oauth 0.5.6 → 0.5.8

Sign up to get free protection for your applications and to get access to all the features.
Files changed (58) hide show
  1. checksums.yaml +4 -4
  2. data/CHANGELOG.md +483 -0
  3. data/CODE_OF_CONDUCT.md +84 -0
  4. data/CONTRIBUTING.md +23 -0
  5. data/LICENSE +18 -17
  6. data/README.md +190 -0
  7. data/SECURITY.md +16 -0
  8. data/TODO +0 -0
  9. data/bin/oauth +2 -2
  10. data/lib/oauth/cli/authorize_command.rb +0 -0
  11. data/lib/oauth/cli/base_command.rb +1 -1
  12. data/lib/oauth/cli/help_command.rb +0 -0
  13. data/lib/oauth/cli/query_command.rb +0 -0
  14. data/lib/oauth/cli/sign_command.rb +0 -0
  15. data/lib/oauth/cli/version_command.rb +0 -0
  16. data/lib/oauth/cli.rb +18 -18
  17. data/lib/oauth/client/action_controller_request.rb +7 -7
  18. data/lib/oauth/client/em_http.rb +99 -99
  19. data/lib/oauth/client/helper.rb +22 -22
  20. data/lib/oauth/client/net_http.rb +5 -5
  21. data/lib/oauth/client.rb +0 -0
  22. data/lib/oauth/consumer.rb +49 -38
  23. data/lib/oauth/errors/error.rb +0 -0
  24. data/lib/oauth/errors/problem.rb +0 -0
  25. data/lib/oauth/errors/unauthorized.rb +3 -1
  26. data/lib/oauth/errors.rb +3 -3
  27. data/lib/oauth/helper.rb +11 -7
  28. data/lib/oauth/oauth.rb +0 -0
  29. data/lib/oauth/oauth_test_helper.rb +4 -4
  30. data/lib/oauth/request_proxy/action_controller_request.rb +56 -57
  31. data/lib/oauth/request_proxy/action_dispatch_request.rb +8 -4
  32. data/lib/oauth/request_proxy/base.rb +136 -132
  33. data/lib/oauth/request_proxy/curb_request.rb +49 -43
  34. data/lib/oauth/request_proxy/em_http_request.rb +59 -49
  35. data/lib/oauth/request_proxy/jabber_request.rb +12 -9
  36. data/lib/oauth/request_proxy/mock_request.rb +4 -2
  37. data/lib/oauth/request_proxy/net_http.rb +63 -54
  38. data/lib/oauth/request_proxy/rack_request.rb +35 -31
  39. data/lib/oauth/request_proxy/rest_client_request.rb +53 -50
  40. data/lib/oauth/request_proxy/typhoeus_request.rb +51 -45
  41. data/lib/oauth/request_proxy.rb +0 -0
  42. data/lib/oauth/server.rb +2 -2
  43. data/lib/oauth/signature/base.rb +8 -6
  44. data/lib/oauth/signature/hmac/sha1.rb +4 -4
  45. data/lib/oauth/signature/hmac/sha256.rb +4 -4
  46. data/lib/oauth/signature/plaintext.rb +2 -2
  47. data/lib/oauth/signature/rsa/sha1.rb +3 -3
  48. data/lib/oauth/signature.rb +0 -0
  49. data/lib/oauth/token.rb +5 -5
  50. data/lib/oauth/tokens/access_token.rb +3 -3
  51. data/lib/oauth/tokens/consumer_token.rb +0 -0
  52. data/lib/oauth/tokens/request_token.rb +0 -0
  53. data/lib/oauth/tokens/server_token.rb +0 -0
  54. data/lib/oauth/tokens/token.rb +0 -0
  55. data/lib/oauth/version.rb +1 -1
  56. data/lib/oauth.rb +8 -7
  57. metadata +47 -92
  58. data/README.rdoc +0 -88
@@ -1,72 +1,81 @@
1
- require 'oauth/request_proxy/base'
2
- require 'net/http'
3
- require 'uri'
4
- require 'cgi'
1
+ # frozen_string_literal: true
5
2
 
