real_savvy 0.0.6 → 0.0.7

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA1:
-  metadata.gz: b70dbda002738e46c0e953b796145e67fe4f23ea
-  data.tar.gz: 00b5011fa01800d6be5fbc5263609920370bd005
+  metadata.gz: 83c3eb21fb475cd2006eeaeff541e57edba481c6
+  data.tar.gz: 3e9c22f823cb9e87dc86677df7d6c33215b95db3
 SHA512:
-  metadata.gz: 2c7f6071923ed687d91efa485a07017f3acc6d4fc84563261951d36db3db474ee698f171fb7ec03d6eba7464a79f159e197310aca7dcf591d2762ea9057ec2ae
-  data.tar.gz: c34eb8226def258055179b077d51b2aad6bbc412157d34dc491f651c2a638604496f56cc647ce2e5c6b883429e226ab886fd6e4aa775e6c1b5a6bb744a49023c
+  metadata.gz: 6d417e599280f1bcea965a7da684ae7c1f55952d88592f52098140d02d9c97f4521fa6b76c08b10f737b06057dd51c178dc6298b1cf0661b8ee30f4cbde14b5d
+  data.tar.gz: 792908183863481ff23f39fce1707c55ce92d8f16bb3a77f17816105d98ef9abaf5b67af55352761eefe7a65cb4f5a14c4982d1d9975c52f29e498948662c435

data/lib/real_savvy/jwt/abstract_token.rb

@@ -0,0 +1,145 @@
+module RealSavvy
+  module JWT
+    class AbstractToken
+      # In order of access level
+      SCOPE_VERBS = %w{public read write admin}.freeze
+
+      attr_reader :scopes, :user, :site, :token, :header
+
+      def initialize(token)
+        @token = token
+        standardized_token
+        retrieve_claims
+        retrieve_scopes
+        retrieve_audience
+        retrieve_site
+        retrieve_subject
+        retrieve_user
+      end
+
+      def self.decode(token)
+        new(token)
+      end
+
+      def scope_includes?(*scope_parts)
+        !scope_parts.empty? && (
+          scope_parts = scope_parts.dup.map(&:to_s)
+          verbs_matches = self.class.verbs_matches(scope_parts.pop)
+
+          (0..scope_parts.length).any? do |depth|
+            verbs_matches.any? do |verb|
+              (scope_parts[0...depth] + [verb]).inject(scopes) do |m, v|
+                m&.[](v)
+              end
+            end
+          end
+        )
+      end
+
+      def scope_includes!(*scope_parts)
+        scope_includes?(*scope_parts) || fail(::RealSavvy::JWT::Unauthorized)
+      end
+
+      def self.verbs_matches(verb)
+        verb_index = SCOPE_VERBS.index(verb)
+        verb_index ? SCOPE_VERBS[verb_index..-1] : []
+      end
+
+      def for_site?
+        audience_is_site? && subject_is_site?
+      end
+
+      def for_site!
+        for_site? || fail(::RealSavvy::JWT::Unauthorized)
+      end
+
+      def for_user?
+        audience_is_site? && (subject_is_user? || subject_is_imposter?)
+      end
+
+      def audience_is_site?
+        audience.respond_to?(:is_real_savvy_site?) &&
+        audience.is_real_savvy_site?
+      end
+
+      def subject_is_user?
+        subject.respond_to?(:is_real_savvy_user?) &&
+        subject.is_real_savvy_user?
+      end
+
+      def subject_is_imposter?
+        subject.respond_to?(:is_real_savvy_imposter?) &&
+        subject.is_real_savvy_imposter?
+      end
+
+      def subject_is_site?
+        subject.respond_to?(:is_real_savvy_site?) &&
+        subject.is_real_savvy_site?
+      end
+
+      def for_user!
+        for_user? || fail(::RealSavvy::JWT::Unauthorized)
+      end
+
+      def valid?
+        claims && claims.length > 0 && (for_site? || for_user?) && validate_token
+      end
+
+      def validate_token
+        raise NotImplementedError, "subclass did not define #validate_token"
+      end
+
+      def imposter?
+        @imposter ? true : false
+      end
+
+      def to_share_token
+        share_token_json = Hash[claims.slice('aud','sub').map{ |key,value| [key, value.to_s.split('/')[-2,2].join('/')] }].to_json
+        Base64.urlsafe_encode64(share_token_json, padding: false)
+      end
+
+      private
+
+      attr_reader :claims, :audience, :subject
+
+      def retrieve_claims
+        raise NotImplementedError, "subclass did not define #retrieve_claims"
+      end
+
+      def retrieve_audience
+        @audience = ::RealSavvy::JWT::Config.retrieve_audience(claims) if claims
+      end
+
+      def retrieve_subject
+        @subject = ::RealSavvy::JWT::Config.retrieve_subject(claims) if claims
+      end
+
+      def retrieve_site
+        @site = audience
+      end
+
+      def retrieve_user
+        if subject_is_user?
+          @user = subject
+        elsif subject_is_imposter?
+          @user = subject.user
+          @imposter = true
+        end
+      end
+
+      def raw_scopes
+        claims&.fetch('scopes', nil).to_a
+      end
+
+      def retrieve_scopes
+        @scopes = raw_scopes.each_with_object({}) do |scope, result|
+          scope.split(':').inject(result) { |m, v| m[v] ||= {} }
+        end
+      end
+
+      def standardized_token
+        # If token needs to be cleaned up do it here in subclasses
+      end
+    end
+  end
+end

data/lib/real_savvy/jwt/config.rb

@@ -0,0 +1,54 @@
+module RealSavvy
+  module JWT
+    module Config
+      def self.public_key
+        if block_given?
+          @public_key = Proc.new
+        else
+          result = @public_key.is_a?(Proc) ? @public_key.call : @public_key
+          result.is_a?(OpenSSL::PKey::RSA) ? result : OpenSSL::PKey::RSA.new(result)
+        end
+      end
+
+      def self.public_key= value
+        @public_key = value
+      end
+
+      def self.retrieve_audience claims = nil
+        if block_given?
+          @retrieve_audience = Proc.new
+        else
+          @retrieve_audience.call(claims)
+        end
+      end
+
+      def self.retrieve_audience= value
+        @retrieve_audience = value
+      end
+
+      def self.retrieve_subject claims = nil
+        if block_given?
+          @retrieve_subject = Proc.new
+        else
+          @retrieve_subject.call(claims)
+        end
+      end
+
+      def self.retrieve_subject= value
+        @retrieve_subject = value
+      end
+
+      def self.validate_token token = nil
+        if block_given?
+          @validate_token = Proc.new
+        else
+          @validate_token.call(token)
+        end
+      end
+
+      def self.validate_token= value
+        @validate_token = value
+      end
+    end
+  end
+end

data/lib/real_savvy/jwt/share_token.rb

@@ -0,0 +1,32 @@
+module RealSavvy
+  module JWT
+    class ShareToken < AbstractToken
+
+      def short_token
+        @token.split('.')[1]
+      end
+
+      private
+
+      def retrieve_claims
+        @claims, @header = ::JWT.decode(
+                              token,
+                              nil,
+                              false,
+                            )
+      rescue ::JWT::DecodeError => e
+        raise ::RealSavvy::JWT::BadCredentials.new(e.message)
+      end
+
+      def validate_token
+        true
+      end
+
+      def standardized_token
+        token_parts = @token.split('.')
+        header = Base64.urlsafe_encode64({typ:"JWT",alg:"none"}.to_json, padding: false)
+        @token = [header, (token_parts.length == 1 ? token_parts[0] : token_parts[1]), nil].join('.')
+      end
+    end
+  end
+end

data/lib/real_savvy/jwt/token.rb

@@ -1,186 +1,32 @@
 module RealSavvy
   module JWT
-    class Token
-      # In order of access level
-      SCOPE_VERBS = %w{public read write admin}.freeze
-
-      attr_reader :scopes, :user, :site, :token
-
-      def initialize(token)
-        @token = token
-        retrieve_claims
-        retrieve_scopes
-        retrieve_audience
-        retrieve_site
-        retrieve_subject
-        retrieve_user
-      end
-
-      def self.public_key
-        if block_given?
-          @public_key = Proc.new
-        else
-          result = @public_key.is_a?(Proc) ? @public_key.call : @public_key
-          result.is_a?(OpenSSL::PKey::RSA) ? result : OpenSSL::PKey::RSA.new(result)
-        end
-      end
-
-      def self.public_key= value
-        @public_key = value
-      end
-
-      def self.retrieve_audience claims = nil
-        if block_given?
-          @retrieve_audience = Proc.new
-        else
-          @retrieve_audience.call(claims)
-        end
-      end
-
-      def self.retrieve_audience= value
-        @retrieve_audience = value
-      end
-
-      def self.retrieve_subject claims = nil
-        if block_given?
-          @retrieve_subject = Proc.new
-        else
-          @retrieve_subject.call(claims)
-        end
-      end
-
-      def self.retrieve_subject= value
-        @retrieve_subject = value
-      end
-
-      def self.validate_token token = nil
-        if block_given?
-          @validate_token = Proc.new
-        else
-          @validate_token.call(token)
-        end
-      end
-
-      def self.validate_token= value
-        @validate_token = value
-      end
-
-      def self.decode(token)
-        new(token)
-      end
-
-      def scope_includes?(*scope_parts)
-        !scope_parts.empty? && (
-          scope_parts = scope_parts.dup.map(&:to_s)
-          verbs_matches = self.class.verbs_matches(scope_parts.pop)
-
-          (0..scope_parts.length).any? do |depth|
-            verbs_matches.any? do |verb|
-              (scope_parts[0...depth] + [verb]).inject(scopes) do |m, v|
-                m&.[](v)
-              end
-            end
-          end
+    class Token < AbstractToken
+
+      def to_share_token
+        share_token_payload_keys = ['aud','sub']
+        share_token_payload = ::Hash[[share_token_payload_keys, claims.values_at(*share_token_payload_keys)].transpose]
+        ShareToken.new(
+          ::JWT.encode(
+            share_token_payload, nil, 'none'
+          )
         )
       end
 
-      def scope_includes!(*scope_parts)
-        scope_includes?(*scope_parts) || fail(::RealSavvy::JWT::Unauthorized)
-      end
-
-      def self.verbs_matches(verb)
-        verb_index = SCOPE_VERBS.index(verb)
-        verb_index ? SCOPE_VERBS[verb_index..-1] : []
-      end
-
-      def for_site?
-        audience_is_site? && subject_is_site?
-      end
-
-      def for_site!
-        for_site? || fail(::RealSavvy::JWT::Unauthorized)
-      end
-
-      def for_user?
-        audience_is_site? && (subject_is_user? || subject_is_imposter?)
-      end
-
-      def audience_is_site?
-        audience.respond_to?(:is_real_savvy_site?) &&
-        audience.is_real_savvy_site?
-      end
-
-      def subject_is_user?
-        subject.respond_to?(:is_real_savvy_user?) &&
-        subject.is_real_savvy_user?
-      end
-
-      def subject_is_imposter?
-        subject.respond_to?(:is_real_savvy_imposter?) &&
-        subject.is_real_savvy_imposter?
-      end
-
-      def subject_is_site?
-        subject.respond_to?(:is_real_savvy_site?) &&
-        subject.is_real_savvy_site?
-      end
-
-      def for_user!
-        for_user? || fail(::RealSavvy::JWT::Unauthorized)
-      end
-
-      def valid?
-        claims && claims.length > 0 && (for_site? || for_user?) && self.class.validate_token(token)
-      end
-
-      def imposter?
-        @imposter ? true : false
-      end
-
       private
 
-      attr_reader :claims, :audience, :subject
-
       def retrieve_claims
-        @claims = ::JWT.decode(
-          token,
-          self.class.public_key,
-          true,
-          algorithm: 'RS256',
-        ).first
+        @claims, @header = ::JWT.decode(
+                              token,
+                              ::RealSavvy::JWT::Config.public_key,
+                              true,
+                              algorithm: 'RS256',
+                            )
       rescue ::JWT::DecodeError => e
         raise ::RealSavvy::JWT::BadCredentials.new(e.message)
       end
 
-      def retrieve_audience
-        @audience = self.class.retrieve_audience(claims) if claims
-      end
-
-      def retrieve_subject
-        @subject = self.class.retrieve_subject(claims) if claims
-      end
-
-      def retrieve_site
-        @site = audience
-      end
-
-      def retrieve_user
-        if subject_is_user?
-          @user = subject
-        elsif subject_is_imposter?
-          @user = subject.user
-          @imposter = true
-        end
-      end
-
-      def raw_scopes
-        claims&.fetch('scopes', nil).to_a
-      end
-
-      def retrieve_scopes
-        @scopes = raw_scopes.each_with_object({}) do |scope, result|
-          scope.split(':').inject(result) { |m, v| m[v] ||= {} }
-        end
+      def validate_token
+        ::RealSavvy::JWT::Config.validate_token(token)
       end
     end
   end

data/lib/real_savvy/jwt.rb

@@ -4,5 +4,7 @@ module RealSavvy::JWT
 
 end
 
+require 'real_savvy/jwt/abstract_token'
 require 'real_savvy/jwt/token'
+require 'real_savvy/jwt/share_token'
 Dir[File.dirname(__FILE__) + '/jwt/*.rb'].each {|file| require file }

data/lib/real_savvy/version.rb

@@ -1,3 +1,3 @@
 module RealSavvy
-  VERSION = [0,0,6]
+  VERSION = [0,0,7]
 end

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: real_savvy
 version: !ruby/object:Gem::Version
-  version: 0.0.6
+  version: 0.0.7
 platform: ruby
 authors:
 - Ryan Rauh
@@ -10,7 +10,7 @@ authors:
 autorequire: 
 bindir: exe
 cert_chain: []
-date: 2018-03-15 00:00:00.000000000 Z
+date: 2018-03-26 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: faraday
@@ -166,8 +166,11 @@ files:
 - lib/real_savvy/connection.rb
 - lib/real_savvy/document.rb
 - lib/real_savvy/jwt.rb
+- lib/real_savvy/jwt/abstract_token.rb
 - lib/real_savvy/jwt/bad_credentials.rb
+- lib/real_savvy/jwt/config.rb
 - lib/real_savvy/jwt/imposter.rb
+- lib/real_savvy/jwt/share_token.rb
 - lib/real_savvy/jwt/site.rb
 - lib/real_savvy/jwt/token.rb
 - lib/real_savvy/jwt/unauthorized.rb