|
|
30
|
+
with:
|
|
31
|
+
ruby-version: '3.1'
|
|
32
|
+
bundler-cache: true # runs 'bundle install' and caches installed gems automatically
|
|
33
|
+
bundler: 'latest'
|
|
34
|
+
cache-version: 1
|
|
35
|
+
- run: bundle exec rake
|
|
36
|
+
- name: Publish to RubyGems
|
|
37
|
+
run: |
|
|
38
|
+
mkdir -p $HOME/.gem
|
|
39
|
+
touch $HOME/.gem/credentials
|
|
40
|
+
chmod 0600 $HOME/.gem/credentials
|
|
41
|
+
printf -- "---\n:rubygems_api_key: ${GEM_HOST_API_KEY}\n" > $HOME/.gem/credentials
|
|
42
|
+
gem build *.gemspec
|
|
43
|
+
gem push *.gem
|
|
44
|
+
env:
|
|
45
|
+
GEM_HOST_API_KEY: "${{secrets.RUBYGEMS_AUTH_TOKEN}}"
|
|
@@ -0,0 +1,34 @@
|
|
|
1
|
+
name: Ruby
|
|
2
|
+
|
|
3
|
+
on:
|
|
4
|
+
workflow_dispatch:
|
|
5
|
+
push:
|
|
6
|
+
branches: [ main ]
|
|
7
|
+
pull_request:
|
|
8
|
+
|
|
9
|
+
jobs:
|
|
10
|
+
build:
|
|
11
|
+
strategy:
|
|
12
|
+
fail-fast: false
|
|
13
|
+
matrix:
|
|
14
|
+
os: [ubuntu-latest, macos-latest]
|
|
15
|
+
ruby-version: ['2.7', '3.0', '3.1', head, jruby, jruby-head, truffleruby, truffleruby-head]
|
|
16
|
+
runs-on: ${{ matrix.os }}
|
|
17
|
+
steps:
|
|
18
|
+
- uses: actions/checkout@v3
|
|
19
|
+
- uses: ruby/setup-ruby@v1
|
|
20
|
+
with:
|
|
21
|
+
ruby-version: ${{ matrix.ruby-version }}
|
|
22
|
+
bundler-cache: true # runs 'bundle install' and caches installed gems automatically
|
|
23
|
+
bundler: 'latest'
|
|
24
|
+
cache-version: 1
|
|
25
|
+
- name: Run tests
|
|
26
|
+
run: bundle exec rake
|
|
27
|
+
- name: Upload artifacts for ruby version 3 and ubuntu
|
|
28
|
+
if: ${{ matrix.os == 'ubuntu-latest' && matrix.ruby-version == '3.1'}}
|
|
29
|
+
uses: actions/upload-artifact@v3
|
|
30
|
+
with:
|
|
31
|
+
name: drop
|
|
32
|
+
path: |
|
|
33
|
+
./Gemfile.lock
|
|
34
|
+
./README.md
|
data/.gitignore
ADDED
|
@@ -0,0 +1,58 @@
|
|
|
1
|
+
*.gem
|
|
2
|
+
*.rbc
|
|
3
|
+
/.config
|
|
4
|
+
/coverage/
|
|
5
|
+
/InstalledFiles
|
|
6
|
+
/pkg/
|
|
7
|
+
/spec/reports/
|
|
8
|
+
/spec/examples.txt
|
|
9
|
+
/test/tmp/
|
|
10
|
+
/test/version_tmp/
|
|
11
|
+
/tmp/
|
|
12
|
+
|
|
13
|
+
# Used by dotenv library to load environment variables.
|
|
14
|
+
# .env
|
|
15
|
+
|
|
16
|
+
# Ignore Byebug command history file.
|
|
17
|
+
.byebug_history
|
|
18
|
+
|
|
19
|
+
## Specific to RubyMotion:
|
|
20
|
+
.dat*
|
|
21
|
+
.repl_history
|
|
22
|
+
build/
|
|
23
|
+
*.bridgesupport
|
|
24
|
+
build-iPhoneOS/
|
|
25
|
+
build-iPhoneSimulator/
|
|
26
|
+
|
|
27
|
+
## Specific to RubyMotion (use of CocoaPods):
|
|
28
|
+
#
|
|
29
|
+
# We recommend against adding the Pods directory to your .gitignore. However
|
|
30
|
+
# you should judge for yourself, the pros and cons are mentioned at:
|
|
31
|
+
# https://guides.cocoapods.org/using/using-cocoapods.html#should-i-check-the-pods-directory-into-source-control
|
|
32
|
+
#
|
|
33
|
+
# vendor/Pods/
|
|
34
|
+
|
|
35
|
+
## Documentation cache and generated files:
|
|
36
|
+
/.yardoc/
|
|
37
|
+
/_yardoc/
|
|
38
|
+
/doc/
|
|
39
|
+
/rdoc/
|
|
40
|
+
|
|
41
|
+
## Environment normalization:
|
|
42
|
+
/.bundle/
|
|
43
|
+
/vendor/bundle
|
|
44
|
+
/lib/bundler/man/
|
|
45
|
+
|
|
46
|
+
# for a library or gem, you might want to ignore these files since the code is
|
|
47
|
+
# intended to run in multiple environments; otherwise, check them in:
|
|
48
|
+
Gemfile.lock
|
|
49
|
+
.ruby-version
|
|
50
|
+
.ruby-gemset
|
|
51
|
+
|
|
52
|
+
# unless supporting rvm < 1.11.0 or doing something fancy, ignore this:
|
|
53
|
+
.rvmrc
|
|
54
|
+
|
|
55
|
+
# Used by RuboCop. Remote config files pulled in from inherit_from directive.
|
|
56
|
+
# .rubocop-https?--*
|
|
57
|
+
|
|
58
|
+
.rspec_status
|
data/CHANGELOG.md
ADDED
|
@@ -0,0 +1,18 @@
|
|
|
1
|
+
# Changelog
|
|
2
|
+
|
|
3
|
+
All notable changes to this project will be documented in this file.
|
|
4
|
+
|
|
5
|
+
The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/),
|
|
6
|
+
and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
|
|
7
|
+
|
|
8
|
+
## [Unreleased]
|
|
9
|
+
|
|
10
|
+
### Added
|
|
11
|
+
|
|
12
|
+
### Changed
|
|
13
|
+
|
|
14
|
+
## [0.5.0] - 2022-12-30
|
|
15
|
+
|
|
16
|
+
### Added
|
|
17
|
+
|
|
18
|
+
- Initial public release of the package.
