osso 0.0.3.14 → 0.0.3.19

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: e7d4ef2f0655df3347758666ae0dff639659842ef02bb854de42630871cfc3e3
-  data.tar.gz: 9f77a13360c0ef5f0a2664b3294b1d8997f21b5b29468b3954dd33c569e46f0f
+  metadata.gz: 995be763d7567651350cc953d6d800a8bbd86e3de1eda57f7ab673869ffbb6dc
+  data.tar.gz: 01aa99f9fc68465df111624a22175ce2d5d110e94e2389d128a1c94cb0466494
 SHA512:
-  metadata.gz: b4608569393ebd919ce87c15c033128480ff69aa75c7a5fb0d72bd195be33c088f8466a29a3b89e6a130e07988ab8908500a622644ab98edc13eb3b486099528
-  data.tar.gz: 6a38a9607747ab062a1597f600dd7ac53bacfe22dbfd487e1ba657ceb2123dbb8241ad8ec016c03460425a66be1a1d7c333ca92234ffc78999204e5804af0a9f
+  metadata.gz: e4f45a4c188da6bf0adce208bec4b32ad76850136bed6af4ca221f0f5ccf94c6547b19a8486b92b1e05c57f0224389b25b7f8efd5f0c3a9c260a4a745cb2687c
+  data.tar.gz: 7df17b8bd2726c59a828d4ceb6f04e2246eeb9ac651f12a6f7956f0c65a9b45e5dcc4c2266d55eec3816f64ae635f9fbf70a37cb57eb0f4efc94c1b49803499c

data/.buildkite/pipeline.yml

@@ -5,4 +5,20 @@ steps:
       - bundle exec rake db:drop
       - bundle exec rake db:create
       - RACK_ENV=test bundle exec rake db:migrate
-      - bundle exec rspec
+      - bundle exec rspec
+    artifact_paths:
+      - coverage/*
+  
+  - name: ":codeclimate:"
+    plugins:
+      - jobready/codeclimate-test-reporter#v2.0:
+          artifact: "coverage/.resultset.json"
+          input_type: simplecov
+          prefix: '/var/lib/buildkite-agent/builds/enterprise-oss-bk-1/enterpriseoss/osso-rb/'
+  
+  - block: ":rubygems: Publish :red_button:"
+    branches: "main"
+  
+  - name: "Push :rubygems:"
+    commands: "./bin/publish"
+    branches: "main"

data/.rubocop.yml

@@ -1,4 +1,5 @@
 AllCops:
+  TargetRubyVersion: 2.6.0
   Exclude:
     - db/**/*
     - lib/osso/db/**/*

data/Gemfile

@@ -12,6 +12,7 @@ group :test do
   gem 'rack-test'
   gem 'rspec', '~> 3.2'
   gem 'rubocop'
+  gem 'simplecov', '= 0.17', require: false
   gem 'webmock', '~> 3.0'
 end
 

data/Gemfile.lock

@@ -1,7 +1,7 @@
 PATH
   remote: .
   specs:
-    osso (0.0.3.14)
+    osso (0.0.3.19)
       activesupport (>= 6.0.3.2)
       graphql
       jwt
@@ -48,6 +48,7 @@ GEM
       activerecord
       database_cleaner (~> 1.8.0)
     diff-lcs (1.4.4)
+    docile (1.3.2)
     factory_bot (6.0.2)
       activesupport (>= 5.0.0)
     faker (2.13.0)
@@ -58,6 +59,7 @@ GEM
     httpclient (2.8.3)
     i18n (1.8.3)
       concurrent-ruby (~> 1.0)
+    json (2.3.1)
     json-jwt (1.13.0)
       activesupport (>= 4.2)
       aes_key_wrap
@@ -66,7 +68,7 @@ GEM
     method_source (1.0.0)
     mini_portile2 (2.4.0)
     minitest (5.14.1)
-    multi_json (1.14.1)
+    multi_json (1.15.0)
     mustermann (1.1.1)
       ruby2_keywords (~> 0.0.1)
     nokogiri (1.10.9)
@@ -133,6 +135,11 @@ GEM
       nokogiri (>= 1.5.10)
     ruby2_keywords (0.0.2)
     safe_yaml (1.0.5)
+    simplecov (0.17.0)
+      docile (~> 1.1)
+      json (>= 1.8, < 3)
+      simplecov-html (~> 0.10.0)
+    simplecov-html (0.10.2)
     sinatra (2.0.8.1)
       mustermann (~> 1.0)
       rack (~> 2.0)
@@ -174,6 +181,7 @@ DEPENDENCIES
   rack-test
   rspec (~> 3.2)
   rubocop
+  simplecov (= 0.17)
   webmock (~> 3.0)
 
