rack-cas-client 0.1.0

data/.document

@@ -0,0 +1,5 @@
+lib/**/*.rb
+bin/*
+- 
+features/**/*.feature
+LICENSE.txt

data/.rspec

@@ -0,0 +1 @@
+--color

data/Gemfile

@@ -0,0 +1,11 @@
+source "http://rubygems.org"
+gem 'rubycas-client', "~> 2.2.1"
+gem 'activesupport', '>= 2'
+
+# Include everything needed to run rake, tests, features, etc.
+group :development do
+  gem "rspec", "~> 2.3.0"
+  gem "bundler", "~> 1.0.0"
+  gem "jeweler", "~> 1.6.4"
+  gem "rcov", ">= 0"
+end

data/Gemfile.lock

@@ -0,0 +1,35 @@
+GEM
+  remote: http://rubygems.org/
+  specs:
+    activesupport (3.1.0)
+      multi_json (~> 1.0)
+    diff-lcs (1.1.3)
+    git (1.2.5)
+    jeweler (1.6.4)
+      bundler (~> 1.0)
+      git (>= 1.2.5)
+      rake
+    multi_json (1.0.3)
+    rake (0.9.2)
+    rcov (0.9.10)
+    rspec (2.3.0)
+      rspec-core (~> 2.3.0)
+      rspec-expectations (~> 2.3.0)
+      rspec-mocks (~> 2.3.0)
+    rspec-core (2.3.1)
+    rspec-expectations (2.3.0)
+      diff-lcs (~> 1.1.2)
+    rspec-mocks (2.3.0)
+    rubycas-client (2.2.1)
+      activesupport
+
+PLATFORMS
+  ruby
+
+DEPENDENCIES
+  activesupport (>= 2)
+  bundler (~> 1.0.0)
+  jeweler (~> 1.6.4)
+  rcov
+  rspec (~> 2.3.0)
+  rubycas-client (~> 2.2.1)

data/LICENSE.txt

@@ -0,0 +1,20 @@
+Copyright (c) 2011 Jerome Riga
+
+Permission is hereby granted, free of charge, to any person obtaining
+a copy of this software and associated documentation files (the
+"Software"), to deal in the Software without restriction, including
+without limitation the rights to use, copy, modify, merge, publish,
+distribute, sublicense, and/or sell copies of the Software, and to
+permit persons to whom the Software is furnished to do so, subject to
+the following conditions:
+
+The above copyright notice and this permission notice shall be
+included in all copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND,
+EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF
+MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND
+NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE
+LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION
+OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION
+WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.

