nbudin-castronaut 0.7.5

data/app/views/logout.erb

@@ -0,0 +1,13 @@
+<% unless presenter.messages.empty? %>
+  <p class="flash"><%= presenter.messages.to_s %></p>
+<% end %>
+
+<div class="form container">
+      
+  <% if presenter.url %>
+    <p class="instruction">
+      The application you just logged out of has provided a link it would like you to follow. Please click here to access <a href="<%= presenter.url %>"><%= presenter.url %></a>.
+    </p>
+  <% end %> 
+
+</div>

data/app/views/proxy_validate.erb

@@ -0,0 +1,22 @@
+<cas:serviceResponse xmlns:cas='http://www.yale.edu/tp/cas'>
+<% if presenter.proxy_ticket_result.valid? %>
+  <cas:authenticationSuccess>
+    <cas:user><%= presenter.username.to_s.to_xs %></cas:user>
+    <% if presenter.proxy_granting_ticket_iou %>
+    <cas:proxyGrantingTicket><%= presenter.proxy_granting_ticket_iou.to_s.to_xs %></cas:proxyGrantingTicket>
+    <% end %>
+    <% if presenter.proxies %>
+    <cas:proxies>
+    <% presenter.proxies.each do |proxy| %>
+    <cas:proxy><%= proxy %></cas:proxy>
+    <% end %>
+    </cas:proxies>
+    <% end %>
+    <%= presenter.extra_attributes.to_bare_xml %>
+  </cas:authenticationSuccess>
+<% else %>
+  <cas:authenticationFailure code="<%= presenter.proxy_ticket_result.message_category %>">
+  <%= presenter.proxy_ticket_result.message %>
+  </cas:authenticationFailure>
+<% end %>
+</cas:serviceResponse>

data/app/views/service_validate.erb

@@ -0,0 +1,15 @@
+<cas:serviceResponse xmlns:cas='http://www.yale.edu/tp/cas'>
+<% if presenter.service_ticket_result.valid? %>
+  <cas:authenticationSuccess>
+    <cas:user><%= presenter.username.to_s.to_xs %></cas:user>
+    <% if presenter.proxy_granting_ticket_iou %>
+    <cas:proxyGrantingTicket><%= presenter.proxy_granting_ticket_iou.to_s.to_xs %></cas:proxyGrantingTicket>
+    <% end %>
+    <%= presenter.extra_attributes.to_bare_xml %>
+  </cas:authenticationSuccess>
+<% else %>
+  <cas:authenticationFailure code="<%= presenter.service_ticket_result.message_category %>">
+  <%= presenter.service_ticket_result.message %>
+  </cas:authenticationFailure>
+<% end %>
+</cas:serviceResponse>

data/bin/castronaut

@@ -0,0 +1,71 @@
+#!/usr/bin/env ruby
+
+require File.expand_path(File.join(File.dirname(__FILE__), '..', 'castronaut'))
+$LOAD_PATH.unshift(File.dirname(__FILE__) + '/../vendor/sinatra/lib')
+$LOAD_PATH.unshift(File.dirname(__FILE__) + '/../vendor/rack/lib')
+
+require 'rack'
+require 'sinatra'
+require 'optparse'
+
+options = {}
+OptionParser.new do |opts|
+  opts.banner =  "Usage: castronaut [Options] {/path/to/config/file}\n"
+  opts.banner += "\t --config: \tStart castronaut using the specified config file.\n"  
+  opts.banner += "\t --fresh: \tWrite the castronaut default sample config file to the specified location.\n"
+  opts.banner += "\t --sampledb: \tCreate a sample development database with users for testing.\n"  
+  opts.banner += "\t --nginx: \tWrite the sample nginx configuration file to the specified location.\n"
+
+  opts.on("-h", "--help") do
+    puts opts.banner
+    exit(1)
+  end
+
+  opts.on("-C", "--config", "Config File") do |c|
+    Castronaut.config = Castronaut::Configuration.load(ARGV[0])
+  end
+  
+  opts.on("-F", "--fresh", "Directory") do |f|
+    FileUtils.cp(File.join(File.dirname(__FILE__), '..', 'config', 'castronaut.sample.yml'), "#{ARGV[0]}/castronaut.yml")
+    puts "Writing config file to #{ARGV[0]}/castronaut.yml"
+    exit(1)
+  end
+  
+  opts.on("-S", "--sampledb") do
+    puts "Creating development database"
+    Castronaut::Support::Sample.create_sample_database
+    exit(1)
+  end
+  
+  opts.on("-N", "--nginx") do
+    FileUtils.cp(File.join(File.dirname(__FILE__), '..', 'config', 'nginx_vhost.conf'), "#{ARGV[0]}/castronaut.conf")
+    puts "Writing nginx vhost configuration file to #{ARGV[0]}/castronaut.conf"
+    exit(1)
+  end
+end.parse!
+
+unless Castronaut.config
+  $stderr.puts "No configuration file specified.  Deafaulting to ./config/castronaut.yml"
+  default_config = File.expand_path("./config/castronaut.yml")
+
+  if File.exist?(default_config)
+    Castronaut.config = Castronaut::Configuration.load(default_config)
+  else
+    puts "Unable to locate configuration.  Currently looking at #{default_config}.  You can pass a custom configuration path by using the -C flag."
+    exit(0)
+  end
+end
+
+Sinatra::Application.set(
+  :environment => Castronaut.config.environment.to_sym,
+  :run => true,
+  :raise_errors => true,
+  :logging => true,
+  :port => Castronaut.config.respond_to?(:server_port) ? Castronaut.config.server_port : Sinatra::Application.default_options[:port]
+)
+
+Castronaut.logger.info("Sinatra - Loading app/config.rb")
+load File.expand_path(File.join(File.dirname(__FILE__), '..', 'app', 'config.rb'))
+
+Castronaut.logger.info("Sinatra - Loading app/application.rb")
+load File.expand_path(File.join(File.dirname(__FILE__), '..', 'app', 'controllers', 'application.rb'))

