rails_iam 0.1.0

data/lib/rails_iam/engine.rb

@@ -0,0 +1,34 @@
+# frozen_string_literal: true
+
+module RailsIam
+  class Engine < ::Rails::Engine
+    isolate_namespace RailsIam
+
+    config.generators do |g|
+      g.test_framework :rspec
+      g.fixture_replacement :factory_bot
+    end
+
+    initializer "rails_iam.cookies" do |app|
+      next unless RailsIam.configuration.authentication.authentication_strategies.include?(:cookie)
+
+      app.middleware.use(ActionDispatch::Cookies)
+    end
+
+    initializer "rails_iam.controller_dsl" do
+      ActiveSupport.on_load(:action_controller_base) do
+        include RailsIam::ControllerDsl
+      end
+
+      ActiveSupport.on_load(:action_controller_api) do
+        include RailsIam::ControllerDsl
+      end
+    end
+
+    initializer "rails_iam.model_dsl" do
+      ActiveSupport.on_load(:active_record) do
+        include RailsIam::ModelDsl
+      end
+    end
+  end
+end

data/lib/rails_iam/model_dsl.rb

@@ -0,0 +1,13 @@
+# frozen_string_literal: true
+
+module RailsIam
+  module ModelDsl
+    extend ActiveSupport::Concern
+
+    class_methods do
+      def acts_as_rails_iam_user
+        include RailsIam::UserConcern
+      end
+    end
+  end
+end

data/lib/rails_iam/version.rb

@@ -0,0 +1,5 @@
+# frozen_string_literal: true
+
+module RailsIam
+  VERSION = "0.1.0"
+end

data/lib/rails_iam.rb

@@ -0,0 +1,27 @@
+# frozen_string_literal: true
+
+require "rails_iam/version"
+require "jwt"
+require "bcrypt"
+require "rails_iam/configuration"
+require "rails_iam/config/authorization"
+require "rails_iam/config/jwt"
+require "rails_iam/config/authentication"
+
+require "rails_iam/controller_dsl"
+require "rails_iam/model_dsl"
+
+require "rails_iam/engine"
+module RailsIam
+  class << self
+    attr_writer :configuration
+
+    def configuration
+      @configuration ||= Configuration.new
+    end
+
+    def configure
+      yield(configuration)
+    end
+  end
+end

data/lib/tasks/rails_iam_tasks.rake

@@ -0,0 +1,6 @@
+# frozen_string_literal: true
+
+# desc "Explaining what the task does"
+# task :rails_iam do
+#   # Task goes here
+# end

data/rails_iam.gemspec

@@ -0,0 +1,46 @@
+# frozen_string_literal: true
+
+require_relative "lib/rails_iam/version"
+
+Gem::Specification.new do |spec|
+  spec.name        = "rails_iam"
+  spec.version     = RailsIam::VERSION
+  spec.authors     = ["Salman Mahmud"]
+  spec.email       = ["salmanmahmud2014@gmail.com"]
+  spec.homepage    = "https://github.com/salmanx/rails_iam"
+  spec.summary = "Authentication, authorization, RBAC, PBAC and IAM for Ruby on Rails."
+  spec.description = <<~DESCRIPTION
+    Rails IAM is a database-driven Identity and Access Management (IAM) engine
+    for Rails applications. It provides JWT authentication, refresh tokens,
+    role-based access control (RBAC), permission-based access control (PBAC),
+    endpoint-first authorization, role and user permissions, explicit denied
+    permissions, authorization caching, and automatic resource authorization
+    for API and traditional Rails applications.
+  DESCRIPTION
+
+  spec.license = "MIT"
+  spec.metadata["homepage_uri"] = spec.homepage
+  spec.metadata["source_code_uri"] = "https://github.com/salmanx/rails_iam"
+  spec.metadata["documentation_uri"] = "https://github.com/salmanx/rails_iam/wiki"
+  spec.metadata["changelog_uri"] =
+    "https://github.com/salmanx/rails_iam/releases"
+  spec.metadata["bug_tracker_uri"] = "https://github.com/salmanx/rails_iam/issues"
+  spec.metadata["rubygems_mfa_required"] = "true"
+  spec.files = Dir.chdir(__dir__) do
+    Dir[
+      "{app,config,db,lib}/**/*",
+      "README.md",
+      "LICENSE",
+      "CHANGELOG.md",
+      "CONTRIBUTING.md",
+      "*.gemspec",
+      "Rakefile",
+    ]
+  end
+
+  spec.require_paths = ["lib"]
+  spec.required_ruby_version = ">= 2.7.0"
+  spec.add_dependency "bcrypt", "~> 3.1"
+  spec.add_dependency "jwt", "~> 2.7"
+  spec.add_dependency "rails", ">= 7.0"
+end

metadata

@@ -0,0 +1,161 @@
+--- !ruby/object:Gem::Specification
+name: rails_iam
+version: !ruby/object:Gem::Version
+  version: 0.1.0
+platform: ruby
+authors:
+- Salman Mahmud
+bindir: bin
+cert_chain: []
+date: 1980-01-02 00:00:00.000000000 Z
+dependencies:
+- !ruby/object:Gem::Dependency
+  name: bcrypt
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '3.1'
+  type: :runtime
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '3.1'
+- !ruby/object:Gem::Dependency
+  name: jwt
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '2.7'
+  type: :runtime
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '2.7'
+- !ruby/object:Gem::Dependency
+  name: rails
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: '7.0'
+  type: :runtime
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: '7.0'
+description: |
+  Rails IAM is a database-driven Identity and Access Management (IAM) engine
+  for Rails applications. It provides JWT authentication, refresh tokens,
+  role-based access control (RBAC), permission-based access control (PBAC),
+  endpoint-first authorization, role and user permissions, explicit denied
+  permissions, authorization caching, and automatic resource authorization
+  for API and traditional Rails applications.
+email:
+- salmanmahmud2014@gmail.com
+executables: []
+extensions: []
+extra_rdoc_files: []
+files:
+- CHANGELOG.md
+- CONTRIBUTING.md
+- LICENSE
+- README.md
+- Rakefile
+- app/controllers/concerns/rails_iam/auth_concern.rb
+- app/controllers/concerns/rails_iam/authentication/authenticatable.rb
+- app/controllers/concerns/rails_iam/authorization/authorizable.rb
+- app/controllers/rails_iam/application_controller.rb
+- app/controllers/rails_iam/auth_controller.rb
+- app/helpers/rails_iam/config_loader.rb
+- app/models/concerns/rails_iam/auditable.rb
+- app/models/concerns/rails_iam/user_concern.rb
+- app/models/rails_iam/application_record.rb
+- app/models/rails_iam/permission.rb
+- app/models/rails_iam/refresh_token.rb
+- app/models/rails_iam/role.rb
+- app/models/rails_iam/role_permission.rb
+- app/models/rails_iam/user.rb
+- app/models/rails_iam/user_denied_permission.rb
+- app/models/rails_iam/user_permission.rb
+- app/models/rails_iam/user_role.rb
+- app/services/application_service.rb
+- app/services/rails_iam/authentication/authenticated_user.rb
+- app/services/rails_iam/authentication/authenticator.rb
+- app/services/rails_iam/authentication/current.rb
+- app/services/rails_iam/authentication/exceptions/authentication_error.rb
+- app/services/rails_iam/authentication/jwt_decoder.rb
+- app/services/rails_iam/authentication/jwt_encoder.rb
+- app/services/rails_iam/authentication/login.rb
+- app/services/rails_iam/authentication/logout.rb
+- app/services/rails_iam/authentication/refresh_token_encoder.rb
+- app/services/rails_iam/authentication/skip_authentication_rule.rb
+- app/services/rails_iam/authentication/token_extractor.rb
+- app/services/rails_iam/authorization/authorization_context.rb
+- app/services/rails_iam/authorization/authorization_rule.rb
+- app/services/rails_iam/authorization/authorizer.rb
+- app/services/rails_iam/authorization/cache.rb
+- app/services/rails_iam/authorization/denied_permission_checker.rb
+- app/services/rails_iam/authorization/exceptions/authorization_error.rb
+- app/services/rails_iam/authorization/exceptions/missing_permission_error.rb
+- app/services/rails_iam/authorization/exceptions/missing_role_error.rb
+- app/services/rails_iam/authorization/permission_checker.rb
+- app/services/rails_iam/authorization/permission_resolver.rb
+- app/services/rails_iam/authorization/permission_sources/role_permission_source.rb
+- app/services/rails_iam/authorization/permission_sources/user_denied_permission_source.rb
+- app/services/rails_iam/authorization/permission_sources/user_permission_source.rb
+- app/services/rails_iam/authorization/resolved_permissions.rb
+- app/services/rails_iam/authorization/role_checker.rb
+- app/services/rails_iam/authorization/role_resolver.rb
+- app/services/rails_iam/authorization/skip_authorization_rule.rb
+- app/services/rails_iam/rails_iam_service.rb
+- config/routes.rb
+- lib/generators/rails_iam/install_generator.rb
+- lib/generators/rails_iam/templates/create_rails_iam_tables.rb.erb
+- lib/generators/rails_iam/templates/initializer.rb
+- lib/rails_iam.rb
+- lib/rails_iam/config/authentication.rb
+- lib/rails_iam/config/authorization.rb
+- lib/rails_iam/config/jwt.rb
+- lib/rails_iam/configuration.rb
+- lib/rails_iam/controller_dsl.rb
+- lib/rails_iam/engine.rb
+- lib/rails_iam/model_dsl.rb
+- lib/rails_iam/version.rb
+- lib/tasks/rails_iam_tasks.rake
+- rails_iam.gemspec
+homepage: https://github.com/salmanx/rails_iam
+licenses:
+- MIT
+metadata:
+  homepage_uri: https://github.com/salmanx/rails_iam
+  source_code_uri: https://github.com/salmanx/rails_iam
+  documentation_uri: https://github.com/salmanx/rails_iam/wiki
+  changelog_uri: https://github.com/salmanx/rails_iam/releases
+  bug_tracker_uri: https://github.com/salmanx/rails_iam/issues
+  rubygems_mfa_required: 'true'
+rdoc_options: []
+require_paths:
+- lib
+required_ruby_version: !ruby/object:Gem::Requirement
+  requirements:
+  - - ">="
+    - !ruby/object:Gem::Version
+      version: 2.7.0
+required_rubygems_version: !ruby/object:Gem::Requirement
+  requirements:
+  - - ">="
+    - !ruby/object:Gem::Version
+      version: '0'
+requirements: []
+rubygems_version: 3.6.8
+specification_version: 4
+summary: Authentication, authorization, RBAC, PBAC and IAM for Ruby on Rails.
+test_files: []