android_key_attestation 0.1.0 → 0.2.0

Sign up to get free protection for your applications and to get access to all the features.
checksums.yaml CHANGED
@@ -1,7 +1,7 @@
1
1
  ---
2
2
  SHA256:
3
- metadata.gz: f6d069c54d20d5a62e2bbb75a5a0f5490f55ba0a20f38eecd0c91288a351beba
4
- data.tar.gz: d51c1df2da6c08819f2ac480686b791cef08e7aaac61dfbe422eecd4b0d5a938
3
+ metadata.gz: 4e3bb936ba3e6e271423c4a56a8e07450a097161d3ad4c9f7a38615d9206814c
4
+ data.tar.gz: 3e64a79f6258523de7b6a6c4cc357c16904425dfc95d74a2e4269e8655395d60
5
5
  SHA512:
6
- metadata.gz: a136673192f2a5111dbb19c91bfdcba1a0476b2d320d5cf901f39d5d363ca64310a40386d110e4c76f74a8fb060979e5592dbdb2ee647b8c707463326a85018f
7
- data.tar.gz: 35eee1d3da3195d9ed48d990756aa2f8343f60c9135d02c3cb53da68b19ee8ccb017db3635e5a11f7808870c307c1f0fc7b10ea3dc3d9461538f7709450a2282
6
+ metadata.gz: 561e7a64bcd9d164368ca967214fc3d777bc3ebce59e53f650d6e44b9b68c3ae5707aecc99e1c2b03b425e0c0ad669f8ccf8f5321d3472b0b6966b6b3ee3559e
7
+ data.tar.gz: da3cff8a1cfdfa7ff3a4331e6261cb460dba73271f31fbd0295e3599e24572ea4b1887b8d0f6dd8c255f0b0d9731adf6f97009bcf1adbba4107be3b15d2d38bd
@@ -4,11 +4,14 @@ All notable changes to this project will be documented in this file.
4
4
  The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/),
5
5
  and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
6
6
 
7
- ## [Unreleased]
7
+ ## [0.2.0] - 2019-12-31
8
+ ### Changed
9
+ - Raise `ChallengeMismatchError` if the challenge lengths are different, not `ArgumentError`
8
10
 
9
11
  ## [0.1.0] - 2019-12-29
10
12
  ### Added
11
13
  - Extracted from [webauthn-ruby](https://github.com/cedarcode/webauthn-ruby) after discussion with the maintainers. Thanks for the feedback @grzuy and @brauliomartinezlm!
12
14
 
13
15
  [Unreleased]: https://github.com/bdewater/android_key_attestation/compare/v0.1.0...HEAD
16
+ [0.1.0]: https://github.com/bdewater/android_key_attestation/releases/tag/v0.1.0...0.2.0
14
17
  [0.1.0]: https://github.com/bdewater/android_key_attestation/releases/tag/v0.1.0
@@ -1,7 +1,7 @@
1
1
  PATH
2
2
  remote: .
3
3
  specs:
4
- android_key_attestation (0.1.0)
4
+ android_key_attestation (0.2.0)
5
5
 
6
6
  GEM
7
7
  remote: https://rubygems.org/
@@ -24,7 +24,9 @@ module AndroidKeyAttestation
24
24
  end
25
25
 
26
26
  def verify_challenge(challenge)
27
- OpenSSL.fixed_length_secure_compare(key_description.attestation_challenge, challenge) ||
27
+ attestation_challenge = key_description.attestation_challenge
28
+ attestation_challenge.bytesize == challenge.bytesize &&
29
+ OpenSSL.fixed_length_secure_compare(attestation_challenge, challenge) ||
28
30
  raise(ChallengeMismatchError)
29
31
  end
30
32
 
@@ -1,5 +1,5 @@
1
1
  # frozen_string_literal: true
2
2
 
3
3
  module AndroidKeyAttestation
4
- VERSION = "0.1.0"
4
+ VERSION = "0.2.0"
5
5
  end
metadata CHANGED
@@ -1,14 +1,14 @@
1
1
  --- !ruby/object:Gem::Specification
2
2
  name: android_key_attestation
3
3
  version: !ruby/object:Gem::Version
4
- version: 0.1.0
4
+ version: 0.2.0
5
5
  platform: ruby
6
6
  authors:
7
7
  - Bart de Water
8
8
  autorequire:
9
9
  bindir: exe
10
10
  cert_chain: []
11
- date: 2019-12-30 00:00:00.000000000 Z
11
+ date: 2019-12-31 00:00:00.000000000 Z
12
12
  dependencies:
13
13
  - !ruby/object:Gem::Dependency
14
14
  name: bundler