sso_openid 7.2.4.auth0.uat.1

checksums.yaml

@@ -0,0 +1,7 @@
+---
+SHA256:
+  metadata.gz: 951f5252674f4168471106eb572626a0cbe271ab101534286c199b2cb549c56c
+  data.tar.gz: 0deb158ec45aaa814120de965169d1b936bbc29708a1ad0ca1992eb17b21ff88
+SHA512:
+  metadata.gz: 5462365bfc2a5e813dcbd12621d23a5d2e4230e00136b766682f1d6231875e4366ac50b23b9e88088a2bf3a9c61ea4cba9d16c9c459bca909f1bcf6a4d6b3ab1
+  data.tar.gz: 79d4402e912c1127fc1d8fa44d43f21086ab9d4fb4d512b8f44cb669ec45552a9a5658546d2581b599cb3ea6a2ca77697a13906a2429dffafd16d2eb583afcd9

data/MIT-LICENSE

@@ -0,0 +1,20 @@
+Copyright 2016 Timothy King
+
+Permission is hereby granted, free of charge, to any person obtaining
+a copy of this software and associated documentation files (the
+"Software"), to deal in the Software without restriction, including
+without limitation the rights to use, copy, modify, merge, publish,
+distribute, sublicense, and/or sell copies of the Software, and to
+permit persons to whom the Software is furnished to do so, subject to
+the following conditions:
+
+The above copyright notice and this permission notice shall be
+included in all copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND,
+EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF
+MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND
+NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE
+LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION
+OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION
+WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.

data/Rakefile

@@ -0,0 +1,30 @@
+begin
+  require 'bundler/setup'
+rescue LoadError
+  puts 'You must `gem install bundler` and `bundle install` to run rake tasks'
+end
+
+require 'rdoc/task'
+
+RDoc::Task.new(:rdoc) do |rdoc|
+  rdoc.rdoc_dir = 'rdoc'
+  rdoc.title    = 'SsoOpenid'
+  rdoc.options << '--line-numbers'
+  rdoc.rdoc_files.include('README.rdoc')
+  rdoc.rdoc_files.include('lib/**/*.rb')
+end
+
+APP_RAKEFILE = File.expand_path("../spec/dummy/Rakefile", __FILE__)
+load 'rails/tasks/engine.rake'
+
+load 'rails/tasks/statistics.rake'
+
+require 'rspec/core'
+require 'rspec/core/rake_task'
+
+Bundler::GemHelper.install_tasks
+
+desc "Run all specs in spec directory (excluding plugin specs)"
+RSpec::Core::RakeTask.new(:spec => 'app:db:test:prepare')
+
+task :default => :spec

data/app/assets/javascripts/sso_openid/application.js

@@ -0,0 +1,13 @@
+// This is a manifest file that'll be compiled into application.js, which will include all the files
+// listed below.
+//
+// Any JavaScript/Coffee file within this directory, lib/assets/javascripts, vendor/assets/javascripts,
+// or any plugin's vendor/assets/javascripts directory can be referenced here using a relative path.
+//
+// It's not advisable to add code directly here, but if you do, it'll appear at the bottom of the
+// compiled file.
+//
+// Read Sprockets README (https://github.com/rails/sprockets#sprockets-directives) for details
+// about supported directives.
+//
+//= require_tree .

data/app/assets/stylesheets/sso_openid/application.css

@@ -0,0 +1,15 @@
+/*
+ * This is a manifest file that'll be compiled into application.css, which will include all the files
+ * listed below.
+ *
+ * Any CSS and SCSS file within this directory, lib/assets/stylesheets, vendor/assets/stylesheets,
+ * or any plugin's vendor/assets/stylesheets directory can be referenced here using a relative path.
+ *
+ * You're free to add application-wide styles to this file and they'll appear at the bottom of the
+ * compiled file so the styles you add here take precedence over styles defined in any styles
+ * defined in the other CSS/SCSS files in this directory. It is generally better to create a new
+ * file per style scope.
+ *
+ *= require_tree .
+ *= require_self
+ */

data/app/controllers/sso_openid/sessions_controller.rb

@@ -0,0 +1,62 @@
+module SsoOpenid
+  class SessionsController < ::ApplicationController
+    include Rails.application.routes.url_helpers
+
+    skip_before_action :authenticate_admin!, raise: false
+    skip_before_action :verify_authenticity_token, only: [:create, :setup], raise: false
+
+    def create
+      omniauth_data = request.env['omniauth.auth']
+      admin = Admin.from_omniauth(omniauth_data, request.subdomain, request.ip)
+      if admin.nil?
+        failure
+      else
+        if admin.respond_to?(:restrict_access?) && admin.restrict_access?
+          flash[:error] = "You don't have permission to access this site."
+          failure
+        elsif admin.respond_to?(:status) && admin.status != 'active'
+          flash[:error] = "You cannot access this site. Your account has been disabled."
+          failure
+        else
+          sso_openid_sign_in(admin)
+          flash[:notice] = "You have logged in successfully."
+          redirect_to sso_openid_after_sign_in_path
+        end
+      end
+    end
+
+    def destroy
+      sso_openid_sign_out
+      redirect_to sso_openid_after_sign_out_path, allow_other_host: true
+    end
+
+    def failure
+      redirect_to sso_openid_failure_path, allow_other_host: true
+    end
+
+    def setup
+      # Set the redirect uri
+      redirect_uri = sso_openid.callback_url(subdomain: request.subdomain, host: request.host, port: request.port)
+      omniauth_strategy.options[:client_options][:redirect_uri] = redirect_uri
+      Rails.logger.info "sso_openid: setting redirect_uri to #{redirect_uri}"
+
+      # Set additional options if they're available as query strings
+      omniauth_strategy.options[:login_hint] = params[:login_hint] if params[:login_hint].present?
+      omniauth_strategy.options[:acr_values] = "activated:#{params[:activated]}" if params[:activated].present?
+      omniauth_strategy.options[:acr_values] = "pwdReset:#{params[:pwdReset]}" if params[:pwdReset].present?
+
+      # All finished!
+      render plain: "Omniauth setup phase.", status: 200
+    end
+
+    private
+
+    def omniauth_strategy
+      @omniauth_strategy ||= request.env['omniauth.strategy']
+    end
+
+    def current_donor
+      nil
+    end
+  end
+end

data/app/helpers/sso_openid/application_helper.rb

@@ -0,0 +1,44 @@
+module SsoOpenid
+  module ApplicationHelper
+    def sso_openid_sign_in(admin, options = {})
+      store_in_session = options.key?(:store) ? options[:store] : true
+      if store_in_session
+        session[:admin_uid] = admin.uid
+        session[:admin_id] = admin.id
+      end
+      after_sso_sign_in_call_back
+      @current_admin = admin
+    end
+
+    def sso_openid_sign_out
+      session.delete(:admin_uid)
+      session.delete(:admin_id)
+      reset_session
+    end
+
+    def after_sso_sign_in_call_back
+      # This can be overridden in the including application
+      # to run processes after a user successfully signs in.
+    end
+
+    def current_admin
+      return @current_admin if @current_admin
+      return nil if session[:admin_uid].nil?
+      @current_admin = ::Admin.find_by(uid: session[:admin_uid], id: session[:admin_id])
+    end
+
+    def authenticate_admin!
+      if current_admin.present?
+        return true
+      else
+        #use fullpath instead of path as fullpath includes the query params that are passed in
+        session[:stored_location] = request.fullpath
+        redirect_to sso_openid.auth_path
+      end
+    end
+
+    def stored_location
+      session.delete(:stored_location)
+    end
+  end
+end

data/app/views/layouts/sso_openid/application.html.erb

@@ -0,0 +1,14 @@
+<!DOCTYPE html>
+<html>
+<head>
+  <title>SsoOpenid</title>
+  <%= stylesheet_link_tag    "sso_openid/application", media: "all" %>
+  <%= javascript_include_tag "sso_openid/application" %>
+  <%= csrf_meta_tags %>
+</head>
+<body>
+
+<%= yield %>
+
+</body>
+</html>

data/config/initializers/omniauth.rb

@@ -0,0 +1,5 @@
+unless Rails.env.production?
+  OpenIDConnect.http_config { |client| client.ssl_config.verify_mode = OpenSSL::SSL::VERIFY_NONE }
+end
+
+Rails.application.config.middleware.use SsoOpenid::Middleware

data/config/routes.rb

@@ -0,0 +1,7 @@
+SsoOpenid::Engine.routes.draw do
+  get SsoOpenid::Paths.callback_path => "sessions#create", as: :callback
+  get SsoOpenid::Paths.setup_path => "sessions#setup", as: :setup
+  get SsoOpenid::Paths.auth_path => "sessions#new", as: :auth
+  get SsoOpenid::Paths.failure_path => "sessions#failure", as: :failure
+  get '/admin/sign_out' => 'sessions#destroy', as: :destroy_admin_session
+end

data/lib/sso_openid/engine.rb

@@ -0,0 +1,18 @@
+module SsoOpenid
+  class Engine < ::Rails::Engine
+    isolate_namespace SsoOpenid
+
+    initializer "sso_openid_mount_engine", before: :load_config_initializers do |app|
+      Rails.application.routes.prepend do
+        mount SsoOpenid::Engine, at: "/"
+      end
+    end
+
+    config.to_prepare do
+      ActiveSupport.on_load :action_controller do
+        include SsoOpenid::ApplicationHelper
+        helper SsoOpenid::ApplicationHelper
+      end
+    end
+  end
+end

data/lib/sso_openid/middleware.rb

@@ -0,0 +1,23 @@
+module SsoOpenid
+  class Middleware
+    attr_accessor :app
+
+    def initialize(app)
+      self.app = app
+    end
+
+    def call(env)
+      request = Rack::Request.new(env)
+      sso_openid_auth_path_prefix = SsoOpenid::Paths.auth_path_prefix
+      Rails.logger.info "Middleware: Request path:  #{request.path}"
+      if request.path =~ %r{#{sso_openid_auth_path_prefix}/?}
+        omniauth_strategy = OmniAuth::Strategies::OpenIDConnect.new(app, SsoOpenid::Configuration.openid_options)
+        status, headers, response = omniauth_strategy.call(env)
+        return [status, headers, response]
+      else
+        status, headers, response = app.call(env)
+        return [status, headers, response]
+      end
+    end
+  end
+end

data/lib/sso_openid/paths.rb

@@ -0,0 +1,29 @@
+module SsoOpenid
+  class Paths
+    class << self
+      def auth_path_prefix
+        "/admin/auth"
+      end
+
+      def provider_name
+        "sso-openid"
+      end
+
+      def auth_path
+        "#{auth_path_prefix}/#{provider_name}"
+      end
+
+      def callback_path
+        "#{auth_path}/callback"
+      end
+
+      def failure_path
+        "/auth/failure"
+      end
+
+      def setup_path
+        "#{auth_path}/setup"
+      end
+    end
+  end
+end

data/lib/sso_openid/spec_helpers.rb

@@ -0,0 +1,39 @@
+module SsoOpenid
+  module SpecHelpers
+    def sso_openid_omniauth_stub_for(admin)
+      OmniAuth.config.test_mode = true
+
+      OmniAuth.config.mock_auth[:sso_openid] = OmniAuth::AuthHash.new({
+        provider: 'sso-openid',
+        uid: '379bbf97-d3d9-4206-97a8-c24421b6f4fa',
+        info: {
+          name: nil,
+          email: admin.email,
+          nickname: nil,
+          first_name: "John",
+          last_name: "Doe",
+          gender: nil,
+          image: nil,
+          phone: nil,
+          urls: nil
+        },
+        credentials: {
+          id_token: 'asdf1234',
+          token: 'qwer5678',
+          refresh_token: nil,
+          expires_in: 1800,
+          scope: nil,
+        },
+        extra: {
+          email: admin.email,
+          email_verified: "true",
+          family_name: "John",
+          given_name: "Doe",
+          preferred_username: admin.email,
+          sub: "379bbf97-d3d9-4206-97a8-c24421b6f4fa" ,
+          updated_at: 1462568750
+        }
+      })
+    end
+  end
+end

data/lib/sso_openid/urls.rb

@@ -0,0 +1,48 @@
+require 'ostruct'
+
+module SsoOpenid
+  class Urls
+
+    # Provides a list of the NFG applications by url for environment
+    # in which the containing application is running
+    # The list of urls can by found in the urls.yml file.
+
+    # Calling SsoOpenid.Urls.<name of application> will return the host
+    # value of that application. i.e SsoOpenid.Urls.evo returns the EVO
+    # host for the appropriate env
+
+
+    def self.[](app_name)
+      urls_for_current_environment[app_name]
+    end
+
+    def self.method_missing(method_name, *arguments, &block)
+      # returns the host. If you need a value other than the host
+      # use the hash method above
+      if urls_for_current_environment[method_name]
+        ::OpenStruct.new(urls_for_current_environment[method_name])
+      else
+        super
+      end
+    end
+
+    def self.reset!
+      # allows us to clear the list and have it be recreated
+      @urls_for_current_environment = nil
+    end
+
+    private
+
+    def self.urls_for_current_environment
+      return @urls_for_current_environment if @urls_for_current_environment
+      url_list = YAML::load(ERB.new(IO.read(File.join(File.dirname(__FILE__), 'urls.yml'))).result)
+      url_list_hash = HashWithIndifferentAccess.new(url_list)
+      if !url_list_hash[Rails.env].nil?
+        @urls_for_current_environment = url_list_hash[:defaults].deep_merge(url_list_hash[Rails.env])
+      else
+        @urls_for_current_environment = url_list_hash[:defaults]
+      end
+    end
+  end
+
+end