|
data/CODE_OF_CONDUCT.md
ADDED
|
@@ -0,0 +1,9 @@
|
|
|
1
|
+
# Microsoft Open Source Code of Conduct
|
|
2
|
+
|
|
3
|
+
This project has adopted the [Microsoft Open Source Code of Conduct](https://opensource.microsoft.com/codeofconduct/).
|
|
4
|
+
|
|
5
|
+
Resources:
|
|
6
|
+
|
|
7
|
+
- [Microsoft Open Source Code of Conduct](https://opensource.microsoft.com/codeofconduct/)
|
|
8
|
+
- [Microsoft Code of Conduct FAQ](https://opensource.microsoft.com/codeofconduct/faq/)
|
|
9
|
+
- Contact [opencode@microsoft.com](mailto:opencode@microsoft.com) with questions or concerns
|
data/Gemfile
ADDED
data/LICENSE
ADDED
|
@@ -0,0 +1,21 @@
|
|
|
1
|
+
MIT License
|
|
2
|
+
|
|
3
|
+
Copyright (c) Microsoft Corporation.
|
|
4
|
+
|
|
5
|
+
Permission is hereby granted, free of charge, to any person obtaining a copy
|
|
6
|
+
of this software and associated documentation files (the "Software"), to deal
|
|
7
|
+
in the Software without restriction, including without limitation the rights
|
|
8
|
+
to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
|
|
9
|
+
copies of the Software, and to permit persons to whom the Software is
|
|
10
|
+
furnished to do so, subject to the following conditions:
|
|
11
|
+
|
|
12
|
+
The above copyright notice and this permission notice shall be included in all
|
|
13
|
+
copies or substantial portions of the Software.
|
|
14
|
+
|
|
15
|
+
THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
|
|
16
|
+
IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
|
|
17
|
+
FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
|
|
18
|
+
AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
|
|
19
|
+
LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
|
|
20
|
+
OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
|
|
21
|
+
SOFTWARE
|
data/README.md
ADDED
|
@@ -0,0 +1,53 @@
|
|
|
1
|
+
# Kiota OAuth authentication provider library for Ruby
|
|
2
|
+
|
|
3
|
+
|
|
4
|
+
|
|
5
|
+
The Kiota OAuth authentication provider library for Ruby is the authentication provider implementation with [OAuth2](https://rubygems.org/gems/oauth2).
|
|
6
|
+
|
|
7
|
+
A [Kiota](https://github.com/microsoft/kiota) generated project will need a reference to a authentication provider library to authenticate HTTP requests to an API endpoint.
|
|
8
|
+
|
|
9
|
+
Read more about Kiota [here](https://github.com/microsoft/kiota/blob/main/README.md).
|
|
10
|
+
|
|
11
|
+
## Using the OAuth library
|
|
12
|
+
|
|
13
|
+
## Installation
|
|
14
|
+
|
|
15
|
+
Add this line to your application's Gemfile:
|
|
16
|
+
|
|
17
|
+
```ruby
|
|
18
|
+
gem "microsoft_kiota_authentication_oauth", "0.5.0"
|
|
19
|
+
```
|
|
20
|
+
|
|
21
|
+
And then execute:
|
|
22
|
+
|
|
23
|
+
```shell
|
|
24
|
+
bundle install
|
|
25
|
+
```
|
|
26
|
+
|
|
27
|
+
Or install it yourself as:
|
|
28
|
+
|
|
29
|
+
```shell
|
|
30
|
+
gem install microsoft_kiota_authentication_oauth --version "0.5.0"
|
|
31
|
+
```
|
|
32
|
+
|
|
33
|
+
## Contributing
|
|
34
|
+
|
|
35
|
+
This project welcomes contributions and suggestions. Most contributions require you to agree to a
|
|
36
|
+
Contributor License Agreement (CLA) declaring that you have the right to, and actually do, grant us
|
|
37
|
+
the rights to use your contribution. For details, visit https://cla.opensource.microsoft.com.
|
|
38
|
+
|
|
39
|
+
When you submit a pull request, a CLA bot will automatically determine whether you need to provide
|
|
40
|
+
a CLA and decorate the PR appropriately (e.g., status check, comment). Simply follow the instructions
|
|
41
|
+
provided by the bot. You will only need to do this once across all repos using our CLA.
|
|
42
|
+
|
|
43
|
+
This project has adopted the [Microsoft Open Source Code of Conduct](https://opensource.microsoft.com/codeofconduct/).
|
|
44
|
+
For more information see the [Code of Conduct FAQ](https://opensource.microsoft.com/codeofconduct/faq/) or
|
|
45
|
+
contact [opencode@microsoft.com](mailto:opencode@microsoft.com) with any additional questions or comments.
|
|
46
|
+
|
|
47
|
+
## Trademarks
|
|
48
|
+
|
|
49
|
+
This project may contain trademarks or logos for projects, products, or services. Authorized use of Microsoft
|
|
50
|
+
trademarks or logos is subject to and must follow
|
|
51
|
+
[Microsoft's Trademark & Brand Guidelines](https://www.microsoft.com/en-us/legal/intellectualproperty/trademarks/usage/general).
|
|
52
|
+
Use of Microsoft trademarks or logos in modified versions of this project must not cause confusion or imply Microsoft sponsorship.
|
|
53
|
+
Any use of third-party trademarks or logos are subject to those third-party's policies.
|
data/Rakefile
ADDED
data/SECURITY.md
ADDED
|
@@ -0,0 +1,41 @@
|
|
|
1
|
+
<!-- BEGIN MICROSOFT SECURITY.MD V0.0.8 BLOCK -->
|
|
2
|
+
|
|
3
|
+
## Security
|
|
4
|
+
|
|
5
|
+
Microsoft takes the security of our software products and services seriously, which includes all source code repositories managed through our GitHub organizations, which include [Microsoft](https://github.com/microsoft), [Azure](https://github.com/Azure), [DotNet](https://github.com/dotnet), [AspNet](https://github.com/aspnet), [Xamarin](https://github.com/xamarin), and [our GitHub organizations](https://opensource.microsoft.com/).
|
|
6
|
+
|
|
7
|
+
If you believe you have found a security vulnerability in any Microsoft-owned repository that meets [Microsoft's definition of a security vulnerability](https://aka.ms/opensource/security/definition), please report it to us as described below.
|
|
8
|
+
|
|
9
|
+
## Reporting Security Issues
|
|
10
|
+
|
|
11
|
+
**Please do not report security vulnerabilities through public GitHub issues.**
|
|
12
|
+
|
|
13
|
+
Instead, please report them to the Microsoft Security Response Center (MSRC) at [https://msrc.microsoft.com/create-report](https://aka.ms/opensource/security/create-report).
|
|
14
|
+
|
|
15
|
+
If you prefer to submit without logging in, send email to [secure@microsoft.com](mailto:secure@microsoft.com). If possible, encrypt your message with our PGP key; please download it from the [Microsoft Security Response Center PGP Key page](https://aka.ms/opensource/security/pgpkey).
|
|
16
|
+
|
|
17
|
+
You should receive a response within 24 hours. If for some reason you do not, please follow up via email to ensure we received your original message. Additional information can be found at [microsoft.com/msrc](https://aka.ms/opensource/security/msrc).
|
|
18
|
+
|
|
19
|
+
Please include the requested information listed below (as much as you can provide) to help us better understand the nature and scope of the possible issue:
|
|
20
|
+
|
|
21
|
+
* Type of issue (e.g. buffer overflow, SQL injection, cross-site scripting, etc.)
|
|
22
|
+
* Full paths of source file(s) related to the manifestation of the issue
|
|
23
|
+
* The location of the affected source code (tag/branch/commit or direct URL)
|
|
24
|
+
* Any special configuration required to reproduce the issue
|
|
25
|
+
* Step-by-step instructions to reproduce the issue
|
|
26
|
+
* Proof-of-concept or exploit code (if possible)
|
|
27
|
+
* Impact of the issue, including how an attacker might exploit the issue
|
|
28
|
+
|
|
29
|
+
This information will help us triage your report more quickly.
|
|
30
|
+
|
|
31
|
+
If you are reporting for a bug bounty, more complete reports can contribute to a higher bounty award. Please visit our [Microsoft Bug Bounty Program](https://aka.ms/opensource/security/bounty) page for more details about our active programs.
|
|
32
|
+
|
|
33
|
+
## Preferred Languages
|
|
34
|
+
|
|
35
|
+
We prefer all communications to be in English.
|
|
36
|
+
|
|
37
|
+
## Policy
|
|
38
|
+
|
|
39
|
+
Microsoft follows the principle of [Coordinated Vulnerability Disclosure](https://aka.ms/opensource/security/cvd).
|
|
40
|
+
|
|
41
|
+
<!-- END MICROSOFT SECURITY.MD BLOCK -->
|
data/SUPPORT.md
ADDED
|
@@ -0,0 +1,25 @@
|
|
|
1
|
+
# TODO: The maintainer of this repo has not yet edited this file
|
|
2
|
+
|
|
3
|
+
**REPO OWNER**: Do you want Customer Service & Support (CSS) support for this product/project?
|
|
4
|
+
|
|
5
|
+
- **No CSS support:** Fill out this template with information about how to file issues and get help.
|
|
6
|
+
- **Yes CSS support:** Fill out an intake form at [aka.ms/onboardsupport](https://aka.ms/onboardsupport). CSS will work with/help you to determine next steps.
|
|
7
|
+
- **Not sure?** Fill out an intake as though the answer were "Yes". CSS will help you decide.
|
|
8
|
+
|
|
9
|
+
*Then remove this first heading from this SUPPORT.MD file before publishing your repo.*
|
|
10
|
+
|
|
11
|
+
# Support
|
|
12
|
+
|
|
13
|
+
## How to file issues and get help
|
|
14
|
+
|
|
15
|
+
This project uses GitHub Issues to track bugs and feature requests. Please search the existing
|
|
16
|
+
issues before filing new issues to avoid duplicates. For new issues, file your bug or
|
|
17
|
+
feature request as a new Issue.
|
|
18
|
+
|
|
19
|
+
For help and questions about using this project, please **REPO MAINTAINER: INSERT INSTRUCTIONS HERE
|
|
20
|
+
FOR HOW TO ENGAGE REPO OWNERS OR COMMUNITY FOR HELP. COULD BE A STACK OVERFLOW TAG OR OTHER
|
|
21
|
+
CHANNEL. WHERE WILL YOU HELP PEOPLE?**.
|
|
22
|
+
|
|
23
|
+
## Microsoft Support Policy
|
|
24
|
+
|
|
25
|
+
Support for this **PROJECT or PRODUCT** is limited to the resources listed above.
|
|
@@ -0,0 +1,87 @@
|
|
|
1
|
+
# frozen_string_literal: true
|
|
2
|
+
|
|
3
|
+
require 'oauth2'
|
|
4
|
+
require_relative './oauth_context'
|
|
5
|
+
|
|
6
|
+
module MicrosoftKiotaAuthenticationOAuth
|
|
7
|
+
# Token request context class for the authorization code grant type.
|
|
8
|
+
class AuthorizationCodeContext < MicrosoftKiotaAuthenticationOAuth::OAuthContext
|
|
9
|
+
attr_reader :grant_type, :redirect_uri, :additional_params,
|
|
10
|
+
:tenant_id, :client_id, :client_secret, :auth_code, :oauth_provider
|
|
11
|
+
attr_writer :scopes
|
|
12
|
+
|
|
13
|
+
# This is the initializer for AuthorizationCodeContext, the token request context when
|
|
14
|
+
# using the authorization code grant flow.
|
|
15
|
+
# :params
|
|
16
|
+
# tenant_id: a string containing the tenant id
|
|
17
|
+
# client_id: a string containing the client id
|
|
18
|
+
# client_secret: a string containing the client secret
|
|
19
|
+
# redirect_uri: a string containing redirect_uri
|
|
20
|
+
# auth_code: a string containting the auth code; default is nil, can be updated post-initialization
|
|
21
|
+
def initialize(tenant_id, client_id, client_secret, redirect_uri, auth_code = nil)
|
|
22
|
+
raise StandardError, 'redirect_uri cannot be nil/empty' if redirect_uri.nil? || redirect_uri.empty?
|
|
23
|
+
|
|
24
|
+
@tenant_id = tenant_id
|
|
25
|
+
@client_id = client_id
|
|
26
|
+
@client_secret = client_secret
|
|
27
|
+
@auth_code = auth_code
|
|
28
|
+
@redirect_uri = redirect_uri
|
|
29
|
+
@scopes = nil
|
|
30
|
+
@oauth_provider = nil
|
|
31
|
+
@grant_type = 'authorization code'
|
|
32
|
+
|
|
33
|
+
if @tenant_id.nil? || @client_id.nil? || @client_secret.nil? || @tenant_id.empty? || @client_id.empty? || @client_secret.empty?
|
|
34
|
+
raise StandardError, 'tenant_id, client_id, and client_secret cannot be empty'
|
|
35
|
+
end
|
|
36
|
+
end
|
|
37
|
+
|
|
38
|
+
# setter for auth_code
|
|
39
|
+
def auth_code=(code)
|
|
40
|
+
raise StandardError, 'auth_code cannot be empty/nil.' if code.nil? || code.empty?
|
|
41
|
+
|
|
42
|
+
@auth_code = code
|
|
43
|
+
end
|
|
44
|
+
|
|
45
|
+
# This function generates an authorize URL for obtaining the auth code.
|
|
46
|
+
# :params
|
|
47
|
+
# scopes: an array of stings, where each string is a scope
|
|
48
|
+
# additional_params: hash of symbols to string values, ie { response_mode: 'fragment', prompt: 'login' }
|
|
49
|
+
# default is empty hash
|
|
50
|
+
def generate_authorize_url(scopes, additional_params = {})
|
|
51
|
+
@additional_params = additional_params
|
|
52
|
+
|
|
53
|
+
self.initialize_scopes(scopes)
|
|
54
|
+
self.initialize_oauth_provider
|
|
55
|
+
|
|
56
|
+
parameters = { scope: @scopes, redirect_uri: @redirect_uri, access_type: 'offline', prompt: 'consent'}
|
|
57
|
+
parameters = parameters.merge(additional_params)
|
|
58
|
+
@oauth_provider.auth_code.authorize_url(parameters)
|
|
59
|
+
end
|
|
60
|
+
|
|
61
|
+
def get_token
|
|
62
|
+
@oauth_provider.auth_code.get_token(@auth_code, redirect_uri: @redirect_uri)
|
|
63
|
+
end
|
|
64
|
+
|
|
65
|
+
def initialize_oauth_provider
|
|
66
|
+
@oauth_provider = OAuth2::Client.new(@client_id, @client_secret,
|
|
67
|
+
site: 'https://login.microsoftonline.com',
|
|
68
|
+
authorize_url: "/#{@tenant_id}/oauth2/v2.0/authorize",
|
|
69
|
+
token_url: "/#{@tenant_id}/oauth2/v2.0/token")
|
|
70
|
+
end
|
|
71
|
+
|
|
72
|
+
def initialize_scopes(scopes)
|
|
73
|
+
scope_str = ''
|
|
74
|
+
scopes.each { |scope| scope_str += scope + ' '}
|
|
75
|
+
raise StandardError, 'scopes cannot be empty/nil.' if scope_str.empty?
|
|
76
|
+
|
|
77
|
+
scope_str = 'offline_access ' + scope_str
|
|
78
|
+
|
|
79
|
+
@scopes = scope_str
|
|
80
|
+
end
|
|
81
|
+
|
|
82
|
+
private
|
|
83
|
+
|
|
84
|
+
attr_writer :grant_type, :redirect_uri, :additional_params,
|
|
85
|
+
:tenant_id, :client_id, :client_secret, :oauth_provider
|
|
86
|
+
end
|
|
87
|
+
end
|
|
@@ -0,0 +1,59 @@
|
|
|
1
|
+
# frozen_string_literal: true
|
|
2
|
+
|
|
3
|
+
require 'oauth2'
|
|
4
|
+
require_relative './oauth_context'
|
|
5
|
+
|
|
6
|
+
module MicrosoftKiotaAuthenticationOAuth
|
|
7
|
+
# Token request context class for the client credential grant type.
|
|
8
|
+
class ClientCredentialContext < MicrosoftKiotaAuthenticationOAuth::OAuthContext
|
|
9
|
+
attr_reader :grant_type, :additional_params, :tenant_id, :client_id, :client_secret, :oauth_provider
|
|
10
|
+
attr_writer :scopes
|
|
11
|
+
|
|
12
|
+
# This is the initializer for ClientCredentialContext, the token request context when
|
|
13
|
+
# using the client credential grant flow.
|
|
14
|
+
# :params
|
|
15
|
+
# tenant_id: a string containing the tenant id
|
|
16
|
+
# client_id: a string containing the client id
|
|
17
|
+
# client_secret: a string containing the client secret
|
|
18
|
+
# additional_params: hash of symbols to string values, ie { response_mode: 'fragment', prompt: 'login' }
|
|
19
|
+
# default is empty hash
|
|
20
|
+
def initialize(tenant_id, client_id, client_secret, additional_params = {})
|
|
21
|
+
@tenant_id = tenant_id
|
|
22
|
+
@client_id = client_id
|
|
23
|
+
@client_secret = client_secret
|
|
24
|
+
@additional_params = additional_params
|
|
25
|
+
@scopes = nil
|
|
26
|
+
@oauth_provider = nil
|
|
27
|
+
@grant_type = 'client credential'
|
|
28
|
+
|
|
29
|
+
|
|
30
|
+
if @tenant_id.nil? || @client_id.nil? || @client_secret.nil? || @tenant_id.empty? || @client_id.empty? || @client_secret.empty?
|
|
31
|
+
raise StandardError, 'tenant_id, client_id and client_secret cannot be empty'
|
|
32
|
+
end
|
|
33
|
+
end
|
|
34
|
+
|
|
35
|
+
def get_token
|
|
36
|
+
@oauth_provider.client_credentials.get_token({ scope: @scopes })
|
|
37
|
+
end
|
|
38
|
+
|
|
39
|
+
def initialize_oauth_provider
|
|
40
|
+
@oauth_provider = OAuth2::Client.new(@client_id, @client_secret,
|
|
41
|
+
site: 'https://login.microsoftonline.com',
|
|
42
|
+
authorize_url: "/#{@tenant_id}/oauth2/v2.0/authorize",
|
|
43
|
+
token_url: "/#{@tenant_id}/oauth2/v2.0/token")
|
|
44
|
+
end
|
|
45
|
+
|
|
46
|
+
# Function to initialize the scope for the client credential context object.
|
|
47
|
+
# This function forces to default since gradual consent is not supported
|
|
48
|
+
# for this flow.
|
|
49
|
+
def initialize_scopes(scopes = [])
|
|
50
|
+
scope_str = 'https://graph.microsoft.com/.default'
|
|
51
|
+
@scopes = scope_str
|
|
52
|
+
end
|
|
53
|
+
|
|
54
|
+
|
|
55
|
+
private
|
|
56
|
+
|
|
57
|
+
attr_writer :grant_type, :additional_params, :tenant_id, :client_id, :client_secret, :oauth_provider
|
|
58
|
+
end
|
|
59
|
+
end
|
|
@@ -0,0 +1,30 @@
|
|
|
1
|
+
# frozen_string_literal: true
|
|
2
|
+
|
|
3
|
+
require 'oauth2'
|
|
4
|
+
require_relative './oauth_custom_flow'
|
|
5
|
+
|
|
6
|
+
module MicrosoftKiotaAuthenticationOAuth
|
|
7
|
+
# Base class for token request contexs.
|
|
8
|
+
class OAuthContext
|
|
9
|
+
attr_accessor :scopes
|
|
10
|
+
attr_reader :oauth_provider
|
|
11
|
+
include MicrosoftKiotaAuthenticationOAuth::OAuthCustomFlow
|
|
12
|
+
|
|
13
|
+
def get_token
|
|
14
|
+
OAuthCustomFlow.get_token
|
|
15
|
+
end
|
|
16
|
+
|
|
17
|
+
def initialize_scopes(scopes = [])
|
|
18
|
+
@scopes = OAuthCustomFlow.get_scopes
|
|
19
|
+
end
|
|
20
|
+
|
|
21
|
+
def initialize_oauth_provider
|
|
22
|
+
@oauth_provider = OAuthCustomFlow.get_oauth_provider
|
|
23
|
+
end
|
|
24
|
+
|
|
25
|
+
private
|
|
26
|
+
|
|
27
|
+
attr_writer :oauth_provider
|
|
28
|
+
|
|
29
|
+
end
|
|
30
|
+
end
|
|
@@ -0,0 +1,27 @@
|
|
|
1
|
+
# frozen_string_literal: true
|
|
2
|
+
|
|
3
|
+
require 'oauth2'
|
|
4
|
+
|
|
5
|
+
module MicrosoftKiotaAuthenticationOAuth
|
|
6
|
+
# Module that can be optionally implemented for supporting custom token grant flows.
|
|
7
|
+
# To use a cutsom token grant flow, implement the functions below and
|
|
8
|
+
# use MicrosoftKiotaAuthenticationOAuth::OAuthContext.new as your token_request_context
|
|
9
|
+
# object for the use by the MicrosoftKiotaAuthenticationOAuth::OAuthAccessTokenProvider
|
|
10
|
+
module OAuthCustomFlow
|
|
11
|
+
# Function that returns an oauth client using the oauth2 gem
|
|
12
|
+
def self.get_oauth_provider
|
|
13
|
+
raise NotImplementedError.new
|
|
14
|
+
end
|
|
15
|
+
|
|
16
|
+
# Function that returns a space seperated string of scopes, beginning with
|
|
17
|
+
# the offline_access scope if relevant
|
|
18
|
+
def self.get_scopes
|
|
19
|
+
raise NotImplementedError.new
|
|
20
|
+
end
|
|
21
|
+
|
|
22
|
+
# Function that returns the access token
|
|
23
|
+
def self.get_token
|
|
24
|
+
raise NotImplementedError.new
|
|
25
|
+
end
|
|
26
|
+
end
|
|
27
|
+
end
|
|
@@ -0,0 +1,72 @@
|
|
|
1
|
+
# frozen_string_literal: true
|
|
2
|
+
|
|
3
|
+
require 'oauth2'
|
|
4
|
+
require_relative './oauth_context'
|
|
5
|
+
|
|
6
|
+
module MicrosoftKiotaAuthenticationOAuth
|
|
7
|
+
# Token request context class for the on behlaf of grant type.
|
|
8
|
+
class OnBehalfOfContext < MicrosoftKiotaAuthenticationOAuth::OAuthContext
|
|
9
|
+
attr_reader :grant_type, :additional_params, :tenant_id, :client_id, :client_secret, :oauth_provider
|
|
10
|
+
attr_writer :scopes
|
|
11
|
+
|
|
12
|
+
# This is the initializer for OnBehalfOfContext, the token request context when
|
|
13
|
+
# using the client credential grant flow.
|
|
14
|
+
# :params
|
|
15
|
+
# tenant_id: a string containing the tenant id
|
|
16
|
+
# client_id: a string containing the client id
|
|
17
|
+
# client_secret: a string containing the client secret
|
|
18
|
+
# assertion: string containing assertion (access token used in the request)
|
|
19
|
+
# additional_params: hash of symbols to string values, ie { response_mode: 'fragment', prompt: 'login' }
|
|
20
|
+
# default is empty hash
|
|
21
|
+
def initialize(tenant_id, client_id, client_secret, assertion, additional_params = {})
|
|
22
|
+
raise StandardError, 'assertion cannot be empty' if assertion.nil? || assertion.empty?
|
|
23
|
+
|
|
24
|
+
@tenant_id = tenant_id
|
|
25
|
+
@client_id = client_id
|
|
26
|
+
@client_secret = client_secret
|
|
27
|
+
@assertion = assertion
|
|
28
|
+
@additional_params = additional_params
|
|
29
|
+
@scopes = nil
|
|
30
|
+
@oauth_provider = nil
|
|
31
|
+
@grant_type = 'urn:ietf:params:Oauth:grant-type:jwt-bearer'
|
|
32
|
+
|
|
33
|
+
if @tenant_id.nil? || @client_id.nil? || @client_secret.nil? || @client_secret.empty? || @tenant_id.empty? || @client_id.empty?
|
|
34
|
+
raise StandardError, 'tenant_id, client_secret, and client_id cannot be empty'
|
|
35
|
+
end
|
|
36
|
+
end
|
|
37
|
+
|
|
38
|
+
def get_token
|
|
39
|
+
params = {
|
|
40
|
+
grant_type: @grant_type,
|
|
41
|
+
assertion: @assertion,
|
|
42
|
+
scope: @scopes,
|
|
43
|
+
requested_token_use: 'on_behalf_of'
|
|
44
|
+
}
|
|
45
|
+
@oauth_provider.on_behalf_of.get_token(params)
|
|
46
|
+
end
|
|
47
|
+
|
|
48
|
+
def initialize_oauth_provider
|
|
49
|
+
@oauth_provider = OAuth2::Client.new(@client_id, @client_secret,
|
|
50
|
+
site: 'https://login.microsoftonline.com',
|
|
51
|
+
authorize_url: "/#{@tenant_id}/oauth2/v2.0/authorize",
|
|
52
|
+
token_url: "/#{@tenant_id}/oauth2/v2.0/token")
|
|
53
|
+
end
|
|
54
|
+
|
|
55
|
+
def initialize_scopes(scopes)
|
|
56
|
+
scope_str = ''
|
|
57
|
+
scopes.each { |scope| scope_str += scope + ' '}
|
|
58
|
+
|
|
59
|
+
raise StandardError, 'scopes cannot be empty/nil.' if scope_str.empty?
