strongroom-rails 0.1.0

data/lib/strongroom/token.rb

@@ -0,0 +1,53 @@
+# frozen_string_literal: true
+
+require "base64"
+
+module Strongroom
+  class Token
+    def initialize(value)
+      unless value.is_a?(String) && value.bytesize == 47 && value.match?(/\Asr1_[A-Za-z0-9_-]{43}\z/)
+        raise Unauthorized, "invalid session credential", cause: nil
+      end
+      encoded = value.delete_prefix("sr1_")
+      decoded = Base64.urlsafe_decode64(encoded)
+      unless decoded.bytesize == 32 && Base64.urlsafe_encode64(decoded, padding: false) == encoded
+        raise Unauthorized, "invalid session credential", cause: nil
+      end
+      @wire = value.dup.freeze
+      freeze
+    rescue ArgumentError
+      raise Unauthorized, "invalid session credential", cause: nil
+    end
+
+    def reveal = @wire
+    def inspect = "#<Strongroom::Token [FILTERED]>"
+    alias to_s inspect
+    def as_json(*) = "[FILTERED]"
+    def pretty_print(printer) = printer.text(inspect)
+
+    def encode_with(coder)
+      coder.map = {"wire" => "[FILTERED]"}
+    end
+
+    def init_with(_coder)
+      raise TypeError, "session tokens must not be deserialized"
+    end
+
+    def _dump(_depth)
+      raise TypeError, "session tokens must not be serialized"
+    end
+
+    def self.coerce(value)
+      value.is_a?(self) ? value : new(value)
+    end
+
+    def self.from_authorization(value)
+      return nil unless value.is_a?(String) && value.bytesize <= 128
+      match = /\A[ \t]*([A-Za-z]+) ([A-Za-z0-9_-]+)[ \t]*\z/.match(value)
+      return nil unless match && match[1].casecmp?("bearer")
+      new(match[2])
+    rescue Unauthorized, ArgumentError
+      nil
+    end
+  end
+end

data/lib/strongroom.rb

@@ -0,0 +1,8 @@
+# frozen_string_literal: true
+
+require_relative "strongroom/rails/version"
+require_relative "strongroom/errors"
+require_relative "strongroom/token"
+require_relative "strongroom/session"
+require_relative "strongroom/net_http_transport"
+require_relative "strongroom/client"

metadata

@@ -0,0 +1,233 @@
+--- !ruby/object:Gem::Specification
+name: strongroom-rails
+version: !ruby/object:Gem::Version
+  version: 0.1.0
+platform: ruby
+authors:
+- Seuros
+bindir: bin
+cert_chain: []
+date: 1980-01-02 00:00:00.000000000 Z
+dependencies:
+- !ruby/object:Gem::Dependency
+  name: actionpack
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: '8.1'
+    - - "<"
+      - !ruby/object:Gem::Version
+        version: '9'
+  type: :runtime
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: '8.1'
+    - - "<"
+      - !ruby/object:Gem::Version
+        version: '9'
+- !ruby/object:Gem::Dependency
+  name: railties
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: '8.1'
+    - - "<"
+      - !ruby/object:Gem::Version
+        version: '9'
+  type: :runtime
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: '8.1'
+    - - "<"
+      - !ruby/object:Gem::Version
+        version: '9'
+- !ruby/object:Gem::Dependency
+  name: base64
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: '0.2'
+  type: :runtime
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: '0.2'
+- !ruby/object:Gem::Dependency
+  name: json
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: '2.7'
+  type: :runtime
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: '2.7'
+- !ruby/object:Gem::Dependency
+  name: net-http
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: '0.4'
+  type: :runtime
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: '0.4'
+- !ruby/object:Gem::Dependency
+  name: minitest
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '6.0'
+  type: :development
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '6.0'
+- !ruby/object:Gem::Dependency
+  name: padded_cell
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: 0.2.0
+  type: :development
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: 0.2.0
+- !ruby/object:Gem::Dependency
+  name: pg
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '1.6'
+  type: :development
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '1.6'
+- !ruby/object:Gem::Dependency
+  name: rack-test
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '2.1'
+  type: :development
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '2.1'
+- !ruby/object:Gem::Dependency
+  name: rake
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '13.0'
+  type: :development
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '13.0'
+- !ruby/object:Gem::Dependency
+  name: warden
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '1.2'
+  type: :development
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '1.2'
+description: 'Rails adapter for strongroomd, a Postgres-first authentication kernel
+  that acts as the application''s security coprocessor: Rails never sees password
+  hashes or session secrets. Ships a strict HTTP client, encrypted-cookie login, rotation
+  and logout helpers for ActionController::Base and ActionController::API, a request-level
+  resolver and an optional Warden strategy. The daemon ships separately, as the strongroomd
+  gem or crate; this gem only speaks to it over HTTP.'
+email:
+- terminale@gmail.com
+executables: []
+extensions: []
+extra_rdoc_files: []
+files:
+- CHANGELOG.md
+- LICENSE
+- README.md
+- lib/strongroom.rb
+- lib/strongroom/client.rb
+- lib/strongroom/errors.rb
+- lib/strongroom/net_http_transport.rb
+- lib/strongroom/rails.rb
+- lib/strongroom/rails/account.rb
+- lib/strongroom/rails/authentication.rb
+- lib/strongroom/rails/railtie.rb
+- lib/strongroom/rails/registry.rb
+- lib/strongroom/rails/resolver.rb
+- lib/strongroom/rails/version.rb
+- lib/strongroom/rails/warden_strategy.rb
+- lib/strongroom/session.rb
+- lib/strongroom/token.rb
+homepage: https://github.com/seuros/strongroom
+licenses:
+- BSD-3-Clause
+metadata:
+  homepage_uri: https://github.com/seuros/strongroom
+  source_code_uri: https://github.com/seuros/strongroom/tree/master/gems/strongroom-rails
+  changelog_uri: https://github.com/seuros/strongroom/blob/master/gems/strongroom-rails/CHANGELOG.md
+  bug_tracker_uri: https://github.com/seuros/strongroom/issues
+  rubygems_mfa_required: 'true'
+rdoc_options: []
+require_paths:
+- lib
+required_ruby_version: !ruby/object:Gem::Requirement
+  requirements:
+  - - ">="
+    - !ruby/object:Gem::Version
+      version: '4.0'
+required_rubygems_version: !ruby/object:Gem::Requirement
+  requirements:
+  - - ">="
+    - !ruby/object:Gem::Version
+      version: '0'
+requirements: []
+rubygems_version: 4.0.20
+specification_version: 4
+summary: Explicit Rails login/session adapter for the Strongroom kernel
+test_files: []