omniauth-bokun 0.1.0

checksums.yaml

@@ -0,0 +1,7 @@
+---
+SHA256:
+  metadata.gz: f9a6491b34fbd258d3b37409faa99049032941b6fa430d5758decd2d32b493c8
+  data.tar.gz: f338b2a14fa2e2f4f84e85748c7c42695571bd70a22579c9d25492197c8ba571
+SHA512:
+  metadata.gz: 43d44a58c0643e2d18bbd88c258e56aaf00492ec45b3841b9772a36421f747d90cbb9c669264b4a300be6a5e29262107799e459498f9aaa12db0ca7d48c97944
+  data.tar.gz: 350e8069d8138dffa6e172aaa16735a397c0d0f11c07ab6247d40b031f0eccbeb013882ba8b2cbcd7e250fb2642cc7ae1cf4ad35768fa81b5ac4665b4e16d575

data/lib/omniauth/bokun/signed_request.rb

@@ -0,0 +1,43 @@
+require 'openssl'
+
+module OmniAuth
+  module Bokun
+    class SignedRequest
+      attr_reader :params, :secret
+
+      def initialize(params, secret)
+        @params = params
+        @secret = secret
+      end
+
+      def valid_signature?
+        ActiveSupport::SecurityUtils.secure_compare(digest, hmac_value)
+      end
+
+      private
+
+      def hmac_value
+        hmac_value ||= CGI.unescape(params['hmac'].to_s)
+      end
+
+      def digest
+        digest ||= OpenSSL::HMAC.hexdigest(
+                    'sha256',
+                    secret,
+                    verification_string
+                  )
+      end
+
+
+      def verification_params
+        @verification_params ||= params.to_h
+                                       .except('hmac', 'controller', 'action', 'format')
+                                       .sort.to_h
+      end
+
+      def verification_string
+        @verification_string ||= verification_params.map { |k, v| "#{k}=#{v}" }.join('&')
+      end
+    end
+  end
+end

data/lib/omniauth/bokun/version.rb

@@ -0,0 +1,5 @@
+module Omniauth
+  module Bokun
+    VERSION = "0.1.0"
+  end
+end

data/lib/omniauth/bokun.rb

@@ -0,0 +1,2 @@
+require "omniauth/bokun/version"
+require 'omniauth/strategies/bokun'