|
|
60
|
+
|
|
61
|
+
scope_str = 'offline_access ' + scope_str
|
|
62
|
+
|
|
63
|
+
@scopes = scope_str
|
|
64
|
+
end
|
|
65
|
+
|
|
66
|
+
private
|
|
67
|
+
|
|
68
|
+
attr_writer :grant_type, :additional_params, :tenant_id, :client_id,
|
|
69
|
+
:client_secret, :oauth_provider
|
|
70
|
+
|
|
71
|
+
end
|
|
72
|
+
end
|
|
@@ -0,0 +1,22 @@
|
|
|
1
|
+
# frozen_string_literal: true
|
|
2
|
+
|
|
3
|
+
require 'oauth2'
|
|
4
|
+
|
|
5
|
+
# Extension of Oauth2 Library to Include On Behalf Of Grant Type
|
|
6
|
+
module OAuth2
|
|
7
|
+
module Strategy
|
|
8
|
+
class OnBehalfOf < Base
|
|
9
|
+
def get_token(params, response_opts = {})
|
|
10
|
+
@client.get_token(params, response_opts)
|
|
11
|
+
end
|
|
12
|
+
end
|
|
13
|
+
end
|
|
14
|
+
end
|
|
15
|
+
|
|
16
|
+
module OAuth2
|
|
17
|
+
class Client
|
|
18
|
+
def on_behalf_of
|
|
19
|
+
@on_behalf_of ||= OAuth2::Strategy::OnBehalfOf.new(self)
|
|
20
|
+
end
|
|
21
|
+
end
|
|
22
|
+
end
|
|
@@ -0,0 +1,81 @@
|
|
|
1
|
+
# frozen_string_literal: true
|
|
2
|
+
|
|
3
|
+
require 'microsoft_kiota_abstractions'
|
|
4
|
+
require 'oauth2'
|
|
5
|
+
require_relative 'extensions/oauth2_ext'
|
|
6
|
+
require_relative 'contexts/client_credential_context'
|
|
7
|
+
require_relative 'contexts/authorization_code_context'
|
|
8
|
+
require_relative 'contexts/on_behalf_of_context'
|
|
9
|
+
require_relative 'contexts/oauth_context'
|
|
10
|
+
require_relative 'contexts/oauth_custom_flow'
|
|
11
|
+
|
|
12
|
+
module MicrosoftKiotaAuthenticationOAuth
|
|
13
|
+
# Access Token Provider class implementation
|
|
14
|
+
class OAuthAccessTokenProvider
|
|
15
|
+
# This is the initializer for OAuthAccessTokenProvider.
|
|
16
|
+
# :params
|
|
17
|
+
# token_request_context: a instance of one of our token request context or a custom implementation
|
|
18
|
+
# allowed_hosts: an array of strings, where each string is an allowed host, default is empty
|
|
19
|
+
# scopes: an array of strings, where each string is a scope, default is empty array
|
|
20
|
+
def initialize(token_request_context, allowed_hosts = [], scopes = [])
|
|
21
|
+
raise StandardError, 'Parameter token_request_context cannot be nil.' if token_request_context.nil?
|
|
22
|
+
|
|
23
|
+
@token_request_context = token_request_context
|
|
24
|
+
|
|
25
|
+
unless @token_request_context.is_a?(MicrosoftKiotaAuthenticationOAuth::OAuthContext)
|
|
26
|
+
raise StandardError, 'Parameter token_request_context must be an instance of one of our grant flow context classes.'
|
|
27
|
+
end
|
|
28
|
+
|
|
29
|
+
@cached_token = nil
|
|
30
|
+
|
|
31
|
+
@host_validator = if allowed_hosts.nil? || allowed_hosts.size.zero?
|
|
32
|
+
MicrsoftKiotaAbstractions::AllowedHostsValidator.new(['graph.microsoft.com', 'graph.microsoft.us', 'dod-graph.microsoft.us',
|
|
33
|
+
'graph.microsoft.de', 'microsoftgraph.chinacloudapi.cn',
|
|
34
|
+
'canary.graph.microsoft.com'])
|
|
35
|
+
else
|
|
36
|
+
MicrosoftKiotaAbstractions::AllowedHostsValidator.new(allowed_hosts)
|
|
37
|
+
end
|
|
38
|
+
@token_request_context.initialize_oauth_provider
|
|
39
|
+
@token_request_context.initialize_scopes(scopes)
|
|
40
|
+
end
|
|
41
|
+
|
|
42
|
+
# This function obtains the authorization token.
|
|
43
|
+
# :params
|
|
44
|
+
# uri: a string containing the uri
|
|
45
|
+
# additional_params: hash of symbols to string values, ie { response_mode: 'fragment', prompt: 'login' }
|
|
46
|
+
# default is empty hash
|
|
47
|
+
def get_authorization_token(uri, additional_properties = {})
|
|
48
|
+
return nil if !uri || !@host_validator.url_host_valid?(uri)
|
|
49
|
+
|
|
50
|
+
parsed_url = URI(uri)
|
|
51
|
+
|
|
52
|
+
raise StandardError, 'Only https is supported' if parsed_url.scheme != 'https'
|
|
53
|
+
|
|
54
|
+
Fiber.new do
|
|
55
|
+
if @cached_token
|
|
56
|
+
token = OAuth2::AccessToken.from_hash(@token_request_context.oauth_provider, @cached_token)
|
|
57
|
+
return token.token if !token.nil? && !token.expired?
|
|
58
|
+
|
|
59
|
+
if token.expired?
|
|
60
|
+
token = token.refresh!
|
|
61
|
+
@cached_token = token.to_hash
|
|
62
|
+
return token.token
|
|
63
|
+
end
|
|
64
|
+
end
|
|
65
|
+
|
|
66
|
+
token = nil
|
|
67
|
+
token = @token_request_context.get_token
|
|
68
|
+
|
|
69
|
+
@cached_token = token.to_hash unless token.nil?
|
|
70
|
+
return token.token unless token.nil?
