RubyGems - ruby_native - Versions diffs - 0.1.2 → 0.1.4 - Mend

ruby_native 0.1.2 → 0.1.4

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.

Files changed (13) hide show

checksums.yaml +4 -4
data/README.md +1 -0
data/app/controllers/ruby_native/auth/sessions_controller.rb +26 -0
data/app/controllers/ruby_native/auth/start_controller.rb +16 -0
data/app/views/ruby_native/auth/start/show.html.erb +16 -0
data/config/routes.rb +4 -0
data/lib/ruby_native/engine.rb +4 -0
data/lib/ruby_native/helper.rb +0 -4
data/lib/ruby_native/native_detection.rb +9 -0
data/lib/ruby_native/oauth_middleware.rb +144 -0
data/lib/ruby_native/version.rb +1 -1
data/lib/ruby_native.rb +3 -0
metadata +5 -1

checksums.yaml CHANGED Viewed

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: '00576379773bb42c2d69e98cd880e81852ae7ec56c0428b13fea96c6bbc974cb'
-  data.tar.gz: eafeb8440ec88a7418577eefaccf5251e0c658f0b3ea0ccc89da809b0aba4710
+  metadata.gz: b546f190679f4ae4dde09215caab504a0a1d08066a21550b0489c2b85918f04b
+  data.tar.gz: a13166af16459ef7d46bfa04b4527d378975928f5d69125d17060f3f66641cd0
 SHA512:
-  metadata.gz: 8126c66d154001be50aa69da1586b5981afc3d7d1154b8f1bcf1e186320b601aad3370d8294091c528216f0c8a154b077c929e687011108c403bb6e685dd8370
-  data.tar.gz: 628c3bef731601b5eb202ae4767f1ad7bf4610a429c1c880bc0945662e861b487c7b8123f04a44697dd9a0145f7d88cef14a66383a20d06a0f1d07226a7b31b4
+  metadata.gz: 945389ac999ee2fc61577ca83483169e3bc0366db35817b8f730d8e405070e657a63b0c59f08ae24b59995651eafb3cff2a3662dc571767f172ee4261781b2bb
+  data.tar.gz: db4a34d192c1166ee9a64ed5983a940038bd43e5e7ee19b8def64666f00e29c61ed9415d8bf405fd28abc6c761bf58be29dc175ffcc4525727c324e7cfebf2be

data/README.md CHANGED Viewed

@@ -91,6 +91,7 @@ Place helpers in the `<body>`, not the `<head>`.
 ### Any mode
 - `native_app?` - true when the request comes from a Ruby Native app (checks user agent)
+- `native_version` - returns the app version as a `RubyNative::NativeVersion`. Defaults to `"0"` when the version is unknown. Supports string comparisons: `native_version >= "1.4"`.
 - `native_tabs_tag(enabled: true)` - shows the native tab bar.
 - `native_push_tag` - requests push notification permission.
 - `native_back_button_tag(text = nil, **options)` - renders a back button for Normal Mode. Hidden by default, shown when the native app sets `body.can-go-back`. Not needed in [Advanced Mode](https://rubynative.com/docs/advanced-mode) where the system provides a native back button.

data/app/controllers/ruby_native/auth/sessions_controller.rb ADDED Viewed

@@ -0,0 +1,26 @@
+module RubyNative
+  module Auth
+    class SessionsController < ::ActionController::Base
+      def show
+        data = OAuthMiddleware.read_token(params[:token])
+        unless data
+          Rails.logger.debug { "[RubyNative] OAuth token exchange failed: invalid or expired token" }
+          head :unauthorized
+          return
+        end
+        # Prevent the session middleware from appending its own (empty)
+        # session cookie, which would overwrite the authenticated one.
+        request.session_options[:skip] = true
+        if data[:cookies].present?
+          response.headers["set-cookie"] = data[:cookies].join("\n")
+        end
+        Rails.logger.debug { "[RubyNative] OAuth token exchanged, redirecting to #{data[:redirect_url]}" }
+        render json: {redirect_url: data[:redirect_url]}
+      end
+    end
+  end
+end

data/app/controllers/ruby_native/auth/start_controller.rb ADDED Viewed

@@ -0,0 +1,16 @@
+module RubyNative
+  module Auth
+    class StartController < ::ActionController::Base
+      def show
+        @provider = params[:provider]
+        unless @provider.match?(/\A[a-z0-9_]+\z/)
+          head :bad_request
+          return
+        end
+        @callback_scheme = params[:callback_scheme]
+      end
+    end
+  end
+end

data/app/views/ruby_native/auth/start/show.html.erb ADDED Viewed

@@ -0,0 +1,16 @@
+<!DOCTYPE html>
+<html>
+<head>
+  <meta charset="utf-8">
+  <meta name="viewport" content="width=device-width, initial-scale=1">
+  <title>Signing in…</title>
+</head>
+<body>
+  <p>Signing in…</p>
+  <%= form_tag "/auth/#{@provider}", method: :post, id: "oauth-form" do %>
+    <input type="hidden" name="ruby_native" value="1">
+    <input type="hidden" name="callback_scheme" value="<%= @callback_scheme %>">
+  <% end %>
+  <script>document.getElementById("oauth-form").submit();</script>
+</body>
+</html>

data/config/routes.rb CHANGED Viewed

@@ -3,4 +3,8 @@ RubyNative::Engine.routes.draw do
   namespace :push do
     resources :devices, only: :create
   end
+  namespace :auth do
+    get "start/:provider", to: "start#show", as: :start
+    resource :session, only: :show
+  end
 end

data/lib/ruby_native/engine.rb CHANGED Viewed

@@ -28,6 +28,10 @@ module RubyNative
       end
     end
+    initializer "ruby_native.oauth_middleware" do |app|
+      app.middleware.insert_before ActionDispatch::Cookies, RubyNative::OAuthMiddleware
+    end
     initializer "ruby_native.routes" do |app|
       app.routes.prepend do
         mount RubyNative::Engine, at: "/native"

data/lib/ruby_native/helper.rb CHANGED Viewed

@@ -1,9 +1,5 @@
 module RubyNative
   module Helper
-    def native_app?
-      request.user_agent.to_s.include?("Ruby Native")
-    end
     def native_tabs_tag(enabled: true)
       safe_join([
         (tag.div(data: { native_tabs: true }, hidden: true) if enabled),

data/lib/ruby_native/native_detection.rb CHANGED Viewed

@@ -2,8 +2,17 @@ module RubyNative
   module NativeDetection
     extend ActiveSupport::Concern
+    included do
+      helper_method :native_app?, :native_version if respond_to?(:helper_method)
+    end
     def native_app?
       request.user_agent.to_s.include?("Ruby Native")
     end
+    def native_version
+      match = request.user_agent.to_s.match(/Ruby Native.*?\/([\d.]+)/)
+      NativeVersion.new(match ? match[1] : "0")
+    end
   end
 end

data/lib/ruby_native/oauth_middleware.rb ADDED Viewed

@@ -0,0 +1,144 @@
+module RubyNative
+  class OAuthMiddleware
+    COOKIE_NAME = "_ruby_native_oauth"
+    def initialize(app)
+      @app = app
+    end
+    def call(env)
+      request = ActionDispatch::Request.new(env)
+      started_oauth = oauth_start_request?(request)
+      callback_scheme = request.params["callback_scheme"] if started_oauth
+      status, headers, body = @app.call(env)
+      if started_oauth && callback_scheme.present? && redirect?(status)
+        Rails.logger.debug { "[RubyNative] OAuth started for #{request.path}, setting tracking cookie" }
+        set_cookie(headers, callback_scheme)
+      end
+      stored_scheme = read_cookie(request)
+      if stored_scheme && redirect?(status)
+        location = headers["location"] || headers["Location"]
+        if auth_failure?(location)
+          Rails.logger.info { "[RubyNative] OAuth failed, redirecting to native app" }
+          delete_cookie(headers)
+          return redirect_to_native(stored_scheme, error: true)
+        end
+        if internal_redirect?(request, location)
+          token = build_token(headers, location)
+          Rails.logger.info { "[RubyNative] OAuth succeeded, redirecting to native app" }
+          delete_cookie(headers)
+          return redirect_to_native(stored_scheme, token: token)
+        end
+      end
+      [status, headers, body]
+    end
+    def self.encryptor
+      @encryptor ||= begin
+        key = ActiveSupport::KeyGenerator.new(Rails.application.secret_key_base)
+          .generate_key("ruby_native_oauth", ActiveSupport::MessageEncryptor.key_len)
+        ActiveSupport::MessageEncryptor.new(key)
+      end
+    end
+    def self.build_token(cookies:, redirect_url:)
+      encryptor.encrypt_and_sign(
+        {cookies: cookies, redirect_url: redirect_url},
+        expires_in: 5.minutes,
+        purpose: "ruby_native_oauth"
+      )
+    end
+    def self.read_token(token)
+      data = encryptor.decrypt_and_verify(token, purpose: "ruby_native_oauth")
+      data&.symbolize_keys
+    rescue ActiveSupport::MessageEncryptor::InvalidMessage
+      nil
+    end
+    private
+    def oauth_start_request?(request)
+      return false unless oauth_paths.any? { |p| request.path == p }
+      request.params["ruby_native"] == "1"
+    end
+    def set_cookie(headers, callback_scheme)
+      signed = verifier.generate(callback_scheme)
+      Rack::Utils.set_cookie_header!(headers, COOKIE_NAME, {
+        value: signed,
+        path: "/",
+        httponly: true,
+        secure: Rails.env.production?,
+        same_site: :lax,
+        max_age: 300
+      })
+    end
+    def read_cookie(request)
+      signed_value = request.cookies[COOKIE_NAME]
+      return nil unless signed_value.present?
+      verifier.verified(signed_value)
+    rescue ActiveSupport::MessageVerifier::InvalidSignature
+      nil
+    end
+    def delete_cookie(headers)
+      Rack::Utils.delete_set_cookie_header!(headers, COOKIE_NAME, path: "/")
+    end
+    def verifier
+      @verifier ||= ActiveSupport::MessageVerifier.new(
+        Rails.application.secret_key_base,
+        digest: "SHA256",
+        purpose: "ruby_native_oauth"
+      )
+    end
+    def redirect?(status)
+      (300..399).cover?(status)
+    end
+    def auth_failure?(location)
+      return false unless location
+      URI.parse(location).path == "/auth/failure"
+    rescue URI::InvalidURIError
+      false
+    end
+    def internal_redirect?(request, location)
+      return false unless location
+      uri = URI.parse(location)
+      uri.host.nil? || uri.host == request.host
+    rescue URI::InvalidURIError
+      false
+    end
+    def build_token(headers, redirect_url)
+      raw_cookies = headers["set-cookie"] || headers["Set-Cookie"]
+      cookies = case raw_cookies
+      when String then raw_cookies.split("\n")
+      when Array then raw_cookies
+      else []
+      end
+      self.class.build_token(cookies: cookies, redirect_url: redirect_url)
+    end
+    def redirect_to_native(callback_scheme, token: nil, error: false)
+      query = error ? "error=true" : "token=#{CGI.escape(token)}"
+      [302, {"location" => "#{callback_scheme}://auth/callback?#{query}"}, [""]]
+    end
+    def oauth_paths
+      RubyNative.config&.dig(:auth, :oauth_paths) || []
+    end
+  end
+end

data/lib/ruby_native/version.rb CHANGED Viewed

@@ -1,3 +1,3 @@
 module RubyNative
-  VERSION = "0.1.2"
+  VERSION = "0.1.4"
 end

data/lib/ruby_native.rb CHANGED Viewed

@@ -1,6 +1,8 @@
 require "ruby_native/version"
 require "ruby_native/helper"
+require "ruby_native/native_version"
 require "ruby_native/native_detection"
+require "ruby_native/oauth_middleware"
 require "ruby_native/engine"
 module RubyNative
@@ -13,5 +15,6 @@ module RubyNative
     self.config = YAML.load_file(path).deep_symbolize_keys
     self.config[:app] ||= {}
     self.config[:app][:name] ||= "Ruby Native"
+    self.config[:auth] ||= {}
   end
 end

metadata CHANGED Viewed

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: ruby_native
 version: !ruby/object:Gem::Version
-  version: 0.1.2
+  version: 0.1.4
 platform: ruby
 authors:
 - Joe Masilotti
@@ -49,6 +49,8 @@ files:
 - LICENSE
 - README.md
 - app/assets/stylesheets/ruby_native.css
+- app/controllers/ruby_native/auth/sessions_controller.rb
+- app/controllers/ruby_native/auth/start_controller.rb
 - app/controllers/ruby_native/config_controller.rb
 - app/controllers/ruby_native/push/devices_controller.rb
 - app/javascript/ruby_native/back.js
@@ -59,6 +61,7 @@ files:
 - app/javascript/ruby_native/bridge/push_controller.js
 - app/javascript/ruby_native/bridge/search_controller.js
 - app/javascript/ruby_native/bridge/tabs_controller.js
+- app/views/ruby_native/auth/start/show.html.erb
 - config/importmap.rb
 - config/routes.rb
 - exe/ruby_native
@@ -71,6 +74,7 @@ files:
 - lib/ruby_native/engine.rb
 - lib/ruby_native/helper.rb
 - lib/ruby_native/native_detection.rb
+- lib/ruby_native/oauth_middleware.rb
 - lib/ruby_native/version.rb
 homepage: https://github.com/Ruby-Native/gem
 licenses: