rack-oauth_proxy 0.2.0 → 0.2.1

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA1:
-  metadata.gz: 99386f17d5ddd6f0ddc8308d40ebdeaedfd48e20
-  data.tar.gz: a4c3ddb81f3c181adc915c84ff1f7b3fca6c92f8
+  metadata.gz: 91426d44a4b8cbc11799f55cdbd4ba31b258e049
+  data.tar.gz: e26e22d20803eb43ca6b4d908c57b812ebffce30
 SHA512:
-  metadata.gz: 4088da5b01435bd30d7160742a260a2f4f2e6069fab7821cb244f8f0c44439d962192ae68753b7c5fe5181ca35b9f07adb21d9037b0901a4dc59713c3e4ef873
-  data.tar.gz: 770fcd4e6ddf166764ce63ea4da869da42aa4d229b16700219196eb6c4b9895359798a4053896a59893cfc849d0f8de7db70e64865974e7aac51dbef0ad53479
+  metadata.gz: ba13dd2cfece11a802b3a6da9602dd0693d1ea0165d500395efd1edd49e15c53b05ffb923d555142bf833f51342b52ce37fa8c1cf298f5b9f01f03e1b0858892
+  data.tar.gz: cfbc2b1746c623e4d567cdf7e4b62984374e274b32ce0b9c8cac1dcc281cdcb33b5e9cb711effc26a526832e5243cb6c80f5421dc79f52e693ccdb0fe66e4637

data/CHANGELOG.md

@@ -1,3 +1,6 @@
+## 0.2.1
+* Add `:propagated_params` option
+
 ## 0.2.0
 * `env["rack-oauth_proxy.response"]` is a Faraday::Response
 

data/README.md

@@ -6,7 +6,24 @@ Delegates OAuth authentication to other authentication server.
 For Rails example:
 
 ```ruby
-class ApplicationController < ActionController::Base
+class BlogsController < ApplicationController
   use Rack::OauthProxy, url: "http://auth.example.com/oauth/token"
+
+  before_action :require_authorization
+
+  def show
+    ...
+  end
+
+  private
+
+  def require_authorization
+    raise UnauthorizedError unless has_authorization?
+  end
+
+  # env["rack-oauth_proxy.resopnse"] is a Faraday::Response object.
+  def has_authorization?
+    env["rack-oauth_proxy.resopnse"].status == 200
+  end
 end
 ```

data/lib/rack/oauth_proxy/client/request.rb

@@ -8,6 +8,8 @@ module Rack
       class Request
         DEFAULT_PROPAGATED_HEADER_FIELDS = ["Authorization"]
 
+        DEFAULT_PROPAGATED_PARAMS = ["access_token", "bearer_token"]
+
         attr_reader :env, :options
 
         def initialize(env, options = {})
@@ -26,7 +28,7 @@ module Rack
         end
 
         def params
-          rack_request.params.slice("access_token", "bearer_token")
+          rack_request.params.slice(*propagated_params)
         end
 
         private
@@ -38,6 +40,10 @@ module Rack
         def propagated_header_fields
           options[:propagated_header_fields] || DEFAULT_PROPAGATED_HEADER_FIELDS
         end
+
+        def propagated_params
+          options[:propagated_params] || DEFAULT_PROPAGATED_PARAMS
+        end
       end
     end
   end

data/lib/rack/oauth_proxy/version.rb

@@ -1,5 +1,5 @@
 module Rack
   class OauthProxy
-    VERSION = "0.2.0"
+    VERSION = "0.2.1"
   end
 end

data/spec/rack/oauth_proxy_spec.rb

@@ -28,10 +28,15 @@ describe Rack::OauthProxy do
     {
       "HTTP_AUTHORIZATION" => "Bearer #{token}",
       "HTTP_DUMMY" => "dummy",
+      "QUERY_STRING" => query_string,
       "rack.input" => StringIO.new,
     }
   end
 
+  let(:query_string) do
+    ""
+  end
+
   let(:token) do
     SecureRandom.hex(32)
   end
@@ -94,5 +99,24 @@ describe Rack::OauthProxy do
         a_request(:get, url).with(headers: { "DUMMY" => "dummy" }).should have_been_made
       end
     end
+
+    context "with propagated params option" do
+      before do
+        options[:propagated_params] = ["access_token"]
+      end
+
+      let(:url) do
+        "http://example.com/oauth/token?access_token=#{token}"
+      end
+
+      let(:query_string) do
+        "access_token=#{token}"
+      end
+
+      it "propagates specified params" do
+        result.should be_a Faraday::Response
+        a_request(:get, url).should have_been_made
+      end
+    end
   end
 end

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: rack-oauth_proxy
 version: !ruby/object:Gem::Version
-  version: 0.2.0
+  version: 0.2.1
 platform: ruby
 authors:
 - Ryo Nakamura