active_hashcash 0.2.0 → 0.3.1
Sign up to get free protection for your applications and to get access to all the features.
- checksums.yaml +4 -4
- data/CHANGELOG.md +13 -0
- data/README.md +101 -14
- data/app/assets/config/active_hashcash_manifest.js +1 -0
- data/app/assets/javascripts/hashcash.js +257 -0
- data/app/assets/stylesheets/active_hashcash/application.css +15 -0
- data/app/controllers/active_hashcash/addresses_controller.rb +7 -0
- data/app/controllers/active_hashcash/application_controller.rb +4 -0
- data/app/controllers/active_hashcash/assets_controller.rb +34 -0
- data/app/controllers/active_hashcash/stamps_controller.rb +11 -0
- data/app/helpers/active_hashcash/addresses_helper.rb +4 -0
- data/app/helpers/active_hashcash/application_helper.rb +4 -0
- data/app/helpers/active_hashcash/stamps_helper.rb +4 -0
- data/app/jobs/active_hashcash/application_job.rb +4 -0
- data/app/mailers/active_hashcash/application_mailer.rb +6 -0
- data/app/models/active_hashcash/application_record.rb +5 -0
- data/app/models/active_hashcash/stamp.rb +70 -0
- data/app/views/active_hashcash/addresses/index.html.erb +17 -0
- data/app/views/active_hashcash/assets/_logo.svg.erb +1 -0
- data/app/views/active_hashcash/assets/_style.css +148 -0
- data/app/views/active_hashcash/assets/application.css.erb +1 -0
- data/app/views/active_hashcash/assets/ariato.css.erb +2 -0
- data/app/views/active_hashcash/assets/favicon.ico +0 -0
- data/app/views/active_hashcash/assets/favicon.svg.erb +1 -0
- data/app/views/active_hashcash/assets/vendor/_ariato_base.css +1297 -0
- data/app/views/active_hashcash/assets/vendor/_ariato_extra.css +1206 -0
- data/app/views/active_hashcash/stamps/_filters.html.erb +39 -0
- data/app/views/active_hashcash/stamps/index.html.erb +25 -0
- data/app/views/active_hashcash/stamps/show.html.erb +21 -0
- data/app/views/layouts/active_hashcash/application.html.erb +36 -0
- data/config/locales/de.yml +4 -0
- data/config/locales/en.yml +4 -0
- data/config/locales/es.yml +4 -0
- data/config/locales/fr.yml +4 -0
- data/config/locales/it.yml +4 -0
- data/config/locales/jp.yml +4 -0
- data/config/locales/pt.yml +4 -0
- data/config/routes.rb +6 -0
- data/db/migrate/20240215143453_create_active_hashcash_stamps.rb +25 -0
- data/lib/active_hashcash/engine.rb +2 -14
- data/lib/active_hashcash/version.rb +1 -1
- data/lib/active_hashcash.rb +35 -21
- data/lib/tasks/active_hashcash_tasks.rake +4 -0
- metadata +47 -26
- data/lib/active_hashcash/stamp.rb +0 -52
- data/lib/active_hashcash/store.rb +0 -25
|
@@ -0,0 +1,39 @@
|
|
|
1
|
+
<%= form_tag nil, method: :get do %>
|
|
2
|
+
<div class="grid-auto">
|
|
3
|
+
<div role="group">
|
|
4
|
+
<%= label_tag :created_from do %>
|
|
5
|
+
<%= ActiveHashcash::Stamp::human_attribute_name(:created_at) + " ≥" %>
|
|
6
|
+
<%= date_field_tag :created_from, params[:created_from] %>
|
|
7
|
+
<% end %>
|
|
8
|
+
|
|
9
|
+
<%= label_tag :created_from do %>
|
|
10
|
+
<%= ActiveHashcash::Stamp::human_attribute_name(:created_at) + " ≤" %>
|
|
11
|
+
<%= date_field_tag :created_to, params[:created_to] %>
|
|
12
|
+
<% end %>
|
|
13
|
+
</div>
|
|
14
|
+
|
|
15
|
+
<div role="group">
|
|
16
|
+
<%= label_tag :bits_from do %>
|
|
17
|
+
<%= ActiveHashcash::Stamp::human_attribute_name(:bits) + " ≥" %>
|
|
18
|
+
<%= number_field_tag :bits_from, params[:bits_from] %>
|
|
19
|
+
<% end %>
|
|
20
|
+
|
|
21
|
+
<%= label_tag :bits_to do %>
|
|
22
|
+
<%= ActiveHashcash::Stamp::human_attribute_name(:bits) + " ≤" %>
|
|
23
|
+
<%= number_field_tag :bits_to, params[:bits_to] %>
|
|
24
|
+
<% end %>
|
|
25
|
+
</div>
|
|
26
|
+
|
|
27
|
+
<div>
|
|
28
|
+
<%= label_tag :ip_address_starts_with, ActiveHashcash::Stamp::human_attribute_name(:ip_address) %>
|
|
29
|
+
<%= text_field_tag :ip_address_starts_with, params[:ip_address_starts_with] %>
|
|
30
|
+
</div>
|
|
31
|
+
|
|
32
|
+
<div>
|
|
33
|
+
<%= label_tag :request_path_starts_with, ActiveHashcash::Stamp::human_attribute_name(:request_path) %>
|
|
34
|
+
<%= text_field_tag :request_path_starts_with, params[:request_path_starts_with] %>
|
|
35
|
+
</div>
|
|
36
|
+
|
|
37
|
+
<%= submit_tag t("active_hashcash.submit_filter") %>
|
|
38
|
+
</div>
|
|
39
|
+
<% end %>
|
|
@@ -0,0 +1,25 @@
|
|
|
1
|
+
<details>
|
|
2
|
+
<summary>Filters</summary>
|
|
3
|
+
<%= render "filters" %>
|
|
4
|
+
</details>
|
|
5
|
+
|
|
6
|
+
<table>
|
|
7
|
+
<thead>
|
|
8
|
+
<tr>
|
|
9
|
+
<th><%= ActiveHashcash::Stamp.human_attribute_name(:created_at) %></th>
|
|
10
|
+
<th><%= ActiveHashcash::Stamp.human_attribute_name(:ip_address) %></th>
|
|
11
|
+
<th><%= ActiveHashcash::Stamp.human_attribute_name(:request_path) %></th>
|
|
12
|
+
<th><%= ActiveHashcash::Stamp.human_attribute_name(:bits) %></th>
|
|
13
|
+
</tr>
|
|
14
|
+
</thead>
|
|
15
|
+
<tbody>
|
|
16
|
+
<% for stamp in @stamps %>
|
|
17
|
+
<tr>
|
|
18
|
+
<td><%= link_to stamp.created_at, stamp %></td>
|
|
19
|
+
<td><%= stamp.ip_address %></td>
|
|
20
|
+
<td><%= stamp.request_path %></td>
|
|
21
|
+
<td><%= stamp.bits %></td>
|
|
22
|
+
</tr>
|
|
23
|
+
<% end %>
|
|
24
|
+
</tbody>
|
|
25
|
+
</table>
|
|
@@ -0,0 +1,21 @@
|
|
|
1
|
+
|
|
2
|
+
<h3><%= @stamp %></h3>
|
|
3
|
+
<dl>
|
|
4
|
+
<dt><%= @stamp.class.human_attribute_name(:created_at) %></dt>
|
|
5
|
+
<dd><%= l @stamp.created_at %></dd>
|
|
6
|
+
|
|
7
|
+
<dt><%= @stamp.class.human_attribute_name(:resource) %></dt>
|
|
8
|
+
<dd><%= @stamp.resource %></dd>
|
|
9
|
+
|
|
10
|
+
<dt><%= @stamp.class.human_attribute_name(:bits) %></dt>
|
|
11
|
+
<dd><%= @stamp.bits %></dd>
|
|
12
|
+
|
|
13
|
+
<dt><%= @stamp.class.human_attribute_name(:ip_address) %></dt>
|
|
14
|
+
<dd><%= @stamp.ip_address %></dd>
|
|
15
|
+
|
|
16
|
+
<dt><%= @stamp.class.human_attribute_name(:request_path) %></dt>
|
|
17
|
+
<dd><%= @stamp.request_path %></dd>
|
|
18
|
+
|
|
19
|
+
<dt><%= @stamp.class.human_attribute_name(:context) %></dt>
|
|
20
|
+
<dd><%= @stamp.context %></dd>
|
|
21
|
+
</dl>
|
|
@@ -0,0 +1,36 @@
|
|
|
1
|
+
<!DOCTYPE html>
|
|
2
|
+
<html class="active-analytics">
|
|
3
|
+
<head>
|
|
4
|
+
<title>Active Hashcash</title>
|
|
5
|
+
<%= csrf_meta_tags %>
|
|
6
|
+
<%= csp_meta_tag %>
|
|
7
|
+
|
|
8
|
+
<%= tag.link rel: "icon", href: asset_path(:favicon, format: :ico), sizes: "32x32" %>
|
|
9
|
+
<%= tag.link rel: "icon", href: asset_path(:favicon, format: :svg), type: "image/svg+xml" %>
|
|
10
|
+
|
|
11
|
+
<%= tag.link rel: "stylesheet", href: asset_path(:ariato, format: :css) %>
|
|
12
|
+
<%= tag.link rel: "stylesheet", href: asset_path(:application, format: :css) %>
|
|
13
|
+
</head>
|
|
14
|
+
<body>
|
|
15
|
+
<header>
|
|
16
|
+
<nav aria-label="site">
|
|
17
|
+
<ul role="menu" aria-label="Elements" class="is-horizontal">
|
|
18
|
+
<li role="none" class="logo"><%= link_to(root_path) { render partial: "/active_hashcash/assets/logo", formats: [:svg] } %></li>
|
|
19
|
+
<li role="none"><%= link_to_unless_current ActiveHashcash::Stamp.model_name.human.pluralize, stamps_path %></li>
|
|
20
|
+
<li role="none"><%= link_to_unless_current "Top IP addresses", addresses_path %></li>
|
|
21
|
+
</ul>
|
|
22
|
+
</nav>
|
|
23
|
+
</header>
|
|
24
|
+
|
|
25
|
+
<main class="card">
|
|
26
|
+
<%= yield %>
|
|
27
|
+
</main>
|
|
28
|
+
|
|
29
|
+
<footer>
|
|
30
|
+
Made by <a href="https://www.rorvswild.com">RorVsWild</a> |
|
|
31
|
+
<a href="https://github.com/BaseSecrete/active_hashcash">Source code</a> |
|
|
32
|
+
<a href="https://twitter.com/rorvswild">Twitter</a> |
|
|
33
|
+
<a href="https://ruby.social/@rorvswild">Mastodon</a> |
|
|
34
|
+
</footer>
|
|
35
|
+
</body>
|
|
36
|
+
</html>
|
data/config/routes.rb
ADDED
|
@@ -0,0 +1,25 @@
|
|
|
1
|
+
class CreateActiveHashcashStamps < ActiveRecord::Migration[5.2]
|
|
2
|
+
def change
|
|
3
|
+
create_table :active_hashcash_stamps do |t|
|
|
4
|
+
t.string :version, null: false
|
|
5
|
+
t.integer :bits, null: false
|
|
6
|
+
t.date :date, null: false
|
|
7
|
+
t.string :resource, null: false
|
|
8
|
+
t.string :ext, null: false
|
|
9
|
+
t.string :rand, null: false
|
|
10
|
+
t.string :counter, null: false
|
|
11
|
+
t.string :request_path
|
|
12
|
+
t.string :ip_address
|
|
13
|
+
|
|
14
|
+
if t.respond_to?(:jsonb)
|
|
15
|
+
t.jsonb :context # SQLite JSONB support from version 3.45 (2024-01-15)
|
|
16
|
+
elsif t.respond_to?(:json)
|
|
17
|
+
t.json :context
|
|
18
|
+
end
|
|
19
|
+
|
|
20
|
+
t.timestamps
|
|
21
|
+
end
|
|
22
|
+
add_index :active_hashcash_stamps, [:ip_address, :created_at], where: "ip_address IS NOT NULL"
|
|
23
|
+
add_index :active_hashcash_stamps, [:counter, :rand, :date, :resource, :bits, :version, :ext], name: "index_active_hashcash_stamps_unique", unique: true
|
|
24
|
+
end
|
|
25
|
+
end
|
|
@@ -1,19 +1,7 @@
|
|
|
1
1