|
|
71
|
+
end
|
|
72
|
+
end
|
|
73
|
+
|
|
74
|
+
attr_reader :scopes, :host_validator
|
|
75
|
+
|
|
76
|
+
protected
|
|
77
|
+
|
|
78
|
+
attr_writer :host_validator, :token_credential, :scopes, :cached_token
|
|
79
|
+
|
|
80
|
+
end
|
|
81
|
+
end
|
|
@@ -0,0 +1,10 @@
|
|
|
1
|
+
require 'microsoft_kiota_abstractions'
|
|
2
|
+
require_relative './oauth_access_token_provider'
|
|
3
|
+
|
|
4
|
+
module MicrosoftKiotaAuthenticationOAuth
|
|
5
|
+
class OAuthAuthenticationProvider < MicrosoftKiotaAbstractions::BaseBearerTokenAuthenticationProvider
|
|
6
|
+
def initialize(token_request_context, allowed_hosts, scopes)
|
|
7
|
+
super(MicrosoftKiotaAuthenticationOAuth::OAuthAccessTokenProvider.new(token_request_context, allowed_hosts, scopes))
|
|
8
|
+
end
|
|
9
|
+
end
|
|
10
|
+
end
|
|
@@ -1,5 +1,14 @@
|
|
|
1
|
-
|
|
2
|
-
|
|
3
|
-
|
|
4
|
-
|
|
1
|
+
# frozen_string_literal: true
|
|
2
|
+
|
|
3
|
+
require_relative "microsoft_kiota_authentication_oauth/version"
|
|
4
|
+
require_relative "microsoft_kiota_authentication_oauth/contexts/authorization_code_context"
|
|
5
|
+
require_relative "microsoft_kiota_authentication_oauth/contexts/client_credential_context"
|
|
6
|
+
require_relative "microsoft_kiota_authentication_oauth/contexts/on_behalf_of_context"
|
|
7
|
+
require_relative "microsoft_kiota_authentication_oauth/contexts/oauth_context"
|
|
8
|
+
require_relative "microsoft_kiota_authentication_oauth/contexts/oauth_custom_flow"
|
|
9
|
+
require_relative "microsoft_kiota_authentication_oauth/extensions/oauth2_ext"
|
|
10
|
+
require_relative "microsoft_kiota_authentication_oauth/oauth_access_token_provider"
|
|
11
|
+
require_relative "microsoft_kiota_authentication_oauth/oauth_authentication_provider"
|
|
12
|
+
|
|
13
|
+
module MicrosoftKiotaAuthenticationOAuth
|
|
5
14
|
end
|
|
@@ -0,0 +1,38 @@
|
|
|
1
|
+
# frozen_string_literal: true
|
|
2
|
+
|
|
3
|
+
require_relative "lib/microsoft_kiota_authentication_oauth/version"
|
|
4
|
+
|
|
5
|
+
Gem::Specification.new do |spec|
|
|
6
|
+
spec.name = "microsoft_kiota_authentication_oauth"
|
|
7
|
+
spec.version = MicrosoftKiotaAuthenticationOAuth::VERSION
|
|
8
|
+
spec.authors = 'Microsoft Corporation'
|
|
9
|
+
spec.email = 'graphsdkpub@microsoft.com'
|
|
10
|
+
spec.description = 'Kiota Authentication implementation with oauth2'
|
|
11
|
+
spec.summary = 'Microsoft Kiota Authentication OAuth - Kiota Ruby Authentication OAuth library'
|
|
12
|
+
spec.homepage = 'https://microsoft.github.io/kiota/'
|
|
13
|
+
spec.license = 'MIT'
|
|
14
|
+
spec.metadata = {
|
|
15
|
+
'bug_tracker_uri' => 'https://github.com/microsoft/kiota-authentication-oauth-ruby/issues',
|
|
16
|
+
'changelog_uri' => 'https://github.com/microsoft/kiota-authentication-oauth-ruby/blob/main/CHANGELOG.md',
|
|
17
|
+
'homepage_uri' => spec.homepage,
|
|
18
|
+
'source_code_uri' => 'https://github.com/microsoft/kiota-authentication-oauth-ruby',
|
|
19
|
+
'github_repo' => 'ssh://github.com/microsoft/kiota-authentication-oauth-ruby'
|
|
20
|
+
}
|
|
21
|
+
spec.required_ruby_version = ">= 2.7.0"
|
|
22
|
+
|
|
23
|
+
# Specify which files should be added to the gem when it is released.
|
|
24
|
+
# The `git ls-files -z` loads the files in the RubyGem that have been added into git.
|
|
25
|
+
spec.files = Dir.chdir(File.expand_path(__dir__)) do
|
|
26
|
+
`git ls-files -z`.split("\x0").reject { |f| f.match(%r{\A(?:test|spec|features)/}) }
|
|
27
|
+
end
|
|
28
|
+
|
|
29
|
+
spec.bindir = 'bin'
|
|
30
|
+
spec.executables = spec.files.grep(%r{\Aexe/}) { |f| File.basename(f) }
|
|
31
|
+
spec.require_paths = ['lib']
|
|
32
|
+
|
|
33
|
+
spec.add_runtime_dependency 'microsoft_kiota_abstractions', '~> 0.12.0', '>= 0.12.0'
|
|
34
|
+
spec.add_runtime_dependency 'oauth2', '~> 2.0'
|
|
35
|
+
spec.add_development_dependency 'rake', '~> 13.0'
|
|
36
|
+
spec.add_development_dependency 'rspec', '~> 3.0'
|
|
37
|
+
spec.add_development_dependency 'rubocop'
|
|
38
|
+
end
|
metadata
CHANGED
|
@@ -1,26 +1,133 @@
|
|
|
1
1
|
--- !ruby/object:Gem::Specification
|
|
2
2
|
name: microsoft_kiota_authentication_oauth
|
|
3
3
|
version: !ruby/object:Gem::Version
|
|
4
|
-
version: 0.
|
|
4
|
+
version: 0.5.0
|
|
5
5
|
platform: ruby
|
|
6
6
|
authors:
|
|
7
|
-
-
|
|
7
|
+
- Microsoft Corporation
|
|
8
8
|
autorequire:
|
|
9
9
|
bindir: bin
|
|
10
10
|
cert_chain: []
|
|
11
|
-
date:
|
|
12
|
-
dependencies:
|
|
13
|
-
|
|
14
|
-
|
|
11
|
+
date: 2023-01-09 00:00:00.000000000 Z
|
|
12
|
+
dependencies:
|
|
13
|
+
- !ruby/object:Gem::Dependency
|
|
14
|
+
name: microsoft_kiota_abstractions
|
|
15
|
+
requirement: !ruby/object:Gem::Requirement
|
|
16
|
+
requirements:
|
|
17
|
+
- - "~>"
|
|
18
|
+
- !ruby/object:Gem::Version
|
|
19
|
+
version: 0.12.0
|
|
20
|
+
- - ">="
|
|
21
|
+
- !ruby/object:Gem::Version
|
|
22
|
+
version: 0.12.0
|
|
23
|
+
type: :runtime
|
|
24
|
+
prerelease: false
|
|
25
|
+
version_requirements: !ruby/object:Gem::Requirement
|
|
26
|
+
requirements:
|
|
27
|
+
- - "~>"
|
|
28
|
+
