openid-token-proxy 0.1.0 → 0.1.1

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA1:
-  metadata.gz: 036360c10b330eabfbacd91009ab6ffd948caaaf
-  data.tar.gz: 5cc9438acbb74f17d8f4870ffd5899da09a542ae
+  metadata.gz: 367c9b989127b83d27046b97d8d0eed4bb62bc26
+  data.tar.gz: 0f5b072253012066745622211b7176ba24a797d7
 SHA512:
-  metadata.gz: 82b2be465db4d1e0787dda423e88b434aaa9e4af60c7472d6ae9537fe3aea769275f0f0a8796470925f340b4c8d42f56dfb7fd3b54260cbea8946f6612fcc3fe
-  data.tar.gz: 6e82dd27d7e61e87a75d08663a3d4fb6052cc4f97b2b6774fe2a2359f006b15f3a0f4908dfdac3727e7533794911182922f20e7c944a0aa2876fdc1081dbc218
+  metadata.gz: 61558da5b310ec2fb8322b1d8011d5b6df5081e6943f95c70e8c73685fdda3047d67252a57bf9efc220403f78e4d4a75910fab19589feb57fcba2f1187501ccb
+  data.tar.gz: 4fca1eff9249fa10be128a1874da69aa82f08feb4bddbda93df17e6af75c192e761eb2f735befe3cbe1410e9b44f1c9609c2e5982b6b0c44205ea9b8f496f5ee

data/CHANGELOG.md

@@ -1,5 +1,11 @@
 # Changelog
 
+### v0.1.1 - May 12, 2015
+
+- Token expiry time is exposed through `X-Token-Expiry-Time` header.
+- Adds `Token#expiry_time`.
+
+
 ### v0.1.0 - May 6, 2015
 
 - Initial release.

data/README.md

@@ -9,8 +9,6 @@
 Retrieves and refreshes OpenID tokens on behalf of a user when dealing with complex
 authentication schemes, such as client-side certificates.
 
-**Note: Under development, not for production usage just yet**
-
 **Supported Ruby versions: 2.0.0 or higher**
 
 Licensed under the **MIT** license, see LICENSE for more information.
@@ -149,6 +147,8 @@ Access tokens may be provided with one of the following:
 - `Authorization: Bearer <token>` header.
 - Query string parameter `token`.
 
+Token expiry time will be exposed through the `X-Token-Expiry-Time` header.
+
 
 #### Identity / claims
 

data/lib/openid_token_proxy/token.rb

@@ -52,6 +52,10 @@ module OpenIDTokenProxy
       true
     end
 
+    def expiry_time
+      Time.at(id_token.exp.to_i).utc
+    end
+
     def expired?
       id_token.exp.to_i <= Time.now.to_i
     end

data/lib/openid_token_proxy/token/authentication.rb

@@ -14,6 +14,7 @@ module OpenIDTokenProxy
       module ClassMethods
         def require_valid_token(*args)
           before_action :require_valid_token, *args
+          after_action :expose_token_expiry_time
         end
       end
 
@@ -33,6 +34,10 @@ module OpenIDTokenProxy
                                 client_id: config.client_id
       end
 
+      def expose_token_expiry_time
+        response.headers['X-Token-Expiry-Time'] = current_token.expiry_time.iso8601
+      end
+
       def current_token
         @current_token ||= OpenIDTokenProxy::Token.decode!(raw_token)
       end

data/lib/openid_token_proxy/version.rb

@@ -1,3 +1,3 @@
 module OpenIDTokenProxy
-  VERSION = '0.1.0'
+  VERSION = '0.1.1'
 end

data/spec/lib/openid_token_proxy/config_spec.rb

@@ -61,6 +61,30 @@ RSpec.describe OpenIDTokenProxy::Config do
     end
   end
 
+  describe '#domain_hint' do
+    it 'obtains its default from environment' do
+      stub_env('OPENID_DOMAIN_HINT', 'from env')
+      expect(subject.domain_hint).to eq 'from env'
+    end
+
+    it 'may be overriden' do
+      subject.domain_hint = 'overridden'
+      expect(subject.domain_hint).to eq 'overridden'
+    end
+  end
+
+  describe '#prompt' do
+    it 'obtains its default from environment' do
+      stub_env('OPENID_PROMPT', 'from env')
+      expect(subject.prompt).to eq 'from env'
+    end
+
+    it 'may be overriden' do
+      subject.prompt = 'overridden'
+      expect(subject.prompt).to eq 'overridden'
+    end
+  end
+
   describe '#redirect_uri' do
     it 'obtains its default from environment' do
       stub_env('OPENID_REDIRECT_URI', 'from env')

data/spec/lib/openid_token_proxy/token/authentication_spec.rb

@@ -3,7 +3,13 @@ require 'spec_helper'
 RSpec.describe OpenIDTokenProxy::Token::Authentication, type: :controller do
   let(:authorization_uri) { 'https://id.hyper.no/authorize' }
   let(:access_token) { 'access token' }
-  let(:token) { OpenIDTokenProxy::Token.new(access_token) }
+  let(:expiry_time) { 2.hours.from_now }
+  let(:id_token) {
+    double(
+      exp: expiry_time
+    )
+  }
+  let(:token) { OpenIDTokenProxy::Token.new(access_token, id_token) }
 
   before do
     allow(token).to receive(:validate!).and_return true
@@ -38,6 +44,11 @@ RSpec.describe OpenIDTokenProxy::Token::Authentication, type: :controller do
       expect(response).to have_http_status :ok
       expect(response.body).to eq 'Authentication successful'
     end
+
+    it 'exposes token expiry time through header' do
+      get :index
+      expect(response.headers['X-Token-Expiry-Time']).to eq expiry_time.iso8601
+    end
   end
 
   describe '#current_token' do

data/spec/lib/openid_token_proxy/token/refresh_spec.rb

@@ -6,8 +6,18 @@ RSpec.describe OpenIDTokenProxy::Token::Refresh, type: :controller do
   let(:token) {
     OpenIDTokenProxy::Token.new('expired access token', nil, refresh_token)
   }
+  let(:refreshed_expiry_time) { 2.hours.from_now }
+  let(:refreshed_id_token) {
+    double(
+      exp: refreshed_expiry_time
+    )
+  }
   let(:refreshed_token) {
-    OpenIDTokenProxy::Token.new('new access token', nil, 'new refresh token')
+    OpenIDTokenProxy::Token.new(
+      'new access token',
+      refreshed_id_token,
+      'new refresh token'
+    )
   }
 
   before do
@@ -52,6 +62,7 @@ RSpec.describe OpenIDTokenProxy::Token::Refresh, type: :controller do
         expect(response.body).to eq 'Refresh successful'
         expect(response.headers['X-Token']).to eq 'new access token'
         expect(response.headers['X-Refresh-Token']).to eq 'new refresh token'
+        expect(response.headers['X-Token-Expiry-Time']).to eq refreshed_expiry_time.iso8601
       end
     end
   end

data/spec/lib/openid_token_proxy/token_spec.rb

@@ -6,11 +6,11 @@ RSpec.describe OpenIDTokenProxy::Token do
   let(:audience) { 'audience' }
   let(:client_id) { 'client ID' }
   let(:issuer) { 'issuer' }
-  let(:expiry_date) { 2.hours.from_now }
+  let(:expiry_time) { 2.hours.from_now }
 
   let(:id_token) {
     double(
-      exp: expiry_date,
+      exp: expiry_time,
       aud: audience,
       iss: issuer,
       raw_attributes: {
@@ -33,7 +33,7 @@ RSpec.describe OpenIDTokenProxy::Token do
 
   describe '#validate!' do
     context 'when token has expired' do
-      let(:expiry_date) { 2.hours.ago }
+      let(:expiry_time) { 2.hours.ago }
 
       it 'raises' do
         expect do
@@ -78,9 +78,19 @@ RSpec.describe OpenIDTokenProxy::Token do
     end
   end
 
+  describe '#expiry_time' do
+    it 'returns expiry time' do
+      expect(subject.expiry_time.to_i).to eq expiry_time.to_i
+    end
+
+    it 'is in UTC' do
+      expect(subject.expiry_time.zone).to eq 'UTC'
+    end
+  end
+
   describe '#expired?' do
     context 'when token has expired' do
-      let(:expiry_date) { 2.hours.ago }
+      let(:expiry_time) { 2.hours.ago }
       it { should be_expired }
     end
 

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: openid-token-proxy
 version: !ruby/object:Gem::Version
-  version: 0.1.0
+  version: 0.1.1
 platform: ruby
 authors:
 - Tim Kurvers
 autorequire: 
 bindir: bin
 cert_chain: []
-date: 2015-05-06 00:00:00.000000000 Z
+date: 2015-05-12 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: openid_connect