sidekiq_web_google_sign_in 1.0.0.beta1

checksums.yaml

@@ -0,0 +1,7 @@
+---
+SHA1:
+  metadata.gz: d90a0b01234663ee46221e6b3327bc26184afe4a
+  data.tar.gz: f16ca77b4141824ae96ada2e877eac2b270a7ab8
+SHA512:
+  metadata.gz: ebd9b3623a6d15d04a79c6cb0080d69b3b8ec2be465dcaae897fa301da2f6f80add1e29a91f9d5852c6e2ca9ce066e6980fe262513d9a1a4e5fde0aa30cfe999
+  data.tar.gz: 2c2b4127575b74ff04651fe6c889386f6d9ea73b37d4ce11fabe68f48d34cccfd9d6bbd2ec6764fb11670b4760330eb0ed9fa82b5796a9ddf921fdae360e6d2b

data/lib/sidekiq_web_google_sign_in.rb

@@ -0,0 +1,105 @@
+require "omniauth-google-oauth2"
+
+class SidekiqWebGoogleSignIn
+  class << self
+    attr_accessor :options
+
+    def use(options)
+      @options = options
+
+      # Require sidekiq web unless already required
+      unless defined?(Sidekiq::Web)
+        if defined?(Sidekiq::Enterprise)
+          require "sidekiq-ent/web"
+        elsif defined?(Sidekiq::Pro)
+          require "sidekiq/pro/web"
+        else
+          require "sidekiq/web"
+        end
+      end
+
+      google_sign_in_client_id, google_sign_in_client_secret = options.values_at(:google_sign_in_client_id, :google_sign_in_client_secret)
+      Sidekiq::Web.use OmniAuth::Builder do
+        provider :google_oauth2, google_sign_in_client_id, google_sign_in_client_secret
+      end
+      Sidekiq::Web.register(SidekiqWebGoogleSignIn)
+      Rails.application.config.after_initialize do
+        sidekiq_web_session_options = {
+          :key => "_sidekiqweb_session",
+          :domain => options[:session_domain],
+          :path => "/sidekiq",
+          :expire_after => 24 * 60 * 60, # Automatically expire session after 24 hours
+          :secret => session_secret
+        }
+        Sidekiq::Web.set :sessions, sidekiq_web_session_options
+      end
+    end
+
+    def registered(sidekiq_web)
+      sidekiq_web.before do
+        next if signing_in? or signed_in?
+
+        if html_request?
+          redirect_to_google_sign_in_page
+        else
+          halt(403)
+        end
+      end
+
+      sidekiq_web.get "/auth/google_oauth2/callback" do
+        if employee?
+          sign_in
+          redirect_to_sidekiq_dashboard
+        else
+          halt(403)
+        end
+      end
+
+      sidekiq_web.helpers do
+        def signed_in?
+          session[:signed_in]
+        end
+
+        def signing_in?
+          request.path_info.start_with?("/auth/google_oauth2")
+        end
+
+        def html_request?
+          request.env["HTTP_ACCEPT"].include?("text/html")
+        end
+
+        def redirect_to_google_sign_in_page
+          redirect "/sidekiq/auth/google_oauth2"
+        end
+
+        def employee?
+          is_employee_email?(request.env["omniauth.auth"]["info"]["email"])
+        end
+
+        def is_employee_email?(email)
+          SidekiqWebGoogleSignIn.options[:employee_emails].call(email)
+        end
+
+        def redirect_to_sidekiq_dashboard
+          redirect "/sidekiq"
+        end
+
+        def sign_in
+          session[:signed_in] = true
+        end
+      end
+    end
+
+    private
+
+    def session_secret
+      # Rails < 4
+      if Rails.configuration.respond_to?(:secret_token)
+        Rails.configuration.secret_token
+      # Rails >= 4
+      else
+        Rails.application.secrets[:secret_key_base]
+      end
+    end
+  end
+end

metadata

@@ -0,0 +1,71 @@
+--- !ruby/object:Gem::Specification
+name: sidekiq_web_google_sign_in
+version: !ruby/object:Gem::Version
+  version: 1.0.0.beta1
+platform: ruby
+authors:
+- Nisanth Chunduru
+autorequire: 
+bindir: bin
+cert_chain: []
+date: 2017-06-24 00:00:00.000000000 Z
+dependencies:
+- !ruby/object:Gem::Dependency
+  name: sidekiq
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: 4.2.3
+  type: :runtime
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: 4.2.3
+- !ruby/object:Gem::Dependency
+  name: omniauth-google-oauth2
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: '0'
+  type: :runtime
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: '0'
+description: Restrict access to your Sidekiq using Google Sign In
+email: nisanth074@gmail.com
+executables: []
+extensions: []
+extra_rdoc_files: []
+files:
+- lib/sidekiq_web_google_sign_in.rb
+homepage: https://github.com/magicbell-io/sidekiq_web_google_sign_in
+licenses: []
+metadata: {}
+post_install_message: 
+rdoc_options: []
+require_paths:
+- lib
+required_ruby_version: !ruby/object:Gem::Requirement
+  requirements:
+  - - ">="
+    - !ruby/object:Gem::Version
+      version: '0'
+required_rubygems_version: !ruby/object:Gem::Requirement
+  requirements:
+  - - ">"
+    - !ruby/object:Gem::Version
+      version: 1.3.1
+requirements: []
+rubyforge_project: 
+rubygems_version: 2.4.5.1
+signing_key: 
+specification_version: 4
+summary: Restrict access to your Sidekiq using Google Sign In
+test_files: []