onelogin 1.6.0 → 3.0.0.pre.alpha.1

data/examples/rails-custom-login-page/app/controllers/users_controller.rb

@@ -1,120 +0,0 @@
-class UsersController < ApplicationController
-
-  before_action :require_current_user, except: [:new, :create, :onboard, :activate]
-  before_action :set_user, only: [:show, :edit, :update, :destroy]
-
-  # GET /users
-  # GET /users.json
-  def index
-    @users = api_client.get_users.take(25) # only fetch the first 50 users
-  end
-
-  # GET /users/1
-  # GET /users/1.json
-  def show
-  end
-
-  # GET /users/new
-  def new
-  end
-
-  # GET /users/1/edit
-  def edit
-  end
-
-  # POST /users
-  # POST /users.json
-  def create
-    # Create a user
-    user = api_client.create_user(user_params)
-    # Update custom attributes
-    api_client.set_custom_attribute_to_user(user.id, custom_user_params)
-    # Set status to unactivated
-    api_client.update_user(user.id, status: 0)
-
-    if api_client.error
-      puts api_client.error_description
-    end
-
-    redirect_to onboard_path, notice: 'User has been created with status set to unactivated'
-  end
-
-  # GET /onboard
-  def onboard
-  end
-
-  # POST /activate
-  def activate
-    # Search for a user with this email address
-    @user = api_client.get_users(email: user_params[:email]).first
-
-    unless @user && verify_dob && verify_ssn
-      return redirect_to onboard_path, notice: "User #{user_params[:email]} was not verified"
-    end
-
-    # Update password
-    unless api_client.set_password_using_clear_text(@user.id, user_params[:password], user_params[:password])
-      return redirect_to onboard_path, notice: "Password update failed. #{api_client.error_description}"
-    end
-
-    # Activate user
-    api_client.update_user(@user.id, status: 1)
-
-    # Redirect to login page
-    redirect_to home_index_path
-  end
-
-  # Verify dob and ssn match
-  def verify_ssn
-    @user.custom_attributes["custom_ssn"].eql? (custom_user_params[:custom_ssn])
-  end
-
-  def verify_dob
-    @user.custom_attributes["custom_dob"].eql? (custom_user_params[:custom_dob])
-  end
-
-  # PATCH/PUT /users/1
-  # PATCH/PUT /users/1.json
-  def update
-    # update the user
-    api_client.update_user(params[:id], user_params)
-
-    # update custom attributes
-    api_client.set_custom_attribute_to_user(params[:id], custom_user_params)
-
-    respond_to do |format|
-      unless api_client.error
-        format.html { redirect_to user_path(params[:id]), notice: 'User was successfully updated.' }
-        format.json { render :show, status: :ok, location: @user }
-      else
-        format.html { render :edit }
-        format.json { render json: @user.errors, status: :unprocessable_entity }
-      end
-    end
-  end
-
-  # DELETE /users/1
-  # DELETE /users/1.json
-  def destroy
-    @user.destroy
-    respond_to do |format|
-      format.html { redirect_to users_url, notice: 'User was successfully destroyed.' }
-      format.json { head :no_content }
-    end
-  end
-
-  private
-
-    def set_user
-      @user = api_client.get_user(params[:id])
-    end
-
-    # Never trust parameters from the scary internet, only allow the white list through.
-    def user_params
-      params.permit(:firstname, :lastname, :email, :phone, :username, :password)
-    end
-
-    def custom_user_params
-      params.permit(:custom_field, :custom_dob, :custom_ssn)
-    end
-end

data/examples/rails-custom-login-page/app/helpers/application_helper.rb

@@ -1,2 +0,0 @@
-module ApplicationHelper
-end

data/examples/rails-custom-login-page/app/helpers/dashboard_helper.rb

@@ -1,28 +0,0 @@
-module DashboardHelper
-
-  #
-  # Get a list of app for the current user
-  #
-  def user_apps
-    api_client.get_user_apps(current_user_id)
-  end
-
-  #
-  # Get a list of roles for the current user
-  #
-  def user_roles
-    role_ids = api_client.get_user_roles(current_user_id)
-
-    roles.map do |role|
-      role if role_ids.include?(role.id)
-    end.compact
-  end
-
-  #
-  # Get a list of all roles in onelogin account
-  #
-  def roles
-    @roles ||= api_client.get_roles
-  end
-
-end

