oauth 0.5.6 → 1.1.0
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- checksums.yaml +4 -4
- data/CHANGELOG.md +504 -0
- data/CODE_OF_CONDUCT.md +84 -0
- data/CONTRIBUTING.md +40 -0
- data/LICENSE +19 -17
- data/README.md +390 -0
- data/SECURITY.md +26 -0
- data/lib/oauth/client/action_controller_request.rb +23 -21
- data/lib/oauth/client/em_http.rb +99 -99
- data/lib/oauth/client/helper.rb +83 -82
- data/lib/oauth/client/net_http.rb +112 -105
- data/lib/oauth/client.rb +2 -0
- data/lib/oauth/consumer.rb +147 -133
- data/lib/oauth/errors/error.rb +2 -0
- data/lib/oauth/errors/problem.rb +3 -0
- data/lib/oauth/errors/unauthorized.rb +7 -1
- data/lib/oauth/errors.rb +5 -3
- data/lib/oauth/helper.rb +26 -18
- data/lib/oauth/oauth.rb +6 -4
- data/lib/oauth/oauth_test_helper.rb +6 -4
- data/lib/oauth/request_proxy/action_controller_request.rb +49 -71
- data/lib/oauth/request_proxy/action_dispatch_request.rb +8 -4
- data/lib/oauth/request_proxy/base.rb +136 -132
- data/lib/oauth/request_proxy/curb_request.rb +49 -43
- data/lib/oauth/request_proxy/em_http_request.rb +59 -49
- data/lib/oauth/request_proxy/jabber_request.rb +12 -9
- data/lib/oauth/request_proxy/mock_request.rb +5 -3
- data/lib/oauth/request_proxy/net_http.rb +61 -54
- data/lib/oauth/request_proxy/rack_request.rb +35 -31
- data/lib/oauth/request_proxy/rest_client_request.rb +54 -50
- data/lib/oauth/request_proxy/typhoeus_request.rb +51 -45
- data/lib/oauth/request_proxy.rb +7 -4
- data/lib/oauth/server.rb +14 -12
- data/lib/oauth/signature/base.rb +78 -71
- data/lib/oauth/signature/hmac/sha1.rb +16 -10
- data/lib/oauth/signature/hmac/sha256.rb +16 -10
- data/lib/oauth/signature/plaintext.rb +18 -20
- data/lib/oauth/signature/rsa/sha1.rb +46 -38
- data/lib/oauth/signature.rb +8 -5
- data/lib/oauth/token.rb +7 -5
- data/lib/oauth/tokens/access_token.rb +5 -3
- data/lib/oauth/tokens/consumer_token.rb +4 -2
- data/lib/oauth/tokens/request_token.rb +12 -10
- data/lib/oauth/tokens/server_token.rb +2 -1
- data/lib/oauth/tokens/token.rb +2 -0
- data/lib/oauth/version.rb +5 -1
- data/lib/oauth.rb +17 -9
- metadata +105 -98
- data/README.rdoc +0 -88
- data/bin/oauth +0 -11
- data/lib/oauth/cli/authorize_command.rb +0 -71
- data/lib/oauth/cli/base_command.rb +0 -208
- data/lib/oauth/cli/help_command.rb +0 -22
- data/lib/oauth/cli/query_command.rb +0 -25
- data/lib/oauth/cli/sign_command.rb +0 -81
- data/lib/oauth/cli/version_command.rb +0 -7
- data/lib/oauth/cli.rb +0 -56
@@ -1,208 +0,0 @@
|
|
1
|
-
class OAuth::CLI
|
2
|
-
class BaseCommand
|
3
|
-
def initialize(stdout, stdin, stderr, arguments)
|
4
|
-
@stdout, @stdin, @stderr = stdout, stdin, stderr
|
5
|
-
|
6
|
-
@options = {}
|
7
|
-
option_parser.parse!(arguments)
|
8
|
-
end
|
9
|
-
|
10
|
-
def run
|
11
|
-
missing = required_options - options.keys
|
12
|
-
if missing.empty?
|
13
|
-
_run
|
14
|
-
else
|
15
|
-
show_missing(missing)
|
16
|
-
puts option_parser.help
|
17
|
-
end
|
18
|
-
end
|
19
|
-
|
20
|
-
def required_options
|
21
|
-
[]
|
22
|
-
end
|
23
|
-
|
24
|
-
protected
|
25
|
-
|
26
|
-
attr_reader :options
|
27
|
-
|
28
|
-
def show_missing(array)
|
29
|
-
array = array.map { |s| "--#{s}" }.join(' ')
|
30
|
-
OAuth::CLI.puts_red "Options missing to OAuth CLI: #{array}"
|
31
|
-
end
|
32
|
-
|
33
|
-
def xmpp?
|
34
|
-
options[:xmpp]
|
35
|
-
end
|
36
|
-
|
37
|
-
def verbose?
|
38
|
-
options[:verbose]
|
39
|
-
end
|
40
|
-
|
41
|
-
def puts(string=nil)
|
42
|
-
@stdout.puts(string)
|
43
|
-
end
|
44
|
-
|
45
|
-
def alert(string=nil)
|
46
|
-
@stderr.puts(string)
|
47
|
-
end
|
48
|
-
|
49
|
-
def parameters
|
50
|
-
@parameters ||= begin
|
51
|
-
escaped_pairs = options[:params].collect do |pair|
|
52
|
-
if pair =~ /:/
|
53
|
-
Hash[*pair.split(":", 2)].collect do |k,v|
|
54
|
-
[CGI.escape(k.strip), CGI.escape(v.strip)] * "="
|
55
|
-
end
|
56
|
-
else
|
57
|
-
pair
|
58
|
-
end
|
59
|
-
end
|
60
|
-
|
61
|
-
querystring = escaped_pairs * "&"
|
62
|
-
cli_params = CGI.parse(querystring)
|
63
|
-
|
64
|
-
{
|
65
|
-
"oauth_consumer_key" => options[:oauth_consumer_key],
|
66
|
-
"oauth_nonce" => options[:oauth_nonce],
|
67
|
-
"oauth_timestamp" => options[:oauth_timestamp],
|
68
|
-
"oauth_token" => options[:oauth_token],
|
69
|
-
"oauth_signature_method" => options[:oauth_signature_method],
|
70
|
-
"oauth_version" => options[:oauth_version]
|
71
|
-
}.reject { |_k,v| v.nil? || v == "" }.merge(cli_params)
|
72
|
-
end
|
73
|
-
end
|
74
|
-
|
75
|
-
def option_parser
|
76
|
-
@option_parser ||= OptionParser.new do |opts|
|
77
|
-
opts.banner = "Usage: oauth <command> [ARGS]"
|
78
|
-
|
79
|
-
_option_parser_defaults
|
80
|
-
_option_parser_common(opts)
|
81
|
-
_option_parser_sign_and_query(opts)
|
82
|
-
_option_parser_authorization(opts)
|
83
|
-
end
|
84
|
-
end
|
85
|
-
|
86
|
-
def _option_parser_defaults
|
87
|
-
options[:oauth_nonce] = OAuth::Helper.generate_key
|
88
|
-
options[:oauth_signature_method] = "HMAC-SHA1"
|
89
|
-
options[:oauth_timestamp] = OAuth::Helper.generate_timestamp
|
90
|
-
options[:oauth_version] = "1.0"
|
91
|
-
options[:method] = :post
|
92
|
-
options[:params] = []
|
93
|
-
options[:scheme] = :header
|
94
|
-
options[:version] = "1.0"
|
95
|
-
end
|
96
|
-
|
97
|
-
def _option_parser_common(opts)
|
98
|
-
## Common Options
|
99
|
-
|
100
|
-
opts.on("-B", "--body", "Use the request body for OAuth parameters.") do
|
101
|
-
options[:scheme] = :body
|
102
|
-
end
|
103
|
-
|
104
|
-
opts.on("--consumer-key KEY", "Specifies the consumer key to use.") do |v|
|
105
|
-
options[:oauth_consumer_key] = v
|
106
|
-
end
|
107
|
-
|
108
|
-
opts.on("--consumer-secret SECRET", "Specifies the consumer secret to use.") do |v|
|
109
|
-
options[:oauth_consumer_secret] = v
|
110
|
-
end
|
111
|
-
|
112
|
-
opts.on("-H", "--header", "Use the 'Authorization' header for OAuth parameters (default).") do
|
113
|
-
options[:scheme] = :header
|
114
|
-
end
|
115
|
-
|
116
|
-
opts.on("-Q", "--query-string", "Use the query string for OAuth parameters.") do
|
117
|
-
options[:scheme] = :query_string
|
118
|
-
end
|
119
|
-
|
120
|
-
opts.on("-O", "--options FILE", "Read options from a file") do |v|
|
121
|
-
arguments = open(v).readlines.map { |l| l.chomp.split(" ") }.flatten
|
122
|
-
options2 = parse_options(arguments)
|
123
|
-
options.merge!(options2)
|
124
|
-
end
|
125
|
-
end
|
126
|
-
|
127
|
-
def _option_parser_sign_and_query(opts)
|
128
|
-
opts.separator("\n options for signing and querying")
|
129
|
-
|
130
|
-
opts.on("--method METHOD", "Specifies the method (e.g. GET) to use when signing.") do |v|
|
131
|
-
options[:method] = v
|
132
|
-
end
|
133
|
-
|
134
|
-
opts.on("--nonce NONCE", "Specifies the nonce to use.") do |v|
|
135
|
-
options[:oauth_nonce] = v
|
136
|
-
end
|
137
|
-
|
138
|
-
opts.on("--parameters PARAMS", "Specifies the parameters to use when signing.") do |v|
|
139
|
-
options[:params] << v
|
140
|
-
end
|
141
|
-
|
142
|
-
opts.on("--signature-method METHOD", "Specifies the signature method to use; defaults to HMAC-SHA1.") do |v|
|
143
|
-
options[:oauth_signature_method] = v
|
144
|
-
end
|
145
|
-
|
146
|
-
opts.on("--token TOKEN", "Specifies the token to use.") do |v|
|
147
|
-
options[:oauth_token] = v
|
148
|
-
end
|
149
|
-
|
150
|
-
opts.on("--secret SECRET", "Specifies the token secret to use.") do |v|
|
151
|
-
options[:oauth_token_secret] = v
|
152
|
-
end
|
153
|
-
|
154
|
-
opts.on("--timestamp TIMESTAMP", "Specifies the timestamp to use.") do |v|
|
155
|
-
options[:oauth_timestamp] = v
|
156
|
-
end
|
157
|
-
|
158
|
-
opts.on("--realm REALM", "Specifies the realm to use.") do |v|
|
159
|
-
options[:realm] = v
|
160
|
-
end
|
161
|
-
|
162
|
-
opts.on("--uri URI", "Specifies the URI to use when signing.") do |v|
|
163
|
-
options[:uri] = v
|
164
|
-
end
|
165
|
-
|
166
|
-
opts.on("--version [VERSION]", "Specifies the OAuth version to use.") do |v|
|
167
|
-
options[:oauth_version] = v
|
168
|
-
end
|
169
|
-
|
170
|
-
opts.on("--no-version", "Omit oauth_version.") do
|
171
|
-
options[:oauth_version] = nil
|
172
|
-
end
|
173
|
-
|
174
|
-
opts.on("--xmpp", "Generate XMPP stanzas.") do
|
175
|
-
options[:xmpp] = true
|
176
|
-
options[:method] ||= "iq"
|
177
|
-
end
|
178
|
-
|
179
|
-
opts.on("-v", "--verbose", "Be verbose.") do
|
180
|
-
options[:verbose] = true
|
181
|
-
end
|
182
|
-
end
|
183
|
-
|
184
|
-
def _option_parser_authorization(opts)
|
185
|
-
opts.separator("\n options for authorization")
|
186
|
-
|
187
|
-
opts.on("--access-token-url URL", "Specifies the access token URL.") do |v|
|
188
|
-
options[:access_token_url] = v
|
189
|
-
end
|
190
|
-
|
191
|
-
opts.on("--authorize-url URL", "Specifies the authorization URL.") do |v|
|
192
|
-
options[:authorize_url] = v
|
193
|
-
end
|
194
|
-
|
195
|
-
opts.on("--callback-url URL", "Specifies a callback URL.") do |v|
|
196
|
-
options[:oauth_callback] = v
|
197
|
-
end
|
198
|
-
|
199
|
-
opts.on("--request-token-url URL", "Specifies the request token URL.") do |v|
|
200
|
-
options[:request_token_url] = v
|
201
|
-
end
|
202
|
-
|
203
|
-
opts.on("--scope SCOPE", "Specifies the scope (Google-specific).") do |v|
|
204
|
-
options[:scope] = v
|
205
|
-
end
|
206
|
-
end
|
207
|
-
end
|
208
|
-
end
|
@@ -1,22 +0,0 @@
|
|
1
|
-
class OAuth::CLI
|
2
|
-
class HelpCommand < BaseCommand
|
3
|
-
def run
|
4
|
-
puts <<-EOT
|
5
|
-
Usage: oauth COMMAND [ARGS]
|
6
|
-
|
7
|
-
Available oauth commands are:
|
8
|
-
a, authorize Obtain an access token and secret for a user
|
9
|
-
q, query Query a protected resource
|
10
|
-
s, sign Generate an OAuth signature
|
11
|
-
|
12
|
-
In addition to those, there are:
|
13
|
-
v, version Displays the current version of the library (or --version, -v)
|
14
|
-
h, help Displays this help (or --help, -h)
|
15
|
-
|
16
|
-
Tip: All commands can be run without args for specific help.
|
17
|
-
|
18
|
-
|
19
|
-
EOT
|
20
|
-
end
|
21
|
-
end
|
22
|
-
end
|
@@ -1,25 +0,0 @@
|
|
1
|
-
class OAuth::CLI
|
2
|
-
class QueryCommand < BaseCommand
|
3
|
-
extend OAuth::Helper
|
4
|
-
|
5
|
-
def required_options
|
6
|
-
[:oauth_consumer_key, :oauth_consumer_secret, :oauth_token, :oauth_token_secret]
|
7
|
-
end
|
8
|
-
|
9
|
-
def _run
|
10
|
-
consumer = OAuth::Consumer.new(options[:oauth_consumer_key], options[:oauth_consumer_secret], scheme: options[:scheme])
|
11
|
-
|
12
|
-
access_token = OAuth::AccessToken.new(consumer, options[:oauth_token], options[:oauth_token_secret])
|
13
|
-
|
14
|
-
# append params to the URL
|
15
|
-
uri = URI.parse(options[:uri])
|
16
|
-
params = parameters.map { |k,v| Array(v).map { |v2| "#{OAuth::Helper.escape(k)}=#{OAuth::Helper.escape(v2)}" } * "&" }
|
17
|
-
uri.query = [uri.query, *params].reject { |x| x.nil? } * "&"
|
18
|
-
puts uri.to_s
|
19
|
-
|
20
|
-
response = access_token.request(options[:method].to_s.downcase.to_sym, uri.to_s)
|
21
|
-
puts "#{response.code} #{response.message}"
|
22
|
-
puts response.body
|
23
|
-
end
|
24
|
-
end
|
25
|
-
end
|
@@ -1,81 +0,0 @@
|
|
1
|
-
class OAuth::CLI
|
2
|
-
class SignCommand < BaseCommand
|
3
|
-
|
4
|
-
def required_options
|
5
|
-
[:oauth_consumer_key, :oauth_consumer_secret, :oauth_token, :oauth_token_secret]
|
6
|
-
end
|
7
|
-
|
8
|
-
def _run
|
9
|
-
request = OAuth::RequestProxy.proxy \
|
10
|
-
"method" => options[:method],
|
11
|
-
"uri" => options[:uri],
|
12
|
-
"parameters" => parameters
|
13
|
-
|
14
|
-
if verbose?
|
15
|
-
puts_verbose_parameters(request)
|
16
|
-
end
|
17
|
-
|
18
|
-
request.sign! \
|
19
|
-
:consumer_secret => options[:oauth_consumer_secret],
|
20
|
-
:token_secret => options[:oauth_token_secret]
|
21
|
-
|
22
|
-
if verbose?
|
23
|
-
puts_verbose_request(request)
|
24
|
-
else
|
25
|
-
puts request.oauth_signature
|
26
|
-
end
|
27
|
-
end
|
28
|
-
|
29
|
-
def puts_verbose_parameters(request)
|
30
|
-
puts "OAuth parameters:"
|
31
|
-
request.oauth_parameters.each do |k,v|
|
32
|
-
puts " " + [k, v] * ": "
|
33
|
-
end
|
34
|
-
puts
|
35
|
-
|
36
|
-
if request.non_oauth_parameters.any?
|
37
|
-
puts "Parameters:"
|
38
|
-
request.non_oauth_parameters.each do |k,v|
|
39
|
-
puts " " + [k, v] * ": "
|
40
|
-
end
|
41
|
-
puts
|
42
|
-
end
|
43
|
-
end
|
44
|
-
|
45
|
-
def puts_verbose_request(request)
|
46
|
-
puts "Method: #{request.method}"
|
47
|
-
puts "URI: #{request.uri}"
|
48
|
-
puts "Normalized params: #{request.normalized_parameters}" unless options[:xmpp]
|
49
|
-
puts "Signature base string: #{request.signature_base_string}"
|
50
|
-
|
51
|
-
if xmpp?
|
52
|
-
puts
|
53
|
-
puts "XMPP Stanza:"
|
54
|
-
puts xmpp_output(request)
|
55
|
-
puts
|
56
|
-
puts "Note: You may want to use bare JIDs in your URI."
|
57
|
-
puts
|
58
|
-
else
|
59
|
-
puts "OAuth Request URI: #{request.signed_uri}"
|
60
|
-
puts "Request URI: #{request.signed_uri(false)}"
|
61
|
-
puts "Authorization header: #{request.oauth_header(:realm => options[:realm])}"
|
62
|
-
end
|
63
|
-
puts "Signature: #{request.oauth_signature}"
|
64
|
-
puts "Escaped signature: #{OAuth::Helper.escape(request.oauth_signature)}"
|
65
|
-
end
|
66
|
-
|
67
|
-
def xmpp_output(request)
|
68
|
-
<<-EOS
|
69
|
-
<oauth xmlns='urn:xmpp:oauth:0'>
|
70
|
-
<oauth_consumer_key>#{request.oauth_consumer_key}</oauth_consumer_key>
|
71
|
-
<oauth_token>#{request.oauth_token}</oauth_token>
|
72
|
-
<oauth_signature_method>#{request.oauth_signature_method}</oauth_signature_method>
|
73
|
-
<oauth_signature>#{request.oauth_signature}</oauth_signature>
|
74
|
-
<oauth_timestamp>#{request.oauth_timestamp}</oauth_timestamp>
|
75
|
-
<oauth_nonce>#{request.oauth_nonce}</oauth_nonce>
|
76
|
-
<oauth_version>#{request.oauth_version}</oauth_version>
|
77
|
-
</oauth>
|
78
|
-
EOS
|
79
|
-
end
|
80
|
-
end
|
81
|
-
end
|
data/lib/oauth/cli.rb
DELETED
@@ -1,56 +0,0 @@
|
|
1
|
-
require 'optparse'
|
2
|
-
require 'oauth/cli/base_command'
|
3
|
-
require 'oauth/cli/help_command'
|
4
|
-
require 'oauth/cli/query_command'
|
5
|
-
require 'oauth/cli/authorize_command'
|
6
|
-
require 'oauth/cli/sign_command'
|
7
|
-
require 'oauth/cli/version_command'
|
8
|
-
require 'active_support/core_ext/string/inflections'
|
9
|
-
|
10
|
-
module OAuth
|
11
|
-
class CLI
|
12
|
-
def self.puts_red(string)
|
13
|
-
puts "\033[0;91m#{string}\033[0m"
|
14
|
-
end
|
15
|
-
|
16
|
-
ALIASES = {
|
17
|
-
'h' => 'help',
|
18
|
-
'v' => 'version',
|
19
|
-
'q' => 'query',
|
20
|
-
'a' => 'authorize',
|
21
|
-
's' => 'sign',
|
22
|
-
}
|
23
|
-
|
24
|
-
def initialize(stdout, stdin, stderr, command, arguments)
|
25
|
-
klass = get_command_class(parse_command(command))
|
26
|
-
@command = klass.new(stdout, stdin, stderr, arguments)
|
27
|
-
@help_command = HelpCommand.new(stdout, stdin, stderr, [])
|
28
|
-
end
|
29
|
-
|
30
|
-
def run
|
31
|
-
@command.run
|
32
|
-
end
|
33
|
-
|
34
|
-
private
|
35
|
-
|
36
|
-
def get_command_class(command)
|
37
|
-
Object.const_get("OAuth::CLI::#{command.camelize}Command")
|
38
|
-
end
|
39
|
-
|
40
|
-
def parse_command(command)
|
41
|
-
case command = command.to_s.downcase
|
42
|
-
when '--version', '-v'
|
43
|
-
'version'
|
44
|
-
when '--help', '-h', nil, ''
|
45
|
-
'help'
|
46
|
-
when *ALIASES.keys
|
47
|
-
ALIASES[command]
|
48
|
-
when *ALIASES.values
|
49
|
-
command
|
50
|
-
else
|
51
|
-
OAuth::CLI.puts_red "Command '#{command}' not found"
|
52
|
-
'help'
|
53
|
-
end
|
54
|
-
end
|
55
|
-
end
|
56
|
-
end
|