omniauth-kerberos-clearlyip 0.1.0

checksums.yaml

@@ -0,0 +1,7 @@
+---
+SHA256:
+  metadata.gz: 99d0d597eddcc85b378ae2a885cb628b7dc6760e45acf2c0e23b66121445fde7
+  data.tar.gz: 98910c230fa09dcff9bea9f21b37d74156ea931cda7e849c1adb5ea54ca708c5
+SHA512:
+  metadata.gz: 432b319f7f2578e344e8536911b580c351d1cdc1c7593de590014ba40204305ff1e00064e2526563168d935bdceac2b04217c3e826883a94966528870f233232
+  data.tar.gz: 6aaf7e7a30598a43dda9eb01efba7b75a7c205696ee47c6466bfe9388a94e4dda30736ec875d5938830c64734ac01db960445d59fc70d2cd67f2a3f1b0f2e1c5

data/lib/omniauth/strategies/kerberos.rb

@@ -0,0 +1,85 @@
+# omniauth-kerberos2/lib/omniauth/strategies/kerberos.rb
+require 'omniauth'
+require 'krb5_auth'
+
+module OmniAuth
+  module Strategies
+    class Kerberos
+      include OmniAuth::Strategy
+
+      option :title,  "Kerberos Authentication @#{::Krb5Auth::Krb5.new.get_default_realm.downcase}"
+      option :name, 'kerberos'
+      option :fields, %i[username password]
+      uid { username }
+
+      def initialize(app, *args, &block)
+        super
+        @krb5 = ::Krb5Auth::Krb5.new
+      end
+
+      def username_id
+        options[:fields][0]&.to_s || 'username'
+      end
+
+      def password_id
+        options[:fields][1]&.to_s || 'password'
+      end
+
+      def username
+        @username || request&.params[username_id]&.to_s
+      end
+
+      def password
+        request&.params[password_id]
+      end
+
+      def init_authenticator(request, env, username)
+        @request  = request
+        @env      = env
+        @username = username
+      end
+
+      def callback_phase
+        if authenticate(username, password)
+          super
+        else
+          fail!(:invalid_credentials)
+        end
+      end
+
+      def request_phase
+        form = OmniAuth::Form.build(title: options.title, url: callback_url) do |f|
+          f.text_field     'Username', username_id
+          f.password_field 'Password', password_id
+        end
+        form.to_response
+      end
+
+      def other_phase
+        if on_request_path?
+          request_phase
+        else
+          call_app!
+        end
+      end
+
+      info do
+        { 
+          username: username,
+          email: "#{username}@#{@krb5.get_default_realm.downcase}"
+        }
+      end
+
+      private
+
+      def authenticate(username, password)
+        @krb5.get_init_creds_password(username, password)
+        true
+      rescue ::Krb5Auth::Krb5::Exception
+        false
+      end
+    end
+  end
+end
+
+OmniAuth.config.add_camelization 'kerberos', 'Kerberos'

data/lib/omniauth-kerberos-clearlyip.rb

@@ -0,0 +1 @@
+require 'omniauth/strategies/kerberos'

data/spec/omniauth/strategy/kerberos_spec.rb

@@ -0,0 +1,46 @@
+require 'spec_helper'
+require 'rack/test'
+
+describe OmniAuth::Strategies::Kerberos do
+  include Rack::Test::Methods
+
+  before do
+    fake = double 'krb5'
+    allow(::Krb5Auth::Krb5).to receive(:new).and_return fake
+
+    allow(fake).to receive(:get_default_realm).and_return 'example.org'
+
+    allow(fake).to receive(:get_init_creds_password) do |username, password|
+      if username == 'john' && password == 'secret'
+        true
+      else
+        fail ::Krb5Auth::Krb5::Exception
+      end
+    end
+  end
+
+  let(:app) do
+    Rack::Builder.new do
+      use OmniAuth::Test::PhonySession
+      use OmniAuth::Strategies::Kerberos
+      run ->(env) { [404, {}, [env['omniauth.auth']['uid'].to_s]] }
+    end.to_app
+  end
+
+  it 'shows login FORM' do
+    get '/auth/kerberos'
+    expect(last_response.body).to include '<form'
+  end
+
+  it 'redirect on wrong password' do
+    post '/auth/kerberos/callback', username: 'paul', password: 'wrong'
+    expect(last_response).to be_redirect
+    expect(last_response.headers['Location']).to eq \
+      '/auth/failure?message=invalid_credentials&strategy=kerberos'
+  end
+
+  it 'authenticates with password' do
+    post '/auth/kerberos/callback', username: 'john', password: 'secret'
+    expect(last_response.body).to eq 'john'
+  end
+end

data/spec/spec_helper.rb

@@ -0,0 +1,28 @@
+require 'rspec'
+
+if ENV['CI'] || (defined?(:RUBY_ENGINE) && RUBY_ENGINE != 'rbx')
+  begin
+    require 'simplecov'
+    SimpleCov.start
+  rescue LoadError
+  end
+end
+
+require 'omniauth-kerberos-clearlyip'
+
+Dir[File.expand_path('spec/support/**/*.rb')].each { |f| require f }
+
+# Disable omniauth logger
+class NullLogger < Logger
+  def initialize(*_args)
+  end
+
+  def add(*_args, &_block)
+  end
+end
+
+OmniAuth.config.logger = NullLogger.new
+
+RSpec.configure do |config|
+  config.order = 'random'
+end

metadata

@@ -0,0 +1,77 @@
+--- !ruby/object:Gem::Specification
+name: omniauth-kerberos-clearlyip
+version: !ruby/object:Gem::Version
+  version: 0.1.0
+platform: ruby
+authors:
+- Julien Chabanon
+autorequire:
+bindir: bin
+cert_chain: []
+date: 2024-07-20 00:00:00.000000000 Z
+dependencies:
+- !ruby/object:Gem::Dependency
+  name: omniauth
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '2.0'
+  type: :runtime
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '2.0'
+- !ruby/object:Gem::Dependency
+  name: timfel-krb5-auth
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '0.8'
+  type: :runtime
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '0.8'
+description: An OmniAuth strategy for Kerberos that works with OmniAuth 2.0
+email:
+- julien@chabanon.me
+executables: []
+extensions: []
+extra_rdoc_files: []
+files:
+- lib/omniauth-kerberos-clearlyip.rb
+- lib/omniauth/strategies/kerberos.rb
+- spec/omniauth/strategy/kerberos_spec.rb
+- spec/spec_helper.rb
+homepage: https://github.com/julienchabanon/omniauth-kerberos-clearlyip
+licenses:
+- MIT
+metadata: {}
+post_install_message:
+rdoc_options: []
+require_paths:
+- lib
+required_ruby_version: !ruby/object:Gem::Requirement
+  requirements:
+  - - ">="
+    - !ruby/object:Gem::Version
+      version: 2.5.0
+required_rubygems_version: !ruby/object:Gem::Requirement
+  requirements:
+  - - ">="
+    - !ruby/object:Gem::Version
+      version: '0'
+requirements: []
+rubygems_version: 3.5.15
+signing_key:
+specification_version: 4
+summary: An OmniAuth strategy for Kerberos.
+test_files:
+- spec/omniauth/strategy/kerberos_spec.rb
+- spec/spec_helper.rb