data/examples/rails-custom-login-page/app/helpers/home_helper.rb

@@ -1,2 +0,0 @@
-module HomeHelper
-end

data/examples/rails-custom-login-page/app/helpers/sessions_helper.rb

@@ -1,87 +0,0 @@
-module SessionsHelper
-
-  def log_in(username, password)
-    response = api_client.create_session_login_token({
-        'username_or_email' => username,
-        'password' => password,
-        'subdomain' => ONELOGIN_SUBDOMAIN,
-      },
-      request.base_url # included for CORS session cookie request
-    )
-    return { error: api_client.error_description } unless response
-
-    if response.is_a? OneLogin::Api::Models::SessionTokenMFAInfo
-      session[:state_token] = response.state_token
-      {
-        requires_mfa: true,
-        devices: response.devices
-      }
-    else
-      create_session(response.user)
-      {
-        requires_mfa: false,
-        session_token: response.session_token
-      }
-    end
-  end
-
-  def verify_mfa(device_id, otp_token)
-    response = api_client.get_session_token_verified(
-      device_id,
-      session[:state_token],
-      otp_token,
-      request.base_url
-    )
-    return nil unless response
-
-    create_session(response.user)
-    {
-      session_token: response.session_token
-    }
-  end
-
-  def create_session(user)
-    session[:user] = user
-  end
-
-  def log_out
-    return unless current_user
-    api_client.log_user_out(current_user_id)
-    session.delete(:user)
-  end
-
-  def current_user
-    session[:user]
-  end
-
-  def current_user_id
-    session[:user]['id'] if current_user
-  end
-
-  def validate_user(username)
-    user = api_client.get_users(username: username).first
-
-    if user
-      session[:user_id] = user.id
-    end
-
-    user
-  end
-
-  def get_mfa_devices(user_id)
-    devices = api_client.get_enrolled_factors(user_id)
-
-    # only return devices that dont need a trigger.
-    # i.e. this sample does not support push yet
-    devices.select {|d| d.needs_trigger == true }
-  end
-
-  def verify_token(device_id, mfa_token)
-    puts "VERIFY MFA TOKEN User:#{session[:user_id]}, Device:#{device_id}, Token:#{mfa_token}"
-    api_client.verify_factor(session[:user_id], device_id, mfa_token)
-  end
-
-  def set_password(user_id, password)
-    api_client.set_password_using_clear_text(user_id, password, password)
-  end
-end

data/examples/rails-custom-login-page/app/helpers/users_helper.rb

@@ -1,3 +0,0 @@
-module UsersHelper
-
-end

data/examples/rails-custom-login-page/app/jobs/application_job.rb

@@ -1,2 +0,0 @@
-class ApplicationJob < ActiveJob::Base
-end

data/examples/rails-custom-login-page/app/mailers/application_mailer.rb

@@ -1,4 +0,0 @@
-class ApplicationMailer < ActionMailer::Base
-  default from: 'from@example.com'
-  layout 'mailer'
-end

data/examples/rails-custom-login-page/app/models/application_record.rb

@@ -1,3 +0,0 @@
-class ApplicationRecord < ActiveRecord::Base
-  self.abstract_class = true
-end

data/examples/rails-custom-login-page/app/views/dashboard/index.html.erb

@@ -1,43 +0,0 @@
-<div class="jumbotron">
-  <h1>Dashboard</h1>
-  <p>
-    You must be authenticated to see this page so if you're seeing it then
-    everything worked as expected 🎉
-  </p>
-  <p>
-    <a href="/users">List Users</a> | <a href="/logout">Log Out</a>
-  </p>
-</div>
-
-<div class="container">
-  <div class="row">
-    <div class="col-sm">
-      <h2>Apps</h2>
-      <ul class="list-group">
-      <% url_base = CUSTOM_DOMAIN || ONELOGIN_SUBDOMAIN + ".onelogin.com" %>
-      <%@apps.each do |app|%>
-        <li class="list-group-item"><a target="_blank" href="https://<%= url_base %>/launch/<%= app.id %>"><%= app.name %></a></li>
-      <%end%>
-      </ul>
-    </div>
-    <div class="col-sm">
-      <h2>Roles</h2>
-      <ul class="list-group">
-      <%@roles.each do |role|%>
-        <li class="list-group-item"><%= role.name %></li>
-      <%end%>
-      </ul>
-
-      <br/>
-
-      <h2>Profile</h2>
-      <ul class="list-group">
-        <%current_user.each do |k, v|%>
-          <li class="list-group-item">
-            <b><%= k%>:</b> <%= v%>
-          </li>
-        <%end%>
-      </ul>
-    </div>
-  </div>
-</div>

data/examples/rails-custom-login-page/app/views/home/index.html.erb

@@ -1,272 +0,0 @@
-<div class="jumbotron">
-  <p>This is a simple demo of how to authenticate a user and handle MFA when required</p>
-</div>
-
-<div class="container">
-  <div class="row">
-    <div class="col-sm">
-    </div>
-    <div class="col-sm">
-
-      <div class="alert alert-danger message" role="alert">
-      </div>
-
-      <% url_base = CUSTOM_DOMAIN || ONELOGIN_SUBDOMAIN + ".onelogin.com" %>
-      <% url_create_session = "https://" + url_base + "/session_via_api_token" %>
-
-      <form action="<%= url_create_session %>" method="post" class="cookie-session-post-form">
-        <input type="hidden" id="cookie_session_token" name="session_token" value="">
-        <input id="auth_token" type="hidden">
-        <button type="submit">Creating Session ...</button>
-      </form>
-
-      <%= form_tag("/login", method: "post", class: 'login-form') do %>
-        <div class="form-group">
-          <label for="username">Username</label>
-          <%= text_field_tag :username, nil, placeholder: 'Enter Username', class: 'form-control' %>
-        </div>
-        <div class="form-group">
-          <label for="password">Password</label>
-          <%= password_field_tag :password, nil, placeholder: 'Enter Password', class: 'form-control' %>
-        </div>
-        <button type="submit" class="btn btn-primary">Login</button>
-        <hr/>
-        <a href="#" class="forgot">Forgot Password</a> | <a href="/signup">Sign Up</a>
-      <% end %>
-
-      <%= form_tag("/verify_mfa", method: "post", class: 'mfa-form') do %>
-        <div class="form-group">
-          <label for="device_id">MFA Device</label>
-          <%= select_tag :device_id, nil, {:class => 'form-control'} %>
-        </div>
-        <div class="form-group">
-          <label for="otp_token">Token</label>
-          <%= text_field_tag :otp_token, nil, placeholder: 'Enter Token', class: 'form-control' %>
-        </div>
-        <button type="submit" class="btn btn-primary">Verify Token</button>
-      <% end %>
-
-      <%= form_tag("/forgot_password", method: "post", class: 'forgot-password-form') do %>
-        <div class="form-group">
-          <label for="forgot_username">Username</label>
-          <%= text_field_tag :forgot_username, nil, placeholder: 'Enter Username', class: 'form-control' %>
-        </div>
-        <button type="submit" class="btn btn-primary">Reset Password</button> or <a href="/">Login</a>
-      <% end %>
-
-      <%= form_tag("/reset_password", method: "post", class: 'reset-password-form') do %>
-        <div class="form-group">
-          <label for="reset_device_id">MFA Device</label>
-          <%= select_tag :reset_device_id, nil, {:class => 'form-control'} %>
-        </div>
-        <div class="form-group">
-          <label for="reset_otp_token">Token</label>
-          <%= text_field_tag :reset_otp_token, nil, placeholder: 'Enter Token', class: 'form-control' %>
-        </div>
-        <div class="form-group">
-          <label for="new_password">New Password</label>
-          <%= password_field_tag :new_password, nil, placeholder: 'Enter New Password', class: 'form-control' %>
-        </div>
-        <button type="submit" class="btn btn-primary">Save Password</button>
-      <% end %>
-
-      <form method="POST" action="" id="sp"></form>
-
-    </div>
-    <div class="col-sm">
-    </div>
-  </div>
-</div>
-
-
-
-
-<script type="text/javascript">
-
-  var ONELOGIN_SUBDOMAIN = "<%= ONELOGIN_SUBDOMAIN %>";
-  var CUSTOM_DOMAIN = "<%= CUSTOM_DOMAIN %>";
-  var COOKIE_VIA_POST_FORM = <%= COOKIE_VIA_POST_FORM || false %>;
-
-  function makeCors(session_token) {
-    var xhr = new XMLHttpRequest();
-    xhr.withCredentials = true;
-    method = "POST";
-    if (CUSTOM_DOMAIN) {
-      var url = "https://" + CUSTOM_DOMAIN + "/session_via_api_token";
-    } else {
-      var url = "https://" + ONELOGIN_SUBDOMAIN + ".onelogin.com/session_via_api_token";
-    }
-    xhr.open(method, url, true);
-    xhr.setRequestHeader("Content-Type", "application/json");
-    body = {"session_token": session_token};
-    xhr.onreadystatechange = function () {
-      if(xhr.readyState === 4 && xhr.status === 200) {
-        if(getUrlParameter("origin")){
-          // If there is an origin SP then redirect to it
-          redirectToSP()
-        } else{
-          // Otherwise redirect to the main dashboard
-          window.location.href = '/dashboard';
-        }
-      }
-    };
-    xhr.send(JSON.stringify(body));
-  };
-
-  function sendPostForm(session_token){
-    $(".cookie-session-post-form").show();
-    $("#cookie_session_token").val(session_token);
-    $(".cookie-session-post-form").submit();
-  }