data/lib/omniauth/strategies/bokun.rb

@@ -0,0 +1,110 @@
+require 'omniauth/strategies/oauth2'
+require 'omniauth/bokun/signed_request'
+
+module OmniAuth
+  module Strategies
+    class Bokun < OmniAuth::Strategies::OAuth2
+      class NoAuthorizationCodeError < StandardError; end
+      option :name, 'bokun'
+      option :authorize_options, [:scope, :state, :redirect_uri]
+      option :client_options, {
+        authorize_url: '/appstore/oauth/authorize',
+        token_url: '/appstore/oauth/access_token'
+      }
+      option :authorize_params, {
+        scope: 'BOOKINGS_READ,BOOKINGS_WRITE,CUSTOMERS_READ,CUSTOMERS_WRITE',
+        state: SecureRandom.hex(24),
+        redirect_uri: "https://#{ENV['BOKUN_REDIRECT_DOMAIN']}/users/auth/bokun/callback"
+      }
+      option :token_params, {
+        client_id: ENV['BOKUN_ID'],
+        client_secret: ENV['BOKUN_SECRET']
+      }
+
+      uid { Base64.decode64(access_token.params['vendor_id']).split(':').last }
+
+      info do
+        {
+          first_name: access_token.params['appInstalledByUserFirstName'],
+          last_name: access_token.params['appInstalledByUserLastName'],
+          email: access_token.params['appInstalledByUserEmail'],
+          vendor_id: access_token.params['vendor_id'],
+          scope: access_token.params['scope']
+        }
+      rescue NoMethodError
+        Rails.logger.error "[Bokun] Failed to fetch user info from access token"
+        {}
+      end
+
+      def client
+        options.client_options.merge!(
+          site: "https://#{subdomain}.#{domain}"
+        )
+        super
+      end
+
+      def request_phase
+        unless OmniAuth::Bokun::SignedRequest.new(request.params, options.client_secret).valid_signature?
+          Rails.logger.warn "[Bokun] HMAC verification failed"
+          return fail!(:invalid_credentials)
+        end
+        super
+      end
+
+      def build_access_token
+        token_params = options.token_params.merge(
+          code: authorization_code,
+          redirect_uri: callback_url
+        )
+
+        response = client.request(:post, options.client_options.token_url, {
+          body: URI.encode_www_form(token_params),
+          headers: { 'Content-Type' => 'application/x-www-form-urlencoded' }
+        })
+
+        parsed_response = JSON.parse(response.body)
+
+        @access_token = ::OAuth2::AccessToken.from_hash(client, parsed_response)
+      rescue ::OAuth2::Error => e
+        Rails.logger.error "[Bokun] Token exchange failed: #{e.message}"
+        Rails.logger.error "[Bokun] Response body: #{e.response.body}" if e.respond_to?(:response)
+        raise e
+      end
+
+      def callback_url
+        options.authorize_params[:redirect_uri] || super
+      end
+
+      private
+
+      def authorization_code
+        @authorization_code ||= request.params['code']
+      end
+
+      def session
+        @session ||= request.session
+      end
+
+      def origin_host
+        raw_origin = request.env['omniauth.origin'] || session['omniauth.origin']
+        @origin_host ||= URI.parse(raw_origin.to_s).host
+      rescue URI::InvalidURIError, NoMethodError
+        nil
+      end
+
+      def domain
+        @domain ||=
+          if origin_host&.include?('bokuntest.com')
+            'bokuntest.com'
+          else
+            'bokun.io'
+          end
+      end
+
+      def subdomain
+        # Yes, Bokun did not name their subdomain param properply. We can work with it :)
+        @subdomain ||= request.params['domain']
+      end
+    end
+  end
+end

metadata

@@ -0,0 +1,118 @@
+--- !ruby/object:Gem::Specification
+name: omniauth-bokun
+version: !ruby/object:Gem::Version
+  version: 0.1.0
+platform: ruby
+authors:
+- Dmitry Sychev
+autorequire: 
+bindir: exe
+cert_chain: []
+date: 2025-04-07 00:00:00.000000000 Z
+dependencies:
+- !ruby/object:Gem::Dependency
+  name: omniauth
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '2.0'
+  type: :runtime
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '2.0'
+- !ruby/object:Gem::Dependency
+  name: omniauth-oauth2
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '1.8'
+  type: :runtime
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '1.8'
+- !ruby/object:Gem::Dependency
+  name: bundler
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '2.5'
+  type: :development
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '2.5'
+- !ruby/object:Gem::Dependency
+  name: rake
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '10.0'
+  type: :development
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '10.0'
+- !ruby/object:Gem::Dependency
+  name: minitest
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '5.0'
+  type: :development
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '5.0'
+description: An unofficial OmniAuth strategy for Bokun, allowing authentication via
+  Bokun's OAuth2 API.
+email:
+- dmitry.sychev@me.com
+executables: []
+extensions: []
+extra_rdoc_files: []
+files:
+- lib/omniauth/bokun.rb
+- lib/omniauth/bokun/signed_request.rb
+- lib/omniauth/bokun/version.rb
+- lib/omniauth/strategies/bokun.rb
+homepage: https://github.com/DmitrySychev/omniauth-bokun
+licenses:
+- MIT
+metadata: {}
+post_install_message: 
+rdoc_options: []
+require_paths:
+- lib
+required_ruby_version: !ruby/object:Gem::Requirement
+  requirements:
+  - - ">="
+    - !ruby/object:Gem::Version
+      version: '0'
+required_rubygems_version: !ruby/object:Gem::Requirement
+  requirements:
+  - - ">="
+    - !ruby/object:Gem::Version
+      version: '0'
+requirements: []
+rubygems_version: 3.0.3.1
+signing_key: 
+specification_version: 4
+summary: unofficial omniauth strategy for Bokun
+test_files: []