super-smart-kit 0.0.1

data/doorkeeper-5.9.3/MIT-LICENSE

@@ -0,0 +1,20 @@
+Copyright 2011 Applicake. http://applicake.com
+
+Permission is hereby granted, free of charge, to any person obtaining
+a copy of this software and associated documentation files (the
+"Software"), to deal in the Software without restriction, including
+without limitation the rights to use, copy, modify, merge, publish,
+distribute, sublicense, and/or sell copies of the Software, and to
+permit persons to whom the Software is furnished to do so, subject to
+the following conditions:
+
+The above copyright notice and this permission notice shall be
+included in all copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND,
+EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF
+MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND
+NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE
+LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION
+OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION
+WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.

data/doorkeeper-5.9.3/README.md

@@ -0,0 +1,186 @@
+# Doorkeeper — awesome OAuth 2 provider for your Rails / Grape app.
+
+[![Gem Version](https://badge.fury.io/rb/doorkeeper.svg)](https://rubygems.org/gems/doorkeeper)
+[![CI](https://github.com/doorkeeper-gem/doorkeeper/actions/workflows/ci.yml/badge.svg)](https://github.com/doorkeeper-gem/doorkeeper/actions/workflows/ci.yml)
+[![Maintainability](https://qlty.sh/gh/doorkeeper-gem/projects/doorkeeper/maintainability.svg)](https://qlty.sh/gh/doorkeeper-gem/projects/doorkeeper)
+[![Coverage Status](https://coveralls.io/repos/github/doorkeeper-gem/doorkeeper/badge.svg?branch=main)](https://coveralls.io/github/doorkeeper-gem/doorkeeper?branch=main)
+[![GuardRails badge](https://api.guardrails.io/v2/badges/21183?token=66768ce8f6995814df81f65a2cff40f739f688492704f973e62809e15599bb62)](https://dashboard.guardrails.io/gh/doorkeeper-gem/repos/21183)
+[![Dependabot](https://img.shields.io/badge/dependabot-enabled-success.svg)](https://dependabot.com)
+
+Doorkeeper is a gem (Rails engine) that makes it easy to introduce OAuth 2 provider
+functionality to your Ruby on Rails or Grape application.
+
+Supported features:
+
+- [The OAuth 2.0 Authorization Framework](https://datatracker.ietf.org/doc/html/rfc6749)
+  - [Authorization Code Flow](https://datatracker.ietf.org/doc/html/rfc6749#section-4.1)
+  - [Access Token Scopes](https://datatracker.ietf.org/doc/html/rfc6749#section-3.3)
+  - [Refresh token](https://datatracker.ietf.org/doc/html/rfc6749#section-1.5)
+  - [Implicit grant](https://datatracker.ietf.org/doc/html/rfc6749#section-4.2)
+  - [Resource Owner Password Credentials](https://datatracker.ietf.org/doc/html/rfc6749#section-4.3)
+  - [Client Credentials](https://datatracker.ietf.org/doc/html/rfc6749#section-4.4)
+- [OAuth 2.0 Token Revocation](https://datatracker.ietf.org/doc/html/rfc7009)
+- [OAuth 2.0 Token Introspection](https://datatracker.ietf.org/doc/html/rfc7662)
+- [OAuth 2.0 Threat Model and Security Considerations](https://datatracker.ietf.org/doc/html/rfc6819)
+- [OAuth 2.0 for Native Apps](https://datatracker.ietf.org/doc/html/rfc8252)
+- [Proof Key for Code Exchange by OAuth Public Clients](https://datatracker.ietf.org/doc/html/rfc7636)
+
+## Table of Contents
+
+<!-- START doctoc generated TOC please keep comment here to allow auto update -->
+<!-- DON'T EDIT THIS SECTION, INSTEAD RE-RUN doctoc TO UPDATE -->
+
+
+- [Documentation](#documentation)
+- [Installation](#installation)
+  - [Ruby on Rails](#ruby-on-rails)
+  - [Grape](#grape)
+- [ORMs](#orms)
+- [Extensions](#extensions)
+- [Example Applications](#example-applications)
+- [Sponsors](#sponsors)
+- [Development](#development)
+- [Contributing](#contributing)
+- [Contributors](#contributors)
+- [License](#license)
+
+<!-- END doctoc generated TOC please keep comment here to allow auto update -->
+
+## Documentation
+
+This documentation is valid for `main` branch. Please check the documentation for the version of doorkeeper you are using in:
+https://github.com/doorkeeper-gem/doorkeeper/releases.
+
+Additionally, other resources can be found on:
+
+- [Guides](https://doorkeeper.gitbook.io/guides/) with how-to get started and configuration documentation
+- See the [Wiki](https://github.com/doorkeeper-gem/doorkeeper/wiki) for articles on how to integrate with other solutions
+- Screencast from [railscasts.com](http://railscasts.com/): [#353
+OAuth with
+Doorkeeper](http://railscasts.com/episodes/353-oauth-with-doorkeeper)
+- See [upgrade guides](https://github.com/doorkeeper-gem/doorkeeper/wiki/Migration-from-old-versions)
+- For general questions, please post on [Stack Overflow](http://stackoverflow.com/questions/tagged/doorkeeper)
+- See [SECURITY.md](SECURITY.md) for this project's security disclose
+  policy
+
+## Installation
+
+Installation depends on the framework you're using. The first step is to add the following to your Gemfile:
+
+```ruby
+gem 'doorkeeper'
+```
+
+And run `bundle install`. After this, check out the guide related to the framework you're using.
+
+### Ruby on Rails
+
+Doorkeeper currently supports Ruby on Rails >= 5.0. See the guide [here](https://doorkeeper.gitbook.io/guides/ruby-on-rails/getting-started).
+
+### Grape
+
+Guide for integration with Grape framework can be found [here](https://doorkeeper.gitbook.io/guides/grape/grape).
+
+## ORMs
+
+Doorkeeper supports Active Record by default, but can be configured to work with the following ORMs:
+
+| ORM | Support via |
+| :--- | :--- |
+| Active Record | by default |
+| MongoDB | [doorkeeper-gem/doorkeeper-mongodb](https://github.com/doorkeeper-gem/doorkeeper-mongodb) |
+| Sequel | [nbulaj/doorkeeper-sequel](https://github.com/nbulaj/doorkeeper-sequel) |
+| Couchbase | [acaprojects/doorkeeper-couchbase](https://github.com/acaprojects/doorkeeper-couchbase) |
+| RethinkDB | [aca-labs/doorkeeper-rethinkdb](https://github.com/aca-labs/doorkeeper-rethinkdb) |
+
+## Extensions
+
+Extensions that are not included by default and can be installed separately.
+
+|  | Link |
+| :--- | :--- |
+| OpenID Connect extension | [doorkeeper-gem/doorkeeper-openid\_connect](https://github.com/doorkeeper-gem/doorkeeper-openid_connect) |
+| JWT Token support | [doorkeeper-gem/doorkeeper-jwt](https://github.com/doorkeeper-gem/doorkeeper-jwt) |
+| Assertion grant extension | [doorkeeper-gem/doorkeeper-grants\_assertion](https://github.com/doorkeeper-gem/doorkeeper-grants_assertion) |
+| I18n translations | [doorkeeper-gem/doorkeeper-i18n](https://github.com/doorkeeper-gem/doorkeeper-i18n) |
+| CIBA - Client Initiated Backchannel Authentication Flow extension | [doorkeeper-ciba](https://github.com/autoseg/doorkeeper-ciba) |
+| Device Authorization Grant | [doorkeeper-device_authorization_grant](https://github.com/exop-group/doorkeeper-device_authorization_grant) |
+
+## Example Applications
+
+These applications show how Doorkeeper works and how to integrate with it. Start with the oAuth2 server and use the clients to connect with the server.
+
+| Application | Link |
+| :--- | :--- |
+| OAuth2 Server with Doorkeeper | [doorkeeper-gem/doorkeeper-provider-app](https://github.com/doorkeeper-gem/doorkeeper-provider-app) |