-
-  function showAlert(type, message){
-    $(".message").removeClass("alert-danger").removeClass("alert-success");
-    $(".message").addClass("alert-" + type).text(message).show();
-    $(".message").show();
-  }
-  function hideAlert(){
-    $(".message").hide();
-  }
-
-  function getUrlParameter(sParam) {
-      var sPageURL = window.location.search.substring(1),
-          sURLVariables = sPageURL.split('&'),
-          sParameterName,
-          i;
-
-      for (i = 0; i < sURLVariables.length; i++) {
-          sParameterName = sURLVariables[i].split('=');
-
-          if (sParameterName[0] === sParam) {
-              return sParameterName[1] === undefined ? true : decodeURIComponent(sParameterName[1]);
-          }
-      }
-  };
-
-  function redirectToSP() {
-    var origin = getUrlParameter("origin");
-    var samlRequest = getUrlParameter("SAMLRequest");
-    var url = origin + "&SAMLRequest=" + samlRequest;
-    $("#sp").attr("action", url).submit();
-  }
-
-  $(function(){
-    hideAlert();
-    $(".login-form").show();
-    $(".cookie-session-post-form").hide();
-    $(".mfa-form").hide();
-    $(".forgot-password-form").hide();
-    $(".reset-password-form").hide();
-
-    $(".forgot").click(function(e){
-      e.preventDefault();
-      $(".forgot-password-form").show();
-      $(".login-form").hide();
-    });
-
-    $(".login-form").on("submit", function(event){
-      $.ajax({
-        type: "POST",
-        url: this.action,
-        data: $(this).serialize(),
-        success: function(res, status, xhr) {
-          console.log(res);
-          if(res.requires_mfa){
-            console.log('requires mfa')
-            showAlert('danger', 'MFA Required')
-
-            for(var i=0; i<res.devices.length; i++){
-              $('.mfa-form select').append('<option value="' + res.devices[i].id + '">' + res.devices[i].type + '</option>');
-            }
-            $(".login-form").hide();
-            $(".mfa-form").show();
-
-          } else {
-            if (typeof COOKIE_VIA_POST_FORM === 'boolean' && COOKIE_VIA_POST_FORM === true) {
-              sendPostForm(res.session_token);
-            } else {
-              makeCors(res.session_token);
-            }
-          }
-        },
-        error: function(xhr, status, err) {
-          console.log(err);
-          console.log(xhr);
-          showAlert('danger', xhr.responseJSON.error);
-          $(".login-form input[type=submit]").removeAttr("disabled");
-        },
-      });
-      event.preventDefault();
-    });
-
-    $(".mfa-form").on("submit", function(event){
-      $.ajax({
-        type: "POST",
-        url: this.action,
-        data: $(this).serialize(),
-        success: function(res, status, xhr) {
-          console.log(res);
-
-          if (typeof COOKIE_VIA_POST_FORM === 'boolean' && COOKIE_VIA_POST_FORM === true) {
-            sendPostForm(res.session_token);
-          } else {
-            makeCors(res.session_token);
-          }
-        },
-        error: function(xhr, status, err) {
-          console.log(err);
-          showAlert("danger", "MFA Verification Failed");
-          $(".login-form").show();
-          $(".mfa-form").hide();
-          $(".login-form input[type=submit]").removeAttr("disabled");
-          $(".mfa-form input[type=submit]").removeAttr("disabled");
-        },
-      });
-      event.preventDefault();
-    });
-
-    $(".forgot-password-form").on("submit", function(event){
-      $.ajax({
-        type: "POST",
-        url: this.action,
-        data: $(this).serialize(),
-        success: function(res, status, xhr) {
-          console.log(res);
-
-          for(var i=0; i<res.length; i++){
-            $('.reset-password-form select').append('<option value="' + res[i].id + '">' + res[i].auth_factor_name + '</option>');
-          }
-
-          $(".forgot-password-form").hide();
-          $(".reset-password-form").show();
-        },
-        error: function(xhr, status, err) {
-          console.log(err);
-          showAlert("danger", "User not found");
-        },
-      });
-      event.preventDefault();
-    });
-
-    $(".reset-password-form").on("submit", function(event){
-      $.ajax({
-        type: "POST",
-        url: this.action,
-        data: $(this).serialize(),
-        success: function(res, status, xhr) {
-          console.log(res);
-
-          $(".login-form").show();
-          $(".forgot-password-form").hide();
-          $(".reset-password-form").hide();
-          showAlert("success", "Password changed");
-        },
-        error: function(xhr, status, err) {
-          console.log(err);
-          showAlert("danger", err);
-        },
-      });
-      event.preventDefault();
-    });
-  })
-</script>

