rack-cas 0.4.3 → 0.5.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA1:
-  metadata.gz: 17d582ee02fcbcc13c8b2f26387d246872857d49
-  data.tar.gz: 7c66a26d94195e52f507071655fbe05b8af53f9b
+  metadata.gz: 40ea6829e44c2f3fbb046bd53f64eba0a7b0c490
+  data.tar.gz: 6acbdc1877f6268ef3d30d6b1c2653dd552d1250
 SHA512:
-  metadata.gz: b1f6103cd65c29499b56b617242be29baae1c3c93b18d836d400226ea63d24bcd262fda0a588a05fe6cd67227c7c178de271e7c39a710191c1d6911fb9b5f735
-  data.tar.gz: ac8fe7c5e196c81a5a00daee6dbda673728326cba6bb8fb262d998dcd2c4b6668753be778af5a0a60aa42dd749677a675224aa90b29dc537f210d072e4c085ca
+  metadata.gz: 24871eb8f49e6e7e5a1ffb74d5b3c86b8016e446d32b092f7593e91c6d6fbd5ae4022a54d620ade4167e1b7659509c36ce5d00980a1a393dc0f2a1a2d804472e
+  data.tar.gz: da1d0360a7bc1d17fc1367950b4d6986af11a84e610c28673af18b5bf1c647cf794cf797c530ff59686daea2e1f8b408c60ea4966b63336b8d091c2ef53a46d8

data/README.markdown

@@ -80,6 +80,22 @@ Add the following to your `config.ru` file:
 
 Single sign out support outside of Rails is currently untested. We'll be adding instructions here soon.
 
+Configuration
+=============
+
+Excluding Paths
+---------------
+
+If you have some parts of your app that should not be CAS authenticated (such as an API namespace), just pass `exclude_path` to the middleware. You can pass in a string that matches the beginning of the path, a regular expression or an array of strings and regular expressions.
+
+    use Rack::CAS, server_url: '...', exclude_path: '/api'
+    use Rack::CAS, server_url: '...', exclude_path: /\.json/
+    use Rack::CAS, server_url: '...', exclude_paths: ['/api', /\.json/]
+
+The same options can be passed to `FakeCAS`.
+
+    use Rack::FakeCAS, exclude_path: '/api'
+
 Integration
 ===========
 Your app should __return a [401 status](http://httpstatus.es/401)__ whenever a request is made that requires authentication. Rack-CAS will catch these responses and attempt to authenticate via your CAS server.

data/lib/rack-cas/cas_request.rb

@@ -31,6 +31,16 @@ class CASRequest
     !!(@request.get? && ticket_param && ticket_param.to_s =~ /\AST\-[^\s]{29}/)
   end
 
+  def path_matches?(strings_or_regexps)
+    Array(strings_or_regexps).any? do |matcher|
+      if matcher.is_a? Regexp
+        !!(@request.path_info =~ matcher)
+      elsif matcher.to_s != ''
+        @request.path_info[0...matcher.to_s.length] == matcher.to_s
+      end
+    end
+  end
+
   private
 
   def ticket_param

data/lib/rack-cas/railtie.rb

@@ -5,7 +5,7 @@ module RackCAS
     initializer 'rack_cas.initialize' do |app|
       if config.rack_cas.fake || (config.rack_cas.fake.nil? && Rails.env.test?)
         require 'rack/fake_cas'
-        app.middleware.use Rack::FakeCAS
+        app.middleware.use Rack::FakeCAS, config.rack_cas
       elsif !config.rack_cas.server_url.nil? # for backwards compatibility
         require 'rack/cas'
         app.middleware.use Rack::CAS, config.rack_cas

data/lib/rack-cas/version.rb

@@ -1,3 +1,3 @@
 module RackCAS
-  VERSION = '0.4.3'
+  VERSION = '0.5.0'
 end

data/lib/rack/cas.rb

@@ -10,7 +10,7 @@ class Rack::CAS
     @app = app
     @server_url = config.delete(:server_url)
     @session_store = config.delete(:session_store)
-    @config = config
+    @config = config || {}
 
     raise ArgumentError, 'server_url is required' if @server_url.nil?
     if @session_store && !@session_store.respond_to?(:destroy_session_by_cas_ticket)
@@ -22,6 +22,10 @@ class Rack::CAS
     request = Rack::Request.new(env)
     cas_request = CASRequest.new(request)
 
+    if cas_request.path_matches? @config[:exclude_paths] || @config[:exclude_path]
+      return @app.call(env) 
+    end
+
     if cas_request.ticket_validation?
       log env, 'rack-cas: Intercepting ticket validation request.'
 

data/lib/rack/fake_cas.rb

@@ -1,13 +1,19 @@
 require 'rack'
+require 'rack-cas/cas_request'
 
 class Rack::FakeCAS
   def initialize(app, config={})
     @app = app
-    @config = config
+    @config = config || {}
   end
 
   def call(env)
     @request = Rack::Request.new(env)
+    cas_request = CASRequest.new(@request)
+
+    if cas_request.path_matches? @config[:exclude_paths] || @config[:exclude_path]
+      return @app.call(env)
+    end
     
     case @request.path_info
     when '/login'

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: rack-cas
 version: !ruby/object:Gem::Version
-  version: 0.4.3
+  version: 0.5.0
 platform: ruby
 authors:
 - Adam Crownoble
 autorequire: 
 bindir: bin
 cert_chain: []
-date: 2013-02-28 00:00:00.000000000 Z
+date: 2013-03-13 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: rack