debshots/README.developer.md

1.1 KiB

Authentication

The application uses omniauth to allow local authentication for moderators and adds OAuth authentication to connect to Google+, Github and other authentication providers.

Documentation on omniauth:

https://github.com/omniauth/omniauth/wiki/List-of-Strategies https://github.com/plataformatec/devise/wiki/OmniAuth:-Overview

Google+

The client ID for the debshots application is:

398593918966-0fpmit0pb6ptio1ndsie5dfcnqhei63l.apps.googleusercontent.com

The private key is:

uRQq_dLs1kx7l5sYIyEyPVRc

(This information is connected to the christoph.haas@gmail.com account.)

Amazon

launchpad

Github

Caveats

The OAuth callback handling uses Ruby's "faraday" library. Unfortunately Faraday may easily miss the directory where the common CAs are stored. So the path to the certificates on the system needs to be provided:

config.omniauth :google_oauth2, '398593918966-0fpmit0pb6ptio1ndsie5dfcnqhei63l.apps.googleusercontent.com', 'uRQq_dLs1kx7l5sYIyEyPVRc', :client_options => {:ssl => {:ca_path => '/etc/ssl/certs'}}

For another explanation of the issue see: https://gist.github.com/kt103099/3183125