data/examples/rails-custom-login-page/app/views/layouts/application.html.erb

@@ -1,31 +0,0 @@
-<!DOCTYPE html>
-<html>
-  <head>
-    <title>OneLogin</title>
-    <%= csrf_meta_tags %>
-
-    <%= stylesheet_link_tag    'application', media: 'all', 'data-turbolinks-track': 'reload' %>
-    <%= javascript_include_tag 'application', 'data-turbolinks-track': 'reload' %>
-    <link rel="stylesheet" href="https://maxcdn.bootstrapcdn.com/bootstrap/4.0.0-beta.2/css/bootstrap.min.css" integrity="sha384-PsH8R72JQ3SOdhVi3uxftmaW6Vc51MKb0q5P2rRUpPvrszuE4W1povHYgTpBfshb" crossorigin="anonymous">
-  </head>
-
-  <body>
-    <nav class="navbar navbar-expand-lg navbar-dark bg-primary">
-      <a class="navbar-brand" href="#">OneLogin Ruby SDK Sample</a>
-      <div class="collapse navbar-collapse" id="navbarNavAltMarkup">
-        <div class="navbar-nav">
-          <a class="nav-item nav-link active" href="/">Login</a>
-          <a class="nav-item nav-link" href="/signup">Sign Up</a>
-          <a class="nav-item nav-link" href="/onboard">Onboard</a>
-        </div>
-      </div>
-    </nav>
-
-
-    <% flash.each do |key, value| %>
-      <div class="alert alert-warning"><%= value %></div>
-    <% end %>
-
-    <%= yield %>
-  </body>
-</html>

data/examples/rails-custom-login-page/app/views/layouts/mailer.html.erb

@@ -1,13 +0,0 @@
-<!DOCTYPE html>
-<html>
-  <head>
-    <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
-    <style>
-      /* Email styles need to be inline */
-    </style>
-  </head>
-
-  <body>
-    <%= yield %>
-  </body>
-</html>

data/examples/rails-custom-login-page/app/views/layouts/mailer.text.erb

@@ -1 +0,0 @@
-<%= yield %>

data/examples/rails-custom-login-page/app/views/users/_form.html.erb

@@ -1 +0,0 @@
-

data/examples/rails-custom-login-page/app/views/users/_user.json.jbuilder

@@ -1,2 +0,0 @@
-json.extract! user, :id, :created_at, :updated_at
-json.url user_url(user, format: :json)

data/examples/rails-custom-login-page/app/views/users/edit.html.erb

@@ -1,33 +0,0 @@
-<div class="container">
-  <div class="row">
-    <div class="col-sm">
-      <p><%= link_to 'Back', users_path %></p>
-
-      <h2>Edit User</h2>
-
-      <%= form_tag update_user_path, method: "patch", class: "edit" do %>
-        <div class="form-group">
-          <label for="firstname">First Name</label>
-          <input type="text" name="firstname" value="<%= @user.firstname%>" class="form-control">
-        </div>
-        <div class="form-group">
-          <label for="lastname">Last Name</label>
-          <input type="text" name="lastname" value="<%= @user.lastname%>" class="form-control">
-        </div>
-        <div class="form-group">
-          <label for="email">Email</label>
-          <input type="text" name="email" value="<%= @user.email%>" class="form-control">
-        </div>
-        <div class="form-group">
-          <label for="email">Phone</label>
-          <input type="text" name="phone" value="<%= @user.phone%>" class="form-control">
-        </div>
-        <div class="form-group">
-          <label for="email">Custom Field</label>
-          <input type="text" name="custom_field" value="<%= @user.custom_attributes['custom_field'] if @user.custom_attributes.present? %>" class="form-control">
-        </div>
-        <button type="submit" class="btn btn-primary">Save</button>
-      <% end %>
-    </div>
-  </div>
-</div>