data/castronaut.rb

@@ -0,0 +1,7 @@
+require 'rubygems'
+gem 'activerecord', '>= 2.1.0'
+gem 'activesupport', '>= 2.1.0'
+
+require 'active_support'
+require 'active_record'
+require File.expand_path(File.join(File.dirname(__FILE__), 'lib', 'castronaut'))

data/config/castronaut.example.yml

@@ -0,0 +1,41 @@
+organization_name: Foo Bar Baz Industries, LLC Inc. A division of Holdings Co.
+
+environment: development
+# The port the CAS webserver will start on
+server_port: 4567
+
+log_directory: log
+
+log_level: Logger::DEBUG
+
+ssl_enabled: false
+
+cas_database:
+  adapter: sqlite3
+  database: db/cas.db
+  timeout: 5000
+
+cas_adapter:
+  adapter: database
+  site_key: 03523your093023site0985225key098290here9
+  digest_stretches: 10
+  database:
+    adapter: sqlite3
+    database: db/cas_adapter.db
+    timeout: 5000
+
+# Use this example if you are using LDAP as your authentication source
+# cas_adapter:
+#   adapter: ldap
+#   host: localhost
+#   port: 389
+#   prefix: cn=
+#   base: dc=example, dc=com
+
+# Uncomment these to enable authentication callbacks
+# callbacks:
+#  on_authentication_success: http://example.com/authentication/success
+#  on_authentication_failed: http://example.com/authentication/failed
+
+extra_ui_actions:
+  'Forgot Password': http://example.com/

data/config/castronaut.sample.yml

@@ -0,0 +1,40 @@
+organization_name: Foo Bar Baz Industries, LLC Inc. A division of Holdings Co.
+
+environment: development
+# The port the CAS webserver will start on
+server_port: 4567
+
+log_directory: log
+
+log_level: Logger::DEBUG
+
+ssl_enabled: false
+
+cas_database:
+  adapter: sqlite3
+  database: db/cas.db
+  timeout: 5000
+
+cas_adapter:
+  adapter: development
+  database:
+    adapter: sqlite3
+    database: development.db
+    timeout: 5000
+
+# Use this example if you are using LDAP as your authentication source
+# cas_adapter:
+#   adapter: ldap
+#   host: localhost
+#   port: 389
+#   prefix: cn=
+#   base: dc=example, dc=com
+
+# Uncomment these to enable authentication callbacks
+# callbacks:
+#  on_authentication_success: http://example.com/authentication/success
+#  on_authentication_failed: http://example.com/authentication/failed
+
+# Uncomment this to enable a forgot password link on the login page
+# extra_ui_actions:
+#  'Forgot Password': http://example.com/forgot_password

data/config/nginx_vhost.conf

@@ -0,0 +1,17 @@
+upstream castronaut { 
+	server 127.0.0.1:4567; 
+}
+
+server { 
+       listen 80; 
+       # server_name cas.example.com; 
+
+       location / { 
+       		proxy_pass http://castronaut; 
+		proxy_redirect off; 
+		proxy_set_header Host $host; 
+	} 
+
+	access_log /var/log/nginx/castronaut/access.log; 
+	error_log /var/log/nginx/castronaut/error.log; 
+}

