Class: JunglePath::Authentication::AuthProvider::Default

Inherits:
Object
  • Object
show all
Defined in:
lib/jungle_path/authentication/auth_provider/default.rb

Instance Method Summary collapse

Instance Method Details

#authenticate(request, data_provider, no_cache = false) ⇒ Object 



5
6
7
8
9
10
11
12
13
14
 
# File 'lib/jungle_path/authentication/auth_provider/default.rb', line 5

def authenticate request, data_provider, no_cache=false
  puts "JunglePath::Authentication::AuthProvider::Default.authenticate"
  remote_user = request.env['REMOTE_USER']
  remote_password = request.env['REMOTE_PASSWORD']
  puts "remote_user: #{remote_user}."
  puts "remote_password: #{remote_password}."
  identity = basic_authentication(data_provider, remote_user, remote_password, no_cache)
  identity = basic_authentication(data_provider, remote_user, remote_password, true) unless identity and identity.valid?
  identity
end

#authenticate_identity(data_provider, identity, assume_identity = false, no_cache = false) ⇒ Object 



60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
 
# File 'lib/jungle_path/authentication/auth_provider/default.rb', line 60

def authenticate_identity data_provider, identity, assume_identity=false, no_cache=false
  idn = nil
  if identity
    idn = identity.dup
    if user_name_is_key? identity.user_name, identity.remote_password
      idn.user = data_provider.get_user_by_key(identity.user_name, assume_identity, no_cache, identity.remote_password)
      idn.key = identity.user_name
    else
      idn.user = data_provider.get_user(identity.user_name, identity.remote_password, assume_identity, no_cache)
      idn.key = nil
    end
    idn.valid = (idn.user and idn.user.is_valid)
    if idn.valid
      idn.alternative_user_keys = data_provider.get_alternative_user_keys(idn.user.id, no_cache) if data_provider.respond_to?('get_alternative_user_keys')
    end
  end
  idn
end

#authorize_identity(data_provider, identity, no_cache) ⇒ Object 



79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
 
# File 'lib/jungle_path/authentication/auth_provider/default.rb', line 79

def authorize_identity data_provider, identity, no_cache
  idn = nil
  if identity
    idn = identity.dup
    if idn.valid?
      idn.role = data_provider.get_role(idn, no_cache)
      idn.authorization_filter = data_provider.get_authorization_filter(idn, no_cache)
      idn.query_filters = data_provider.get_query_filters(idn, no_cache)
      idn.table_filters = data_provider.get_table_filters(idn, no_cache) if data_provider.respond_to?('get_table_filters')
    else
      idn.role = nil
      idn.authorization_filter = nil
      idn.query_filters = nil
      idn.table_filters = nil
    end
  end
  idn
end

#basic_authentication(data_provider, remote_user, remote_password, no_cache = false) ⇒ Object 



16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
 
# File 'lib/jungle_path/authentication/auth_provider/default.rb', line 16

def basic_authentication data_provider, remote_user, remote_password, no_cache=false
  identity, assume_identity = parse_identities(remote_user, remote_password)

  puts "identity: #{identity}"
  puts "assume_identity: #{assume_identity}"

  #valid = false

  identity = authenticate_identity(data_provider, identity, false, no_cache)
  puts "authenticated identity: #{identity}."
  identity = authorize_identity(data_provider, identity, no_cache)
  puts "authorized identity: #{identity}."

  if identity and identity.valid? and assume_identity
    if identity.authorization_filter.has_permission?(:assume_user_identity) and !identity.authorization_filter.has_restriction?(:assume_user_identity)
      assume_identity = authenticate_identity(data_provider, assume_identity, true, no_cache)
      puts "authenticated assume_identity: #{assume_identity}."
      assume_identity = authorize_identity(data_provider, assume_identity, no_cache)
      assume_identity.valid = false unless assume_identity.authorization_filter.has_permission?(:assumable_user_identity) and !assume_identity.authorization_filter.has_restriction?(:assumable_user_identity)
      puts "authorized assume_identity: #{assume_identity}."
    end
    return assume_identity
  end
  identity
end

#parse_identities(remote_user, remote_password) ⇒ Object 



42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
 
# File 'lib/jungle_path/authentication/auth_provider/default.rb', line 42

def parse_identities remote_user, remote_password
  identity = JunglePath::Authentication::Identity.new
  identity.remote_user = remote_user
  identity.remote_password = remote_password
  assume_identity = nil
  if remote_user and remote_user.include?("|")
    parts = remote_user.split('|')
    identity.user_name = parts[1]
    assume_identity = JunglePath::Authentication::Identity.new
    assume_identity.user_name = parts[0]
    assume_identity.remote_user = remote_user
    assume_identity.remote_password = nil
  else
    identity.user_name = remote_user
  end
  return identity, assume_identity
end

#user_name_is_key?(user_name, password) ⇒ Boolean

Returns:

  • (Boolean) 


98
99
100
101
 
# File 'lib/jungle_path/authentication/auth_provider/default.rb', line 98

def user_name_is_key? user_name, password
  #puts "user_name: #{user_name}, password: #{password}. password == nil: #{password == nil}."
  user_name and user_name.start_with?("sk_") and !user_name.include?("@") and (password == nil or password.strip.length == 0)
end