omniauth-synced 1.0.0

checksums.yaml

@@ -0,0 +1,7 @@
+---
+SHA256:
+  metadata.gz: 7f56aa785778837804b8eaa3dc94b4346306471deae548d1ce10ac09ffd506b1
+  data.tar.gz: 20e1120ed5e396084344c924bdd54043a9452e8438ab64ebff84c2623a580cfb
+SHA512:
+  metadata.gz: 993b04d1e987d53491f823b35b60375bbaa8a5ad3b76b45bdb521f4897fb3b2460981cb6aa54a9c7235be74958cf19a747de8851e39390ede769fb2adef2195f
+  data.tar.gz: 331ecee9e84b398c43ce605d5a9f4f0a28b3cd018ef2efeae4a659fe665d4834d73ed6ebab6b50bfa2aab71e09a3cb789066eda6c015ee61e0852123aada450f

data/.gitignore

@@ -0,0 +1 @@
+*.gem

data/.ruby-version

@@ -0,0 +1 @@
+2.7.8

data/Gemfile

@@ -0,0 +1,11 @@
+source 'https://gems.ruby-china.com'
+# Specify your gem's dependencies in omniauth-geekpark.gemspec
+gemspec
+
+group :development, :test do
+  gem 'guard-rspec', require: false
+end
+
+group :test do
+  gem 'codeclimate-test-reporter', require: false
+end

data/Gemfile.lock

@@ -0,0 +1,129 @@
+PATH
+  remote: .
+  specs:
+    omniauth-synced (1.0.0)
+      omniauth (~> 1.0)
+      omniauth-oauth2 (~> 1.4)
+
+GEM
+  remote: https://gems.ruby-china.com/
+  specs:
+    addressable (2.8.7)
+      public_suffix (>= 2.0.2, < 7.0)
+    base64 (0.2.0)
+    bigdecimal (3.1.9)
+    codeclimate-test-reporter (1.0.9)
+      simplecov (<= 0.13)
+    coderay (1.1.3)
+    crack (1.0.0)
+      bigdecimal
+      rexml
+    diff-lcs (1.6.0)
+    docile (1.1.5)
+    faraday (2.8.1)
+      base64
+      faraday-net_http (>= 2.0, < 3.1)
+      ruby2_keywords (>= 0.0.4)
+    faraday-net_http (3.0.2)
+    ffi (1.17.1)
+    formatador (1.1.0)
+    guard (2.19.1)
+      formatador (>= 0.2.4)
+      listen (>= 2.7, < 4.0)
+      logger (~> 1.6)
+      lumberjack (>= 1.0.12, < 2.0)
+      nenv (~> 0.1)
+      notiffany (~> 0.0)
+      ostruct (~> 0.6)
+      pry (>= 0.13.0)
+      shellany (~> 0.0)
+      thor (>= 0.18.1)
+    guard-compat (1.2.1)
+    guard-rspec (4.7.3)
+      guard (~> 2.1)
+      guard-compat (~> 1.1)
+      rspec (>= 2.99.0, < 4.0)
+    hashdiff (1.1.2)
+    hashie (5.0.0)
+    json (2.10.1)
+    jwt (2.10.1)
+      base64
+    listen (3.9.0)
+      rb-fsevent (~> 0.10, >= 0.10.3)
+      rb-inotify (~> 0.9, >= 0.9.10)
+    logger (1.6.6)
+    lumberjack (1.2.10)
+    method_source (1.1.0)
+    multi_xml (0.6.0)
+    nenv (0.3.0)
+    notiffany (0.1.3)
+      nenv (~> 0.1)
+      shellany (~> 0.0)
+    oauth2 (2.0.9)
+      faraday (>= 0.17.3, < 3.0)
+      jwt (>= 1.0, < 3.0)
+      multi_xml (~> 0.5)
+      rack (>= 1.2, < 4)
+      snaky_hash (~> 2.0)
+      version_gem (~> 1.1)
+    omniauth (1.9.2)
+      hashie (>= 3.4.6)
+      rack (>= 1.6.2, < 3)
+    omniauth-oauth2 (1.7.3)
+      oauth2 (>= 1.4, < 3)
+      omniauth (>= 1.9, < 3)
+    ostruct (0.6.1)
+    pry (0.15.2)
+      coderay (~> 1.1)
+      method_source (~> 1.0)
+    public_suffix (5.1.1)
+    rack (2.2.12)
+    rake (13.2.1)
+    rb-fsevent (0.11.2)
+    rb-inotify (0.11.1)
+      ffi (~> 1.0)
+    rexml (3.4.1)
+    rspec (3.13.0)
+      rspec-core (~> 3.13.0)
+      rspec-expectations (~> 3.13.0)
+      rspec-mocks (~> 3.13.0)
+    rspec-core (3.13.3)
+      rspec-support (~> 3.13.0)
+    rspec-expectations (3.13.3)
+      diff-lcs (>= 1.2.0, < 2.0)
+      rspec-support (~> 3.13.0)
+    rspec-mocks (3.13.2)
+      diff-lcs (>= 1.2.0, < 2.0)
+      rspec-support (~> 3.13.0)
+    rspec-support (3.13.2)
+    ruby2_keywords (0.0.5)
+    shellany (0.0.1)
+    simplecov (0.13.0)
+      docile (~> 1.1.0)
+      json (>= 1.8, < 3)
+      simplecov-html (~> 0.10.0)
+    simplecov-html (0.10.2)
+    snaky_hash (2.0.1)
+      hashie
+      version_gem (~> 1.1, >= 1.1.1)
+    thor (1.3.2)
+    version_gem (1.1.6)
+    webmock (1.24.6)
+      addressable (>= 2.3.6)
+      crack (>= 0.3.2)
+      hashdiff
+
+PLATFORMS
+  ruby
+
+DEPENDENCIES
+  bundler (~> 2.1)
+  codeclimate-test-reporter
+  guard-rspec
+  omniauth-synced!
+  rake (~> 13.0)
+  rspec (~> 3.0)
+  webmock (~> 1.24, >= 1.24.2)
+
+BUNDLED WITH
+   2.1.4

