oa-oauth 0.1.6 → 0.2.5

data/lib/omniauth/strategies/oauth2.rb

@@ -12,61 +12,86 @@ module OmniAuth
     # OAuth 2.0.
     class OAuth2
       include OmniAuth::Strategy
-      
+
       # The options passed in to the strategy.
       attr_accessor :options
       # The `OAuth2::Client` for this strategy.
-      attr_accessor :client
-      
+      attr_accessor :client_id, :client_secret, :client_options
+
       # An error that is indicated in the OAuth 2.0 callback.
-      # This could be a `redirect_uri_mismatch` or other 
+      # This could be a `redirect_uri_mismatch` or other
       class CallbackError < StandardError
         attr_accessor :error, :error_reason, :error_uri
-        
+
         def initialize(error, error_reason=nil, error_uri=nil)
           self.error = error
           self.error_reason = error_reason
           self.error_uri = error_uri
         end
       end
-      
+
       # Initialize a new OAuth 2.0 authentication provider.
-      
+
       # @param [Rack Application] app standard middleware application argument
       # @param [String] name the name for this provider to be used in its URL, e.g. `/auth/name`
       # @param [String] client_id the client/application ID of this provider
       # @param [String] client_secret the client/application secret of this provider
       # @param [Hash] options that will be passed through to the OAuth2::Client (see [oauth2 docs](http://rubydoc.info/gems/oauth2))
-      def initialize(app, name, client_id, client_secret, options = {})
-        super(app, name)
-        self.options = options
-        self.client = ::OAuth2::Client.new(client_id, client_secret, options)
+      def initialize(app, name, client_id = nil, client_secret = nil, client_options = {}, options = {}, &block)
+        self.client_id = client_id
+        self.client_secret = client_secret
+        self.client_options = client_options
+        super
       end
-      
+
+      def client
+        ::OAuth2::Client.new(client_id, client_secret, client_options.merge(options[:client_options] || {}))
+      end
+
+      def callback_url
+        full_host + callback_path
+      end
+
       protected
-        
+
       def request_phase
         redirect client.web_server.authorize_url({:redirect_uri => callback_url}.merge(options))
       end
-      
+
       def callback_phase
         if request.params['error'] || request.params['error_reason']
           raise CallbackError.new(request.params['error'], request.params['error_description'] || request.params['error_reason'], request.params['error_uri'])
         end
-        
-        verifier = request.params['code']
-        @access_token = client.web_server.get_access_token(verifier, :redirect_uri => callback_url)
+
+        @access_token = build_access_token
+
+        if @access_token.expires? && @access_token.expires_in <= 0
+          client.request(:post, client.access_token_url, {
+              'client_id' => client_id,
+              'grant_type' => 'refresh_token',
+              'client_secret' => client_secret,
+              'refresh_token' => @access_token.refresh_token
+            }.merge(options))
+          @access_token = client.web_server.get_access_token(verifier, {:redirect_uri => callback_url}.merge(options))
+        end
+
         super
       rescue ::OAuth2::HTTPError, ::OAuth2::AccessDenied, CallbackError => e
         fail!(:invalid_credentials, e)
+      rescue ::MultiJson::DecodeError => e
+        fail!(:invalid_response, e)
       end
-      
+
+      def build_access_token
+        verifier = request.params['code']
+        client.web_server.get_access_token(verifier, {:redirect_uri => callback_url}.merge(options))
+      end
+
       def auth_hash
-        OmniAuth::Utils.deep_merge(super, {
-          'credentials' => {
-            'token' => @access_token.token
-          }
-        })
+        credentials = {'token' => @access_token.token}
+        credentials.merge('refresh_token' => @access_token.refresh_token) if @access_token.expires?
+
+        OmniAuth::Utils.deep_merge(super, {'credentials' => credentials})
       end
     end
   end