|
module ActiveHashcash
|
|
2
2
|
class Engine < ::Rails::Engine
|
|
3
|
-
config.assets.paths << File.expand_path("../..", __FILE__)
|
|
3
|
+
config.assets.paths << File.expand_path("../..", __FILE__) if config.respond_to?(:assets)
|
|
4
4
|
|
|
5
|
-
|
|
6
|
-
|
|
7
|
-
def load_translations
|
|
8
|
-
if !I18n.backend.exists?(I18n.locale, "active_hashcash")
|
|
9
|
-
I18n.backend.store_translations(:de, {active_hashcash: {waiting_label: "Warten auf die Überprüfung ..."}})
|
|
10
|
-
I18n.backend.store_translations(:en, {active_hashcash: {waiting_label: "Waiting for verification ..."}})
|
|
11
|
-
I18n.backend.store_translations(:es, {active_hashcash: {waiting_label: "A la espera de la verificación ..."}})
|
|
12
|
-
I18n.backend.store_translations(:fr, {active_hashcash: {waiting_label: "En attente de vérification ..."}})
|
|
13
|
-
I18n.backend.store_translations(:it, {active_hashcash: {waiting_label: "In attesa di verifica ..."}})
|
|
14
|
-
I18n.backend.store_translations(:jp, {active_hashcash: {waiting_label: "検証待ち ..."}})
|
|
15
|
-
I18n.backend.store_translations(:pt, {active_hashcash: {waiting_label: "À espera de verificação ..."}})
|
|
16
|
-
end
|
|
17
|
-
end
|
|
5
|
+
isolate_namespace ActiveHashcash
|
|
18
6
|
end
|
|
19
7
|
end
|
data/lib/active_hashcash.rb
CHANGED
|
@@ -1,3 +1,6 @@
|
|
|
1
|
+
require "active_hashcash/version"
|
|
2
|
+
require "active_hashcash/engine"
|
|
3
|
+
|
|
1
4
|
module ActiveHashcash
|
|
2
5
|
extend ActiveSupport::Concern
|
|
3
6
|
|
|
@@ -7,31 +10,41 @@ module ActiveHashcash
|
|
|
7
10
|
helper_method :hashcash_hidden_field_tag
|
|
8
11
|
end
|
|
9
12
|
|
|
10
|
-
mattr_accessor :bits, instance_accessor: false, default: 20
|
|
11
13
|
mattr_accessor :resource, instance_accessor: false
|
|
12
|
-
mattr_accessor :redis_url, instance_accessor: false, default: ENV["ACTIVE_HASHCASH_REDIS_URL"] || ENV["REDIS_URL"]
|
|
13
|
-
|
|
14
|
-
def self.store
|
|
15
|
-
@store ||= Store.new(Redis.new(url: ActiveHashcash.redis_url))
|
|
16
|
-
end
|
|
17
14
|
|
|
18
|
-
|
|
19
|
-
|
|
20
|
-
|
|
15
|
+
# This is base complexity.
|
|
16
|
+
# Consider lowering it to not exclude people with old and slow devices.
|
|
17
|
+
mattr_accessor :bits, instance_accessor: false, default: 16
|
|
21
18
|
|
|
22
|
-
|
|
19
|
+
mattr_accessor :date_format, instance_accessor: false, default: "%y%m%d"
|
|
23
20
|
|
|
24
|
-
# Call me via a before_action when the form is submitted : `before_action :
|
|
21
|
+
# Call me via a before_action when the form is submitted : `before_action :check_hashcash, only: :create`
|
|
25
22
|
def check_hashcash
|
|
26
|
-
|
|
27
|
-
|
|
23
|
+
attrs = {
|
|
24
|
+
ip_address: hashcash_ip_address,
|
|
25
|
+
request_path: hashcash_request_path,
|
|
26
|
+
context: hashcash_stamp_context
|
|
27
|
+
}
|
|
28
|
+
if hashcash_param && Stamp.spend(hashcash_param, hashcash_resource, hashcash_bits, Date.yesterday, attrs)
|
|
28
29
|
hashcash_after_success
|
|
29
30
|
else
|
|
30
31
|
hashcash_after_failure
|
|
31
32
|
end
|
|
32
33
|
end
|
|
33
34
|
|
|
34
|
-
# Override the methods below in your controller, to change any parameter
|
|
35
|
+
# Override the methods below in your controller, to change any parameter or behaviour.
|
|
36
|
+
|
|
37
|
+
def hashcash_ip_address
|
|
38
|
+
request.remote_ip
|
|
39
|
+
end
|
|
40
|
+
|
|
41
|
+
def hashcash_request_path
|
|
42
|
+
request.path
|
|
43
|
+
end
|
|
44
|
+
|
|
45
|
+
def hashcash_stamp_context
|
|
46
|
+
# Override this method to store custom data for each stamp
|
|
47
|
+
end
|
|
35
48
|
|
|
36
49
|
# By default the host name is used as the resource.
|
|
37
50
|
# It' should be good for most cases and prevent from reusing the same stamp between sites.
|
|
@@ -39,10 +52,15 @@ module ActiveHashcash
|
|
|
39
52
|
ActiveHashcash.resource || request.host
|
|
40
53
|
end
|
|
41
54
|
|
|
42
|
-
#
|
|
43
|
-
#
|
|
55
|
+
# Returns the complexity, the higher the slower it is.
|
|
56
|
+
# Complexity is increased logarithmicly for each IP during the last 24H to slowdown brute force attacks.
|
|
57
|
+
# The minimun value returned is `ActiveHashcash.bits`.
|
|
44
58
|
def hashcash_bits
|
|
45
|
-
ActiveHashcash.
|
|
59
|
+
if (previous_stamp_count = ActiveHashcash::Stamp.where(ip_address: hashcash_ip_address).where(created_at: 1.day.ago..).count) > 0
|
|
60
|
+
(ActiveHashcash.bits + Math.log2(previous_stamp_count)).floor
|
|
61
|
+
else
|
|
62
|
+
ActiveHashcash.bits
|
|
63
|
+
end
|
|
46
64
|
end
|
|
47
65
|
|
|
48
66
|
# Override if you want to rename the hashcash param.
|
|
@@ -72,7 +90,3 @@ module ActiveHashcash
|
|
|
72
90
|
hidden_field_tag(name, "", "data-hashcash" => options.to_json)
|
|
73
91
|
end
|
|
74
92
|
end
|
|
75
|
-
|
|
76
|
-
require "active_hashcash/stamp"
|
|
77
|
-
require "active_hashcash/store"
|
|
78
|
-
require "active_hashcash/engine"
|
metadata
CHANGED
|
@@ -1,29 +1,15 @@
|
|
|
1
1
|
--- !ruby/object:Gem::Specification
|
|
2
2
|
name: active_hashcash
|
|
3
3
|
version: !ruby/object:Gem::Version
|
|
4
|
-
version: 0.
|
|
4
|
+
version: 0.3.1
|
|
5
5
|
platform: ruby
|
|
6
6
|
authors:
|
|
7
7
|
- Alexis Bernard
|
|
8
|
-
autorequire:
|
|
9
|
-
bindir:
|
|
8
|
+
autorequire:
|
|
9
|
+
bindir: bin
|
|
10
10
|
cert_chain: []
|
|
11
|
-
date:
|
|
11
|
+
date: 2024-04-04 00:00:00.000000000 Z
|
|
12
12
|
dependencies:
|
|
13
|
-
- !ruby/object:Gem::Dependency
|
|
14
|
-
name: redis
|
|
15
|
-
requirement: !ruby/object:Gem::Requirement
|
|
16
|
-
requirements:
|
|
17
|
-
- - ">="
|
|
18
|
-
- !ruby/object:Gem::Version
|
|
19
|
-
version: 4.0.0
|
|
20
|
-
type: :runtime
|
|
21
|
-
prerelease: false
|
|
22
|
-
version_requirements: !ruby/object:Gem::Requirement
|
|
23
|
-
requirements:
|
|
24
|
-
- - ">="
|
|
25
|
-
- !ruby/object:Gem::Version
|
|
26
|
-
version: 4.0.0
|
|
27
13
|
- !ruby/object:Gem::Dependency
|
|
28
14
|
name: rails
|
|
29
15
|
requirement: !ruby/object:Gem::Requirement
|
|
@@ -38,8 +24,8 @@ dependencies:
|
|
|
38
24
|
- - ">="
|
|
39
25
|
- !ruby/object:Gem::Version
|
|
40
26
|
version: 5.2.0
|
|
41
|
-
description:
|
|
42
|
-
|
|
27
|
+
description: Protect Rails applications against bots and brute force attacks without
|
|
28
|
+
annoying humans.
|
|
43
29
|
email:
|
|
44
30
|
- alexis@basesecrete.com
|
|
45
31
|
executables: []
|
|
@@ -49,12 +35,47 @@ files:
|
|
|
49
35
|
- CHANGELOG.md
|
|
50
36
|
- LICENSE.txt
|
|
51
37
|
- README.md
|
|
38
|
+
- app/assets/config/active_hashcash_manifest.js
|
|
39
|
+
- app/assets/javascripts/hashcash.js
|
|
40
|
+
- app/assets/stylesheets/active_hashcash/application.css
|
|
41
|
+
- app/controllers/active_hashcash/addresses_controller.rb
|
|
42
|
+
- app/controllers/active_hashcash/application_controller.rb
|
|
43
|
+
- app/controllers/active_hashcash/assets_controller.rb
|
|
44
|
+
- app/controllers/active_hashcash/stamps_controller.rb
|
|
45
|
+
- app/helpers/active_hashcash/addresses_helper.rb
|
|
46
|
+
- app/helpers/active_hashcash/application_helper.rb
|
|
47
|
+
- app/helpers/active_hashcash/stamps_helper.rb
|
|
48
|
+
- app/jobs/active_hashcash/application_job.rb
|
|
49
|
+
- app/mailers/active_hashcash/application_mailer.rb
|
|
50
|
+
- app/models/active_hashcash/application_record.rb
|
|
51
|
+
- app/models/active_hashcash/stamp.rb
|
|
52
|
+
- app/views/active_hashcash/addresses/index.html.erb
|
|
53
|
+
- app/views/active_hashcash/assets/_logo.svg.erb
|
|
54
|
+
- app/views/active_hashcash/assets/_style.css
|
|
55
|
+
- app/views/active_hashcash/assets/application.css.erb
|
|
56
|
+
- app/views/active_hashcash/assets/ariato.css.erb
|
|
57
|
+
- app/views/active_hashcash/assets/favicon.ico
|
|
58
|
+
- app/views/active_hashcash/assets/favicon.svg.erb
|
|
59
|
+
- app/views/active_hashcash/assets/vendor/_ariato_base.css
|
|
60
|
+
- app/views/active_hashcash/assets/vendor/_ariato_extra.css
|
|
61
|
+
- app/views/active_hashcash/stamps/_filters.html.erb
|
|
62
|
+
- app/views/active_hashcash/stamps/index.html.erb
|
|
63
|
+
- app/views/active_hashcash/stamps/show.html.erb
|
|
64
|
+
- app/views/layouts/active_hashcash/application.html.erb
|
|
65
|
+
- config/locales/de.yml
|
|
66
|
+
- config/locales/en.yml
|
|
67
|
+
- config/locales/es.yml
|
|
68
|
+
- config/locales/fr.yml
|
|
69
|
+
- config/locales/it.yml
|
|
70
|
+
- config/locales/jp.yml
|
|
71
|
+
- config/locales/pt.yml
|
|
72
|
+
- config/routes.rb
|
|
73
|
+
- db/migrate/20240215143453_create_active_hashcash_stamps.rb
|
|
52
74
|
- lib/active_hashcash.rb
|
|
53
75
|
- lib/active_hashcash/engine.rb
|
|
54
|
-
- lib/active_hashcash/stamp.rb
|
|
55
|
-
- lib/active_hashcash/store.rb
|
|
56
76
|
- lib/active_hashcash/version.rb
|
|
57
77
|
- lib/hashcash.js
|
|
78
|
+
- lib/tasks/active_hashcash_tasks.rake
|
|
58
79
|
homepage: https://github.com/BaseSecrete/active_hashcash
|
|
59
80
|
licenses:
|
|
60
81
|
- MIT
|
|
@@ -62,7 +83,7 @@ metadata:
|
|
|
62
83
|
homepage_uri: https://github.com/BaseSecrete/active_hashcash
|
|
63
84
|
source_code_uri: https://github.com/BaseSecrete/active_hashcash
|
|
64
85
|
changelog_uri: https://github.com/BaseSecrete/active_hashcash/CHANGELOG.md
|
|
65
|
-
post_install_message:
|
|
86
|
+
post_install_message:
|
|
66
87
|
rdoc_options: []
|
|
67
88
|
require_paths:
|
|
68
89
|
- lib
|
|
@@ -78,8 +99,8 @@ required_rubygems_version: !ruby/object:Gem::Requirement
|
|
|
78
99
|
version: '0'
|
|
79
100
|
requirements: []
|
|
80
101
|
rubygems_version: 3.2.22
|
|
81
|
-
signing_key:
|
|
102
|
+
signing_key:
|
|
82
103
|
specification_version: 4
|
|
83
|
-
summary:
|
|
84
|
-
|
|
104
|
+
summary: Protect Rails applications against bots and brute force attacks without annoying
|
|
105
|
+
humans.
|
|
85
106
|
test_files: []
|
|
@@ -1,52 +0,0 @@
|
|
|
1
|
-
module ActiveHashcash
|
|
2
|
-
class Stamp
|
|
3
|
-
attr_reader :version, :bits, :date, :resource, :extension, :rand, :counter
|
|
4
|
-
|
|
5
|
-
def self.parse(string)
|
|
6
|
-
args = string.split(":")
|
|
7
|
-
new(args[0], args[1], args[2], args[3], args[4], args[5], args[6])
|
|
8
|
-
end
|
|
9
|
-
|
|
10
|
-
def self.mint(resource, options = {})
|
|
11
|
-
new(
|
|
12
|
-
options[:version] || 1,
|
|
13
|
-
options[:bits] || ActiveHashcash.bits,
|
|
14
|
-
options[:date] || Date.today.strftime("%y%m%d"),
|
|
15
|
-
resource,
|
|
16
|
-
options[:ext],
|
|
17
|
-
options[:rand] || SecureRandom.alphanumeric(16),
|
|
18
|
-
options[:counter] || 0).work
|
|
19
|
-
end
|
|
20
|
-
|
|
21
|
-
def initialize(version, bits, date, resource, extension, rand, counter)
|
|
22
|
-
@version = version
|
|
23
|
-
@bits = bits.to_i
|
|
24
|
-
@date = date.respond_to?(:strftime) ? date.strftime("%y%m%d") : date
|
|
25
|
-
@resource = resource
|
|
26
|
-
@extension = extension
|
|
27
|
-
@rand = rand
|
|
28
|
-
@counter = counter
|
|
29
|
-
end
|
|
30
|
-
|
|
31
|
-
def valid?
|
|
32
|
-
Digest::SHA1.hexdigest(to_s).hex >> (160-bits) == 0
|
|
33
|
-
end
|
|
34
|
-
|
|
35
|
-
def verify(resource, bits, date)
|
|
36
|
-
self.resource == resource && self.bits >= bits && parse_date >= date && valid?
|
|
37
|
-
end
|
|
38
|
-
|
|
39
|
-
def to_s
|
|
40
|
-
[version, bits, date, resource, extension, rand, counter].join(":")
|
|
41
|
-
end
|
|
42
|
-
|
|
43
|
-
def parse_date
|
|
44
|
-
Date.strptime(date, "%y%m%d")
|
|
45
|
-
end
|
|
46
|
-
|
|
47
|
-
def work
|
|
48
|
-
@counter += 1 until valid?
|
|
49
|
-
self
|
|
50
|
-
end
|
|
51
|
-
end
|
|
52
|
-
end
|
|
@@ -1,25 +0,0 @@
|
|
|
1
|
-
module ActiveHashcash
|
|
2
|
-
class Store
|
|
3
|
-
attr_reader :redis
|
|
4
|
-
|
|
5
|
-
def initialize(redis = Redis.new(url: ActiveHashcash.redis_url || ENV["ACTIVE_HASHCASH_REDIS_URL"] || ENV["REDIS_URL"]))
|
|
6
|
-
@redis = redis
|
|
7
|
-
end
|
|
8
|
-
|
|
9
|
-
def add?(stamp)
|
|
10
|
-
redis.sadd("active_hashcash_stamps_#{stamp.date}", stamp) ? self : nil
|
|
11
|
-
end
|
|
12
|
-
|
|
13
|
-
def clear
|
|
14
|
-
redis.del(redis.keys("active_hashcash_stamps*"))
|
|
15
|
-
end
|
|
16
|
-
|
|
17
|
-
def clean
|
|
18
|
-
today = Date.today.strftime("%y%m%d")
|
|
19
|
-
yesterday = (Date.today - 1).strftime("%y%m%d")
|
|
20
|
-
keep = ["active_hashcash_stamps_#{today}", "active_hashcash_stamps_#{yesterday}"]
|
|
21
|
-
keys = redis.keys("active_hashcash_stamps*")
|
|
22
|
-
redis.del(keys - keep)
|
|
23
|
-
end
|
|
24
|
-
end
|
|
25
|
-
end
|