sutto-oauth 0.3.6

data/tasks/deployment.rake

@@ -0,0 +1,34 @@
+desc 'Release the website and new gem version'
+task :deploy => [:check_version, :website, :release] do
+  puts "Remember to create SVN tag:"
+  puts "svn copy svn+ssh://#{rubyforge_username}@rubyforge.org/var/svn/#{PATH}/trunk " +
+    "svn+ssh://#{rubyforge_username}@rubyforge.org/var/svn/#{PATH}/tags/REL-#{VERS} "
+  puts "Suggested comment:"
+  puts "Tagging release #{CHANGES}"
+end
+
+desc 'Runs tasks website_generate and install_gem as a local deployment of the gem'
+task :local_deploy => [:website_generate, :install_gem]
+
+task :check_version do
+  unless ENV['VERSION']
+    puts 'Must pass a VERSION=x.y.z release version'
+    exit
+  end
+  unless ENV['VERSION'] == VERS
+    puts "Please update your version.rb to match the release version, currently #{VERS}"
+    exit
+  end
+end
+
+desc 'Install the package as a gem, without generating documentation(ri/rdoc)'
+task :install_gem_no_doc => [:clean, :package] do
+  sh "#{'sudo ' unless Hoe::WINDOZE }gem install pkg/*.gem --no-rdoc --no-ri"
+end
+
+namespace :manifest do
+  desc 'Recreate Manifest.txt to include ALL files'
+  task :refresh do
+    `rake check_manifest | patch -p0 > Manifest.txt`
+  end
+end

data/tasks/environment.rake

@@ -0,0 +1,7 @@
+task :ruby_env do
+  RUBY_APP = if RUBY_PLATFORM =~ /java/
+    "jruby"
+  else
+    "ruby"
+  end unless defined? RUBY_APP
+end

data/tasks/website.rake

@@ -0,0 +1,17 @@
+desc 'Generate website files'
+task :website_generate => :ruby_env do
+  (Dir['website/**/*.txt'] - Dir['website/version*.txt']).each do |txt|
+    sh %{ #{RUBY_APP} script/txt2html #{txt} > #{txt.gsub(/txt$/,'html')} }
+  end
+end
+
+desc 'Upload website files to rubyforge'
+task :website_upload do
+  host = "#{rubyforge_username}@rubyforge.org"
+  remote_dir = "/var/www/gforge-projects/#{PATH}/"
+  local_dir = 'website'
+  sh %{rsync -aCv #{local_dir}/ #{host}:#{remote_dir}}
+end
+
+desc 'Generate and upload website files'
+task :website => [:website_generate, :website_upload, :publish_docs]

data/test/cases/oauth_case.rb

@@ -0,0 +1,19 @@
+require 'test/unit'
+require 'oauth/signature'
+require 'oauth/request_proxy/mock_request'
+
+
+class OAuthCase < Test::Unit::TestCase
+  # avoid whining about a lack of tests
+  def run(*args)
+    return if @method_name.to_s == "default_test"
+    super
+  end
+  
+  protected
+  
+  # Creates a fake request
+  def request(params={},method='GET',uri="http://photos.example.net/photos")
+    OAuth::RequestProxy.proxy({'parameters'=>params,'method'=>method,'uri'=>uri})
+  end
+end

data/test/cases/spec/1_0-final/test_construct_request_url.rb

@@ -0,0 +1,62 @@
+require File.dirname(__FILE__) + '/../../oauth_case'
+
+# See http://oauth.net/core/1.0/#anchor14
+#
+#9.1.2.  Construct Request URL
+#
+#The Signature Base String includes the request absolute URL, tying the signature to a specific endpoint. The URL used in the Signature Base String MUST include the scheme, authority, and path, and MUST exclude the query and fragment as defined by [RFC3986] section 3.
+#
+#If the absolute request URL is not available to the Service Provider (it is always available to the Consumer), it can be constructed by combining the scheme being used, the HTTP Host header, and the relative HTTP request URL. If the Host header is not available, the Service Provider SHOULD use the host name communicated to the Consumer in the documentation or other means.
+#
+#The Service Provider SHOULD document the form of URL used in the Signature Base String to avoid ambiguity due to URL normalization. Unless specified, URL scheme and authority MUST be lowercase and include the port number; http default port 80 and https default port 443 MUST be excluded.
+#
+#For example, the request:
+#
+#                HTTP://Example.com:80/resource?id=123
+#Is included in the Signature Base String as:
+#
+#                http://example.com/resource
+
+
+class ConstructRequestUrlTest < OAuthCase
+  
+  def test_from_spec
+    assert_request_url("http://example.com/resource","HTTP://Example.com:80/resource?id=123")
+  end
+  
+  def test_simple_url_with_ending_slash
+    assert_request_url("http://example.com/","http://example.com/")
+  end
+
+  def test_simple_url_without_ending_slash
+    assert_request_url("http://example.com/","http://example.com")
+  end
+  
+  def test_of_normalized_http
+    assert_request_url("http://example.com/resource","http://example.com/resource")
+  end
+
+  def test_of_https
+    assert_request_url("https://example.com/resource","HTTPS://Example.com:443/resource?id=123")
+  end
+
+  def test_of_normalized_https
+    assert_request_url("https://example.com/resource","https://example.com/resource")
+  end
+  
+  def test_of_http_with_non_standard_port
+    assert_request_url("http://example.com:8080/resource","http://example.com:8080/resource")
+  end
+  
+  def test_of_https_with_non_standard_port
+    assert_request_url("https://example.com:8080/resource","https://example.com:8080/resource")
+  end
+  
+  protected
+  
+  
+  def assert_request_url(expected,given,message=nil)
+    assert_equal expected, request({},'GET',given).normalized_uri, message
+  end
+  
+end

data/test/cases/spec/1_0-final/test_normalize_request_parameters.rb

@@ -0,0 +1,88 @@
+require File.dirname(__FILE__) + '/../../oauth_case'
+
+# See http://oauth.net/core/1.0/#anchor14
+#
+# 9.1.1.  Normalize Request Parameters
+# 
+# The request parameters are collected, sorted and concatenated into a normalized string:
+# 
+# Parameters in the OAuth HTTP Authorization header excluding the realm parameter.
+# Parameters in the HTTP POST request body (with a content-type of application/x-www-form-urlencoded).
+# HTTP GET parameters added to the URLs in the query part (as defined by [RFC3986] section 3).
+# The oauth_signature parameter MUST be excluded.
+# 
+# The parameters are normalized into a single string as follows:
+# 
+# Parameters are sorted by name, using lexicographical byte value ordering. 
+# If two or more parameters share the same name, they are sorted by their value. For example:
+#
+#   a=1, c=hi%20there, f=25, f=50, f=a, z=p, z=t
+# Parameters are concatenated in their sorted order into a single string. For each parameter, 
+# the name is separated from the corresponding value by an ‘=’ character (ASCII code 61), even 
+# if the value is empty. Each name-value pair is separated by an ‘&’ character (ASCII code 38). For example:
+#   a=1&c=hi%20there&f=25&f=50&f=a&z=p&z=t
+# 
+
+
+class NormalizeRequestParametersTest < OAuthCase
+  
+  def test_parameters_for_signature
+    params={'a'=>1, 'c'=>'hi there', 'f'=>'25', 'f'=>'50', 'f'=>'a', 'z'=>'p', 'z'=>'t'}
+    assert_equal params,request(params).parameters_for_signature
+  end
+
+
+  def test_parameters_for_signature_removes_oauth_signature
+    params={'a'=>1, 'c'=>'hi there', 'f'=>'25', 'f'=>'50', 'f'=>'a', 'z'=>'p', 'z'=>'t'}
+    assert_equal params,request(params.merge({'oauth_signature'=>'blalbla'})).parameters_for_signature
+  end
+  
+  def test_spec_example
+    assert_normalized 'a=1&c=hi%20there&f=25&f=50&f=a&z=p&z=t', { 'a' => 1, 'c' => 'hi there', 'f' => ['25', '50', 'a'], 'z' => ['p', 't'] }
+  end
+
+  def test_sorts_parameters_correctly
+    # values for 'f' are scrambled
+    assert_normalized 'a=1&c=hi%20there&f=5&f=70&f=a&z=p&z=t', { 'a' => 1, 'c' => 'hi there', 'f' => ['a', '70', '5'], 'z' => ['p', 't'] }
+  end
+
+  def test_empty
+    assert_normalized "",{}
+  end
+  
+  
+  # These are from the wiki http://wiki.oauth.net/TestCases
+  # in the section Normalize Request Parameters
+  # Parameters have already been x-www-form-urlencoded (i.e. + = <space>)
+  def test_wiki1
+    assert_normalized "name=",{"name"=>nil}
+  end
+  
+  def test_wiki2
+    assert_normalized "a=b",{'a'=>'b'}
+  end
+  
+  def test_wiki3
+    assert_normalized "a=b&c=d",{'a'=>'b','c'=>'d'}
+  end
+  
+  def test_wiki4
+    assert_normalized "a=x%20y&a=x%21y",{'a'=>["x!y","x y"]}
+    
+  end
+
+  def test_wiki5
+    assert_normalized "x=a&x%21y=a",{"x!y"=>'a','x'=>'a'}
+  end
+
+  protected
+  
+  
+  def assert_normalized(expected,params,message=nil)
+    assert_equal expected, normalize_request_parameters(params), message
+  end
+  
+  def normalize_request_parameters(params={})
+    request(params).normalized_parameters
+  end
+end

data/test/cases/spec/1_0-final/test_parameter_encodings.rb

@@ -0,0 +1,86 @@
+require File.dirname(__FILE__) + '/../../oauth_case'
+
+# See http://oauth.net/core/1.0/#encoding_parameters
+#
+# 5.1.  Parameter Encoding
+# 
+# All parameter names and values are escaped using the [RFC3986] percent-encoding (%xx) mechanism. 
+# Characters not in the unreserved character set ([RFC3986] section 2.3) MUST be encoded. Characters 
+# in the unreserved character set MUST NOT be encoded. Hexadecimal characters in encodings MUST be 
+# upper case. Text names and values MUST be encoded as UTF-8 octets before percent-encoding them per [RFC3629].
+# 
+#   unreserved = ALPHA, DIGIT, '-', '.', '_', '~'
+# 
+
+class ParameterEncodingTest < OAuthCase
+  def test_encodings_alpha_num
+    assert_encoding 'abcABC123', 'abcABC123'
+  end
+
+  def test_encodings_non_escaped
+    assert_encoding '-._~', '-._~'
+  end
+
+  def test_encodings_percent
+    assert_encoding '%25', '%'
+  end
+
+  def test_encodings_plus
+    assert_encoding '%2B', '+'
+  end
+
+  def test_encodings_space
+    assert_encoding '%20', ' '
+  end
+
+  def test_encodings_query_param_symbols
+    assert_encoding '%26%3D%2A', '&=*'
+  end
+
+  def test_encodings_unicode_lf
+    assert_encoding '%0A', unicode_to_utf8('U+000A')
+  end
+
+  def test_encodings_unicode_space
+    assert_encoding '%20', unicode_to_utf8('U+0020')
+  end
+
+  def test_encodings_unicode_007f
+    assert_encoding '%7F', unicode_to_utf8('U+007F')
+  end
+
+  def test_encodings_unicode_0080
+    assert_encoding '%C2%80', unicode_to_utf8('U+0080')
+  end
+
+  def test_encoding_unicode_2708
+    assert_encoding '%E2%9C%88', unicode_to_utf8('U+2708')
+  end
+
+  def test_encodings_unicode_3001
+    assert_encoding '%E3%80%81', unicode_to_utf8('U+3001')
+  end
+
+protected
+
+  def unicode_to_utf8(unicode)
+    return unicode if unicode =~ /\A[[:space:]]*\z/m
+
+    str = ''
+
+    unicode.scan(/(U\+(?:[[:digit:][:xdigit:]]{4,5}|10[[:digit:][:xdigit:]]{4})|.)/mu) do
+      c = $1
+      if c =~ /^U\+/
+        str << [c[2..-1].hex].pack('U*')
+      else
+        str << c
+      end
+    end
+
+    str
+  end
+
+  def assert_encoding(expected, given, message = nil)
+    assert_equal expected, OAuth::Helper.escape(given), message
+  end
+end

data/test/cases/spec/1_0-final/test_signature_base_strings.rb

@@ -0,0 +1,77 @@
+require File.dirname(__FILE__) + '/../../oauth_case'
+
+# See http://oauth.net/core/1.0/#anchor14
+#
+# 9.1.  Signature Base String
+# 
+# The Signature Base String is a consistent reproducible concatenation of the request elements
+# into a single string. The string is used as an input in hashing or signing algorithms. The 
+# HMAC-SHA1 signature method provides both a standard and an example of using the Signature 
+# Base String with a signing algorithm to generate signatures. All the request parameters MUST 
+# be encoded as described in Parameter Encoding prior to constructing the Signature Base String.
+# 
+
+class SignatureBaseStringTest < OAuthCase
+  
+  def test_A_5_1
+    parameters={ 
+      'oauth_consumer_key'=>'dpf43f3p2l4k3l03',
+      'oauth_token'=>'nnch734d00sl2jdk',
+      'oauth_signature_method'=>'HMAC-SHA1',
+      'oauth_timestamp'=>'1191242096',
+      'oauth_nonce'=>'kllo9940pd9333jh',
+      'oauth_version'=>'1.0',
+      'file'=>'vacation.jpg',
+      'size'=>'original'
+    }
+    sbs='GET&http%3A%2F%2Fphotos.example.net%2Fphotos&file%3Dvacation.jpg%26oauth_consumer_key%3Ddpf43f3p2l4k3l03%26oauth_nonce%3Dkllo9940pd9333jh%26oauth_signature_method%3DHMAC-SHA1%26oauth_timestamp%3D1191242096%26oauth_token%3Dnnch734d00sl2jdk%26oauth_version%3D1.0%26size%3Doriginal'
+    
+    assert_signature_base_string sbs,parameters,'GET',"http://photos.example.net/photos"
+  end
+  
+  # These are from the wiki http://wiki.oauth.net/TestCases
+  # in the section Concatenate Test Elements
+  
+  def test_wiki_1_simple_with_ending_slash
+    parameters={ 
+      'n'=>'v'
+    }
+    sbs='GET&http%3A%2F%2Fexample.com%2F&n%3Dv'
+    
+    assert_signature_base_string sbs,parameters,'GET',"http://example.com/"
+  end
+
+  
+  def test_wiki_2_simple_without_ending_slash
+    parameters={ 
+      'n'=>'v'
+    }
+    sbs='GET&http%3A%2F%2Fexample.com%2F&n%3Dv'
+    
+    assert_signature_base_string sbs,parameters,'GET',"http://example.com"
+  end
+
+  def test_wiki_2_request_token
+    parameters={ 
+'oauth_version'=>'1.0',
+'oauth_consumer_key'=>'dpf43f3p2l4k3l03',
+'oauth_timestamp'=>'1191242090',
+'oauth_nonce'=>'hsu94j3884jdopsl',
+'oauth_signature_method'=>'PLAINTEXT',
+'oauth_signature'=>'ignored'    }
+    sbs='POST&https%3A%2F%2Fphotos.example.net%2Frequest_token&oauth_consumer_key%3Ddpf43f3p2l4k3l03%26oauth_nonce%3Dhsu94j3884jdopsl%26oauth_signature_method%3DPLAINTEXT%26oauth_timestamp%3D1191242090%26oauth_version%3D1.0'
+    
+    assert_signature_base_string sbs,parameters,'POST',"https://photos.example.net/request_token"
+  end
+  
+  protected
+  
+  
+  def assert_signature_base_string(expected,params={},method='GET',uri="http://photos.example.net/photos",message="Signature Base String does not match")
+    assert_equal expected, signature_base_string(params,method,uri), message
+  end
+  
+  def signature_base_string(params={},method='GET',uri="http://photos.example.net/photos")
+    request(params,method,uri).signature_base_string
+  end
+end

data/test/keys/rsa.cert

@@ -0,0 +1,11 @@
+-----BEGIN CERTIFICATE-----
+MIIBpjCCAQ+gAwIBAgIBATANBgkqhkiG9w0BAQUFADAZMRcwFQYDVQQDDA5UZXN0
+IFByaW5jaXBhbDAeFw03MDAxMDEwODAwMDBaFw0zODEyMzEwODAwMDBaMBkxFzAV
+BgNVBAMMDlRlc3QgUHJpbmNpcGFsMIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKB
+gQC0YjCwIfYoprq/FQO6lb3asXrxLlJFuCvtinTF5p0GxvQGu5O3gYytUvtC2JlY
+zypSRjVxwxrsuRcP3e641SdASwfrmzyvIgP08N4S0IFzEURkV1wp/IpH7kH41Etb
+mUmrXSwfNZsnQRE5SYSOhh+LcK2wyQkdgcMv11l4KoBkcwIDAQABMA0GCSqGSIb3
+DQEBBQUAA4GBAGZLPEuJ5SiJ2ryq+CmEGOXfvlTtEL2nuGtr9PewxkgnOjZpUy+d
+4TvuXJbNQc8f4AMWL/tO9w0Fk80rWKp9ea8/df4qMq5qlFWlx6yOLQxumNOmECKb
+WpkUQDIDJEoFUzKMVuJf4KO/FJ345+BNLGgbJ6WujreoM1X/gYfdnJ/J
+-----END CERTIFICATE-----

data/test/keys/rsa.pem

@@ -0,0 +1,16 @@
+-----BEGIN PRIVATE KEY-----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+-----END PRIVATE KEY-----

data/test/test_access_token.rb

@@ -0,0 +1,26 @@
+require File.dirname(__FILE__) + '/test_helper.rb'
+
+class TestAccessToken < Test::Unit::TestCase
+  def setup
+    @fake_response = {
+      :user_id => 5734758743895,
+      :oauth_token => "key",
+      :oauth_token_secret => "secret"
+    }
+    # setup a fake req. token. mocking Consumer would be more appropriate...
+    @access_token = OAuth::AccessToken.from_hash(
+      OAuth::Consumer.new("key", "secret", {}),
+      @fake_response
+    )
+  end
+
+  def test_provides_response_parameters
+    assert @access_token
+    assert_respond_to @access_token, :params
+  end
+
+  def test_access_token_makes_non_oauth_response_params_available
+    assert_not_nil @access_token.params[:user_id]
+    assert_equal 5734758743895, @access_token.params[:user_id]
+  end
+end