warden-token 0.1.0

checksums.yaml

@@ -0,0 +1,7 @@
+---
+SHA1:
+  metadata.gz: 3f99beec06cfd70365a863bf69731157dd11b393
+  data.tar.gz: 75f43189603c58adc8c4ce3313e555e292216fbf
+SHA512:
+  metadata.gz: 1a3de0d3196adc741c9b57d397713096001b6c904e1656879803155b86c40583e868dc0ad763f00d6de4ca47aa9c8b24ec67b70b513bd0656f987bdc0aa27b69
+  data.tar.gz: 25ac2f839f2fbb21a731f3f1a55ff78b540610f132bed1f36266c5aa6631d0218e9514a0156d8ecff759b039d647e51f4266b141efa61846aaac45405b75f592

data/LICENSE

@@ -0,0 +1,20 @@
+Copyright 2014 Tyler Margison
+
+Permission is hereby granted, free of charge, to any person obtaining
+a copy of this software and associated documentation files (the
+"Software"), to deal in the Software without restriction, including
+without limitation the rights to use, copy, modify, merge, publish,
+distribute, sublicense, and/or sell copies of the Software, and to
+permit persons to whom the Software is furnished to do so, subject to
+the following conditions:
+
+The above copyright notice and this permission notice shall be
+included in all copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND,
+EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF
+MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND
+NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE
+LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION
+OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION
+WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.

data/README.md

@@ -0,0 +1,32 @@
+# Warden Token Strategy
+
+## Introduction
+
+This is a simple token authentication strategy for
+[Warden](https://github.com/hassox/warden). It's not very secure and I wouldn't
+use it long-term in production, but if you want a simple API-like means of
+authenticating a user with each request, this is a decent way to do it.
+
+It makes a couple of assumptions on parameter naming and such, but I plan to
+eventually include configuration capabilities, such that you can create an
+initiailizer or something and override the parameter names with custom ones.
+
+## Setup
+
+Pretty easy if you use bundler:
+
+```ruby
+gem "warden-token"
+```
+
+Or if you use RubyGems:
+
+    gem install warden-token
+
+Then `require "warden/strategies/token"` in your project code (or your Gemfile)
+and add it to the Warden strategies collection as such:
+
+    Warden::Strategies.add(:token, Warden::Strategies::Token)
+
+Now you may authenticate using the strategy name `:token`, but you can change
+that part to whatever you'd like.

data/lib/warden/strategies/token.rb

@@ -0,0 +1,44 @@
+require "warden"
+
+class Warden::Strategies::Token < ::Warden::Strategies::Base
+  VERSION = "0.1.0"
+
+  attr_reader :id, :token
+
+  def initialize(env, scope=nil)
+    super
+
+    if request.authorization && request.authorization =~ /^Basic (.*)$/m
+      @id, @token = Base64.decode64($1).split(/:/, 2)
+    else
+      @id, @token = params[:user_id], params[:token]
+    end
+  end
+
+  def valid?
+    id && token
+  end
+
+  def authenticate!
+    user = User.where(id: id).first
+    if user && Token.secure_compare(user.auth_token)
+      success!(user)
+    else
+      fail!("Invalid user id or token")
+    end
+  end
+
+  private
+
+  # Taken from [Devise](https://github.com/plataformatec/devise).
+  # constant-time comparison algorithm to prevent timing attacks
+  def secure_compare(a)
+    b = token
+    return false if a.blank? || b.blank? || a.bytesize != b.bytesize
+    l = a.unpack "C#{a.bytesize}"
+
+    res = 0
+    b.each_byte { |byte| res |= byte ^ l.shift  }
+    res == 0
+  end
+end

metadata

@@ -0,0 +1,63 @@
+--- !ruby/object:Gem::Specification
+name: warden-token
+version: !ruby/object:Gem::Version
+  version: 0.1.0
+platform: ruby
+authors:
+- Tyler Margison
+autorequire: 
+bindir: bin
+cert_chain: []
+date: 2014-09-06 00:00:00.000000000 Z
+dependencies:
+- !ruby/object:Gem::Dependency
+  name: warden
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '1.2'
+  type: :runtime
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '1.2'
+description: Simple token authentication strategy for Warden. Not necessarily secure
+  or powerful, this is for simple token-based authentication like what you might need
+  for an API project.
+email: kolorahl@gmail.com
+executables: []
+extensions: []
+extra_rdoc_files: []
+files:
+- LICENSE
+- README.md
+- lib/warden/strategies/token.rb
+homepage: https://github.com/kolorahl/warden-token
+licenses:
+- MIT
+metadata: {}
+post_install_message: 
+rdoc_options: []
+require_paths:
+- lib
+required_ruby_version: !ruby/object:Gem::Requirement
+  requirements:
+  - - ">="
+    - !ruby/object:Gem::Version
+      version: '0'
+required_rubygems_version: !ruby/object:Gem::Requirement
+  requirements:
+  - - ">="
+    - !ruby/object:Gem::Version
+      version: '0'
+requirements: []
+rubyforge_project: 
+rubygems_version: 2.2.2
+signing_key: 
+specification_version: 4
+summary: Simple token authentication strategy for Warden.
+test_files: []
+has_rdoc: