rack-oauth2 0.2.3 → 0.3.0.alpha

data/lib/rack/oauth2/server/authorize/code_and_token.rb

@@ -1,62 +0,0 @@
-module Rack
-  module OAuth2
-    module Server
-      class Authorize
-        class CodeAndToken < Abstract::Handler
-
-          def call(env)
-            @request  = Request.new(env)
-            @response = Response.new(request)
-            super
-          end
-
-          class Request < Authorize::Request
-            def initialize(env)
-              super
-              @response_type = :code_and_token
-              attr_missing!
-            end
-          end
-
-          class Response < Authorize::Response
-            attr_required :code, :access_token
-            attr_optional :expires_in, :scope
-
-            def finish
-              if approved?
-                # append query params
-                query_params = {
-                  :code => code,
-                  :state => state
-                }.delete_if do |key, value|
-                  value.blank?
-                end
-                redirect_uri.query = if redirect_uri.query
-                  [redirect_uri.query, query_params.to_query].join('&')
-                else
-                  query_params.to_query
-                end
-                # append fragment params
-                fragment_params = {
-                  :access_token => access_token,
-                  :expires_in => expires_in,
-                  :scope => Array(scope).join(' ')
-                }.delete_if do |key, value|
-                  value.blank?
-                end
-                redirect_uri.fragment = if redirect_uri.fragment
-                  [redirect_uri.fragment, fragment_params.to_query].join('&')
-                else
-                  fragment_params.to_query
-                end
-                redirect redirect_uri.to_s
-              end
-              super
-            end
-          end
-
-        end
-      end
-    end
-  end
-end

data/lib/rack/oauth2/server/error.rb

@@ -1,73 +0,0 @@
-module Rack
-  module OAuth2
-    module Server
-
-      class Error < StandardError
-        attr_accessor :status, :error, :description, :uri, :state, :scope, :redirect_uri, :realm
-
-        def initialize(status, error, description = "", options = {})
-          @status       = status
-          @error        = error
-          @description  = description
-          @uri          = options[:uri]
-          @state        = options[:state]
-          @realm        = options[:realm]
-          @scope        = Array(options[:scope])
-          @redirect_uri = Util.parse_uri(options[:redirect_uri]) if options[:redirect_uri]
-        end
-
-        def finish
-          params = {
-            :error             => error,
-            :error_description => description,
-            :error_uri         => uri,
-            :state             => state,
-            :scope             => scope.join(' ')
-          }.delete_if do |key, value|
-            value.blank?
-          end
-          response = Rack::Response.new
-          if @redirect_uri.present?
-            redirect_uri.query = if redirect_uri.query
-              [redirect_uri.query, params.to_query].join('&')
-            else
-              params.to_query
-            end
-            response.redirect redirect_uri.to_s
-          else
-            response.status = status
-            response.header['Content-Type'] = 'application/json'
-            if realm.present?
-              response.header['WWW-Authenticate'] = "OAuth realm='#{realm}' #{params.collect { |key, value| "#{key}='#{value.to_s}'" }.join(' ')}"
-            end
-            response.write params.to_json
-          end
-          response.finish
-        end
-      end
-
-      class BadRequest < Error
-        def initialize(error, description = "", options = {})
-          super(400, error, description, options)
-        end
-      end
-
-      class Unauthorized < Error
-        def initialize(error, description = "", options = {})
-          super(401, error, description, options)
-        end
-      end
-
-      class Forbidden < Error
-        def initialize(error, description = "", options = {})
-          super(403, error, description, options)
-        end
-      end
-
-    end
-  end
-end
-
-require 'rack/oauth2/server/error/authorize'
-require 'rack/oauth2/server/error/token'
-require 'rack/oauth2/server/error/resource'

data/lib/rack/oauth2/server/error/authorize.rb

@@ -1,54 +0,0 @@
-module Rack
-  module OAuth2
-    module Server
-      class Error
-        module Authorize
-
-          DEFAULT_DESCRIPTION = {
-            :invalid_request => "The request is missing a required parameter, includes an unsupported parameter or parameter value, or is otherwise malformed.",
-            :invalid_client => "The client identifier provided is invalid.",
-            :unauthorized_client => "The client is not authorized to use the requested response type.",
-            :redirect_uri_mismatch => "The redirection URI provided does not match a pre-registered value.",
-            :access_denied => "The end-user or authorization server denied the request.",
-            :unsupported_response_type => "The requested response type is not supported by the authorization server.",
-            :invalid_scope => "The requested scope is invalid, unknown, or malformed."
-          }
-
-          def error!(error, description = nil, options = {})
-            description ||= DEFAULT_DESCRIPTION[error]
-            raise BadRequest.new(error, description, options.merge(:state => state, :redirect_uri => redirect_uri))
-          end
-
-          def invalid_request!(description = nil, options = {})
-            error!(:invalid_request, description, options)
-          end
-
-          def invalid_client!(description = nil, options = {})
-            error!(:invalid_client, description, options)
-          end
-
-          def unauthorized_client!(description = nil, options = {})
-            error!(:unauthorized_client, description, options)
-          end
-
-          def redirect_uri_mismatch!(description = nil, options = {})
-            error!(:redirect_uri_mismatch, description, options)
-          end
-
-          def access_denied!(description = nil, options = {})
-            error!(:access_denied, description, options)
-          end
-
-          def unsupported_response_type!(description = nil, options = {})
-            error!(:unsupported_response_type, description, options)
-          end
-
-          def invalid_scope!(description = nil, options = {})
-            error!(:invalid_scope, description, options)
-          end
-
-        end
-      end
-    end
-  end
-end

data/lib/rack/oauth2/server/error/resource.rb

@@ -1,50 +0,0 @@
-module Rack
-  module OAuth2
-    module Server
-      class Error
-        module Resource
-
-          DEFAULT_DESCRIPTION = {
-            :invalid_request => "The request is missing a required parameter, includes an unsupported parameter or parameter value, repeats the same parameter, uses more than one method for including an access token, or is otherwise malformed.",
-            :invalid_token => "The access token provided is invalid.",
-            :expired_token => "The access token provided has expired.",
-            :insufficient_scope => "The request requires higher privileges than provided by the access token."
-          }
-
-          def error!(error, description = nil, options = {})
-            description ||= DEFAULT_DESCRIPTION[error]
-            options[:realm] = realm
-            exception = case error
-            when :invalid_token, :expired_token
-              Unauthorized
-            when :insufficient_scope
-              Forbidden
-            when :invalid_request
-              BadRequest
-            else
-              raise Error.new(options[:status] || 400, error, description, options)
-            end
-            raise exception.new(error, description, options)
-          end
-
-          def invalid_request!(description = nil, options = {})
-            error!(:invalid_request, description, options)
-          end
-
-          def invalid_token!(description = nil, options = {})
-            error!(:invalid_token, description, options)
-          end
-
-          def expired_token!(description = nil, options = {})
-            error!(:expired_token, description, options)
-          end
-
-          def insufficient_scope!(description = nil, options = {})
-            error!(:insufficient_scope, description, options)
-          end
-
-        end
-      end
-    end
-  end
-end