data/lib/omniauth/strategies/qzone.rb

@@ -0,0 +1,69 @@
+require 'omniauth/oauth'
+require 'multi_json'
+
+module OmniAuth
+  module Strategies
+    #
+    # Authenticate to qzone (QQ) via OAuth and retrieve basic
+    # user information.
+    #
+    # Usage:
+    #
+    #    use OmniAuth::Strategies::Qzone, 'consumerkey', 'consumersecret'
+    #
+    class Qzone < OmniAuth::Strategies::OAuth
+      # Initialize the middleware
+      def initialize(app, consumer_key = nil, consumer_secret = nil, options = {}, &block)
+        client_options = {
+          :site => 'http://openapi.qzone.qq.com',
+          :request_token_path => '/oauth/qzoneoauth_request_token',
+          :access_token_path  => '/oauth/qzoneoauth_access_token',
+          :authorize_path     => '/oauth/qzoneoauth_authorize',
+          :scheme             => :query_string,
+          :http_method        => :get
+        }
+
+        options[:authorize_params] = {:oauth_consumer_key => consumer_key}
+        super(app, :qzone, consumer_key, consumer_secret, client_options, options)
+      end
+
+      #HACK qzone is using a none-standard parameter oauth_overicode
+      def consumer_options
+        @consumer_options[:access_token_path] = '/oauth/qzoneoauth_access_token?oauth_vericode=' + request['oauth_vericode'] if request['oauth_vericode']
+        @consumer_options
+      end
+
+      def callback_phase
+        session['oauth'][name.to_s]['callback_confirmed'] = true
+        super
+      end
+
+      def auth_hash
+        ui = user_info
+        OmniAuth::Utils.deep_merge(super, {
+            'uid' => ui['uid'],
+            'user_info' => ui,
+            'extra' => {'user_hash' => user_hash}
+          })
+      end
+
+      def user_info
+        user_hash = self.user_hash
+        {
+          'uid' => @access_token.params[:openid],
+          'nickname' => user_hash['nickname'],
+          'name' =>  user_hash['nickname'],
+          'image' => user_hash['figureurl'],
+          'urls' => {
+            'figureurl_1' => user_hash['figureurl_1'],
+            'figureurl_2' => user_hash['figureurl_2'],
+          }
+        }
+      end
+
+      def user_hash
+        @user_hash ||= MultiJson.decode(@access_token.get("/user/get_user_info?format=json&openid=#{@access_token.params[:openid]}").body)
+      end
+    end
+  end
+end

data/lib/omniauth/strategies/rdio.rb

@@ -0,0 +1,45 @@
+require 'omniauth/oauth'
+require 'multi_json'
+
+module OmniAuth
+  module Strategies
+    #
+    # Authenticate to Rdio via OAuth and retrieve basic user information.
+    # Usage:
+    #    use OmniAuth::Strategies::Rdio, 'consumerkey', 'consumersecret'
+    #
+    class Rdio < OmniAuth::Strategies::OAuth
+      def initialize(app, consumer_key = nil, consumer_secret = nil, options = {}, &block)
+        opts = {
+          :site               => 'http://api.rdio.com',
+          :request_token_path => "/oauth/request_token",
+          :access_token_path  => "/oauth/access_token",
+          :authorize_url      => "https://www.rdio.com/oauth/authorize"
+        }
+        super(app, :rdio, consumer_key, consumer_secret, opts, options, &block)
+      end
+
+      def auth_hash
+        OmniAuth::Utils.deep_merge(super, {
+          'uid'       => user_hash['key'],
+          'user_info' => user_info,
+          'extra'     => { 'user_hash' => user_hash }
+        })
+      end
+
+      def user_info
+        user = user_hash
+        {
+          'nickname'   => user['username'],
+          'first_name' => user['firstName'],
+          'last_name'  => user['lastName'],
+          'name'       => "#{user['firstName']} #{user['lastName']}"
+        }
+      end
+
+      def user_hash
+        @user_hash ||= MultiJson.decode(@access_token.post("http://api.rdio.com/1/", { :method => 'currentUser', :extras => 'username' }).body)['result']
+      end
+    end
+  end
+end

data/lib/omniauth/strategies/renren.rb

@@ -0,0 +1,87 @@
+require 'omniauth/oauth'
+require 'multi_json'
+require 'digest/md5'
+require 'net/http'
+
+module OmniAuth
+  module Strategies
+    # Authenticate to Renren utilizing OAuth 2.0 and retrieve
+    # basic user information.
+    #
+    # @example Basic Usage
+    #   use OmniAuth::Strategies::Renren, 'client_id', 'client_secret'
+    class Renren < OAuth2
+      # @param [Rack Application] app standard middleware application parameter
+      # @param [String] client_id the application id as [registered on Renren](http://dev.renren.com/)
+      # @param [String] client_secret the application secret as registered on Renren
+      # @option options [String] :scope ('publish_feed,status_update') comma-separated extended permissions such as `publish_feed` and `status_update`
+      def initialize(app, client_id = nil, client_secret = nil, options = {}, &block)
+        client_options = {
+          :site => "http://graph.renren.com/",
+          :authorize_url      => "/oauth/authorize",
+          :access_token_url   => "/oauth/token"
+        }
+
+        super(app, :renren, client_id, client_secret, client_options, options, &block)
+      end
+
+      def user_data
+        @data ||= MultiJson.decode(Net::HTTP.post_form(URI.parse('http://api.renren.com/restserver.do'), signed_params).body)[0]
+      end
+
+      def signed_params
+        params = {}
+        params[:api_key] = client.id
+        params[:method] = "users.getInfo"
+        params[:call_id] = Time.now.to_i
+        params[:format] = "json"
+        params[:v] = "1.0"
+        params[:uids] = session_key["user"]["id"]
+        params[:session_key] = session_key["renren_token"]["session_key"]
+        params[:sig] = Digest::MD5.hexdigest(params.map {|k,v| "#{k}=#{v}"}.sort.join("") + client.secret)
+        params
+      end
+
+      def session_key
+        @session_key ||= MultiJson.decode(@access_token.get('/renren_api/session_key'))
+      end
+
+      def request_phase
+        options[:scope] ||= "publish_feed"
+        super
+      end
+
+      def build_access_token
+        if renren_session.nil? || renrensession.empty?
+          super
+        else
+          @access_token = ::OAuth2::AccessToken.new(client, renren_session['access_token'])
+        end
+      end
+
+      def renren_session
+        session_cookie = request.cookies["rrs_#{client.id}"]
+        if session_cookie
+          @renren_session ||= Rack::Utils.parse_query(request.cookies["rrs_#{client.id}"].gsub('"', ''))
+        else
+          nil
+        end
+      end
+
+      def user_info
+        {
+          'name' => user_data["name"],
+          'image' => user_data["tinyurl"]
+        }
+      end
+
+      def auth_hash
+        OmniAuth::Utils.deep_merge(super, {
+          'uid' => user_data['uid'],
+          'user_info' => user_info,
+          'extra' => {'user_hash' => user_data}
+        })
+      end
+    end
+  end
+end

data/lib/omniauth/strategies/salesforce.rb

@@ -0,0 +1,44 @@
+require 'omniauth/strategies/oauth2'
+
+module OmniAuth
+  module Strategies
+    class Salesforce < OmniAuth::Strategies::OAuth2
+      def initialize(app, consumer_key = nil, consumer_secret = nil, options = {}, &block)
+        client_options = {
+          :site => 'https://login.salesforce.com',
+          :authorize_path => '/services/oauth2/authorize',
+          :access_token_path => '/services/oauth2/token'
+        }
+
+        options.merge!(:response_type => 'code', :grant_type => 'authorization_code')
+
+        super(app, :salesforce, consumer_key, consumer_secret, client_options, options, &block)
+      end
+
+      def auth_hash
+        data = user_data
+        OmniAuth::Utils.deep_merge(super, {
+          'uid' => @access_token['id'],
+          'credentials' => {
+            'instance_url' => @access_token['instance_url']
+           },
+          'extra' => {'user_hash' => data},
+          'user_info' => {
+            'email' => data['email'],
+            'name' => data['display_name']
+          }
+        })
+      end
+
+      def user_data
+        @data ||= MultiJson.decode(@access_token.get(@access_token['id']))
+      rescue ::OAuth2::HTTPError => e
+        if e.response.status == 302
+          @data ||= MultiJson.decode(@access_token.get(e.response.headers['location']))
+        else
+          raise e
+        end
+      end
+    end
+  end
+end

data/lib/omniauth/strategies/smug_mug.rb

@@ -0,0 +1,42 @@
+require 'omniauth/oauth'
+require 'multi_json'
+
+module OmniAuth
+  module Strategies
+    #
+    # Authenticate to SmugMug via OAuth and retrieve basic user information.
+    # Usage:
+    #    use OmniAuth::Strategies::SmugMug, 'consumerkey', 'consumersecret'
+    #
+    class SmugMug < OmniAuth::Strategies::OAuth
+      def initialize(app, consumer_key = nil, consumer_secret = nil, options = {}, &block)
+        super(app, :smugmug, consumer_key, consumer_secret,
+                {:site               => 'http://api.smugmug.com',
+                :request_token_path => "/services/oauth/getRequestToken.mg",
+                :access_token_path  => "/services/oauth/getAccessToken.mg",
+                :authorize_path     => "/services/oauth/authorize.mg"}, options, &block)
+      end
+
+      def auth_hash
+        OmniAuth::Utils.deep_merge(super, {
+          'uid' => user_hash['id'],
+          'user_info' => user_info,
+          'extra' => { 'user_hash' => user_hash }
+        })
+      end
+
+      # user info according to schema
+      def user_info
+        {
+          'nickname' => user_hash['NickName'],
+          'name' => user_hash['NickName']
+        }
+      end
+
+      # info as supplied by SmugMug
+      def user_hash
+        @user_hash ||= MultiJson.decode(@access_token.get('/services/api/json/1.2.2/?method=smugmug.auth.checkAccessToken').body)['Auth']['User']
+      end
+    end
+  end
+end

data/lib/omniauth/strategies/sound_cloud.rb

@@ -3,7 +3,7 @@ require 'multi_json'
 
 module OmniAuth
   module Strategies
-    # 
+    #
     # Authenticate to SoundCloud via OAuth and retrieve basic
     # user information.
     #
@@ -11,12 +11,12 @@ module OmniAuth
     #
     #    use OmniAuth::Strategies::SoundCloud, 'consumerkey', 'consumersecret'
     #
-    
+
     class SoundCloud < OmniAuth::Strategies::OAuth
-      def initialize(app, consumer_key, consumer_secret)
-        super(app, :soundcloud, consumer_key, consumer_secret, :site => 'https://api.soundcloud.com')
+      def initialize(app, consumer_key = nil, consumer_secret = nil, options = {}, &block)
+        super(app, :soundcloud, consumer_key, consumer_secret, {:site => 'https://api.soundcloud.com'}, options)
       end
-      
+
       def auth_hash
         OmniAuth::Utils.deep_merge(super, {
           'uid' => user_hash['id'],
@@ -24,10 +24,10 @@ module OmniAuth
           'extra' => {'user_hash' => user_hash}
         })
       end
-      
+
       def user_info
         user_hash = self.user_hash
-        
+
         {
           'name' => user_hash['full_name'],
           'nickname' => user_hash['username'],
@@ -37,10 +37,10 @@ module OmniAuth
           'urls' => {'Website' => user_hash['website']}
         }
       end
-      
+
       def user_hash
         @user_hash ||= MultiJson.decode(@access_token.get('/me.json').body)
       end
     end
   end
-end
+end