6
- module OAuth::RequestProxy::Net
7
- module HTTP
8
- class HTTPRequest < OAuth::RequestProxy::Base
9
- proxies ::Net::HTTPGenericRequest
3
+ require "oauth/request_proxy/base"
4
+ require "net/http"
5
+ require "uri"
6
+ require "cgi"
10
7
 
11
- def method
12
- request.method
13
- end
8
+ module OAuth
9
+ module RequestProxy
10
+ module Net
11
+ module HTTP
12
+ class HTTPRequest < OAuth::RequestProxy::Base
13
+ proxies ::Net::HTTPGenericRequest
14
14
 
15
- def uri
16
- options[:uri].to_s
17
- end
15
+ def method
16
+ request.method
17
+ end
18
18
 
19
- def parameters
20
- if options[:clobber_request]
21
- options[:parameters]
22
- else
23
- all_parameters
24
- end
25
- end
19
+ def uri
20
+ options[:uri].to_s
21
+ end
26
22
 
27
- def body
28
- request.body
29
- end
23
+ def parameters
24
+ if options[:clobber_request]
25
+ options[:parameters]
26
+ else
27
+ all_parameters
28
+ end
29
+ end
30
30
 
31
- private
31
+ def body
32
+ request.body
33
+ end
32
34
 
33
- def all_parameters
34
- request_params = CGI.parse(query_string)
35
- # request_params.each{|k,v| request_params[k] = [nil] if v == []}
35
+ private
36
36
 
37
- if options[:parameters]
38
- options[:parameters].each do |k,v|
39
- if request_params.has_key?(k) && v
40
- request_params[k] << v
41
- else
42
- request_params[k] = [v]
37
+ def all_parameters
38
+ request_params = CGI.parse(query_string)
39
+ # request_params.each{|k,v| request_params[k] = [nil] if v == []}
40
+
41
+ if options[:parameters]
42
+ options[:parameters].each do |k,v|
43
+ if request_params.has_key?(k) && v
44
+ request_params[k] << v
45
+ else
46
+ request_params[k] = [v]
47
+ end
48
+ end
43
49
  end
50
+ request_params
44
51
  end
45
- end
46
- request_params
47
- end
48
52
 
49
- def query_string
50
- params = [ query_params, auth_header_params ]
51
- params << post_params if (method.to_s.upcase == 'POST' || method.to_s.upcase == 'PUT') && form_url_encoded?
52
- params.compact.join('&')
53
- end
53
+ def query_string
54
+ params = [query_params, auth_header_params]
55
+ if (method.to_s.casecmp("POST").zero? || method.to_s.casecmp("PUT").zero?) && form_url_encoded?
56
+ params << post_params
57
+ end
58
+ params.compact.join("&")
59
+ end
54
60
 
55
- def form_url_encoded?
56
- request['Content-Type'] != nil && request['Content-Type'].to_s.downcase.start_with?('application/x-www-form-urlencoded')
57
- end
61
+ def form_url_encoded?
62
+ !request["Content-Type"].nil? && request["Content-Type"].to_s.downcase.start_with?("application/x-www-form-urlencoded")
63
+ end
58
64
 
59
- def query_params
60
- URI.parse(request.path).query
61
- end
65
+ def query_params
66
+ URI.parse(request.path).query
67
+ end
62
68
 
63
- def post_params
64
- request.body
65
- end
69
+ def post_params
70
+ request.body
71
+ end
66
72
 
67
- def auth_header_params
68
- return nil unless request['Authorization'] && request['Authorization'][0,5] == 'OAuth'
69
- request['Authorization']
73
+ def auth_header_params
74
+ return nil unless request["Authorization"] && request["Authorization"][0, 5] == "OAuth"
75
+
76
+ request["Authorization"]
77
+ end
78
+ end
70
79
  end
71
80
  end
72
81
  end
@@ -1,43 +1,47 @@
1
- require 'oauth/request_proxy/base'
2
- require 'uri'
3
- require 'rack'
1
+ # frozen_string_literal: true
4
2
 
5
- module OAuth::RequestProxy
6
- class RackRequest < OAuth::RequestProxy::Base
7
- proxies Rack::Request
3
+ require "oauth/request_proxy/base"
4
+ require "uri"
5
+ require "rack"
8
6
 
