Merge pull request #1248 from code-corps/update-guardian

Update guardian

Author: joshsmith

config/config.exs

@@ -31,12 +31,11 @@ config :mime, :types, %{
   "application/vnd.api+json" => ["json-api"]
 }
 
-config :guardian, Guardian,
+config :code_corps, CodeCorps.Guardian,
   issuer: "CodeCorps",
   ttl: { 30, :days },
   verify_issuer: true, # optional
-  secret_key: System.get_env("GUARDIAN_SECRET_KEY"),
-  serializer: CodeCorpsWeb.GuardianSerializer
+  secret_key: System.get_env("GUARDIAN_SECRET_KEY")
 
 # Configures ex_aws with credentials
 config :ex_aws, :code_corps,

config/dev.exs

@@ -45,7 +45,7 @@ config :code_corps, CodeCorps.Repo,
 # CORS allowed origins
 config :code_corps, allowed_origins: ["http://localhost:4200"]
 
-config :guardian, Guardian,
+config :code_corps, CodeCorps.Guardian,
   secret_key: "e62fb6e2746f6b1bf8b5b735ba816c2eae1d5d76e64f18f3fc647e308b0c159e"
 
 config :code_corps, :analytics, CodeCorps.Analytics.InMemoryAPI

config/prod.exs

@@ -36,7 +36,7 @@ config :code_corps, allowed_origins: [
   "https://www.codecorps.org"
 ]
 
-config :guardian, Guardian,
+config :code_corps, CodeCorps.Guardian,
   secret_key: System.get_env("GUARDIAN_SECRET_KEY")
 
 # Timber logging

config/remote-development.exs

@@ -28,7 +28,7 @@ config :code_corps, CodeCorps.Repo,
 # CORS allowed origins
 config :code_corps, allowed_origins: "*"
 
-config :guardian, Guardian,
+config :code_corps, CodeCorps.Guardian,
   secret_key: System.get_env("GUARDIAN_SECRET_KEY")
 
 # Do not print debug messages in production

config/staging.exs

@@ -35,7 +35,7 @@ config :code_corps, allowed_origins: [
   "https://www.pbqrpbecf.org"
 ]
 
-config :guardian, Guardian,
+config :code_corps, CodeCorps.Guardian,
   secret_key: System.get_env("GUARDIAN_SECRET_KEY")
 
 # Timber logging

config/test.exs

@@ -27,7 +27,7 @@ config :comeonin, :pbkdf2_rounds, 1
 # CORS allowed origins
 config :code_corps, allowed_origins: ["http://localhost:4200"]
 
-config :guardian, Guardian,
+config :code_corps, CodeCorps.Guardian,
   secret_key: "e62fb6e2746f6b1bf8b5b735ba816c2eae1d5d76e64f18f3fc647e308b0c159e"
 
 config :code_corps, :analytics, CodeCorps.Analytics.TestAPI

lib/code_corps/auth/bearer_auth_pipeline.ex

@@ -0,0 +1,8 @@
+defmodule CodeCorps.Auth.BearerAuthPipeline do
+  use Guardian.Plug.Pipeline, otp_app: :code_corps,
+                              module: CodeCorps.Guardian,
+                              error_handler: CodeCorps.Auth.ErrorHandler
+
+  plug Guardian.Plug.VerifyHeader, realm: "Bearer"
+  plug Guardian.Plug.LoadResource, allow_blank: true
+end

lib/code_corps/auth/ensure_auth_pipeline.ex

@@ -0,0 +1,7 @@
+defmodule CodeCorps.Auth.EnsureAuthPipeline do
+  use Guardian.Plug.Pipeline, otp_app: :code_corps,
+                              module: CodeCorps.Guardian,
+                              error_handler: CodeCorps.Auth.ErrorHandler
+
+  plug Guardian.Plug.EnsureAuthenticated
+end

lib/code_corps/auth/error_handler.ex

@@ -0,0 +1,9 @@
+defmodule CodeCorps.Auth.ErrorHandler do
+  use CodeCorpsWeb, :controller
+
+  def auth_error(conn, {type, _reason}, _opts) do
+    conn
+    |> put_status(401)
+    |> render(CodeCorpsWeb.TokenView, "401.json", message: to_string(type))
+  end
+end

lib/code_corps/guardian.ex

@@ -0,0 +1,40 @@
+defmodule CodeCorps.Guardian do
+  use Guardian, otp_app: :code_corps
+
+  alias CodeCorps.{Project, Repo, User}
+
+  def subject_for_token(project = %Project{}, _claims) do
+    {:ok, "Project:#{project.id}"}
+  end
+  def subject_for_token(user = %User{}, _claims) do
+    {:ok, "User:#{user.id}"}
+  end
+  def subject_for_token(_, _) do
+    {:error, :unknown_resource_type}
+  end
+
+  def resource_from_claims(%{"sub" => sub}), do: resource_from_subject(sub)
+  def resource_from_claims(_), do: {:error, :missing_subject}
+
+  defp resource_from_subject("Project:" <> id), do: {:ok, Repo.get(Project, id)}
+  defp resource_from_subject("User:" <> id) do
+    user = Repo.get(User, id)
+
+    if user do
+      name = full_name(user)
+      %Timber.Contexts.UserContext{id: user.id, email: user.email, name: name}
+      |> Timber.add_context()
+    end
+
+    {:ok, user}
+  end
+  defp resource_from_subject(_), do: {:error, :unknown_resource_type}
+
+  defp full_name(%User{first_name: nil, last_name: nil}), do: ""
+  defp full_name(%User{first_name: first_name, last_name: nil}), do: first_name
+  defp full_name(%User{first_name: nil, last_name: last_name}), do: last_name
+  defp full_name(%User{first_name: first_name, last_name: last_name}) do
+    first_name <> " " <> last_name
+  end
+  defp full_name(_), do: ""
+end