data/config/thin_config.yml

@@ -0,0 +1,13 @@
+--- 
+pid: /path/to/thin/pid/thin.pid 
+log: /path/to/thin/log/thin.log 
+timeout: 30 
+port: 4567 
+max_conns: 1024 
+chdir: /path/to/castronaut/files 
+rackup: /path/to/castronaut/config.ru 
+max_persistent_conns: 512 
+environment: production 
+address: 127.0.0.1 
+servers: 1 
+daemonize: true

data/lib/castronaut.rb

@@ -0,0 +1,35 @@
+require File.expand_path(File.join(File.dirname(__FILE__), 'castronaut', 'configuration'))
+require File.expand_path(File.join(File.dirname(__FILE__), 'castronaut', 'support', 'sample'))
+require File.expand_path(File.join(File.dirname(__FILE__), 'castronaut', 'utilities', 'random_string'))
+require File.expand_path(File.join(File.dirname(__FILE__), 'castronaut', 'models', 'consumeable'))
+require File.expand_path(File.join(File.dirname(__FILE__), 'castronaut', 'models', 'dispenser'))
+require File.expand_path(File.join(File.dirname(__FILE__), 'castronaut', 'models', 'login_ticket'))
+require File.expand_path(File.join(File.dirname(__FILE__), 'castronaut', 'models', 'service_ticket'))
+require File.expand_path(File.join(File.dirname(__FILE__), 'castronaut', 'models', 'proxy_ticket'))
+require File.expand_path(File.join(File.dirname(__FILE__), 'castronaut', 'models', 'ticket_granting_ticket'))
+require File.expand_path(File.join(File.dirname(__FILE__), 'castronaut', 'models', 'proxy_granting_ticket'))
+require File.expand_path(File.join(File.dirname(__FILE__), 'castronaut', 'authentication_result'))
+require File.expand_path(File.join(File.dirname(__FILE__), 'castronaut', 'extra_attributes'))
+require File.expand_path(File.join(File.dirname(__FILE__), 'castronaut', 'ticket_result'))
+require File.expand_path(File.join(File.dirname(__FILE__), 'castronaut', 'presenters', 'login'))
+require File.expand_path(File.join(File.dirname(__FILE__), 'castronaut', 'presenters', 'logout'))
+require File.expand_path(File.join(File.dirname(__FILE__), 'castronaut', 'presenters', 'process_login'))
+require File.expand_path(File.join(File.dirname(__FILE__), 'castronaut', 'presenters', 'service_validate'))
+require File.expand_path(File.join(File.dirname(__FILE__), 'castronaut', 'presenters', 'proxy_validate'))
+require File.expand_path(File.join(File.dirname(__FILE__), 'castronaut', 'adapters'))
+
+module Castronaut
+
+  def self.config
+    @cas_config
+  end
+
+  def self.config=(config)
+    @cas_config = config
+  end
+
+  def self.logger
+    @cas_config.logger
+  end
+
+end

data/lib/castronaut/adapters.rb

@@ -0,0 +1,22 @@
+module Castronaut
+  module Adapters
+    
+    def self.selected_adapter
+      case Castronaut.config.cas_adapter['adapter']
+        when "development"
+          require File.expand_path(__FILE__, 'adapters' 'development', 'adapter')
+          require File.expand_path(__FILE__, 'adapters' 'development', 'user')
+          Castronaut::Adapters::Development::Adapter
+        when "ldap"
+          require File.expand_path(__FILE__, 'adapters' 'ldap', 'adapter')
+          require File.expand_path(__FILE__, 'adapters' 'ldap', 'user')
+          Castronaut::Adapters::Ldap::Adapter
+        when "database"
+          require File.expand_path(__FILE__, 'adapters' 'restful_authentication', 'adapter')
+          require File.expand_path(__FILE__, 'adapters' 'restful_authentication', 'user')
+          Castronaut::Adapters::RestfulAuthentication::Adapter
+      end
+    end
+    
+  end
+end

data/lib/castronaut/adapters/development/adapter.rb

@@ -0,0 +1,13 @@
+module Castronaut
+  module Adapters
+    module Development
+      class Adapter
+      
+        def self.authenticate(username, password)
+          Castronaut::Adapters::Development::User.authenticate(username, password)
+        end
+      
+      end
+    end
+  end
+end