9
- def method
10
- request.env["rack.methodoverride.original_method"] || request.request_method
11
- end
7
+ module OAuth
8
+ module RequestProxy
9
+ class RackRequest < OAuth::RequestProxy::Base
10
+ proxies ::Rack::Request
12
11
 
13
- def uri
14
- request.url
15
- end
12
+ def method
13
+ request.env["rack.methodoverride.original_method"] || request.request_method
14
+ end
16
15
 
17
- def parameters
18
- if options[:clobber_request]
19
- options[:parameters] || {}
20
- else
21
- params = request_params.merge(query_params).merge(header_params)
22
- params.merge(options[:parameters] || {})
16
+ def uri
17
+ request.url
23
18
  end
24
- end
25
19
 
26
- def signature
27
- parameters['oauth_signature']
28
- end
20
+ def parameters
21
+ if options[:clobber_request]
22
+ options[:parameters] || {}
23
+ else
24
+ params = request_params.merge(query_params).merge(header_params)
25
+ params.merge(options[:parameters] || {})
26
+ end
27
+ end
29
28
 
30
- protected
29
+ def signature
30
+ parameters["oauth_signature"]
31
+ end
31
32
 
32
- def query_params
33
- request.GET
34
- end
33
+ protected
34
+
35
+ def query_params
36
+ request.GET
37
+ end
35
38
 
36
- def request_params
37
- if request.content_type and request.content_type.to_s.downcase.start_with?("application/x-www-form-urlencoded")
38
- request.POST
39
- else
40
- {}
39
+ def request_params
40
+ if request.content_type && request.content_type.to_s.downcase.start_with?("application/x-www-form-urlencoded")
41
+ request.POST
42
+ else
43
+ {}
44
+ end
41
45
  end
42
46
  end
43
47
  end
@@ -1,62 +1,65 @@
1
- require 'oauth/request_proxy/base'
2
- require 'rest-client'
3
- require 'uri'
4
- require 'cgi'
5
-
6
- module OAuth::RequestProxy::RestClient
7
- class Request < OAuth::RequestProxy::Base
8
- proxies RestClient::Request
9
-
10
- def method
11
- request.method.to_s.upcase
12
- end
1
+ # frozen_string_literal: true
13
2
 
14
- def uri
15
- request.url
16
- end
3
+ require "oauth/request_proxy/base"
4
+ require "rest-client"
5
+ require "uri"
6
+ require "cgi"
7
+
8
+ module OAuth
9
+ module RequestProxy
10
+ module RestClient
11
+ class Request < OAuth::RequestProxy::Base
12
+ proxies ::RestClient::Request
17
13
 
18
- def parameters
19
- if options[:clobber_request]
20
- options[:parameters] || {}
21
- else
22
- post_parameters.merge(query_params).merge(options[:parameters] || {})
14
+ def method
15
+ request.method.to_s.upcase
23
16
  end
24
- end
25
17
 
26
- protected
18
+ def uri
19
+ request.url
20
+ end
27
21
 
28
- def query_params
29
- query = URI.parse(request.url).query
30
- query ? CGI.parse(query) : {}
31
- end
22
+ def parameters
23
+ if options[:clobber_request]
24
+ options[:parameters] || {}
25
+ else
26
+ post_parameters.merge(query_params).merge(options[:parameters] || {})
27
+ end
28
+ end
32
29
 
33
- def request_params
34
- end
35
-
36
- def post_parameters
37
- # Post params are only used if posting form data
38
- if method == 'POST' || method == 'PUT'
39
- OAuth::Helper.stringify_keys(query_string_to_hash(request.payload.to_s) || {})
40
- else
41
- {}
30
+ protected
31
+
32
+ def query_params
33
+ query = URI.parse(request.url).query
34
+ query ? CGI.parse(query) : {}
42
35
  end
43
- end
44
-
45
- private
46
-
47
- def query_string_to_hash(query)
48
- keyvals = query.split('&').inject({}) do |result, q|
49
- k,v = q.split('=')
50
- if !v.nil?
51
- result.merge({k => v})
52
- elsif !result.key?(k)
53
- result.merge({k => true})
36
+
37
+ def request_params; end
38
+
39
+ def post_parameters
40
+ # Post params are only used if posting form data
41
+ if method == "POST" || method == "PUT"
42
+ OAuth::Helper.stringify_keys(query_string_to_hash(request.payload.to_s) || {})
54
43
  else
55
- result
44
+ {}
45
+ end
46
+ end
47
+
48
+ private
49
+
50
+ def query_string_to_hash(query)
51
+ query.split("&").inject({}) do |result, q|
52
+ k, v = q.split("=")
53
+ if !v.nil?
54
+ result.merge({ k => v })
55
+ elsif !result.key?(k)
56
+ result.merge({ k => true })
57
+ else
58
+ result
59
+ end
56
60
  end
57
61
  end
58
- keyvals
59
62
  end
60
-
63
+ end
61
64
  end
62
- end
65
+ end
@@ -1,53 +1,59 @@
1
- require 'oauth/request_proxy/base'
2
- require 'typhoeus'
3
- require 'typhoeus/request'
4
- require 'uri'
5
- require 'cgi'
6
-
7
- module OAuth::RequestProxy::Typhoeus
8
- class Request < OAuth::RequestProxy::Base
9
- # Proxy for signing Typhoeus::Request requests
10
- # Usage example:
11
- # oauth_params = {:consumer => oauth_consumer, :token => access_token}
12
- # req = Typhoeus::Request.new(uri, options)
13
- # oauth_helper = OAuth::Client::Helper.new(req, oauth_params.merge(:request_uri => uri))
14
- # req.options[:headers].merge!({"Authorization" => oauth_helper.header})
15
- # hydra = Typhoeus::Hydra.new()
16
- # hydra.queue(req)
17
- # hydra.run
18
- # response = req.response
19
- proxies Typhoeus::Request
20
-
21
- def method
22
- request_method = request.options[:method].to_s.upcase
23
- request_method.empty? ? 'GET' : request_method
24
- end
1
+ # frozen_string_literal: true
25
2
 
26
- def uri
27
- options[:uri].to_s
28
- end
3
+ require "oauth/request_proxy/base"
4
+ require "typhoeus"
5
+ require "typhoeus/request"
6
+ require "uri"
7
+ require "cgi"
29
8
 
30
- def parameters
31
- if options[:clobber_request]
32
- options[:parameters]
33
- else
34
- post_parameters.merge(query_parameters).merge(options[:parameters] || {})
35
- end
36
- end
9
+ module OAuth
10
+ module RequestProxy
11
+ module Typhoeus
12
+ class Request < OAuth::RequestProxy::Base
13
+ # Proxy for signing Typhoeus::Request requests
14
+ # Usage example:
15
+ # oauth_params = {:consumer => oauth_consumer, :token => access_token}
16
+ # req = Typhoeus::Request.new(uri, options)
17
+ # oauth_helper = OAuth::Client::Helper.new(req, oauth_params.merge(:request_uri => uri))
18
+ # req.options[:headers].merge!({"Authorization" => oauth_helper.header})
19
+ # hydra = Typhoeus::Hydra.new()
20
+ # hydra.queue(req)
21
+ # hydra.run
22
+ # response = req.response
23
+ proxies ::Typhoeus::Request
37
24
 
38
- private
25
+ def method
26
+ request_method = request.options[:method].to_s.upcase
27
+ request_method.empty? ? "GET" : request_method
28
+ end
39
29
 
40
- def query_parameters
41
- query = URI.parse(request.url).query
42
- query ? CGI.parse(query) : {}
43
- end
30
+ def uri
31
+ options[:uri].to_s
32
+ end
33
+
34
+ def parameters
35
+ if options[:clobber_request]
36
+ options[:parameters]
37
+ else
38
+ post_parameters.merge(query_parameters).merge(options[:parameters] || {})
39
+ end
40
+ end
41
+
42
+ private
43
+
44
+ def query_parameters
45
+ query = URI.parse(request.url).query
46
+ query ? CGI.parse(query) : {}
47
+ end
44
48
 
45
- def post_parameters
46
- # Post params are only used if posting form data
47
- if method == 'POST'
48
- OAuth::Helper.stringify_keys(request.options[:params] || {})
49
- else
50
- {}
49
+ def post_parameters
50
+ # Post params are only used if posting form data
51
+ if method == "POST"
52
+ OAuth::Helper.stringify_keys(request.options[:params] || {})
53
+ else
54
+ {}
55
+ end
56
+ end
51
57
  end
52
58
  end
53
59
  end
File without changes
data/lib/oauth/server.rb CHANGED
@@ -1,5 +1,5 @@
1
- require 'oauth/helper'
2
- require 'oauth/consumer'
1
+ require "oauth/helper"
2
+ require "oauth/consumer"
3
3
 
4
4
  module OAuth
5
5
  # This is mainly used to create consumer credentials and can pretty much be ignored if you want to create your own
@@ -1,7 +1,7 @@
1
- require 'oauth/signature'
2
- require 'oauth/helper'
3
- require 'oauth/request_proxy/base'
4
- require 'base64'
1
+ require "oauth/signature"
2
+ require "oauth/helper"
3
+ require "oauth/request_proxy/base"
4
+ require "base64"
5
5
 
6
6
  module OAuth::Signature
7
7
  class Base
@@ -47,11 +47,13 @@ module OAuth::Signature
47
47
  end
48
48
 
49
49
  def signature
50
- Base64.encode64(digest).chomp.gsub(/\n/,'')
50
+ Base64.encode64(digest).chomp.gsub(/\n/,"")
51
51
  end
52
52
 
53
53
  def ==(cmp_signature)
54
- signature == cmp_signature
54
+ check = signature.bytesize ^ cmp_signature.bytesize
55
+ signature.bytes.zip(cmp_signature.bytes) { |x, y| check |= x ^ y.to_i }
56
+ check.zero?
55
57
  end
56
58
 
57
59
  def verify
@@ -1,17 +1,17 @@
1
- require 'oauth/signature/base'
1
+ require "oauth/signature/base"
2
2
 
3
3
  module OAuth::Signature::HMAC
4
4
  class SHA1 < OAuth::Signature::Base
5
- implements 'hmac-sha1'
5
+ implements "hmac-sha1"
6
6
 
7
7
  def body_hash
8
- Base64.encode64(OpenSSL::Digest::SHA1.digest(request.body || '')).chomp.gsub(/\n/,'')
8
+ Base64.encode64(OpenSSL::Digest::SHA1.digest(request.body || "")).chomp.gsub(/\n/,"")
9
9
  end
10
10
 
11
11
  private
12
12
 
13
13
  def digest
14
- OpenSSL::HMAC.digest(OpenSSL::Digest.new('sha1'), secret, signature_base_string)
14
+ OpenSSL::HMAC.digest(OpenSSL::Digest.new("sha1"), secret, signature_base_string)
15
15
  end
16
16
  end
17
17
  end
@@ -1,17 +1,17 @@
1
- require 'oauth/signature/base'
1
+ require "oauth/signature/base"
2
2
 
3
3
  module OAuth::Signature::HMAC
4
4
  class SHA256 < OAuth::Signature::Base
5
- implements 'hmac-sha256'
5
+ implements "hmac-sha256"
6
6
 
7
7
  def body_hash
8
- Base64.encode64(OpenSSL::Digest::SHA256.digest(request.body || '')).chomp.gsub(/\n/,'')
8
+ Base64.encode64(OpenSSL::Digest::SHA256.digest(request.body || "")).chomp.gsub(/\n/,"")
9
9
  end
10
10
 
11
11
  private
12
12
 
13
13
  def digest
14
- OpenSSL::HMAC.digest(OpenSSL::Digest.new('sha256'), secret, signature_base_string)
14
+ OpenSSL::HMAC.digest(OpenSSL::Digest.new("sha256"), secret, signature_base_string)
15
15
  end
16
16
  end
17
17
  end
@@ -1,8 +1,8 @@
1
- require 'oauth/signature/base'
1
+ require "oauth/signature/base"
2
2
 
3
3
  module OAuth::Signature
4
4
  class PLAINTEXT < Base
5
- implements 'plaintext'
5
+ implements "plaintext"
6
6
 
7
7
  def signature
8
8
  signature_base_string
@@ -1,8 +1,8 @@
1
- require 'oauth/signature/base'
1
+ require "oauth/signature/base"
2
2
 
3
3
  module OAuth::Signature::RSA
4
4
  class SHA1 < OAuth::Signature::Base
5
- implements 'rsa-sha1'
5
+ implements "rsa-sha1"
6
6
 
7
7
  def ==(cmp_signature)
8
8
  public_key.verify(OpenSSL::Digest::SHA1.new, Base64.decode64(cmp_signature.is_a?(Array) ? cmp_signature.first : cmp_signature), signature_base_string)
@@ -19,7 +19,7 @@ module OAuth::Signature::RSA
19
19
  end
20
20
 
21
21
  def body_hash
22
- Base64.encode64(OpenSSL::Digest::SHA1.digest(request.body || '')).chomp.gsub(/\n/,'')
22
+ Base64.encode64(OpenSSL::Digest::SHA1.digest(request.body || "")).chomp.gsub(/\n/,"")
23
23
  end
24
24
 
25
25
  private
File without changes
data/lib/oauth/token.rb CHANGED
@@ -1,7 +1,7 @@
1
1
  # this exists for backwards-compatibility
2
2
 
3
- require 'oauth/tokens/token'
4
- require 'oauth/tokens/server_token'
5
- require 'oauth/tokens/consumer_token'
6
- require 'oauth/tokens/request_token'
7
- require 'oauth/tokens/access_token'
3
+ require "oauth/tokens/token"
4
+ require "oauth/tokens/server_token"
5
+ require "oauth/tokens/consumer_token"
6
+ require "oauth/tokens/request_token"
7
+ require "oauth/tokens/access_token"
@@ -43,7 +43,7 @@ module OAuth
43
43
  # @response = @token.post('/people', nil, {'Accept' => 'application/xml' })
44
44
  # @response = @token.post('/people', @person.to_xml, { 'Accept'=>'application/xml', 'Content-Type' => 'application/xml' })
45
45
  #
46
- def post(path, body = '', headers = {})
46
+ def post(path, body = "", headers = {})
47
47
  request(:post, path, body, headers)
48
48
  end
49
49
 
@@ -55,7 +55,7 @@ module OAuth
55
55
  # @response = @token.put('/people/123', nil, { 'Accept' => 'application/xml' })
56
56
  # @response = @token.put('/people/123', @person.to_xml, { 'Accept' => 'application/xml', 'Content-Type' => 'application/xml' })
57
57
  #
58
- def put(path, body = '', headers = {})
58
+ def put(path, body = "", headers = {})
59
59
  request(:put, path, body, headers)
60
60
  end
61
61
 
@@ -67,7 +67,7 @@ module OAuth
67
67
  # @response = @token.patch('/people/123', nil, { 'Accept' => 'application/xml' })
68
68
  # @response = @token.patch('/people/123', @person.to_xml, { 'Accept' => 'application/xml', 'Content-Type' => 'application/xml' })
69
69
  #
70
- def patch(path, body = '', headers = {})
70
+ def patch(path, body = "", headers = {})
71
71
  request(:patch, path, body, headers)
72
72
  end
73
73
 
File without changes
File without changes
File without changes
File without changes
data/lib/oauth/version.rb CHANGED
@@ -1,3 +1,3 @@
1
1
  module OAuth
2
- VERSION = "0.5.6"
2
+ VERSION = "0.5.8"
3
3
  end
data/lib/oauth.rb CHANGED
@@ -1,12 +1,13 @@
1
1
  root = File.dirname(__FILE__)
2
2
  $LOAD_PATH << root unless $LOAD_PATH.include?(root)
3
3
 
4
- require 'oauth/version'
4
+ require "oauth/version"
5
5
 
6
- require 'oauth/oauth'
6
+ require "oauth/oauth"
7
7
 
8
- require 'oauth/client/helper'
9
- require 'oauth/signature/hmac/sha1'
10
- require 'oauth/signature/hmac/sha256'
11
- require 'oauth/signature/rsa/sha1'
12
- require 'oauth/request_proxy/mock_request'
8
+ require "oauth/client/helper"
9
+ require "oauth/signature/plaintext"
10
+ require "oauth/signature/hmac/sha1"
11
+ require "oauth/signature/hmac/sha256"
12
+ require "oauth/signature/rsa/sha1"
13
+ require "oauth/request_proxy/mock_request"