ros-core 0.1.0

data/lib/ros/core/engine.rb

@@ -0,0 +1,88 @@
+# frozen_string_literal: true
+
+require_relative '../../migrations'
+require_relative 'console'
+
+module Ros
+  module Core
+    class Engine < ::Rails::Engine
+      config.generators.api_only = true
+      config.generators do |g|
+        g.test_framework :rspec, fixture: true
+        g.fixture_replacement :factory_bot, dir: 'spec/factories'
+      end
+
+      # Adds this gem's db/migrations path to the enclosing application's migraations_path array
+      # https://github.com/rails/rails/issues/22261
+			initializer :append_migrations do |app|
+				config.paths['db/migrate'].expanded.each do |expanded_path|
+					app.config.paths['db/migrate'] << expanded_path
+					ActiveRecord::Migrator.migrations_paths << expanded_path
+				end
+			end
+
+			initializer :jsonapi_authorization do |app|
+        JSONAPI.configure do |config|
+          config.default_processor_klass = JSONAPI::Authorization::AuthorizingProcessor
+          config.exception_class_whitelist = [Pundit::NotAuthorizedError]
+        end
+      end
+
+      # NOTE: ENV vars indicate hierarchy with two underscores '__'
+      # export PLATFORM__CREDENTIALS__JWT_ENCRYPTION_KEY='test'
+			initializer :platform_settings do |app|
+        settings_path = root.join('config/settings')
+        # NOTE: Sources are prepended in reverse order, meaning the first prepend is loaded last
+        Settings.prepend_source!({ credentials: Rails.application.credentials.config })
+        Settings.prepend_source!("#{settings_path}.yml")
+        Settings.reload!
+      end
+
+			initializer :platform_services_connections do |app|
+        connection_type = Settings.dig(:services, :connection, :type)
+        client_config = Settings.dig(:services, :connection, connection_type).to_h
+        Ros::Platform::Client.configure(client_config.merge(connection_type: connection_type))
+      end
+
+			initializer :load_middleware do |app|
+        Warden::Strategies.add(:api_token, Ros::ApiTokenStrategy)
+        app.config.middleware.use Warden::Manager do |manager|
+          manager.default_strategies :api_token
+          manager.failure_app = Ros::FailureApp
+        end
+        app.config.middleware.use Ros::TenantMiddleware
+      end
+
+      initializer :documentation do |app|
+				require 'open_api'
+				OpenApi::Config.class_eval do
+					# Part 1: configs of this gem
+					self.file_output_path = 'public/open_api'
+
+					# Part 2: config (DSL) for generating OpenApi info
+					open_api :doc_name, base_doc_classes: [ApplicationDoc]
+					info version: '1.0.0', title: 'Platform APIs'#, description: ..
+					# server 'http://localhost:3000', desc: 'Internal staging server for testing'
+					bearer_auth :Authorization
+				end
+      end
+
+      # Configure any error reporting services if their credential has been set
+      # For now, only sentry.io is supported
+      initializer :error_reporting_services do |app|
+        # export PLATFORM__CREDENTIALS__SENTRY_DSN=url
+        if Settings.credentials.sentry_dsn
+          require 'sentry-raven'
+          Raven.configure do |config|
+            config.dsn = Settings.credentials.sentry_dsn
+          end
+        end
+      end
+
+      # Add console methods from ./console.rb
+      config.after_initialize do
+        TOPLEVEL_BINDING.eval('self').extend Ros::Console::Methods
+      end
+    end
+  end
+end

data/lib/ros/core/version.rb

@@ -0,0 +1,5 @@
+module Ros
+  module Core
+    VERSION = '0.1.0'
+  end
+end

data/lib/ros/tenant_middleware.rb

@@ -0,0 +1,108 @@
+# frozen_string_literal: true
+
+require 'apartment/elevators/generic'
+
+module Ros
+  class TenantMiddleware < Apartment::Elevators::Generic
+    attr_accessor :auth_string, :auth_type, :token, :access_key_id
+
+    # Returns the schema_name for Apartment to switch to for this request
+    def parse_tenant_name(request)
+      @auth_string = request.env['HTTP_AUTHORIZATION']
+      return 'public' unless auth_string.present?
+      @auth_type, @token = auth_string.split(' ')
+      @auth_type.downcase!
+      Rails.logger.info("Invalid auth type #{auth_type}") and return 'public' unless auth_type.in? %w(basic bearer)
+      Rails.logger.info('Invalid token') and return 'public' if token.nil?
+      schema_name = send("tenant_name_from_#{auth_type}")
+      Rails.logger.info('Invalid credentials') if schema_name.eql?('public')
+      schema_name
+    end
+
+    def tenant_name_from_basic
+      return 'public' unless @access_key_id = token.split(':').first
+      credential.try(:schema_name) || 'public'
+    end
+
+    def credential
+      # TODO: Credential.authorization must be an instance variable
+      Ros::Sdk::Credential.authorization = auth_string
+      Ros::IAM::Credential.where(access_key_id: access_key_id).first
+    # rescue JsonApiClient::Errors::ServerError => e
+    # NOTE: Swallow the auth error and return nil which causes tenant to be 'public'
+    rescue JsonApiClient::Errors::NotAuthorized => e
+    end
+
+    def tenant_name_from_bearer
+      return 'public' unless account_id = urn.try(:account_id)
+      Tenant.account_id_to_schema(account_id)
+    end
+
+    def urn; Urn.from_jwt(token) end
+
+    # elsif Settings.service.auth_type
+    # Ros::Sdk::Credential.authorization = "#{Settings.service.auth_type} #{token}"
+    # Receiving request from another service
+  end
+end
+
+=begin
+module Ros
+  class SomeTenantFromJWT < Apartment::Elevators::Generic
+    def some_other_thing(request)
+      # TODO: This only applies to IAM service so code goes there
+      # Then only service agnostic code goes here
+      return Tenant.public_schema if request.path.eql?('/roots/sign_in')
+      if request.path.eql?('/users/sign_in')
+        params = JSON.parse request.body.read
+        request.body.rewind
+        return Tenant.schema_name_from(account_id: params['account_id'])
+      end
+      # This code is for all services including IAM except for the endpoints above
+      token = nil
+      if request.env['HTTP_AUTHORIZATION']
+        encryption_key = Rails.application.credentials.dig(:jwt, :encryption_key) || ENV['DEVISE_JWT_SECRET_KEY'] || 'test1234'
+        # token = JWT.decode(request.env['HTTP_AUTHORIZATION'].split.last, encryption_key, 'HS256')
+        token = JWT.decode(request.env['HTTP_AUTHORIZATION'].split.last, 'test1234', 'HS256')
+      end
+      return unless token
+      urn_text = token[0]['urn']
+      urn = Ros::Urn.new(urn_text)
+      # TODO: Add the user's auth stuff here?
+      # NOTE: It seems that the devise-jwt should take it from here and checks that the token is valid
+      # All we are doing here is selecting the correct tenant based on the values in the token
+      # Another question is: how is the current_user set
+      # binding.pry
+      Tenant.schema_name_from(account_id: urn.account_id)
+
+      # return
+      # return 'public' if request.path.starts_with?('/core')
+      # return 'public' if request.path.starts_with?('/tenants')
+      # return 'public' if request.path.starts_with?('/policies')
+      # if request.path.eql?('/users/sign_in')
+      #   body = request.body.read
+      #   request.body.rewind
+      #   # rescue JSON::ParserError => e
+      #   binding.pry
+      #   if access_key_id = JSON.parse(body)['access_key_id']
+      #     aki = AccessKeyId.find_by(identifier: access_key_id).tenant.schema_name
+      #     return aki
+      #   end
+      # else
+      #   return 'test2'
+      #   # rb = JSON.parse request.body.read
+      #   # request.body.rewind
+      #   # return rb['tenant']
+      # end
+      # Tenant.public_schema_endpoints.each do |path|
+      #   return Tenant.public_schema if request.path.eql?(path)
+      # end
+      # token = JWT.decode(request.env['HTTP_AUTHORIZATION'].split.last, 'test1234', 'HS256')
+      # token.first['tenant']
+      # end
+      # Tenant.set_request_store(request.env)
+      # RequestStore.store[:tenant_request].schema_name
+    end
+  end
+end
+=end

data/lib/tasks/db.rake

@@ -0,0 +1,42 @@
+# frozen_string_literal: true
+
+namespace :ros do
+  namespace :db do
+		# desc 'Remove all SQLite3 database files'
+    # task :rm do
+    #   FileUtils.rm Dir.glob('db/*.sqlite3')
+    #   FileUtils.rm_rf('spec/dummy/db')
+    #   FileUtils.mkdir_p('spec/dummy/db')
+    #   FileUtils.touch('spec/dummy/db/seeds.rb')
+    # end
+
+    desc 'Clean a database (removes all existing data in all schemas)'
+    task clean: [:environment] do
+      DatabaseCleaner.strategy = :truncation, { cache_tables: false }
+      (Tenant.all.pluck(:schema_name) << 'public').each do |schema_name|
+        Apartment::Tenant.switch!(schema_name)
+        DatabaseCleaner.clean
+      end
+      Rake::Task['app:db:environment:set'].invoke
+    end
+
+    namespace :clean do
+      desc 'Clean a database and seed it'
+      task seed: ['app:ros:db:clean'] do
+        Rake::Task['app:db:seed'].invoke
+      end
+    end
+
+    desc 'Reset a database (drop, create and run migrations)'
+    task reset: ['app:db:drop', 'app:db:create'] do
+      Rake::Task['app:db:migrate'].invoke
+    end
+
+    namespace :reset do
+      desc 'Reset a database and seed it'
+      task seed: ['app:ros:db:reset'] do
+        Rake::Task['app:db:seed'].invoke
+      end
+    end
+  end
+end

data/lib/tasks/ros/core_tasks.rake

@@ -0,0 +1,4 @@
+# desc "Explaining what the task does"
+# task :ros_core do
+#   # Task goes here
+# end

metadata

@@ -0,0 +1,313 @@
+--- !ruby/object:Gem::Specification
+name: ros-core
+version: !ruby/object:Gem::Version
+  version: 0.1.0
+platform: ruby
+authors:
+- Robert Roach
+autorequire: 
+bindir: bin
+cert_chain: []
+date: 2019-03-10 00:00:00.000000000 Z
+dependencies:
+- !ruby/object:Gem::Dependency
+  name: rails
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: 6.0.0.beta1
+  type: :runtime
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: 6.0.0.beta1
+- !ruby/object:Gem::Dependency
+  name: jsonapi-resources
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - '='
+      - !ruby/object:Gem::Version
+        version: 0.9.5
+  type: :runtime
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - '='
+      - !ruby/object:Gem::Version
+        version: 0.9.5
+- !ruby/object:Gem::Dependency
+  name: jsonapi-authorization
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - '='
+      - !ruby/object:Gem::Version
+        version: 1.0.0
+  type: :runtime
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - '='
+      - !ruby/object:Gem::Version
+        version: 1.0.0
+- !ruby/object:Gem::Dependency
+  name: warden
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - '='
+      - !ruby/object:Gem::Version
+        version: 1.2.8
+  type: :runtime
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - '='
+      - !ruby/object:Gem::Version
+        version: 1.2.8
+- !ruby/object:Gem::Dependency
+  name: jwt
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - '='
+      - !ruby/object:Gem::Version
+        version: 2.1.0
+  type: :runtime
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - '='
+      - !ruby/object:Gem::Version
+        version: 2.1.0
+- !ruby/object:Gem::Dependency
+  name: pry-rails
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - '='
+      - !ruby/object:Gem::Version
+        version: 0.3.9
+  type: :runtime
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - '='
+      - !ruby/object:Gem::Version
+        version: 0.3.9
+- !ruby/object:Gem::Dependency
+  name: sneakers
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - '='
+      - !ruby/object:Gem::Version
+        version: 2.11.0
+  type: :runtime
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - '='
+      - !ruby/object:Gem::Version
+        version: 2.11.0
+- !ruby/object:Gem::Dependency
+  name: apartment
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - '='
+      - !ruby/object:Gem::Version
+        version: 2.2.0
+  type: :runtime
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - '='
+      - !ruby/object:Gem::Version
+        version: 2.2.0
+- !ruby/object:Gem::Dependency
+  name: grpc
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - '='
+      - !ruby/object:Gem::Version
+        version: 1.18.0
+  type: :runtime
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - '='
+      - !ruby/object:Gem::Version
+        version: 1.18.0
+- !ruby/object:Gem::Dependency
+  name: prometheus_exporter
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - '='
+      - !ruby/object:Gem::Version
+        version: 0.4.5
+  type: :runtime
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - '='
+      - !ruby/object:Gem::Version
+        version: 0.4.5
+- !ruby/object:Gem::Dependency
+  name: sidekiq
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - '='
+      - !ruby/object:Gem::Version
+        version: 5.2.5
+  type: :runtime
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - '='
+      - !ruby/object:Gem::Version
+        version: 5.2.5
+- !ruby/object:Gem::Dependency
+  name: seedbank
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - '='
+      - !ruby/object:Gem::Version
+        version: 0.5.0
+  type: :runtime
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - '='
+      - !ruby/object:Gem::Version
+        version: 0.5.0
+- !ruby/object:Gem::Dependency
+  name: sentry-raven
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - '='
+      - !ruby/object:Gem::Version
+        version: 2.9.0
+  type: :runtime
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - '='
+      - !ruby/object:Gem::Version
+        version: 2.9.0
+- !ruby/object:Gem::Dependency
+  name: attr_encrypted
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: 3.1.0
+  type: :runtime
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: 3.1.0
+- !ruby/object:Gem::Dependency
+  name: zero-rails_openapi
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - '='
+      - !ruby/object:Gem::Version
+        version: 2.1.0
+  type: :runtime
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - '='
+      - !ruby/object:Gem::Version
+        version: 2.1.0
+- !ruby/object:Gem::Dependency
+  name: config
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - '='
+      - !ruby/object:Gem::Version
+        version: 1.7.1
+  type: :runtime
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - '='
+      - !ruby/object:Gem::Version
+        version: 1.7.1
+- !ruby/object:Gem::Dependency
+  name: sqlite3
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '1.3'
+  type: :development
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '1.3'
+description: Base controller, model, resource and policy classes; authentication with
+  JWT, per request tenant selection, exception reporting
+email:
+- rjayroach@gmail.com
+executables: []
+extensions: []
+extra_rdoc_files: []
+files:
+- MIT-LICENSE
+- README.md
+- Rakefile
+- app/controllers/ros/application_controller.rb
+- app/controllers/tenants_controller.rb
+- app/docs/application_doc.rb
+- app/docs/tenants_doc.rb
+- app/models/concerns/api_belongs_to.rb
+- app/models/concerns/ros/tenant_concern.rb
+- app/models/ros/application_record.rb
+- app/policies/ros/application_policy.rb
+- app/policies/tenant_policy.rb
+- app/resources/ros/application_resource.rb
+- app/resources/tenant_resource.rb
+- config/environment.rb
+- config/initializers/apartment.rb
+- config/initializers/config.rb
+- config/initializers/jsonapi_resources.rb
+- config/routes.rb
+- config/settings.yml
+- lib/generators/endpoint/USAGE
+- lib/generators/endpoint/endpoint_generator.rb
+- lib/migrations.rb
+- lib/ros/api_token_strategy.rb
+- lib/ros/core.rb
+- lib/ros/core/console.rb
+- lib/ros/core/engine.rb
+- lib/ros/core/version.rb
+- lib/ros/tenant_middleware.rb
+- lib/tasks/db.rake
+- lib/tasks/ros/core_tasks.rake
+homepage: https://github.com/rails-on-services
+licenses:
+- MIT
+metadata: {}
+post_install_message: 
+rdoc_options: []
+require_paths:
+- lib
+required_ruby_version: !ruby/object:Gem::Requirement
+  requirements:
+  - - ">="
+    - !ruby/object:Gem::Version
+      version: '0'
+required_rubygems_version: !ruby/object:Gem::Requirement
+  requirements:
+  - - ">="
+    - !ruby/object:Gem::Version
+      version: '0'
+requirements: []
+rubygems_version: 3.0.2
+signing_key: 
+specification_version: 4
+summary: Provides common support services to Rails on Services based Projects
+test_files: []