onelogin 1.7.0 → 1.9.0

data/examples/rails-custom-login-page/app/views/home/index.html.erb

@@ -1,272 +0,0 @@
-<div class="jumbotron">
-  <p>This is a simple demo of how to authenticate a user and handle MFA when required</p>
-</div>
-
-<div class="container">
-  <div class="row">
-    <div class="col-sm">
-    </div>
-    <div class="col-sm">
-
-      <div class="alert alert-danger message" role="alert">
-      </div>
-
-      <% url_base = CUSTOM_DOMAIN || ONELOGIN_SUBDOMAIN + ".onelogin.com" %>
-      <% url_create_session = "https://" + url_base + "/session_via_api_token" %>
-
-      <form action="<%= url_create_session %>" method="post" class="cookie-session-post-form">
-        <input type="hidden" id="cookie_session_token" name="session_token" value="">
-        <input id="auth_token" type="hidden">
-        <button type="submit">Creating Session ...</button>
-      </form>
-
-      <%= form_tag("/login", method: "post", class: 'login-form') do %>
-        <div class="form-group">
-          <label for="username">Username</label>
-          <%= text_field_tag :username, nil, placeholder: 'Enter Username', class: 'form-control' %>
-        </div>
-        <div class="form-group">
-          <label for="password">Password</label>
-          <%= password_field_tag :password, nil, placeholder: 'Enter Password', class: 'form-control' %>
-        </div>
-        <button type="submit" class="btn btn-primary">Login</button>
-        <hr/>
-        <a href="#" class="forgot">Forgot Password</a> | <a href="/signup">Sign Up</a>
-      <% end %>
-
-      <%= form_tag("/verify_mfa", method: "post", class: 'mfa-form') do %>
-        <div class="form-group">
-          <label for="device_id">MFA Device</label>
-          <%= select_tag :device_id, nil, {:class => 'form-control'} %>
-        </div>
-        <div class="form-group">
-          <label for="otp_token">Token</label>
-          <%= text_field_tag :otp_token, nil, placeholder: 'Enter Token', class: 'form-control' %>
-        </div>
-        <button type="submit" class="btn btn-primary">Verify Token</button>
-      <% end %>
-
-      <%= form_tag("/forgot_password", method: "post", class: 'forgot-password-form') do %>
-        <div class="form-group">
-          <label for="forgot_username">Username</label>
-          <%= text_field_tag :forgot_username, nil, placeholder: 'Enter Username', class: 'form-control' %>
-        </div>
-        <button type="submit" class="btn btn-primary">Reset Password</button> or <a href="/">Login</a>
-      <% end %>
-
-      <%= form_tag("/reset_password", method: "post", class: 'reset-password-form') do %>
-        <div class="form-group">
-          <label for="reset_device_id">MFA Device</label>
-          <%= select_tag :reset_device_id, nil, {:class => 'form-control'} %>
-        </div>
-        <div class="form-group">
-          <label for="reset_otp_token">Token</label>
-          <%= text_field_tag :reset_otp_token, nil, placeholder: 'Enter Token', class: 'form-control' %>
-        </div>
-        <div class="form-group">
-          <label for="new_password">New Password</label>
-          <%= password_field_tag :new_password, nil, placeholder: 'Enter New Password', class: 'form-control' %>
-        </div>
-        <button type="submit" class="btn btn-primary">Save Password</button>
-      <% end %>
-
-      <form method="POST" action="" id="sp"></form>
-
-    </div>
-    <div class="col-sm">
-    </div>
-  </div>
-</div>
-
-
-
-
-<script type="text/javascript">
-
-  var ONELOGIN_SUBDOMAIN = "<%= ONELOGIN_SUBDOMAIN %>";
-  var CUSTOM_DOMAIN = "<%= CUSTOM_DOMAIN %>";
-  var COOKIE_VIA_POST_FORM = <%= COOKIE_VIA_POST_FORM || false %>;
-
-  function makeCors(session_token) {
-    var xhr = new XMLHttpRequest();
-    xhr.withCredentials = true;
-    method = "POST";
-    if (CUSTOM_DOMAIN) {
-      var url = "https://" + CUSTOM_DOMAIN + "/session_via_api_token";
-    } else {
-      var url = "https://" + ONELOGIN_SUBDOMAIN + ".onelogin.com/session_via_api_token";
-    }
-    xhr.open(method, url, true);
-    xhr.setRequestHeader("Content-Type", "application/json");
-    body = {"session_token": session_token};
-    xhr.onreadystatechange = function () {
-      if(xhr.readyState === 4 && xhr.status === 200) {
-        if(getUrlParameter("origin")){
-          // If there is an origin SP then redirect to it
-          redirectToSP()
-        } else{
-          // Otherwise redirect to the main dashboard
-          window.location.href = '/dashboard';
-        }
-      }
-    };
-    xhr.send(JSON.stringify(body));
-  };
-
-  function sendPostForm(session_token){
-    $(".cookie-session-post-form").show();
-    $("#cookie_session_token").val(session_token);
-    $(".cookie-session-post-form").submit();