data/lib/sso_openid/urls.yml

@@ -0,0 +1,148 @@
+defaults:
+  auctions:
+    host: "auctions.networkforgood-beta.com"
+    fqdn: "https://api.auctions.networkforgood-beta.com"
+  sso_openid:
+    host: "dev-auth.dev.bonterralabs.io"
+    fqdn: "https://dev-auth.dev.bonterralabs.io"
+    discovery_endpoint: "https://dev-auth.dev.bonterralabs.io"
+  portal:
+    host: "account.networkforgood-beta.com"
+    fqdn: "https://account.networkforgood-beta.com"
+  identity_users:
+    host: "users-uat.networkforgood.org"
+    fqdn: "https://users-uat.networkforgood.org"
+  dms:
+    host: "dm.networkforgood-beta.com"
+    fqdn: "https://sso.dm.networkforgood-beta.com"
+  evo:
+    host: "networkforgood-beta.com"
+    fqdn: "https://api.networkforgood-beta.com"
+  gp:
+    host: "users-uat.networkforgood.org"
+    users_api: "https://users-uat.networkforgood.org"
+    dashboard: "https://account-uat.networkforgood.org/Npo/Dashboard.aspx"
+    disbursements: "https://account-uat.networkforgood.org/Npo/AccountManagement/OrganizationInfo.aspx"
+test:
+  auctions:
+    host: "portal.lvh.me:3004"
+    fqdn: "http://portal.lvh.me:3004"
+  dms:
+    host: "dm.n4g.be:3001"
+    fqdn: "http://dev.dm.n4g.be:3001"
+  evo:
+    host: "n4g.be:3000"
+    fqdn: "http://basic.n4g.be:3000"
+development:
+  auctions:
+    host: "auctions.test"
+    fqdn: "http://dev.auctions.test"
+  portal:
+    host: "portal.test"
+    fqdn: "http://account.portal.test"
+  dms:
+    host: "dm.dm.test"
+    fqdn: "http://dev.dm.dm.test"
+  evo:
+    host: "fp.test"
+    fqdn: "http://basic.fp.test"
+demo:
+  auctions:
+    host: "auctions.networkforgood-demo.com"
+    fqdn: "https://api.auctions.networkforgood-demo.com"
+  sso_openid:
+    host: "identity-sandbox.networkforgood.org"
+    fqdn: "https://identity-sandbox.networkforgood.org"
+    discovery_endpoint: "https://identity-sandbox.networkforgood.org"
+  portal:
+    host: "account.networkforgood-demo.com"
+    fqdn: "https://account.networkforgood-demo.com"
+  identity_users:
+    host: "users-sandbox.networkforgood.org"
+    fqdn: "https://users-sandbox.networkforgood.org"
+  dms:
+    host: "dm.networkforgood-demo.com"
+    fqdn: "https://sso.dm.networkforgood-demo.com"
+  evo:
+    host: "networkforgood-demo.com"
+    fqdn: "https://api.networkforgood-demo.com"
+  gp:
+    host: "users-sandbox.networkforgood.org"
+    users_api: "https://users-sandbox.networkforgood.org"
+    dashboard: "https://account-sandbox.networkforgood.org/Npo/Dashboard.aspx"
+    disbursements: "https://account-sandbox.networkforgood.org/Npo/AccountManagement/OrganizationInfo.aspx"
+staging:
+  auctions:
+    host: "auctions.networkforgood-demo.com"
+    fqdn: "https://api.auctions.networkforgood-demo.com"
+  sso_openid:
+    host: "identity-sandbox.networkforgood.org"
+    fqdn: "https://identity-sandbox.networkforgood.org"
+    discovery_endpoint: "https://identity-sandbox.networkforgood.org"
+  portal:
+    host: "account.networkforgood-demo.com"
+    fqdn: "https://account.networkforgood-demo.com"
+  identity_users:
+    host: "users-sandbox.networkforgood.org"
+    fqdn: "https://users-sandbox.networkforgood.org"
+  dms:
+    host: "dm.networkforgood-demo.com"
+    fqdn: "https://sso.dm.networkforgood-demo.com"
+  evo:
+    host: "networkforgood-demo.com"
+    fqdn: "https://api.networkforgood-demo.com"
+  gp:
+    host: "users-sandbox.networkforgood.org"
+    users_api: "https://users-sandbox.networkforgood.org"
+    dashboard: "https://account-sandbox.networkforgood.org/Npo/Dashboard.aspx"
+    disbursements: "https://account-sandbox.networkforgood.org/Npo/AccountManagement/OrganizationInfo.aspx"
+qa:
+  auctions:
+    host: "auctions.networkforgood-qa.com"
+    fqdn: "https://api.auctions.networkforgood-qa.com"
+  sso_openid:
+    host: "identity-sandbox.networkforgood.org"
+    fqdn: "https://identity-sandbox.networkforgood.org"
+    discovery_endpoint: "https://identity-sandbox.networkforgood.org"
+  portal:
+    host: "account.networkforgood-qa.com"
+    fqdn: "https://account.networkforgood-qa.com"
+  identity_users:
+    host: "users-sandbox.networkforgood.org"
+    fqdn: "https://users-sandbox.networkforgood.org"
+  dms:
+    host: "dm.networkforgood-qa.com"
+    fqdn: "https://sso.dm.networkforgood-qa.com"
+  evo:
+    host: "networkforgood-qa.com"
+    fqdn: "https://api.networkforgood-qa.com"
+  gp:
+    host: "users-sandbox.networkforgood.org"
+    users_api: "https://users-sandbox.networkforgood.org"
+    dashboard: "https://account-sandbox.networkforgood.org/Npo/Dashboard.aspx"
+    disbursements: "https://account-sandbox.networkforgood.org/Npo/AccountManagement/OrganizationInfo.aspx"
+production:
+  auctions:
+    host: "auctions.networkforgood.com"
+    fqdn: "https://api.auctions.networkforgood.com"
+  sso_openid:
+    host: "identity.networkforgood.org"
+    fqdn: "https://identity.networkforgood.org"
+    discovery_endpoint: "https://identity.networkforgood.org"
+  portal:
+    host: "account.networkforgood.com"
+    fqdn: "https://account.networkforgood.com"
+  identity_users:
+    host: "users.networkforgood.org"
+    fqdn: "https://users.networkforgood.org"
+  dms:
+    host: "dm.networkforgood.com"
+    fqdn: "https://sso.dm.networkforgood.com"
+  evo:
+    host: "networkforgood.com"
+    fqdn: "https://api.networkforgood.com"
+  gp:
+    host: "users.networkforgood.org"
+    users_api: "https://users.networkforgood.org"
+    dashboard: "https://account.networkforgood.org/Npo/Dashboard.aspx"
+    disbursements: "https://account.networkforgood.org/Npo/AccountManagement/OrganizationInfo.aspx"

