android_key_attestation 0.1.0 → 0.2.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
checksums.yaml CHANGED
@@ -1,7 +1,7 @@
1
1
  ---
2
2
  SHA256:
3
- metadata.gz: f6d069c54d20d5a62e2bbb75a5a0f5490f55ba0a20f38eecd0c91288a351beba
4
- data.tar.gz: d51c1df2da6c08819f2ac480686b791cef08e7aaac61dfbe422eecd4b0d5a938
3
+ metadata.gz: 4e3bb936ba3e6e271423c4a56a8e07450a097161d3ad4c9f7a38615d9206814c
4
+ data.tar.gz: 3e64a79f6258523de7b6a6c4cc357c16904425dfc95d74a2e4269e8655395d60
5
5
  SHA512:
6
- metadata.gz: a136673192f2a5111dbb19c91bfdcba1a0476b2d320d5cf901f39d5d363ca64310a40386d110e4c76f74a8fb060979e5592dbdb2ee647b8c707463326a85018f
7
- data.tar.gz: 35eee1d3da3195d9ed48d990756aa2f8343f60c9135d02c3cb53da68b19ee8ccb017db3635e5a11f7808870c307c1f0fc7b10ea3dc3d9461538f7709450a2282
6
+ metadata.gz: 561e7a64bcd9d164368ca967214fc3d777bc3ebce59e53f650d6e44b9b68c3ae5707aecc99e1c2b03b425e0c0ad669f8ccf8f5321d3472b0b6966b6b3ee3559e
7
+ data.tar.gz: da3cff8a1cfdfa7ff3a4331e6261cb460dba73271f31fbd0295e3599e24572ea4b1887b8d0f6dd8c255f0b0d9731adf6f97009bcf1adbba4107be3b15d2d38bd
@@ -4,11 +4,14 @@ All notable changes to this project will be documented in this file.
4
4
  The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/),
5
5
  and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
6
6
 
7
- ## [Unreleased]
7
+ ## [0.2.0] - 2019-12-31
8
+ ### Changed
9
+ - Raise `ChallengeMismatchError` if the challenge lengths are different, not `ArgumentError`
8
10
 
9
11
  ## [0.1.0] - 2019-12-29
10
12
  ### Added
11
13
  - Extracted from [webauthn-ruby](https://github.com/cedarcode/webauthn-ruby) after discussion with the maintainers. Thanks for the feedback @grzuy and @brauliomartinezlm!
12
14
 
13
15
  [Unreleased]: https://github.com/bdewater/android_key_attestation/compare/v0.1.0...HEAD
16
+ [0.1.0]: https://github.com/bdewater/android_key_attestation/releases/tag/v0.1.0...0.2.0
14
17
  [0.1.0]: https://github.com/bdewater/android_key_attestation/releases/tag/v0.1.0
@@ -1,7 +1,7 @@
1
1
  PATH
2
2
  remote: .
3
3
  specs:
4
- android_key_attestation (0.1.0)
4
+ android_key_attestation (0.2.0)
5
5
 
6
6
  GEM
7
7
  remote: https://rubygems.org/
@@ -24,7 +24,9 @@ module AndroidKeyAttestation
24
24
  end
25
25
 
26
26
  def verify_challenge(challenge)
27
- OpenSSL.fixed_length_secure_compare(key_description.attestation_challenge, challenge) ||
27
+ attestation_challenge = key_description.attestation_challenge
28
+ attestation_challenge.bytesize == challenge.bytesize &&
29
+ OpenSSL.fixed_length_secure_compare(attestation_challenge, challenge) ||
28
30
  raise(ChallengeMismatchError)
29
31
  end
30
32
 
@@ -1,5 +1,5 @@
1
1
  # frozen_string_literal: true
2
2
 
3
3
  module AndroidKeyAttestation
4
- VERSION = "0.1.0"
4
+ VERSION = "0.2.0"
5
5
  end
metadata CHANGED
@@ -1,14 +1,14 @@
1
1
  --- !ruby/object:Gem::Specification
2
2
  name: android_key_attestation
3
3
  version: !ruby/object:Gem::Version
4
- version: 0.1.0
4
+ version: 0.2.0
5
5
  platform: ruby
6
6
  authors:
7
7
  - Bart de Water
8
8
  autorequire:
9
9
  bindir: exe
10
10
  cert_chain: []
11
- date: 2019-12-30 00:00:00.000000000 Z
11
+ date: 2019-12-31 00:00:00.000000000 Z
12
12
  dependencies:
13
13
  - !ruby/object:Gem::Dependency
14
14
  name: bundler