rack-oauth2 0.1.0 → 0.2.0

data/example/server/authorize.rb

@@ -1,57 +0,0 @@
-require 'rubygems'
-require 'sinatra'
-
-use Rack::Session::Cookie
-
-$LOAD_PATH.unshift(File.join(File.dirname(__FILE__), '../../lib'))
-require 'rack/oauth2'
-
-get '/oauth/authorize' do
-  # set realm as server.example.com
-  authorization_endpoint = Rack::OAuth2::Server::Authorize.new("server.example.com")
-  response = authorization_endpoint.call(env)
-  case response.first
-  when 200
-    request = env['rack.oauth2.request']
-    # output form
-    <<-HTML
-    <form action="/oauth/authorize" method="post">
-      <input type="hidden" name="client_id" value="#{request.client_id}" />
-      <input type="hidden" name="redirect_uri" value="#{request.redirect_uri}" />
-      <input type="hidden" name="response_type" value="#{request.response_type}" />
-      <input type="hidden" name="approved" value="true" />
-      <input type="submit" value="allow">
-    </form>
-    <form action="/oauth/authorize" method="post">
-      <input type="hidden" name="client_id" value="#{request.client_id}" />
-      <input type="hidden" name="redirect_uri" value="#{request.redirect_uri}" />
-      <input type="hidden" name="response_type" value="#{request.response_type}" />
-      <input type="hidden" name="response_type" value="code" />
-      <input type="submit" value="deny">
-    </form>
-    HTML
-  else
-    # redirect response with error message
-    response
-  end
-end
-
-post '/oauth/authorize' do
-  # set realm as server.example.com
-  authorization_endpoint = Rack::OAuth2::Server::Authorize.new("server.example.com") do |request, response|
-    params = env['rack.request.form_hash']
-    if params['approved']
-      response.approve!
-      case request.response_type
-      when :code
-        response.code = 'code'
-      when :token
-        response.access_token = 'access_token'
-        response.expires_in = 3600
-      end
-    else
-      raise Rack::OAuth2::Server::Unauthorized.new(:access_denied, 'User rejected the requested access.', :redirect_uri => request.redirect_uri, :state => request.state)
-    end
-  end
-  authorization_endpoint.call(env)
-end

data/example/server/oauth2_controller.rb

@@ -1,100 +0,0 @@
-# = Usage
-# 
-# == Pre-required models (define by yourself)
-# 
-# * Oauth2::Client
-# * Oauth2::AccessToken
-# * Oauth2::RefreshToken
-# * Oauth2::AuthorizationCode
-
-class Oauth2Controller < ApplicationController
-  before_filter :require_authentication, :only => :authorize
-
-  def authorize
-    if request.post?
-      status, header, response = authorization_endpoint_authenticator.call(request.env)
-      case status
-      when 302
-        redirect_to header['Location']
-      else
-        render :status => status, :json => response.body
-      end
-    else
-      # render approval page to the resource owner
-    end
-  end
-
-  def token
-    status, header, res = token_endpoint_authenticator.call(request.env)
-    response.headers.merge!(header)
-    render :status => status, :text => res.body
-  end
-
-  private
-
-  def authorization_endpoint_authenticator
-    # set realm as server.example.com
-    Rack::OAuth2::Server::Authorization.new('server.example.com') do |req, res|
-      client = Oauth2::Client.find_by_identifier(req.client_id)
-      raise Rack::OAuth2::Server::Unauthorized.new(:invalid_client, 'Invalid client identifier.') unless client
-      if params[:approve]
-        res.authorize!
-        case req.response_type
-        when :code
-          authorization_code = Oauth2::AuthorizationCode.create(:user => current_user, :client => client)
-          res.code = authorization_code.code
-        when :token
-          access_token = Oauth2::AccessToken.create(:user => @user, :client => @client)
-          res.access_token = access_token.token
-          res.expires_in = access_token.expires_in
-        when :code_and_token
-          authorization_code = Oauth2::AuthorizationCode.create(:user => current_user, :client => client)
-          access_token = Oauth2::AccessToken.create(:user => @user, :client => @client)
-          res.code = authorization_code.code
-          res.access_token = access_token.token
-          res.expires_in = access_token.expires_in
-        end
-      else
-        raise Rack::OAuth2::Server::Unauthorized.new(:access_denied, 'User rejected the requested access.', :redirect_uri => req.redirect_uri, :state => req.state)
-      end
-    end
-  end
-
-  def token_endpoint_authenticator
-    # set realm as server.example.com
-    Rack::OAuth2::Server::Token.new('server.example.com') do |req, res|
-      case req.grant_type
-      when :authorization_code
-        begin
-          @user, @client = Oauth2::AuthorizationCode.authenticate!(req.code)
-        rescue Oauth2::AuthorizationCode::InvalidCode
-          raise Rack::OAuth2::Server::Unauthorized.new(:invalid_grant, 'Invalid authorization code.')
-        end
-      when :refresh_token
-        begin
-          @user, @client = Oauth2::RefreshToken.authenticate!(req.refresh_token)
-        rescue Oauth2::AuthorizationCode::InvalidToken
-          raise Rack::OAuth2::Server::Unauthorized.new(:invalid_grant, 'Invalid authorization code.')
-        end
-      when :password
-        begin
-          @user = User.authenticate!(req.username, req.password)
-          @client = Oauth2::Client.find_by_identifier(req.client_id)
-          raise Rack::OAuth2::Server::Unauthorized.new(:invalid_client, 'Invalid client identifier.') unless client
-        rescue User::InvalidCredentials
-          raise Rack::OAuth2::Server::Unauthorized.new(:invalid_grant, 'Invalid resource ownwer credentials.')
-        end
-      when :assertion
-        # I'm not familiar with SAML, so raise error for now.
-        raise Rack::OAuth2::Server::BadRequest.new(:unsupported_grant_type, "SAML is out of the Rails.")
-      else
-        raise Rack::OAuth2::Server::BadRequest.new(:unsupported_grant_type, "'#{req.grant_type}' isn't supported.")
-      end
-      access_token = Oauth2::AccessToken.create(:user => @user, :client => @client)
-      res.access_token = access_token.token
-      res.expires_in = access_token.expires_in
-    end
-  end
-
-end
-

data/example/server/token.rb

@@ -1,20 +0,0 @@
-require 'rubygems'
-require 'sinatra'
-
-use Rack::Session::Cookie
-
-$LOAD_PATH.unshift(File.join(File.dirname(__FILE__), '../../lib'))
-require 'rack/oauth2'
-
-use Rack::OAuth2::Server::Token do |request, response|
-  # allow everything
-  response.access_token = 'access_token'
-  response.expires_in = 3600
-  response.refresh_token = 'refresh_token'
-end
-
-get '/oauth/token' do
-end
-
-post '/oauth/token' do
-end