data/lib/sso_openid/version.rb

@@ -0,0 +1,3 @@
+module SsoOpenid
+  VERSION = "7.2.4.auth0.uat.1"
+end

data/lib/sso_openid.rb

@@ -0,0 +1,47 @@
+require "sso_openid/engine"
+require "sso_openid/middleware"
+require "sso_openid/paths"
+require "sso_openid/urls"
+require "omniauth/openid_connect"
+
+module SsoOpenid
+  autoload :SpecHelpers, 'sso_openid/spec_helpers'
+
+  class << self
+    attr_accessor :configuration
+  end
+
+  def self.configure
+    self.configuration ||= Configuration.new
+    yield(configuration)
+  end
+
+  class Configuration
+    attr_accessor :identifier, :secret
+
+    def initialize
+      @identifier = nil
+      @secret = nil
+    end
+
+    def self.openid_options
+      {
+        client_options: {
+          port: 443,
+          scheme: "https",
+          host: SsoOpenid::Urls.sso_openid.host,
+          identifier: SsoOpenid.configuration&.identifier,
+          secret: SsoOpenid.configuration&.secret,
+        },
+        callback_path: SsoOpenid::Paths.callback_path,
+        request_path: SsoOpenid::Paths.auth_path,
+        setup_path: SsoOpenid::Paths.setup_path,
+        name: :sso_openid,
+        discovery: true,
+        issuer: SsoOpenid::Urls.sso_openid.discovery_endpoint,
+        setup: true,
+        scope: [:openid, :email, :profile, :address],
+      }
+    end
+  end
+end

