rack-cas 0.15.0 → 0.16.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA1:
-  metadata.gz: 331bdbb7c24a322d0dfe7c303a559a3e8ca1e90d
-  data.tar.gz: c297ba3e573f426ef8a7f4b115164e69ebc15424
+  metadata.gz: 0d93b9b6cfd9a88b23291eb5c3babac6313c7bcd
+  data.tar.gz: 397e001a435e2944c8c49e3390237d485abd8897
 SHA512:
-  metadata.gz: 693e08e44143824390e2c1f432db5f93677fbf89f2c0b8f14ad0cb958ef20d96b94255726a34d67e906685caa21a9717c25de0b493d4745570eabd42cf6e03e4
-  data.tar.gz: 05006fc0e6cbf026c7249fdac340144e0857c6d7b4a6945be635ff708237ed366ca8f5e8681eb77f7345a5d5265826447024ec8f7dee6f67907f3dd2c652add3
+  metadata.gz: be21fd7776d5e5b81ba56e776db5585381d301904c80737d85faeeb23adf0f7689665e9fdcb2e9acbaf6bdac928c02a7ac2e41d67c785dfde5884d62c00615df
+  data.tar.gz: a5362ad32fd9e7ac13c701f4d6865b5f74ad5726b2f7cd7008776703cee29e8da2614af3cceed1913b1445cee3b9787edaaca539b4b1d1aa30995c6a9d859172

data/README.md

@@ -77,6 +77,24 @@ Edit your `config/initializers/session_store.rb` file with the following:
 require 'rack-cas/session_store/rails/mongoid'
 YourApp::Application.config.session_store ActionDispatch::Session::RackCasMongoidStore
 ```
+#### Redis ####
+
+Set the `session_store` in your `config/application.rb`:
+```ruby
+require 'rack-cas/session_store/redis'
+config.rack_cas.session_store = RackCAS::RedisStore
+```
+Edit your `config/initializers/session_store.rb` file with the following:
+```ruby
+require 'rack-cas/session_store/rails/redis'
+YourApp::Application.config.session_store ActionDispatch::Session::RackCasRedisStore
+```
+Optionally, Set the `redis_options` in your `config/application.rb`.
+You can specify anything `Redis.new` allows.
+For example:
+```ruby
+config.rack_cas.redis_options = {path: '/tmp/redis.sock',driver: :hiredis}
+```
 Sinatra and Other Rack-Compatible Frameworks
 --------------------------------------------
 

data/lib/rack-cas/configuration.rb

@@ -1,7 +1,7 @@
 module RackCAS
   class Configuration
-    SETTINGS = [:fake, :server_url, :session_store, :exclude_path, :exclude_paths, :extra_attributes_filter,
-                :verify_ssl_cert, :renew, :use_saml_validation, :ignore_intercept_validator, :exclude_request_validator, :protocol]
+    SETTINGS = [:fake, :fake_attributes, :server_url, :session_store, :exclude_path, :exclude_paths, :extra_attributes_filter,
+                :verify_ssl_cert, :renew, :use_saml_validation, :ignore_intercept_validator, :exclude_request_validator, :protocol,:redis_options]
 
 
     SETTINGS.each do |setting|

data/lib/rack-cas/saml_validation_response.rb

@@ -44,7 +44,7 @@ module RackCAS
     protected
 
     def success?
-      @success ||= xml.at('//Response/Status/StatusCode/@Value').text == 'saml1p:Success'
+      @success ||= xml.at('//Response/Status/StatusCode/@Value').text =~ /saml1?p:Success/
     end
 
     def authentication_failure

data/lib/rack-cas/session_store/active_record.rb

@@ -4,7 +4,7 @@ module RackCAS
     end
 
     def self.destroy_session_by_cas_ticket(cas_ticket)
-      affected = Session.delete_all(cas_ticket: cas_ticket)
+      affected = Session.where(cas_ticket: cas_ticket).delete_all
       affected == 1
     end
 

data/lib/rack-cas/session_store/rack/redis.rb

@@ -0,0 +1,10 @@
+require 'rack-cas/session_store/redis'
+require 'rack/session/abstract/id'
+
+module Rack
+  module Session
+    class RackCASRedisStore < Rack::Session::Abstract::ID
+      include RackCAS::RedisStore
+    end
+  end
+end

data/lib/rack-cas/session_store/rails/redis.rb

@@ -0,0 +1,10 @@
+require 'rack-cas/session_store/redis'
+require 'action_dispatch/middleware/session/abstract_store'
+
+module ActionDispatch
+  module Session
+    class RackCasRedisStore < AbstractStore
+      include RackCAS::RedisStore
+    end
+  end
+end

data/lib/rack-cas/session_store/redis.rb

@@ -0,0 +1,109 @@
+module RackCAS
+  module RedisStore
+    class Session
+      @client = nil
+
+      def self.client
+        @client ||= (RackCAS.config.redis_options? ? Redis.new(RackCAS.config.redis_options) : Redis.new)
+        return @client
+      end
+
+      def self.find_by_id(session_id)
+        session = self.client.get("rack_cas_session:#{session_id}")
+        session ? {'sid' => session_id, 'data' => session} : session
+      end
+
+      def self.write(session_id:, data:, cas_ticket: )
+        #create a row with the session_id and the data
+        #create a row with the cas_ticket acting as a reverse index
+        results = self.client.pipelined do
+          self.client.set("rack_cas_session:#{session_id}",data)
+          self.client.expireat("rack_cas_session:#{session_id}",30.days.from_now.to_i)
+          self.client.set("rack_cas_ticket:#{cas_ticket}","rack_cas_session:#{session_id}")
+          self.client.expireat("rack_cas_ticket:#{cas_ticket}",30.days.from_now.to_i)
+        end
+
+        results == ["OK",true,"OK",true] ? session_id : false
+      end
+
+      def self.destroy_by_cas_ticket(cas_ticket)
+        session_id = self.client.get("rack_cas_ticket:#{cas_ticket}")
+        results = self.client.pipelined do
+          self.client.del("rack_cas_ticket:#{cas_ticket}")
+          self.client.del(session_id)
+        end
+        return results[1]
+      end
+
+      def self.delete(session_id)
+        self.client.del("rack_cas_session:#{session_id}")
+      end
+    end
+
+    def self.destroy_session_by_cas_ticket(cas_ticket)
+      affected = Session.destroy_by_cas_ticket(cas_ticket)
+      affected == 1
+    end
+
+    #we don't need to prune because the keys expire automatically
+    def self.prune(after = nil)
+    end
+
+    private
+
+
+    # Rack 2.0 method
+    def find_session(env, sid)
+      if sid.nil?
+        sid = generate_sid
+        data = nil
+      else
+        unless session = Session.find_by_id(sid)
+          session = {}
+          # force generation of new sid since there is no associated session
+          sid = generate_sid
+        end
+        data = unpack(session['data'])
+      end
+
+      [sid, data]
+    end
+
+    # Rack 2.0 method
+    def write_session(env, sid, session_data, options)
+      cas_ticket = (session_data['cas']['ticket'] unless session_data['cas'].nil?)
+
+      success = Session.write(session_id: sid, data: pack(session_data), cas_ticket: cas_ticket)
+
+      success ? sid : false
+    end
+
+    # Rack 2.0 method
+    def delete_session(env, sid, options)
+      Session.delete(sid)
+
+      options[:drop] ? nil : generate_sid
+    end
+
+    # Rack 1.* method
+    alias get_session find_session
+
+    # Rack 1.* method
+    def set_session(env, sid, session_data, options) # rack 1.x compatibilty
+      write_session(Rack::Request.new(env), sid, session_data, options)
+    end
+
+    # Rack 1.* method
+    def destroy_session(env, sid, options) # rack 1.x compatibilty
+      delete_session(Rack::Request.new(env), sid, options)
+    end
+
+    def pack(data)
+      ::Base64.encode64(Marshal.dump(data)) if data
+    end
+
+    def unpack(data)
+      Marshal.load(::Base64.decode64(data)) if data
+    end
+  end
+end

data/lib/rack-cas/version.rb

@@ -1,3 +1,3 @@
 module RackCAS
-  VERSION = '0.15.0'
+  VERSION = '0.16.0'
 end

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: rack-cas
 version: !ruby/object:Gem::Version
-  version: 0.15.0
+  version: 0.16.0
 platform: ruby
 authors:
 - Adam Crownoble
 autorequire: 
 bindir: bin
 cert_chain: []
-date: 2016-07-07 00:00:00.000000000 Z
+date: 2017-09-18 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: rack
@@ -100,14 +100,14 @@ dependencies:
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: '1.6'
+        version: '2.3'
   type: :development
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: '1.6'
+        version: '2.3'
 description: Simple CAS authentication for Rails, Sinatra or any Rack-based site
 email: adam@codenoble.com
 executables: []
@@ -129,8 +129,11 @@ files:
 - lib/rack-cas/session_store/mongoid.rb
 - lib/rack-cas/session_store/rack/active_record.rb
 - lib/rack-cas/session_store/rack/mongoid.rb
+- lib/rack-cas/session_store/rack/redis.rb
 - lib/rack-cas/session_store/rails/active_record.rb
 - lib/rack-cas/session_store/rails/mongoid.rb
+- lib/rack-cas/session_store/rails/redis.rb
+- lib/rack-cas/session_store/redis.rb
 - lib/rack-cas/url.rb
 - lib/rack-cas/version.rb
 - lib/rack/cas.rb
@@ -156,9 +159,8 @@ required_rubygems_version: !ruby/object:Gem::Requirement
       version: '0'
 requirements: []
 rubyforge_project: 
-rubygems_version: 2.5.1
+rubygems_version: 2.6.11
 signing_key: 
 specification_version: 4
 summary: Rack-based CAS client
 test_files: []
-has_rdoc: