warden_oauth_provider 1.0.0

data/spec/token_strategy_spec.rb

@@ -0,0 +1,158 @@
+require 'spec_helper'
+
+describe WardenOauthProvider::TokenStrategy do
+
+  before(:all) do
+    @client_application = Factory.create(:client_application)
+    @user = Factory(:user)
+  end
+
+  it "should allow to authenticate a token multiple times in a session" do
+    
+    class TestSession
+      cattr_accessor :session
+      def initialize(app)
+        @app = app
+      end
+      
+      def call(env)
+        env['rack.session'] = TestSession.session
+        @app.call(env)
+      end
+    end
+    TestSession.session = {}
+    
+    session = TestSession
+
+
+    # Step 1 - Request token
+    auth_str_step1 = oauth_header({
+      :realm                  => "MoneyBird",
+      :oauth_consumer_key     => @client_application.key,
+      :oauth_signature_method => "PLAINTEXT",
+      :oauth_timestamp        => Time.now.to_i+1,
+      :oauth_nonce            => Time.now.to_f+1,
+      :oauth_callback         => "oob",
+      :oauth_signature        => @client_application.secret + "%26"
+    })
+    env_step1 = env_with_params("/oauth/request_token", {}, {
+      "HTTP_AUTHORIZATION" => auth_str_step1
+    })
+    response = setup_rack.call(env_step1)
+    response.first.should == 200
+    oauth_response = Hash[*response.last.first.split("&").collect { |v| v.split("=") }.flatten]
+    oauth_request_token = oauth_response["oauth_token"]
+    oauth_request_token_secret = oauth_response["oauth_token_secret"]
+    
+    # Step 2 - Authorize
+    req = WardenOauthProvider::Token::Request.find_by_token(oauth_request_token)
+    env_step2 = env_with_params("/oauth/authorize", {:oauth_token => oauth_request_token, :username => "John"}, {})
+    response = setup_rack(nil, :session => session).call(env_step2)
+    response.first.should == 302
+    location = URI.parse(response[1]["Location"])
+    oauth_response = Hash[*location.query.split("&").collect { |v| v.split("=") }.flatten]
+    oauth_verifier = oauth_response["oauth_verifier"]
+    
+    # Step 3 - Access token
+    auth_str_step3 = oauth_header({
+      :realm => "MoneyBird",
+      :oauth_consumer_key => @client_application.key,
+      :oauth_token => oauth_request_token,
+      :oauth_signature_method => "PLAINTEXT",
+      :oauth_timestamp => Time.now.to_i+2,
+      :oauth_nonce => Time.now.to_f+2,
+      :oauth_verifier => oauth_verifier,
+      :oauth_signature => @client_application.secret + "%26" + oauth_request_token_secret
+    })
+    env_step3 = env_with_params("/oauth/access_token", {}, {
+      "HTTP_AUTHORIZATION" => auth_str_step3
+    })
+    response = setup_rack.call(env_step3)
+    response.first.should == 200
+    oauth_response = Hash[*response.last.first.split("&").collect { |v| v.split("=") }.flatten]
+    oauth_access_token = oauth_response["oauth_token"]
+    oauth_access_token_secret = oauth_response["oauth_token_secret"]
+    
+    # Step 4 - App request with access token
+    auth_str_step4 = oauth_header({
+      :realm => "MoneyBird",
+      :oauth_consumer_key => @client_application.key,
+      :oauth_token => oauth_access_token,
+      :oauth_signature_method => "PLAINTEXT",
+      :oauth_timestamp => Time.now.to_i+3,
+      :oauth_nonce => Time.now.to_f+3,
+      :oauth_signature => @client_application.secret + "%26" + oauth_access_token_secret
+    })
+    env_step4 = env_with_params("/invoices", {}, {
+      "HTTP_AUTHORIZATION" => auth_str_step4
+    })
+    response = setup_rack.call(env_step4)
+    response.first.should == 200
+    
+    # Step 1 - Request token
+    auth_str_step1 = oauth_header({
+      :realm                  => "MoneyBird",
+      :oauth_consumer_key     => @client_application.key,
+      :oauth_signature_method => "PLAINTEXT",
+      :oauth_timestamp        => Time.now.to_i+1,
+      :oauth_nonce            => Time.now.to_f+1,
+      :oauth_callback         => "oob",
+      :oauth_signature        => @client_application.secret + "%26"
+    })
+    env_step1 = env_with_params("/oauth/request_token", {}, {
+      "HTTP_AUTHORIZATION" => auth_str_step1
+    })
+    response = setup_rack.call(env_step1)
+    response.first.should == 200
+    oauth_response = Hash[*response.last.first.split("&").collect { |v| v.split("=") }.flatten]
+    oauth_request_token = oauth_response["oauth_token"]
+    oauth_request_token_secret = oauth_response["oauth_token_secret"]
+    
+    # Step 2 - Authorize
+    req = WardenOauthProvider::Token::Request.find_by_token(oauth_request_token)
+    env_step2 = env_with_params("/oauth/authorize", {:oauth_token => oauth_request_token, :username => "John"}, {})
+    response = setup_rack(nil, :session => session).call(env_step2)
+    response.first.should == 302
+    location = URI.parse(response[1]["Location"])
+    oauth_response = Hash[*location.query.split("&").collect { |v| v.split("=") }.flatten]
+    oauth_verifier = oauth_response["oauth_verifier"]
+    
+    # Step 3 - Access token
+    auth_str_step3 = oauth_header({
+      :realm => "MoneyBird",
+      :oauth_consumer_key => @client_application.key,
+      :oauth_token => oauth_request_token,
+      :oauth_signature_method => "PLAINTEXT",
+      :oauth_timestamp => Time.now.to_i+2,
+      :oauth_nonce => Time.now.to_f+2,
+      :oauth_verifier => oauth_verifier,
+      :oauth_signature => @client_application.secret + "%26" + oauth_request_token_secret
+    })
+    env_step3 = env_with_params("/oauth/access_token", {}, {
+      "HTTP_AUTHORIZATION" => auth_str_step3
+    })
+    response = setup_rack.call(env_step3)
+    response.first.should == 200
+    oauth_response = Hash[*response.last.first.split("&").collect { |v| v.split("=") }.flatten]
+    oauth_access_token = oauth_response["oauth_token"]
+    oauth_access_token_secret = oauth_response["oauth_token_secret"]
+    
+    # Step 4 - App request with access token
+    auth_str_step4 = oauth_header({
+      :realm => "MoneyBird",
+      :oauth_consumer_key => @client_application.key,
+      :oauth_token => oauth_access_token,
+      :oauth_signature_method => "PLAINTEXT",
+      :oauth_timestamp => Time.now.to_i+3,
+      :oauth_nonce => Time.now.to_f+3,
+      :oauth_signature => @client_application.secret + "%26" + oauth_access_token_secret
+    })
+    env_step4 = env_with_params("/invoices", {}, {
+      "HTTP_AUTHORIZATION" => auth_str_step4
+    })
+    response = setup_rack.call(env_step4)
+    response.first.should == 200
+    
+  end
+
+end

data/warden_oauth_provider.gemspec

@@ -0,0 +1,27 @@
+# -*- encoding: utf-8 -*-
+$:.push File.expand_path("../lib", __FILE__)
+require "warden_oauth_provider/version"
+
+Gem::Specification.new do |s|
+  s.name        = "warden_oauth_provider"
+  s.version     = WardenOauthProvider::VERSION
+  s.platform    = Gem::Platform::RUBY
+  s.authors     = ["Edwin Vlieg", "Berend van Bruijnsvoort"]
+  s.email       = ["info@moneybird.nl"]
+  s.homepage    = "http://www.moneybird.nl"
+  s.summary     = %q{Warden strategy for OAuth provider}
+  s.description = %q{Warden strategy for OAuth provider}
+
+  s.files         = `git ls-files`.split("\n")
+  s.test_files    = `git ls-files -- {test,spec,features}/*`.split("\n")
+  s.executables   = `git ls-files -- bin/*`.split("\n").map{ |f| File.basename(f) }
+  s.require_paths = ["lib"]
+  
+  s.add_dependency              'warden',         '~> 1.0.0'
+  s.add_dependency              'oauth',          '~> 0.4.0'
+  s.add_dependency              'activerecord',   '~> 3.0.0'
+  s.add_development_dependency  'rspec',          '~> 2.0'
+  s.add_development_dependency  'rake'
+  s.add_development_dependency  'sqlite3'
+  s.add_development_dependency  'factory_girl',   '~> 1.3.0'
+end

metadata

@@ -0,0 +1,214 @@
+--- !ruby/object:Gem::Specification 
+name: warden_oauth_provider
+version: !ruby/object:Gem::Version 
+  hash: 23
+  prerelease: 
+  segments: 
+  - 1
+  - 0
+  - 0
+  version: 1.0.0
+platform: ruby
+authors: 
+- Edwin Vlieg
+- Berend van Bruijnsvoort
+autorequire: 
+bindir: bin
+cert_chain: []
+
+date: 2011-07-29 00:00:00 +02:00
+default_executable: 
+dependencies: 
+- !ruby/object:Gem::Dependency 
+  name: warden
+  prerelease: false
+  requirement: &id001 !ruby/object:Gem::Requirement 
+    none: false
+    requirements: 
+    - - ~>
+      - !ruby/object:Gem::Version 
+        hash: 23
+        segments: 
+        - 1
+        - 0
+        - 0
+        version: 1.0.0
+  type: :runtime
+  version_requirements: *id001
+- !ruby/object:Gem::Dependency 
+  name: oauth
+  prerelease: false
+  requirement: &id002 !ruby/object:Gem::Requirement 
+    none: false
+    requirements: 
+    - - ~>
+      - !ruby/object:Gem::Version 
+        hash: 15
+        segments: 
+        - 0
+        - 4
+        - 0
+        version: 0.4.0
+  type: :runtime
+  version_requirements: *id002
+- !ruby/object:Gem::Dependency 
+  name: activerecord
+  prerelease: false
+  requirement: &id003 !ruby/object:Gem::Requirement 
+    none: false
+    requirements: 
+    - - ~>
+      - !ruby/object:Gem::Version 
+        hash: 7
+        segments: 
+        - 3
+        - 0
+        - 0
+        version: 3.0.0
+  type: :runtime
+  version_requirements: *id003
+- !ruby/object:Gem::Dependency 
+  name: rspec
+  prerelease: false
+  requirement: &id004 !ruby/object:Gem::Requirement 
+    none: false
+    requirements: 
+    - - ~>
+      - !ruby/object:Gem::Version 
+        hash: 3
+        segments: 
+        - 2
+        - 0
+        version: "2.0"
+  type: :development
+  version_requirements: *id004
+- !ruby/object:Gem::Dependency 
+  name: rake
+  prerelease: false
+  requirement: &id005 !ruby/object:Gem::Requirement 
+    none: false
+    requirements: 
+    - - ">="
+      - !ruby/object:Gem::Version 
+        hash: 3
+        segments: 
+        - 0
+        version: "0"
+  type: :development
+  version_requirements: *id005
+- !ruby/object:Gem::Dependency 
+  name: sqlite3
+  prerelease: false
+  requirement: &id006 !ruby/object:Gem::Requirement 
+    none: false
+    requirements: 
+    - - ">="
+      - !ruby/object:Gem::Version 
+        hash: 3
+        segments: 
+        - 0
+        version: "0"
+  type: :development
+  version_requirements: *id006
+- !ruby/object:Gem::Dependency 
+  name: factory_girl
+  prerelease: false
+  requirement: &id007 !ruby/object:Gem::Requirement 
+    none: false
+    requirements: 
+    - - ~>
+      - !ruby/object:Gem::Version 
+        hash: 27
+        segments: 
+        - 1
+        - 3
+        - 0
+        version: 1.3.0
+  type: :development
+  version_requirements: *id007
+description: Warden strategy for OAuth provider
+email: 
+- info@moneybird.nl
+executables: []
+
+extensions: []
+
+extra_rdoc_files: []
+
+files: 
+- .gitignore
+- Gemfile
+- LICENSE
+- README.textile
+- Rakefile
+- lib/generators/warden_oauth_provider/install/install_generator.rb
+- lib/generators/warden_oauth_provider/install/templates/migration.rb
+- lib/warden_oauth_provider.rb
+- lib/warden_oauth_provider/client_application.rb
+- lib/warden_oauth_provider/nonce.rb
+- lib/warden_oauth_provider/provider_strategy.rb
+- lib/warden_oauth_provider/token/access.rb
+- lib/warden_oauth_provider/token/base.rb
+- lib/warden_oauth_provider/token/request.rb
+- lib/warden_oauth_provider/token_strategy.rb
+- lib/warden_oauth_provider/version.rb
+- spec/access_token_spec.rb
+- spec/all_steps_spec.rb
+- spec/authorize_spec.rb
+- spec/client_application_spec.rb
+- spec/helpers/factories.rb
+- spec/helpers/request_helper.rb
+- spec/nonce_spec.rb
+- spec/oauth_request_spec.rb
+- spec/request_token_spec.rb
+- spec/spec_helper.rb
+- spec/token_spec.rb
+- spec/token_strategy_spec.rb
+- warden_oauth_provider.gemspec
+has_rdoc: true
+homepage: http://www.moneybird.nl
+licenses: []
+
+post_install_message: 
+rdoc_options: []
+
+require_paths: 
+- lib
+required_ruby_version: !ruby/object:Gem::Requirement 
+  none: false
+  requirements: 
+  - - ">="
+    - !ruby/object:Gem::Version 
+      hash: 3
+      segments: 
+      - 0
+      version: "0"
+required_rubygems_version: !ruby/object:Gem::Requirement 
+  none: false
+  requirements: 
+  - - ">="
+    - !ruby/object:Gem::Version 
+      hash: 3
+      segments: 
+      - 0
+      version: "0"
+requirements: []
+
+rubyforge_project: 
+rubygems_version: 1.6.2
+signing_key: 
+specification_version: 3
+summary: Warden strategy for OAuth provider
+test_files: 
+- spec/access_token_spec.rb
+- spec/all_steps_spec.rb
+- spec/authorize_spec.rb
+- spec/client_application_spec.rb
+- spec/helpers/factories.rb
+- spec/helpers/request_helper.rb
+- spec/nonce_spec.rb
+- spec/oauth_request_spec.rb
+- spec/request_token_spec.rb
+- spec/spec_helper.rb
+- spec/token_spec.rb
+- spec/token_strategy_spec.rb