onelogin 1.6.0 → 3.0.0.pre.alpha.1

data/.github/workflows/git-secrets-public.yml

@@ -1,55 +0,0 @@
-name: git-secrets
-
-on: [push,pull_request]
-
-jobs:
-  build:
-    runs-on: ubuntu-latest
-
-    steps:        
-      - name: Checkout
-        uses: actions/checkout@v2
-        with:
-          path: source
-
-      - name: Install git-secrets
-        shell: bash
-        run: |
-            cd ..
-            echo 'cloning https://github.com/awslabs/git-secrets.git'
-            git clone https://github.com/awslabs/git-secrets.git
-            cd git-secrets
-            echo 'installing git-secrets'
-            sudo make install   
-      - name: Add Rules
-        shell: bash
-        run: |
-          cd source
-          echo 'running git-secrets'
-          pwd
-          git secrets --add '[a-zA-Z]{3,10}://[^/\\s:@]{3,20}:[^/\\s:@]{3,20}@.{1,100}[\"~\\s]'
-          git secrets --add 'AIza[0-9A-Za-z\\-_]{35}'
-          git secrets --add 'LS0tLS1CRUdJTiBQR1AgUFJJVkFURSBLRVkgQkxPQ0stLS0tL[%a-zA-Z0-9+/]+={0,2}'
-          git secrets --add 'LS0tLS1CRUdJTiBSU0EgUFJJVkFURSBLRVktLS0tL[%a-zA-Z0-9+/]+={0,2}'
-          git secrets --add 'LS0tLS1CRUdJTiBEU0EgUFJJVkFURSBLRVktLS0tL[%a-zA-Z0-9+/]+={0,2}'
-          git secrets --add 'LS0tLS1CRUdJTiBFQyBQUklWQVRFIEtFWS0tLS0t[%a-zA-Z0-9+/]+={0,2}'
-          git secrets --add 'LS0tLS1CRUdJTiBPUEVOU1NIIFBSSVZBVEUgS0VZLS0tLS[%a-zA-Z0-9+/]+={0,2}'
-          git secrets --add '(A3T[A-Z0-9]|AKIA|AGPA|AIDA|AROA|AIPA|ANPA|ANVA|ASIA)[A-Z0-9]{16}'
-          git secrets --add '[Tt][Ww][Ii][Tt][Tt][Ee][Rr][^/]{0,50}[0-9a-zA-Z]{35,44}'
-          git secrets --add '[Hh][Oo][Cc][Kk][Ee][Yy].{0,50}(\\\"|~|`)?[0-9a-f]{32}(\\\"|~|`)?'
-          git secrets --add '(QTNU|QUtJQ|QUdQQ|QUlEQ|QVJPQ|QUlQQ|QU5QQ|QU5WQ|QVNJQ)[%a-zA-Z0-9+/]{20,24}={0,2}'
-          git secrets --add 'ya29\\.[0-9A-Za-z\\-_]+'
-          git secrets --add 'https://hooks.slack.com/services/T[a-zA-Z0-9_]{8}/B[a-zA-Z0-9_]{8}/[a-zA-Z0-9_]{24}'
-          git secrets --add '[0-9a-f]{32}-us[0-9]{1,2}'
-          git secrets --add '[Ss][Aa][Uu][Cc][Ee].{0,50}(\\\"|~|`)?[0-9a-f-]{36}(\\\"|~|`)?'
-          git secrets --add '[Ff][Aa][Cc][Ee][Bb][Oo][Oo][Kk][^/]{0,50}(\\\"|~|`)?[0-9a-f]{32}(\\\"|~|`)?'
-          git secrets --add --allowed 'https:\/\/\#\{GITHUB_TOKEN\}:\#\{GITHUB_USERNAME\}@github.*'
-          git secrets --add --allowed 'AKIA[a-zA-Z0-9]{16}'
-          git secrets --add --allowed 'AIzaSyCi9HqVYImAgkqMCG0QmBUXAIfM5lyv_QU'
-          sed -i -e "s/~/'/g" .git/config
-      - name: Run Scan
-        shell: bash
-        run: |
-          cd source
-          git secrets --scan
-          echo 'Secrets found in this repo? You can install git-secrets locally to catch these issues pre-commit : https://github.com/awslabs/git-secrets'

data/.gitignore

@@ -1,12 +0,0 @@
-/.bundle/
-/.yardoc
-/Gemfile.lock
-/_yardoc/
-/coverage/
-/doc/
-/pkg/
-/spec/reports/
-/tmp/
-
-.DS_Store
-.rspec_status

data/.travis.yml

@@ -1,6 +0,0 @@
-sudo: false
-language: ruby
-rvm:
-  - 1.9.3
-  - 2.4.1
-before_install: gem install bundler -v 1.15.3

data/bin/console

@@ -1,14 +0,0 @@
-#!/usr/bin/env ruby
-
-require "bundler/setup"
-require "onelogin"
-
-# You can add fixtures and/or initialization code here to make experimenting
-# with your gem easier. You can also use a different console, if you like.
-
-# (If you use this, don't forget to add pry to your Gemfile!)
-# require "pry"
-# Pry.start
-
-require "irb"
-IRB.start(__FILE__)

data/bin/setup

@@ -1,6 +0,0 @@
-#!/usr/bin/env bash
-set -euo pipefail
-IFS=$'\n\t'
-set -vx
-
-bundle install

data/examples/Gemfile

@@ -1,3 +0,0 @@
-source 'https://rubygems.org'
-
-gem 'onelogin'

data/examples/Gemfile.lock

@@ -1,25 +0,0 @@
-GEM
-  remote: https://rubygems.org/
-  specs:
-    httparty (0.18.0)
-      mime-types (~> 3.0)
-      multi_xml (>= 0.5.2)
-    mime-types (3.3.1)
-      mime-types-data (~> 3.2015)
-    mime-types-data (3.2020.0425)
-    mini_portile2 (2.4.0)
-    multi_xml (0.6.0)
-    nokogiri (1.10.9)
-      mini_portile2 (~> 2.4.0)
-    onelogin (1.6.0)
-      httparty (>= 0.13.7)
-      nokogiri (>= 1.6.3.1)
-
-PLATFORMS
-  ruby
-
-DEPENDENCIES
-  onelogin
-
-BUNDLED WITH
-   2.1.4

data/examples/README.md

@@ -1,19 +0,0 @@
-# Ruby SDK Examples
-
-This folder contains various samples that make use of the OneLogin
-Ruby SDK.
-
-It assumes that you have a valid OneLogin `client_id` and `client_secret`
-with the appropriate level of access for each example.
-
-## Try the examples in terminal
-
-First install the OneLogin gem and any other required gems
-```shell
-bundle install
-```
-
-Then update your API credentials in the example file and run it
-```shell
-ruby create-user.rb
-```

data/examples/all-users-to-csv.rb

@@ -1,48 +0,0 @@
-require 'onelogin'
-
-#
-# This example shows how you can export user details from OneLogin using the Ruby SDK
-#
-# Usage:
-# 1. Set your own CLIENT_ID and CLIENT_SECRET below
-# 2. From terminal run "ruby all-users-to-csv.rb" to extract all users including
-#    any custom attributes that might have been defined for the each user
-#
-
-client = OneLogin::Api::Client.new(
-    client_id: 'ONELOGIN_CLIENT_ID',
-    client_secret:'ONELOGIN_CLIENT_SECRET',
-    region: 'us',
-    max_results: 50000
-)
-
-attribute_names = ['id', 'external_id', 'email', 'username', 'firstname', 'lastname', 'distinguished_name',
-                  'phone', 'company', 'department', 'status', 'member_of', 'samaccountname', 'userprincipalname',
-                  'group_id', 'role_ids', 'custom_attributes', 'openid_name', 'locale_code', 'comment', 'directory_id',
-                  'manager_ad_id', 'trusted_idp_id', 'activated_at', 'created_at', 'updated_at',
-                  'password_changed_at', 'invitation_sent_at', 'invalid_login_attempts', 'last_login', 'locked_until']
-
-custom_attribute_names = client.get_custom_attributes
-
-CSV.open('users.csv', 'wb') do |csv|
-  # header row
-  csv << attribute_names + custom_attribute_names
-
-  client.get_users.each do |user|
-
-    row = []
-
-    # standard attributes
-    attribute_names.each do |attribute_name|
-      row << user.send(attribute_name)
-    end
-
-    # custom attributes
-    custom_attribute_names.each do |attribute_name|
-      row << user.custom_attributes[attribute_name] unless user.custom_attributes.empty?
-    end
-
-    csv << row
-  end
-end
-

data/examples/another-get-all-login-events-of-last-day-to-csv.rb

@@ -1,141 +0,0 @@
-require 'onelogin'
-
-client = OneLogin::Api::Client.new(
-    client_id: '9a19e9b07257c30ed3eddc0f9cf8d4127b4387646940acc8432c0dbcbd5f0c0d',
-    client_secret: 'd5cfcbe70b626f1d131f632c398b5b0d60dbc149b9ad9a55ac33715c7239acf7',
-    region: 'us',
-    max_results: 50000
-)
-
-client.access_token
-
-unless client.error.nil?
-  puts "Error #{client.error}  #{client.error_description}"
-  exit
-end
-
-
-user_attribute_names = ['id', 'username', 'email']
-event_attribute_names = ['created_at', 'user_id', 'user_name', 'ipaddr', 'app_id', 'app_name']
-csv_event_header = ['Timestamp', 'Description',  'Username', 'App', 'IP Address', 'User Id', 'Email', 'App Id']
-
-user_options = {}
-user_options[:fields] = user_attribute_names.join(",")
-
-
-now = Date.today
-days_ago = (now - 1)
-event_options = {}
-event_options[:since] = days_ago.strftime('%Y-%m-%dT%H:%M:%SZ')
-event_options[:event_type_id] = 8;
-event_options[:fields] = event_attribute_names.join(",")
-event_options[:sort] = "-created_at"
-
-now_str = Time.now.strftime("%Y-%m-%d_%H-%M-%S")
-login_app_event_csv_name = now_str + '_login_app_events.csv'
-login_event_csv_name = now_str + '_login_events.csv'
-radius_event_csv_name = now_str + '_radius_events.csv'
-
-users = {}
-counter = 0
-
-rate_limits = client.get_rate_limits
-remaining_before = rate_limits.remaining
-puts "Remaining RateLimit: #{remaining_before}"
-
-puts "Extracting users from OneLogin"
-
-client.get_users(user_options).each do |user|
-  users[user.id] = user
-  counter +=1
-end
-puts "#{counter} users extracted"
-
-csv_login_app_event_header = ['Timestamp', 'Description', 'Username', 'App', 'IP Address', 'User Id', 'App Id', 'Email']
-csv_login_event_header = ['Timestamp', 'Description', 'Username', 'IP Address', 'User Id', 'Email']
-
-puts "Extracting login app events from OneLogin"
-counter = 0
-CSV.open(login_app_event_csv_name, 'wb') do |csv|
-  # header row
-  csv << csv_login_app_event_header
-
-  # fetch the events
-  client.get_events(event_options).each do |event|
-    username = email = ""
-    description = "#{event.user_name} signed into #{event.app_name}"
-    unless users.nil?
-      if users.has_key?(event.user_id)
-        username = users[event.user_id].username
-        email = users[event.user_id].email
-      end
-    end
-    csv << [event.created_at, description, username, event.app_name, event.ipaddr, event.user_id, event.app_id, email]
-    counter +=1
-  end
-end
-puts "Exported #{counter} login app events to  #{login_app_event_csv_name}"
-
-rate_limits = client.get_rate_limits
-remaining_after = rate_limits.remaining
-puts "Remaining RateLimit: #{remaining_after}"
-
-
-event_options[:event_type_id] = 5;
-puts "Extracting login events from OneLogin"
-counter = 0
-CSV.open(login_event_csv_name, 'wb') do |csv|
-  # header row
-  csv << csv_login_event_header
-
-  # fetch the events
-  client.get_events(event_options).each do |event|
-    username = email = ""
-    description = "#{event.user_name} logged into OneLogin"
-    unless users.nil?
-      if users.has_key?(event.user_id)
-        username = users[event.user_id].username
-        email = users[event.user_id].email
-      end
-    end
-    csv << [event.created_at, description, username, event.ipaddr, event.user_id, email]
-    counter +=1
-  end
-end
-puts "Exported #{counter} login events to #{login_event_csv_name}"
-
-rate_limits = client.get_rate_limits
-remaining_after = rate_limits.remaining
-puts "Remaining RateLimit: #{remaining_after}"
-
-
-event_options[:event_type_id] = 68;
-puts "Extracting login radius events from OneLogin"
-counter = 0
-CSV.open(radius_event_csv_name, 'wb') do |csv|
-  # header row
-  csv << csv_login_event_header
-
-  # fetch the events
-  client.get_events(event_options).each do |event|
-    username = email = ""
-    description = "#{event.user_name} logged via Radius"
-    unless users.nil?
-      if users.has_key?(event.user_id)
-        username = users[event.user_id].username
-        email = users[event.user_id].email
-      end
-    end
-    csv << [event.created_at, description, username, event.ipaddr, event.user_id, email]
-    counter +=1
-  end
-end
-puts "Exported #{counter} radius events to #{radius_event_csv_name}"
-
-rate_limits = client.get_rate_limits
-remaining_after = rate_limits.remaining
-puts "Remaining RateLimit: #{remaining_after}"
-
-
-consumed = remaining_before - remaining_after
-puts "The script consumed #{consumed} calls"

data/examples/create-user.rb

@@ -1,16 +0,0 @@
-require 'onelogin'
-
-client = OneLogin::Api::Client.new(
-    client_id: 'ONELOGIN_CLIENT_ID',
-    client_secret:'ONELOGIN_CLIENT_SECRET',
-    region: 'us'
-)
-
-user = client.create_user(
-  firstname: "Mick",
-  lastname: "Fanning",
-  email: "mick@onelogin.com",
-  username: "mick"
-)
-
-puts user

data/examples/events-to-csv.rb

@@ -1,93 +0,0 @@
-require 'onelogin'
-require 'optparse'
-require 'optparse/time'
-
-#
-# This example shows how you can export events from OneLogin using the Ruby SDK
-#
-# Usage:
-# 1. Set your own CLIENT_ID and CLIENT_SECRET below
-# 2. From terminal run "ruby events-to-csv.rb" for the last 1000 events
-# 3. Use the command line args to filter events
-#
-# e.g. "ruby events-to-csv.rb -t 5 -s 2018-01-01" for login events since Jan 1 2018
-#
-
-
-# Parse CLI arguments
-options = {}
-
-OptionParser.new do |opts|
-  opts.banner = "Usage: events-to-csv.rb [options]"
-
-  opts.on("-sSINCE", "--since=SINCE", Time, "Events after this date") do |s|
-    options[:since] = s.iso8601
-  end
-
-  opts.on("-dLAST", "--last=LAST", Integer, "Events since this many days ago") do |d|
-    now = Date.today
-    days_ago = (now - d)
-    options[:since] = days_ago.strftime('%Y-%m-%dT%H:%M:%SZ')
-  end
-
-  opts.on("-bUNTIL", "--until=UNTIL", Time, "Events before this date") do |u|
-    options[:until] = u.iso8601
-  end
-
-  opts.on("-lLIMIT", "--limit=LIMIT", Integer, "Only return this many events, Default 1000") do |l|
-    options[:limit] = l
-  end
-
-  opts.on("-tTYPE", "--type=TYPE", Integer, "Filter by event type id") do |t|
-    options[:event_type_id] = t
-  end
-
-  opts.on("-uUSER", "--user=USER", Integer, "Filter by user id") do |u|
-    options[:user_id] = u
-  end
-
-  # Sort direction is done by adding a + or - before the field name that you want to sort on
-  opts.on("-zSORT", "--sort=SORT", String, "Sort by this field") do |s|
-    options[:sort] = s
-  end
-end.parse!
-
-# Fetch the events
-client = OneLogin::Api::Client.new(
-  client_id: 'ONELOGIN_CLIENT_ID_GOES_HERE',
-  client_secret: 'ONELOGIN_CLIENT_SECRET_GOES_HERE',
-  region: 'us'
-)
-
-attribute_names = ['id', 'created_at', 'account_id', 'user_id', 'user_name', 'event_type_id',
-                  'notes', 'ipaddr', 'actor_user_id', 'actor_user_name', 'assuming_acting_user_id',
-                  'role_id', 'role_name', 'app_id', 'app_name', 'group_id', 'group_name', 'otp_device_id',
-                  'otp_device_name', 'policy_id', 'policy_name', 'actor_system', 'custom_message',
-                  'operation_name', 'directory_sync_run_id', 'directory_id', 'resolution', 'client_id',
-                  'resource_type_id', 'error_description', 'risk_score', 'risk_reasons', 'risk_cookie_id', 'browser_fingerprint']
-
-counter = 0
-limit = options[:limit] || 1000
-
-# We remove limit from options parsed to the api as we want to fetch
-# the max number of records possible and then use the cursor that is
-# built into the ruby sdk to limit the results
-options.delete(:limit)
-
-CSV.open('events.csv', 'wb') do |csv|
-  puts "Exporting events to events.csv"
-
-  # header row
-  csv << attribute_names
-
-  # fetch the events
-  client.get_events(options).take(limit).each do |event|
-    csv << attribute_names.map { |attribute_name| event.send(attribute_name) if event.respond_to?(attribute_name) }
-    counter += 1
-  end
-end
-
-puts "Exported #{counter} events to events.csv"
-
-
-

data/examples/get-all-login-events-of-last-day-to-csv.rb

@@ -1,88 +0,0 @@
-require 'onelogin'
-
-#
-# This example shows how you can export user details from OneLogin using the Ruby SDK
-#
-# Usage:
-# 1. Set your own CLIENT_ID and CLIENT_SECRET below
-# 2. From terminal run "ruby all-users-to-csv.rb" to extract all users including
-#    any custom attributes that might have been defined for the each user
-#
-
-#client = OneLogin::Api::Client.new(
-#    client_id: 'ONELOGIN_CLIENT_ID',
-#    client_secret:'ONELOGIN_CLIENT_SECRET',
-#    region: 'us',
-#    max_results: 50000
-#)
-client = OneLogin::Api::Client.new(
-    client_id: 'ONELOGIN_CLIENT_ID_GOES_HERE',
-    client_secret: 'ONELOGIN_CLIENT_SECRET_GOES_HERE',
-    region: 'us',
-    max_results: 50000
-)
-
-
-user_attribute_names = ['id', 'username', 'email']
-event_attribute_names = ['created_at', 'user_id', 'user_name', 'ipaddr', 'app_id', 'app_name']
-csv_event_header = ['Timestamp', 'Description',  'Username', 'App', 'IP Address', 'User Id', 'Email', 'App Id']
-
-user_options = {}
-user_options[:fields] = user_attribute_names.join(",")
-
-
-now = Date.today
-days_ago = (now - 1)
-event_options = {}
-event_options[:since] = days_ago.strftime('%Y-%m-%dT%H:%M:%SZ')
-event_options[:event_type_id] = 8;
-event_options[:fields] = event_attribute_names.join(",")
-event_options[:sort] = "-created_at"
-
-now_str = Time.now.strftime("%Y-%m-%d_%H-%M-%S")
-event_csv_name = now_str + '_events.csv'
-
-users = {}
-counter = 0
-
-rate_limits = client.get_rate_limits
-remaining_before = rate_limits.remaining
-puts "Remaining RateLimit: #{remaining_before}"
-
-puts "Extracting users from OneLogin"
-
-client.get_users(user_options).each do |user|
-  users[user.id] = user
-  counter +=1
-end
-puts "#{counter} users extracted"
-
-puts "Extracting events from OneLogin"
-csv_event_header = ['Timestamp', 'Description', 'Username', 'App', 'IP Address', 'User Id', 'App Id', 'Email']
-counter = 0
-CSV.open(event_csv_name, 'wb') do |csv|
-  # header row
-  csv << csv_event_header
-
-  # fetch the events
-  client.get_events(event_options).each do |event|
-    username = email = ""
-    description = "#{event.user_name} signed into #{event.app_name}"
-    unless users.nil?
-      if users.has_key?(event.user_id)
-        username = users[event.user_id].username
-        email = users[event.user_id].email
-      end
-    end
-    csv << [event.created_at, description, username, event.app_name, event.ipaddr, event.user_id, event.app_id, email]
-    counter +=1
-  end
-end
-puts "Exported #{counter} events to events.csv"
-
-rate_limits = client.get_rate_limits
-remaining_after = rate_limits.remaining
-puts "Remaining RateLimit: #{remaining_after}"
-
-consumed = remaining_before - remaining_after
-puts "The script consumed #{consumed} calls"

data/examples/last-app-user-login-to-csv.rb

@@ -1,72 +0,0 @@
-require 'onelogin'
-require 'optparse'
-require 'optparse/time'
-
-#
-# This generates a report listing the last login date for all users who have logged into a specified app in the last x days.
-#
-# Usage:
-# 1. Set your own CLIENT_ID and CLIENT_SECRET below
-# 2. From terminal run "ruby last-app-user-login-to-csv.rb"
-# 3. Use the command line args to filter events
-#
-# e.g. "ruby last-app-user-login-to-csv.rb -l 90" for last 90 days
-#
-
-
-# Parse CLI arguments
-options = {
-  event_type_id: 8, # User Logged into an App
-  sort: '-created_at'
-}
-
-OptionParser.new do |opts|
-  opts.banner = "Usage: last-app-user-login-to-csv.rb [options]"
-
-  opts.on("-lLAST", "--LAST=LAST", Integer, "Events since this many days ago") do |d|
-    now = Date.today
-    days_ago = (now - d)
-    options[:since] = days_ago.strftime('%Y-%m-%dT%H:%M:%SZ')
-  end
-
-end.parse!
-
-client = OneLogin::Api::Client.new(
-  client_id: 'ONELOGIN_CLIENT_ID_GOES_HERE',
-  client_secret: 'ONELOGIN_CLIENT_SECRET_GOES_HERE',
-  region: 'us',
-  max_results: 50000
-)
-
-counter = 0
-
-logins = {}
-
-# build a hash from events which contains user_id and latest login date
-client.get_events(options).each do |event|
-  key = "#{event.app_id}-#{event.user_id}"
-
-  unless logins[key]
-    logins[key] = {
-      app_id: event.app_id,
-      app_name: event.app_name,
-      user_id: event.user_id,
-      user_name: event.user_name,
-      last_login_at: event.created_at
-    }
-  end
-end
-
-CSV.open('last-login-by-app.csv', 'wb') do |csv|
-  puts "Exporting user logins to last-login-by-app.csv"
-
-  # header row
-  csv << ['app_id', 'app_name', 'user_id', 'user_name', 'last_login_at']
-
-  logins.each do |login|
-    csv << login[1].values
-    counter += 1
-  end
-end
-
-puts "Exported #{counter} user logins to last-login-by-app.csv"

data/examples/list-users.rb

@@ -1,15 +0,0 @@
-require 'onelogin'
-
-client = OneLogin::Api::Client.new(
-    client_id: 'ONELOGIN_CLIENT_ID',
-    client_secret:'ONELOGIN_CLIENT_SECRET',
-    region: 'us'
-)
-
-# List all of the users in your account
-# the sdk uses a cursor to keep requesting
-# chunks of users as you loop through
-
-client.get_users.each do |user|
-  puts "#{user.id} - #{user.firstname} - #{user.email}"
-end

data/examples/rails-custom-login-page/.gitignore

@@ -1,45 +0,0 @@
-*.rbc
-capybara-*.html
-.rspec
-/log
-/tmp
-/db/*.sqlite3
-/db/*.sqlite3-journal
-/public/system
-/coverage/
-/spec/tmp
-*.orig
-rerun.txt
-pickle-email-*.html
-
-
-# TODO Comment out this rule if you are OK with secrets being uploaded to the repo
-config/initializers/secret_token.rb
-
-# Only include if you have production secrets in this file, which is no longer a Rails default
-config/secrets.yml
-
-# dotenv
-# TODO Comment out this rule if environment variables can be committed
-.env
-
-## Environment normalization:
-/.bundle
-/vendor/bundle
-
-# these should all be checked in to normalize the environment:
-Gemfile.lock, .ruby-version, .ruby-gemset
-
-# unless supporting rvm < 1.11.0 or doing something fancy, ignore this:
-.rvmrc
-
-# if using bower-rails ignore default bower_components path bower.json files
-/vendor/assets/bower_components
-*.bowerrc
-bower.json
-
-# Ignore pow environment settings
-.powenv
-
-# Ignore Byebug command history file.
-.byebug_history

data/examples/rails-custom-login-page/.ruby-version

@@ -1 +0,0 @@
-2.2.5