- !ruby/object:Gem::Version
|
|
29
|
+
version: 0.12.0
|
|
30
|
+
- - ">="
|
|
31
|
+
- !ruby/object:Gem::Version
|
|
32
|
+
version: 0.12.0
|
|
33
|
+
- !ruby/object:Gem::Dependency
|
|
34
|
+
name: oauth2
|
|
35
|
+
requirement: !ruby/object:Gem::Requirement
|
|
36
|
+
requirements:
|
|
37
|
+
- - "~>"
|
|
38
|
+
- !ruby/object:Gem::Version
|
|
39
|
+
version: '2.0'
|
|
40
|
+
type: :runtime
|
|
41
|
+
prerelease: false
|
|
42
|
+
version_requirements: !ruby/object:Gem::Requirement
|
|
43
|
+
requirements:
|
|
44
|
+
- - "~>"
|
|
45
|
+
- !ruby/object:Gem::Version
|
|
46
|
+
version: '2.0'
|
|
47
|
+
- !ruby/object:Gem::Dependency
|
|
48
|
+
name: rake
|
|
49
|
+
requirement: !ruby/object:Gem::Requirement
|
|
50
|
+
requirements:
|
|
51
|
+
- - "~>"
|
|
52
|
+
- !ruby/object:Gem::Version
|
|
53
|
+
version: '13.0'
|
|
54
|
+
type: :development
|
|
55
|
+
prerelease: false
|
|
56
|
+
version_requirements: !ruby/object:Gem::Requirement
|
|
57
|
+
requirements:
|
|
58
|
+
- - "~>"
|
|
59
|
+
- !ruby/object:Gem::Version
|
|
60
|
+
version: '13.0'
|
|
61
|
+
- !ruby/object:Gem::Dependency
|
|
62
|
+
name: rspec
|
|
63
|
+
requirement: !ruby/object:Gem::Requirement
|
|
64
|
+
requirements:
|
|
65
|
+
- - "~>"
|
|
66
|
+
- !ruby/object:Gem::Version
|
|
67
|
+
version: '3.0'
|
|
68
|
+
type: :development
|
|
69
|
+
prerelease: false
|
|
70
|
+
version_requirements: !ruby/object:Gem::Requirement
|
|
71
|
+
requirements:
|
|
72
|
+
- - "~>"
|
|
73
|
+
- !ruby/object:Gem::Version
|
|
74
|
+
version: '3.0'
|
|
75
|
+
- !ruby/object:Gem::Dependency
|
|
76
|
+
name: rubocop
|
|
77
|
+
requirement: !ruby/object:Gem::Requirement
|
|
78
|
+
requirements:
|
|
79
|
+
- - ">="
|
|
80
|
+
- !ruby/object:Gem::Version
|
|
81
|
+
version: '0'
|
|
82
|
+
type: :development
|
|
83
|
+
prerelease: false
|
|
84
|
+
version_requirements: !ruby/object:Gem::Requirement
|
|
85
|
+
requirements:
|
|
86
|
+
- - ">="
|
|
87
|
+
- !ruby/object:Gem::Version
|
|
88
|
+
version: '0'
|
|
89
|
+
description: Kiota Authentication implementation with oauth2
|
|
90
|
+
email: graphsdkpub@microsoft.com
|
|
15
91
|
executables: []
|
|
16
92
|
extensions: []
|
|
17
93
|
extra_rdoc_files: []
|
|
18
94
|
files:
|
|
95
|
+
- ".github/CODEOWNERS"
|
|
96
|
+
- ".github/dependabot.yml"
|
|
97
|
+
- ".github/workflows/code-ql.yml"
|
|
98
|
+
- ".github/workflows/conflicting-pr-label.yml"
|
|
99
|
+
- ".github/workflows/projectsbot.yml"
|
|
100
|
+
- ".github/workflows/release.yml"
|
|
101
|
+
- ".github/workflows/ruby.yml"
|
|
102
|
+
- ".gitignore"
|
|
103
|
+
- CHANGELOG.md
|
|
104
|
+
- CODE_OF_CONDUCT.md
|
|
105
|
+
- Gemfile
|
|
106
|
+
- LICENSE
|
|
107
|
+
- README.md
|
|
108
|
+
- Rakefile
|
|
109
|
+
- SECURITY.md
|
|
110
|
+
- SUPPORT.md
|
|
19
111
|
- lib/microsoft_kiota_authentication_oauth.rb
|
|
20
|
-
|
|
112
|
+
- lib/microsoft_kiota_authentication_oauth/contexts/authorization_code_context.rb
|
|
113
|
+
- lib/microsoft_kiota_authentication_oauth/contexts/client_credential_context.rb
|
|
114
|
+
- lib/microsoft_kiota_authentication_oauth/contexts/oauth_context.rb
|
|
115
|
+
- lib/microsoft_kiota_authentication_oauth/contexts/oauth_custom_flow.rb
|
|
116
|
+
- lib/microsoft_kiota_authentication_oauth/contexts/on_behalf_of_context.rb
|
|
117
|
+
- lib/microsoft_kiota_authentication_oauth/extensions/oauth2_ext.rb
|
|
118
|
+
- lib/microsoft_kiota_authentication_oauth/oauth_access_token_provider.rb
|
|
119
|
+
- lib/microsoft_kiota_authentication_oauth/oauth_authentication_provider.rb
|
|
120
|
+
- lib/microsoft_kiota_authentication_oauth/version.rb
|
|
121
|
+
- microsoft_kiota_authentication_oauth.gemspec
|
|
122
|
+
homepage: https://microsoft.github.io/kiota/
|
|
21
123
|
licenses:
|
|
22
124
|
- MIT
|
|
23
|
-
metadata:
|
|
125
|
+
metadata:
|
|
126
|
+
bug_tracker_uri: https://github.com/microsoft/kiota-authentication-oauth-ruby/issues
|
|
127
|
+
changelog_uri: https://github.com/microsoft/kiota-authentication-oauth-ruby/blob/main/CHANGELOG.md
|
|
128
|
+
homepage_uri: https://microsoft.github.io/kiota/
|
|
129
|
+
source_code_uri: https://github.com/microsoft/kiota-authentication-oauth-ruby
|
|
130
|
+
github_repo: ssh://github.com/microsoft/kiota-authentication-oauth-ruby
|
|
24
131
|
post_install_message:
|
|
25
132
|
rdoc_options: []
|
|
26
133
|
require_paths:
|
|
@@ -29,15 +136,15 @@ required_ruby_version: !ruby/object:Gem::Requirement
|
|
|
29
136
|
requirements:
|
|
30
137
|
- - ">="
|
|
31
138
|
- !ruby/object:Gem::Version
|
|
32
|
-
version:
|
|
139
|
+
version: 2.7.0
|
|
33
140
|
required_rubygems_version: !ruby/object:Gem::Requirement
|
|
34
141
|
requirements:
|
|
35
142
|
- - ">="
|
|
36
143
|
- !ruby/object:Gem::Version
|
|
37
144
|
version: '0'
|
|
38
145
|
requirements: []
|
|
39
|
-
rubygems_version: 3.3.
|
|
146
|
+
rubygems_version: 3.3.26
|
|
40
147
|
signing_key:
|
|
41
148
|
specification_version: 4
|
|
42
|
-
summary:
|
|
149
|
+
summary: Microsoft Kiota Authentication OAuth - Kiota Ruby Authentication OAuth library
|
|
43
150
|
test_files: []
|