onelogin 1.6.0 → 3.0.0.pre.alpha.1

data/examples/rails-custom-login-page/Gemfile

@@ -1,57 +0,0 @@
-source 'https://rubygems.org'
-
-git_source(:github) do |repo_name|
-  repo_name = "#{repo_name}/#{repo_name}" unless repo_name.include?("/")
-  "https://github.com/#{repo_name}.git"
-end
-
-
-# Bundle edge Rails instead: gem 'rails', github: 'rails/rails'
-gem 'rails', '~> 5.1.4'
-# Use sqlite3 as the database for Active Record
-gem 'sqlite3'
-# Use Puma as the app server
-gem 'puma', '~> 3.12'
-# Use SCSS for stylesheets
-gem 'sass-rails', '~> 5.0'
-# Use Uglifier as compressor for JavaScript assets
-gem 'uglifier', '>= 1.3.0'
-# See https://github.com/rails/execjs#readme for more supported runtimes
-# gem 'therubyracer', platforms: :ruby
-
-# Use CoffeeScript for .coffee assets and views
-gem 'coffee-rails', '~> 4.2'
-# Turbolinks makes navigating your web application faster. Read more: https://github.com/turbolinks/turbolinks
-gem 'turbolinks', '~> 5'
-# Build JSON APIs with ease. Read more: https://github.com/rails/jbuilder
-gem 'jbuilder', '~> 2.5'
-# Use Redis adapter to run Action Cable in production
-# gem 'redis', '~> 3.0'
-# Use ActiveModel has_secure_password
-# gem 'bcrypt', '~> 3.1.7'
-
-# Use Capistrano for deployment
-# gem 'capistrano-rails', group: :development
-
-gem 'onelogin', '~> 1.6.0'
-gem 'jquery-rails'
-
-group :development, :test do
-  # Call 'byebug' anywhere in the code to stop execution and get a debugger console
-  gem 'byebug', platforms: [:mri, :mingw, :x64_mingw]
-  # Adds support for Capybara system testing and selenium driver
-  gem 'capybara', '~> 2.13'
-  gem 'selenium-webdriver'
-end
-
-group :development do
-  # Access an IRB console on exception pages or by using <%= console %> anywhere in the code.
-  gem 'web-console', '>= 3.3.0'
-  gem 'listen', '>= 3.0.5', '< 3.2'
-  # Spring speeds up development by keeping your application running in the background. Read more: https://github.com/rails/spring
-  gem 'spring'
-  gem 'spring-watcher-listen', '~> 2.0.0'
-end
-
-# Windows does not include zoneinfo files, so bundle the tzinfo-data gem
-gem 'tzinfo-data', platforms: [:mingw, :mswin, :x64_mingw, :jruby]

