yalla_auth_ruby_client 2.0.0 → 2.0.2

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 1f130db14d4ab21f5160424c47c583bb75d355bc871afb38448eae5eabe6dfba
-  data.tar.gz: ec774cbda5742b775b4aec193e8eceeee142cca7311feb47644923aa8f98b29a
+  metadata.gz: ca648fdb3f6345e91b325abf09524808aaa23ab011a6c1e26b49176c25c9a12b
+  data.tar.gz: ed4ab25b82c4df4ab5463c53a6390a99b4c376e8833f8692e5b25b4032f9e25d
 SHA512:
-  metadata.gz: 1c51ed7933e90841eb6ae1c41c538dcb782e7ed26cb8921961d5c3964acd92dbdabd02f1522ec8f23f97211c59550c60066b0ae148c419d4cd1c0fa1af88e4ba
-  data.tar.gz: d2f5f225d39421b540ea40420bf19c017eb9e91b43e493c95a4d76a07db6d234da4d10c2bbda4da95830e2a61e85403d5a5fa42d95e20b80e6d7578253769a4b
+  metadata.gz: c58757c65e91db1147a29e32c69f23adc7aad22c62aa1b0c1246a26c37afd592cfe4cb6b05f609d05b271e686ab52ffbb0bb952ec6fe18245c01a8e1e8fbd446
+  data.tar.gz: 78be6202e01a6b824bb1ba220647f6f1bdd3bcf8e8c62e4f5a6a4dda82b1b877f89527c8ac7d63ac8e329837a9a11373f2b58348c0b8181e909ee69404e61c12

data/README.md

@@ -76,6 +76,12 @@ end
   provided by the authentication service.
 - `logout` clears the cookie and redirects to `ENV["AUTH_URL"]`.
 
+For controllers that inherit from `ActionController::API`, the engine includes
+`YallaAuthRubyClient::ApiControllerAuthentication`, which reads the bearer token
+from the `Authorization` header. It exposes the same helpers but responds with a
+`401` JSON body containing the `redirect_uri` when authentication fails instead
+of issuing an HTTP redirect.
+
 ### Use the authentication middleware
 
 Add `YallaAuthRubyClient::AuthTokenMiddleware` to your Rails middleware stack

data/lib/openapi_client/version.rb

@@ -11,5 +11,5 @@ Generator version: 7.12.0
 =end
 
 module OpenapiClient
-  VERSION = '2.0.0'
+  VERSION = '2.0.2'
 end

data/lib/yalla_auth_ruby_client/api_controller_authentication.rb

@@ -0,0 +1,58 @@
+module YallaAuthRubyClient
+  module ApiControllerAuthentication
+    def logout
+      render json: { redirect_uri: ENV["AUTH_URL"] }
+    end
+
+    def authenticate_user
+      token = bearer_token
+      return false unless token.present?
+
+      begin
+        api_client = OpenapiClient::AuthApi.new
+        response = api_client.auth_validate_token_get(token)
+
+        if response && response.success
+          @yalla_user = response.user
+          @current_user = find_or_create_app_user(@yalla_user)
+          true
+        else
+          false
+        end
+      rescue OpenapiClient::ApiError => e
+        Rails.logger.error "Authentication failed: #{e.message}"
+        false
+      end
+    end
+
+    def authenticate_user!
+      return if authenticate_user
+
+      render json: { error: 'unauthorized', redirect_uri: login_redirect_uri }, status: :unauthorized
+    end
+
+    def current_user
+      @current_user
+    end
+
+    private
+
+    def bearer_token
+      auth_header = request.headers['Authorization'].to_s
+      return unless auth_header.present?
+
+      scheme, token = auth_header.split(' ', 2)
+      return unless scheme&.casecmp('Bearer')&.zero?
+
+      token&.strip.presence
+    end
+
+    def find_or_create_app_user(user)
+      AppUser.find_or_create_by(yalla_id: user.id)
+    end
+
+    def login_redirect_uri
+      "#{ENV['AUTH_URL']}/users/sign_in?redirect_uri="
+    end
+  end
+end

data/lib/yalla_auth_ruby_client.rb

@@ -1,6 +1,7 @@
 require 'openapi_client'
 require 'rails/railtie'
 require 'yalla_auth_ruby_client/controller_authentication'
+require 'yalla_auth_ruby_client/api_controller_authentication'
 require 'yalla_auth_ruby_client/middleware/auth_token_middleware'
 
 module YallaAuthRubyClient
@@ -9,6 +10,10 @@ module YallaAuthRubyClient
       ActiveSupport.on_load(:action_controller_base) do
         include YallaAuthRubyClient::ControllerAuthentication
       end
+
+      ActiveSupport.on_load(:action_controller_api) do
+        include YallaAuthRubyClient::ApiControllerAuthentication
+      end
     end
   end
 end

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: yalla_auth_ruby_client
 version: !ruby/object:Gem::Version
-  version: 2.0.0
+  version: 2.0.2
 platform: ruby
 authors:
 - Yalla auth openapi client
@@ -101,6 +101,7 @@ files:
 - lib/openapi_client/models/user_role_add.rb
 - lib/openapi_client/version.rb
 - lib/yalla_auth_ruby_client.rb
+- lib/yalla_auth_ruby_client/api_controller_authentication.rb
 - lib/yalla_auth_ruby_client/controller_authentication.rb
 - lib/yalla_auth_ruby_client/middleware/auth_token_middleware.rb
 - spec/api/apps_api_spec.rb
@@ -113,6 +114,7 @@ files:
 - spec/models/user_role_add_spec.rb
 - spec/models/user_spec.rb
 - spec/spec_helper.rb
+- yalla_auth_ruby_client-2.0.1.gem
 - yalla_auth_ruby_client.gemspec
 homepage: https://matrix.tn
 licenses: