omniauth-liblynx 1.0.0

checksums.yaml

@@ -0,0 +1,7 @@
+---
+SHA256:
+  metadata.gz: f7623daa8e8cadf5e8f653ac2d24124ad9a819e6a7103edc01e5627d408fb579
+  data.tar.gz: 07b6f1841d7aa628e0391d0cae77d980df01fb55bd24b5bf1aa2e96b9071c1c2
+SHA512:
+  metadata.gz: b4435398864fdf46e900e18439c6aca4300c5c324761543238689f9d678245582b37199513b1a08e5699ac2cf4003272c2b2b0f6f30e2897b47116ca7441bccc
+  data.tar.gz: 99badcd12cd76cb838ff5673f53ba377acda7b8733e3b40652d456c8c4491be7de34819e7eed8f061487f9c48a4ecf20485fec62066698e38e60e87d45cd3691

data/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2018 Denis Sablic
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

data/README.md

@@ -0,0 +1,21 @@
+# OmniAuth LibLynx Strategy
+
+## Installation
+
+Add this line to your application's Gemfile:
+
+```ruby
+gem 'omniauth-liblynx'
+```
+
+## Usage
+
+Adding the middleware to a Rails app in `config/initializers/omniauth.rb`:
+
+```ruby
+Rails.application.config.middleware.use OmniAuth::Builder do
+  provider :liblynx, ENV['LIBLYNX_ID'], ENV['LIBLYNX_SECRET']
+end
+```
+
+Read the OmniAuth docs for detailed instructions: https://github.com/intridea/omniauth.

data/lib/omniauth-liblynx.rb

@@ -0,0 +1,2 @@
+require "omniauth-liblynx/version"
+require 'omniauth/strategies/liblynx'

data/lib/omniauth-liblynx/version.rb

@@ -0,0 +1,5 @@
+module OmniAuth
+  module LibLynx
+    VERSION = '1.0.0'
+  end
+end

data/lib/omniauth/strategies/liblynx.rb

@@ -0,0 +1,97 @@
+require 'omniauth-oauth2'
+
+module OmniAuth
+  module Strategies
+    class LibLynx < OmniAuth::Strategies::OAuth2
+      class NoAccountInfo < StandardError
+        def message
+          'Failed to obtain the account info'
+        end
+      end
+
+      class NoInstitution < StandardError
+        def message
+          'The given email domain is not registered with any of the supported institutions'
+        end
+      end
+
+      option :client_options,
+        site: 'https://connect.liblynx.com',
+        token_url: '/oauth/v2/token',
+        client_options: {
+          auth_scheme: :basic_auth
+        }
+
+      option :id_url, 'https://connect.liblynx.com/api/identifications'
+
+      def callback_url
+        options[:callback_url] || (full_host + script_name + callback_path)
+      end
+
+      uid { raw_info['id'] }
+
+      info do
+        i = raw_info['individual']
+        {
+          'email' => id_body[:email],
+          'institution' => request.params['institution'],
+          'reference' => raw_info['reference'],
+          'name' => i['display_name'],
+          'surname' => i['surname'],
+          'given_name' => i['given_name']
+        }
+      end
+
+      def request_phase
+        res = access_token
+          .request(:post, options.id_url, body: id_body)
+          .parsed
+        if id_body[:email].present?
+          institution = res['user_institution']
+          return fail!(:no_institution, NoInstitution.new) unless institution
+          log(:info, "User institution: #{institution}")
+        end
+        id = res['id']
+        url = URI.join(callback_url, "?email=#{id_body[:email]}&institution=#{institution['account_name']}").to_s
+        hmac = OpenSSL::HMAC.hexdigest('SHA256', client.secret, url)
+        redirect("#{client.site}/wayf/#{id}?url=#{CGI.escape(url)}&hash=#{hmac}")
+      end
+
+      def raw_info
+        @raw_info ||= begin
+          r = access_token
+            .request(:post, options.id_url, body: id_body.merge(url: @auth_url))
+            .parsed
+          ref = r.dig('account', 'publisher_reference')
+          (r['account_individual'] || {}).merge('reference' => ref)
+        end
+      end
+
+      def callback_phase
+        @auth_url = [id_body[:url], '?', URI.encode_www_form(request.params)].join
+        return fail!(:no_account_info, NoAccountInfo.new) if raw_info.blank?
+        env['omniauth.auth'] = auth_hash
+        call_app!
+      end
+
+      def access_token
+        @access_token ||= client.client_credentials.get_token
+        @access_token = @access_token.refresh! if @access_token.expired?
+        @access_token
+      end
+
+      private
+
+      def id_body
+        {
+          ip: request.ip,
+          url: callback_url,
+          user_agent: request.user_agent,
+          email: request.params['email']
+        }.compact
+      end
+    end
+  end
+end
+
+OmniAuth.config.add_camelization('liblynx', 'LibLynx')

data/omniauth-liblynx.gemspec

@@ -0,0 +1,21 @@
+
+# -*- encoding: utf-8 -*-
+require File.expand_path('../lib/omniauth-liblynx/version', __FILE__)
+
+Gem::Specification.new do |gem|
+  gem.authors       = ['Denis Sablic']
+  gem.email         = ['denis.sablic@gmail.com']
+  gem.homepage      = 'https://github.com/dsablic/omniauth-liblynx'
+  gem.summary       = 'OmniAuth strategy for LibLynx'
+  gem.license       = 'MIT'
+
+  gem.executables   = `git ls-files -- bin/*`.split("\n").map{ |f| File.basename(f) }
+  gem.files         = `git ls-files`.split("\n")
+  gem.test_files    = `git ls-files -- {test,spec,features}/*`.split("\n")
+  gem.name          = 'omniauth-liblynx'
+  gem.require_paths = ['lib']
+  gem.version       = OmniAuth::LibLynx::VERSION
+
+  gem.add_dependency 'omniauth', '~> 1.5'
+  gem.add_dependency 'omniauth-oauth2', '>= 1.4.0', '< 2.0'
+end

metadata

@@ -0,0 +1,84 @@
+--- !ruby/object:Gem::Specification
+name: omniauth-liblynx
+version: !ruby/object:Gem::Version
+  version: 1.0.0
+platform: ruby
+authors:
+- Denis Sablic
+autorequire: 
+bindir: bin
+cert_chain: []
+date: 2018-02-07 00:00:00.000000000 Z
+dependencies:
+- !ruby/object:Gem::Dependency
+  name: omniauth
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '1.5'
+  type: :runtime
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '1.5'
+- !ruby/object:Gem::Dependency
+  name: omniauth-oauth2
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: 1.4.0
+    - - "<"
+      - !ruby/object:Gem::Version
+        version: '2.0'
+  type: :runtime
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: 1.4.0
+    - - "<"
+      - !ruby/object:Gem::Version
+        version: '2.0'
+description: 
+email:
+- denis.sablic@gmail.com
+executables: []
+extensions: []
+extra_rdoc_files: []
+files:
+- LICENSE
+- README.md
+- lib/omniauth-liblynx.rb
+- lib/omniauth-liblynx/version.rb
+- lib/omniauth/strategies/liblynx.rb
+- omniauth-liblynx.gemspec
+homepage: https://github.com/dsablic/omniauth-liblynx
+licenses:
+- MIT
+metadata: {}
+post_install_message: 
+rdoc_options: []
+require_paths:
+- lib
+required_ruby_version: !ruby/object:Gem::Requirement
+  requirements:
+  - - ">="
+    - !ruby/object:Gem::Version
+      version: '0'
+required_rubygems_version: !ruby/object:Gem::Requirement
+  requirements:
+  - - ">="
+    - !ruby/object:Gem::Version
+      version: '0'
+requirements: []
+rubyforge_project: 
+rubygems_version: 2.7.3
+signing_key: 
+specification_version: 4
+summary: OmniAuth strategy for LibLynx
+test_files: []