 BUNDLED WITH

data/README.md

@@ -1,2 +1,3 @@
-[![Maintainability](https://api.codeclimate.com/v1/badges/2b04828dc45bcb5abcb1/maintainability)](https://codeclimate.com/github/enterprise-oss/osso-rb/maintainability)
-[![Build status](https://badge.buildkite.com/0e01845bdd51be4131b9cbd496d9caa39cd48f171fc2d9a9ca.svg)](https://buildkite.com/enterpriseoss/osso-rb)
+[![Maintainability](https://api.codeclimate.com/v1/badges/0d80be043d2747e91ef3/maintainability)](https://codeclimate.com/repos/5f4676cc3f757b01b6011403/maintainability)
+[![Test Coverage](https://api.codeclimate.com/v1/badges/0d80be043d2747e91ef3/test_coverage)](https://codeclimate.com/repos/5f4676cc3f757b01b6011403/test_coverage)
+[![Build status](https://badge.buildkite.com/0e01845bdd51be4131b9cbd496d9caa39cd48f171fc2d9a9ca.svg)](https://buildkite.com/enterpriseoss/osso-rb)

data/bin/publish

@@ -0,0 +1,18 @@
+#!/bin/sh
+# Scriptacular - gemify.sh
+# Create a Ruby gem and push it to rubygems.org
+# Copyright 2013 Christopher Simpkins
+# MIT License
+
+GEM_NAME="osso-rb"
+GEMSPEC_SUFFIX=".gemspec"
+
+# run the gem build and parse for the gem release filename
+GEM_BUILD_NAME=$(gem build "$GEM_NAME$GEMSPEC_SUFFIX" |  awk '/File/ {print $2}' -)
+
+if [ -z "$GEM_BUILD_NAME" ]; then
+  echo "The gem build failed." >&2
+  exit 1
+fi
+
+gem push $GEM_BUILD_NAME

data/db/schema.rb

@@ -10,7 +10,7 @@
 #
 # It's strongly recommended that you check this file into your version control system.
 
-ActiveRecord::Schema.define(version: 2020_07_23_162228) do
+ActiveRecord::Schema.define(version: 2020_08_26_201852) do
 
   # These are extensions that must be enabled in order to support this database
   enable_extension "pgcrypto"
@@ -27,6 +27,14 @@ ActiveRecord::Schema.define(version: 2020_07_23_162228) do
     t.index ["user_id"], name: "index_access_tokens_on_user_id"
   end
 
+  create_table "app_configs", id: :uuid, default: -> { "gen_random_uuid()" }, force: :cascade do |t|
+    t.string "contact_email"
+    t.string "logo_url"
+    t.string "name"
+    t.datetime "created_at", precision: 6, null: false
+    t.datetime "updated_at", precision: 6, null: false
+  end
+
   create_table "authorization_codes", id: :uuid, default: -> { "gen_random_uuid()" }, force: :cascade do |t|
     t.string "token"
     t.string "redirect_uri"

data/lib/osso/db/migrate/20200826201852_create_app_config.rb

@@ -0,0 +1,11 @@
+class CreateAppConfig < ActiveRecord::Migration[6.0]
+  def change
+    create_table :app_configs, id: :uuid do |t|
+      t.string :contact_email
+      t.string :logo_url
+      t.string :name
+      
+      t.timestamps
+    end
+  end
+end

data/lib/osso/graphql/mutation.rb

@@ -14,6 +14,13 @@ module Osso
         field :delete_oauth_client, mutation: Mutations::DeleteOauthClient
         field :set_redirect_uris, mutation: Mutations::SetRedirectUris
         field :regenerate_oauth_credentials, mutation: Mutations::RegenerateOauthCredentials
+        field :update_app_config, mutation: Mutations::UpdateAppConfig
+
+        def self.authorized?(_object, _context)
+          # mutations are prevented from executing with ready? so
+          # its a bit odd that this hides it
+          true
+        end
       end
     end
   end

data/lib/osso/graphql/mutations.rb

@@ -14,3 +14,5 @@ require_relative 'mutations/delete_enterprise_account'
 require_relative 'mutations/delete_oauth_client'
 require_relative 'mutations/regenerate_oauth_credentials'
 require_relative 'mutations/set_redirect_uris'
+require_relative 'mutations/update_app_config'
+

data/lib/osso/graphql/mutations/base_mutation.rb

@@ -15,13 +15,26 @@ module Osso
           error.merge(data: nil)
         end
 
-        def ready?(enterprise_account_id: nil, domain: nil, identity_provider_id: nil, **args)
-          return true if context[:scope] == :admin
+        def ready?(**args)
+          return true if internal_ready?
 
-          domain ||= account_domain(enterprise_account_id) || provider_domain(identity_provider_id)
-          return true if domain == context[:scope]
+          return true if domain_ready?(args[:domain] || domain(**args))
 
-          raise ::GraphQL::ExecutionError, "This user lacks the scope to mutate records belonging to #{args[:domain]}"
+          raise ::GraphQL::ExecutionError, 'This user lacks the permission to make the requested changes'
+        end
+
+        def admin_ready?
+          context[:scope] == 'admin'
+        end
+
+        def internal_ready?
+          return true if admin_ready?
+
+          context[:scope] == 'internal'
+        end
+
+        def domain_ready?(domain)
+          context[:email].split('@')[1] == domain
         end
 
         def account_domain(id)

data/lib/osso/graphql/mutations/configure_identity_provider.rb

@@ -13,22 +13,20 @@ module Osso
         field :identity_provider, Types::IdentityProvider, null: false
         field :errors, [String], null: false
 
-        def resolve(id:, **args)
-          provider = Osso::Models::IdentityProvider.find(id)
+        def resolve(**args)
+          provider = identity_provider(**args)
 
           return response_data(identity_provider: provider) if provider.update(args)
 
-          response_error(errors: provder.errors.messages)
+          response_error(errors: provider.errors.messages)
         end
 
-        def ready?(id:, **_args)
-          return true if context[:scope] == :admin
-
-          domain = Osso::Models::IdentityProvider.find(id)&.domain
-
-          return true if domain == context[:scope]
+        def domain(**args)
+          identity_provider(**args)&.domain
+        end
 
-          raise ::GraphQL::ExecutionError, "This user lacks the scope to mutate records belonging to #{domain}"
+        def identity_provider(id:, **_args)
+          @identity_provider ||= Osso::Models::IdentityProvider.find(id)
         end
       end
     end

data/lib/osso/graphql/mutations/create_enterprise_account.rb

@@ -8,17 +8,24 @@ module Osso
 
         argument :domain, String, required: true
         argument :name, String, required: true
+        argument :oauth_client_id, String, required: false
 
         field :enterprise_account, Types::EnterpriseAccount, null: false
         field :errors, [String], null: false
 
         def resolve(**args)
           enterprise_account = Osso::Models::EnterpriseAccount.new(args)
+          enterprise_account.oauth_client_id ||= find_client_db_id(context[:oauth_client_id])
 
           return response_data(enterprise_account: enterprise_account) if enterprise_account.save
 
           response_error(errors: enterprise_account.errors.full_messages)
         end
+
+        def find_client_db_id(oauth_client_identifier)
+          Osso::Models::OauthClient.find_by(identifier: oauth_client_identifier).
+            id
+        end
       end
     end
   end

data/lib/osso/graphql/mutations/create_identity_provider.rb

@@ -12,18 +12,27 @@ module Osso
         field :identity_provider, Types::IdentityProvider, null: false
         field :errors, [String], null: false
 
-        def resolve(enterprise_account_id:, service: nil)
-          enterprise_account = Osso::Models::EnterpriseAccount.find(enterprise_account_id)
-          identity_provider = enterprise_account.identity_providers.build(
-            enterprise_account_id: enterprise_account_id,
+        def resolve(service: nil, **args)
+          customer = enterprise_account(**args)
+
+          identity_provider = customer.identity_providers.build(
             service: service,
-            domain: enterprise_account.domain,
+            domain: customer.domain,
+            oauth_client_id: customer.oauth_client_id,
           )
 
           return response_data(identity_provider: identity_provider) if identity_provider.save
 
           response_error(errors: identity_provider.errors.full_messages)
         end
+
+        def domain(**args)
+          enterprise_account(**args)&.domain
+        end
+
+        def enterprise_account(enterprise_account_id:, **_args)
+          @enterprise_account ||= Osso::Models::EnterpriseAccount.find(enterprise_account_id)
+        end
       end
     end
   end

data/lib/osso/graphql/mutations/create_oauth_client.rb

@@ -20,9 +20,7 @@ module Osso
         end
 
         def ready?(*)
-          return true if context[:scope] == :admin
-
-          raise ::GraphQL::ExecutionError, 'Only admin users may mutate OauthClients'
+          admin_ready?
         end
       end
     end

data/lib/osso/graphql/mutations/delete_enterprise_account.rb

@@ -11,22 +11,20 @@ module Osso
         field :enterprise_account, Types::EnterpriseAccount, null: true
         field :errors, [String], null: false
 
-        def resolve(id:)
-          enterprise_account = Osso::Models::EnterpriseAccount.find(id)
-
-          return response_data(enterprise_account: nil) if enterprise_account.destroy
-
-          response_error(errors: enterprise_account.errors.full_messages)
+        def enterprise_account(id:, **_args)
+          @enterprise_account ||= Osso::Models::EnterpriseAccount.find(id)
         end
 
-        def ready?(id:)
-          return true if context[:scope] == :admin
+        def resolve(**args)
+          customer = enterprise_account(**args)
 
-          domain = account_domain(id)
+          return response_data(enterprise_account: nil) if customer.destroy
 
-          return true if domain == context[:scope]
+          response_error(errors: customer.errors.full_messages)
+        end
 
-          raise ::GraphQL::ExecutionError, "This user lacks the scope to mutate records belonging to #{domain}"
+        def domain(**args)
+          enterprise_account(**args).domain
         end
       end
     end

data/lib/osso/graphql/mutations/delete_oauth_client.rb

@@ -20,9 +20,7 @@ module Osso
         end
 
         def ready?(*)
-          return true if context[:scope] == :admin
-
-          raise ::GraphQL::ExecutionError, 'Only admin users may mutate OauthClients'
+          admin_ready?
         end
       end
     end

data/lib/osso/graphql/mutations/regenerate_oauth_credentials.rb

@@ -21,9 +21,7 @@ module Osso
         end
 
         def ready?(*)
-          return true if context[:scope] == :admin
-
-          raise ::GraphQL::ExecutionError, 'Only admin users may mutate OauthClients'
+          admin_ready?
         end
       end
     end

data/lib/osso/graphql/mutations/set_redirect_uris.rb

@@ -24,14 +24,12 @@ module Osso
         end
 
         def ready?(*)
-          return true if context[:scope] == :admin
-
-          raise ::GraphQL::ExecutionError, 'Only admin users may mutate OauthClients'
+          admin_ready?
         end
 
         def update_existing(oauth_client, redirect_uris)
           oauth_client.redirect_uris.each do |redirect|
-            updating_index = redirect_uris.index{ |incoming| incoming[:id] == redirect.id }
+            updating_index = redirect_uris.index { |incoming| incoming[:id] == redirect.id }
 
             if updating_index
               updating = redirect_uris.delete_at(updating_index)

data/lib/osso/graphql/mutations/update_app_config.rb

@@ -0,0 +1,30 @@
+# frozen_string_literal: true
+
+module Osso
+  module GraphQL
+    module Mutations
+      class UpdateAppConfig < BaseMutation
+        null false
+
+        argument :name, String, required: false
+        argument :logo_url, String, required: false
+        argument :contact_email, String, required: false
+
+
+        field :app_config, Types::AppConfig, null: true
+        field :errors, [String], null: false
+
+        def resolve(**args)
+          app_config = Osso::Models::AppConfig.find
+          return response_data(app_config: app_config) if app_config.update(**args)
+          
+          response_error(errors: e)
+        end
+
+        def ready?(*)
+          admin_ready?
+        end
+      end
+    end
+  end
+end

data/lib/osso/graphql/query.rb

@@ -24,6 +24,13 @@ module Osso
           argument :id, ID, required: true
         end
 
+        field(
+          :app_config,
+          Types::AppConfig,
+          null: false,
+          resolve: ->(_obj, _args, _context) { Osso::Models::AppConfig.find },
+        )
+
         field(
           :oauth_client,
           Types::OauthClient,
@@ -32,6 +39,13 @@ module Osso
         ) do
           argument :id, ID, required: true
         end
+
+        field(
+          :current_user,
+          Types::AdminUser,
+          null: false,
+          resolve: ->(_obj, _args, context) { context.to_h },
+        )
       end
     end
   end