data/Guardfile

@@ -0,0 +1,32 @@
+
+
+# Note: The cmd option is now required due to the increasing number of ways
+#       rspec may be run, below are examples of the most common uses.
+#  * bundler: 'bundle exec rspec'
+#  * bundler binstubs: 'bin/rspec'
+#  * spring: 'bin/rspec' (This will use spring if running and you have
+#                          installed the spring binstubs per the docs)
+#  * zeus: 'zeus rspec' (requires the server to be started separately)
+#  * 'just' rspec: 'rspec'
+
+guard :rspec, cmd: "bundle exec rspec" do
+  require "guard/rspec/dsl"
+  dsl = Guard::RSpec::Dsl.new(self)
+
+  # Feel free to open issues for suggestions and improvements
+
+  # RSpec files
+  rspec = dsl.rspec
+  watch(rspec.spec_helper) { rspec.spec_dir }
+  watch(rspec.spec_support) { rspec.spec_dir }
+  watch(rspec.spec_files)
+
+  # Ruby files
+  ruby = dsl.ruby
+  dsl.watch_spec_files_for(ruby.lib_files)
+
+  # Gem files
+  watch(%r{^spec/.+_spec\.rb$})
+  watch(%r{^lib/(.+)\.rb$})     { |m| "spec/#{m[1]}_spec.rb" }
+  watch('spec/spec_helper.rb')  { "spec" }
+end

data/README.md

@@ -0,0 +1,22 @@
+## OmniAuth SYNCED
+
+This is the official OmniAuth strategy for authenticating to SYNCED.
+
+## Usage
+```
+use OmniAuth::Builder do
+  provider :synced, ENV['SYNCED_KEY'], ENV['SYNCED_SECRET']
+end
+```
+### Change the client options
+```
+use OmniAuth::Builder do
+  provider :synced, ENV['SYNCED_KEY'], ENV['SYNCED_SECRET'], {
+    client_options: {
+      site: 'YOUR_SITE_ADDRESS',
+      authorize_url: 'YOUR_AUTHORIZE_URL',
+      token_url: 'YOUR_TOKEN_URL'
+    }
+  }
+end
+```

data/Rakefile

@@ -0,0 +1,6 @@
+require "bundler/gem_tasks"
+require "rspec/core/rake_task"
+
+RSpec::Core::RakeTask.new(:spec)
+
+task default: :spec

data/bin/console

@@ -0,0 +1,7 @@
+#!/usr/bin/env ruby
+
+require 'bundler/setup'
+require 'omniauth-synced'
+
+require "pry"
+Pry.start

data/bin/setup

@@ -0,0 +1,8 @@
+#!/usr/bin/env bash
+set -euo pipefail
+IFS=$'\n\t'
+set -vx
+
+bundle install
+
+# Do any other automated setup that you need to do here

data/lib/omniauth/strategies/synced.rb

@@ -0,0 +1,33 @@
+module OmniAuth
+  module Strategies
+    class Synced < OmniAuth::Strategies::OAuth2
+      option :client_options, {
+        site: 'https://www.jiqizhixin.com/',
+        authorize_url: '/oauth/authorize',
+        token_url: '/oauth/token'
+      }
+
+      uid { raw_info['id'] }
+
+      info do
+        {
+          username: raw_info['username'],
+          nickname: raw_info['name'],
+          avatar: raw_info['avatar'],
+          email: raw_info['email'],
+          mobile: raw_info['mobile'],
+          bio: raw_info['bio'],
+          verify_mobile: raw_info['verify_mobile'],
+          pubinfo: raw_info['pubinfo'],
+          union_id: raw_info['unionid']
+        }
+      end
+
+      def raw_info
+        @raw_info ||= access_token.get('/api/v3/user').parsed
+      end
+    end
+  end
+end
+
+OmniAuth.config.add_camelization 'synced', 'Synced'

data/lib/omniauth/strategies/wechat.rb

@@ -0,0 +1,79 @@
+module OmniAuth
+  module Strategies
+    class WeChat < OmniAuth::Strategies::OAuth2
+      option :client_options, {
+        site: 'https://api.weixin.qq.com',
+        authorize_url: 'https://open.weixin.qq.com/connect/qrconnect',
+        token_url: 'https://api.weixin.qq.com/sns/oauth2/access_token',
+      }
+
+      option :provider_ignores_state, true
+
+      uid { raw_info['unionid'] }
+
+      info do
+        {
+          nickname: raw_info['nickname'],
+          city: raw_info['city'],
+          avatar: raw_info['headimgurl']
+        }
+      end
+
+      def raw_info
+        @raw_info ||= begin
+                        response = access_token.get(
+                          '/sns/userinfo',
+                          { params: { access_token: access_token.token,
+                                      openid: access_token['openid'],
+                                      lang: 'zh-CN' },
+                                      parse: :json }
+                        ).parsed
+                        log :debug, response
+                        response
+                      end
+      end
+
+      def request_phase
+        redirect client.authorize_url(authorize_params)+'#wechat_redirect'
+      end
+
+      def authorize_params
+        params = options.authorize_params.merge({
+          appid: options.client_id,
+          redirect_uri: callback_url,
+          response_type: 'code',
+          scope: request.params['scope'] || 'snsapi_login',
+        })
+        if OmniAuth.config.test_mode
+          @env ||= {}
+          @env["rack.session"] ||= {}
+        end
+        unless options.provider_ignores_state
+          params[:state] = SecureRandom.hex(24)
+          session["omniauth.state"] = params[:state]
+        end
+        params
+      end
+
+      def token_params
+        { appid: options.client_id, secret: options.client_secret }
+      end
+
+      protected
+
+      def build_access_token
+        request_params = {
+          appid: options.client_id,
+          secret: options.client_secret,
+          code: request.params['code'],
+          grant_type: 'authorization_code',
+          parse: :json
+        }
+        client.get_token(request_params, {mode: :query})
+      end
+
+    end
+  end
+end
+
+OmniAuth.config.add_camelization('wechat', 'WeChat')

