Class: OmniAuth::Strategies::Globalid

Inherits:
OAuth2
  • Object
show all
Defined in:
lib/omniauth/strategies/globalid.rb

Constant Summary collapse

DEFAULT_SCOPE = 
"public"

Class Method Summary collapse

Instance Method Summary collapse

Class Method Details

.parse_jwt(id_token) ⇒ Object 



16
17
18
 
# File 'lib/omniauth/strategies/globalid.rb', line 16

def self.parse_jwt(id_token)
  JWT.decode(id_token, nil, false).first
end

Instance Method Details

#authorize_params ⇒ Object 



25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
 
# File 'lib/omniauth/strategies/globalid.rb', line 25

def authorize_params
  auth_params = super # Get the OAuth2 omniauth params
  # Add the acrc_id if configured
  auth_params[:acrc_id] = options[:acrc_id] if options[:acrc_id]
  # If we are getting pii sharing, we need to have the openid scope
  if pii_sharing?
    auth_params[:scope] = "openid"
  end
  # If we are in the openid scope, we need a nonce
  if options[:scope]&.match?("openid")
    auth_params[:nonce] ||= SecureRandom.hex(24)
  end
  return auth_params unless acrc_id_in_request?
  auth_params.merge(acrc_id: request.params["acrc_id"] || request.params[:acrc_id])
end

#callback_url ⇒ Object

github.com/omniauth/omniauth-oauth2/issues/81



21
22
23
 
# File 'lib/omniauth/strategies/globalid.rb', line 21

def callback_url
  full_host + script_name + callback_path
end

#decrypted_pii ⇒ Object 



72
73
74
75
 
# File 'lib/omniauth/strategies/globalid.rb', line 72

def decrypted_pii
  return {} unless openid_token.keys.any? && options[:decrypt_pii_on_login]
  @decrypted_pii ||= vault.decrypted_pii
end

#openid_token ⇒ Object 



61
62
63
64
65
66
67
68
69
70
 
# File 'lib/omniauth/strategies/globalid.rb', line 61

def openid_token
  return @openid_token if defined?(@openid_token)
  id_token = access_token["id_token"]
  if !id_token
    @openid_token = {}
  else
    @openid_token = self.class.parse_jwt(id_token)
  end
  @openid_token
end

#raw_info ⇒ Object 



54
55
56
57
58
59
 
# File 'lib/omniauth/strategies/globalid.rb', line 54

def raw_info
  return @raw_info if defined?(@raw_info)

  result = api_connection.get("/v1/identities/me")
  @raw_info = JSON.parse(result.body)
end