data/lib/rack/oauth2/server/error/token.rb

@@ -1,59 +0,0 @@
-module Rack
-  module OAuth2
-    module Server
-      class Error
-        module Token
-
-          DEFAULT_DESCRIPTION = {
-            :invalid_request => "The request is missing a required parameter, includes an unsupported parameter or parameter value, repeats a parameter, includes multiple credentials, utilizes more than one mechanism for authenticating the client, or is otherwise malformed.",
-            :invalid_client => "The client identifier provided is invalid, the client failed to authenticate, the client did not include its credentials, provided multiple client credentials, or used unsupported credentials type.",
-            :unauthorized_client => "The authenticated client is not authorized to use the access grant type provided.",
-            :invalid_grant => "The provided access grant is invalid, expired, or revoked (e.g. invalid assertion, expired authorization token, bad end-user password credentials, or mismatching authorization code and redirection URI).",
-            :unsupported_grant_type => "The access grant included - its type or another attribute - is not supported by the authorization server.",
-            :unsupported_response_type => "The requested response type is not supported by the authorization server.",
-            :invalid_scope => "The requested scope is invalid, unknown, malformed, or exceeds the previously granted scope."
-          }
-
-          def error!(error, description = nil, options = {})
-            description ||= DEFAULT_DESCRIPTION[error]
-            exception = if options.delete(:unauthorized)
-              Unauthorized
-            else
-              BadRequest
-            end
-            raise exception.new(error, description, options)
-          end
-
-          def invalid_request!(description = nil, options = {})
-            error!(:invalid_request, description, options)
-          end
-
-          def invalid_client!(description = nil, options = {})
-            error!(:invalid_client, description, options.merge(:unauthorized => via_authorization_header))
-          end
-
-          def unauthorized_client!(description = nil, options = {})
-            error!(:unauthorized_client, description, options)
-          end
-
-          def invalid_grant!(description = nil, options = {})
-            error!(:invalid_grant, description, options)
-          end
-
-          def unsupported_grant_type!(description = nil, options = {})
-            error!(:unsupported_grant_type, description, options)
-          end
-
-          def unsupported_response_type!(description = nil, options = {})
-            error!(:unsupported_response_type, description, options)
-          end
-
-          def invalid_scope!(description = nil, options = {})
-            error!(:invalid_scope, description, options)
-          end
-
-        end
-      end
-    end
-  end
-end

data/lib/rack/oauth2/server/token/assertion.rb

@@ -1,29 +0,0 @@
-module Rack
-  module OAuth2
-    module Server
-      class Token
-        class Assertion < Abstract::Handler
-
-          def call(env)
-            @request  = Request.new(env)
-            @response = Response.new(request)
-            super
-          end
-
-          class Request < Token::Request
-            attr_required :assertion_type, :assertion
-
-            def initialize(env)
-              super
-              @grant_type     = 'assertion'
-              @assertion_type = params['assertion_type']
-              @assertion      = params['assertion']
-              attr_missing!
-            end
-          end
-
-        end
-      end
-    end
-  end
-end

data/spec/rack/oauth2/server/authorize/code_and_token_spec.rb

@@ -1,53 +0,0 @@
-require 'spec_helper.rb'
-
-describe Rack::OAuth2::Server::Authorize::CodeAndToken do
-
-  context "when authorized" do
-
-    before do
-      @app = Rack::OAuth2::Server::Authorize.new(simple_app) do |request, response|
-        response.approve!
-        response.code = "authorization_code"
-        response.access_token = "access_token"
-      end
-      @request = Rack::MockRequest.new @app
-    end
-
-    it "should redirect to redirect_uri with authorization code" do
-      response = @request.get("/?response_type=code_and_token&client_id=client&redirect_uri=http://client.example.com/callback")
-      response.status.should == 302
-      response.location.should == "http://client.example.com/callback?code=authorization_code#access_token=access_token"
-    end
-
-    context "when redirect_uri already includes query and fragment" do
-      it "should keep original query and fragment" do
-        response = @request.get("/?response_type=code_and_token&client_id=client&redirect_uri=http://client.example.com/callback?k=v%23fragment")
-        response.status.should == 302
-        response.location.should == "http://client.example.com/callback?k=v&code=authorization_code#fragment&access_token=access_token"
-      end
-    end
-
-  end
-
-  context "when denied" do
-
-    before do
-      @app = Rack::OAuth2::Server::Authorize.new(simple_app) do |request, response|
-        request.access_denied! 'User rejected the requested access.'
-      end
-      @request = Rack::MockRequest.new @app
-    end
-
-    it "should redirect to redirect_uri with error message" do
-      response = @request.get("/?response_type=code_and_token&client_id=client&redirect_uri=http://client.example.com/callback")
-      response.status.should == 302
-      error_message = {
-        :error => :access_denied,
-        :error_description => "User rejected the requested access."
-      }
-      response.location.should == "http://client.example.com/callback?#{error_message.to_query}"
-    end
-
-  end
-
-end

data/spec/rack/oauth2/server/error/authorize_spec.rb

@@ -1,102 +0,0 @@
-require 'spec_helper.rb'
-
-describe Rack::OAuth2::Server::Authorize::Request do
-  
-  before do
-    @request = Rack::OAuth2::Server::Authorize::Request.new(
-      Rack::MockRequest.env_for("/authorize", :params => {
-        :client_id => "client_id",
-        :response_type => "code"
-      })
-    )
-  end
-
-  describe "#error!" do
-    it "should raise BadRequest error" do
-      lambda do
-        @request.error! :something
-      end.should raise_error(Rack::OAuth2::Server::BadRequest) { |e|
-        e.error.should == :something
-        e.description.should be_nil
-      }
-    end
-  end
-
-  describe "#invalid_request!" do
-    it "should raise BadRequest error" do
-      lambda do
-        @request.invalid_request!
-      end.should raise_error(Rack::OAuth2::Server::BadRequest) { |e|
-        e.error.should == :invalid_request
-        e.description.should == Rack::OAuth2::Server::Error::Authorize::DEFAULT_DESCRIPTION[:invalid_request]
-      }
-    end
-  end
-
-  describe "#invalid_client!" do
-    it "should raise BadRequest error" do
-      lambda do
-        @request.invalid_client!
-      end.should raise_error(Rack::OAuth2::Server::BadRequest) { |e|
-        e.error.should == :invalid_client
-        e.description.should == Rack::OAuth2::Server::Error::Authorize::DEFAULT_DESCRIPTION[:invalid_client]
-      }
-    end
-  end
-
-  describe "#unauthorized_client!" do
-    it "should raise BadRequest error" do
-      lambda do
-        @request.unauthorized_client!
-      end.should raise_error(Rack::OAuth2::Server::BadRequest) { |e|
-        e.error.should == :unauthorized_client
-        e.description.should == Rack::OAuth2::Server::Error::Authorize::DEFAULT_DESCRIPTION[:unauthorized_client]
-      }
-    end
-  end
-
-  describe "#redirect_uri_mismatch!" do
-    it "should raise BadRequest error" do
-      lambda do
-        @request.redirect_uri_mismatch!
-      end.should raise_error(Rack::OAuth2::Server::BadRequest) { |e|
-        e.error.should == :redirect_uri_mismatch
-        e.description.should == Rack::OAuth2::Server::Error::Authorize::DEFAULT_DESCRIPTION[:redirect_uri_mismatch]
-      }
-    end
-  end
-
-  describe "#access_denied!" do
-    it "should raise BadRequest error" do
-      lambda do
-        @request.access_denied!
-      end.should raise_error(Rack::OAuth2::Server::BadRequest) { |e|
-        e.error.should == :access_denied
-        e.description.should == Rack::OAuth2::Server::Error::Authorize::DEFAULT_DESCRIPTION[:access_denied]
-      }
-    end
-  end
-
-  describe "#unsupported_response_type!" do
-    it "should raise BadRequest error" do
-      lambda do
-        @request.unsupported_response_type!
-      end.should raise_error(Rack::OAuth2::Server::BadRequest) { |e|
-        e.error.should == :unsupported_response_type
-        e.description.should == Rack::OAuth2::Server::Error::Authorize::DEFAULT_DESCRIPTION[:unsupported_response_type]
-      }
-    end
-  end
-
-  describe "#invalid_scope!" do
-    it "should raise BadRequest error" do
-      lambda do
-        @request.invalid_scope!
-      end.should raise_error(Rack::OAuth2::Server::BadRequest) { |e|
-        e.error.should == :invalid_scope
-        e.description.should == Rack::OAuth2::Server::Error::Authorize::DEFAULT_DESCRIPTION[:invalid_scope]
-      }
-    end
-  end
-
-end