soar_authentication_token 6.0.9 → 6.1.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA1:
-  metadata.gz: be301efe1e83558c9256e71f43bebad5e60f6864
-  data.tar.gz: 6cbcf00b1f25fe8fcb7b4301bcfefabc25f7d82a
+  metadata.gz: 5a9cc03d1ae13d6ecbad2a427b4afb46a4f120df
+  data.tar.gz: 3397600cd607d46ab975edadd1845f3b6860ef2b
 SHA512:
-  metadata.gz: 7b65232a85b3b4f09a70c4e94b0c37b552aeae9233a1b7e9f179b3f9d9a87fcc1602c635cef93500acb0f722c2ca7c9dcd81c69d7d1fe386937db6de74344f58
-  data.tar.gz: a6caeb1f50d1fdbf787d1de36034481734932f027056081b29cce9a23edb5408560c28eb5087fa624980d4d9b244d7188c54b56178a04bf7dc125c854f542211
+  metadata.gz: 8b58ed52333c2550a63a4cf89a229368717c32f95ded4c08ee397de475963383dfd2acb5dd50c8434b5304dcbb4c0b4d2e0ecf0d1c0a16868ee3f3c85b86948f
+  data.tar.gz: 36fc7e74aa40a21229efca5f80fe9f9c9c804140706a33906351dd6fee4193483b6d43f95c29134a9832d1086a4544743aa3b09bd746ecaabd5e1fd6b8ab7ada

data/docker-compose.yml

@@ -1,7 +1,7 @@
 version: '2.0'
 services:
   soar-authentication-token:
-    command: /bin/bash -c 'sleep 5; bundle exec rspec -cfd ./spec/'
+    command: /bin/bash -c 'sleep 30; bundle exec rspec -cfd ./spec/'
     user: $UID:$UID
     build: .
     image: soar-authentication-token

data/lib/soar_authentication_token.rb

@@ -11,4 +11,5 @@ require 'soar_authentication_token/config_rotator'
 require 'soar_authentication_token/token_generator'
 require 'soar_authentication_token/token_validator'
 require 'soar_authentication_token/rack_middleware'
+require 'soar_authentication_token/rack_auth_id_transposer_middleware'
 require 'soar_authentication_token/version'

data/lib/soar_authentication_token/rack_auth_id_transposer_middleware.rb

@@ -0,0 +1,19 @@
+require 'rack'
+
+module SoarAuthenticationToken
+  class RackAuthIdTransposerMiddleware
+    def initialize(app)
+      @app = app
+    end
+
+    def call(env)
+      request = Rack::Request.new env
+      authenticated_identifier = request.env['X-GATEWAY-AUTHENTICATED-IDENTIFIER']
+      if authenticated_identifier
+        request.session['user']    = authenticated_identifier
+        request.env['REMOTE_USER'] = authenticated_identifier
+      end
+      return @app.call env
+    end
+  end
+end

data/lib/soar_authentication_token/version.rb

@@ -1,3 +1,3 @@
 module SoarAuthenticationToken
-  VERSION = '6.0.9'
+  VERSION = '6.1.0'
 end

data/spec/rack_auth_id_transposer_middleware_spec.rb

@@ -0,0 +1,69 @@
+require 'spec_helper'
+require 'rack'
+require 'rack/test'
+
+describe SoarAuthenticationToken::RackAuthIdTransposerMiddleware do
+  include Rack::Test::Methods
+
+  before :each do
+    @test_app = lambda do |env|
+      request = Rack::Request.new env
+      session = request.session
+      test_app_response_data = {
+        'message' => "tested",
+        'session_user' => request.session['user'],
+        'remote_user' => request.env['REMOTE_USER']
+      }
+      [200, {"Content-Type" => "application/json"}, test_app_response_data ]
+    end
+    @iut = SoarAuthenticationToken::RackAuthIdTransposerMiddleware.new(@test_app)
+  end
+
+  context "when initialized" do
+    it 'remembers the app provided' do
+      expect(@iut.instance_variable_get("@app")).to eq(@test_app)
+    end
+  end
+
+  context "when called with a request environment" do
+    context 'with X-GATEWAY-AUTHENTICATED-IDENTIFIER header' do
+      it "pass requests to the application" do
+        opts = { 'X-GATEWAY-AUTHENTICATED-IDENTIFIER' => 'test_uuid' }
+        code, env, body = @iut.call Rack::MockRequest.env_for('http://service', opts)
+        expect([code, env, body['message']]).to eq([200, {"Content-Type"=>"application/json"}, "tested"])
+      end
+
+      it "set the user key in the request session" do
+        opts = { 'X-GATEWAY-AUTHENTICATED-IDENTIFIER' => 'test_uuid' }
+        code, env, body = @iut.call Rack::MockRequest.env_for('http://service', opts)
+        expect(body['session_user']).to eq 'test_uuid'
+      end
+
+      it "set the remote user in the request environment" do
+        opts = { 'X-GATEWAY-AUTHENTICATED-IDENTIFIER' => 'test_uuid' }
+        code, env, body = @iut.call Rack::MockRequest.env_for('http://service', opts)
+        expect(body['remote_user']).to eq 'test_uuid'
+      end
+    end
+
+    context 'without X-GATEWAY-AUTHENTICATED-IDENTIFIER header' do
+      it "pass requests to the application" do
+        opts = { }
+        code, env, body = @iut.call Rack::MockRequest.env_for('http://service', opts)
+        expect([code, env, body['message'], body['session_user'], body['remote_user']]).to eq([200, {"Content-Type"=>"application/json"}, "tested", nil, nil])
+      end
+
+      it "does not modify the user key in the request session" do
+        opts = { }
+        code, env, body = @iut.call Rack::MockRequest.env_for('http://service', opts)
+        expect(body['session_user']).to eq nil
+      end
+
+      it "does not modify the remote user in the request environment" do
+        opts = { }
+        code, env, body = @iut.call Rack::MockRequest.env_for('http://service', opts)
+        expect(body['remote_user']).to eq nil
+      end
+    end
+  end
+end

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: soar_authentication_token
 version: !ruby/object:Gem::Version
-  version: 6.0.9
+  version: 6.1.0
 platform: ruby
 authors:
 - Barney de Villiers
 autorequire: 
 bindir: bin
 cert_chain: []
-date: 2017-04-26 00:00:00.000000000 Z
+date: 2017-06-09 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: soar_xt
@@ -230,6 +230,7 @@ files:
 - lib/soar_authentication_token/providers/remote_token_generator.rb
 - lib/soar_authentication_token/providers/remote_token_validator.rb
 - lib/soar_authentication_token/providers/static_token_validator.rb
+- lib/soar_authentication_token/rack_auth_id_transposer_middleware.rb
 - lib/soar_authentication_token/rack_middleware.rb
 - lib/soar_authentication_token/token_generator.rb
 - lib/soar_authentication_token/token_validator.rb
@@ -244,6 +245,7 @@ files:
 - spec/config_rotator_spec.rb
 - spec/jwt_token_validator_spec.rb
 - spec/keypair_generator_spec.rb
+- spec/rack_auth_id_transposer_middleware_spec.rb
 - spec/rack_middleware_spec.rb
 - spec/remote_token_validator_spec.rb
 - spec/spec_helper.rb
@@ -278,6 +280,7 @@ test_files:
 - spec/config_rotator_spec.rb
 - spec/jwt_token_validator_spec.rb
 - spec/keypair_generator_spec.rb
+- spec/rack_auth_id_transposer_middleware_spec.rb
 - spec/rack_middleware_spec.rb
 - spec/remote_token_validator_spec.rb
 - spec/spec_helper.rb