-  }
-
-  function showAlert(type, message){
-    $(".message").removeClass("alert-danger").removeClass("alert-success");
-    $(".message").addClass("alert-" + type).text(message).show();
-    $(".message").show();
-  }
-  function hideAlert(){
-    $(".message").hide();
-  }
-
-  function getUrlParameter(sParam) {
-      var sPageURL = window.location.search.substring(1),
-          sURLVariables = sPageURL.split('&'),
-          sParameterName,
-          i;
-
-      for (i = 0; i < sURLVariables.length; i++) {
-          sParameterName = sURLVariables[i].split('=');
-
-          if (sParameterName[0] === sParam) {
-              return sParameterName[1] === undefined ? true : decodeURIComponent(sParameterName[1]);
-          }
-      }
-  };
-
-  function redirectToSP() {
-    var origin = getUrlParameter("origin");
-    var samlRequest = getUrlParameter("SAMLRequest");
-    var url = origin + "&SAMLRequest=" + samlRequest;
-    $("#sp").attr("action", url).submit();
-  }
-
-  $(function(){
-    hideAlert();
-    $(".login-form").show();
-    $(".cookie-session-post-form").hide();
-    $(".mfa-form").hide();
-    $(".forgot-password-form").hide();
-    $(".reset-password-form").hide();
-
-    $(".forgot").click(function(e){
-      e.preventDefault();
-      $(".forgot-password-form").show();
-      $(".login-form").hide();
-    });
-
-    $(".login-form").on("submit", function(event){
-      $.ajax({
-        type: "POST",
-        url: this.action,
-        data: $(this).serialize(),
-        success: function(res, status, xhr) {
-          console.log(res);
-          if(res.requires_mfa){
-            console.log('requires mfa')
-            showAlert('danger', 'MFA Required')
-
-            for(var i=0; i<res.devices.length; i++){
-              $('.mfa-form select').append('<option value="' + res.devices[i].id + '">' + res.devices[i].type + '</option>');
-            }
-            $(".login-form").hide();
-            $(".mfa-form").show();
-
-          } else {
-            if (typeof COOKIE_VIA_POST_FORM === 'boolean' && COOKIE_VIA_POST_FORM === true) {
-              sendPostForm(res.session_token);
-            } else {
-              makeCors(res.session_token);
-            }
-          }
-        },
-        error: function(xhr, status, err) {
-          console.log(err);
-          console.log(xhr);
-          showAlert('danger', xhr.responseJSON.error);
-          $(".login-form input[type=submit]").removeAttr("disabled");
-        },
-      });
-      event.preventDefault();
-    });
-
-    $(".mfa-form").on("submit", function(event){
-      $.ajax({
-        type: "POST",
-        url: this.action,
-        data: $(this).serialize(),
-        success: function(res, status, xhr) {
-          console.log(res);
-
-          if (typeof COOKIE_VIA_POST_FORM === 'boolean' && COOKIE_VIA_POST_FORM === true) {
-            sendPostForm(res.session_token);
-          } else {
-            makeCors(res.session_token);
-          }
-        },
-        error: function(xhr, status, err) {
-          console.log(err);
-          showAlert("danger", "MFA Verification Failed");
-          $(".login-form").show();
-          $(".mfa-form").hide();
-          $(".login-form input[type=submit]").removeAttr("disabled");
-          $(".mfa-form input[type=submit]").removeAttr("disabled");
-        },
-      });
-      event.preventDefault();
-    });
-
-    $(".forgot-password-form").on("submit", function(event){
-      $.ajax({
-        type: "POST",
-        url: this.action,
-        data: $(this).serialize(),
-        success: function(res, status, xhr) {
-          console.log(res);
-
-          for(var i=0; i<res.length; i++){
-            $('.reset-password-form select').append('<option value="' + res[i].id + '">' + res[i].auth_factor_name + '</option>');
-          }
-
-          $(".forgot-password-form").hide();
-          $(".reset-password-form").show();
-        },
-        error: function(xhr, status, err) {
-          console.log(err);
-          showAlert("danger", "User not found");
-        },
-      });
-      event.preventDefault();
-    });
-
-    $(".reset-password-form").on("submit", function(event){
-      $.ajax({
-        type: "POST",
-        url: this.action,
-        data: $(this).serialize(),
-        success: function(res, status, xhr) {
-          console.log(res);
-
-          $(".login-form").show();
-          $(".forgot-password-form").hide();
-          $(".reset-password-form").hide();
-          showAlert("success", "Password changed");
-        },
-        error: function(xhr, status, err) {
-          console.log(err);
-          showAlert("danger", err);
-        },
-      });
-      event.preventDefault();
-    });
-  })
-</script>

data/examples/rails-custom-login-page/app/views/layouts/application.html.erb

@@ -1,31 +0,0 @@
-<!DOCTYPE html>
-<html>
-  <head>
-    <title>OneLogin</title>
-    <%= csrf_meta_tags %>
-
-    <%= stylesheet_link_tag    'application', media: 'all', 'data-turbolinks-track': 'reload' %>
-    <%= javascript_include_tag 'application', 'data-turbolinks-track': 'reload' %>
-    <link rel="stylesheet" href="https://maxcdn.bootstrapcdn.com/bootstrap/4.0.0-beta.2/css/bootstrap.min.css" integrity="sha384-PsH8R72JQ3SOdhVi3uxftmaW6Vc51MKb0q5P2rRUpPvrszuE4W1povHYgTpBfshb" crossorigin="anonymous">
-  </head>
-
-  <body>
-    <nav class="navbar navbar-expand-lg navbar-dark bg-primary">
-      <a class="navbar-brand" href="#">OneLogin Ruby SDK Sample</a>
-      <div class="collapse navbar-collapse" id="navbarNavAltMarkup">
-        <div class="navbar-nav">
-          <a class="nav-item nav-link active" href="/">Login</a>
-          <a class="nav-item nav-link" href="/signup">Sign Up</a>
-          <a class="nav-item nav-link" href="/onboard">Onboard</a>
-        </div>
-      </div>
-    </nav>
-
-
-    <% flash.each do |key, value| %>
-      <div class="alert alert-warning"><%= value %></div>
-    <% end %>
-
-    <%= yield %>
-  </body>
-</html>

data/examples/rails-custom-login-page/app/views/layouts/mailer.html.erb

@@ -1,13 +0,0 @@
-<!DOCTYPE html>
-<html>
-  <head>
-    <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
-    <style>
-      /* Email styles need to be inline */
-    </style>
-  </head>
-
-  <body>
-    <%= yield %>
-  </body>
-</html>

data/examples/rails-custom-login-page/app/views/layouts/mailer.text.erb

@@ -1 +0,0 @@
-<%= yield %>

data/examples/rails-custom-login-page/app/views/users/_form.html.erb

@@ -1 +0,0 @@
-

data/examples/rails-custom-login-page/app/views/users/_user.json.jbuilder

@@ -1,2 +0,0 @@
-json.extract! user, :id, :created_at, :updated_at
-json.url user_url(user, format: :json)

data/examples/rails-custom-login-page/app/views/users/edit.html.erb

@@ -1,33 +0,0 @@
-<div class="container">
-  <div class="row">
-    <div class="col-sm">
-      <p><%= link_to 'Back', users_path %></p>
-
-      <h2>Edit User</h2>
-
-      <%= form_tag update_user_path, method: "patch", class: "edit" do %>
-        <div class="form-group">
-          <label for="firstname">First Name</label>
-          <input type="text" name="firstname" value="<%= @user.firstname%>" class="form-control">
-        </div>
-        <div class="form-group">
-          <label for="lastname">Last Name</label>
-          <input type="text" name="lastname" value="<%= @user.lastname%>" class="form-control">
-        </div>
-        <div class="form-group">
-          <label for="email">Email</label>
-          <input type="text" name="email" value="<%= @user.email%>" class="form-control">
-        </div>
-        <div class="form-group">
-          <label for="email">Phone</label>
-          <input type="text" name="phone" value="<%= @user.phone%>" class="form-control">
-        </div>
-        <div class="form-group">
-          <label for="email">Custom Field</label>
-          <input type="text" name="custom_field" value="<%= @user.custom_attributes['custom_field'] if @user.custom_attributes.present? %>" class="form-control">
-        </div>
-        <button type="submit" class="btn btn-primary">Save</button>
-      <% end %>
-    </div>
-  </div>
-</div>

data/examples/rails-custom-login-page/app/views/users/index.html.erb

@@ -1,33 +0,0 @@
-<p id="notice"><%= notice %></p>
-
-<div class="container">
-  <div class="row">
-    <div class="col-sm">
-      <h2>Users</h2>
-      <table class="table">
-        <thead>
-          <tr>
-            <th scope="col">Name</th>
-            <th scope="col">Email</th>
-            <th scope="col">Phone</th>
-            <th scope="col">Custom Field</th>
-            <th  scope="col" colspan="2"></th>
-          </tr>
-        </thead>
-
-        <tbody>
-          <% @users.each do |user| %>
-            <tr>
-              <td  scope="row"><%= user.firstname %> <%= user.lastname %></td>
-              <td><%= user.email %></td>
-              <td><%= user.phone %></td>
-              <td><%= user.custom_attributes["custom_field"] if user.custom_attributes.is_a?(Hash) %></td>
-              <td><%= link_to 'Show', user_path(user.id) %></td>
-              <td><%= link_to 'Edit', edit_user_path(user.id) %></td>
-            </tr>
-          <% end %>
-        </tbody>
-      </table>
-    </div>
-  </div>
-</div>

data/examples/rails-custom-login-page/app/views/users/index.json.jbuilder

@@ -1 +0,0 @@
-json.array! @users, partial: 'users/user', as: :user

data/examples/rails-custom-login-page/app/views/users/new.html.erb

@@ -1,60 +0,0 @@
-<div class="jumbotron">
-  <p>This is a simple demo of how to sign up a new user and then make them activate their account</p>
-</div>
-
-<div class="container">
-  <div class="row">
-    <div class="col-sm">
-    </div>
-    <div class="col-sm">
-
-      <div class="alert alert-danger message" role="alert">
-      </div>
-
-      <%= form_tag("/users", method: "post", class: 'signup-form') do %>
-        <div class="form-group">
-          <label for="firstname">First Name</label>
-          <%= text_field_tag :firstname, nil, placeholder: 'First Name', class: 'form-control' %>
-        </div>
-        <div class="form-group">
-          <label for="lastname">Last Name</label>
-          <%= text_field_tag :lastname, nil, placeholder: 'Last Name', class: 'form-control' %>
-        </div>
-        <div class="form-group">
-          <label for="email">Email</label>
-          <%= text_field_tag :email, nil, placeholder: 'Email Address', class: 'form-control' %>
-        </div>
-        <div class="form-group">
-          <label for="custom_dob">Date of Birth</label>
-          <%= text_field_tag :custom_dob, nil, placeholder: 'mm/dd/yyyy', class: 'form-control' %>
-        </div>
-        <div class="form-group">
-          <label for="custom_ssn">Last 4 of SSN</label>
-          <%= text_field_tag :custom_ssn, nil, placeholder: 'Last 4 of SSN', class: 'form-control' %>
-        </div>
-        <button type="submit" class="btn btn-primary">Sign Up</button>
-        <hr/>
-        <a href="/">Login</a>
-      <% end %>
-
-    </div>
-    <div class="col-sm">
-    </div>
-  </div>
-</div>
-
-
-<script type="text/javascript">
-  function showAlert(type, message){
-    $(".message").removeClass("alert-danger").removeClass("alert-success");
-    $(".message").addClass("alert-" + type).text(message).show();
-    $(".message").show();
-  }
-  function hideAlert(){
-    $(".message").hide();
-  }
-
-  $(function(){
-    hideAlert();
-  })
-</script>

data/examples/rails-custom-login-page/app/views/users/onboard.html.erb

@@ -1,54 +0,0 @@
-<div class="jumbotron">
-  <p>This shows how an unactivated user could supply infomation to complete a sign up flow</p>
-</div>
-
-<div class="container">
-  <div class="row">
-    <div class="col-sm">
-    </div>
-    <div class="col-sm">
-
-      <div class="alert alert-danger message" role="alert">
-      </div>
-
-      <%= form_tag("/activate", method: "post", class: 'signup-form') do %>
-        <div class="form-group">
-          <label for="email">Email</label>
-          <%= text_field_tag :email, nil, placeholder: 'Email Address', class: 'form-control' %>
-        </div>
-        <div class="form-group">
-          <label for="custom_dob">Date of Birth</label>
-          <%= text_field_tag :custom_dob, nil, placeholder: 'mm/dd/yyyy', class: 'form-control' %>
-        </div>
-        <div class="form-group">
-          <label for="custom_ssn">Last 4 of SSN</label>
-          <%= text_field_tag :custom_ssn, nil, placeholder: 'Last 4 of SSN', class: 'form-control' %>
-        </div>
-        <div class="form-group">
-          <label for="password">Password</label>
-          <%= password_field_tag :password, nil, placeholder: 'Make up a password', class: 'form-control' %>
-        </div>
-        <button type="submit" class="btn btn-primary">Activate Account</button>
-      <% end %>
-
-    </div>
-    <div class="col-sm">
-    </div>
-  </div>
-</div>
-
-
-<script type="text/javascript">
-  function showAlert(type, message){
-    $(".message").removeClass("alert-danger").removeClass("alert-success");
-    $(".message").addClass("alert-" + type).text(message).show();
-    $(".message").show();
-  }
-  function hideAlert(){
-    $(".message").hide();
-  }
-
-  $(function(){
-    hideAlert();
-  })
-</script>

data/examples/rails-custom-login-page/app/views/users/show.html.erb

@@ -1,17 +0,0 @@
-<div class="container">
-  <div class="row">
-    <div class="col-sm">
-      <%= link_to 'Edit', edit_user_path(@user.id) %> |
-      <%= link_to 'Back', users_path %>
-
-      <h2><%= @user.firstname %> <%= @user.lastname %></h2>
-      <ul class="list-group">
-      <%@user.instance_values.symbolize_keys.each do |k, v|%>
-        <li class="list-group-item">
-          <b><%= k%>:</b> <%= v%>
-        </li>
-      <%end%>
-      </ul>
-    </div>
-  </div>
-</div>

data/examples/rails-custom-login-page/app/views/users/show.json.jbuilder

@@ -1 +0,0 @@
-json.partial! "users/user", user: @user

data/examples/rails-custom-login-page/bin/bundle

@@ -1,3 +0,0 @@
-#!/usr/bin/env ruby
-ENV['BUNDLE_GEMFILE'] ||= File.expand_path('../../Gemfile', __FILE__)
-load Gem.bin_path('bundler', 'bundle')

data/examples/rails-custom-login-page/bin/rails

@@ -1,9 +0,0 @@
-#!/usr/bin/env ruby
-begin
-  load File.expand_path('../spring', __FILE__)
-rescue LoadError => e
-  raise unless e.message.include?('spring')
-end
-APP_PATH = File.expand_path('../config/application', __dir__)
-require_relative '../config/boot'
-require 'rails/commands'

data/examples/rails-custom-login-page/bin/rake

@@ -1,9 +0,0 @@
-#!/usr/bin/env ruby
-begin
-  load File.expand_path('../spring', __FILE__)
-rescue LoadError => e
-  raise unless e.message.include?('spring')
-end
-require_relative '../config/boot'
-require 'rake'
-Rake.application.run

data/examples/rails-custom-login-page/bin/setup

@@ -1,38 +0,0 @@
-#!/usr/bin/env ruby
-require 'pathname'
-require 'fileutils'
-include FileUtils
-
-# path to your application root.
-APP_ROOT = Pathname.new File.expand_path('../../', __FILE__)
-
-def system!(*args)
-  system(*args) || abort("\n== Command #{args} failed ==")
-end
-
-chdir APP_ROOT do
-  # This script is a starting point to setup your application.
-  # Add necessary setup steps to this file.
-
-  puts '== Installing dependencies =='
-  system! 'gem install bundler --conservative'
-  system('bundle check') || system!('bundle install')
-
-  # Install JavaScript dependencies if using Yarn
-  # system('bin/yarn')
-
-
-  # puts "\n== Copying sample files =="
-  # unless File.exist?('config/database.yml')
-  #   cp 'config/database.yml.sample', 'config/database.yml'
-  # end
-
-  puts "\n== Preparing database =="
-  system! 'bin/rails db:setup'
-
-  puts "\n== Removing old logs and tempfiles =="
-  system! 'bin/rails log:clear tmp:clear'
-
-  puts "\n== Restarting application server =="
-  system! 'bin/rails restart'
-end

data/examples/rails-custom-login-page/bin/spring

@@ -1,17 +0,0 @@
-#!/usr/bin/env ruby
-
-# This file loads spring without using Bundler, in order to be fast.
-# It gets overwritten when you run the `spring binstub` command.
-
-unless defined?(Spring)
-  require 'rubygems'
-  require 'bundler'
-
-  lockfile = Bundler::LockfileParser.new(Bundler.default_lockfile.read)
-  spring = lockfile.specs.detect { |spec| spec.name == "spring" }
-  if spring
-    Gem.use_paths Gem.dir, Bundler.bundle_path.to_s, *Gem.path
-    gem 'spring', spring.version
-    require 'spring/binstub'
-  end
-end

data/examples/rails-custom-login-page/bin/update

@@ -1,29 +0,0 @@
-#!/usr/bin/env ruby
-require 'pathname'
-require 'fileutils'
-include FileUtils
-
-# path to your application root.
-APP_ROOT = Pathname.new File.expand_path('../../', __FILE__)
-
-def system!(*args)
-  system(*args) || abort("\n== Command #{args} failed ==")
-end
-
-chdir APP_ROOT do
-  # This script is a way to update your development environment automatically.
-  # Add necessary update steps to this file.
-
-  puts '== Installing dependencies =='
-  system! 'gem install bundler --conservative'
-  system('bundle check') || system!('bundle install')
-
-  puts "\n== Updating database =="
-  system! 'bin/rails db:migrate'
-
-  puts "\n== Removing old logs and tempfiles =="
-  system! 'bin/rails log:clear tmp:clear'
-
-  puts "\n== Restarting application server =="
-  system! 'bin/rails restart'
-end

data/examples/rails-custom-login-page/bin/yarn

@@ -1,11 +0,0 @@
-#!/usr/bin/env ruby
-VENDOR_PATH = File.expand_path('..', __dir__)
-Dir.chdir(VENDOR_PATH) do
-  begin
-    exec "yarnpkg #{ARGV.join(" ")}"
-  rescue Errno::ENOENT
-    $stderr.puts "Yarn executable was not detected in the system."
-    $stderr.puts "Download Yarn at https://yarnpkg.com/en/docs/install"
-    exit 1
-  end
-end