File Coverage

blib/lib/Plack/Middleware/Auth/Bitcard.pm

Criterion	Covered	Total	%
statement	63	88	71.5
branch	8	24	33.3
condition	2	12	16.6
subroutine	18	20	90.0
pod	2	2	100.0
total	93	146	63.7

package Plack::Middleware::Auth::Bitcard;

use 5.008;
use strict;
use warnings;

BEGIN {
	$Plack::Middleware::Auth::Bitcard::AUTHORITY = 'cpan:TOBYINK';
	$Plack::Middleware::Auth::Bitcard::VERSION   = '0.001';
}

use Carp;
use JSON qw(to_json from_json);
use Plack::Response;
use Plack::Request;
use Plack::Util;
use Plack::Util::Accessor qw( bitcard skip_if on_unauth );
use Digest::SHA qw(sha1_hex);

use base "Plack::Middleware";

sub prepare_app
{
	my $self = shift;
	croak "Need to provide Authen::Bitcard object" unless ref $self->bitcard;
	$self->bitcard->info_required('username');
}

sub call
{
	my $self = shift;
	my $env  = $_[0];
	my $req  = "Plack::Request"->new($env);

	$env->{BITCARD_URL} = sub
	{
		unshift @_, 'login_url' if ref $_[0];
		my $method = shift;
		my $env    = shift || croak("needs \$env!");
		my $return = shift || $self->_boomerang_uri("Plack::Request"->new($env));
		$self->bitcard->$method(r => $return);
	};

	if ($self->_req_is_boomerang($req))
	{
		my $res = $self->_store_cookie_data($req);
		return $res->finalize;
	}
	elsif ($self->_fetch_cookie_data($req => $env))
	{
		return $self->app->($env);
	}
	elsif ($self->skip_if and $self->skip_if->($env))
	{
		return $self->app->($env);
	}
	elsif (my $on_unauth = $self->on_unauth)
	{
		return $on_unauth->($env);
	}
	else
	{
		my $res = $self->_start_boomerang($req);
		return $res->finalize;
	}
}

sub _boomerang_uri
{
	my $self = shift;
	my $req  = $_[0];

	my $base = $req->base;
	$base =~ m{/$} ? "${base}_bitcard_boomerang" : "${base}/_bitcard_boomerang";
}

sub _start_boomerang
{
	my $self = shift;
	my $req  = $_[0];

	my $res = "Plack::Response"->new;
	$res->cookies->{bitcard_return_to} = $req->uri;
	$res->redirect(
		$self->bitcard->login_url(
			r => $self->_boomerang_uri($req),
		),
	);
	return $res;
}

sub _req_is_boomerang
{
	my $self = shift;
	my $req  = $_[0];

	my ($uri) = split /\?/, $req->uri;  # ignore query string
	return ($uri eq $self->_boomerang_uri($req));
}

sub _store_cookie_data
{
	my $self = shift;
	my $req  = $_[0];

	my $res = "Plack::Response"->new;
	$res->redirect(
		defined $req->cookies->{bitcard_return_to} && $req->cookies->{bitcard_return_to} ne '-'
		? $req->cookies->{bitcard_return_to}
		: $req->base
	);
	if (my $user = $self->bitcard->verify($req))
	{
		$user->{_checksum} = sha1_hex($self->bitcard->api_secret . $user->{username});
		$res->cookies->{bitcard} = to_json($user);
	}
	else
	{
		$res->cookies->{bitcard} = to_json({});
	}
	$req->cookies->{bitcard_return_to} = { value => "-" };
	return $res;
}

sub _fetch_cookie_data
{
	my $self = shift;
	my ($req, $env) = @_;

	return unless $req->cookies->{bitcard};
	my $user = from_json($req->cookies->{bitcard});

	return unless $user->{username};
	return unless sha1_hex($self->bitcard->api_secret . $user->{username}) eq $user->{_checksum};

	$env->{BITCARD} = +{%$user};
	delete $env->{BITCARD}{_checksum};
	return $env->{BITCARD}{username};
}

1;

__END__