omniauth-shopify-oauth2 1.1.8 → 1.1.10
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- checksums.yaml +4 -4
- data/README.md +1 -6
- data/Rakefile +6 -3
- data/example/Gemfile +2 -2
- data/example/config.ru +24 -4
- data/lib/omniauth/shopify/version.rb +1 -1
- data/lib/omniauth/strategies/shopify.rb +35 -7
- data/omniauth-shopify-oauth2.gemspec +3 -2
- data/test/integration_test.rb +218 -0
- data/test/test_helper.rb +10 -0
- metadata +25 -34
- checksums.yaml.gz.sig +0 -1
- data.tar.gz.sig +0 -0
- data/spec/spec_helper.rb +0 -6
- data/spec/support/shared_examples.rb +0 -36
- metadata.gz.sig +0 -3
checksums.yaml
CHANGED
|
@@ -1,7 +1,7 @@
|
|
|
1
1
|
---
|
|
2
2
|
SHA1:
|
|
3
|
-
metadata.gz:
|
|
4
|
-
data.tar.gz:
|
|
3
|
+
metadata.gz: 022af1f9a3fda484fc995538a135bc0ea0041b51
|
|
4
|
+
data.tar.gz: c91fe606094ca421be88500f272c97564eca95d0
|
|
5
5
|
SHA512:
|
|
6
|
-
metadata.gz:
|
|
7
|
-
data.tar.gz:
|
|
6
|
+
metadata.gz: 0e109b8742b1fde0cfb031426d755b65d3030f4d664de50d3bce0ddb8d995f667b57111ef72681f0c6c2d1b10fe29973d60b76aba6926f37a35a597310c94409
|
|
7
|
+
data.tar.gz: d9945d8ccbad48b9fae262871c66a2d25d3541c55d02983465dbf8163552f8bcd38445e3609f27cc34b69f31cdbe77a8c2c77223cad566a2890af1d3278bb4ca
|
data/README.md
CHANGED
|
@@ -32,16 +32,11 @@ You can configure the scope, which you pass in to the `provider` method via a `H
|
|
|
32
32
|
|
|
33
33
|
* `scope`: A comma-separated list of permissions you want to request from the user. See [the Shopify API docs](http://docs.shopify.com/api/tutorials/oauth) for a full list of available permissions.
|
|
34
34
|
|
|
35
|
-
* `setup`: A lambda which dynamically sets the `site`. You must initiate the OmniAuth process by passing in a `shop` query parameter of the shop you're requesting permissions for. Ex. http://myapp.com/auth/shopify?shop=example.myshopify.com
|
|
36
|
-
|
|
37
35
|
For example, to request `read_products`, `read_orders` and `write_content` permissions and display the authentication page:
|
|
38
36
|
|
|
39
37
|
```ruby
|
|
40
38
|
Rails.application.config.middleware.use OmniAuth::Builder do
|
|
41
|
-
provider :shopify, ENV['SHOPIFY_API_KEY'], ENV['SHOPIFY_SHARED_SECRET'],
|
|
42
|
-
:scope => 'read_products,read_orders,write_content',
|
|
43
|
-
:setup => lambda { |env| params = Rack::Utils.parse_query(env['QUERY_STRING'])
|
|
44
|
-
env['omniauth.strategy'].options[:client_options][:site] = "https://#{params['shop']}" }
|
|
39
|
+
provider :shopify, ENV['SHOPIFY_API_KEY'], ENV['SHOPIFY_SHARED_SECRET'], :scope => 'read_products,read_orders,write_content'
|
|
45
40
|
end
|
|
46
41
|
```
|
|
47
42
|
|
data/Rakefile
CHANGED
|
@@ -1,6 +1,9 @@
|
|
|
1
1
|
require 'bundler/gem_tasks'
|
|
2
|
-
require '
|
|
2
|
+
require 'rake/testtask'
|
|
3
3
|
|
|
4
|
-
|
|
4
|
+
task :default => :test
|
|
5
5
|
|
|
6
|
-
|
|
6
|
+
Rake::TestTask.new(:test) do |t|
|
|
7
|
+
t.pattern = 'test/**/*_test.rb'
|
|
8
|
+
t.verbose = true
|
|
9
|
+
end
|
data/example/Gemfile
CHANGED
data/example/config.ru
CHANGED
|
@@ -3,8 +3,31 @@ require 'sinatra/base'
|
|
|
3
3
|
require 'omniauth-shopify-oauth2'
|
|
4
4
|
|
|
5
5
|
SCOPE = 'read_products,read_orders,read_customers,write_shipping'
|
|
6
|
+
SHOPIFY_API_KEY = ENV['SHOPIFY_API_KEY']
|
|
7
|
+
SHOPIFY_SHARED_SECRET = ENV['SHOPIFY_SHARED_SECRET']
|
|
8
|
+
|
|
9
|
+
unless SHOPIFY_API_KEY && SHOPIFY_SHARED_SECRET
|
|
10
|
+
abort("SHOPIFY_API_KEY and SHOPIFY_SHARED_SECRET environment variables must be set")
|
|
11
|
+
end
|
|
6
12
|
|
|
7
13
|
class App < Sinatra::Base
|
|
14
|
+
get '/' do
|
|
15
|
+
<<-HTML
|
|
16
|
+
<html>
|
|
17
|
+
<head>
|
|
18
|
+
<title>Shopify Oauth2</title>
|
|
19
|
+
</head>
|
|
20
|
+
<body>
|
|
21
|
+
<form action="/auth/shopify" method="get">
|
|
22
|
+
<label for="shop">Enter your store's URL:</label>
|
|
23
|
+
<input type="text" name="shop" placeholder="your-shop-url.myshopify.com">
|
|
24
|
+
<button type="submit">Log In</button>
|
|
25
|
+
</form>
|
|
26
|
+
</body>
|
|
27
|
+
</html>
|
|
28
|
+
HTML
|
|
29
|
+
end
|
|
30
|
+
|
|
8
31
|
get '/auth/:provider/callback' do
|
|
9
32
|
<<-HTML
|
|
10
33
|
<html>
|
|
@@ -38,10 +61,7 @@ end
|
|
|
38
61
|
use Rack::Session::Cookie, secret: SecureRandom.hex(64)
|
|
39
62
|
|
|
40
63
|
use OmniAuth::Builder do
|
|
41
|
-
provider :shopify,
|
|
42
|
-
:scope => SCOPE,
|
|
43
|
-
:setup => lambda { |env| params = Rack::Utils.parse_query(env['QUERY_STRING'])
|
|
44
|
-
env['omniauth.strategy'].options[:client_options][:site] = "https://#{params['shop']}" }
|
|
64
|
+
provider :shopify, SHOPIFY_API_KEY, SHOPIFY_SHARED_SECRET, :scope => SCOPE
|
|
45
65
|
end
|
|
46
66
|
|
|
47
67
|
run App.new
|
|
@@ -6,6 +6,8 @@ module OmniAuth
|
|
|
6
6
|
# Available scopes: content themes products customers orders script_tags shipping
|
|
7
7
|
# read_* or write_*
|
|
8
8
|
DEFAULT_SCOPE = 'read_products'
|
|
9
|
+
MINUTE = 60
|
|
10
|
+
CODE_EXPIRES_AFTER = 10 * MINUTE
|
|
9
11
|
|
|
10
12
|
option :client_options, {
|
|
11
13
|
:authorize_url => '/admin/oauth/authorize',
|
|
@@ -13,16 +15,44 @@ module OmniAuth
|
|
|
13
15
|
}
|
|
14
16
|
|
|
15
17
|
option :callback_url
|
|
16
|
-
|
|
17
|
-
option :provider_ignores_state, true
|
|
18
18
|
option :myshopify_domain, 'myshopify.com'
|
|
19
19
|
|
|
20
|
+
option :setup, proc { |env|
|
|
21
|
+
request = Rack::Request.new(env)
|
|
22
|
+
env['omniauth.strategy'].options[:client_options][:site] = "https://#{request.GET['shop']}"
|
|
23
|
+
}
|
|
24
|
+
|
|
20
25
|
uid { URI.parse(options[:client_options][:site]).host }
|
|
21
26
|
|
|
22
27
|
def valid_site?
|
|
23
28
|
!!(/\A(https|http)\:\/\/[a-zA-Z0-9][a-zA-Z0-9\-]*\.#{Regexp.quote(options[:myshopify_domain])}[\/]?\z/ =~ options[:client_options][:site])
|
|
24
29
|
end
|
|
25
30
|
|
|
31
|
+
def valid_signature?
|
|
32
|
+
return false unless request.POST.empty?
