crowd_rails¶ ↑

Single sign on (SSO) with Atlassian Crowd 2.0 for Ruby on Rails.

See also: stefanwille.com/2010/07/rails-plugin-for-single-sign-on-with-atlassian-crowd/

INSTALL:¶ ↑

sudo gem install crowd_rails

REQUIREMENTS:¶ ↑

• gem crowd-stefanwille

• soap4r v1.5.8

• Atlassian Crowd v2.0

• Ruby v1.8.6 (or later)

• Rails 2.3.8 (or later)

USE:¶ ↑

Add a file config/initializers/crowd_setup.rb and configure:

require 'crowd'

Crowd.crowd_url = 'http://127.0.0.1:8095/crowd/services/SecurityServer'
Crowd.crowd_app_name = 'soaptest'
Crowd.crowd_app_pword = 'soaptest'
Crowd.crowd_validation_factors_need_user_agent = false  # false for Crowd 2.0.5, true for Crowd 2.0.2
Crowd.crowd_session_validationinterval = 0  # Set > 0 for authentication caching.

Then add this to your ApplicationController class:

class ApplicationController < ActionController::Base
  include Crowd::SingleSignOn

  ...
  before_filter :authenticate 

  private
    def authenticate      
      return if RAILS_ENV == "test"

      return if crowd_authenticated?

      authenticate_or_request_with_http_basic('My Application') do |user_name, password| 
        crowd_authenticate(user_name, password)
      end
    end
end

This will give you the usual gray password box (aka ‘basic auth’). Replace Rails’ the call to authenticate_or_request_with_http_basic() that asks the user for username and password if you want some fancier.

There is an example Rails app at github.com/stefanwille/crowd_rails_test that implements this approach.

See the rdoc at rdoc.info/github/stefanwille/crowd_rails/master/frames.

Assumptions (used above):

• Crowd Server is on localhost, port 8095

• There is an application configured in Crowd with name and password ‘soaptest’

• Application ‘soaptest’ directory set to ‘True’

FEATURES:¶ ↑

• Interoperable single sign on with Atlassian Crowd 2.0.2 and 2.0.5.

• Can be configured for authentication caching.

Available methods in module Crowd::SingleSignOn:

• crowd_authenticated? - Returns whether the user is already authenticated.

• crowd_authenticate(user_name, password) - Authenticates the user with the given user name and password and marks the user as authenticated on success.

• crowd_authenticate!(user_name, password) - Same as #crowd_authenticate, but raises an AuthenticationException on failure.

• crowd_current_user_display_name - Returns the current users display name.

• crowd_current_user - Returns the current user, as seen by crowd.

• crowd_token - Returns the crowd token or nil.

• crowd_log_out - Logs the user out

Note on Patches/Pull Requests¶ ↑

• Fork the project.

• Make your feature addition or bug fix.

• Add tests for it. This is important so I don’t break it in a future version unintentionally.

• Commit, do not mess with rakefile, version, or history. (if you want to have your own version, that is fine but bump version in a commit by itself I can ignore when I pull)

• Send me a pull request. Bonus points for topic branches.

Copyright¶ ↑

Copyright © 2010 Stefan Wille. See LICENSE for details.