data/examples/rails-custom-login-page/Gemfile.lock

@@ -1,212 +0,0 @@
-GEM
-  remote: https://rubygems.org/
-  specs:
-    actioncable (5.1.5)
-      actionpack (= 5.1.5)
-      nio4r (~> 2.0)
-      websocket-driver (~> 0.6.1)
-    actionmailer (5.1.5)
-      actionpack (= 5.1.5)
-      actionview (= 5.1.5)
-      activejob (= 5.1.5)
-      mail (~> 2.5, >= 2.5.4)
-      rails-dom-testing (~> 2.0)
-    actionpack (5.1.5)
-      actionview (= 5.1.5)
-      activesupport (= 5.1.5)
-      rack (~> 2.0)
-      rack-test (>= 0.6.3)
-      rails-dom-testing (~> 2.0)
-      rails-html-sanitizer (~> 1.0, >= 1.0.2)
-    actionview (5.1.5)
-      activesupport (= 5.1.5)
-      builder (~> 3.1)
-      erubi (~> 1.4)
-      rails-dom-testing (~> 2.0)
-      rails-html-sanitizer (~> 1.0, >= 1.0.3)
-    activejob (5.1.5)
-      activesupport (= 5.1.5)
-      globalid (>= 0.3.6)
-    activemodel (5.1.5)
-      activesupport (= 5.1.5)
-    activerecord (5.1.5)
-      activemodel (= 5.1.5)
-      activesupport (= 5.1.5)
-      arel (~> 8.0)
-    activesupport (5.1.5)
-      concurrent-ruby (~> 1.0, >= 1.0.2)
-      i18n (~> 0.7)
-      minitest (~> 5.1)
-      tzinfo (~> 1.1)
-    addressable (2.5.2)
-      public_suffix (>= 2.0.2, < 4.0)
-    arel (8.0.0)
-    bindex (0.5.0)
-    builder (3.2.3)
-    byebug (10.0.1)
-    capybara (2.18.0)
-      addressable
-      mini_mime (>= 0.1.3)
-      nokogiri (>= 1.3.3)
-      rack (>= 1.0.0)
-      rack-test (>= 0.5.4)
-      xpath (>= 2.0, < 4.0)
-    childprocess (0.9.0)
-      ffi (~> 1.0, >= 1.0.11)
-    coffee-rails (4.2.2)
-      coffee-script (>= 2.2.0)
-      railties (>= 4.0.0)
-    coffee-script (2.4.1)
-      coffee-script-source
-      execjs
-    coffee-script-source (1.12.2)
-    concurrent-ruby (1.1.5)
-    crass (1.0.5)
-    erubi (1.7.1)
-    execjs (2.7.0)
-    ffi (1.11.1)
-    globalid (0.4.1)
-      activesupport (>= 4.2.0)
-    httparty (0.18.1)
-      mime-types (~> 3.0)
-      multi_xml (>= 0.5.2)
-    i18n (0.9.5)
-      concurrent-ruby (~> 1.0)
-    jbuilder (2.7.0)
-      activesupport (>= 4.2.0)
-      multi_json (>= 1.2)
-    jquery-rails (4.3.1)
-      rails-dom-testing (>= 1, < 3)
-      railties (>= 4.2.0)
-      thor (>= 0.14, < 2.0)
-    listen (3.1.5)
-      rb-fsevent (~> 0.9, >= 0.9.4)
-      rb-inotify (~> 0.9, >= 0.9.7)
-      ruby_dep (~> 1.2)
-    loofah (2.3.1)
-      crass (~> 1.0.2)
-      nokogiri (>= 1.5.9)
-    mail (2.7.0)
-      mini_mime (>= 0.1.1)
-    method_source (0.9.0)
-    mime-types (3.3.1)
-      mime-types-data (~> 3.2015)
-    mime-types-data (3.2020.1104)
-    mini_mime (1.0.0)
-    mini_portile2 (2.4.0)
-    minitest (5.11.3)
-    multi_json (1.13.1)
-    multi_xml (0.6.0)
-    nio4r (2.3.0)
-    nokogiri (1.10.4)
-      mini_portile2 (~> 2.4.0)
-    onelogin (1.6.0)
-      httparty (>= 0.13.7)
-      nokogiri (>= 1.6.3.1)
-    public_suffix (3.0.2)
-    puma (3.12.2)
-    rack (2.0.8)
-    rack-test (0.8.3)
-      rack (>= 1.0, < 3)
-    rails (5.1.5)
-      actioncable (= 5.1.5)
-      actionmailer (= 5.1.5)
-      actionpack (= 5.1.5)
-      actionview (= 5.1.5)
-      activejob (= 5.1.5)
-      activemodel (= 5.1.5)
-      activerecord (= 5.1.5)
-      activesupport (= 5.1.5)
-      bundler (>= 1.3.0)
-      railties (= 5.1.5)
-      sprockets-rails (>= 2.0.0)
-    rails-dom-testing (2.0.3)
-      activesupport (>= 4.2.0)
-      nokogiri (>= 1.6)
-    rails-html-sanitizer (1.0.4)
-      loofah (~> 2.2, >= 2.2.2)
-    railties (5.1.5)
-      actionpack (= 5.1.5)
-      activesupport (= 5.1.5)
-      method_source
-      rake (>= 0.8.7)
-      thor (>= 0.18.1, < 2.0)
-    rake (12.3.1)
-    rb-fsevent (0.10.3)
-    rb-inotify (0.9.10)
-      ffi (>= 0.5.0, < 2)
-    ruby_dep (1.5.0)
-    rubyzip (1.3.0)
-    sass (3.5.5)
-      sass-listen (~> 4.0.0)
-    sass-listen (4.0.0)
-      rb-fsevent (~> 0.9, >= 0.9.4)
-      rb-inotify (~> 0.9, >= 0.9.7)
-    sass-rails (5.0.7)
-      railties (>= 4.0.0, < 6)
-      sass (~> 3.1)
-      sprockets (>= 2.8, < 4.0)
-      sprockets-rails (>= 2.0, < 4.0)
-      tilt (>= 1.1, < 3)
-    selenium-webdriver (3.11.0)
-      childprocess (~> 0.5)
-      rubyzip (~> 1.2)
-    spring (2.0.2)
-      activesupport (>= 4.2)
-    spring-watcher-listen (2.0.1)
-      listen (>= 2.7, < 4.0)
-      spring (>= 1.2, < 3.0)
-    sprockets (3.7.2)
-      concurrent-ruby (~> 1.0)
-      rack (> 1, < 3)
-    sprockets-rails (3.2.1)
-      actionpack (>= 4.0)
-      activesupport (>= 4.0)
-      sprockets (>= 3.0.0)
-    sqlite3 (1.3.13)
-    thor (0.20.0)
-    thread_safe (0.3.6)
-    tilt (2.0.8)
-    turbolinks (5.1.0)
-      turbolinks-source (~> 5.1)
-    turbolinks-source (5.1.0)
-    tzinfo (1.2.5)
-      thread_safe (~> 0.1)
-    uglifier (4.1.8)
-      execjs (>= 0.3.0, < 3)
-    web-console (3.5.1)
-      actionview (>= 5.0)
-      activemodel (>= 5.0)
-      bindex (>= 0.4.0)
-      railties (>= 5.0)
-    websocket-driver (0.6.5)
-      websocket-extensions (>= 0.1.0)
-    websocket-extensions (0.1.3)
-    xpath (3.0.0)
-      nokogiri (~> 1.8)
-
-PLATFORMS
-  ruby
-
-DEPENDENCIES
-  byebug
-  capybara (~> 2.13)
-  coffee-rails (~> 4.2)
-  jbuilder (~> 2.5)
-  jquery-rails
-  listen (>= 3.0.5, < 3.2)
-  onelogin (~> 1.5.0)
-  puma (~> 3.12)
-  rails (~> 5.1.4)
-  sass-rails (~> 5.0)
-  selenium-webdriver
-  spring
-  spring-watcher-listen (~> 2.0.0)
-  sqlite3
-  turbolinks (~> 5)
-  tzinfo-data
-  uglifier (>= 1.3.0)
-  web-console (>= 3.3.0)
-
-BUNDLED WITH
-   1.17.3

data/examples/rails-custom-login-page/README.md

@@ -1,137 +0,0 @@
-# Customized Login Page
-
-This sample is a default [Ruby on Rails 5](http://rubyonrails.org/) app that makes use of the OneLogin ruby sdk for authenticating users.
-
-It is the recommended approach when building a customized login flow where you want complete control
-over the look & feel.
-
-The downside to this approach is that you have to implement MFA and password resets etc yourself. However we do have the APIs for these actions available and have demonstrated how to use them in this app.
-
-If you want a standards based, out of the box way to authenticate users then we recommend you use [our OpenId Connect implementation](https://github.com/onelogin/onelogin-oidc-ruby).
-
-## Get Started
-
-The sample tries to keep everything as simple as possible so only
-implements
-* Login - Authenticate users in a single request to OneLogin with out any redirects
-* MFA - Does MFA verification if required
-* Password Reset with user verification via MFA
-* Self sign Up / Create a new user
-* Onboard / Activate a user
-* User Apps - List apps available to a user and provides SSO links
-* User Roles - Lists a users roles
-* Logout - destroying the local session and revoking the token at OneLogin
-
-In order to run this sample you need API credentials for a OneLogin account. If you don't have a OneLogin developer account [you can sign up here](https://www.onelogin.com/developer-signup).
-
-1. Clone this repo
-
-```sh
-git clone https://github.com/onelogin/onelogin-ruby-sdk.git
-```
-
-2. Move to the rails example and install the required gems
-```sh
-cd onelogin-ruby-sdk/examples/rails-custom-login-page && bundle install
-```
-
-3. Rename `config/secrets.yml.sample` to `config/secrets.yml` and update with your OneLogin API credentials, region and subdomain.
-
-If you are using a custom domain instance, set it
-in order to be used for the login demo.
-
-If you want to set the cookie via post-form set
-COOKIE_VIA_POST_FORM to true, otherwise the cookie
-will be set via javascript via the makeCors method
-described later.
-
-```yaml
-development:
-  secret_key_base: xxx
-  ONELOGIN_CLIENT_ID: xxx
-  ONELOGIN_CLIENT_SECRET: xxx
-  ONELOGIN_REGION: us
-  ONELOGIN_SUBDOMAIN: xxx
-  CUSTOM_DOMAIN: xxx
-  COOKIE_VIA_POST_FORM: true
-```
-4. Run the sample and browse to `http://localhost:3000`
-```sh
-rails s
-```
-
-The `/dashboard` route renders a protected page to prove the authentication works and creates a session. You will need to be authenticated to view it. If you are not authenticate you will be redirected back to the login page.
-
-### Authenticate the user
-
-*helpers/sessions_helper.rb*
-```ruby
-response = api_client.create_session_login_token({
-    'username_or_email' => username,
-    'password' => password,
-    'subdomain' => ONELOGIN_SUBDOMAIN,
-  },
-  request.base_url # included for CORS session cookie request
-)
-```
-
-### Verify MFA
-
-*helpers/sessions_helper.rb*
-```ruby
-response = api_client.get_session_token_verified(
-  device_id,
-  session[:state_token],
-  otp_token,
-  request.base_url
-)
-```
-
-### Destroy the session
-
-*helpers/sessions_helper.rb*
-```ruby
-api_client.log_user_out(current_user_id)
-session.delete(:user)
-```
-
-### Make CORS request to establish SSO session
-
-Using the `session_token` returned from the `session_controller` after a new login or successful MFA verification.
-
-*views/home/index.html.erb*
-```javascript
-function makeCors(session_token) {
-  var xhr = new XMLHttpRequest();
-  xhr.withCredentials = true;
-  method = "POST";
-  var url = "https://" + ONELOGIN_SUBDOMAIN + ".onelogin.com/session_via_api_token";
-  // var url = "https://" + CUSTOM_DOMAIN + "/session_via_api_token";
-  xhr.open(method, url, true);
-  xhr.setRequestHeader("Content-Type", "application/json");
-  body = {"session_token": session_token};
-  xhr.send(JSON.stringify(body));
-};
-```
-
-### Make form-based request to establish SSO session
-```html
-<!doctype html>
-<html>
-    <head>
-        <meta charset="utf-8">
-    </head>
-    <body>
-        <p>Auth API Test</p>
-        <form action=
-         "https://{onelogin_instance}/session_via_api_token" method="POST">
-            <input type="hidden" name="session_token" value="{your session token value}">
-            <input type="submit" placeholder="GO">
-            <input id="auth_token" type="hidden">
-        </form>
-    </body>
-</html>
-
-where onelogin_instance is a custom domain or
-{subdomain}.onelogin.com
-```

data/examples/rails-custom-login-page/Rakefile

@@ -1,6 +0,0 @@
-# Add your own tasks in files placed in lib/tasks ending in .rake,
-# for example lib/tasks/capistrano.rake, and they will automatically be available to Rake.
-
-require_relative 'config/application'
-
-Rails.application.load_tasks

data/examples/rails-custom-login-page/app/assets/config/manifest.js

@@ -1,3 +0,0 @@
-//= link_tree ../images
-//= link_directory ../javascripts .js
-//= link_directory ../stylesheets .css

data/examples/rails-custom-login-page/app/assets/javascripts/application.js

@@ -1,18 +0,0 @@
-// This is a manifest file that'll be compiled into application.js, which will include all the files
-// listed below.
-//
-// Any JavaScript/Coffee file within this directory, lib/assets/javascripts, or any plugin's
-// vendor/assets/javascripts directory can be referenced here using a relative path.
-//
-// It's not advisable to add code directly here, but if you do, it'll appear at the bottom of the
-// compiled file. JavaScript code in this file should be added after the last require_* statement.
-//
-// Read Sprockets README (https://github.com/rails/sprockets#sprockets-directives) for details
-// about supported directives.
-//
-//= require rails-ujs
-//= require turbolinks
-//= require_tree .
-//= require jquery
-//= require jquery_ujs
-

data/examples/rails-custom-login-page/app/assets/javascripts/cable.js

@@ -1,13 +0,0 @@
-// Action Cable provides the framework to deal with WebSockets in Rails.
-// You can generate new channels where WebSocket features live using the `rails generate channel` command.
-//
-//= require action_cable
-//= require_self
-//= require_tree ./channels
-
-(function() {
-  this.App || (this.App = {});
-
-  App.cable = ActionCable.createConsumer();
-
-}).call(this);

data/examples/rails-custom-login-page/app/assets/javascripts/dashboard.coffee

@@ -1,3 +0,0 @@
-# Place all the behaviors and hooks related to the matching controller here.
-# All this logic will automatically be available in application.js.
-# You can use CoffeeScript in this file: http://coffeescript.org/

data/examples/rails-custom-login-page/app/assets/javascripts/home.coffee

@@ -1,3 +0,0 @@
-# Place all the behaviors and hooks related to the matching controller here.
-# All this logic will automatically be available in application.js.
-# You can use CoffeeScript in this file: http://coffeescript.org/

data/examples/rails-custom-login-page/app/assets/javascripts/sessions.coffee

@@ -1,3 +0,0 @@
-# Place all the behaviors and hooks related to the matching controller here.
-# All this logic will automatically be available in application.js.
-# You can use CoffeeScript in this file: http://coffeescript.org/

data/examples/rails-custom-login-page/app/assets/stylesheets/application.css

@@ -1,15 +0,0 @@
-/*
- * This is a manifest file that'll be compiled into application.css, which will include all the files
- * listed below.
- *
- * Any CSS and SCSS file within this directory, lib/assets/stylesheets, or any plugin's
- * vendor/assets/stylesheets directory can be referenced here using a relative path.
- *
- * You're free to add application-wide styles to this file and they'll appear at the bottom of the
- * compiled file so the styles you add here take precedence over styles defined in any other CSS/SCSS
- * files in this directory. Styles in this file should be added after the last require_* statement.
- * It is generally better to create a new file per style scope.
- *
- *= require_tree .
- *= require_self
- */

data/examples/rails-custom-login-page/app/assets/stylesheets/dashboard.scss

@@ -1,3 +0,0 @@
-// Place all the styles related to the Dashboard controller here.
-// They will automatically be included in application.css.
-// You can use Sass (SCSS) here: http://sass-lang.com/

data/examples/rails-custom-login-page/app/assets/stylesheets/home.scss

@@ -1,3 +0,0 @@
-// Place all the styles related to the Home controller here.
-// They will automatically be included in application.css.
-// You can use Sass (SCSS) here: http://sass-lang.com/

data/examples/rails-custom-login-page/app/assets/stylesheets/sessions.scss

@@ -1,3 +0,0 @@
-// Place all the styles related to the Sessions controller here.
-// They will automatically be included in application.css.
-// You can use Sass (SCSS) here: http://sass-lang.com/

data/examples/rails-custom-login-page/app/channels/application_cable/channel.rb

@@ -1,4 +0,0 @@
-module ApplicationCable
-  class Channel < ActionCable::Channel::Base
-  end
-end

data/examples/rails-custom-login-page/app/channels/application_cable/connection.rb

@@ -1,4 +0,0 @@
-module ApplicationCable
-  class Connection < ActionCable::Connection::Base
-  end
-end

data/examples/rails-custom-login-page/app/controllers/application_controller.rb

@@ -1,23 +0,0 @@
-require 'onelogin'
-
-class ApplicationController < ActionController::Base
-  protect_from_forgery with: :exception
-  include SessionsHelper
-
-  def require_current_user
-    if current_user
-      return true
-    else
-      redirect_to root_url, error: "Please sign in."
-      return false
-    end
-  end
-
-  def api_client
-    @api_client ||= OneLogin::Api::Client.new(
-      client_id: ONELOGIN_CLIENT_ID,
-      client_secret: ONELOGIN_CLIENT_SECRET,
-      region: ONELOGIN_REGION
-    )
-  end
-end

data/examples/rails-custom-login-page/app/controllers/dashboard_controller.rb

@@ -1,10 +0,0 @@
-class DashboardController < ApplicationController
-  include DashboardHelper
-
-  before_action :require_current_user
-
-  def index
-    @apps = user_apps
-    @roles = user_roles
-  end
-end

data/examples/rails-custom-login-page/app/controllers/home_controller.rb

@@ -1,5 +0,0 @@
-class HomeController < ApplicationController
-  def index
-    redirect_to "/dashboard" if session["user"]
-  end
-end

data/examples/rails-custom-login-page/app/controllers/sessions_controller.rb

@@ -1,46 +0,0 @@
-class SessionsController < ApplicationController
-  def new
-    response = log_in(params['username'], params['password'])
-    status = response[:error] ? :unauthorized : :ok
-
-    render json: response, status: status
-  end
-
-  def verify
-    response = verify_mfa(params['device_id'], params['otp_token'])
-    status = response ? :ok : :unauthorized
-
-    render json: response, status: status
-  end
-
-  # Checks for user and gets MFA devices
-  # available to verify token before
-  # password reset is completed
-  def forgot_password
-    user = validate_user(params['forgot_username'])
-
-    devices = get_mfa_devices(user.id)
-
-    status = user ? :ok : :not_found
-
-    render json: devices, status: status
-  end
-
-  # Verify MFA token and then update password
-  def reset_password
-    if verify_token(params['reset_device_id'], params['reset_otp_token'])
-      status = :ok
-      response = set_password(session[:user_id], params['new_password'])
-    else
-      status = :unauthorized
-      response = 'Invalid token'
-    end
-
-    render json: response, status: status
-  end
-
-  def destroy
-    log_out
-    redirect_to root_url
-  end
-end