rack-cas 0.10.0 → 0.10.1

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA1:
-  metadata.gz: d5489d9f59ed22ec943c535fa71d22767989376f
-  data.tar.gz: 96d2bb87575ba742f39d8afc7ba15827eb44aa60
+  metadata.gz: e30e5b118a618b8b272d36176d0297a3b6bb9ce9
+  data.tar.gz: 69b1b0c2de4fdb69220eaee104766eae66897b85
 SHA512:
-  metadata.gz: 8f3844078c537810c728a96f37631aaa158df1935b696a5cbe9806810c0375db71070b401d80460b86f515a30dcbd94946a213b8ebe68922842b189be67df2db
-  data.tar.gz: e2f627bcdf127c60a051d1152d1f4a294e23fc6466275a5374f09f7f97107ebb0d8dae0aa0e54cb27c171b2609ed5db5b6844fc365680c9c5d3f50ff8c91e8d7
+  metadata.gz: f85843bf2c05234cf863b2dd5c7653059deb871f76d4bfb6b147fce28731c150fa4f7145526a77e89af9bb75111d6c8c00685e2f592a319b86c3347b5eeb6944
+  data.tar.gz: 18101042feca858fb47f224d4887026d6a5cebbc12dd8a300c2ce2dcf92de2df4e118d017208517bdc19472e0e096f5d9f997e4f7264b69f38a58065924d40cb

data/README.md

@@ -88,6 +88,15 @@ Single sign out support outside of Rails is currently untested. We'll be adding
 Configuration
 =============
 
+Extra Attributes
+----------------
+
+You can whitelist which extra attributes to keep.
+In your `config/application.rb`:
+```ruby
+config.rack_cas.extra_attributes_filter = %w(some_attribute some_other_attribute)
+```
+
 Excluding Paths
 ---------------
 
@@ -101,6 +110,25 @@ The same options can be passed to `FakeCAS`.
 ```ruby
 use Rack::FakeCAS, exclude_path: '/api'
 ```
+
+SSL Cert Verification
+---------------------
+
+If you're working in development or staging your CAS server may not have a legit SSL cert. You can turn off SSL Cert verification by adding the following to `config/application.rb`.
+
+```ruby
+config.rack_cas.verify_ssl_cert = false
+```
+
+CAS Login Renew Flag
+--------------
+
+The CAS standard allows for a `renew=true` parameter to be passed to the CAS server which will force the user to re-login every time CAS authentication is performed, for added security. To enable this for your application, add the following to `config/application.rb`.
+
+```ruby
+config.rack_cas.renew = true
+```
+
 Integration
 ===========
 Your app should __return a [401 status](http://httpstatus.es/401)__ whenever a request is made that requires authentication. Rack-CAS will catch these responses and attempt to authenticate via your CAS server.

data/lib/rack-cas/configuration.rb

@@ -1,6 +1,6 @@
 module RackCAS
   class Configuration
-    SETTINGS = [:server_url, :session_store, :exclude_path, :exclude_paths, :extra_attributes_filter, :verify_ssl_cert]
+    SETTINGS = [:server_url, :session_store, :exclude_path, :exclude_paths, :extra_attributes_filter, :verify_ssl_cert, :renew]
 
     SETTINGS.each do |setting|
       attr_accessor setting

data/lib/rack-cas/server.rb

@@ -9,7 +9,10 @@ module RackCAS
 
     def login_url(service_url, params = {})
       service_url = URL.parse(service_url).to_s
-      @url.dup.append_path('login').add_params({service: service_url}.merge(params))
+      base_params = {service: service_url}
+      base_params[:renew] = true if RackCAS.config.renew?
+
+      @url.dup.append_path('login').add_params(base_params.merge(params))
     end
 
     def logout_url(params = {})
@@ -31,4 +34,4 @@ module RackCAS
       @url.dup.append_path('serviceValidate').add_params(service: service_url, ticket: ticket)
     end
   end
-end
+end

data/lib/rack-cas/version.rb

@@ -1,3 +1,3 @@
 module RackCAS
-  VERSION = '0.10.0'
+  VERSION = '0.10.1'
 end

data/lib/rack/cas.rb

@@ -71,7 +71,9 @@ class Rack::CAS
   end
 
   def store_session(request, user, ticket, extra_attrs = {})
-    extra_attrs.select! { |key, val| RackCAS.config.extra_attributes_filter.map(&:to_s).include? key.to_s }
+    if RackCAS.config.extra_attributes_filter?
+      extra_attrs.select! { |key, val| RackCAS.config.extra_attributes_filter.map(&:to_s).include? key.to_s }
+    end
 
     request.session['cas'] = { 'user' => user, 'ticket' => ticket, 'extra_attributes' => extra_attrs }
   end

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: rack-cas
 version: !ruby/object:Gem::Version
-  version: 0.10.0
+  version: 0.10.1
 platform: ruby
 authors:
 - Adam Crownoble
 autorequire: 
 bindir: bin
 cert_chain: []
-date: 2015-03-11 00:00:00.000000000 Z
+date: 2015-03-18 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: rack