ssomg 0.1.6 → 0.1.7

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA1:
-  metadata.gz: f11651234926cd5a9a2737615dca13b050ae33c0
-  data.tar.gz: 3bce020b4028191752629c1f8804c9f3b37443c9
+  metadata.gz: 6710e4a7d65c086ebabe90db91d61e43887ea537
+  data.tar.gz: 19cb24a0873c13fedb96a31bc3933fd9a6d64892
 SHA512:
-  metadata.gz: 4b92f3b5b3faff6622d65b12a91ab6248fbb16ca9921ec88e33125e0f3eecf43173f355093ace2cdbcfee6d6643cfee09b55c1e86df4be6615aceec7ef8f5663
-  data.tar.gz: 681116287858b67e9975aff6d359f256a7e2e953161752e505cf432630f971f95a4a208480a341c0b50fd27620634e6b07d3af344c72de4435f6a64a28753205
+  metadata.gz: 7ab37d06553a291594cda5e9b4f3e1117bb9b1bf027737766cb606dffa5645a1f18148c9aff1975df9968677083df7eee605122c828d52eaf375a5ffcd2b1d1f
+  data.tar.gz: cfabcec11aa0ff5b364ece6bece12fe41dcac0d5162edd36882a63f7c231a94c901421dc990044e771a8ea5a2103664ad82faf04ae0bf087ca6bf43516b8902a

data/lib/ssomg/controllers/base_controller.rb

@@ -2,145 +2,13 @@ require 'net/http'
 require 'json'
 
 module Ssomg
-  class BaseController < ::ActionController::Base
+  class BaseController < RootController
 
-    before_action :register_user, unless: -> { request.query_parameters["token"] }
 
   private 
 
-    def register_user 
-      if ( cookies["ssomg"] )
-        token = cookies["ssomg"]
-      else 
-        token = bearer_token
-      end
-      if( token )
-        begin 
-          decoded_token = ::JWT.decode token, Ssomg.PUB_KEY, true, { algorithm: 'RS256' }
-          @user = decoded_token[ 0 ]
-        rescue ::JWT::ExpiredSignature
-          if ( cookies["ssomg"] )
-            begin
-              decoded_token = ::JWT.decode token, Ssomg.PUB_KEY, true, { exp_leeway: 432000, algorithm: 'RS256' } #5 day leeway to ensure token is read
-              accessTokens = JSON.parse refresh( decoded_token[ 0 ]["refresh_token"] )
-              userToken = accessTokens[ENV["APP_ID"]]
-              cookies["ssomg" ] = { :value => accessTokens[ENV["APP_ID"]], :secure => Rails.env.production?, :httponly => true }
-              withoutMain = accessTokens.except!( ENV["APP_ID"] )
-              cookies["ssomg_all" ] = { :value => withoutMain.keys.join(","), :secure => Rails.env.production?, :httponly => true }
-              withoutMain.each { |key, value| 
-                cookies["ssomg_" + key ] = { :value => value, :secure => Rails.env.production?, :httponly => true }
-              }
-              decoded_user = ::JWT.decode userToken, Ssomg.PUB_KEY, true, { algorithm: 'RS256' }
-              @user = decoded_user[ 0 ]
-            rescue StandardError => e
-              # raise e
-            end
-          else 
-            cookies["ssomg_meta" ] = { :value => request.original_url, :secure => Rails.env.production?, :httponly => true }
-            go_to_provider 
-          end
-        rescue StandardError => e
-          # raise e
-        end
-      end
-    end
-
-    def verify_token
-      if request.query_parameters["token"] 
-        accessTokens = JSON.parse refresh( request.query_parameters["token"] )
-        cookies["ssomg" ] = { :value => accessTokens[ENV["APP_ID"]], :secure => Rails.env.production?, :httponly => true }
-        withoutMain = accessTokens.except!( ENV["APP_ID"] )
-        cookies["ssomg_all" ] = { :value => withoutMain.keys.join(","), :secure => Rails.env.production?, :httponly => true }
-        withoutMain.each { |key, value| 
-          cookies["ssomg_" + key ] = { :value => value, :secure => Rails.env.production?, :httponly => true }
-        }
-        if ( cookies["ssomg_meta"] ) 
-          path = cookies["ssomg_meta"]
-          cookies.delete "ssomg_meta"
-          redirect_to path and return
-        end
-      end
-    end
-
-    def protect( roles )
-      if ( @user )
-        if !roles.kind_of?(Array)
-          roles = [ roles ]
-        end
-        authorised = false;
-        for role in roles
-          if ( @user["roles"].include? role ) 
-            authorised = true
-            break
-          end
-        end
-        if ( !authorised ) 
-          head(403) and return      
-        end
-      else 
-        cookies["ssomg_meta" ] = { :value => request.original_url, :secure => Rails.env.production?, :httponly => true }
-        go_to_provider
-      end
-      
-    end
-
-    def refresh( token ) 
-      begin
-        uri = URI(ENV["SSO_HOST"] + "/auth/sso")
-        http = Net::HTTP.new(uri.host, uri.port )
-        req = Net::HTTP::Post.new(uri.path, {'Content-Type' =>'application/json'})
-        if uri.scheme == "https" 
-          http.verify_mode = OpenSSL::SSL::VERIFY_NONE
-          http.use_ssl = true
-        end
-        req.body = { :token => token }.to_json
-        res = http.request(req)
-        jwt = res.body
-        return jwt
-      rescue StandardError => e
-        # puts "failed #{e}"
-      end
-    end
-
-    def refresh_silent token 
-      begin
-        uri = URI(ENV["SSO_HOST"] + "/auth/sso")
-        http = Net::HTTP.new(uri.host, uri.port )
-        req = Net::HTTP::Post.new(uri.path, {'Content-Type' =>'application/json'})
-        if uri.scheme == "https" 
-          http.verify_mode = OpenSSL::SSL::VERIFY_NONE
-          http.use_ssl = true
-        end
-        req.body = { :token => token }.to_json
-        res = http.request(req)
-        jwt = res.body
-        return jwt
-      rescue StandardError => e
-      end
-    end
-
-    def bearer_token
-      pattern = /^Bearer /
-      header  = request.headers['Authorization']
-      header.gsub(pattern, '') if header && header.match(pattern)
-    end
-
-    def clear_linked_cookies
-      if cookies["ssomg_all"] 
-        all_cookies = cookies["ssomg_all"].split(",")
-        all_cookies.each { |key| cookies.delete "ssomg_" + key }
-        cookies.delete "ssomg_all"
-      end
-    end
-
-    def clear_cookies
-      cookies.delete "ssomg_meta"
-      cookies.delete "ssomg"
-    end
-
-    def go_to_provider
-      clear_linked_cookies
-      redirect_to ENV["SSO_HOST"] + "/auth/login?app_id=" + ENV["APP_ID"] and return
+    def getToken
+      cookies["ssomg"]
     end
 
   end

data/lib/ssomg/version.rb

@@ -1,3 +1,3 @@
 module Ssomg
-  VERSION = "0.1.6"
+  VERSION = "0.1.7"
 end

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: ssomg
 version: !ruby/object:Gem::Version
-  version: 0.1.6
+  version: 0.1.7
 platform: ruby
 authors:
 - Henry McIntosh
 autorequire: 
 bindir: exe
 cert_chain: []
-date: 2019-08-23 00:00:00.000000000 Z
+date: 2019-09-13 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: bundler