|
|
33
|
+
|
|
34
|
+
params = request.GET
|
|
35
|
+
signature = params['hmac']
|
|
36
|
+
timestamp = params['timestamp']
|
|
37
|
+
return false unless signature && timestamp
|
|
38
|
+
|
|
39
|
+
return false unless timestamp.to_i > Time.now.to_i - CODE_EXPIRES_AFTER
|
|
40
|
+
|
|
41
|
+
calculated_signature = self.class.hmac_sign(self.class.encoded_params_for_signature(params), options.client_secret)
|
|
42
|
+
Rack::Utils.secure_compare(calculated_signature, signature)
|
|
43
|
+
end
|
|
44
|
+
|
|
45
|
+
def self.encoded_params_for_signature(params)
|
|
46
|
+
params = params.dup
|
|
47
|
+
params.delete('hmac')
|
|
48
|
+
params.delete('signature') # deprecated signature
|
|
49
|
+
params.map{|k,v| "#{URI.escape(k.to_s, '&=%')}=#{URI.escape(v.to_s, '&%')}"}.sort.join('&')
|
|
50
|
+
end
|
|
51
|
+
|
|
52
|
+
def self.hmac_sign(encoded_params, secret)
|
|
53
|
+
OpenSSL::HMAC.hexdigest(OpenSSL::Digest::SHA256.new, secret, encoded_params)
|
|
54
|
+
end
|
|
55
|
+
|
|
26
56
|
def fix_https
|
|
27
57
|
options[:client_options][:site].gsub!(/\Ahttp\:/, 'https:')
|
|
28
58
|
end
|
|
@@ -41,11 +71,9 @@ module OmniAuth
|
|
|
41
71
|
end
|
|
42
72
|
|
|
43
73
|
def callback_phase
|
|
44
|
-
|
|
45
|
-
|
|
46
|
-
|
|
47
|
-
fail!(:invalid_site)
|
|
48
|
-
end
|
|
74
|
+
return fail!(:invalid_site) unless valid_site?
|
|
75
|
+
return fail!(:invalid_signature) unless valid_signature?
|
|
76
|
+
super
|
|
49
77
|
end
|
|
50
78
|
|
|
51
79
|
def authorize_params
|
|
@@ -16,8 +16,9 @@ Gem::Specification.new do |s|
|
|
|
16
16
|
s.executables = `git ls-files -- bin/*`.split("\n").map { |f| File.basename(f) }
|
|
17
17
|
s.require_paths = ['lib']
|
|
18
18
|
|
|
19
|
-
s.add_runtime_dependency 'omniauth-oauth2', '~> 1.
|
|
19
|
+
s.add_runtime_dependency 'omniauth-oauth2', '~> 1.2'
|
|
20
20
|
|
|
21
|
-
s.add_development_dependency '
|
|
21
|
+
s.add_development_dependency 'minitest', '~> 5.6'
|
|
22
|
+
s.add_development_dependency 'fakeweb', '~> 1.3'
|
|
22
23
|
s.add_development_dependency 'rake'
|
|
23
24
|
end
|
|
@@ -0,0 +1,218 @@
|
|
|
1
|
+
require_relative 'test_helper'
|
|
2
|
+
|
|
3
|
+
class IntegrationTest < Minitest::Test
|
|
4
|
+
def setup
|
|
5
|
+
build_app
|
|
6
|
+
end
|
|
7
|
+
|
|
8
|
+
def teardown
|
|
9
|
+
FakeWeb.clean_registry
|
|
10
|
+
FakeWeb.last_request = nil
|
|
11
|
+
end
|
|
12
|
+
|
|
13
|
+
def test_authorize
|
|
14
|
+
response = authorize('snowdevil.myshopify.com')
|
|
15
|
+
assert_equal 302, response.status
|
|
16
|
+
assert_match /\A#{Regexp.quote("https://snowdevil.myshopify.com/admin/oauth/authorize?")}/, response.location
|
|
17
|
+
redirect_params = Rack::Utils.parse_query(URI(response.location).query)
|
|
18
|
+
assert_equal "123", redirect_params['client_id']
|
|
19
|
+
assert_equal "https://app.example.com/auth/shopify/callback", redirect_params['redirect_uri']
|
|
20
|
+
assert_equal "read_products", redirect_params['scope']
|
|
21
|
+
end
|
|
22
|
+
|
|
23
|
+
def test_authorize_overrides_site_with_https_scheme
|
|
24
|
+
build_app setup: lambda { |env|
|
|
25
|
+
params = Rack::Utils.parse_query(env['QUERY_STRING'])
|
|
26
|
+
env['omniauth.strategy'].options[:client_options][:site] = "http://#{params['shop']}"
|
|
27
|
+
}
|
|
28
|
+
|
|
29
|
+
response = authorize('snowdevil.myshopify.com')
|
|
30
|
+
assert_match /\A#{Regexp.quote("https://snowdevil.myshopify.com/admin/oauth/authorize?")}/, response.location
|
|
31
|
+
end
|
|
32
|
+
|
|
33
|
+
def test_site_validation
|
|
34
|
+
code = SecureRandom.hex(16)
|
|
35
|
+
|
|
36
|
+
[
|
|
37
|
+
'foo.example.com', # shop doesn't end with .myshopify.com
|
|
38
|
+
'http://snowdevil.myshopify.com', # shop contains protocol
|
|
39
|
+
'snowdevil.myshopify.com/path', # shop contains path
|
|
40
|
+
'user@snowdevil.myshopify.com', # shop contains user
|
|
41
|
+
'snowdevil.myshopify.com:22', # shop contains port
|
|
42
|
+
].each do |shop, valid|
|
|
43
|
+
response = authorize(shop)
|
|
44
|
+
assert_auth_failure(response, 'invalid_site')
|
|
45
|
+
|
|
46
|
+
response = callback(sign_params(shop: shop, code: code))
|
|
47
|
+
assert_auth_failure(response, 'invalid_site')
|
|
48
|
+
end
|
|
49
|
+
end
|
|
50
|
+
|
|
51
|
+
def test_callback
|
|
52
|
+
access_token = SecureRandom.hex(16)
|
|
53
|
+
code = SecureRandom.hex(16)
|
|
54
|
+
expect_access_token_request(access_token)
|
|
55
|
+
|
|
56
|
+
response = callback(sign_params(shop: 'snowdevil.myshopify.com', code: code, state: opts["rack.session"]["omniauth.state"]))
|
|
57
|
+
|
|
58
|
+
assert_callback_success(response, access_token, code)
|
|
59
|
+
end
|
|
60
|
+
|
|
61
|
+
def test_callback_with_legacy_signature
|
|
62
|
+
access_token = SecureRandom.hex(16)
|
|
63
|
+
code = SecureRandom.hex(16)
|
|
64
|
+
expect_access_token_request(access_token)
|
|
65
|
+
|
|
66
|
+
response = callback(sign_params(shop: 'snowdevil.myshopify.com', code: code, state: opts["rack.session"]["omniauth.state"]).merge(signature: 'ignored'))
|
|
67
|
+
|
|
68
|
+
assert_callback_success(response, access_token, code)
|
|
69
|
+
end
|
|
70
|
+
|
|
71
|
+
def test_callback_custom_params
|
|
72
|
+
access_token = SecureRandom.hex(16)
|
|
73
|
+
code = SecureRandom.hex(16)
|
|
74
|
+
FakeWeb.register_uri(:post, "https://snowdevil.myshopify.com/admin/oauth/access_token",
|
|
75
|
+
body: JSON.dump(access_token: access_token),
|
|
76
|
+
content_type: 'application/json')
|
|
77
|
+
|
|
78
|
+
now = Time.now.to_i
|
|
79
|
+
params = { shop: 'snowdevil.myshopify.com', code: code, timestamp: now, next: '/products?page=2&q=red%20shirt', state: opts["rack.session"]["omniauth.state"] }
|
|
80
|
+
encoded_params = "code=#{code}&next=/products?page=2%26q=red%2520shirt&shop=snowdevil.myshopify.com&state=#{opts["rack.session"]["omniauth.state"]}×tamp=#{now}"
|
|
81
|
+
params[:hmac] = OpenSSL::HMAC.hexdigest(OpenSSL::Digest::SHA256.new, @secret, encoded_params)
|
|
82
|
+
|
|
83
|
+
response = callback(params)
|
|
84
|
+
|
|
85
|
+
assert_callback_success(response, access_token, code)
|
|
86
|
+
end
|
|
87
|
+
|
|
88
|
+
def test_callback_rejects_invalid_hmac
|
|
89
|
+
@secret = 'wrong_secret'
|
|
90
|
+
response = callback(sign_params(shop: 'snowdevil.myshopify.com', code: SecureRandom.hex(16)))
|
|
91
|
+
|
|
92
|
+
assert_auth_failure(response, 'invalid_signature')
|
|
93
|
+
end
|
|
94
|
+
|
|
95
|
+
def test_callback_rejects_old_timestamps
|
|
96
|
+
expired_timestamp = Time.now.to_i - OmniAuth::Strategies::Shopify::CODE_EXPIRES_AFTER - 1
|
|
97
|
+
response = callback(sign_params(shop: 'snowdevil.myshopify.com', code: SecureRandom.hex(16), timestamp: expired_timestamp))
|
|
98
|
+
|
|
99
|
+
assert_auth_failure(response, 'invalid_signature')
|
|
100
|
+
end
|
|
101
|
+
|
|
102
|
+
def test_callback_rejects_missing_hmac
|
|
103
|
+
code = SecureRandom.hex(16)
|
|
104
|
+
|
|
105
|
+
response = callback(shop: 'snowdevil.myshopify.com', code: code, timestamp: Time.now.to_i)
|
|
106
|
+
|
|
107
|
+
assert_auth_failure(response, 'invalid_signature')
|
|
108
|
+
end
|
|
109
|
+
|
|
110
|
+
def test_callback_rejects_body_params
|
|
111
|
+
code = SecureRandom.hex(16)
|
|
112
|
+
params = sign_params(shop: 'snowdevil.myshopify.com', code: code)
|
|
113
|
+
body = Rack::Utils.build_nested_query(unsigned: 'value')
|
|
114
|
+
|
|
115
|
+
response = request.get("https://app.example.com/auth/shopify/callback?#{Rack::Utils.build_query(params)}",
|
|
116
|
+
input: body,
|
|
117
|
+
"CONTENT_TYPE" => 'application/x-www-form-urlencoded')
|
|
118
|
+
|
|
119
|
+
assert_auth_failure(response, 'invalid_signature')
|
|
120
|
+
end
|
|
121
|
+
|
|
122
|
+
def test_provider_options
|
|
123
|
+
build_app scope: 'read_products,read_orders,write_content',
|
|
124
|
+
callback_path: '/admin/auth/legacy/callback',
|
|
125
|
+
myshopify_domain: 'myshopify.dev:3000',
|
|
126
|
+
setup: lambda { |env|
|
|
127
|
+
shop = Rack::Request.new(env).GET['shop']
|
|
128
|
+
shop += ".myshopify.dev:3000" unless shop.include?(".")
|
|
129
|
+
env['omniauth.strategy'].options[:client_options][:site] = "https://#{shop}"
|
|
130
|
+
}
|
|
131
|
+
|
|
132
|
+
response = authorize('snowdevil')
|
|
133
|
+
assert_equal 302, response.status
|
|
134
|
+
assert_match /\A#{Regexp.quote("https://snowdevil.myshopify.dev:3000/admin/oauth/authorize?")}/, response.location
|
|
135
|
+
redirect_params = Rack::Utils.parse_query(URI(response.location).query)
|
|
136
|
+
assert_equal 'read_products,read_orders,write_content', redirect_params['scope']
|
|
137
|
+
assert_equal 'https://app.example.com/admin/auth/legacy/callback', redirect_params['redirect_uri']
|
|
138
|
+
end
|
|
139
|
+
def test_callback_with_invalid_state_fails
|
|
140
|
+
access_token = SecureRandom.hex(16)
|
|
141
|
+
code = SecureRandom.hex(16)
|
|
142
|
+
FakeWeb.register_uri(:post, "https://snowdevil.myshopify.com/admin/oauth/access_token",
|
|
143
|
+
body: JSON.dump(access_token: access_token),
|
|
144
|
+
content_type: 'application/json')
|
|
145
|
+
|
|
146
|
+
response = callback(sign_params(shop: 'snowdevil.myshopify.com', code: code, state: 'invalid'))
|
|
147
|
+
|
|
148
|
+
assert_equal 302, response.status
|
|
149
|
+
assert_equal '/auth/failure?message=csrf_detected&strategy=shopify', response.location
|
|
150
|
+
end
|
|
151
|
+
private
|
|
152
|
+
|
|
153
|
+
def sign_params(params)
|
|
154
|
+
params = params.dup
|
|
155
|
+
|
|
156
|
+
params[:timestamp] ||= Time.now.to_i
|
|
157
|
+
|
|
158
|
+
encoded_params = OmniAuth::Strategies::Shopify.encoded_params_for_signature(params)
|
|
159
|
+
params['hmac'] = OmniAuth::Strategies::Shopify.hmac_sign(encoded_params, @secret)
|
|
160
|
+
params
|
|
161
|
+
end
|
|
162
|
+
|
|
163
|
+
def expect_access_token_request(access_token)
|
|
164
|
+
FakeWeb.register_uri(:post, "https://snowdevil.myshopify.com/admin/oauth/access_token",
|
|
165
|
+
body: JSON.dump(access_token: access_token),
|
|
166
|
+
content_type: 'application/json')
|
|
167
|
+
end
|
|
168
|
+
|
|
169
|
+
def assert_callback_success(response, access_token, code)
|
|
170
|
+
token_request_params = Rack::Utils.parse_query(FakeWeb.last_request.body)
|
|
171
|
+
assert_equal token_request_params['client_id'], '123'
|
|
172
|
+
assert_equal token_request_params['client_secret'], @secret
|
|
173
|
+
assert_equal token_request_params['code'], code
|
|
174
|
+
|
|
175
|
+
assert_equal 'snowdevil.myshopify.com', @omniauth_result.uid
|
|
176
|
+
assert_equal access_token, @omniauth_result.credentials.token
|
|
177
|
+
assert_equal false, @omniauth_result.credentials.expires
|
|
178
|
+
|
|
179
|
+
assert_equal 200, response.status
|
|
180
|
+
assert_equal "OK", response.body
|
|
181
|
+
end
|
|
182
|
+
|
|
183
|
+
def assert_auth_failure(response, reason)
|
|
184
|
+
assert_nil FakeWeb.last_request
|
|
185
|
+
assert_equal 302, response.status
|
|
186
|
+
assert_match /\A#{Regexp.quote("/auth/failure?message=#{reason}")}/, response.location
|
|
187
|
+
end
|
|
188
|
+
|
|
189
|
+
def build_app(options={})
|
|
190
|
+
app = proc { |env|
|
|
191
|
+
@omniauth_result = env['omniauth.auth']
|
|
192
|
+
[200, {Rack::CONTENT_TYPE => "text/plain"}, "OK"]
|
|
193
|
+
}
|
|
194
|
+
|
|
195
|
+
opts["rack.session"]["omniauth.state"] = SecureRandom.hex(32)
|
|
196
|
+
app = OmniAuth::Builder.new(app) do
|
|
197
|
+
provider :shopify, '123', '53cr3tz', options
|
|
198
|
+
end
|
|
199
|
+
@secret = '53cr3tz'
|
|
200
|
+
@app = Rack::Session::Cookie.new(app, secret: SecureRandom.hex(64))
|
|
201
|
+
end
|
|
202
|
+
|
|
203
|
+
def authorize(shop)
|
|
204
|
+
request.get("https://app.example.com/auth/shopify?shop=#{CGI.escape(shop)}", opts)
|
|
205
|
+
end
|
|
206
|
+
|
|
207
|
+
def callback(params)
|
|
208
|
+
request.get("https://app.example.com/auth/shopify/callback?#{Rack::Utils.build_query(params)}", opts)
|
|
209
|
+
end
|
|
210
|
+
|
|
211
|
+
def opts
|
|
212
|
+
@opts ||= { "rack.session" => {} }
|
|
213
|
+
end
|
|
214
|
+
|
|
215
|
+
def request
|
|
216
|
+
Rack::MockRequest.new(@app)
|
|
217
|
+
end
|
|
218
|
+
end
|
data/test/test_helper.rb
ADDED
metadata
CHANGED
|
@@ -1,36 +1,14 @@
|
|
|
1
1
|
--- !ruby/object:Gem::Specification
|
|
2
2
|
name: omniauth-shopify-oauth2
|
|
3
3
|
version: !ruby/object:Gem::Version
|
|
4
|
-
version: 1.1.
|
|
4
|
+
version: 1.1.10
|
|
5
5
|
platform: ruby
|
|
6
6
|
authors:
|
|
7
7
|
- Denis Odorcic
|
|
8
8
|
autorequire:
|
|
9
9
|
bindir: bin
|
|
10
|
-
cert_chain:
|
|
11
|
-
-
|
|
12
|
-
-----BEGIN CERTIFICATE-----
|
|
13
|
-
MIIDcDCCAligAwIBAgIBATANBgkqhkiG9w0BAQUFADA/MQ8wDQYDVQQDDAZhZG1p
|
|
14
|
-
bnMxFzAVBgoJkiaJk/IsZAEZFgdzaG9waWZ5MRMwEQYKCZImiZPyLGQBGRYDY29t
|
|
15
|
-
MB4XDTE0MDUxNTIwMzM0OFoXDTE1MDUxNTIwMzM0OFowPzEPMA0GA1UEAwwGYWRt
|
|
16
|
-
aW5zMRcwFQYKCZImiZPyLGQBGRYHc2hvcGlmeTETMBEGCgmSJomT8ixkARkWA2Nv
|
|
17
|
-
bTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAL0/81O3e1vh5smcwp2G
|
|
18
|
-
MpLQ6q0kejQLa65bPYPxdzWA1SYOKyGfw+yR9LdFzsuKpwWzKq6zX35lj1IckWS4
|
|
19
|
-
bNBEQzxmufUxU0XPM02haFB8fOfDJzdXsWte9Ge4IFwahwn68gpMqN+BvxL+KMYz
|
|
20
|
-
Iut9YmN44d4LZdsENEIO5vmybuG2vYDz7R56qB0PA+Q2P2CdhymsBad2DQs69FBo
|
|
21
|
-
uico9V6VMYYctL9lCYdzu9IXrOYNTt88suKIVzzAlHOKeN0Ng5qdztFoTR8sfxDr
|
|
22
|
-
Ydg3KHl5n47wlpgd8R0f/4b5gGxW+v9pyJCgQnLlRu7DedVSvv7+GMtj3g9r3nhJ
|
|
23
|
-
KqECAwEAAaN3MHUwCQYDVR0TBAIwADALBgNVHQ8EBAMCBLAwHQYDVR0OBBYEFI/o
|
|
24
|
-
maf34HXbUOQsdoLHacEKQgunMB0GA1UdEQQWMBSBEmFkbWluc0BzaG9waWZ5LmNv
|
|
25
|
-
bTAdBgNVHRIEFjAUgRJhZG1pbnNAc2hvcGlmeS5jb20wDQYJKoZIhvcNAQEFBQAD
|
|
26
|
-
ggEBADkK9aj5T0HPExsov4EoMWFnO+G7RQ28C30VAfKxnL2UxG6i4XMHVs6Xi94h
|
|
27
|
-
qXFw1ec9Y2eDUqaolT3bviOk9BB197+A8Vz/k7MC6ci2NE+yDDB7HAC8zU6LAx8Y
|
|
28
|
-
Iqvw7B/PSZ/pz4bUVFlTATif4mi1vO3lidRkdHRtM7UePSn2rUpOi0gtXBP3bLu5
|
|
29
|
-
YjHJN7wx5cugMEyroKITG5gL0Nxtu21qtOlHX4Hc4KdE2JqzCPOsS4zsZGhgwhPs
|
|
30
|
-
fl3hbtVFTqbOlwL9vy1fudXcolIE/ZTcxQ+er07ZFZdKCXayR9PPs64heamfn0fp
|
|
31
|
-
TConQSX2BnZdhIEYW+cKzEC/bLc=
|
|
32
|
-
-----END CERTIFICATE-----
|
|
33
|
-
date: 2015-05-12 00:00:00.000000000 Z
|
|
10
|
+
cert_chain: []
|
|
11
|
+
date: 2015-05-27 00:00:00.000000000 Z
|
|
34
12
|
dependencies:
|
|
35
13
|
- !ruby/object:Gem::Dependency
|
|
36
14
|
name: omniauth-oauth2
|
|
@@ -38,28 +16,42 @@ dependencies:
|
|
|
38
16
|
requirements:
|
|
39
17
|
- - "~>"
|
|
40
18
|
- !ruby/object:Gem::Version
|
|
41
|
-
version: 1.
|
|
19
|
+
version: '1.2'
|
|
42
20
|
type: :runtime
|
|
43
21
|
prerelease: false
|
|
44
22
|
version_requirements: !ruby/object:Gem::Requirement
|
|
45
23
|
requirements:
|
|
46
24
|
- - "~>"
|
|
47
25
|
- !ruby/object:Gem::Version
|
|
48
|
-
version: 1.
|
|
26
|
+
version: '1.2'
|
|
49
27
|
- !ruby/object:Gem::Dependency
|
|
50
|
-
name:
|
|
28
|
+
name: minitest
|
|
51
29
|
requirement: !ruby/object:Gem::Requirement
|
|
52
30
|
requirements:
|
|
53
31
|
- - "~>"
|
|
54
32
|
- !ruby/object:Gem::Version
|
|
55
|
-
version:
|
|
33
|
+
version: '5.6'
|
|
56
34
|
type: :development
|
|
57
35
|
prerelease: false
|
|
58
36
|
version_requirements: !ruby/object:Gem::Requirement
|
|
59
37
|
requirements:
|
|
60
38
|
- - "~>"
|
|
61
39
|
- !ruby/object:Gem::Version
|
|
62
|
-
version:
|
|
40
|
+
version: '5.6'
|
|
41
|
+
- !ruby/object:Gem::Dependency
|
|
42
|
+
name: fakeweb
|
|
43
|
+
requirement: !ruby/object:Gem::Requirement
|
|
44
|
+
requirements:
|
|
45
|
+
- - "~>"
|
|
46
|
+
- !ruby/object:Gem::Version
|
|
47
|
+
version: '1.3'
|
|
48
|
+
type: :development
|
|
49
|
+
prerelease: false
|
|
50
|
+
version_requirements: !ruby/object:Gem::Requirement
|
|
51
|
+
requirements:
|
|
52
|
+
- - "~>"
|
|
53
|
+
- !ruby/object:Gem::Version
|
|
54
|
+
version: '1.3'
|
|
63
55
|
- !ruby/object:Gem::Dependency
|
|
64
56
|
name: rake
|
|
65
57
|
requirement: !ruby/object:Gem::Requirement
|
|
@@ -87,7 +79,6 @@ files:
|
|
|
87
79
|
- README.md
|
|
88
80
|
- Rakefile
|
|
89
81
|
- example/Gemfile
|
|
90
|
-
- example/Gemfile.lock
|
|
91
82
|
- example/config.ru
|
|
92
83
|
- lib/omniauth-shopify-oauth2.rb
|
|
93
84
|
- lib/omniauth/shopify.rb
|
|
@@ -96,8 +87,8 @@ files:
|
|
|
96
87
|
- omniauth-shopify-oauth2.gemspec
|
|
97
88
|
- shipit.rubygems.yml
|
|
98
89
|
- spec/omniauth/strategies/shopify_spec.rb
|
|
99
|
-
-
|
|
100
|
-
-
|
|
90
|
+
- test/integration_test.rb
|
|
91
|
+
- test/test_helper.rb
|
|
101
92
|
homepage: https://github.com/Shopify/omniauth-shopify-oauth2
|
|
102
93
|
licenses:
|
|
103
94
|
- MIT
|
|
@@ -118,7 +109,7 @@ required_rubygems_version: !ruby/object:Gem::Requirement
|
|
|
118
109
|
version: '0'
|
|
119
110
|
requirements: []
|
|
120
111
|
rubyforge_project:
|
|
121
|
-
rubygems_version: 2.2.
|
|
112
|
+
rubygems_version: 2.2.3
|
|
122
113
|
signing_key:
|
|
123
114
|
specification_version: 4
|
|
124
115
|
summary: Shopify strategy for OmniAuth
|
checksums.yaml.gz.sig
DELETED
|
@@ -1 +0,0 @@
|
|
|
1
|
-
]��j��G|�܆/��kҾ!�Z��P~���Uj�cm� ,��C><L����~VO)��� k�m�hz���*��Ԭ<?��a�;˝��չ�w�3��r�^X>8;�p(i��A/*{^×����X��M��W4 ����u��%HA$� q;4�,�8<�>kև (�{�O4���6X�>�B+t>c���� ���w !��i����7 �M? R�����'cϻ_��{Q\&-Ԭ��O��n�+!A}���*
|
data.tar.gz.sig
DELETED
|
Binary file
|
data/spec/spec_helper.rb
DELETED
|
@@ -1,36 +0,0 @@
|
|
|
1
|
-
shared_examples 'an oauth2 strategy' do
|
|
2
|
-
describe '#client' do
|
|
3
|
-
it 'should be initialized with symbolized client_options' do
|
|
4
|
-
@options = { :client_options => { 'authorize_url' => 'https://example.com' } }
|
|
5
|
-
subject.client.options[:authorize_url].should == 'https://example.com'
|
|
6
|
-
end
|
|
7
|
-
end
|
|
8
|
-
|
|
9
|
-
describe '#authorize_params' do
|
|
10
|
-
it 'should include any authorize params passed in the :authorize_params option' do
|
|
11
|
-
@options = { :authorize_params => { :foo => 'bar', :baz => 'zip' } }
|
|
12
|
-
subject.authorize_params['foo'].should eq('bar')
|
|
13
|
-
subject.authorize_params['baz'].should eq('zip')
|
|
14
|
-
end
|
|
15
|
-
|
|
16
|
-
it 'should include top-level options that are marked as :authorize_options' do
|
|
17
|
-
@options = { :authorize_options => [:scope, :foo], :scope => 'bar', :foo => 'baz' }
|
|
18
|
-
subject.authorize_params['scope'].should eq('bar')
|
|
19
|
-
subject.authorize_params['foo'].should eq('baz')
|
|
20
|
-
end
|
|
21
|
-
end
|
|
22
|
-
|
|
23
|
-
describe '#token_params' do
|
|
24
|
-
it 'should include any token params passed in the :token_params option' do
|
|
25
|
-
@options = { :token_params => { :foo => 'bar', :baz => 'zip' } }
|
|
26
|
-
subject.token_params['foo'].should eq('bar')
|
|
27
|
-
subject.token_params['baz'].should eq('zip')
|
|
28
|
-
end
|
|
29
|
-
|
|
30
|
-
it 'should include top-level options that are marked as :token_options' do
|
|
31
|
-
@options = { :token_options => [:scope, :foo], :scope => 'bar', :foo => 'baz' }
|
|
32
|
-
subject.token_params['scope'].should eq('bar')
|
|
33
|
-
subject.token_params['foo'].should eq('baz')
|
|
34
|
-
end
|
|
35
|
-
end
|
|
36
|
-
end
|
metadata.gz.sig
DELETED