omniauth-gov 0.1.8 → 0.1.10

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 829aa13e5c71fc5063a31135b0300dcf748f0fdd5cc4451e6160d57b8e9e20d5
-  data.tar.gz: e3fae85613ff0d66feb47ed29e66e1b3203481223912fe3c53a4e00ed5e55abc
+  metadata.gz: 5f61ded70b39a992b1829063689b6529d37f7cf3f0195c2b3cde665e4a9ac0bb
+  data.tar.gz: 6734621bde137d885c77260a7e6e24da4f378535393f6095c60d72cee1503d92
 SHA512:
-  metadata.gz: 7b5ea3b42e416f91c8ff2a0a46dc2a32fc23b23793396f47d6d3818aa0824ff1dbe5b6326b82365c448b28971b80d266185c1d6c99737285dd3d65fc0b6a4682
-  data.tar.gz: 47de0c020b5864231ab58f0300b0805396c8074d563c52f9c2c06377a70a88d60bd5263b978fe15750ac502a44f08f80949e64891cbca9604ee29b45fb98ddba
+  metadata.gz: f06678dda02ff695ea546bb8b79da8d3738ab8f2d9380388fa96e797015122cf0f3836f4939672fd3b0fefe2766343f033e52984fef9ab26a4796b9d11d76057
+  data.tar.gz: a647188a26fe0a9443db04e380a99da5711357c11bf36e3085608baa0eb14d5de959e3e1f2a8fa0129dc3210d2dfc9471cfd88f2faa14ddc011915e0f2550ba9

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: omniauth-gov
 version: !ruby/object:Gem::Version
-  version: 0.1.8
+  version: 0.1.10
 platform: ruby
 authors:
 - Jonas Ricardo
@@ -9,22 +9,28 @@ authors:
 autorequire:
 bindir: bin
 cert_chain: []
-date: 2024-08-04 00:00:00.000000000 Z
+date: 2025-09-23 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: omniauth
   requirement: !ruby/object:Gem::Requirement
     requirements:
-    - - '='
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: 1.9.2
+    - - "<"
       - !ruby/object:Gem::Version
-        version: 1.9.1
+        version: '2.0'
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
-    - - '='
+    - - ">="
       - !ruby/object:Gem::Version
-        version: 1.9.1
+        version: 1.9.2
+    - - "<"
+      - !ruby/object:Gem::Version
+        version: '2.0'
 - !ruby/object:Gem::Dependency
   name: omniauth-oauth2
   requirement: !ruby/object:Gem::Requirement
@@ -109,27 +115,29 @@ dependencies:
     - - ">="
       - !ruby/object:Gem::Version
         version: '0'
-description: Official OmniAuth strategy for GitHub.
+- !ruby/object:Gem::Dependency
+  name: uri
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: '0'
+  type: :development
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: '0'
+description: OmniAuth strategy for integrating authentication with Brazilian Gov.br
+  using OmniAuth and OAuth2.
 email:
 - jonas.campos@yahoo.com.br
 - renatocdesouza@gmail.com
 executables: []
 extensions: []
 extra_rdoc_files: []
-files:
-- ".github/workflows/ruby.yml"
-- ".gitignore"
-- ".rspec"
-- Gemfile
-- Guardfile
-- LICENSE.txt
-- README.md
-- Rakefile
-- lib/gov_br/params_encoder.rb
-- lib/omniauth-gov.rb
-- lib/omniauth-gov/version.rb
-- lib/omniauth/strategies/gov.rb
-- omniauth-gov.gemspec
+files: []
 homepage: https://github.com/jonasrscampos/omniauth-gov
 licenses:
 - MIT
@@ -149,7 +157,7 @@ required_rubygems_version: !ruby/object:Gem::Requirement
     - !ruby/object:Gem::Version
       version: '0'
 requirements: []
-rubygems_version: 3.4.19
+rubygems_version: 3.5.20
 signing_key:
 specification_version: 4
 summary: Official OmniAuth strategy for GitHub.

data/.github/workflows/ruby.yml

@@ -1,24 +0,0 @@
-name: Ruby
-
-on:
-  push:
-    branches: [ main ]
-  pull_request:
-    branches: [ main ]
-
-jobs:
-  test:
-    runs-on: ubuntu-latest
-    strategy:
-      matrix:
-        ruby-version: ['2.4', '2.5', '2.6', '2.7', '3.0', '3.1', '3.2', 'truffleruby-head']
-
-    steps:
-    - uses: actions/checkout@v3
-    - name: Set up Ruby ${{ matrix.ruby-version }}
-      uses: ruby/setup-ruby@v1
-      with:
-        ruby-version: ${{ matrix.ruby-version }}
-        bundler-cache: true
-    - name: Build and test with Rake
-      run: bundle exec rake

data/.gitignore

@@ -1,17 +0,0 @@
-*.gem
-*.rbc
-.bundle
-.config
-.yardoc
-Gemfile.lock
-InstalledFiles
-_yardoc
-coverage
-doc/
-lib/bundler/man
-/pkg
-rdoc
-spec/reports
-test/tmp
-test/version_tmp
-tmp

data/.rspec

@@ -1 +0,0 @@
---colour

data/Gemfile

@@ -1,13 +0,0 @@
-source 'https://rubygems.org'
-
-# Specify your gem's dependencies in omniauth-gov.gemspec
-gemspec
-
-group :development, :test do
-  gem 'guard'
-  gem 'guard-rspec'
-  gem 'guard-bundler'
-  gem 'rb-fsevent'
-  gem 'growl'
-  gem 'rake'
-end

data/Guardfile

@@ -1,10 +0,0 @@
-guard 'rspec', :version => 2 do
-  watch(%r{^spec/.+_spec\.rb$})
-  watch(%r{^lib/(.+)\.rb$})     { |m| "spec/#{m[1]}_spec.rb" }
-  watch('spec/spec_helper.rb')  { "spec" }
-end
-
-guard 'bundler' do
-  watch('Gemfile')
-  watch('omniauth-gov.gemspec')
-end

data/LICENSE.txt

@@ -1,7 +0,0 @@
-Copyright (c) 2011 Michael Bleigh and Intridea, Inc.
-
-Permission is hereby granted, free of charge, to any person obtaining a copy of this software and associated documentation files (the "Software"), to deal in the Software without restriction, including without limitation the rights to use, copy, modify, merge, publish, distribute, sublicense, and/or sell copies of the Software, and to permit persons to whom the Software is furnished to do so, subject to the following conditions:
-
-The above copyright notice and this permission notice shall be included in all copies or substantial portions of the Software.
-
-THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.

data/README.md

@@ -1,144 +0,0 @@
-![Ruby](https://github.com/omniauth/omniauth-gov/workflows/Ruby/badge.svg?branch=main)
-
-# OmniAuth Gov
-
-Estratégia omniauth para integração do Login Único do governo brasileiro ao autentiador devise.
-
-## Instalação
-
-```ruby
-gem 'omniauth', '1.9.1'
-gem "omniauth-rails_csrf_protection", '0.1.2'
-gem 'omniauth-oauth2'
-gem 'omniauth-gov', '~> 0.1.5'
-```
-
-## Configuração devise
-
-Em `config/initializers/devise.rb.rb`
-
-```ruby
-  Devise.setup do |config|
-    # ...
-    config.omniauth :gov, 
-      ENV['client_id'], 
-      ENV['client_secret'], 
-    scope: 'openid+email+profile+govbr_confiabilidades+', 
-    callback_path: '/callback-da-aplicacao',
-    client_options: {
-      site: 'https://sso.acesso.gov.br', # Ambiente de produção.
-      authorize_url: 'https://sso.acesso.gov.br/authorize', # Ambiente de produção.
-      token_url: 'https://sso.acesso.gov.br/token' # Ambiente de produção.
-    }
-
-    config.omniauth_path_prefix = '/prefixo-devise/prefixo-omniauth'
-  end
-```
-
-## Initializer
-Em `config/initializer/omniauth.rb`
-
-```ruby 
-OmniAuth.config.full_host = "https://endereco-do-app.gov.br"
-OmniAuth.config.logger = Rails.logger
-```
-
-## Route
-Em `config/routes.rb`
-```ruby
-  # ...
-  devise_for :users, controllers: {
-    # ...
-    :omniauth_callbacks => 'auth/omniauth_callbacks'
-  }
-
-  # opcional: redirecionar url de callback para o callback do devise
-  devise_scope :user do
-    get 'url-de-callback', to: 'auth/omniauth_callbacks#gov'
-  end
-
-```
-
-## Controller
-Em `controllers/auth/omniauth_callbacks_controller.rb`
-
-```ruby
-# frozen_string_literal: true
-
-class Auth::OmniauthCallbacksController < Devise::OmniauthCallbacksController
-	skip_before_action :verify_authenticity_token
-
-	def gov
-		@user = User.from_gov_br_omniauth(request.env["omniauth.auth"]["info"])
-
-		if @user.id.present?
-			sign_in_and_redirect @user, :event => :authentication
-			set_flash_message(:notice, :success, :kind => "Login Unico") if is_navigational_format?	  
-		else
-		end
-	end
-	
-	def failure
-    redirect_to root_path
-	end
-
-end
-```
-
-## Model User
-Em `model/user.rb`
-```ruby
-devise :database_authenticatable,
-  # ...
-  :omniauthable, omniauth_providers: %i[gov]
-
-  # ...
-  def self.from_gov_br_omniauth(info)
-    # Exemplo hash info
-    # {
-    #   "id": 1702579345,
-    #   "cpf": '99999999999',
-    #   "nome_social": 'Nome Social',
-    #   "email_verified": true,
-    #   "profile": 'https://servicos.staging.acesso.gov.br/',
-    #   "username": '99999999999',
-    #   "picture": raw_info["picture"],
-    #   "name": raw_info["name"],
-    #   "email": raw_info["email"],
-    # }    
-    user = User.find_by_email(info["email"]) # ou outra chave
-
-    unless user.nil?
-      user.update_attributes(provider: 'login-unico', uid: info["id"])
-    else
-      name = info["name"]
-      email = info["email"]
-      user = User.new do |user|
-        user.name = name
-        user.email = email
-      end
-      user.skip_confirmation!
-      user.save
-    end
-
-    return user
-  end
-
-```
-
-## View
-Em `sessions/new.html.erb`
-```ruby
-      <%= button_to omniauth_authorize_path(resource_name, :gov), class: 'gov-br-btn sign-in br-button middle sign-in w-100 is-primary mt-3 mb-3', data: { turbo: false } do %>
-        <i class="icon fa fa-user fa-lg" style="color: rgb(255, 255, 255);"></i>&nbsp;
-        <span style="font-weight: normal;">Entrar com</span>&nbsp;
-        <span style="font-size: 20px; font-weight: bold;"> gov.br</span>
-      <% end %>
-```
-
-## Licença
-Permission is hereby granted, free of charge, to any person obtaining a copy of this software and associated documentation files (the "Software"), to deal in the Software without restriction, including without limitation the rights to use, copy, modify, merge, publish, distribute, sublicense, and/or sell copies of the Software, and to permit persons to whom the Software is furnished to do so, subject to the following conditions:
-
-The above copyright notice and this permission notice shall be included in all copies or substantial portions of the Software.
-
-THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.

data/Rakefile

@@ -1,8 +0,0 @@
-#!/usr/bin/env rake
-require "bundler/gem_tasks"
-require 'rspec/core/rake_task'
-
-RSpec::Core::RakeTask.new
-
-desc 'Run specs'
-task :default => :spec

data/lib/gov_br/params_encoder.rb

@@ -1,105 +0,0 @@
-# frozen_string_literal: true
-
-module GovBr
-  # FlatParamsEncoder manages URI params as a flat hash. Any Array values repeat
-  # the parameter multiple times.
-  module ParamsEncoder
-    class << self
-      extend Forwardable
-      def_delegators :'Faraday::Utils', :escape, :unescape
-    end
-
-    # Encode converts the given param into a URI querystring. Keys and values
-    # will converted to strings and appropriately escaped for the URI.
-    #
-    # @param params [Hash] query arguments to convert.
-    #
-    # @example
-    #
-    #   encode({a: %w[one two three], b: true, c: "C"})
-    #   # => 'a=one&a=two&a=three&b=true&c=C'
-    #
-    # @return [String] the URI querystring (without the leading '?')
-    def self.encode(params)
-      return nil if params.nil?
-      
-      unless params.is_a?(Array)
-        unless params.respond_to?(:to_hash)
-          raise TypeError,
-          "Can't convert #{params.class} into Hash."
-        end
-        params = params.to_hash
-        params = params.map do |key, value|
-          key = key.to_s if key.is_a?(Symbol)
-          [key, value]
-        end
-        
-        # Only to be used for non-Array inputs. Arrays should preserve order.
-        params.sort! if @sort_params
-      end
-      
-      # The params have form [['key1', 'value1'], ['key2', 'value2']].
-      buffer = +''
-      params.each do |key, value|
-        encoded_key = escape(key)
-        if value.nil?
-          buffer << "#{encoded_key}&"
-        elsif value.is_a?(Array)
-          if value.empty?
-            buffer << "#{encoded_key}=&"
-          else
-            value.each do |sub_value|
-              encoded_value = escape(sub_value)
-              buffer << "#{encoded_key}=#{encoded_value}&"
-            end
-          end
-        else
-          encoded_value = (key == 'scope') ? value : escape(value)
-          buffer << "#{encoded_key}=#{encoded_value}&"
-        end
-      end
-      buffer.chop
-    end
-
-    # Decode converts the given URI querystring into a hash.
-    #
-    # @param query [String] query arguments to parse.
-    #
-    # @example
-    #
-    #   decode('a=one&a=two&a=three&b=true&c=C')
-    #   # => {"a"=>["one", "two", "three"], "b"=>"true", "c"=>"C"}
-    #
-    # @return [Hash] parsed keys and value strings from the querystring.
-    def self.decode(query)
-      return nil if query.nil?
-
-      empty_accumulator = {}
-
-      split_query = (query.split('&').map do |pair|
-        pair.split('=', 2) if pair && !pair.empty?
-      end).compact
-      split_query.each_with_object(empty_accumulator.dup) do |pair, accu|
-        pair[0] = unescape(pair[0])
-        pair[1] = true if pair[1].nil?
-        if pair[1].respond_to?(:to_str)
-          pair[1] = unescape(pair[1].to_str.tr('+', ' '))
-        end
-        if accu[pair[0]].is_a?(Array)
-          accu[pair[0]] << pair[1]
-        elsif accu[pair[0]]
-          accu[pair[0]] = [accu[pair[0]], pair[1]]
-        else
-          accu[pair[0]] = pair[1]
-        end
-      end
-    end
-
-    class << self
-      attr_accessor :sort_params
-    end
-
-    # Useful default for OAuth and caching.
-    @sort_params = true
-  end
-end

data/lib/omniauth/strategies/gov.rb

@@ -1,88 +0,0 @@
-require 'omniauth-oauth2'
-
-module Omniauth
-  module Strategies
-    class Gov < OmniAuth::Strategies::OAuth2
-      option :pkce, true
-
-      credentials do
-        hash = {"access_token" => access_token.token}
-        hash["id_token"] = access_token.params["id_token"]
-        hash["refresh_token"] = access_token.refresh_token if access_token.expires? && access_token.refresh_token
-        hash["expires_at"] = access_token.expires_at if access_token.expires?
-        hash["expires"] = access_token.expires?        
-        hash
-      end
-
-      info do
-        prune!({
-          "id": raw_info['auth_time'],
-          "cpf": raw_info["sub"],
-          "nome_social": raw_info["social_name"],
-          "email_verified": raw_info["email_verified"],
-          "profile": raw_info["profile"],
-          "username": raw_info["preferred_username"],
-          "picture": raw_info["picture"],
-          "name": raw_info["name"],
-          "email": raw_info["email"],
-        })
-      end
-
-      uid { raw_info['auth_time'] }
-
-      extra do
-        {
-          'raw_info': raw_info
-        }
-      end
-
-      def client
-        options.client_options.merge!({connection_opts: {request: {params_encoder: GovBr::ParamsEncoder}}})
-        ::OAuth2::Client.new(options.client_id, options.client_secret, deep_symbolize(options.client_options))
-      end
-      
-      def request_phase
-        redirect client.auth_code.authorize_url({:redirect_uri => callback_url}.merge(authorize_params))
-      end
-
-      def raw_info
-        @raw_info ||= JWT.decode(credentials["id_token"], nil, false)[0]
-      end
-
-      def prune!(hash)
-        hash.delete_if do |_, value|
-          prune!(value) if value.is_a?(Hash)
-          value.nil? || (value.respond_to?(:empty?) && value.empty?)
-        end
-      end
-
-      def authorize_params # rubocop:disable Metrics/AbcSize, Metrics/MethodLength
-        options.authorize_params[:state] = SecureRandom.hex(24)
-        options.authorize_params[:client_id] = options[:client_id]
-        options.authorize_params[:scope] = options[:scope]
-        options.authorize_params[:response_type] = 'code'
-        options.authorize_params[:nonce] = SecureRandom.hex[0..11]
-        params = options.authorize_params
-          .merge(options_for("authorize"))
-          .merge(pkce_authorize_params)
-
-        session["omniauth.pkce.verifier"] = options.pkce_verifier if options.pkce
-        session["omniauth.state"] = params[:state]
-
-        params
-      end   
-
-      def build_access_token
-        verifier = request.params["code"]
-        
-        atoken = client.auth_code.get_token(
-          verifier, 
-          {"grant_type": "authorization_code", "code": verifier, "redirect_uri": OmniAuth.config.full_host+options.callback_path, "code_verifier": session["omniauth.pkce.verifier"]}, 
-          {"Content-Type"  => "application/x-www-form-urlencoded", "Authorization" => "Basic #{Base64.strict_encode64(options.client_id+":"+options.client_secret)}" })
-        atoken
-      end  
-    end
-  end
-end
-
-OmniAuth.config.add_camelization 'gov', 'Gov'

data/lib/omniauth-gov/version.rb

@@ -1,5 +0,0 @@
-module OmniAuth
-  module Gov
-    VERSION = "0.1.8"
-  end
-end

data/lib/omniauth-gov.rb

@@ -1,3 +0,0 @@
-require "omniauth-gov/version"
-require 'gov_br/params_encoder'
-require 'omniauth/strategies/gov'

data/omniauth-gov.gemspec

@@ -1,26 +0,0 @@
-# -*- encoding: utf-8 -*-
-require File.expand_path('../lib/omniauth-gov/version', __FILE__)
-
-Gem::Specification.new do |gem|
-  gem.authors       = ["Jonas Ricardo", "Renato de Souza"]
-  gem.email         = ["jonas.campos@yahoo.com.br", "renatocdesouza@gmail.com"]
-  gem.description   = %q{Official OmniAuth strategy for GitHub.}
-  gem.summary       = %q{Official OmniAuth strategy for GitHub.}
-  gem.homepage      = "https://github.com/jonasrscampos/omniauth-gov"
-  gem.license       = "MIT"
-
-  gem.executables   = `git ls-files -- bin/*`.split("\n").map{ |f| File.basename(f) }
-  gem.files         = `git ls-files`.split("\n")
-  gem.test_files    = `git ls-files -- {test,spec,features}/*`.split("\n")
-  gem.name          = "omniauth-gov"
-  gem.require_paths = ["lib"]
-  gem.version       = OmniAuth::Gov::VERSION
-
-  gem.add_dependency 'omniauth', '1.9.1' 
-  gem.add_dependency 'omniauth-oauth2'
-  gem.add_development_dependency 'rspec', '~> 3.5'
-  gem.add_development_dependency 'faraday', '~> 2.9'
-  gem.add_development_dependency 'rack-test'
-  gem.add_development_dependency 'simplecov'
-  gem.add_development_dependency 'webmock'
-end