omniauth-edlink 0.1.0 → 0.3.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 4a569bc748df142608c58c8481069a90ea3edceb13f7e2e107091de16507bc8f
-  data.tar.gz: '0960b368cf2fe33a37528f3c939ee19fd68fe6311077a0c4b07d026266617ee3'
+  metadata.gz: 10539216013316ade8d1e23d6e7e7b13069533671cee87a74864d3db287a2fc3
+  data.tar.gz: 78c258074dacc027dabab6a886e771858f93c34ce73fab324d38455d71f0aec3
 SHA512:
-  metadata.gz: db791e6fcfa1efd880f0f92e0c064680fc979baf8945c2ed3eec3f545362dfa377dd94af186ad66b1fb0f045269c0009e1f90671f2a115b8251b9426d6b1c0de
-  data.tar.gz: d916c1d12c735ffcae933f8f134a90abde9a485b0bdb93effd6349f1f7b10ccd1bb13f2b08f5895e79546e5bd06de1b7de141f1cd6b3e76261486692ace9fc6e
+  metadata.gz: a92ccf04ecf4199790f3f133450ff3eb43bcc8e094c4915c22842292591171580117e870903c4dd84fb93d2a14ec7bdd20f6a599003a53c16ae700dba3ae655b
+  data.tar.gz: b5d2c321f0780fb7f5b4775c10c01da1b148ff52b3fe4b1fa7b5ff07c00b04e01bd9467bebbfb8209492468838b466ac2ff8cf89a407ba3ba4469f0b751f38fd

data/.gitignore

@@ -1 +1,2 @@
-.idea/
+.idea/
+omniauth-edlink-*.gem

data/CHANGELOG.md

@@ -0,0 +1,15 @@
+# Changelog
+All notable changes to this project will be documented in this file.
+
+## 0.3.0
+
+* Bugfix for generating a redirect to generic login page (without integration_id)
+* Skip state validation, because state param is removed by Edlink anyway.
+
+## 0.2.0
+
+* Support optional integration_id parameter that redirect users directly to IdP login page. 
+
+## 0.1.0
+
+* Initial release.

data/README.md

@@ -37,6 +37,12 @@ Or, alternatively, if you use [Devise](https://github.com/plataformatec/devise),
                  'your-edlink-secret-key'
 ```
 
+If for some reason you know the Edlink's integration id for a particular SSO request (e.g. from your application subdomain or from typed email address) and you want to take your users directly to their upstream SSO login page instead of generic Edlink login page, you can pass additional `integration_id` parameter to the redirect request, e.g.:
+```ruby
+redirect_to "/auth/edlink?integration_id=#{integration_id}"
+```
+This will redirect the user to the Edlink's SSO login page for the specified integration id.
+
 # Contributing
 1. Fork it
 2. Create your feature branch (git checkout -b my-new-feature)

data/lib/omniauth/edlink/version.rb

@@ -1,5 +1,5 @@
 module Omniauth
   module Edlink
-    VERSION = '0.1.0'.freeze
+    VERSION = '0.3.0'.freeze
   end
 end

data/lib/omniauth/strategies/edlink.rb

@@ -21,16 +21,23 @@ module OmniAuth
         access_token_class: AccessToken
       }
       option :uid_field, 'id'
+      # `state` injected during the request phase is lost by Edlink, you don't get it in the callback phase.
+      option :provider_ignores_state, true
 
       uid do
         raw_info[options.uid_field.to_s]
       end
 
+      def request_phase
+        integration_id = request.params['integration_id']
+        authorize_path = integration_id.present? ? integration_authorize_path(integration_id) : options.client_options.authorize_url
+        redirect client.connection.build_url(URI.join(options.client_options.site, authorize_path), authorize_params)
+      end
+
       def authorize_params
-        super.tap do |params|
-          params[:scope] = [:email, :profile]
-          params[:response_type] = :code
-        end
+        super
+          .merge({ :redirect_uri => callback_url })
+          .merge(client.auth_code.authorize_params)
       end
 
       info do
@@ -50,6 +57,10 @@ module OmniAuth
       def callback_url
         full_host + callback_path
       end
+
+      def integration_authorize_path(integration_id)
+        "/api/authentication/integrations/#{integration_id}/launch"
+      end
     end
   end
 end

metadata

@@ -1,15 +1,15 @@
 --- !ruby/object:Gem::Specification
 name: omniauth-edlink
 version: !ruby/object:Gem::Version
-  version: 0.1.0
+  version: 0.3.0
 platform: ruby
 authors:
 - Kamil Bednarz
 - Tomasz Rosiek
-autorequire: 
+autorequire:
 bindir: bin
 cert_chain: []
-date: 2024-07-22 00:00:00.000000000 Z
+date: 2024-07-30 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: omniauth-oauth2
@@ -34,6 +34,7 @@ extensions: []
 extra_rdoc_files: []
 files:
 - ".gitignore"
+- CHANGELOG.md
 - Gemfile
 - Gemfile.lock
 - LICENSE
@@ -46,7 +47,7 @@ homepage: https://github.com/u2i/omniauth-edlink
 licenses:
 - Apache-2.0
 metadata: {}
-post_install_message: 
+post_install_message:
 rdoc_options: []
 require_paths:
 - lib
@@ -61,8 +62,8 @@ required_rubygems_version: !ruby/object:Gem::Requirement
     - !ruby/object:Gem::Version
       version: '0'
 requirements: []
-rubygems_version: 3.1.6
-signing_key: 
+rubygems_version: 3.4.10
+signing_key:
 specification_version: 4
 summary: The unofficial strategy for authenticating users using ed.link using OAuth2
   provider