data/lib/omniauth/strategies/wechat_service.rb

@@ -0,0 +1,94 @@
+module OmniAuth
+  module Strategies
+    class WeChatService < OmniAuth::Strategies::OAuth2
+      option :client_options, {
+        site: 'https://api.weixin.qq.com',
+        authorize_url: 'https://open.weixin.qq.com/connect/oauth2/authorize',
+        token_url: 'https://api.weixin.qq.com/sns/oauth2/access_token',
+      }
+
+      option :provider_ignores_state, true
+
+      uid { raw_info['unionid'] }
+
+      info do
+        {
+          nickname: raw_info['nickname'],
+          city: raw_info['city'],
+          avatar: raw_info['headimgurl'],
+          openid: access_token['openid']
+        }
+      end
+
+      def raw_info
+        @raw_info ||= begin
+                        response = access_token.get(
+                          '/sns/userinfo',
+                          { params: { access_token: access_token.token,
+                                      openid: access_token['openid'],
+                                      lang: 'zh-CN' },
+                                      parse: :json }
+                        ).parsed
+                        log :debug, response
+                        response
+                      end
+      end
+
+      def request_phase
+        redirect client.authorize_url(authorize_params)+'#wechat_redirect'
+      end
+
+      def authorize_params
+        params = options.authorize_params.merge({
+          appid: options.client_id,
+          redirect_uri: callback_url,
+          response_type: 'code',
+          state: request.params['state'],
+          scope: request.params['scope'] || 'snsapi_userinfo'
+        })
+        if OmniAuth.config.test_mode
+          @env ||= {}
+          @env["rack.session"] ||= {}
+        end
+        unless options.provider_ignores_state
+          params[:state] = SecureRandom.hex(24)
+          session["omniauth.state"] = params[:state]
+        end
+        params
+      end
+
+      def token_params
+        { appid: options.client_id, secret: options.client_secret }
+      end
+
+      def callback_phase
+        # 其它 app 需要获取微信openid 时,将 callbackurl 传入 state 参数
+        if request.params['state'].match(/\Ahttps?:\/\/(.*\.)?geekpark\.net\/.*\z/)
+          uri = URI(request.params['state'])
+          query = Rack::Utils.parse_nested_query(uri.query).merge(code: request.params['code'])
+          uri.query = URI.encode_www_form query
+          env['omniauth.redirect'] = uri.to_s
+          call_app!
+        else
+          super
+        end
+      end
+
+      protected
+
+      def build_access_token
+        request_params = {
+          appid: options.client_id,
+          secret: options.client_secret,
+          code: request.params['code'],
+          grant_type: 'authorization_code',
+          parse: :json
+        }
+        client.get_token(request_params, {mode: :query})
+      end
+
+    end
+  end
+end
+
+OmniAuth.config.add_camelization('wechatservice', 'WeChatService')

data/lib/omniauth/strategies/weibo.rb

@@ -0,0 +1,36 @@
+module OmniAuth
+  module Strategies
+    class Weibo < OmniAuth::Strategies::OAuth2
+      option :client_options, {
+        site: "https://api.weibo.com",
+        authorize_url: "/oauth2/authorize",
+        token_url: "/oauth2/access_token",
+      }
+
+      option :token_params, parse: :json
+
+      uid { raw_info['id'] }
+
+      info do
+        {
+          nickname: raw_info['screen_name'],
+          avatar: raw_info['avatar_large'],
+          bio: raw_info['description']
+        }
+      end
+
+      extra do { raw_info: raw_info } end
+
+      def raw_info
+        @uid ||= begin
+                   access_token.options[:mode] = :query
+                   access_token.get('/2/account/get_uid.json').parsed["uid"]
+                 end
+
+        @raw_info ||= access_token.get('/2/users/show.json', params: {uid: @uid}).parsed
+      end
+    end
+  end
+end
+
+OmniAuth.config.add_camelization "weibo", "Weibo"

data/lib/omniauth-synced/version.rb

@@ -0,0 +1,5 @@
+module OmniAuth
+  module Synced
+    VERSION = '1.0.0'
+  end
+end

data/lib/omniauth-synced.rb

@@ -0,0 +1,7 @@
+require 'omniauth-synced/version'
+require 'omniauth-oauth2'
+require 'patch/omniauth-oauth2'
+require 'omniauth/strategies/wechat'
+require 'omniauth/strategies/wechat_service'
+require 'omniauth/strategies/weibo'
+require 'omniauth/strategies/synced'

data/lib/patch/omniauth-oauth2.rb

@@ -0,0 +1,24 @@
+class OmniAuth::Strategies::OAuth2
+  def callback_phase # rubocop:disable AbcSize, CyclomaticComplexity, MethodLength, PerceivedComplexity
+    error = request.params["error_reason"] || request.params["error"]
+    if error
+      fail!(error, CallbackError.new(request.params["error"], request.params["error_description"] || request.params["error_reason"], request.params["error_uri"]))
+    elsif !options.provider_ignores_state && (request.params["state"].to_s.empty? || request.params["state"] != session.delete("omniauth.state"))
+      fail!(:csrf_detected, CallbackError.new(:csrf_detected, "CSRF detected"))
+    else
+      self.access_token = build_access_token
+      fail!(:token_expired, CallbackError.new(:token_expired,'Token has expired, refresh and try again.')) if access_token.expired?
+      super
+    end
+  rescue ::OAuth2::Error, CallbackError => e
+    fail!(:invalid_credentials, e)
+  rescue ::Timeout::Error, ::Errno::ETIMEDOUT => e
+    fail!(:timeout, e)
+  rescue ::SocketError => e
+    fail!(:failed_to_connect, e)
+  end
+
+  def callback_url
+    full_host + script_name + callback_path
+  end
+end

data/omniauth-synced.gemspec

@@ -0,0 +1,28 @@
+# coding: utf-8
+lib = File.expand_path('../lib', __FILE__)
+$LOAD_PATH.unshift(lib) unless $LOAD_PATH.include?(lib)
+require 'omniauth-synced/version'
+
+Gem::Specification.new do |spec|
+  spec.name          = 'omniauth-synced'
+  spec.version       = OmniAuth::Synced::VERSION
+  spec.authors       = %w(waynels)
+  spec.email         = ["clover_0304@163.com"]
+
+  spec.summary       = %q{ OmniAuth strategies for synced. Includes synced, weibo and wechat. }
+  spec.description   = %q{ Official OmniAuth strategies for synced. }
+  spec.homepage      = "https://github.com/SyncedPSI/omniauth-synced"
+  spec.license       = "MIT"
+
+  spec.files         = `git ls-files -z`.split("\x0").reject { |f| f.match(%r{^(test|spec|features)/}) }
+  spec.bindir        = "exe"
+  spec.executables   = spec.files.grep(%r{^exe/}) { |f| File.basename(f) }
+  spec.require_paths = ["lib"]
+
+  spec.add_dependency 'omniauth', '~> 1.0'
+  spec.add_dependency 'omniauth-oauth2', '~> 1.4'
+  spec.add_development_dependency "bundler", "~> 2.1"
+  spec.add_development_dependency "rake", '~> 13.0'
+  spec.add_development_dependency "rspec", "~> 3.0"
+  spec.add_development_dependency 'webmock', '~> 1.24', '>= 1.24.2'
+end

metadata

@@ -0,0 +1,150 @@
+--- !ruby/object:Gem::Specification
+name: omniauth-synced
+version: !ruby/object:Gem::Version
+  version: 1.0.0
+platform: ruby
+authors:
+- waynels
+autorequire:
+bindir: exe
+cert_chain: []
+date: 2025-03-07 00:00:00.000000000 Z
+dependencies:
+- !ruby/object:Gem::Dependency
+  name: omniauth
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '1.0'
+  type: :runtime
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '1.0'
+- !ruby/object:Gem::Dependency
+  name: omniauth-oauth2
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '1.4'
+  type: :runtime
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '1.4'
+- !ruby/object:Gem::Dependency
+  name: bundler
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '2.1'
+  type: :development
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '2.1'
+- !ruby/object:Gem::Dependency
+  name: rake
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '13.0'
+  type: :development
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '13.0'
+- !ruby/object:Gem::Dependency
+  name: rspec
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '3.0'
+  type: :development
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '3.0'
+- !ruby/object:Gem::Dependency
+  name: webmock
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '1.24'
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: 1.24.2
+  type: :development
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '1.24'
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: 1.24.2
+description: " Official OmniAuth strategies for synced. "
+email:
+- clover_0304@163.com
+executables: []
+extensions: []
+extra_rdoc_files: []
+files:
+- ".gitignore"
+- ".ruby-version"
+- Gemfile
+- Gemfile.lock
+- Guardfile
+- README.md
+- Rakefile
+- bin/console
+- bin/setup
+- lib/omniauth-synced.rb
+- lib/omniauth-synced/version.rb
+- lib/omniauth/strategies/synced.rb
+- lib/omniauth/strategies/wechat.rb
+- lib/omniauth/strategies/wechat_service.rb
+- lib/omniauth/strategies/weibo.rb
+- lib/patch/omniauth-oauth2.rb
+- omniauth-synced.gemspec
+homepage: https://github.com/SyncedPSI/omniauth-synced
+licenses:
+- MIT
+metadata: {}
+post_install_message:
+rdoc_options: []
+require_paths:
+- lib
+required_ruby_version: !ruby/object:Gem::Requirement
+  requirements:
+  - - ">="
+    - !ruby/object:Gem::Version
+      version: '0'
+required_rubygems_version: !ruby/object:Gem::Requirement
+  requirements:
+  - - ">="
+    - !ruby/object:Gem::Version
+      version: '0'
+requirements: []
+rubygems_version: 3.1.6
+signing_key:
+specification_version: 4
+summary: OmniAuth strategies for synced. Includes synced, weibo and wechat.
+test_files: []