@ntnx/passport-wso2 0.0.2

package/.jshintignore

@@ -0,0 +1 @@
+node_modules/**

package/.jshintrc

@@ -0,0 +1,23 @@
+//
+// JS Hint. See options here:
+// http://www.jshint.com/docs/options
+//
+{
+  "camelcase": true,     // Force all variable names to use camelCase style
+  "curly": true,         // Require {} for every new block or scope
+  "eqeqeq": true,        // Require triple equals (===) for comparison
+  "eqnull": false,       // Tolerate use of `== null`
+  "evil": false,         // Tolerate use of `eval`
+  "immed": true,         // Require immediate invocations to be wrapped in parens e.g. `(function () { } ());`
+  "latedef": "nofunc",   // Require variables to be defined before being used
+  "laxbreak": false,     // Tolerate unsafe line breaks e.g. `return [\n] x` without semicolons.
+  "laxcomma": true,      // Allow for comma-first coding style
+  "maxerr": 100,         // Maximum error before stopping.
+  "maxlen": 80,          // Maximum line length
+  "newcap": true,        // Require capitalization of all constructor functions e.g. `new F()`
+  "node": true,          // Ignore standard node.js globals
+  "quotmark": "single",  // Enforces the consistency of quotation marks used throughout your code
+  "shadow": false,       // Allows re-define variables later in code e.g. `var x=1; x=2;`.
+  "undef": true,         // Require all non-global variables to be declared (prevents global leaks)
+  "unused": false,       // Prohibits the use of explicitly undeclared variables
+}

package/LICENSE

@@ -0,0 +1,22 @@
+The MIT License (MIT)
+
+Copyright (c) 2014 Jason Sims
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.
+

package/README.md

@@ -0,0 +1,18 @@
+passport-wso2
+=============
+WSO2 Identity Server authentication strategy for Passport and Node.js.
+> **Note:** This repo is still a work in progress. As soon as the first stable version is available I'll get it published to NPM and listed on the [passport providers](http://passportjs.org/guide/providers/) page.
+
+
+## Installation
+```sh
+npm install git+https://github.com/jasonsims/passport-wso2.git#master
+```
+
+## Usage
+TODO
+
+## Examples
+TODO
+
+

package/lib/index.js

@@ -0,0 +1,15 @@
+/**
+ * Module dependencies.
+ */
+var Strategy = require('./strategy');
+
+
+/**
+ * Expose `Strategy` directly from package.
+ */
+exports = module.exports = Strategy;
+
+/**
+ * Export constructors.
+ */
+exports.Strategy = Strategy;

package/lib/profile.js

@@ -0,0 +1,70 @@
+/**
+ * Parse profile.
+ *
+ * This parser normalizes the JSON representation of the user profile, as given
+ * by the auth provider, in accordance with the portable contacts spec.
+ * http://portablecontacts.net/draft-spec.html
+ *
+ * @param {Object} Profile JSON from provider
+ * @return {Object}
+ * @api private
+ */
+exports.parse = function(json) {
+  var _json = {};
+  //
+  // there is a change in idp v5.2 profile information. Resources key is not
+  // available in idp v5.2. Modified below code to support new changes.
+  //
+  // Sample format for the both versions
+  // idp v5.0: {Resources: [userName: 'test@nutanix.com']}
+  // idp v5.2: {userName: 'test@nutanix.com'}
+  //
+  if (json && json.Resources && json.Resources[0]) {
+    _json = json.Resources[0];
+  } else {
+    _json = json;
+  }
+
+  var profile = {};
+
+  profile.id = String(_json.id);
+  profile.name = _parseName(_json);
+  profile.displayName = _parseDisplayName(_json);
+  profile.userName = _json.userName;
+  profile.emails = _parseEmails(_json);
+  profile.groups = _json.groups;
+
+  return profile;
+};
+
+//
+// Private
+//
+function _parseName(json) {
+  return json.name || {givenName: '', familyName: ''}
+}
+
+function _parseDisplayName(json) {
+  var nameObj = json.name || {}
+  var nameItems = []
+  if (nameObj.givenName) {nameItems.push(nameObj.givenName)}
+  if (nameObj.familyName) {nameItems.push(nameObj.familyName)}
+
+  return nameItems.join(' ')
+}
+
+function _parseEmails(json) {
+  var emails = [];
+  var toParse = json.emails || [];
+
+  // Normalize user email list. The WSO2 API maintains the email list in a
+  // strage way returning the primary email as a string elment in the `emails`
+  // array but includes everything else as an object.
+  toParse.forEach(function(val, idx) {
+    var emailObj = (typeof val === 'string') ?
+      {type: 'primary', value: val} : val
+    emails.push(emailObj);
+  })
+
+  return emails;
+}

package/lib/strategy.js

@@ -0,0 +1,108 @@
+/**
+ * Module dependencies.
+ */
+var util = require('util');
+var OAuth2Strategy = require('passport-oauth2');
+var InternalOAuthError = require('passport-oauth2').InternalOAuthError;
+var Profile = require('./profile');
+
+
+/**
+ * `Strategy` constructor.
+ *
+ * The WSO2 authentication strategy authenticates requests by delegating to a
+ * WSO2 Identity Server using the OAuth 2.0 protocol.
+ *
+ * Applications must supply a `verify` callback which accepts an `accessToken`,
+ * `refreshToken` and service-specific `profile`, and then calls the `done`
+ * callback supplying a `user`, which should be set to `false` if the
+ * credentials are not valid.  If an exception occured, `err` should be set.
+ *
+ * Options:
+ *   - `clientID`      your WSO2 service provider's Client ID
+ *   - `clientSecret`  your WSO2 service provider's Client Secret
+ *   - `callbackURL`   URL to which WSO2 will redirect the user after
+ *                     granting authorization
+ *
+ * @param {Object} options
+ * @param {Function} verify
+ * @api public
+ */
+function Strategy(options, verify) {
+  options = options || {};
+
+  OAuth2Strategy.call(this, options, verify);
+  this.name = options.strategyName || 'wso2';
+  this._oauth2.useAuthorizationHeaderforGET(true);
+  this._authorizationParams = options.authorizationParams || {}
+  this._tokenParams = options.tokenParams || {}
+  // TODO: We should be able to assume the user profile URL based on the
+  // hostname of the identity provider since the endpoint should always
+  // be /wso2/scim/Users/me.
+  this._userProfileURL = options.userProfileURL;
+}
+
+/**
+ * Inherit from `OAuth2Strategy`.
+ */
+util.inherits(Strategy, OAuth2Strategy);
+
+/**
+ * Retrieve user profile from the WSO2 Identity Server.
+ *
+ * @override
+ * @param {String} accessToken
+ * @param {Function} done
+ * @api protected
+ */
+Strategy.prototype.userProfile = function(accessToken, done) {
+  this._oauth2.get(this._userProfileURL, accessToken, function(err, body, res) {
+    var json;
+    var profile;
+
+    if (err) {
+      return done(new InternalOAuthError('Failed to fetch user profile', err));
+    }
+
+    try {
+      json = JSON.parse(body)
+    } catch (ex) {
+      return done(new Error('Failed to parse user profile'))
+    }
+
+    profile = Profile.parse(json)
+    profile.provider = 'wso2'
+    profile._raw = body
+    profile._json = json
+
+    done(null, profile)
+  })
+}
+
+/**
+ * Return extra parameters to be included in the authorization request.
+ *
+ * @override
+ * @param {Object} options
+ * @return {Object}
+ * @api protected
+ */
+Strategy.prototype.authorizationParams = function(options) {
+  return JSON.parse(JSON.stringify(this._authorizationParams));
+}
+
+/**
+ * Return extra parameters to be included in the token request.
+ *
+ * @override
+ * @return {Object}
+ * @api protected
+ */
+Strategy.prototype.tokenParams = function(options) {
+  return JSON.parse(JSON.stringify(this._tokenParams));
+}
+
+/**
+ * Expose `Strategy`.
+ */
+module.exports = Strategy;

package/package.json

@@ -0,0 +1,31 @@
+{
+  "name": "@ntnx/passport-wso2",
+  "version": "0.0.2",
+  "description": "WSO2 Identity Server authentication strategy for Passport.",
+  "main": "./lib",
+  "author": "Jason Sims <sims.jrobert@gmail.com>",
+  "keywords": [
+    "passport",
+    "wso2",
+    "auth",
+    "authn",
+    "authentication",
+    "identity"
+  ],
+  "scripts": {},
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/jasonsims/passport-wso2.git"
+  },
+  "license": "MIT",
+  "bugs": {
+    "url": "https://github.com/jasonsims/passport-wso2/issues"
+  },
+  "homepage": "https://github.com/jasonsims/passport-wso2",
+  "dependencies": {
+    "passport-oauth2": "^1.1.2"
+  },
+  "directories": {
+    "lib": "lib"
+  }
+}