data/lib/tasks/sso_openid_tasks.rake

@@ -0,0 +1,4 @@
+# desc "Explaining what the task does"
+# task :sso_openid do
+#   # Task goes here
+# end

metadata

@@ -0,0 +1,281 @@
+--- !ruby/object:Gem::Specification
+name: sso_openid
+version: !ruby/object:Gem::Version
+  version: 7.2.4.auth0.uat.1
+platform: ruby
+authors:
+- Timothy King
+bindir: bin
+cert_chain: []
+date: 2025-10-16 00:00:00.000000000 Z
+dependencies:
+- !ruby/object:Gem::Dependency
+  name: rails
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '7.2'
+  type: :runtime
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '7.2'
+- !ruby/object:Gem::Dependency
+  name: omniauth
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: 1.9.1
+  type: :runtime
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: 1.9.1
+- !ruby/object:Gem::Dependency
+  name: omniauth_openid_connect
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: 0.3.0
+  type: :runtime
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: 0.3.0
+- !ruby/object:Gem::Dependency
+  name: json-jwt
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: '0'
+  type: :runtime
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: '0'
+- !ruby/object:Gem::Dependency
+  name: nokogiri
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: 1.13.10
+  type: :runtime
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: 1.13.10
+- !ruby/object:Gem::Dependency
+  name: logger
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: '0'
+  type: :runtime
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: '0'
+- !ruby/object:Gem::Dependency
+  name: bigdecimal
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: '0'
+  type: :runtime
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: '0'
+- !ruby/object:Gem::Dependency
+  name: drb
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: '0'
+  type: :runtime
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: '0'
+- !ruby/object:Gem::Dependency
+  name: sqlite3
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '1.6'
+  type: :development
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '1.6'
+- !ruby/object:Gem::Dependency
+  name: rspec-rails
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '6.1'
+  type: :development
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '6.1'
+- !ruby/object:Gem::Dependency
+  name: rspec_junit_formatter
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: '0'
+  type: :development
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: '0'
+- !ruby/object:Gem::Dependency
+  name: database_cleaner
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: '0'
+  type: :development
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: '0'
+- !ruby/object:Gem::Dependency
+  name: capybara
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: '0'
+  type: :development
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: '0'
+- !ruby/object:Gem::Dependency
+  name: pry
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: '0'
+  type: :development
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: '0'
+- !ruby/object:Gem::Dependency
+  name: pry-byebug
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: '0'
+  type: :development
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: '0'
+- !ruby/object:Gem::Dependency
+  name: webmock
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: '0'
+  type: :development
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: '0'
+email:
+- timothy.king@networkforgood.com
+executables: []
+extensions: []
+extra_rdoc_files: []
+files:
+- MIT-LICENSE
+- Rakefile
+- app/assets/javascripts/sso_openid/application.js
+- app/assets/stylesheets/sso_openid/application.css
+- app/controllers/sso_openid/sessions_controller.rb
+- app/helpers/sso_openid/application_helper.rb
+- app/views/layouts/sso_openid/application.html.erb
+- config/initializers/omniauth.rb
+- config/routes.rb
+- lib/sso_openid.rb
+- lib/sso_openid/engine.rb
+- lib/sso_openid/middleware.rb
+- lib/sso_openid/paths.rb
+- lib/sso_openid/spec_helpers.rb
+- lib/sso_openid/urls.rb
+- lib/sso_openid/urls.yml
+- lib/sso_openid/version.rb
+- lib/tasks/sso_openid_tasks.rake
+homepage: http://github.com/NetworkForGood
+licenses:
+- MIT
+metadata: {}
+rdoc_options: []
+require_paths:
+- lib
+required_ruby_version: !ruby/object:Gem::Requirement
+  requirements:
+  - - ">="
+    - !ruby/object:Gem::Version
+      version: '0'
+required_rubygems_version: !ruby/object:Gem::Requirement
+  requirements:
+  - - ">="
+    - !ruby/object:Gem::Version
+      version: '0'
+requirements: []
+rubygems_version: 3.6.2
+specification_version: 4
+summary: OpenID implimentation for NFG Rails apps
+test_files: []