RubyGems - ruby-openid - Versions diffs - 2.0.4 → 2.1.2 - Mend

ruby-openid 2.0.4 → 2.1.2

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.

Potentially problematic release.

This version of ruby-openid might be problematic. Click here for more details.

Files changed (58) hide show

data/CHANGELOG +65 -28
data/LICENSE +4 -1
data/README +19 -12
data/UPGRADE +5 -0
data/examples/README +8 -22
data/examples/active_record_openid_store/XXX_add_open_id_store_to_db.rb +6 -6
data/examples/active_record_openid_store/lib/association.rb +2 -1
data/examples/active_record_openid_store/lib/openid_ar_store.rb +3 -3
data/examples/rails_openid/app/controllers/consumer_controller.rb +11 -5
data/lib/openid.rb +4 -0
data/lib/openid/association.rb +7 -7
data/lib/openid/consumer/checkid_request.rb +11 -0
data/lib/openid/consumer/discovery.rb +12 -3
data/lib/openid/consumer/idres.rb +35 -43
data/lib/openid/extension.rb +9 -1
data/lib/openid/extensions/pape.rb +22 -25
data/lib/openid/extensions/sreg.rb +1 -0
data/lib/openid/fetchers.rb +25 -5
data/lib/openid/kvform.rb +8 -5
data/lib/openid/kvpost.rb +6 -5
data/lib/openid/message.rb +53 -34
data/lib/openid/server.rb +87 -52
data/lib/openid/trustroot.rb +25 -17
data/lib/openid/util.rb +19 -4
data/lib/openid/yadis/discovery.rb +3 -3
data/lib/openid/yadis/htmltokenizer.rb +8 -5
data/lib/openid/yadis/parsehtml.rb +22 -14
data/lib/openid/yadis/xrds.rb +6 -9
data/test/data/linkparse.txt +1 -1
data/test/data/test1-parsehtml.txt +24 -0
data/test/data/trustroot.txt +8 -2
data/test/test_association.rb +7 -7
data/test/test_associationmanager.rb +1 -1
data/test/test_extension.rb +46 -0
data/test/test_idres.rb +81 -21
data/test/test_kvform.rb +5 -5
data/test/test_message.rb +61 -3
data/test/test_pape.rb +36 -22
data/test/test_server.rb +190 -12
data/test/test_sreg.rb +0 -1
data/test/test_trustroot.rb +1 -0
data/test/test_yadis_discovery.rb +13 -0
metadata +3 -19
data/examples/rails_openid/app/views/consumer/start.rhtml +0 -8
data/examples/rails_openid_login_generator/USAGE +0 -23
data/examples/rails_openid_login_generator/gemspec +0 -13
data/examples/rails_openid_login_generator/openid_login_generator.rb +0 -36
data/examples/rails_openid_login_generator/templates/README +0 -116
data/examples/rails_openid_login_generator/templates/controller.rb +0 -113
data/examples/rails_openid_login_generator/templates/controller_test.rb +0 -0
data/examples/rails_openid_login_generator/templates/helper.rb +0 -2
data/examples/rails_openid_login_generator/templates/openid_login_system.rb +0 -87
data/examples/rails_openid_login_generator/templates/user.rb +0 -14
data/examples/rails_openid_login_generator/templates/user_test.rb +0 -0
data/examples/rails_openid_login_generator/templates/users.yml +0 -0
data/examples/rails_openid_login_generator/templates/view_login.rhtml +0 -15
data/examples/rails_openid_login_generator/templates/view_logout.rhtml +0 -10
data/examples/rails_openid_login_generator/templates/view_welcome.rhtml +0 -9

data/test/test_sreg.rb CHANGED Viewed

@@ -453,7 +453,6 @@ module OpenID
           req_msg.update_args(NS_URI, sreg_req.get_extension_args)
           req = Server::OpenIDRequest.new
           req.message = req_msg
-          req.namespace = req_msg.get_openid_namespace
           # -> checkid_* request

data/test/test_trustroot.rb CHANGED Viewed

@@ -9,6 +9,7 @@ class TrustRootTest < Test::Unit::TestCase
   def _test_sanity(case_, sanity, desc)
     tr = OpenID::TrustRoot::TrustRoot.parse(case_)
     if sanity == 'sane'
+      assert(! tr.nil?)
       assert(tr.sane?, [case_, desc])
       assert(OpenID::TrustRoot::TrustRoot.check_sanity(case_), [case_, desc])
     elsif sanity == 'insane'

data/test/test_yadis_discovery.rb CHANGED Viewed

@@ -162,6 +162,12 @@ module OpenID
       end
     end
+    class BlankContentTypeFetcher
+      def fetch(url, body=nil, headers=nil, redirect_limit=nil)
+        return OpenID::HTTPResponse._from_raw_data(200, "", {"Content-Type" => ""}, nil)
+      end
+    end
     class TestYadisDiscovery < Test::Unit::TestCase
       include FetcherMixin
@@ -202,6 +208,13 @@ module OpenID
           assert_equal(nil, result.content_type)
         end
       end
+      def test_blank_content_type
+        with_fetcher(BlankContentTypeFetcher.new) do
+          result = Yadis.discover("http://bogus")
+          assert_equal("", result.content_type)
+        end
+      end
     end
   end
 end

metadata CHANGED Viewed

@@ -3,8 +3,8 @@ rubygems_version: 0.9.0
 specification_version: 1
 name: ruby-openid
 version: !ruby/object:Gem::Version
-  version: 2.0.4
-date: 2008-02-13 00:00:00 -08:00
+  version: 2.1.2
+date: 2008-06-27 00:00:00 -07:00
 summary: A library for consuming and serving OpenID identities.
 require_paths:
 - lib
@@ -31,7 +31,6 @@ authors:
 files:
 - examples/README
 - examples/active_record_openid_store
-- examples/rails_openid_login_generator
 - examples/rails_openid
 - examples/discover
 - examples/active_record_openid_store/lib
@@ -45,21 +44,6 @@ files:
 - examples/active_record_openid_store/lib/open_id_setting.rb
 - examples/active_record_openid_store/lib/openid_ar_store.rb
 - examples/active_record_openid_store/test/store_test.rb
-- examples/rails_openid_login_generator/templates
-- examples/rails_openid_login_generator/gemspec
-- examples/rails_openid_login_generator/USAGE
-- examples/rails_openid_login_generator/openid_login_generator.rb
-- examples/rails_openid_login_generator/templates/user.rb
-- examples/rails_openid_login_generator/templates/README
-- examples/rails_openid_login_generator/templates/controller.rb
-- examples/rails_openid_login_generator/templates/helper.rb
-- examples/rails_openid_login_generator/templates/view_login.rhtml
-- examples/rails_openid_login_generator/templates/view_logout.rhtml
-- examples/rails_openid_login_generator/templates/view_welcome.rhtml
-- examples/rails_openid_login_generator/templates/controller_test.rb
-- examples/rails_openid_login_generator/templates/user_test.rb
-- examples/rails_openid_login_generator/templates/users.yml
-- examples/rails_openid_login_generator/templates/openid_login_system.rb
 - examples/rails_openid/app
 - examples/rails_openid/components
 - examples/rails_openid/config
@@ -91,7 +75,6 @@ files:
 - examples/rails_openid/app/views/layouts/server.rhtml
 - examples/rails_openid/app/views/login/index.rhtml
 - examples/rails_openid/app/views/server/decide.rhtml
-- examples/rails_openid/app/views/consumer/start.rhtml
 - examples/rails_openid/app/views/consumer/index.rhtml
 - examples/rails_openid/config/environments
 - examples/rails_openid/config/database.yml
@@ -228,6 +211,7 @@ files:
 - test/test_checkid_request.rb
 - test/test_discovery_manager.rb
 - test/test_responses.rb
+- test/test_extension.rb
 - test/data/test_xrds
 - test/data/urinorm.txt
 - test/data/n2b64

data/examples/rails_openid/app/views/consumer/start.rhtml DELETED Viewed

@@ -1,8 +0,0 @@
-<html>
-<body>
-<%= @form_text %>
-<script type="text/javascript">
-document.getElementById('openid_form').submit();
-</script>
-</body>
-</html>

data/examples/rails_openid_login_generator/USAGE DELETED Viewed

@@ -1,23 +0,0 @@
-NAME
-     openid_login - creates a functional openid login system
-SYNOPSIS
-     openid_login [Controller name]
-     Good names are Account Myaccount Security
-DESCRIPTION
-     This generator creates a general purpose login system.
-     Included:
-      - a User model which stores OpenID authenticated users
-      - a Controller with login, welcome and logoff actions
-      - a mixin which lets you easily add advanced authentication
-        features to your abstract base controller
-EXAMPLE
-      ./script/generate openid_login Account
-     This will generate an Account controller with login and logout methods.
-     The model is always called User

data/examples/rails_openid_login_generator/gemspec DELETED Viewed

@@ -1,13 +0,0 @@
-Gem::Specification.new do |s|
-  s.name = %q{openid_login_generator}
-  s.version = "0.2"
-  s.date = %q{2007-1-4}
-  s.summary = %q{[Rails] OpenID Login generator.}
-  s.require_paths = ["."]
-  s.email = %q{brian@janrain.com}
-  s.homepage = %q{http://wiki.rubyonrails.org/rails/pages/OpenidLoginGenerator}
-  s.description = %q{Generates Rails code implementing an OpenID based login system for your Rails app. Based on the original Rails Login Generator.}
-  s.authors = ["Brian Ellin, JanRain Inc."]
-  s.files = Dir.glob("{templates/**/*}") + ['USAGE', 'openid_login_generator.rb']
-  s.add_dependency('ruby-openid', '>= 1.0.2')
-end

data/examples/rails_openid_login_generator/openid_login_generator.rb DELETED Viewed

@@ -1,36 +0,0 @@
-class OpenidLoginGenerator < Rails::Generator::NamedBase
-  def manifest
-    record do |m|
-      # Login module, controller class, functional test, and helper.
-      m.template "openid_login_system.rb", "lib/openid_login_system.rb"
-      m.template "controller.rb", File.join("app/controllers", class_path, "#{file_name}_controller.rb")
-      m.template "controller_test.rb", File.join("test/functional", class_path, "#{file_name}_controller_test.rb")
-      m.template "helper.rb", File.join("app/helpers", class_path, "#{file_name}_helper.rb")
-      # Model class, unit test, fixtures, and example schema.
-      m.template "user.rb", "app/models/user.rb"
-      m.template "user_test.rb", "test/unit/user_test.rb"
-      m.template "users.yml", "test/fixtures/users.yml"
-      # Layout and stylesheet.
-      m.template "scaffold:layout.rhtml", "app/views/layouts/scaffold.rhtml"
-      m.template "scaffold:style.css", "public/stylesheets/scaffold.css"
-      # Views.
-      m.directory File.join("app/views", class_path, file_name)
-      login_views.each do |action|
-        m.template "view_#{action}.rhtml",
-          File.join("app/views", class_path, file_name, "#{action}.rhtml")
-      end
-      m.template "README", "README_LOGIN"
-    end
-  end
-  attr_accessor :controller_class_name
-  def login_views
-    %w(welcome login logout)
-  end
-end

data/examples/rails_openid_login_generator/templates/README DELETED Viewed

@@ -1,116 +0,0 @@
-== About
-This is a port of the standard LoginGenerator to use OpenID for
-authentication.  It is distributed with the Ruby OpenID library.
-Read more at:
-* http://openidenabled.com
-* http://openidenabled.com/openid/libraries/ruby
-* http://openid.net
-== Installation
-If you are reading this, then you have installed the openid_login
-system, but there are still a few things you have to do
-manually. First open your app/controllers/application.rb and add
-  require_dependency "openid_login_system"
-to the top of the file and include the login system with
-  include OpenidLoginSystem
-The beginning of your ApplicationController.
-It should look something like this :
-  require_dependency "openid_login_system"
-  class ApplicationController < ActionController::Base
-    include OpenidLoginSystem
-    model :user
-After you have done the modifications the the AbstractController you can import
-the user model into the database. This model is meant as an example and you
-should extend it.
-The model :user is required when you are hitting problems to the degree of
-"Session could not be restored becuase not all items in it are known"
-== Requirements
-You need a database table corresponding to the User model.
-  mysql syntax:
-  CREATE TABLE users (
-    id int(11) NOT NULL auto_increment,
-    openid_url varchar(256) default NULL,
-    PRIMARY KEY  (id)
-  );
-�
-  postgres :
-  CREATE TABLE "users" (
-  �"id" SERIAL NOT NULL UNIQUE,
-  �"openid_url" VARCHAR(256),
-  �PRIMARY KEY("id")
-  ) WITH OIDS;
-  sqlite:
-  CREATE TABLE 'users' (
-    'id' INTEGER PRIMARY KEY NOT NULL,
-    'openid_url' VARCHAR(256) DEFAULT NULL
-  );
-Of course your user model can have any amount of extra fields. This is just a
-starting point
-== How to use it
-Now you can go around and happily add "before_filter :login_required" to the
-controllers which you would like to protect.
-After integrating the login system with your rails application
-navigate to your new controller's login method. There you may login
-which will create a new User object if you've never logged in
-before. After you are done you should have a look at your DB, and
-you'll see the record for your User with the openid_url you entered.
-== Tips & Tricks
-How do I...
-  ... access the user who is currently logged in
-  A: You can get the user id from the session using session[:user_id]
-     Example:
-	session[:user_id]
-       To get the User object:
-	user = User.find(session[:user_id])
-      	The OpenidController also has a find_user method
-     	which will return the User object of the logged in user, or nil
-	if no user is logged in.
-  ... restrict access to only a few methods?
-  A: Use before_filters build in scoping.
-     Example:
-       before_filter :login_required, :only => [:myaccount, :changepassword]
-       before_filter :login_required, :except => [:index]
-  ... check if a user is logged-in in my views?
-  A: session[:user_id] will tell you. Here is an example helper which you can use to make this more pretty:
-     Example:
-       def user?
-         !session[:user_id].nil?
-       end

data/examples/rails_openid_login_generator/templates/controller.rb DELETED Viewed

@@ -1,113 +0,0 @@
-require "pathname"
-require "cgi"
-# load the openid library
-begin
-  require "rubygems"
-  require_gem "ruby-openid", ">= 1.0.2"
-rescue LoadError
-  require "openid"
-end
-class <%= class_name %>Controller < ApplicationController
-  layout  'scaffold'
-  # process the login request, disover the openid server, and
-  # then redirect.
-  def login
-    openid_url = params[:openid_url]
-    if request.post?
-      request = consumer.begin(openid_url)
-      case request.status
-      when OpenID::SUCCESS
-        return_to = url_for(:action=> 'complete')
-        trust_root = url_for(:controller=>'')
-        url = request.redirect_url(trust_root, return_to)
-        redirect_to(url)
-        return
-      when OpenID::FAILURE
-        escaped_url = CGI::escape(openid_url)
-        flash[:notice] = "Could not find OpenID server for #{escaped_url}"
-      else
-        flash[:notice] = "An unknown error occured."
-      end
-    end
-  end
-  # handle the openid server response
-  def complete
-    response = consumer.complete(params)
-    case response.status
-    when OpenID::SUCCESS
-      @user = User.get(response.identity_url)
-      # create user object if one does not exist
-      if @user.nil?
-        @user = User.new(:openid_url => response.identity_url)
-        @user.save
-      end
-      # storing both the openid_url and user id in the session for for quick
-      # access to both bits of information.  Change as needed.
-      session[:user_id] = @user.id
-      flash[:notice] = "Logged in as #{CGI::escape(response.identity_url)}"
-      redirect_back_or_default :action => "welcome"
-      return
-    when OpenID::FAILURE
-      if response.identity_url
-        flash[:notice] = "Verification of #{response.identity_url} failed."
-      else
-        flash[:notice] = 'Verification failed.'
-      end
-    when OpenID::CANCEL
-      flash[:notice] = 'Verification cancelled.'
-    else
-      flash[:notice] = 'Unknown response from OpenID server.'
-    end
-    redirect_to :action => 'login'
-  end
-  def logout
-    session[:user_id] = nil
-  end
-  def welcome
-  end
-  private
-  # Get the OpenID::Consumer object.
-  def consumer
-    # Create the OpenID store for storing associations and nonces,
-    # putting it in your app's db directory.
-    # Note: see the plugin located at examples/active_record_openid_store
-    # if you need to store this information in your database.
-    store_dir = Pathname.new(RAILS_ROOT).join('db').join('openid-store')
-    store = OpenID::FilesystemStore.new(store_dir)
-    return OpenID::Consumer.new(session, store)
-  end
-  # get the logged in user object
-  def find_user
-    return nil if session[:user_id].nil?
-    User.find(session[:user_id])
-  end
-end

data/examples/rails_openid_login_generator/templates/controller_test.rb DELETED Viewed

File without changes

data/examples/rails_openid_login_generator/templates/helper.rb DELETED Viewed

	@@ -1,2 +0,0 @@
1	- module <%= class_name %>Helper
2	- end

data/examples/rails_openid_login_generator/templates/openid_login_system.rb DELETED Viewed

@@ -1,87 +0,0 @@
-require_dependency "user"
-module OpenidLoginSystem
-  protected
-  # overwrite this if you want to restrict access to only a few actions
-  # or if you want to check if the user has the correct rights
-  # example:
-  #
-  #  # only allow nonbobs
-  #  def authorize?(user)
-  #    user.login != "bob"
-  #  end
-  def authorize?(user)
-     true
-  end
-  # overwrite this method if you only want to protect certain actions of the controller
-  # example:
-  #
-  #  # don't protect the login and the about method
-  #  def protect?(action)
-  #    if ['action', 'about'].include?(action)
-  #       return false
-  #    else
-  #       return true
-  #    end
-  #  end
-  def protect?(action)
-    true
-  end
-  # login_required filter. add
-  #
-  #   before_filter :login_required
-  #
-  # if the controller should be under any rights management.
-  # for finer access control you can overwrite
-  #
-  #   def authorize?(user)
-  #
-  def login_required
-    if not protect?(action_name)
-      return true
-    end
-    if session[:user_id] and authorize?(User.find(session[:user_id]))
-      return true
-    end
-    # store current location so that we can
-    # come back after the user logged in
-    store_location
-    # call overwriteable reaction to unauthorized access
-    access_denied
-    return false
-  end
-  # overwrite if you want to have special behavior in case the user is not authorized
-  # to access the current operation.
-  # the default action is to redirect to the login screen
-  # example use :
-  # a popup window might just close itself for instance
-  def access_denied
-    redirect_to :controller=>"/<%= file_name %>", :action =>"login"
-  end
-  # store current uri in  the session.
-  # we can return to this location by calling return_location
-  def store_location
-    session[:return_to] = request.request_uri
-  end
-  # move to the last store_location call or to the passed default one
-  def redirect_back_or_default(default)
-    if session[:return_to].nil?
-      redirect_to default
-    else
-      redirect_to_url session[:return_to]
-      session[:return_to] = nil
-    end
-  end
-end