onelogin 1.7.0 → 1.8.0

data/examples/rails-custom-login-page/app/helpers/dashboard_helper.rb

@@ -1,28 +0,0 @@
-module DashboardHelper
-
-  #
-  # Get a list of app for the current user
-  #
-  def user_apps
-    api_client.get_user_apps(current_user_id)
-  end
-
-  #
-  # Get a list of roles for the current user
-  #
-  def user_roles
-    role_ids = api_client.get_user_roles(current_user_id)
-
-    roles.map do |role|
-      role if role_ids.include?(role.id)
-    end.compact
-  end
-
-  #
-  # Get a list of all roles in onelogin account
-  #
-  def roles
-    @roles ||= api_client.get_roles
-  end
-
-end

data/examples/rails-custom-login-page/app/helpers/home_helper.rb

@@ -1,2 +0,0 @@
-module HomeHelper
-end

data/examples/rails-custom-login-page/app/helpers/sessions_helper.rb

@@ -1,87 +0,0 @@
-module SessionsHelper
-
-  def log_in(username, password)
-    response = api_client.create_session_login_token({
-        'username_or_email' => username,
-        'password' => password,
-        'subdomain' => ONELOGIN_SUBDOMAIN,
-      },
-      request.base_url # included for CORS session cookie request
-    )
-    return { error: api_client.error_description } unless response
-
-    if response.is_a? OneLogin::Api::Models::SessionTokenMFAInfo
-      session[:state_token] = response.state_token
-      {
-        requires_mfa: true,
-        devices: response.devices
-      }
-    else
-      create_session(response.user)
-      {
-        requires_mfa: false,
-        session_token: response.session_token
-      }
-    end
-  end
-
-  def verify_mfa(device_id, otp_token)
-    response = api_client.get_session_token_verified(
-      device_id,
-      session[:state_token],
-      otp_token,
-      request.base_url
-    )
-    return nil unless response
-
-    create_session(response.user)
-    {
-      session_token: response.session_token
-    }
-  end
-
-  def create_session(user)
-    session[:user] = user
-  end
-
-  def log_out
-    return unless current_user
-    api_client.log_user_out(current_user_id)
-    session.delete(:user)
-  end
-
-  def current_user
-    session[:user]
-  end
-
-  def current_user_id
-    session[:user]['id'] if current_user
-  end
-
-  def validate_user(username)
-    user = api_client.get_users(username: username).first
-
-    if user
-      session[:user_id] = user.id
-    end
-
-    user
-  end
-
-  def get_mfa_devices(user_id)
-    devices = api_client.get_enrolled_factors(user_id)
-
-    # only return devices that dont need a trigger.
-    # i.e. this sample does not support push yet
-    devices.select {|d| d.needs_trigger == true }
-  end
-
-  def verify_token(device_id, mfa_token)
-    puts "VERIFY MFA TOKEN User:#{session[:user_id]}, Device:#{device_id}, Token:#{mfa_token}"
-    api_client.verify_factor(session[:user_id], device_id, mfa_token)
-  end
-
-  def set_password(user_id, password)
-    api_client.set_password_using_clear_text(user_id, password, password)
-  end
-end

data/examples/rails-custom-login-page/app/helpers/users_helper.rb

@@ -1,3 +0,0 @@
-module UsersHelper
-
-end

data/examples/rails-custom-login-page/app/jobs/application_job.rb

@@ -1,2 +0,0 @@
-class ApplicationJob < ActiveJob::Base
-end

data/examples/rails-custom-login-page/app/mailers/application_mailer.rb

@@ -1,4 +0,0 @@
-class ApplicationMailer < ActionMailer::Base
-  default from: 'from@example.com'
-  layout 'mailer'
-end

data/examples/rails-custom-login-page/app/models/application_record.rb

@@ -1,3 +0,0 @@
-class ApplicationRecord < ActiveRecord::Base
-  self.abstract_class = true
-end

data/examples/rails-custom-login-page/app/views/dashboard/index.html.erb

@@ -1,43 +0,0 @@
-<div class="jumbotron">
-  <h1>Dashboard</h1>
-  <p>
-    You must be authenticated to see this page so if you're seeing it then
-    everything worked as expected 🎉
-  </p>
-  <p>
-    <a href="/users">List Users</a> | <a href="/logout">Log Out</a>
-  </p>
-</div>
-
-<div class="container">
-  <div class="row">
-    <div class="col-sm">
-      <h2>Apps</h2>
-      <ul class="list-group">
-      <% url_base = CUSTOM_DOMAIN || ONELOGIN_SUBDOMAIN + ".onelogin.com" %>
-      <%@apps.each do |app|%>
-        <li class="list-group-item"><a target="_blank" href="https://<%= url_base %>/launch/<%= app.id %>"><%= app.name %></a></li>
-      <%end%>
-      </ul>
-    </div>
-    <div class="col-sm">
-      <h2>Roles</h2>
-      <ul class="list-group">
-      <%@roles.each do |role|%>
-        <li class="list-group-item"><%= role.name %></li>
-      <%end%>
-      </ul>
-
-      <br/>
-
-      <h2>Profile</h2>
-      <ul class="list-group">
-        <%current_user.each do |k, v|%>
-          <li class="list-group-item">
-            <b><%= k%>:</b> <%= v%>
-          </li>
-        <%end%>
-      </ul>
-    </div>
-  </div>
-</div>

data/examples/rails-custom-login-page/app/views/home/index.html.erb

@@ -1,272 +0,0 @@
-<div class="jumbotron">
-  <p>This is a simple demo of how to authenticate a user and handle MFA when required</p>
-</div>
-
-<div class="container">
-  <div class="row">
-    <div class="col-sm">
-    </div>
-    <div class="col-sm">
-
-      <div class="alert alert-danger message" role="alert">
-      </div>
-
-      <% url_base = CUSTOM_DOMAIN || ONELOGIN_SUBDOMAIN + ".onelogin.com" %>
-      <% url_create_session = "https://" + url_base + "/session_via_api_token" %>
-
-      <form action="<%= url_create_session %>" method="post" class="cookie-session-post-form">
-        <input type="hidden" id="cookie_session_token" name="session_token" value="">
-        <input id="auth_token" type="hidden">
-        <button type="submit">Creating Session ...</button>
-      </form>
-
-      <%= form_tag("/login", method: "post", class: 'login-form') do %>
-        <div class="form-group">
-          <label for="username">Username</label>
-          <%= text_field_tag :username, nil, placeholder: 'Enter Username', class: 'form-control' %>
-        </div>
-        <div class="form-group">
-          <label for="password">Password</label>
-          <%= password_field_tag :password, nil, placeholder: 'Enter Password', class: 'form-control' %>
-        </div>
-        <button type="submit" class="btn btn-primary">Login</button>
-        <hr/>
-        <a href="#" class="forgot">Forgot Password</a> | <a href="/signup">Sign Up</a>
-      <% end %>
-
-      <%= form_tag("/verify_mfa", method: "post", class: 'mfa-form') do %>
-        <div class="form-group">
-          <label for="device_id">MFA Device</label>
-          <%= select_tag :device_id, nil, {:class => 'form-control'} %>
-        </div>
-        <div class="form-group">
-          <label for="otp_token">Token</label>
-          <%= text_field_tag :otp_token, nil, placeholder: 'Enter Token', class: 'form-control' %>
-        </div>
-        <button type="submit" class="btn btn-primary">Verify Token</button>
-      <% end %>
-
-      <%= form_tag("/forgot_password", method: "post", class: 'forgot-password-form') do %>
-        <div class="form-group">
-          <label for="forgot_username">Username</label>
-          <%= text_field_tag :forgot_username, nil, placeholder: 'Enter Username', class: 'form-control' %>
-        </div>
-        <button type="submit" class="btn btn-primary">Reset Password</button> or <a href="/">Login</a>
-      <% end %>
-
-      <%= form_tag("/reset_password", method: "post", class: 'reset-password-form') do %>
-        <div class="form-group">
-          <label for="reset_device_id">MFA Device</label>
-          <%= select_tag :reset_device_id, nil, {:class => 'form-control'} %>
-        </div>
-        <div class="form-group">
-          <label for="reset_otp_token">Token</label>
-          <%= text_field_tag :reset_otp_token, nil, placeholder: 'Enter Token', class: 'form-control' %>
-        </div>
-        <div class="form-group">
-          <label for="new_password">New Password</label>
-          <%= password_field_tag :new_password, nil, placeholder: 'Enter New Password', class: 'form-control' %>
-        </div>
-        <button type="submit" class="btn btn-primary">Save Password</button>
-      <% end %>
-
-      <form method="POST" action="" id="sp"></form>
-
-    </div>
-    <div class="col-sm">
-    </div>
-  </div>
-</div>
-
-
-
-
-<script type="text/javascript">
-
-  var ONELOGIN_SUBDOMAIN = "<%= ONELOGIN_SUBDOMAIN %>";
-  var CUSTOM_DOMAIN = "<%= CUSTOM_DOMAIN %>";
-  var COOKIE_VIA_POST_FORM = <%= COOKIE_VIA_POST_FORM || false %>;
-
-  function makeCors(session_token) {
-    var xhr = new XMLHttpRequest();
-    xhr.withCredentials = true;
-    method = "POST";
-    if (CUSTOM_DOMAIN) {
-      var url = "https://" + CUSTOM_DOMAIN + "/session_via_api_token";
-    } else {
-      var url = "https://" + ONELOGIN_SUBDOMAIN + ".onelogin.com/session_via_api_token";
-    }
-    xhr.open(method, url, true);
-    xhr.setRequestHeader("Content-Type", "application/json");
-    body = {"session_token": session_token};
-    xhr.onreadystatechange = function () {
-      if(xhr.readyState === 4 && xhr.status === 200) {
-        if(getUrlParameter("origin")){
-          // If there is an origin SP then redirect to it
-          redirectToSP()
-        } else{
-          // Otherwise redirect to the main dashboard
-          window.location.href = '/dashboard';
-        }
-      }
-    };
-    xhr.send(JSON.stringify(body));
-  };
-
-  function sendPostForm(session_token){
-    $(".cookie-session-post-form").show();
-    $("#cookie_session_token").val(session_token);
-    $(".cookie-session-post-form").submit();
-  }
-
-  function showAlert(type, message){
-    $(".message").removeClass("alert-danger").removeClass("alert-success");
-    $(".message").addClass("alert-" + type).text(message).show();
-    $(".message").show();
-  }
-  function hideAlert(){
-    $(".message").hide();
-  }
-
-  function getUrlParameter(sParam) {
-      var sPageURL = window.location.search.substring(1),
-          sURLVariables = sPageURL.split('&'),
-          sParameterName,
-          i;
-
-      for (i = 0; i < sURLVariables.length; i++) {
-          sParameterName = sURLVariables[i].split('=');
-
-          if (sParameterName[0] === sParam) {
-              return sParameterName[1] === undefined ? true : decodeURIComponent(sParameterName[1]);
-          }
-      }
-  };
-
-  function redirectToSP() {
-    var origin = getUrlParameter("origin");
-    var samlRequest = getUrlParameter("SAMLRequest");
-    var url = origin + "&SAMLRequest=" + samlRequest;
-    $("#sp").attr("action", url).submit();
-  }
-
-  $(function(){
-    hideAlert();
-    $(".login-form").show();
-    $(".cookie-session-post-form").hide();
-    $(".mfa-form").hide();
-    $(".forgot-password-form").hide();
-    $(".reset-password-form").hide();
-
-    $(".forgot").click(function(e){
-      e.preventDefault();
-      $(".forgot-password-form").show();
-      $(".login-form").hide();
-    });
-
-    $(".login-form").on("submit", function(event){
-      $.ajax({
-        type: "POST",
-        url: this.action,
-        data: $(this).serialize(),
-        success: function(res, status, xhr) {
-          console.log(res);
-          if(res.requires_mfa){
-            console.log('requires mfa')
-            showAlert('danger', 'MFA Required')
-
-            for(var i=0; i<res.devices.length; i++){
-              $('.mfa-form select').append('<option value="' + res.devices[i].id + '">' + res.devices[i].type + '</option>');
-            }
-            $(".login-form").hide();
-            $(".mfa-form").show();
-
-          } else {
-            if (typeof COOKIE_VIA_POST_FORM === 'boolean' && COOKIE_VIA_POST_FORM === true) {
-              sendPostForm(res.session_token);
-            } else {
-              makeCors(res.session_token);
-            }
-          }
-        },
-        error: function(xhr, status, err) {
-          console.log(err);
-          console.log(xhr);
-          showAlert('danger', xhr.responseJSON.error);
-          $(".login-form input[type=submit]").removeAttr("disabled");
-        },
-      });
-      event.preventDefault();
-    });
-
-    $(".mfa-form").on("submit", function(event){
-      $.ajax({
-        type: "POST",
-        url: this.action,
-        data: $(this).serialize(),
-        success: function(res, status, xhr) {
-          console.log(res);
-
-          if (typeof COOKIE_VIA_POST_FORM === 'boolean' && COOKIE_VIA_POST_FORM === true) {
-            sendPostForm(res.session_token);
-          } else {
-            makeCors(res.session_token);
-          }
-        },
-        error: function(xhr, status, err) {
-          console.log(err);
-          showAlert("danger", "MFA Verification Failed");
-          $(".login-form").show();
-          $(".mfa-form").hide();
-          $(".login-form input[type=submit]").removeAttr("disabled");
-          $(".mfa-form input[type=submit]").removeAttr("disabled");
-        },
-      });
-      event.preventDefault();
-    });
-
-    $(".forgot-password-form").on("submit", function(event){
-      $.ajax({
-        type: "POST",
-        url: this.action,
-        data: $(this).serialize(),
-        success: function(res, status, xhr) {
-          console.log(res);
-
-          for(var i=0; i<res.length; i++){
-            $('.reset-password-form select').append('<option value="' + res[i].id + '">' + res[i].auth_factor_name + '</option>');
-          }
-
-          $(".forgot-password-form").hide();
-          $(".reset-password-form").show();
-        },
-        error: function(xhr, status, err) {
-          console.log(err);
-          showAlert("danger", "User not found");
-        },
-      });
-      event.preventDefault();
-    });
-
-    $(".reset-password-form").on("submit", function(event){
-      $.ajax({
-        type: "POST",
-        url: this.action,
-        data: $(this).serialize(),
-        success: function(res, status, xhr) {
-          console.log(res);
-
-          $(".login-form").show();
-          $(".forgot-password-form").hide();
-          $(".reset-password-form").hide();
-          showAlert("success", "Password changed");
-        },
-        error: function(xhr, status, err) {
-          console.log(err);
-          showAlert("danger", err);
-        },
-      });
-      event.preventDefault();
-    });
-  })
-</script>

data/examples/rails-custom-login-page/app/views/layouts/application.html.erb

@@ -1,31 +0,0 @@
-<!DOCTYPE html>
-<html>
-  <head>
-    <title>OneLogin</title>
-    <%= csrf_meta_tags %>
-
-    <%= stylesheet_link_tag    'application', media: 'all', 'data-turbolinks-track': 'reload' %>
-    <%= javascript_include_tag 'application', 'data-turbolinks-track': 'reload' %>
-    <link rel="stylesheet" href="https://maxcdn.bootstrapcdn.com/bootstrap/4.0.0-beta.2/css/bootstrap.min.css" integrity="sha384-PsH8R72JQ3SOdhVi3uxftmaW6Vc51MKb0q5P2rRUpPvrszuE4W1povHYgTpBfshb" crossorigin="anonymous">
-  </head>
-
-  <body>
-    <nav class="navbar navbar-expand-lg navbar-dark bg-primary">
-      <a class="navbar-brand" href="#">OneLogin Ruby SDK Sample</a>
-      <div class="collapse navbar-collapse" id="navbarNavAltMarkup">
-        <div class="navbar-nav">
-          <a class="nav-item nav-link active" href="/">Login</a>
-          <a class="nav-item nav-link" href="/signup">Sign Up</a>
-          <a class="nav-item nav-link" href="/onboard">Onboard</a>
-        </div>
-      </div>
-    </nav>
-
-
-    <% flash.each do |key, value| %>
-      <div class="alert alert-warning"><%= value %></div>
-    <% end %>
-
-    <%= yield %>
-  </body>
-</html>

data/examples/rails-custom-login-page/app/views/layouts/mailer.html.erb

@@ -1,13 +0,0 @@
-<!DOCTYPE html>
-<html>
-  <head>
-    <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
-    <style>
-      /* Email styles need to be inline */
-    </style>
-  </head>
-
-  <body>
-    <%= yield %>
-  </body>
-</html>

data/examples/rails-custom-login-page/app/views/layouts/mailer.text.erb

@@ -1 +0,0 @@
-<%= yield %>

data/examples/rails-custom-login-page/app/views/users/_form.html.erb

@@ -1 +0,0 @@
-

data/examples/rails-custom-login-page/app/views/users/_user.json.jbuilder

@@ -1,2 +0,0 @@
-json.extract! user, :id, :created_at, :updated_at
-json.url user_url(user, format: :json)

data/examples/rails-custom-login-page/app/views/users/edit.html.erb

@@ -1,33 +0,0 @@
-<div class="container">
-  <div class="row">
-    <div class="col-sm">
-      <p><%= link_to 'Back', users_path %></p>
-
-      <h2>Edit User</h2>
-
-      <%= form_tag update_user_path, method: "patch", class: "edit" do %>
-        <div class="form-group">
-          <label for="firstname">First Name</label>
-          <input type="text" name="firstname" value="<%= @user.firstname%>" class="form-control">
-        </div>
-        <div class="form-group">
-          <label for="lastname">Last Name</label>
-          <input type="text" name="lastname" value="<%= @user.lastname%>" class="form-control">
-        </div>
-        <div class="form-group">
-          <label for="email">Email</label>
-          <input type="text" name="email" value="<%= @user.email%>" class="form-control">
-        </div>
-        <div class="form-group">
-          <label for="email">Phone</label>
-          <input type="text" name="phone" value="<%= @user.phone%>" class="form-control">
-        </div>
-        <div class="form-group">
-          <label for="email">Custom Field</label>
-          <input type="text" name="custom_field" value="<%= @user.custom_attributes['custom_field'] if @user.custom_attributes.present? %>" class="form-control">
-        </div>
-        <button type="submit" class="btn btn-primary">Save</button>
-      <% end %>
-    </div>
-  </div>
-</div>

data/examples/rails-custom-login-page/app/views/users/index.html.erb

@@ -1,33 +0,0 @@
-<p id="notice"><%= notice %></p>
-
-<div class="container">
-  <div class="row">
-    <div class="col-sm">
-      <h2>Users</h2>
-      <table class="table">
-        <thead>
-          <tr>
-            <th scope="col">Name</th>
-            <th scope="col">Email</th>
-            <th scope="col">Phone</th>
-            <th scope="col">Custom Field</th>
-            <th  scope="col" colspan="2"></th>
-          </tr>
-        </thead>
-
-        <tbody>
-          <% @users.each do |user| %>
-            <tr>
-              <td  scope="row"><%= user.firstname %> <%= user.lastname %></td>
-              <td><%= user.email %></td>
-              <td><%= user.phone %></td>
-              <td><%= user.custom_attributes["custom_field"] if user.custom_attributes.is_a?(Hash) %></td>
-              <td><%= link_to 'Show', user_path(user.id) %></td>
-              <td><%= link_to 'Edit', edit_user_path(user.id) %></td>
-            </tr>
-          <% end %>
-        </tbody>
-      </table>
-    </div>
-  </div>
-</div>

data/examples/rails-custom-login-page/app/views/users/index.json.jbuilder

@@ -1 +0,0 @@
-json.array! @users, partial: 'users/user', as: :user

data/examples/rails-custom-login-page/app/views/users/new.html.erb

@@ -1,60 +0,0 @@
-<div class="jumbotron">
-  <p>This is a simple demo of how to sign up a new user and then make them activate their account</p>
-</div>
-
-<div class="container">
-  <div class="row">
-    <div class="col-sm">
-    </div>
-    <div class="col-sm">
-
-      <div class="alert alert-danger message" role="alert">
-      </div>
-
-      <%= form_tag("/users", method: "post", class: 'signup-form') do %>
-        <div class="form-group">
-          <label for="firstname">First Name</label>
-          <%= text_field_tag :firstname, nil, placeholder: 'First Name', class: 'form-control' %>
-        </div>
-        <div class="form-group">
-          <label for="lastname">Last Name</label>
-          <%= text_field_tag :lastname, nil, placeholder: 'Last Name', class: 'form-control' %>
-        </div>
-        <div class="form-group">
-          <label for="email">Email</label>
-          <%= text_field_tag :email, nil, placeholder: 'Email Address', class: 'form-control' %>
-        </div>
-        <div class="form-group">
-          <label for="custom_dob">Date of Birth</label>
-          <%= text_field_tag :custom_dob, nil, placeholder: 'mm/dd/yyyy', class: 'form-control' %>
-        </div>
-        <div class="form-group">
-          <label for="custom_ssn">Last 4 of SSN</label>
-          <%= text_field_tag :custom_ssn, nil, placeholder: 'Last 4 of SSN', class: 'form-control' %>
-        </div>
-        <button type="submit" class="btn btn-primary">Sign Up</button>
-        <hr/>
-        <a href="/">Login</a>
-      <% end %>
-
-    </div>
-    <div class="col-sm">
-    </div>
-  </div>
-</div>
-
-
-<script type="text/javascript">
-  function showAlert(type, message){
-    $(".message").removeClass("alert-danger").removeClass("alert-success");
-    $(".message").addClass("alert-" + type).text(message).show();
-    $(".message").show();
-  }
-  function hideAlert(){
-    $(".message").hide();
-  }
-
-  $(function(){
-    hideAlert();
-  })
-</script>