zaikio-oauth_client 0.3.7 → 0.3.8

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 70df4bc301aecf7787f230307e05d94a5df5e68bc53c631bd4923e007f1c4882
-  data.tar.gz: e19b1250fed256fd761c47b08d7b436311547559834b6939202d0bf2b4d35f92
+  metadata.gz: 8fa2e5f7ed7f309196e150d97aeabd9bf9480fc9d434a97df1bd3f24c12ea10f
+  data.tar.gz: acabd48829a55be6e5f358ff62136cdee973dd2e3e71fb17af4f3dff1b0bf9e9
 SHA512:
-  metadata.gz: 621cbc8f24b5db20feebc5398cba2a444cab5a2d9652e44ed53675b889b7033df68410302885781aa7714626ed3f325384e9f6ca80fd21025b2490f6310d4060
-  data.tar.gz: 728955826c11c5f9d955ad03f1d2c3d9631f023d07aa84fbe9f06583392fb87a9d5850e3195381100aacf4262d94dec725018e3aa9783e862a5a546486aa7ae5
+  metadata.gz: 4a6fc57330881a9c13164aedf78bb9138f7baa6b8a062e17ff674ada1527e291314177c65fc81eb02e4a563d29c7f8c8018854ef9613545666a07bbecd793057
+  data.tar.gz: ffda5ec35029860201e0c42b50c2dc303f78f9b5e726c19282dd2f023c684516cb3f2ea6a5c092b359b9e8f6c3a03a5d5d91226e0170760ca288752368ac89c3

data/README.md

@@ -26,6 +26,8 @@ This will create the tables:
 
 ### 2. Mount routes
 
+Add this to `config/routes.rb`:
+
 ```rb
 mount Zaikio::OAuthClient::Engine => "/zaikio"
 ```
@@ -65,6 +67,28 @@ Zaikio::OAuthClient.configure do |config|
 end
 ```
 
+
+### 4. Clean up outdated access tokens (recommended)
+
+To avoid keeping all expired oath and refresh tokens in your database, we recommend to implement their scheduled deletion. We recommend therefore to use a schedule gems such as [sidekiq](https://github.com/mperham/sidekiq) and [sidekiq-scheduler](https://github.com/moove-it/sidekiq-scheduler).
+
+Simply add the following to your Gemfile:
+
+```rb
+gem "sidekiq"
+gem "sidekiq-scheduler"
+```
+Then run `bundle install`.
+
+Configure sidekiq scheduler in `config/sidekiq.yml`:
+```yaml
+:schedule:
+  cleanup_acces_tokens_job:
+    cron: '0 3 * * *'               # This will delete all expired tokens every day at 3am.
+    class: 'Zaikio::CleanupAccessTokensJob'
+```
+
+
 ## Usage
 
 ### OAuth Flow

data/app/jobs/zaikio/cleanup_access_tokens_job.rb

@@ -0,0 +1,7 @@
+module Zaikio
+  class CleanupAccessTokensJob < ApplicationJob
+    def perform
+      Zaikio::AccessToken.with_invalid_refresh_token.delete_all
+    end
+  end
+end

data/app/models/zaikio/access_token.rb

@@ -28,6 +28,9 @@ module Zaikio
       where("expires_at > :now", now: Time.current)
         .where.not(id: Zaikio::JWTAuth.blacklisted_token_ids)
     }
+    scope :with_invalid_refresh_token, lambda {
+      where("created_at <= ?", Time.current - Zaikio::AccessToken.refresh_token_valid_for)
+    }
     scope :valid_refresh, lambda {
       where("expires_at <= :now AND created_at > :created_at_max",
             now: Time.current,

data/lib/zaikio/oauth_client/configuration.rb

@@ -5,11 +5,11 @@ module Zaikio
   module OAuthClient
     class Configuration
       HOSTS = {
-        development: "http://directory.zaikio.test",
-        test: "http://directory.zaikio.test",
+        development: "http://hub.zaikio.test",
+        test: "http://hub.zaikio.test",
         staging: "https://directory.staging.zaikio.com",
         sandbox: "https://directory.sandbox.zaikio.com",
-        production: "https://directory.zaikio.com"
+        production: "https://hub.zaikio.com"
       }.freeze
 
       attr_accessor :host

data/lib/zaikio/oauth_client/version.rb

@@ -1,5 +1,5 @@
 module Zaikio
   module OAuthClient
-    VERSION = "0.3.7".freeze
+    VERSION = "0.3.8".freeze
   end
 end

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: zaikio-oauth_client
 version: !ruby/object:Gem::Version
-  version: 0.3.7
+  version: 0.3.8
 platform: ruby
 authors:
 - Zaikio GmbH
 autorequire: 
 bindir: bin
 cert_chain: []
-date: 2020-05-28 00:00:00.000000000 Z
+date: 2020-08-18 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: rails
@@ -42,16 +42,22 @@ dependencies:
   name: zaikio-jwt_auth
   requirement: !ruby/object:Gem::Requirement
     requirements:
-    - - "~>"
+    - - ">="
       - !ruby/object:Gem::Version
         version: 0.2.1
+    - - "<"
+      - !ruby/object:Gem::Version
+        version: 0.4.0
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
-    - - "~>"
+    - - ">="
       - !ruby/object:Gem::Version
         version: 0.2.1
+    - - "<"
+      - !ruby/object:Gem::Version
+        version: 0.4.0
 - !ruby/object:Gem::Dependency
   name: pg
   requirement: !ruby/object:Gem::Requirement
@@ -98,6 +104,7 @@ files:
 - app/controllers/zaikio/oauth_client/sessions_controller.rb
 - app/helpers/zaikio/application_helper.rb
 - app/jobs/zaikio/application_job.rb
+- app/jobs/zaikio/cleanup_access_tokens_job.rb
 - app/models/zaikio/access_token.rb
 - config/initializers/inflections.rb
 - config/locales/en.yml