oauth3 1.0.3

checksums.yaml

@@ -0,0 +1,7 @@
+---
+SHA1:
+  metadata.gz: 4151158493b6c0035e630b0e188339a4c7b05c34
+  data.tar.gz: 59f10fd777ffebec56190c0c180b49e97c301973
+SHA512:
+  metadata.gz: 6d64fc1d31adc1ebc771916af940382e152ef9a8e846c9829f07b1171f9cd004196cde2e22eedca277314780ecb5386cf43bf712bbaf8a0ef172e0c584217a1d
+  data.tar.gz: 44566e908c777ca01c949a35aca115f3dde3ed74253c85efa2ac62c48a8575dd0f65ba8e70de5af36eb25b7209192e01cd3944d4e44c90560e5b34aae534ea07

data/lib/oauth3.rb

@@ -0,0 +1,97 @@
+require 'oauth2'
+require 'httpclient'
+require 'json'
+
+class Oauth3
+  #attr_reader :client
+  #attr_accessor :options
+
+  def initialize(registrar, options={})
+    # make sure all options for the OAuth module and faraday
+    # pass all the way down
+    @options = options
+    @states = {}
+    @providers = {}
+    @clients = {}
+    @registrar = registrar
+  end
+
+  def normalize_provider_uri(uri)
+    'https://' + uri.gsub(/https?:\/\//, '')
+  end
+
+  def get_directive(provider_uri)
+    if @providers[provider_uri] # and @directive.timestamp < 1.day.old
+      return @providers[provider_uri][:directive]
+    end
+
+    # TODO if there's no prefix (https://), add it first
+    # TODO if the directive is stale, refresh it
+    http = HTTPClient.new()
+    response = http.get_content("#{provider_uri}/oauth3.json")
+    @providers[provider_uri] = {
+      provider_uri: provider_uri,
+      directive: JSON.parse(response),
+      timestamp: Time.now
+    }
+    @providers[provider_uri][:directive]
+  end
+
+  def get_oauth2_client(provider_uri)
+    # TODO refresh the client when refreshing the directive
+    if @clients[provider_uri]
+      return @clients[provider_uri]
+    end
+
+    client_options = @options.dup
+    client_options[:site] = ""
+    client_options[:authorize_url] = get_directive(provider_uri)['authorization_dialog']['url']
+    client_options[:token_url] = get_directive(provider_uri)['access_token']['url']
+
+    @clients[provider_uri] = OAuth2::Client.new(
+      @registrar.get(provider_uri)['id'],
+      @registrar.get(provider_uri)['secret'],
+      client_options
+    )
+  end
+
+
+  def random_string
+    (0...50).map { ('a'..'z').to_a[rand(26)] }.join
+  end
+
+  def authorize_url(provider_uri)
+    redirect_uri = @options[:redirect_uri]
+    rnd = random_string()
+    @states[rnd] = Time.now
+
+    # TODO state should go in params to the provider, not the redirect directly
+    # ... but ultimately it has the same effect, so whatever
+    get_oauth2_client(provider_uri).auth_code.authorize_url(
+      # TODO (change ? to & if there's already a ?)
+      redirect_uri: redirect_uri +
+        "?provider_uri=" + URI.encode_www_form_component(provider_uri) +
+        "&state=" + rnd
+    )
+  end
+
+  def validate_state(provider_uri, state)
+    # TODO delete stale states
+    @states[state]
+  end
+
+  def get_token(provider_uri, code)
+    get_oauth2_client(provider_uri).auth_code.get_token(code)
+  end
+
+  def get_profile(provider_uri, token)
+    url = get_directive(provider_uri)['profile']['url']
+    OAuth2::AccessToken.new(get_oauth2_client(provider_uri), token).get(url)
+  end
+
+  def get_resource(provider_uri, token, path)
+    url = get_directive(provider_uri)['api_base_url']
+    OAuth2::AccessToken.new(get_oauth2_client(provider_uri), token).get("#{url}/#{path}")
+  end
+
+end

metadata

@@ -0,0 +1,87 @@
+--- !ruby/object:Gem::Specification
+name: oauth3
+version: !ruby/object:Gem::Version
+  version: 1.0.3
+platform: ruby
+authors:
+- AJ ONeal
+autorequire: 
+bindir: bin
+cert_chain: []
+date: 2015-04-01 00:00:00.000000000 Z
+dependencies:
+- !ruby/object:Gem::Dependency
+  name: oauth2
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - '='
+      - !ruby/object:Gem::Version
+        version: 1.0.0
+  type: :runtime
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - '='
+      - !ruby/object:Gem::Version
+        version: 1.0.0
+- !ruby/object:Gem::Dependency
+  name: httpclient
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - '='
+      - !ruby/object:Gem::Version
+        version: 2.6.0
+  type: :runtime
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - '='
+      - !ruby/object:Gem::Version
+        version: 2.6.0
+- !ruby/object:Gem::Dependency
+  name: json
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - '='
+      - !ruby/object:Gem::Version
+        version: 1.8.2
+  type: :runtime
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - '='
+      - !ruby/object:Gem::Version
+        version: 1.8.2
+description: 
+email: coolaj86@gmail.com
+executables: []
+extensions: []
+extra_rdoc_files: []
+files:
+- lib/oauth3.rb
+homepage: https://github.com/OAuth3/ruby-oauth3-gem
+licenses:
+- TRON
+metadata: {}
+post_install_message: 
+rdoc_options: []
+require_paths:
+- lib
+required_ruby_version: !ruby/object:Gem::Requirement
+  requirements:
+  - - '>='
+    - !ruby/object:Gem::Version
+      version: '0'
+required_rubygems_version: !ruby/object:Gem::Requirement
+  requirements:
+  - - '>='
+    - !ruby/object:Gem::Version
+      version: '0'
+requirements: []
+rubyforge_project: 
+rubygems_version: 2.0.14
+signing_key: 
+specification_version: 4
+summary: OAuth3 (backwards compatible with OAuth2) authentication strategy for connecting
+  to any OAuth2 / OAuth3 provider in Ruby / Sinatra / etc
+test_files: []