omniauth-vis 0.0.9 → 0.1.1

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: b14af6f1e3470751c7d59576d8f4e36955bbac66993a428c4ad25cc7c0c55c93
-  data.tar.gz: 238c6eb40d541a52ed53c28dec01cffce45f3a96ed145b14cb44d34c943e71aa
+  metadata.gz: d8b432afa787a07d440f818da3dd85c4f41fd2e88120d753008412ab604c4a7d
+  data.tar.gz: caedc53baba391f1ea8d753b7645344648c9959b11b0fcafeef0073a9597ee74
 SHA512:
-  metadata.gz: '01120799fc73d04e6efec71f0110728862a4375d46d29a99946420337e8982f5165b95ab443a69ba5fbf3ad0901303afc5d26e2624d38e508afdb4108e77d4a2'
-  data.tar.gz: c07bbb587a80adf75747e9f526b1366c470a060365dd995590742b5955b7cf88fd9a02f0988c79f83f854f2f40dd8d5cdcf449377d24ffd6de7e1d8a41f5bf75
+  metadata.gz: 3bfc2458abb1627789dd5bfc839b1880a5ba2baeae6b86a9aa5f70f87aea8836e434a1a207fd15840ad6353890f82ac47ce3cf21303b3f6f15d76f241885a6b2
+  data.tar.gz: e0de88030cf8d44c98413f2b180890e4f38d1b4d3056dd8b209ec924c6c67194c91eda14cd75774e0fd8b419a6adf7e8477d37f7dadebf9ea9bf836f9ac2a10d

data/README.md

@@ -12,31 +12,17 @@ Contact VIS administrators (sebastian.castro@dhamma.org, ryan.johnson@dhamma.org
 
 - Name
 - Home page url
-- Logo url
 - Authorized callback urls (example: https://myapp.org/users/auth/vis/callback)
 
 ## Install the gem
 
 ```
+gem add omniauth
 gem add omniauth-vis
 ```
 
-## Configure
-
-```
-# config/initializers/vis.rb
-
-Rails.application.config.vis = {
-  server_url: "https://identity.dhamma.org/"
-  app_id: "APP_ID_PROVIDED",
-  app_secret: "APP_SECRET_PROVIDED",
-}
-```
-
 ## Use omniauth strategy
 
-You first need to install `omniauth-oauth2` gem, then add a new provider :
-
 ```
 # config/initializers/omniauth.rb
 
@@ -47,6 +33,15 @@ Rails.application.config.middleware.use OmniAuth::Builder do
 end
 ```
 
+### Customize VIS server
+
+In case you need to work with a custom server, for exmaple a staging server, you can use server_url option
+```
+provider :vis, Rails.application.config.vis["app_id"], Rails.application.config.vis["app_secret"], {
+  server_url: "https://test.identity.dhamma.org"
+}
+```
+
 ## Use VIS API
 
 `Vis::Api` will implement [Oauth2 Client Credentials Flow](https://auth0.com/docs/get-started/authentication-and-authorization-flow/client-credentials-flow) behind the scene
@@ -58,7 +53,7 @@ require "vis/api"
 @vis_api.post("api_path", data)
 ```
 
-Documentation about available api can be found at [https://test.identity.dhamma.org/doc](https://test.identity.dhamma.org/doc)
+Documentation about available api can be found at [https://identity.dhamma.org/doc](https://identity.dhamma.org/doc)
 
 Example
 

data/lib/omniauth/strategies/vis.rb

@@ -8,18 +8,19 @@ module OmniAuth
       option :name, :vis
 
       option :client_options,
-        site: Rails.application.config.vis['server_url'],
         authorize_path: '/oauth/authorize'
 
       option :scope, 'default'
 
-      def on_path?(path)
-        current_path.squeeze('/').casecmp(path.squeeze('/')).zero?
-      end
+      option :server_url, "https://identity.dhamma.org"
+      option :jwt_shared_secret, nil
 
       def setup_phase
+        # configure Oauth2 client_options.site from a custom server_url option
+        options.client_options.site = options.server_url
+
         # Authorize all params to be passed to VIS
-        request.env['omniauth.strategy'].options[:authorize_params] = request.params.to_h
+        options.authorize_params = request.params.to_h
       end
 
       uid do
@@ -30,6 +31,11 @@ module OmniAuth
         raw_info
       end
 
+      # Fix strange bugs with urls containing double / like dhamma.org//oauth/callback
+      def on_path?(path)
+        current_path.squeeze('/').casecmp(path.squeeze('/')).zero?
+      end
+
       # to fix always getting invalid_grant error
       # see https://github.com/omniauth/omniauth-oauth2/issues/81#issuecomment-231442739
       def callback_url
@@ -37,7 +43,20 @@ module OmniAuth
       end
 
       def raw_info
-        @raw_info ||= access_token.get('/api/v1/me.json').parsed
+        return @raw_info if @raw_info.present?
+
+        @raw_info = if options.jwt_shared_secret.present?
+                      # get info from the JWT token, so we save an API call
+                      JWT.decode(
+                        access_token.token,
+                        options.jwt_shared_secret,
+                        true,
+                        { algorithm: "hs512" }
+                      ).first["user"]
+                    else
+                      # get info from API
+                      access_token.get("/api/v1/me.json").parsed
+                    end
       end
     end
   end

data/omniauth-vis.gemspec

@@ -2,7 +2,7 @@
 
 Gem::Specification.new do |gem|
   gem.name          = 'omniauth-vis'
-  gem.version       = '0.0.9'
+  gem.version       = '0.1.1'
   # gem.license       = 'MIT'
   gem.summary       = 'Helper to connect to Vipassna Identity Server'
   gem.description   = 'This allows you to connect to Vipassana identity server with your ruby app'

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: omniauth-vis
 version: !ruby/object:Gem::Version
-  version: 0.0.9
+  version: 0.1.1
 platform: ruby
 authors:
 - Dhamma workers
 autorequire: 
 bindir: bin
 cert_chain: []
-date: 2023-07-06 00:00:00.000000000 Z
+date: 2023-09-29 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: omniauth-oauth2