openproject/lib/open_project/authentication/manager.rb

require 'set'

module OpenProject
  module Authentication
    class Manager < Warden::Manager
      serialize_into_session(&:id)

      serialize_from_session do |id|
        User.find id
      end

      def initialize(app, options = {}, &configure)
        block = lambda { |config|
          self.class.configure_warden config

          configure.call config if configure
        }

        super app, options, &block
      end

      class << self
        def config
          @config ||= Hash.new
        end

        def scope_config(scope)
          config[scope] ||= ScopeSettings.new
        end

        def failure_handlers
          @failure_handlers ||= {}
        end

        def auth_scheme(name)
          auth_schemes[name] ||= AuthSchemeInfo.new
        end

        def auth_schemes
          @auth_schemes ||= {}
        end

        def configure_warden(warden_config)
          warden_config.default_strategies :session
          warden_config.failure_app = OpenProject::Authentication::FailureApp.new failure_handlers

          config.each do |scope, cfg|
            warden_config.scope_defaults scope, strategies: cfg.strategies, store: cfg.store
          end
        end
      end

      class ScopeSettings
        attr_accessor :store, :strategies, :realm

        def initialize
          @store = true
          @strategies = Set.new
        end

        def update!(opts, &block)
          self.store = opts[:store] if opts.include? :store
          self.realm = opts[:realm] if opts.include? :realm
          self.strategies = block.call self.strategies if block_given?
        end
      end

      class AuthSchemeInfo
        attr_accessor :strategies

        def initialize
          @strategies = Set.new
        end
      end
    end
  end
end