mumukit-auth 2.2.2 → 3.0.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA1:
-  metadata.gz: 167306465dc5b0e444eb0543ac074a2d1eace097
-  data.tar.gz: 69eae7d161f9abdc7b7107bc01a67f76da02f7b8
+  metadata.gz: a9092f2f97e6a3b76afc8339f023be19daae8f43
+  data.tar.gz: a341795e26fceb21541c1d4dbfabc8acaa5c4942
 SHA512:
-  metadata.gz: 0d486a7cbd380a1d3f91d046f39f75d8a7d15ca93af6c6c1620b44e04e7778b4e316c1cc0f78025db47ec10ae6c781db0aa532f96acd8972e4d849798dda07b8
-  data.tar.gz: 0015801f215f4b8135af85c8e7a62873df22b4fc9ab9635fb4053a6245900592987a78244b69dfb24cb75bf56227f93ab398337c8a455b9b71aa49659c002948
+  metadata.gz: fb99bd92c87a8dd3c80a86a9edfaeffd2ebb7beffe321b266126adab91d73f154fc2f53b53c0dcf000801e7e4009278e49151b6fe6c41ef63af27e05626d4e03
+  data.tar.gz: 9f0f7f2cff61e2f3447de4d4ca00071a2ab897556c274f80bea6dc5681bbc95b708e2cf2ffa550152bb2d4b20f4acaf27ae00619b9c54f024336f305b6f4c11c

data/lib/mumukit/auth/exceptions.rb

@@ -3,5 +3,8 @@ module Mumukit::Auth
   end
 
   class UnauthorizedAccessError < StandardError
+    def self.with_message(slug, grants)
+      new "Unauthorized access to #{slug}. Permissions are #{grants}"
+    end
   end
 end

data/lib/mumukit/auth/permissions.rb

@@ -14,7 +14,7 @@ class Mumukit::Auth::Permissions
   end
 
   def protect!(scope, slug)
-    scope_for(scope)&.protect!(slug)
+    scope_for(scope).protect!(slug)
   end
 
   def has_role?(role)
@@ -22,7 +22,7 @@ class Mumukit::Auth::Permissions
   end
 
   def scope_for(role)
-    self.scopes[role]
+    self.scopes[role] || Mumukit::Auth::Scope.new
   end
 
   def add_permission!(role, *grants)

data/lib/mumukit/auth/scope.rb

@@ -7,7 +7,7 @@ module Mumukit::Auth
     end
 
     def protect!(resource_slug)
-      raise Mumukit::Auth::UnauthorizedAccessError.new(unauthorized_message(resource_slug)) unless allows?(resource_slug)
+      raise Mumukit::Auth::UnauthorizedAccessError.with_message(resource_slug, self) unless allows?(resource_slug)
     end
 
     def allows?(resource_slug)
@@ -44,9 +44,5 @@ module Mumukit::Auth
     def any_grant?(&block)
       @grants.any?(&block)
     end
-
-    def unauthorized_message(slug)
-      "Unauthorized access to #{slug}. Permissions are #{to_s}"
-    end
   end
 end

data/lib/mumukit/auth/store.rb

@@ -1,10 +1,35 @@
 module Mumukit::Auth
   class Store
 
+    class << self
+      def from_env
+        new Mumukit::Auth.config.daybreak_name
+      end
+
+      def with(&block)
+        store = from_env
+        block.call store
+        ensure
+          store.close
+      end
+
+      def set!(*args)
+        with { |store| store.set!(*args) }
+      end
+
+      def get(key)
+        with { |store| store.get(key) }
+      end
+    end
+
     def initialize(db_name)
       @db = Daybreak::DB.new "#{db_name}.db", default: '{}'
     end
 
+    def close
+      @db.close
+    end
+
     def set!(key, value)
       @db.update! key.to_sym => value.to_json
     end
@@ -12,9 +37,5 @@ module Mumukit::Auth
     def get(key)
       Mumukit::Auth::Permissions.load @db[key]
     end
-
-    def close
-      @db.close
-    end
   end
 end

data/lib/mumukit/auth/token.rb

@@ -12,6 +12,18 @@ module Mumukit::Auth
       @metadata ||= jwt['metadata'] || {}
     end
 
+    def uid
+      @uid ||= jwt['email'] || jwt['sub']
+    end
+
+    def permissions
+      @permissions ||= Mumukit::Auth::Store.get uid
+    end
+
+    def protect!(scope, resource_slug)
+      permissions.protect! scope, resource_slug
+    end
+
     def verify_client!
       raise Mumukit::Auth::InvalidTokenError.new('aud mismatch') if Mumukit::Auth.config.client_id != jwt['aud']
     end

data/lib/mumukit/auth/version.rb

@@ -1,5 +1,5 @@
 module Mumukit
   module Auth
-    VERSION = '2.2.2'
+    VERSION = '3.0.0'
   end
 end

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: mumukit-auth
 version: !ruby/object:Gem::Version
-  version: 2.2.2
+  version: 3.0.0
 platform: ruby
 authors:
 - Franco Leonardo Bulgarelli
 autorequire: 
 bindir: bin
 cert_chain: []
-date: 2016-12-20 00:00:00.000000000 Z
+date: 2016-12-21 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: bundler