data/README.rdoc

@@ -0,0 +1,58 @@
+= rack-cas-client
+  This middleware will redirect all unauthenticated requests to the specified cas server. After a successful authentication the cas server will redirect the user back to your application with a service ticket. This ticket is used to check the validity of the user's session on subsequent calls.
+
+  By default the user's login username is store in the session (session['cas']['user']). If your cas server is configured to send extra attributes (http://code.google.com/p/rubycas-server/wiki/HowToSendExtraUserAttributes), then they are accessible at (session['cas']['user_extra']).
+
+  To log user out, send a DELETE to /logout and the middleware will delete the user's session.
+
+  This middleware was inspired by the 'rubycas-client-rails' gem 
+
+== Basic Usage
+ require 'rack/cas_client'
+
+ app = Rack::Builder.new {
+   use Rack::Session::Cookie
+   use Rack::Cas::Client, :cas_base_url => 'https://cas.myserver:443/', :session_dir => './tmp/sessions'
+   run lambda {|env|
+     request = Rack::Request.new(env)
+     [200, {'Content-Type' => 'text/html'}, ['<p>You are in '+"#{request.session['cas']['user']}"+' </p><p>Extra '+ "#{request.session['cas']['user_extra'].inspect}" +'</p><form action="/logout" method="post"><input type="hidden" name="_method" value="delete" /><input type="submit" value="out"/></form> ']]
+   }
+ }
+
+run app
+
+== Rails
+ In config/application.rb or in an environment file
+
+ config.middleware.insert_after ActionDispatch::Session::CookieStore,  Rack::Cas::Client, :cas_base_url => 'https://cas.server:443/', :session_dir => './tmp/sessions'
+
+== Sinatra
+ require 'sinatra/base'
+ 
+ class App < Sinatra::Base
+   use Rack::Session::Cookie
+   use Rack::Cas::Client, :cas_base_url => 'https://cas.myserver:443/', :session_dir => './tmp/sessions'
+ end
+
+ run App.new
+
+
+== Todo
+ * Add tests
+ * cleanup code
+
+== Contributing to rack-cas-client
+ 
+* Check out the latest master to make sure the feature hasn't been implemented or the bug hasn't been fixed yet
+* Check out the issue tracker to make sure someone already hasn't requested it and/or contributed it
+* Fork the project
+* Start a feature/bugfix branch
+* Commit and push until you are happy with your contribution
+* Make sure to add tests for it. This is important so I don't break it in a future version unintentionally.
+* Please try not to mess with the Rakefile, version, or history. If you want to have your own version, or is otherwise necessary, that is fine, but please isolate to its own commit so I can cherry-pick around it.
+
+== Copyright
+
+Copyright (c) 2011 Jerome Riga. See LICENSE.txt for
+further details.
+

data/Rakefile

@@ -0,0 +1,49 @@
+# encoding: utf-8
+
+require 'rubygems'
+require 'bundler'
+begin
+  Bundler.setup(:default, :development)
+rescue Bundler::BundlerError => e
+  $stderr.puts e.message
+  $stderr.puts "Run `bundle install` to install missing gems"
+  exit e.status_code
+end
+require 'rake'
+
+require 'jeweler'
+Jeweler::Tasks.new do |gem|
+  # gem is a Gem::Specification... see http://docs.rubygems.org/read/chapter/20 for more options
+  gem.name = "rack-cas-client"
+  gem.homepage = "http://github.com/zemis/rack-cas-client"
+  gem.license = "MIT"
+  gem.summary = %Q{Rack middleware for authentication with CAS server}
+  gem.description = %Q{Rack middleware that handles user authentication against a cas server}
+  gem.email = "jriga@zemis.co.uk"
+  gem.authors = ["Jerome Riga"]
+  # dependencies defined in Gemfile
+end
+Jeweler::RubygemsDotOrgTasks.new
+
+require 'rspec/core'
+require 'rspec/core/rake_task'
+RSpec::Core::RakeTask.new(:spec) do |spec|
+  spec.pattern = FileList['spec/**/*_spec.rb']
+end
+
+RSpec::Core::RakeTask.new(:rcov) do |spec|
+  spec.pattern = 'spec/**/*_spec.rb'
+  spec.rcov = true
+end
+
+task :default => :spec
+
+require 'rake/rdoctask'
+Rake::RDocTask.new do |rdoc|
+  version = File.exist?('VERSION') ? File.read('VERSION') : ""
+
+  rdoc.rdoc_dir = 'rdoc'
+  rdoc.title = "rack-cas-client #{version}"
+  rdoc.rdoc_files.include('README*')
+  rdoc.rdoc_files.include('lib/**/*.rb')
+end

data/VERSION

@@ -0,0 +1 @@
+0.1.0

data/config.ru

@@ -0,0 +1,14 @@
+require 'rack'
+require './lib/rack/cas_client.rb'
+
+
+app = Rack::Builder.new {
+  use Rack::Session::Cookie
+  use Rack::Cas::Client, :cas_base_url => 'https://localhost:44300/', :session_dir => './tmp/sessions', :enable_single_sign_out => true
+  run lambda {|env|
+    request = Rack::Request.new(env)
+    [200, {'Content-Type' => 'text/html'}, ['<p>You are in '+"#{request.session['cas']['user']}"+' </p><p>Extra '+ "#{request.session['cas']['user_extra'].inspect}" +'</p><form action="/logout" method="post"><input type="hidden" name="_method" value="delete" /><input type="submit" value="out"/></form> ']]
+  }
+}
+
+run app

data/lib/rack/cas_client.rb

@@ -0,0 +1,437 @@
+require 'logger'
+require 'uri'
+require 'casclient'
+require 'ostruct'
+
+# TODO: remove dependency on activesuppor/core_ext
+# rubycas-client-2.2.1/lib/casclient/responses.rb:40 => String.blank?
+# rubycas-client-2.2.1/lib/casclient/responses.rb:68 => Hash.from_xml(xml)
+require 'active_support/core_ext'
+
+module Rack
+  module Cas
+
+    module SessionStore
+      module FileSystem
+        # Creates a file in tmp/sessions linking a SessionTicket
+        # with the local Rails session id. The file is named
+        # cas_sess.<session ticket> and its text contents is the corresponding 
+        # Rails session id.
+        # Returns the filename of the lookup file created.
+        def store_service_session_lookup(st, sid)
+          st = st.ticket if st.kind_of? CASClient::ServiceTicket
+          f = ::File.new(filename_of_service_session_lookup(st), 'w')
+          f.write(sid)
+          f.close
+          return f.path
+        end
+        
+        # Returns the local Rails session ID corresponding to the given
+        # ServiceTicket. This is done by reading the contents of the
+        # cas_sess.<session ticket> file created in a prior call to 
+        # #store_service_session_lookup.
+        def read_service_session_lookup(st)
+          st = st.ticket if st.kind_of? CASClient::ServiceTicket
+          ssl_filename = filename_of_service_session_lookup(st)
+          return ::File.exists?(ssl_filename) && IO.read(ssl_filename)
+        end
+        
+        # Removes a stored relationship between a ServiceTicket and a local
+        # Rails session id. This should be called when the session is being
+        # closed.
+        #
+        # See #store_service_session_lookup.
+        def delete_service_session_lookup(st)
+          st = st.ticket if st.kind_of? CASClient::ServiceTicket
+          ssl_filename = filename_of_service_session_lookup(st)
+          ::File.delete(ssl_filename) if ::File.exists?(ssl_filename)
+        end
+        
+        # Returns the path and filename of the service session lookup file.
+        def filename_of_service_session_lookup(st)
+          st = st.ticket if st.kind_of? CASClient::ServiceTicket
+          return "#{config[:session_dir]}/cas_sess.#{st}"
+        end
+      end
+    end
+    
+    
+    class Client < Struct.new :app, :options
+      include SessionStore::FileSystem
+      attr_reader :mem
+      
+      def call(env)
+        if assets_request?(env);                         return app.call(env);                          end
+        if logout_options = logout_request?(env);        return logout(*logout_options)                 end
+        if request = sso_request?(env);                  return single_sign_out(request)                end
+        if valid_session_options = authenticated?(env);  return valid_session(*valid_session_options)   end
+        if xml_request?(env);                            return unauthorized_request                    end
+          
+        redirect_to_cas_for_authentication(env)
+      end  
+
+      protected
+      def client
+        @client ||= CASClient::Client.new(config)
+      end
+
+      def log
+        @logger ||= Rails.logger rescue ::Logger.new(STDOUT)
+      end
+
+      def config
+        @config ||= {
+          :cas_base_url => nil,
+          :cas_destination_logout_param_name  => nil,
+          :logger  => log,
+          :username_session_key  => nil,
+          :extra_attributes_session_key  => nil,
+          :ticket_store  => nil,
+          :login_url  => nil,
+          :validate_url  => nil,
+          :proxy_url  => nil,
+          :logout_url  => nil,
+          :service_url  => nil,
+          :proxy_callback_url  => nil,
+          :proxy_retrieval_url => nil,
+          :tmp_dir => nil
+        }.merge(options)
+        raise "You must provide the location " if @config[:enable_single_sign_out] && @config[:session_dir].nil?
+        @config
+      end
+
+      def assets_request?(env)
+        Rack::Request.new(env).path =~ /.*\.(js|css|png|jpg|jpeg|gif|ico)$/i
+      end
+
+      def logout_request?(env)
+        request = Rack::Request.new(env)
+        if request.path == '/logout' && request.delete?
+          #        st = last_service_ticket
+          st = request.session['cas']['last_valid_ticket']
+          [st, request]
+        end
+      end
+
+      def logout(st, request)
+        log.debug("Logging out!!")
+        log.debug("looking up st for deletion #{st.inspect}")
+        
+        delete_service_session_lookup(st) if st
+        request.session.delete('cas')
+
+        response  = Rack::Response.new
+        response.redirect(client.logout_url(request.referer))
+        response.finish
+      end
+
+      def sso_request?(env)
+        request = Rack::Request.new(env)
+        request if request.post? && request.params['logoutRequest']
+      end
+
+      def single_sign_out(request)
+        log.debug("SINGLE SIGN OUT")
+        logoutRequest = URI.unescape(request.params['logoutRequest'])
+        
+        md = logoutRequest.match( %r{^<samlp:LogoutRequest.*?<samlp:SessionIndex>(.*)</samlp:SessionIndex>}m )
+        if md && md[1]
+          ticket = md[1]
+          done = delete_service_session_lookup(ticket) 
+          if done
+            [200,{'Content-type' => 'text/plain'},['session deleted']]
+          else
+            [404,{'Content-type' => 'text/plain'},['session not found']]
+          end
+        else
+          [400,{'Content-type' => 'text/plain'},['missing service ticket in request']]
+        end
+      end
+
+      def unauthorized_request
+        log.debug("Unauthorized request")
+        if vr
+          [401, {'Content-type' => 'application/xml'}, ["<errors><error>#{vr.failure_message}</error></errors>"]]
+        else
+          [401, {'Content-type' => 'text/html'}, [vr.failure_message]]
+        end
+      end
+
+      def xml_request?(env)
+        Rack::Request.new(env).params[:format] == "xml"
+      end
+      
+
+      def authenticated?(env)
+        request = Rack::Request.new(env)
+        @mem = request.session['cas'] || {}
+
+        current_service_ticket = nil
+        user = nil
+        user_extra = nil
+        new_session = true
+        
+        case check_service_ticket(env)
+        when :identical
+          log.warn("Re-using previously validated ticket since the ticket id and service are the same.")
+          new_session = false
+          current_service_ticket = last_service_ticket
+          
+        when :different
+          log.debug "Existing local CAS session detected for #{client_username_session_key.inspect}. "+"Previous ticket #{last_service_ticket.ticket.inspect} will be re-used."
+          new_session = false
+          current_service_ticket = last_service_ticket
+          
+        else
+          log.debug("New session!")
+          current_service_ticket = service_ticket(env)
+        end
+
+        if current_service_ticket
+          unless current_service_ticket.has_been_validated?
+            log.debug("VALIDATING SERVICE TICKET")
+            client.validate_service_ticket(current_service_ticket)
+          end
+          vr = current_service_ticket.response
+
+          if current_service_ticket.is_valid?
+            work_for_vr_pgt_iou(vr,env) if vr.pgt_iou
+
+            return [env, request, new_session, current_service_ticket]
+          else
+            
+            log.warn("Ticket #{current_service_ticket.ticket.inspect} failed validation -- #{vr.failure_code}: #{vr.failure_message}")
+            return false
+          end
+        else
+
+          # no service ticket was present in the request
+          if gateway
+            log.info "Returning from CAS gateway without authentication."
+
+            # unset, to allow for the next request to be authenticated if necessary
+            sent_to_gateway = false
+
+            if config[:use_gatewaying]
+              log.info "This CAS client is configured to use gatewaying, so we will permit the user to continue without authentication."
+              client_username_session_key = nil
+              return true
+            else
+              log.warn "The CAS client is NOT configured to allow gatewaying, yet this request was gatewayed. Something is not right!"
+            end
+          end
+          
+       
+          return false
+
+        end
+
+      rescue OpenSSL::SSL::SSLError
+        log.error("SSL Error: hostname was not match with the server certificate. You can try to disable the ssl verification with a :force_ssl_verification => false in your configurations file.")
+        
+        return false
+      end
+
+      def valid_session(env, request, new_session, current_service_ticket)
+        cas_resp = current_service_ticket.response
+        log.info("Ticket #{current_service_ticket.ticket.inspect} for service #{current_service_ticket.service.inspect} belonging to user #{cas_resp.user.inspect} is VALID.")
+        env['rack.cas.client.user'] = cas_resp.user
+        env['rack.cas.client.user_extra'] = cas_resp.extra_attributes.dup
+
+        # TODO: remove ticket params from env
+      
+        status, headers, body = app.call(env)
+        
+        response = Rack::Response.new(body, status, headers)
+        # only modify the session when it's a new_session
+        if new_session
+          session = request.session
+          session['cas'] = {'last_valid_ticket' => current_service_ticket, 'filteruser' => cas_resp.user, 'username_session_key' => cas_resp.user}
+
+          if config[:enable_single_sign_out]
+            f = store_service_session_lookup(current_service_ticket, session)
+            log.debug("Wrote service session lookup file to #{f.inspect} with session id #{session.inspect}.")
+          end
+          
+          response.delete_cookie(request.session_options[:key], {})
+          response.set_cookie(request.session_options[:key], session)
+        end
+        response.finish
+      end
+
+      def work_for_vr_pgt_iou(vr,env)
+        log.debug("CALLING work_for_vr_pgt_iou with vr #{vr.inspect}")
+        request = Rack::Request.new(env)
+        unless request.session[:cas_pgt] && request.session[:cas_pgt].ticket && request.session[:cas_pgt].iou == vr.pgt_iou
+          log.info("Receipt has a proxy-granting ticket IOU. Attempting to retrieve the proxy-granting ticket...")
+          pgt = client.retrieve_proxy_granting_ticket(vr.pgt_iou)
+          
+          if pgt
+            log.debug("Got PGT #{pgt.ticket.inspect} for PGT IOU #{pgt.iou.inspect}. This will be stored in the session.")
+            request.session[:cas_pgt] = pgt
+            # For backwards compatibility with RubyCAS-Client 1.x configurations...
+            request.session[:casfilterpgt] = pgt
+          else
+            log.error("Failed to retrieve a PGT for PGT IOU #{vr.pgt_iou}!")
+          end
+        else
+          log.info("PGT is present in session and PGT IOU #{vr.pgt_iou} matches the saved PGT IOU.  Not retrieving new PGT.")
+        end
+        
+      end
+
+      def check_service_ticket(env)
+        st, last_st = [service_ticket(env), last_service_ticket]
+     
+        return :identical if st && last_st && last_st.ticket == st.ticket && last_st.service == st.service
+        return :different if last_st && !config[:authenticate_on_every_request] && client_username_session_key
+      end
+
+      def service_ticket(env)
+        request = Rack::Request.new(env)
+
+        ticket = request.params['ticket']
+        return unless ticket
+
+        if ticket =~ /^PT-/
+          CASClient::ProxyTicket.new(ticket, service_url(env), request.params.delete('renew'))
+        else
+          CASClient::ServiceTicket.new(ticket, service_url(env), request.params.delete('renew'))
+        end
+      end
+
+      def last_service_ticket
+        @mem['last_valid_ticket']
+      end
+      def last_service_ticket=(value)
+        @mem['last_valid_ticket'] = value
+      end
+
+      def client_username_session_key
+        @mem['username_session_key']
+      end
+      def client_username_session_key=(value)
+        @mem['username_session_key'] = value
+      end
+
+      def client_extra_attributes_session_key
+        @mem['user_extra']
+      end
+      def client_extra_attributes_session_key=(value)
+        @mem['user_extra'] = value
+      end
+      def casfilteruser=(value)
+        @mem['filteruser'] = value
+      end
+      def gateway=(value)
+        @mem['sent_to_gateway'] = value
+      end
+      def gateway
+        @mem['sent_to_gateway']
+      end
+      def previous_redirect_to_cas
+        @mem['previous_redirect']
+      end
+      def previous_redirect_to_cas=(value)
+        @mem['cas']['previous_redirect'] = value
+      end
+      def validation_retry
+        @mem['validation_retry'] || 0
+      end
+      def validation_retry=(value)
+        @mem['validation_retry'] = value
+      end
+      
+      def vr
+        @vr
+      end
+
+      def vr=(value)
+        @vr = value
+      end
+
+      def service_url(env)
+        return @service_url if @service_url
+        
+        if config[:service_url]
+          log.debug("Using explicitly set service url: #{config[:service_url]}")
+          return @service_url = config[:service_url]
+        end
+        request = Rack::Request.new(env)
+
+        params = request.params.dup
+        params.delete(:ticket)
+        url = URI.const_get(request.scheme.upcase).build(:host => request.host, :port => request.port, :path => request.path, :query => request.query_string)
+        @service_url = url.to_s
+        log.debug("Guessed service url: #{@service_url}")
+        @service_url
+      end
+
+
+      def redirect_to_cas_for_authentication(env)
+        redirect_url = login_url(env)
+        
+        if config[:use_gatewaying]
+          gateway = true
+          redirect_url << "&gateway=true"
+        else
+          gateway = false
+        end
+        
+        if previous_redirect_to_cas  && previous_redirect_to_cas > (Time.now - 1.second)
+          log.warn("Previous redirect to the CAS server was less than a second ago. The client at #{controller.request.remote_ip.inspect} may be stuck in a redirection loop!")
+          
+          if validation_retry > 3
+            log.error("Redirection loop intercepted. Client at #{controller.request.remote_ip.inspect} will be redirected back to login page and forced to renew authentication.")
+            redirect_url += "&renew=1&redirection_loop_intercepted=1"
+          end
+
+          validation_retry = validation_retry + 1
+        else
+          validation_retry = 0
+        end
+        previous_redirect_to_cas = Time.now
+        
+        request  = Rack::Request.new(env)
+        response = Rack::Response.new(["redirect to #{redirect_url}"],302, {'Location' => redirect_url, 'Content-Type' => 'text/plain'})
+
+        return response.finish
+      end
+
+
+      # Returns the login URL for the current controller. 
+      # Useful when you want to provide a "Login" link in a GatewayFilter'ed
+      # action. 
+      def login_url(env)
+        url = client.add_service_to_login_url(service_url(env))
+        log.debug("Generated login url: #{url}")
+        return url
+      end
+     
+    end
+
+
+    module ClientHelpers
+
+      module Sinatra
+        def current_user
+          return @current_user if @current_user
+          user_data = {:username => request.env['rack.cas.client.user']}
+          user_data.merge!(request.env['rack.cas.client.user_extra'])
+          @current_user = OpenStruct.new(user_data)
+        end
+      end
+
+      module Rails
+        def current_user
+          return @current_user if @current_user
+          user_data = {:username => request.env['rack.cas.client.user']}
+          user_data.merge!(request.env['rack.cas.client.user_extra'])
+          @current_user = OpenStruct.new(user_data)
+        end
+      end
+      
+    end
+    
+  end
+end

data/rack-cas-client.gemspec

@@ -0,0 +1,68 @@
+# Generated by jeweler
+# DO NOT EDIT THIS FILE DIRECTLY
+# Instead, edit Jeweler::Tasks in Rakefile, and run 'rake gemspec'
+# -*- encoding: utf-8 -*-
+
+Gem::Specification.new do |s|
+  s.name = %q{rack-cas-client}
+  s.version = "0.1.0"
+
+  s.required_rubygems_version = Gem::Requirement.new(">= 0") if s.respond_to? :required_rubygems_version=
+  s.authors = [%q{Jerome Riga}]
+  s.date = %q{2011-10-10}
+  s.description = %q{Rack middleware that handles user authentication against a cas server}
+  s.email = %q{jriga@zemis.co.uk}
+  s.extra_rdoc_files = [
+    "LICENSE.txt",
+    "README.rdoc"
+  ]
+  s.files = [
+    ".document",
+    ".rspec",
+    "Gemfile",
+    "Gemfile.lock",
+    "LICENSE.txt",
+    "README.rdoc",
+    "Rakefile",
+    "VERSION",
+    "config.ru",
+    "lib/rack-cas-client.rb",
+    "lib/rack/cas_client.rb",
+    "rack-cas-client.gemspec",
+    "spec/rack-cas-client_spec.rb",
+    "spec/spec_helper.rb"
+  ]
+  s.homepage = %q{http://github.com/zemis/rack-cas-client}
+  s.licenses = [%q{MIT}]
+  s.require_paths = [%q{lib}]
+  s.rubygems_version = %q{1.8.6}
+  s.summary = %q{Rack middleware for authentication with CAS server}
+
+  if s.respond_to? :specification_version then
+    s.specification_version = 3
+
+    if Gem::Version.new(Gem::VERSION) >= Gem::Version.new('1.2.0') then
+      s.add_runtime_dependency(%q<rubycas-client>, ["~> 2.2.1"])
+      s.add_runtime_dependency(%q<activesupport>, [">= 2"])
+      s.add_development_dependency(%q<rspec>, ["~> 2.3.0"])
+      s.add_development_dependency(%q<bundler>, ["~> 1.0.0"])
+      s.add_development_dependency(%q<jeweler>, ["~> 1.6.4"])
+      s.add_development_dependency(%q<rcov>, [">= 0"])
+    else
+      s.add_dependency(%q<rubycas-client>, ["~> 2.2.1"])
+      s.add_dependency(%q<activesupport>, [">= 2"])
+      s.add_dependency(%q<rspec>, ["~> 2.3.0"])
+      s.add_dependency(%q<bundler>, ["~> 1.0.0"])
+      s.add_dependency(%q<jeweler>, ["~> 1.6.4"])
+      s.add_dependency(%q<rcov>, [">= 0"])
+    end
+  else
+    s.add_dependency(%q<rubycas-client>, ["~> 2.2.1"])
+    s.add_dependency(%q<activesupport>, [">= 2"])
+    s.add_dependency(%q<rspec>, ["~> 2.3.0"])
+    s.add_dependency(%q<bundler>, ["~> 1.0.0"])
+    s.add_dependency(%q<jeweler>, ["~> 1.6.4"])
+    s.add_dependency(%q<rcov>, [">= 0"])
+  end
+end
+

data/spec/rack-cas-client_spec.rb

@@ -0,0 +1,7 @@
+require File.expand_path(File.dirname(__FILE__) + '/spec_helper')
+
+describe "RackCasClient" do
+  it "fails" do
+    fail "hey buddy, you should probably rename this file and start specing for real"
+  end
+end

data/spec/spec_helper.rb

@@ -0,0 +1,12 @@
+$LOAD_PATH.unshift(File.join(File.dirname(__FILE__), '..', 'lib'))
+$LOAD_PATH.unshift(File.dirname(__FILE__))
+require 'rspec'
+require 'rack-cas-client'
+
+# Requires supporting files with custom matchers and macros, etc,
+# in ./support/ and its subdirectories.
+Dir["#{File.dirname(__FILE__)}/support/**/*.rb"].each {|f| require f}
+
+RSpec.configure do |config|
+  
+end