+| Sinatra Client connected to Provider App | [doorkeeper-gem/doorkeeper-sinatra-client](https://github.com/doorkeeper-gem/doorkeeper-sinatra-client) |
+| Devise + Omniauth Client | [doorkeeper-gem/doorkeeper-devise-client](https://github.com/doorkeeper-gem/doorkeeper-devise-client) |
+
+You may want to create a client application to
+test the integration. Check out these [client
+examples](https://github.com/doorkeeper-gem/doorkeeper/wiki/Example-Applications)
+in our wiki or follow this [tutorial
+here](https://github.com/doorkeeper-gem/doorkeeper/wiki/Testing-your-provider-with-OAuth2-gem).
+
+## Sponsors
+
+[![OpenCollective](https://opencollective.com/doorkeeper-gem/backers/badge.svg)](#backers) 
+[![OpenCollective](https://opencollective.com/doorkeeper-gem/sponsors/badge.svg)](#sponsors)
+
+Support this project by becoming a sponsor. Your logo will show up here with a link to your website. [[Become a sponsor](https://opencollective.com/doorkeeper-gem#sponsor)]
+
+<a href="https://codecademy.com/about/careers?utm_source=doorkeeper-gem" target="_blank"><img src="https://static-assets.codecademy.com/marketing/codecademy_logo_padded.png"/></a>
+
+> Codecademy supports open source as part of its mission to democratize tech. Come help us build the education the world deserves: [https://codecademy.com/about/careers](https://codecademy.com/about/careers?utm_source=doorkeeper-gem)
+
+<br>
+
+<a href="https://oauth.io/?utm_source=doorkeeper-gem" target="_blank"><img src="https://oauth.io/img/logo_text.png"/></a>
+
+> If you prefer not to deal with the gory details of OAuth 2, need dedicated customer support & consulting, try the cloud-based SaaS version: [https://oauth.io](https://oauth.io/?utm_source=doorkeeper-gem)
+
+<br>
+
+<a href="https://www.wealthsimple.com/?utm_source=doorkeeper-gem" target="_blank"><img src="https://wealthsimple.s3.amazonaws.com/branding/medium-black.svg"/></a>
+
+> Wealthsimple is a financial company on a mission to help everyone achieve financial freedom by providing products and advice that are accessible and affordable. Using smart technology, Wealthsimple takes financial services that are often confusing, opaque and expensive and makes them simple, transparent, and low-cost. See what Investing on Autopilot is all about: [https://www.wealthsimple.com](https://www.wealthsimple.com/?utm_source=doorkeeper-gem)
+
+## Development
+
+To run the local engine server:
+
+```
+bundle install
+bundle exec rake doorkeeper:server
+````
+
+By default, it uses the latest Rails version with ActiveRecord. To run the
+tests with a specific Rails version:
+
+```
+BUNDLE_GEMFILE=gemfiles/rails_6_0.gemfile bundle exec rake
+```
+
+You can also experiment with the changes using `bin/console`. It uses in-memory SQLite database and default
+Doorkeeper config, but you can reestablish connection or reconfigure the gem if you need.
+
+## Contributing
+
+Want to contribute and don't know where to start? Check out [features we're
+missing](https://github.com/doorkeeper-gem/doorkeeper/wiki/Supported-Features),
+create [example
+apps](https://github.com/doorkeeper-gem/doorkeeper/wiki/Example-Applications),
+integrate the gem with your app and let us know!
+
+Also, check out our [contributing guidelines page](CONTRIBUTING.md).
+
+## Contributors
+
+Thanks to all our [awesome
+contributors](https://github.com/doorkeeper-gem/doorkeeper/graphs/contributors)!
+
+<a href="https://github.com/doorkeeper-gem/doorkeeper/graphs/contributors"><img src="https://opencollective.com/doorkeeper-gem/contributors.svg?width=890&button=false" /></a>
+
+## License
+
+MIT License. Created in Applicake. Maintained by the community.

