omniauth-keycloak 1.0.0 → 1.0.1

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: bbbf9a2a4703cf634de7550a0e872e91297d34afa9503b1560aa9e298a2c339c
-  data.tar.gz: b952e412701648de2c6729adea84270a9d431799d23cd69a213a0d7a14feb8f8
+  metadata.gz: ee24a3af9bf792c089adf90c7cb4d283b9bf2c390828ff022344b5588dcddef2
+  data.tar.gz: 8e4404c638641547591ca1ec38b499efa03198cfd04aad7734d78bba144ed5c2
 SHA512:
-  metadata.gz: 3fdcc98167ebb5aaa3a3ed6778b369b3f271f2752a6a10f12f2b06bf80140deb5ec553816a4ca65a15b3a2979a2e852372fcc510bed1b2e7ef20321f5ba31420
-  data.tar.gz: b6f09a076df727a74b2f131ba50c808bba1fdef41bda2979211a9be233b7d437d2bf30a323ad3c1b1427f1495b33f52ff4150b96f99bc637c3825c05fcc67217
+  metadata.gz: e66fd26b40742d97daf9cd28a2469fdb6349b7ccd94178ba6c06a2973fa368048e1a9a78200115f821b92e72324b5b492482a5b6ab6262413a2fec1e1bef97e5
+  data.tar.gz: b314bd271ccc280d1d244237300e482c7c58a059c742c9f4baff1517031fcfdff0f7c85aca6fcc1e0c4325977cb2c64e2f0aa1863240222a4cedf9a4809f2e30

data/Gemfile.lock

@@ -1,7 +1,7 @@
 PATH
   remote: .
   specs:
-    omniauth-keycloak (1.0.0)
+    omniauth-keycloak (1.0.1)
       json-jwt (~> 1.9.4)
       omniauth (~> 1.8.1)
       omniauth-oauth2 (~> 1.5.0)
@@ -18,7 +18,7 @@ GEM
       public_suffix (>= 2.0.2, < 4.0)
     aes_key_wrap (1.0.1)
     bindata (2.4.4)
-    concurrent-ruby (1.0.5)
+    concurrent-ruby (1.1.3)
     crack (0.4.3)
       safe_yaml (~> 1.0.0)
     diff-lcs (1.3)
@@ -52,7 +52,7 @@ GEM
       oauth2 (~> 1.1)
       omniauth (~> 1.2)
     public_suffix (3.0.3)
-    rack (2.0.5)
+    rack (2.0.6)
     rake (10.5.0)
     rspec (3.8.0)
       rspec-core (~> 3.8.0)

data/bin/console

@@ -0,0 +1,14 @@
+#!/usr/bin/env ruby
+
+require "bundler/setup"
+require "omniauth/omniauth-keycloak"
+
+# You can add fixtures and/or initialization code here to make experimenting
+# with your gem easier. You can also use a different console, if you like.
+
+# (If you use this, don't forget to add pry to your Gemfile!)
+# require "pry"
+# Pry.start
+
+require "irb"
+IRB.start(__FILE__)

data/bin/setup

@@ -0,0 +1,8 @@
+#!/usr/bin/env bash
+set -euo pipefail
+IFS=$'\n\t'
+set -vx
+
+bundle install
+
+# Do any other automated setup that you need to do here

data/lib/keycloak/version.rb

@@ -0,0 +1,5 @@
+module Omniauth
+  module Keycloak
+    VERSION = "1.0.1"
+  end
+end