data/lib/castronaut/adapters/development/user.rb

@@ -0,0 +1,25 @@
+module Castronaut
+  module Adapters
+    module Development
+      
+      class User < ActiveRecord::Base
+      
+        def self.authenticate(username, password)
+          if user = find_by_login(username)
+            if user.password == password
+              Castronaut::AuthenticationResult.new(username, nil)
+            else
+              Castronaut.config.logger.info "#{self} - Unable to authenticate username #{username} due to invalid authentication information"
+              Castronaut::AuthenticationResult.new(username, "Unable to authenticate")
+            end
+          else
+            Castronaut.config.logger.info "#{self} - Unable to authenticate username #{username} because it could not be found"
+            Castronaut::AuthenticationResult.new(username, "Unable to authenticate")
+          end
+        end
+        
+      end
+    
+    end
+  end
+end

data/lib/castronaut/adapters/ldap/adapter.rb

@@ -0,0 +1,15 @@
+ module Castronaut
+  module Adapters
+    module Ldap
+      
+      class Adapter
+      
+        def self.authenticate(username, password)
+          Castronaut::Adapters::Ldap::User.authenticate(username, password)
+        end
+      
+      end
+    
+    end
+  end
+end

data/lib/castronaut/adapters/ldap/user.rb

@@ -0,0 +1,39 @@
+module Castronaut
+  module Adapters
+    module Ldap
+      
+      class User 
+        begin
+          require "net/ldap"
+        rescue LoadError
+          begin
+            gem 'ruby-net-ldap', '~> 0.0.4'
+          rescue Gem::LoadError
+            $stderr.puts "How can you have any pudding if you don\'t install ruby-net-ldap?"
+          end
+        end
+        
+        def self.authenticate(username, password)
+          return false if password.blank?
+          
+          connection = Net::LDAP.new
+          connection.host = Castronaut.config.cas_adapter['host']
+          connection.port = Castronaut.config.cas_adapter['port']
+          
+          prefix = Castronaut.config.cas_adapter['prefix']
+          base = Castronaut.config.cas_adapter['base']
+          
+          connection.authenticate("#{prefix}#{username}, #{base}", password)
+          if connection.bind
+            return Castronaut::AuthenticationResult.new(username, nil)            
+          else
+            Castronaut.config.logger.info "#{self} - Unable to authenticate username #{username} because #{connection.get_operation_result.message} : code #{connection.get_operation_result.code}"
+            return Castronaut::AuthenticationResult.new(username, "Unable to authenticate")
+          end
+        end
+
+      end
+    
+    end
+  end
+end

data/lib/castronaut/adapters/restful_authentication/adapter.rb

@@ -0,0 +1,15 @@
+module Castronaut
+  module Adapters
+    module RestfulAuthentication
+      
+      class Adapter
+      
+        def self.authenticate(username, password)
+          Castronaut::Adapters::RestfulAuthentication::User.authenticate(username, password)
+        end
+      
+      end
+    
+    end
+  end
+end

data/lib/castronaut/adapters/restful_authentication/user.rb

@@ -0,0 +1,50 @@
+require "digest/sha1"
+
+module Castronaut
+  module Adapters
+    module RestfulAuthentication
+      
+      class User < ActiveRecord::Base
+      
+        def self.digest(password, salt)
+          site_key = Castronaut.config.cas_adapter['site_key']
+          digest_value = site_key
+          
+          Castronaut.config.cas_adapter['digest_stretches'].times do
+            digest_value = secure_digest(digest_value, salt, password, site_key)
+          end
+          
+          digest_value
+        end
+
+        def self.secure_digest(*args)
+          Digest::SHA1.hexdigest(args.flatten.join('--'))
+        end
+        
+        def self.find_by_login(login)
+          if Castronaut.config.cas_adapter.has_key?('extra_authentication_conditions')
+            find(:first, :conditions => ["login = ? AND #{Castronaut.config.cas_adapter['extra_authentication_conditions']}", login])
+          else
+            find(:first, :conditions => { :login => login })
+          end
+        end
+
+        def self.authenticate(username, password)
+          if user = find_by_login(username)
+            if user.crypted_password == Castronaut::Adapters::RestfulAuthentication::User.digest(password, user.salt)
+              Castronaut::AuthenticationResult.new(username, nil)
+            else
+              Castronaut.config.logger.info "#{self} - Unable to authenticate username #{username} due to invalid authentication information"
+              Castronaut::AuthenticationResult.new(username, "Unable to authenticate")
+            end
+          else
+            Castronaut.config.logger.info "#{self} - Unable to authenticate username #{username} because it could not be found"
+            Castronaut::AuthenticationResult.new(username, "Unable to authenticate")
+          end
+        end
+        
+      end
+    
+    end
+  end
+end