simple_google_auth 0.3.2 → 1.0.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: b0cddb7c5d88d861d18686ee5601d635e94f133d51863fbfe50f9aadf46c8664
-  data.tar.gz: 19728334ae4996d63a0547f3ec9637ee20234fc8083a95355b734b5358809c64
+  metadata.gz: 05f9712471de03b8e22a2f7f803a28ad58d9dbc8bbb95c2fa085cde8d078133e
+  data.tar.gz: 6ddebf2a44c6e3263a4bdb6c128f6587d3e664f2da6113ae02dd2f7be8a00165
 SHA512:
-  metadata.gz: 990eb2a0608217e84f01a2e5cfd5273773e758c64581930563cee30b38deae2f4becae0bf070f7edf2d3550d4b8e4ca10f793d7be144ef418f41ea8c915c21d6
-  data.tar.gz: 721625b234e2c0b937dca66e38bec0ce8ac5c087237d57a46831404112110f22f46e06934768c7bbb22837d829546a0868a06396d400fc37bda14049cf94e517
+  metadata.gz: 0dd0baf9ef54bcdcad751596b67b24c5f859895e8d9742b59d15ea432aaae7720dc22d357c5f0a8ca8086866eeef8f465dbc0d3cf44c97334a9d53c8cb969bed
+  data.tar.gz: 65213c8a689db1dce1e104e9ddd7ca7585d36757bd66d6db1de40fb682a3ddec513bb7216920a3fed4d2fad262c5c20d81487a0cb26b30083b04398b58014770

data/lib/simple_google_auth/auth_data_presenter.rb

@@ -42,9 +42,12 @@ module SimpleGoogleAuth
       # We don't worry about validating the signature because we got this JWT directly
       # from Google over HTTPS (see
       # https://developers.google.com/identity/protocols/OpenIDConnect#obtainuserinfo)
-      signature, id_data_64 = id_token.split(".")
-      id_data_64 << "=" until id_data_64.length % 4 == 0
-      JSON.parse(Base64.decode64(id_data_64))
+      header, id_data_64 = id_token.split(".")
+      raise InvalidAuthDataError if id_data_64.nil?
+
+      JSON.parse(Base64.urlsafe_decode64(id_data_64))
+    rescue JSON::ParserError, ArgumentError
+      raise InvalidAuthDataError
     end
   end
 end

data/lib/simple_google_auth/controller.rb

@@ -22,9 +22,17 @@ module SimpleGoogleAuth
 
     private
 
+    # If the refresh is refused (e.g. the refresh token has been revoked), clear
+    # the session data so the user is sent back through the login flow instead
+    # of the error propagating as a 500.
     def refresh_google_auth_data
       api = SimpleGoogleAuth::OAuth.new(SimpleGoogleAuth.config)
-      auth_data = api.refresh_auth_token!(cached_google_auth_data["refresh_token"])
+
+      auth_data = begin
+        api.refresh_auth_token!(cached_google_auth_data["refresh_token"])
+      rescue ProviderError
+        nil
+      end
 
       session[SimpleGoogleAuth.config.data_session_key_name] = auth_data
       @_google_auth_data_presenter = nil

data/lib/simple_google_auth/receiver.rb

@@ -3,7 +3,11 @@ module SimpleGoogleAuth
     def call(env)
       request = Rack::Request.new(env)
       config = SimpleGoogleAuth.config
-      ensure_params_are_correct(request, config)
+
+      # The state is single-use: remove it from the session up front so the
+      # callback URL can't be replayed, whether this attempt succeeds or fails.
+      state = request.session.delete(config.state_session_key_name)
+      ensure_params_are_correct(request, state)
 
       api = SimpleGoogleAuth::OAuth.new(config)
       auth_data = api.exchange_code_for_auth_token!(request.params["code"])
@@ -14,7 +18,7 @@ module SimpleGoogleAuth
       renew_session(request)
       request.session[config.data_session_key_name] = auth_data
 
-      path = config.authentication_uri_state_path_extractor.call(request.session[config.state_session_key_name])
+      path = config.authentication_uri_state_path_extractor.call(state)
       path = "/" unless safe_redirect_path?(path)
       [302, {"Location" => path}, [" "]]
 
@@ -26,9 +30,7 @@ module SimpleGoogleAuth
     end
 
     protected
-    def ensure_params_are_correct(request, config)
-      expected_state = request.session[config.state_session_key_name]
-
+    def ensure_params_are_correct(request, expected_state)
       if expected_state.blank? || !states_match?(request.params["state"], expected_state)
         raise Error, "Invalid state returned from Google"
       elsif request.params["error"]

data/lib/simple_google_auth/version.rb

@@ -1,3 +1,3 @@
 module SimpleGoogleAuth
-  VERSION = "0.3.2"
+  VERSION = "1.0.0"
 end

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: simple_google_auth
 version: !ruby/object:Gem::Version
-  version: 0.3.2
+  version: 1.0.0
 platform: ruby
 authors:
 - Roger Nesbitt
@@ -38,6 +38,20 @@ dependencies:
     - - "~>"
       - !ruby/object:Gem::Version
         version: '6.1'
+- !ruby/object:Gem::Dependency
+  name: simplecov
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '0.22'
+  type: :development
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '0.22'
 description: An extremely easy way to protect your site by requiring Google logins
   without having to set up a traditional authentication system
 email:
@@ -60,15 +74,6 @@ files:
 - lib/simple_google_auth/oauth.rb
 - lib/simple_google_auth/receiver.rb
 - lib/simple_google_auth/version.rb
-- spec/simple_google_auth/auth_data_presenter_spec.rb
-- spec/simple_google_auth/authorization_uri_builder_spec.rb
-- spec/simple_google_auth/config_spec.rb
-- spec/simple_google_auth/controller_spec.rb
-- spec/simple_google_auth/http_client_spec.rb
-- spec/simple_google_auth/oauth_spec.rb
-- spec/simple_google_auth/receiver_spec.rb
-- spec/simple_google_auth_spec.rb
-- spec/spec_helper.rb
 homepage: https://github.com/mogest/simple_google_auth
 licenses:
 - MIT
@@ -81,7 +86,7 @@ required_ruby_version: !ruby/object:Gem::Requirement
   requirements:
   - - ">="
     - !ruby/object:Gem::Version
-      version: 2.0.0
+      version: '3.0'
 required_rubygems_version: !ruby/object:Gem::Requirement
   requirements:
   - - ">="
@@ -92,13 +97,4 @@ rubygems_version: 3.5.22
 signing_key:
 specification_version: 4
 summary: Super simple Google authentication for your Rails site
-test_files:
-- spec/simple_google_auth/auth_data_presenter_spec.rb
-- spec/simple_google_auth/authorization_uri_builder_spec.rb
-- spec/simple_google_auth/config_spec.rb
-- spec/simple_google_auth/controller_spec.rb
-- spec/simple_google_auth/http_client_spec.rb
-- spec/simple_google_auth/oauth_spec.rb
-- spec/simple_google_auth/receiver_spec.rb
-- spec/simple_google_auth_spec.rb
-- spec/spec_helper.rb
+test_files: []

data/spec/simple_google_auth/auth_data_presenter_spec.rb

@@ -1,41 +0,0 @@
-require 'spec_helper'
-
-describe SimpleGoogleAuth::AuthDataPresenter do
-  let(:id_data) do
-    {
-      "iss" => "accounts.google.com",
-      "sub" => "10769150350006150715113082367",
-      "email" => "test@test.example",
-      "aud" => "1234987819200.apps.googleusercontent.com",
-      "iat" => 1353601026,
-      "exp" => 1353604926
-    }
-  end
-
-  let(:id_token) { "12345." + Base64.encode64(id_data.to_json).gsub('=', '') }
-  let(:auth_data) do
-    {
-      "id_token" => id_token,
-      "expires_in" => 1200,
-      "access_token" => "abcdef",
-      "token_type" => "Bearer"
-    }
-  end
-
-  subject { SimpleGoogleAuth::AuthDataPresenter.new(auth_data) }
-
-  it "provides indifferent hash access to data in the JWT" do
-    expect(subject['email']).to eq 'test@test.example'
-    expect(subject[:email]).to eq 'test@test.example'
-  end
-
-  it "provides method access to data in the JWT" do
-    expect(subject.email).to eq 'test@test.example'
-  end
-
-  it "raises if id_token not provided" do
-    expect {
-      SimpleGoogleAuth::AuthDataPresenter.new({})
-    }.to raise_error(SimpleGoogleAuth::AuthDataPresenter::InvalidAuthDataError)
-  end
-end

data/spec/simple_google_auth/authorization_uri_builder_spec.rb

@@ -1,13 +0,0 @@
-require 'spec_helper'
-
-describe SimpleGoogleAuth::AuthorizationUriBuilder do
-  subject do
-    SimpleGoogleAuth::AuthorizationUriBuilder.new("somestate")
-  end
-
-  describe "#uri" do
-    it "constructs an authorization URI" do
-      expect(subject.uri).to eq 'https://accounts.google.com/o/oauth2/auth?scope=openid+email&response_type=code&client_id=123&redirect_uri=%2Fabc&state=somestate'
-    end
-  end
-end

data/spec/simple_google_auth/config_spec.rb

@@ -1,55 +0,0 @@
-require 'spec_helper'
-
-describe SimpleGoogleAuth::Config do
-  subject { SimpleGoogleAuth::Config.new }
-
-  describe "#client_id" do
-    it "gets the value if it doesn't respond to call" do
-      subject.client_id = '12345'
-      expect(subject.client_id).to eq '12345'
-    end
-
-    it "calls to get the value if it responds to call" do
-      subject.client_id = lambda { '12345' }
-      expect(subject.client_id).to eq '12345'
-    end
-  end
-
-  describe "#authenticate=" do
-    it "saves the value if it is callable" do
-      fn = lambda {|data| true}
-      subject.authenticate = fn
-      expect(subject.authenticate).to eql fn
-    end
-
-    it "raises if the value isn't callable" do
-      expect {
-        subject.authenticate = "not a lambda"
-      }.to raise_error(SimpleGoogleAuth::Error, /responds to :call/)
-    end
-  end
-
-  describe "#ca_path=" do
-    it "logs a warning" do
-      Rails.logger ||= double
-      expect(Rails.logger).to receive(:warn)
-      subject.ca_path = "/etc/certs"
-    end
-  end
-
-  describe "#authentication_uri_state_builder=" do
-    it "raises if the value isn't callable" do
-      expect {
-        subject.authentication_uri_state_builder = "not a lambda"
-      }.to raise_error(SimpleGoogleAuth::Error, /responds to :call/)
-    end
-  end
-
-  describe "#authentication_uri_state_path_extractor=" do
-    it "raises if the value isn't callable" do
-      expect {
-        subject.authentication_uri_state_path_extractor = "not a lambda"
-      }.to raise_error(SimpleGoogleAuth::Error, /responds to :call/)
-    end
-  end
-end

data/spec/simple_google_auth/controller_spec.rb

@@ -1,49 +0,0 @@
-require 'spec_helper'
-
-describe SimpleGoogleAuth::Controller do
-  class TestController
-    include SimpleGoogleAuth::Controller
-
-    attr_reader :request, :session
-
-    def redirect_to(x)
-    end
-  end
-
-  subject { TestController.new }
-
-  let(:id_data) { Base64.encode64({email:"hi@hi"}.to_json).gsub('=', '') }
-  let(:auth_data) { {"id_token" => "123." + id_data} }
-  let(:request) { double(path: "/somepath") }
-  let(:session) { {} }
-
-  before do
-    allow(subject).to receive(:request).and_return(request)
-    allow(subject).to receive(:session).and_return(session)
-  end
-
-  describe "#redirect_if_not_google_authenticated" do
-    it "redirects if not authenticated" do
-      SimpleGoogleAuth.config.authentication_uri_state_builder = ->(request) { 'prefix-/somepath' }
-
-      expect(subject).to receive(:redirect_to).with("https://accounts.google.com/o/oauth2/auth?scope=openid+email&response_type=code&client_id=123&redirect_uri=%2Fabc&state=prefix-%2Fsomepath")
-      subject.send(:redirect_if_not_google_authenticated)
-    end
-
-    it "does nothing if authenticated" do
-      session[SimpleGoogleAuth.config.data_session_key_name] = auth_data
-      expect(subject).to_not receive(:redirect_to)
-      subject.send(:redirect_if_not_google_authenticated)
-    end
-  end
-
-  describe "#google_auth_data" do
-    it "returns data from the session" do
-      session[SimpleGoogleAuth.config.data_session_key_name] = auth_data
-      data = subject.send(:google_auth_data)
-      expect(data.email).to eq 'hi@hi'
-    end
-
-    it "refreshes the token data if it's expired and refresh_stale_tokens is true"
-  end
-end

data/spec/simple_google_auth/http_client_spec.rb

@@ -1,82 +0,0 @@
-require 'spec_helper'
-
-describe SimpleGoogleAuth::HttpClient do
-  describe "#request" do
-    let(:http) { instance_double(Net::HTTP) }
-    let(:request) { instance_double(Net::HTTP::Post) }
-
-    before do
-      expect(Net::HTTP).to receive(:new).with("some.host", 443).and_return(http)
-      expect(http).to receive(:open_timeout=).with(12)
-      expect(http).to receive(:read_timeout=).with(13)
-      expect(http).to receive(:use_ssl=).with(true)
-      expect(http).to receive(:verify_mode=).with(OpenSSL::SSL::VERIFY_PEER)
-      expect(http).to receive(:request).with(request).and_return(response)
-
-      expect(Net::HTTP::Post).to receive(:new).with("/somepath").and_return(request)
-      expect(request).to receive(:set_form_data).with({'some' => 'data'})
-    end
-
-    subject { SimpleGoogleAuth::HttpClient.new("https://some.host/somepath", open_timeout: 12, read_timeout: 13) }
-
-    context "when the call is successful" do
-      let(:response) do
-        instance_double(
-          Net::HTTPSuccess,
-          code: '200',
-          body: {"data" => "very"}.to_json,
-          content_type: 'application/json'
-        )
-      end
-
-      it "returns the server's response" do
-        expect(subject.request('some' => 'data')).to eq("data" => "very")
-      end
-    end
-
-    context "when non-json data is returned" do
-      let(:response) do
-        instance_double(
-          Net::HTTPSuccess,
-          code: '200',
-          body: "some html",
-          content_type: 'text/html'
-        )
-      end
-
-      it "raises an error" do
-        expect { subject.request('some' => 'data') }.to raise_error(SimpleGoogleAuth::NonJsonResponseError, /non-JSON/)
-      end
-    end
-
-    context "when non-json-parseable data is returned" do
-      let(:response) do
-        instance_double(
-          Net::HTTPSuccess,
-          code: '200',
-          body: "some html",
-          content_type: 'application/json'
-        )
-      end
-
-      it "raises an error" do
-        expect { subject.request('some' => 'data') }.to raise_error(SimpleGoogleAuth::NonJsonResponseError, /parseable/)
-      end
-    end
-
-    context "when non-successful json data is returned" do
-      let(:response) do
-        instance_double(
-          Net::HTTPSuccess,
-          code: '400',
-          body: {"data" => "very"}.to_json,
-          content_type: 'application/json'
-        )
-      end
-
-      it "raises an error" do
-        expect { subject.request('some' => 'data') }.to raise_error(SimpleGoogleAuth::ProviderError, /400.+very/)
-      end
-    end
-  end
-end

data/spec/simple_google_auth/oauth_spec.rb

@@ -1,67 +0,0 @@
-require 'spec_helper'
-
-describe SimpleGoogleAuth::OAuth do
-  let(:config) do
-    instance_double(
-      SimpleGoogleAuth::Config,
-      google_token_url: "/token/url",
-      client_id: '12345',
-      client_secret: 'abcde',
-      redirect_uri: '/ok',
-      open_timeout: 12,
-      read_timeout: 13
-    )
-  end
-
-  let(:client) { instance_double(SimpleGoogleAuth::HttpClient) }
-  let(:response) { {"id_token" => "sometoken", "expires_in" => 1200, "other" => "data"} }
-  let(:expires_at) { Time.now + 1200 - 5 }
-
-  before do
-    now = Time.now
-    allow(Time).to receive(:now).and_return(now)
-
-    expect(SimpleGoogleAuth::HttpClient).to receive(:new).with(config.google_token_url, open_timeout: 12, read_timeout: 13).and_return(client)
-  end
-
-  subject { SimpleGoogleAuth::OAuth.new(config) }
-
-  describe "#exchange_code_for_auth_token!" do
-    before do
-      expect(client).to receive(:request).with(
-        code: "magic",
-        grant_type: "authorization_code",
-        client_id: "12345",
-        client_secret: "abcde",
-        redirect_uri: "/ok"
-      ).and_return(response)
-    end
-
-    it "returns a hash of auth token data" do
-      expect(subject.exchange_code_for_auth_token!('magic')).to eq('expires_in' => 1200, 'other' => 'data', 'id_token' => 'sometoken', 'expires_at' => expires_at.to_s)
-    end
-  end
-
-  describe "#refresh_auth_token!" do
-    context "when a refresh token is provided" do
-      before do
-        expect(client).to receive(:request).with(
-          refresh_token: "magic",
-          grant_type: "refresh_token",
-          client_id: "12345",
-          client_secret: "abcde",
-        ).and_return(response)
-      end
-
-      it "returns a hash of auth token data" do
-        expect(subject.refresh_auth_token!('magic')).to eq('expires_in' => 1200, 'other' => 'data', 'id_token' => 'sometoken', 'expires_at' => expires_at.to_s, 'refresh_token' => 'magic')
-      end
-    end
-
-    context "when no refresh token is provided" do
-      it "does nothing and returns nil" do
-        expect(subject.refresh_auth_token!(nil)).to be nil
-      end
-    end
-  end
-end

data/spec/simple_google_auth/receiver_spec.rb

@@ -1,102 +0,0 @@
-require 'spec_helper'
-
-describe SimpleGoogleAuth::Receiver do
-  let(:authenticator) { double(call: true) }
-  let(:authentication_result) { true }
-  let(:session) { double }
-  let(:state) { "abcd" * 8 + "/place" }
-  let(:code) { "sekrit" }
-  let(:params) { {"state" => state, "code" => code} }
-  let(:request) { instance_double(Rack::Request, session: session, params: params) }
-  let(:api) { instance_double(SimpleGoogleAuth::OAuth) }
-  let(:auth_data) { double }
-  let(:env) { double }
-  let(:auth_data_presenter) { instance_double(SimpleGoogleAuth::AuthDataPresenter) }
-  let(:authentication_uri_state_path_extractor) { double(:call => '') }
-
-  before do
-    expect(Rack::Request).to receive(:new).with(env).and_return(request)
-    expect(session).to receive(:[]).at_least(:once).with('simple-google-auth.state').and_return(state)
-
-    SimpleGoogleAuth.config.authenticate = authenticator
-    SimpleGoogleAuth.config.failed_login_path = '/error'
-    SimpleGoogleAuth.config.authentication_uri_state_path_extractor = authentication_uri_state_path_extractor
-  end
-
-  subject { SimpleGoogleAuth::Receiver.new.call(env) }
-
-  context "when a valid code is provided to the receiver" do
-    before do
-      expect(SimpleGoogleAuth::OAuth).to receive(:new).with(SimpleGoogleAuth.config).and_return(api)
-      expect(api).to receive(:exchange_code_for_auth_token!).with(code).and_return(auth_data)
-
-      expect(SimpleGoogleAuth::AuthDataPresenter).to receive(:new).with(auth_data).and_return(auth_data_presenter)
-      expect(authenticator).to receive(:call).with(auth_data_presenter).and_return(authentication_result)
-    end
-
-    context "and the authenticator accepts the login" do
-      before do
-        expect(session).to receive(:[]=).with('simple-google-auth.data', auth_data)
-      end
-
-      it "redirects to the URL specified in the session" do
-        expect(authentication_uri_state_path_extractor).to receive(:call).with(state).and_return('/place')
-
-        expect(subject).to eq [302, {"Location" => "/place"}, [" "]]
-      end
-
-      it "does not follow a protocol-relative redirect path (open redirect)" do
-        expect(authentication_uri_state_path_extractor).to receive(:call).with(state).and_return('//evil.com')
-
-        expect(subject).to eq [302, {"Location" => "/"}, [" "]]
-      end
-
-      it "does not follow a backslash-prefixed redirect path (open redirect)" do
-        expect(authentication_uri_state_path_extractor).to receive(:call).with(state).and_return('/\\evil.com')
-
-        expect(subject).to eq [302, {"Location" => "/"}, [" "]]
-      end
-    end
-
-    context "and the authenticator rejects the login" do
-      let(:authentication_result) { false }
-
-      it "redirects to the failed login path with a message" do
-        expect(subject).to eq [302, {"Location" => "/error?message=Authentication+failed"}, [" "]]
-      end
-    end
-  end
-
-  context "when the state doesn't match" do
-    let(:params) { {"state" => "doesnotmatch", "code" => code} }
-
-    it "redirects to the failed login path with a message" do
-      expect(subject).to eq [302, {"Location" => "/error?message=Invalid+state+returned+from+Google"}, [" "]]
-    end
-  end
-
-  context "when the session holds no state and the callback omits it (forged callback)" do
-    let(:state) { nil }
-    let(:params) { {"code" => code} }
-
-    it "rejects the login rather than treating two blank states as a match" do
-      expect(subject).to eq [302, {"Location" => "/error?message=Invalid+state+returned+from+Google"}, [" "]]
-    end
-  end
-
-  context "when the google authentication fails" do
-    let(:params) { {"state" => state, "error" => "bad stuff"} }
-
-    it "redirects to the failed login path with a message" do
-      expect(subject).to eq [302, {"Location" => "/error?message=Authentication+failed%3A+bad+stuff"}, [" "]]
-    end
-  end
-
-  context "when no code is returned (unexpected)" do
-    let(:params) { {"state" => state} }
-
-    it "redirects to the failed login path with a message" do
-      expect(subject).to eq [302, {"Location" => "/error?message=No+authentication+code+returned"}, [" "]]
-    end
-  end
-end

data/spec/simple_google_auth_spec.rb

@@ -1,13 +0,0 @@
-require 'spec_helper'
-
-describe SimpleGoogleAuth do
-  describe "::configure" do
-    it "yields the config object" do
-      SimpleGoogleAuth.configure do |config|
-        expect(config).to be_a(SimpleGoogleAuth::Config)
-      end
-    end
-
-    it "sets access_type to offline if refresh_stale_tokens set"
-  end
-end

data/spec/spec_helper.rb

@@ -1,102 +0,0 @@
-ENV['RAILS_ENV'] ||= 'test'
-
-require 'rails/all'
-#require 'rspec/rails'
-require 'simple_google_auth'
-
-SimpleGoogleAuth.configure do |c|
-  c.client_id = '123'
-  c.redirect_uri = '/abc'
-end
-
-# This file was generated by the `rspec --init` command. Conventionally, all
-# specs live under a `spec` directory, which RSpec adds to the `$LOAD_PATH`.
-# The generated `.rspec` file contains `--require spec_helper` which will cause
-# this file to always be loaded, without a need to explicitly require it in any
-# files.
-#
-# Given that it is always loaded, you are encouraged to keep this file as
-# light-weight as possible. Requiring heavyweight dependencies from this file
-# will add to the boot time of your test suite on EVERY test run, even for an
-# individual file that may not need all of that loaded. Instead, consider making
-# a separate helper file that requires the additional dependencies and performs
-# the additional setup, and require it from the spec files that actually need
-# it.
-#
-# The `.rspec` file also contains a few flags that are not defaults but that
-# users commonly want.
-#
-# See http://rubydoc.info/gems/rspec-core/RSpec/Core/Configuration
-RSpec.configure do |config|
-  # rspec-expectations config goes here. You can use an alternate
-  # assertion/expectation library such as wrong or the stdlib/minitest
-  # assertions if you prefer.
-  config.expect_with :rspec do |expectations|
-    # This option will default to `true` in RSpec 4. It makes the `description`
-    # and `failure_message` of custom matchers include text for helper methods
-    # defined using `chain`, e.g.:
-    #     be_bigger_than(2).and_smaller_than(4).description
-    #     # => "be bigger than 2 and smaller than 4"
-    # ...rather than:
-    #     # => "be bigger than 2"
-    expectations.include_chain_clauses_in_custom_matcher_descriptions = true
-  end
-
-  # rspec-mocks config goes here. You can use an alternate test double
-  # library (such as bogus or mocha) by changing the `mock_with` option here.
-  config.mock_with :rspec do |mocks|
-    # Prevents you from mocking or stubbing a method that does not exist on
-    # a real object. This is generally recommended, and will default to
-    # `true` in RSpec 4.
-    mocks.verify_partial_doubles = true
-  end
-
-# The settings below are suggested to provide a good initial experience
-# with RSpec, but feel free to customize to your heart's content.
-=begin
-  # These two settings work together to allow you to limit a spec run
-  # to individual examples or groups you care about by tagging them with
-  # `:focus` metadata. When nothing is tagged with `:focus`, all examples
-  # get run.
-  config.filter_run :focus
-  config.run_all_when_everything_filtered = true
-
-  # Limits the available syntax to the non-monkey patched syntax that is
-  # recommended. For more details, see:
-  #   - http://myronmars.to/n/dev-blog/2012/06/rspecs-new-expectation-syntax
-  #   - http://teaisaweso.me/blog/2013/05/27/rspecs-new-message-expectation-syntax/
-  #   - http://myronmars.to/n/dev-blog/2014/05/notable-changes-in-rspec-3#new__config_option_to_disable_rspeccore_monkey_patching
-  config.disable_monkey_patching!
-
-  # This setting enables warnings. It's recommended, but in some cases may
-  # be too noisy due to issues in dependencies.
-  config.warnings = true
-
-  # Many RSpec users commonly either run the entire suite or an individual
-  # file, and it's useful to allow more verbose output when running an
-  # individual spec file.
-  if config.files_to_run.one?
-    # Use the documentation formatter for detailed output,
-    # unless a formatter has already been configured
-    # (e.g. via a command-line flag).
-    config.default_formatter = 'doc'
-  end
-
-  # Print the 10 slowest examples and example groups at the
-  # end of the spec run, to help surface which specs are running
-  # particularly slow.
-  config.profile_examples = 10
-
-  # Run specs in random order to surface order dependencies. If you find an
-  # order dependency and want to debug it, you can fix the order by providing
-  # the seed, which is printed after each run.
-  #     --seed 1234
-  config.order = :random
-
-  # Seed global randomization in this process using the `--seed` CLI option.
-  # Setting this allows you to use `--seed` to deterministically reproduce
-  # test failures related to randomization by passing the same `--seed` value
-  # as the one that triggered the failure.
-  Kernel.srand config.seed
-=end
-end