oauth_service 0.0.1

checksums.yaml

@@ -0,0 +1,7 @@
+---
+SHA1:
+  metadata.gz: fc4e4f436f6b04ef9ba3061db91a2d1c9e49649c
+  data.tar.gz: 39e7c45adb3f4a851ee20d40dfad135eb4e97046
+SHA512:
+  metadata.gz: d119e5c4b4dd7fac49b8d020ef06bfa200212e35c72d0590093dc15b74f76f3eaa9eb3eeb933bb8c8fa4aa808f45fa739de87365f55d4352b646e1e1324cb671
+  data.tar.gz: 8e167caf502e999ae856fe346a02bf93fddbb3babfd277876ba086b8e6a67bcbdbcc75933c04e1155bbff2e000c786a7ff301dda7c6b00a188abc64a50d07a9a

data/MIT-LICENSE

@@ -0,0 +1,20 @@
+Copyright 2016 DCrow
+
+Permission is hereby granted, free of charge, to any person obtaining
+a copy of this software and associated documentation files (the
+"Software"), to deal in the Software without restriction, including
+without limitation the rights to use, copy, modify, merge, publish,
+distribute, sublicense, and/or sell copies of the Software, and to
+permit persons to whom the Software is furnished to do so, subject to
+the following conditions:
+
+The above copyright notice and this permission notice shall be
+included in all copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND,
+EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF
+MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND
+NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE
+LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION
+OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION
+WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.

data/README.rdoc

@@ -0,0 +1,7 @@
+= OauthService
+
+This project rocks and uses MIT-LICENSE.
+
+Skeleton project for authentication.
+Uses Google, Yandex, Mail_Ru oauth2 services to authenticate users.
+Response is json.

data/Rakefile

@@ -0,0 +1,34 @@
+begin
+  require 'bundler/setup'
+rescue LoadError
+  puts 'You must `gem install bundler` and `bundle install` to run rake tasks'
+end
+
+require 'rdoc/task'
+
+RDoc::Task.new(:rdoc) do |rdoc|
+  rdoc.rdoc_dir = 'rdoc'
+  rdoc.title    = 'OauthService'
+  rdoc.options << '--line-numbers'
+  rdoc.rdoc_files.include('README.rdoc')
+  rdoc.rdoc_files.include('lib/**/*.rb')
+end
+
+
+
+
+
+
+Bundler::GemHelper.install_tasks
+
+require 'rake/testtask'
+
+Rake::TestTask.new(:test) do |t|
+  t.libs << 'lib'
+  t.libs << 'test'
+  t.pattern = 'test/**/*_test.rb'
+  t.verbose = false
+end
+
+
+task default: :test

data/app/controllers/concerns/oauth_service/google.rb

@@ -0,0 +1,12 @@
+module OauthService
+  class Google < Provider
+    def get_info_headers(options = {})
+      { 'Authorization' => "Bearer #{options[:access_token]}" }
+    end
+
+    def get_info_params(options = {})
+      {}
+    end
+  end
+end
+    

data/app/controllers/concerns/oauth_service/mailru.rb

@@ -0,0 +1,29 @@
+module OauthService
+  class MailRu < Provider  
+    def initialize(name, downcase_name, auth_url, client_id, client_secret,
+      info_url, scopes, token_url)
+      super(name, downcase_name, auth_url, client_id, client_secret,
+      info_url, scopes, token_url)
+      @scopes = nil
+    end
+    
+    def get_user_info(info)
+      info.first
+    end
+    
+    def get_info_headers(options = {})
+      nil
+    end
+    
+    def get_info_params(options = {})
+      query_params = {
+        'app_id' => client_id,
+        'method' => 'users.getInfo',
+        'secure' => 1,
+        'session_key' => options[:access_token]
+      }
+      query_params['sig'] = Digest::MD5.hexdigest(query_params.collect { |v| v.join('=') }.join + client_secret)
+      query_params
+    end
+  end
+end

data/app/controllers/concerns/oauth_service/yandex.rb

@@ -0,0 +1,19 @@
+module OauthService
+  class Yandex < Provider
+    def get_user_info(info)
+      {
+        :email => info[:default_email],
+        :id => info[:id],
+        :name => info[:display_name]
+      }
+    end
+    
+    def get_info_headers(options = {})
+      { 'Authorization' => "OAuth #{options[:access_token]}" }
+    end
+    
+    def get_info_params(options = {})
+      {}
+    end
+  end
+end 

data/app/controllers/oauth_service/access_controller.rb

@@ -0,0 +1,34 @@
+module OauthService
+  class AccessController < OauthService.parent_controller.constantize
+    before_filter :check_access
+    
+    def get_user_id
+      if (api_code = request.headers["HTTP_API_CODE"]) && api_code!=""
+        user = ::User.find_by(api_code: api_code)
+      else
+        user = ::User.find_by(name: "guest")
+      end
+      user.id 
+    end
+    
+    def check_access
+      check_status = false
+      path = request.path
+      http_method = request.method.to_s
+      user_urls = ::Url.by_user get_user_id
+      
+      check_status = user_urls.any? do |user_url|
+        path[Regexp.new(user_url.url_pattern)]==path &&
+        (user_url.http_method.nil? || http_method==user_url.http_method)
+      end
+
+      unless check_status
+        if request.headers["HTTP_API_CODE"]
+          render :json => {:success => false, :error => "Not authorized"}, :status => 401      
+        else
+          render :json => {:success => false, :error => "Permission denied"}, :status => 403
+        end
+      end
+    end
+  end
+end

data/app/controllers/oauth_service/login_controller.rb

@@ -0,0 +1,90 @@
+require "oauth_service"
+
+module OauthService
+  class LoginController < AccessController
+    def oauth_callback
+      user_info = get_user_info(params[:provider_name], request.url, params[:code])
+
+      if user_info
+        user = ::User.find_by(name: user_info[:email])
+        api_code = generate_api_code
+        success = user.blank?
+
+        unless success
+          user.update_attributes(:api_code => api_code)
+          render :json => {:success => true, :api_code => api_code}, :status => 200
+        else
+          render :json => {:success => false, :error=> "No such user exists"}, :status => 404
+        end
+      end
+    end
+
+    def logout
+      user = ::User.find_by(api_code: api_code)
+      success = user.blank?
+      unless success
+        user.update_attributes(:api_code => nil)
+        render :json => {:success => true}, :status => 400
+      else
+        render :json => {:success => false, :error=> "No such user exists"}, :status => 400
+      end
+    end
+
+    private
+      def generate_api_code
+        SecureRandom.uuid
+      end
+
+      def get_user_info(provider_name, redirect_uri, code)
+      provider = OauthService::Provider::get_provider_by_name(provider_name)
+      token_uri = URI.parse(provider.token_url)
+      http_token = Net::HTTP.new(token_uri.host, token_uri.port)
+      http_token.use_ssl = true if token_uri.scheme == "https"
+      
+      http_token.start do |http_token_request|
+        res = http_token_request.send_request("POST",
+          token_uri.request_uri,
+          URI.encode_www_form(provider.get_token_params(original_url: redirect_uri, code: code)),
+          { 'Content-Type' => "application/x-www-form-urlencoded" }) 
+        
+        res_body = ActiveSupport::JSON.decode(res.body).symbolize_keys
+
+        if res.code!='200'
+          render :json => {
+            :success => false,
+            :error => res_body[:error],
+            :error_description => res_body[:error_description]
+          },
+            :status => res.code
+          return false
+        end
+        
+        info_uri = URI.parse(provider.info_url + "?" +
+          URI.encode_www_form(provider.get_info_params(access_token: res_body[:access_token])))
+        http_info = Net::HTTP.new(info_uri.host, info_uri.port)
+        http_info.use_ssl = true if info_uri.scheme == "https"
+        
+        http_info.start do |http_info_request|
+          res = http_info_request.send_request("GET",
+          info_uri.request_uri,
+          nil,
+          provider.get_info_headers(access_token: res_body[:access_token]))
+
+          res_body = ActiveSupport::JSON.decode(res.body).symbolize_keys
+          
+          if res.code!='200'
+            render :json => {
+                :success => false,
+                :error => res_body[:error],
+                :error_description => res_body[:error_description]
+              },
+              :status => res.code
+            return false
+          end
+          provider.get_user_info(res_body)
+        end
+      end
+    end
+  end
+end
+

data/app/models/oauth_service/url.rb

@@ -0,0 +1,9 @@
+module OauthService
+  class Url < ActiveRecord::Base
+    has_many :users_url
+
+    def self.by_user(user_id)
+      includes(users_url: [users_group: [:user]]).where(:users_groups => {:user_id => user_id}).all
+    end
+  end
+end

data/app/models/oauth_service/user.rb

@@ -0,0 +1,5 @@
+module OauthService
+  class User < ActiveRecord::Base
+    has_many :users_group
+  end
+end

data/app/models/oauth_service/user_group.rb

@@ -0,0 +1,5 @@
+module OauthService
+  class UserGroup < ActiveRecord::Base
+    has_many :users_group
+  end
+end

data/app/models/oauth_service/users_group.rb

@@ -0,0 +1,6 @@
+module OauthService
+  class UsersGroup < ActiveRecord::Base
+    belongs_to :user
+    belongs_to :user_group
+  end
+end

data/app/models/oauth_service/users_url.rb

@@ -0,0 +1,6 @@
+module OauthService
+  class UsersUrl < ActiveRecord::Base
+    belongs_to :url
+    belongs_to :users_group
+  end
+end

data/config/routes.rb

@@ -0,0 +1,6 @@
+require "oauth_service"
+
+Rails.application.routes.draw do
+  get "#{OauthService.redirect_uri}/:provider_name",  to: "#{OauthService.login_controller[0..-11].downcase}#oauth_callback"
+  get "#{OauthService.redirect_uri}/logout",  to: "#{OauthService.login_controller[0..-11].downcase}#logout"
+end

data/lib/generators/oauth_service/controllers_generator.rb

@@ -0,0 +1,15 @@
+require 'rails/generators/base'
+
+module OauthService
+  module Generators
+    class ControllersGenerator < Rails::Generators::Base
+      source_root File.expand_path("../../templates/controllers", __FILE__)
+
+      desc "Create inherited LoginController in your app/controllers folder."
+
+      def create_controllers
+        template "login_controller.rb", "app/controllers/login_controller.rb"
+      end
+    end
+  end
+end

data/lib/generators/oauth_service/install_generator.rb

@@ -0,0 +1,15 @@
+require "rails/generators/base"
+
+module OauthService
+  module Generators
+    class InstallGenerator < Rails::Generators::Base
+      source_root File.expand_path("../../templates", __FILE__)
+
+      desc "Creates a OauthService initializer."
+      
+      def copy_initializer
+        template "oauth_service.rb", "config/initializers/oauth_service.rb"
+      end
+    end
+  end
+end

data/lib/generators/oauth_service/migrations_generator.rb

@@ -0,0 +1,20 @@
+require 'rails/generators/migration'
+
+module OauthService
+  module Generators
+    class MigrationsGenerator < Rails::Generators::Base
+      include Rails::Generators::Migration
+      source_root File.expand_path("../../templates/migrations", __FILE__)
+
+      desc "Create table migration in your db/migrate folder."
+
+      def create_migrations
+        migration_template "create_tables.rb", "db/migrate/create_tables.rb"
+      end
+
+      def self.next_migration_number(path)
+        Time.now.utc.strftime("%Y%m%d%H%M%S")
+      end
+    end
+  end
+end

data/lib/generators/oauth_service/models_generator.rb

@@ -0,0 +1,17 @@
+require 'rails/generators/base'
+
+module OauthService
+  module Generators
+    class ModelsGenerator < Rails::Generators::Base
+      source_root File.expand_path("../../templates/models", __FILE__)
+
+      desc "Create inherited Models in your app/models folder."
+
+      def create_models
+        MODELS.each do |model|
+          template "#{model}.rb", "app/models/#{model}.rb"
+        end  
+      end
+    end
+  end
+end

data/lib/generators/templates/controllers/login_controller.rb

@@ -0,0 +1,3 @@
+class LoginController < OauthService::LoginController
+  
+end

data/lib/generators/templates/migrations/create_tables.rb

@@ -0,0 +1,45 @@
+class CreateTables < ActiveRecord::Migration
+  def self.up
+
+    create_table :users do |t|
+      t.string :name, nil: false, index: true
+      t.string :api_code
+    end
+
+    create_table :urls do |t|
+      t.string :url_pattern
+      t.string :name
+      t.string :http_method
+    end
+
+    create_table :user_groups do |t|
+      t.string :name, nil: false, index: true
+    end
+
+    create_table :users_groups do |t|
+      t.integer :user_group_id
+      t.integer :user_id
+    end
+
+    create_table :users_urls do |t|
+      t.integer :users_group_id
+      t.integer :url_id
+    end
+
+    User.create :name => "guest", :id => 1
+    Url.create :url_pattern => "^/login", :name => "Login page", :http_method => "GET", :id => 1
+    Url.create :url_pattern => "^/oauth/.*", :name => "AuthCallback page", :http_method => "GET", :id => 2
+    UserGroup.create :id => 1, :name => "Guest"
+    UsersGroup.create :id => 1, :user_id => 1, :user_group_id => 1
+    UsersUrl.create :id => 1, :url_id => 1, :users_group_id => 1
+    UsersUrl.create :id => 2, :url_id => 2, :users_group_id => 1
+  end
+
+  def self.down
+    drop_table :users_urls
+    drop_table :users_groups
+    drop_table :user_groups
+    drop_table :users
+    drop_table :urls
+  end
+end

data/lib/generators/templates/models/url.rb

@@ -0,0 +1,2 @@
+class Url < OauthService::Url
+end

data/lib/generators/templates/models/user.rb

@@ -0,0 +1,3 @@
+class User < OauthService::User
+end
+

data/lib/generators/templates/models/user_group.rb

@@ -0,0 +1,3 @@
+class UserGroup < OauthService::UserGroup
+end
+

data/lib/generators/templates/models/users_group.rb

@@ -0,0 +1,3 @@
+class UsersGroup < OauthService::UsersGroup
+end
+

data/lib/generators/templates/models/users_url.rb

@@ -0,0 +1,2 @@
+class UsersUrl < OauthService::UsersUrl
+end

data/lib/generators/templates/oauth_service.rb

@@ -0,0 +1,12 @@
+OauthService.setup do |config|
+  # The parent controller all OauthService controllers inherits from.
+  # config.parent_controller = "ApplicationController"
+
+  # The controller name where auth callback is redirected.
+  # Has to extend OauthService::LoginController.
+  # Change if default login controller is not LoginController.
+  # config.login_controller = "LoginController"
+
+  # The relative route where auth service callback is redirected.
+  # config.redirect_uri = "/oauth/"
+end

data/lib/oauth_service/engine.rb

@@ -0,0 +1,4 @@
+module OauthService
+  class Engine < Rails::Engine
+  end
+end

data/lib/oauth_service/provider.rb

@@ -0,0 +1,85 @@
+module OauthService 
+  class Provider
+    AVAILABLE_PROVIDERS = ['YANDEX', 'GOOGLE', 'MAIL_RU']
+    
+
+    attr_reader :name, :downcase_name, :auth_url, :client_id, :client_secret,
+      :info_url, :scopes, :token_url
+    
+    def initialize(name, downcase_name, auth_url, client_id, client_secret,
+      info_url, scopes, token_url)
+      @name = name
+      @downcase_name = downcase_name
+      @auth_url = auth_url
+      @client_id = client_id
+      @client_secret = client_secret
+      @info_url = info_url
+      @scopes = scopes
+      @token_url = token_url
+    end
+    
+    def get_redirect_uri(request_url)
+      redirect_uri  = OauthService.redirect_uri
+
+      if redirect_uri[0..3]=="http"
+        redirect_uri + downcase_name
+      else
+        uri = URI.parse(request_url)
+        uri.path = redirect_uri + downcase_name
+        uri.query = nil
+        
+        return uri.to_s
+      end
+    end
+    
+    def get_token_params(options = {})
+      {
+        'client_id' => client_id,
+        'client_secret' => client_secret,
+        'redirect_uri' => get_redirect_uri(options[:original_url]),
+        'grant_type' => 'authorization_code',
+        'code' => options[:code]
+      }
+    end
+    
+    def get_user_info(info)
+      info
+    end
+    
+    def get_info_headers(options = {})
+      raise "Headers for token request method is undefined"
+    end
+    
+    def get_info_params(options = {})
+      raise "Paramaters for information request method is undefined"
+    end
+    
+    def self.providers_data
+      @@providers_data ||= AVAILABLE_PROVIDERS.collect do |provider|
+        ("OauthService::Provider::#{provider.downcase.camelize}").constantize.new(
+          provider,
+          provider.downcase,
+          ENV["#{provider}_AUTH_URL"],
+          ENV["#{provider}_CLIENT_ID"],
+          ENV["#{provider}_CLIENT_SECRET"],
+          ENV["#{provider}_INFO_URL"],
+          ENV["#{provider}_SCOPES"],
+          ENV["#{provider}_TOKEN_URL"]
+        ) if ENV["#{provider}_AUTH_URL"] &&
+          ENV["#{provider}_CLIENT_ID"] &&
+          ENV["#{provider}_CLIENT_SECRET"] &&
+          ENV["#{provider}_INFO_URL"] &&
+          ENV["#{provider}_SCOPES"] &&
+          ENV["#{provider}_TOKEN_URL"]
+      end.compact
+    end
+    
+    def self.get_provider_by_name(name)
+      res = providers_data.select do |provider|
+        provider.downcase_name == name.downcase
+      end
+      
+      res ? res.first : nil
+    end
+  end
+end

data/lib/oauth_service/version.rb

@@ -0,0 +1,3 @@
+module OauthService
+  VERSION = "0.0.1"
+end

data/lib/oauth_service.rb

@@ -0,0 +1,29 @@
+require "oauth_service/provider"
+require "oauth_service/engine"
+require "securerandom"
+require "rails"
+
+module OauthService
+  MODELS = ['url', 'users_url', 'user', 'user_group', 'users_group']
+
+  # The parent controller all OauthService controllers inherits from.
+  # Defaults to "ApplicationController".
+  mattr_accessor :parent_controller
+  @@parent_controller = "ApplicationController"
+
+  # The relative route where auth service callback is redirected.
+  # Defaults to "/oauth/".
+  mattr_accessor :redirect_uri
+  @@redirect_uri = "/oauth/"
+
+  # Name of the controller which inherits from OauthService::LoginController
+  # Defaults to "LoginController".
+  mattr_accessor :login_controller
+  @@login_controller = "LoginController"
+
+  # Default way to set up OauthService. Run rails generate oauth_service:install to create
+  # a fresh initializer with all configuration values.
+  def self.setup
+    yield self
+  end
+end

data/lib/tasks/oauth_service_tasks.rake

@@ -0,0 +1,4 @@
+# desc "Explaining what the task does"
+# task :oauth_service do
+#   # Task goes here
+# end

data/test/dummy/README.rdoc

@@ -0,0 +1,28 @@
+== README
+
+This README would normally document whatever steps are necessary to get the
+application up and running.
+
+Things you may want to cover:
+
+* Ruby version
+
+* System dependencies
+
+* Configuration
+
+* Database creation
+
+* Database initialization
+
+* How to run the test suite
+
+* Services (job queues, cache servers, search engines, etc.)
+
+* Deployment instructions
+
+* ...
+
+
+Please feel free to use a different markup language if you do not plan to run
+<tt>rake doc:app</tt>.

data/test/dummy/Rakefile

@@ -0,0 +1,6 @@
+# Add your own tasks in files placed in lib/tasks ending in .rake,
+# for example lib/tasks/capistrano.rake, and they will automatically be available to Rake.
+
+require File.expand_path('../config/application', __FILE__)
+
+Rails.application.load_tasks

data/test/dummy/app/assets/javascripts/application.js

@@ -0,0 +1,13 @@
+// This is a manifest file that'll be compiled into application.js, which will include all the files
+// listed below.
+//
+// Any JavaScript/Coffee file within this directory, lib/assets/javascripts, vendor/assets/javascripts,
+// or any plugin's vendor/assets/javascripts directory can be referenced here using a relative path.
+//
+// It's not advisable to add code directly here, but if you do, it'll appear at the bottom of the
+// compiled file.
+//
+// Read Sprockets README (https://github.com/rails/sprockets#sprockets-directives) for details
+// about supported directives.
+//
+//= require_tree .