metadata

@@ -0,0 +1,130 @@
+--- !ruby/object:Gem::Specification
+name: rack-cas-client
+version: !ruby/object:Gem::Version
+  version: 0.1.0
+  prerelease: 
+platform: ruby
+authors:
+- Jerome Riga
+autorequire: 
+bindir: bin
+cert_chain: []
+date: 2011-10-10 00:00:00.000000000Z
+dependencies:
+- !ruby/object:Gem::Dependency
+  name: rubycas-client
+  requirement: &2156465080 !ruby/object:Gem::Requirement
+    none: false
+    requirements:
+    - - ~>
+      - !ruby/object:Gem::Version
+        version: 2.2.1
+  type: :runtime
+  prerelease: false
+  version_requirements: *2156465080
+- !ruby/object:Gem::Dependency
+  name: activesupport
+  requirement: &2156464560 !ruby/object:Gem::Requirement
+    none: false
+    requirements:
+    - - ! '>='
+      - !ruby/object:Gem::Version
+        version: '2'
+  type: :runtime
+  prerelease: false
+  version_requirements: *2156464560
+- !ruby/object:Gem::Dependency
+  name: rspec
+  requirement: &2156464080 !ruby/object:Gem::Requirement
+    none: false
+    requirements:
+    - - ~>
+      - !ruby/object:Gem::Version
+        version: 2.3.0
+  type: :development
+  prerelease: false
+  version_requirements: *2156464080
+- !ruby/object:Gem::Dependency
+  name: bundler
+  requirement: &2156463600 !ruby/object:Gem::Requirement
+    none: false
+    requirements:
+    - - ~>
+      - !ruby/object:Gem::Version
+        version: 1.0.0
+  type: :development
+  prerelease: false
+  version_requirements: *2156463600
+- !ruby/object:Gem::Dependency
+  name: jeweler
+  requirement: &2156463120 !ruby/object:Gem::Requirement
+    none: false
+    requirements:
+    - - ~>
+      - !ruby/object:Gem::Version
+        version: 1.6.4
+  type: :development
+  prerelease: false
+  version_requirements: *2156463120
+- !ruby/object:Gem::Dependency
+  name: rcov
+  requirement: &2156462640 !ruby/object:Gem::Requirement
+    none: false
+    requirements:
+    - - ! '>='
+      - !ruby/object:Gem::Version
+        version: '0'
+  type: :development
+  prerelease: false
+  version_requirements: *2156462640
+description: Rack middleware that handles user authentication against a cas server
+email: jriga@zemis.co.uk
+executables: []
+extensions: []
+extra_rdoc_files:
+- LICENSE.txt
+- README.rdoc
+files:
+- .document
+- .rspec
+- Gemfile
+- Gemfile.lock
+- LICENSE.txt
+- README.rdoc
+- Rakefile
+- VERSION
+- config.ru
+- lib/rack-cas-client.rb
+- lib/rack/cas_client.rb
+- rack-cas-client.gemspec
+- spec/rack-cas-client_spec.rb
+- spec/spec_helper.rb
+homepage: http://github.com/zemis/rack-cas-client
+licenses:
+- MIT
+post_install_message: 
+rdoc_options: []
+require_paths:
+- lib
+required_ruby_version: !ruby/object:Gem::Requirement
+  none: false
+  requirements:
+  - - ! '>='
+    - !ruby/object:Gem::Version
+      version: '0'
+      segments:
+      - 0
+      hash: -4063731964327134772
+required_rubygems_version: !ruby/object:Gem::Requirement
+  none: false
+  requirements:
+  - - ! '>='
+    - !ruby/object:Gem::Version
+      version: '0'
+requirements: []
+rubyforge_project: 
+rubygems_version: 1.8.6
+signing_key: 
+specification_version: 3
+summary: Rack middleware for authentication with CAS server
+test_files: []