data/lib/omniauth/strategies/keycloak-openid.rb

@@ -0,0 +1,77 @@
+require 'omniauth'
+require 'omniauth-oauth2'
+require 'json/jwt'
+
+module OmniAuth
+    module Strategies
+        class KeycloakOpenId < OmniAuth::Strategies::OAuth2
+            attr_reader :authorize_url
+            attr_reader :token_url
+            attr_reader :cert
+
+            def setup_phase
+                if @authorize_url.nil? || @token_url.nil?
+                    realm = options.client_options[:realm].nil? ? options.client_id : options.client_options[:realm]
+                    site = options.client_options[:site]
+                    response = Faraday.get "#{options.client_options[:site]}/auth/realms/#{realm}/.well-known/openid-configuration"
+                    if (response.status == 200)
+                        json = MultiJson.load(response.body)
+                        @certs_endpoint = json["jwks_uri"]
+                        @userinfo_endpoint = json["userinfo_endpoint"]
+                        @authorize_url = json["authorization_endpoint"].gsub(site, "")
+                        @token_url = json["token_endpoint"].gsub(site, "")
+                        options.client_options.merge!({
+                            authorize_url: @authorize_url,
+                            token_url: @token_url
+                        })
+                        certs = Faraday.get @certs_endpoint
+                        if (certs.status == 200)
+                            json = MultiJson.load(certs.body)
+                            @cert = json["keys"][0]
+                        else
+                            #TODO: Throw Error
+                            puts "Couldn't get Cert"
+                        end 
+                    else
+                        #TODO: Throw Error
+                        puts response.status
+                    end
+                end
+            end
+            
+            def build_access_token
+                verifier = request.params["code"]
+                client.auth_code.get_token(verifier, 
+                    {:redirect_uri => callback_url.gsub(/\?.+\Z/, "")}
+                    .merge(token_params.to_hash(:symbolize_keys => true)), 
+                    deep_symbolize(options.auth_token_params))
+            end
+
+            uid{ raw_info['sub'] }
+        
+            info do
+            {
+                :name => raw_info['name'],
+                :email => raw_info['email'],
+                :first_name => raw_info['given_name'],
+                :last_name => raw_info['family_name']
+            }
+            end
+        
+            extra do
+            {
+                'raw_info' => raw_info
+            }
+            end
+        
+            def raw_info
+                id_token_string = access_token.token
+                jwk = JSON::JWK.new(@cert)
+                id_token = JSON::JWT.decode id_token_string, jwk
+                id_token
+            end
+
+            OmniAuth.config.add_camelization('keycloak_openid', 'KeycloakOpenId')
+        end
+    end
+end

data/lib/omniauth-keycloak.rb

@@ -0,0 +1,2 @@
+require "keycloak/version"
+require "omniauth/strategies/keycloak-openid"

data/omniauth-keycloak.gemspec

@@ -9,13 +9,15 @@ Gem::Specification.new do |spec|
   spec.summary       = spec.description
   spec.homepage      = "https://github.com/ccrockett/omniauth-keycloak"
   spec.license       = "MIT"
+  spec.required_rubygems_version = '>= 1.3.5'
+  spec.required_ruby_version = '>= 2.2'
 
   # Specify which files should be added to the gem when it is released.
   # The `git ls-files -z` loads the files in the RubyGem that have been added into git.
   spec.files         = Dir.chdir(File.expand_path('..', __FILE__)) do
-    `git ls-files -z`.split("\x0").reject { |f| f.match(%r{^lib/}) }
+    `git ls-files -z`.split("\x0")
   end
-  
+
   spec.bindir        = "exe"
   spec.executables   = spec.files.grep(%r{^exe/}) { |f| File.basename(f) }
   spec.require_paths = ["lib"]

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: omniauth-keycloak
 version: !ruby/object:Gem::Version
-  version: 1.0.0
+  version: 1.0.1
 platform: ruby
 authors:
 - Cameron Crockett
@@ -139,6 +139,11 @@ files:
 - LICENSE.txt
 - README.md
 - Rakefile
+- bin/console
+- bin/setup
+- lib/keycloak/version.rb
+- lib/omniauth-keycloak.rb
+- lib/omniauth/strategies/keycloak-openid.rb
 - omniauth-keycloak.gemspec
 - spec/omniauth/strategies/keycloak_spec.rb
 - spec/spec_helper.rb
@@ -154,12 +159,12 @@ required_ruby_version: !ruby/object:Gem::Requirement
   requirements:
   - - ">="
     - !ruby/object:Gem::Version
-      version: '0'
+      version: '2.2'
 required_rubygems_version: !ruby/object:Gem::Requirement
   requirements:
   - - ">="
     - !ruby/object:Gem::Version
-      version: '0'
+      version: 1.3.5
 requirements: []
 rubyforge_project: 
 rubygems_version: 2.7.4