data/doorkeeper-5.9.3/app/assets/stylesheets/doorkeeper/admin/application.css

@@ -0,0 +1,10 @@
+/*
+ *= require doorkeeper/bootstrap.min
+ *
+ *= require_self
+ *= require_tree .
+*/
+
+.doorkeeper-admin .form-group > .field_with_errors {
+  width: 16.66667%;
+}

data/doorkeeper-5.9.3/app/assets/stylesheets/doorkeeper/application.css

@@ -0,0 +1,64 @@
+/*
+ *= require doorkeeper/bootstrap.min
+ *
+ *= require_self
+ *= require_tree .
+*/
+
+body {
+    background-color: #eee;
+    font-size: 14px;
+}
+
+#container {
+    background-color: #fff;
+    border: 1px solid #999;
+    border: 1px solid rgba(0, 0, 0, 0.2);
+    border-radius: 6px;
+    -webkit-box-shadow: 0 3px 9px rgba(0, 0, 0, 0.5);
+    box-shadow: 0 3px 20px rgba(0, 0, 0, 0.3);
+    margin: 2em auto;
+    max-width: 600px;
+    outline: 0;
+    padding: 1em;
+    width: 80%;
+}
+
+.page-header {
+    margin-top: 20px;
+}
+
+#oauth-permissions {
+    width: 260px;
+}
+
+.actions {
+    border-top: 1px solid #eee;
+    margin-top: 1em;
+    padding-top: 9px;
+}
+
+.actions > form > .btn {
+    margin-top: 5px;
+}
+
+.separator {
+    color: #eee;
+    padding: 0 .5em;
+}
+
+.inline_block {
+    display: inline-block;
+}
+
+#oauth {
+    margin-bottom: 1em;
+}
+
+#oauth > .btn {
+    width: 7em;
+}
+
+td {
+    vertical-align: middle !important;
+}

data/doorkeeper-5.9.3/app/controllers/doorkeeper/application_controller.rb

@@ -0,0 +1,14 @@
+# frozen_string_literal: true
+
+module Doorkeeper
+  class ApplicationController <
+    Doorkeeper.config.resolve_controller(:base)
+    include Helpers::Controller
+    include ActionController::MimeResponds if Doorkeeper.config.api_only
+
+    unless Doorkeeper.config.api_only
+      protect_from_forgery with: :exception
+      helper "doorkeeper/dashboard"
+    end
+  end
+end

data/doorkeeper-5.9.3/app/controllers/doorkeeper/application_metal_controller.rb

@@ -0,0 +1,13 @@
+# frozen_string_literal: true
+
+module Doorkeeper
+  class ApplicationMetalController <
+    Doorkeeper.config.resolve_controller(:base_metal)
+    include Helpers::Controller
+
+    before_action :enforce_content_type,
+                  if: -> { Doorkeeper.config.enforce_content_type }
+
+    ActiveSupport.run_load_hooks(:doorkeeper_metal_controller, self)
+  end
+end

data/doorkeeper-5.9.3/app/controllers/doorkeeper/applications_controller.rb

@@ -0,0 +1,99 @@
+# frozen_string_literal: true
+
+module Doorkeeper
+  class ApplicationsController < Doorkeeper::ApplicationController
+    layout "doorkeeper/admin" unless Doorkeeper.configuration.api_only
+
+    before_action :authenticate_admin!
+    before_action :set_application, only: %i[show edit update destroy]
+
+    def index
+      @applications = Doorkeeper.config.application_model.ordered_by(:created_at)
+
+      respond_to do |format|
+        format.html
+        format.json { head :no_content }
+      end
+    end
+
+    def show
+      respond_to do |format|
+        format.html
+        format.json { render json: @application, as_owner: true }
+      end
+    end
+
+    def new
+      @application = Doorkeeper.config.application_model.new
+    end
+
+    def create
+      @application = Doorkeeper.config.application_model.new(application_params)
+
+      if @application.save
+        flash[:notice] = I18n.t(:notice, scope: %i[doorkeeper flash applications create])
+        flash[:application_secret] = @application.plaintext_secret
+
+        respond_to do |format|
+          format.html { redirect_to oauth_application_url(@application) }
+          format.json { render json: @application, as_owner: true }
+        end
+      else
+        respond_to do |format|
+          format.html { render :new }
+          format.json do
+            errors = @application.errors.full_messages
+
+            render json: { errors: errors }, status: :unprocessable_entity
+          end
+        end
+      end
+    end
+
+    def edit; end
+
+    def update
+      if @application.update(application_params)
+        flash[:notice] = I18n.t(:notice, scope: i18n_scope(:update))
+
+        respond_to do |format|
+          format.html { redirect_to oauth_application_url(@application) }
+          format.json { render json: @application, as_owner: true }
+        end
+      else
+        respond_to do |format|
+          format.html { render :edit }
+          format.json do
+            errors = @application.errors.full_messages
+
+            render json: { errors: errors }, status: :unprocessable_entity
+          end
+        end
+      end
+    end
+
+    def destroy
+      flash[:notice] = I18n.t(:notice, scope: i18n_scope(:destroy)) if @application.destroy
+
+      respond_to do |format|
+        format.html { redirect_to oauth_applications_url }
+        format.json { head :no_content }
+      end
+    end
+
+    private
+
+    def set_application
+      @application = Doorkeeper.config.application_model.find(params[:id])
+    end
+
+    def application_params
+      params.require(:doorkeeper_application)
+        .permit(:name, :redirect_uri, :scopes, :confidential)
+    end
+
+    def i18n_scope(action)
+      %i[doorkeeper flash applications] << action
+    end
+  end
+end

data/doorkeeper-5.9.3/app/controllers/doorkeeper/authorizations_controller.rb

@@ -0,0 +1,164 @@
+# frozen_string_literal: true
+
+module Doorkeeper
+  class AuthorizationsController < Doorkeeper::ApplicationController
+    before_action :authenticate_resource_owner!
+
+    def new
+      if pre_auth.authorizable?
+        render_success
+      else
+        render_error
+      end
+    end
+
+    def create
+      redirect_or_render(authorize_response)
+    end
+
+    def destroy
+      redirect_or_render(authorization.deny)
+    rescue Doorkeeper::Errors::InvalidTokenStrategy => e
+      error_response = get_error_response_from_exception(e)
+
+      if Doorkeeper.configuration.api_only
+        render json: error_response.body, status: :bad_request
+      else
+        render :error, locals: { error_response: error_response }
+      end
+    end
+
+    private
+
+    def render_success
+      if skip_authorization? || can_authorize_response?
+        redirect_or_render(authorize_response)
+      elsif Doorkeeper.configuration.api_only
+        render json: pre_auth
+      else
+        render :new
+      end
+    end
+
+    def render_error
+      pre_auth.error_response.raise_exception! if Doorkeeper.config.raise_on_errors?
+
+      if Doorkeeper.configuration.redirect_on_errors? && pre_auth.error_response.redirectable?
+        redirect_or_render(pre_auth.error_response)
+      elsif Doorkeeper.configuration.api_only
+        render json: pre_auth.error_response.body, status: pre_auth.error_response.status
+      else
+        render :error, locals: { error_response: pre_auth.error_response }, status: pre_auth.error_response.status
+      end
+    end
+
+    def can_authorize_response?
+      Doorkeeper.config.custom_access_token_attributes.empty? && pre_auth.client.application.confidential? && matching_token?
+    end
+
+    # Active access token issued for the same client and resource owner with
+    # the same set of the scopes exists?
+    def matching_token?
+      # We don't match tokens on the custom attributes here - we're in the pre-auth here,
+      # so they haven't been supplied yet (there are no custom attributes to match on yet)
+      @matching_token ||= Doorkeeper.config.access_token_model.matching_token_for(
+        pre_auth.client,
+        current_resource_owner,
+        pre_auth.scopes,
+      )
+    end
+
+    def redirect_or_render(auth)
+      if auth.redirectable?
+        if Doorkeeper.configuration.api_only
+          if pre_auth.form_post_response?
+            render(
+              json: { status: :post, redirect_uri: pre_auth.redirect_uri, body: auth.body },
+              status: auth.status,
+            )
+          else
+            render(
+              json: { status: :redirect, redirect_uri: auth.redirect_uri },
+              status: auth.status,
+            )
+          end
+        elsif pre_auth.form_post_response?
+          render :form_post, locals: { auth: auth }
+        else
+          redirect_to auth.redirect_uri, allow_other_host: true
+        end
+      else
+        render json: auth.body, status: auth.status
+      end
+    end
+
+    def pre_auth
+      @pre_auth ||= OAuth::PreAuthorization.new(
+        Doorkeeper.configuration,
+        pre_auth_params,
+        current_resource_owner,
+      )
+    end
+
+    def pre_auth_params
+      params.slice(*pre_auth_param_fields).permit(*pre_auth_param_fields)
+    end
+
+    def pre_auth_param_fields
+      custom_access_token_attributes + %i[
+        client_id
+        code_challenge
+        code_challenge_method
+        response_type
+        response_mode
+        redirect_uri
+        scope
+        state
+      ]
+    end
+
+    def custom_access_token_attributes
+      Doorkeeper.config.custom_access_token_attributes.map(&:to_sym)
+    end
+
+    def authorization
+      @authorization ||= strategy.request
+    end
+
+    def strategy
+      @strategy ||= server.authorization_request(pre_auth.response_type)
+    end
+
+    def authorize_response
+      @authorize_response ||= begin
+        unless pre_auth.authorizable?
+          response = pre_auth.error_response
+          response.raise_exception! if Doorkeeper.config.raise_on_errors?
+          return response
+        end
+
+        context = build_context(pre_auth: pre_auth)
+        before_successful_authorization(context)
+
+        auth = strategy.authorize
+
+        context = build_context(auth: auth)
+        after_successful_authorization(context)
+
+        auth
+      end
+    end
+
+    def build_context(**attributes)
+      Doorkeeper::OAuth::Hooks::Context.new(**attributes)
+    end
+
+    def before_successful_authorization(context = nil)
+      Doorkeeper.config.before_successful_authorization.call(self, context)
+    end
+
+    def after_successful_authorization(context)
+      Doorkeeper.config.after_successful_authorization.call(self, context)
+    end
+  end
+end

data/doorkeeper-5.9.3/app/controllers/doorkeeper/authorized_applications_controller.rb

@@ -0,0 +1,33 @@
+# frozen_string_literal: true
+
+module Doorkeeper
+  class AuthorizedApplicationsController < Doorkeeper::ApplicationController
+    before_action :authenticate_resource_owner!
+
+    def index
+      @applications = Doorkeeper.config.application_model.authorized_for(current_resource_owner)
+
+      respond_to do |format|
+        format.html
+        format.json { render json: @applications, current_resource_owner: current_resource_owner }
+      end
+    end
+
+    def destroy
+      Doorkeeper.config.application_model.revoke_tokens_and_grants_for(
+        params[:id],
+        current_resource_owner,
+      )
+
+      respond_to do |format|
+        format.html do
+          redirect_to oauth_authorized_applications_url, notice: I18n.t(
+            :notice, scope: %i[doorkeeper flash authorized_applications destroy],
+          )
+        end
+
+        format.json { head :no_content }
+      end
+    end
+  end
+end

data/doorkeeper-5.9.3/app/controllers/doorkeeper/token_info_controller.rb

@@ -0,0 +1,25 @@
+# frozen_string_literal: true
+
+module Doorkeeper
+  class TokenInfoController < Doorkeeper::ApplicationMetalController
+    def show
+      if doorkeeper_token&.accessible?
+        render json: doorkeeper_token_to_json, status: :ok
+      else
+        error = OAuth::InvalidTokenResponse.new
+        response.headers.merge!(error.headers)
+        render json: error_to_json(error), status: error.status
+      end
+    end
+
+    protected
+
+    def doorkeeper_token_to_json
+      doorkeeper_token
+    end
+
+    def error_to_json(error)
+      error.body
+    end
+  end
+end