apricoteatsgorilla 0.5.10 → 0.5.11

data/Rakefile

@@ -35,7 +35,7 @@ begin
       "--inline-source"
     ]
 
-    spec.add_runtime_dependency("hpricot", "0.8.241")
+    spec.add_runtime_dependency("hpricot", "0.8.2")
     spec.add_development_dependency("rspec", ">= 1.2.8")
   end
 rescue LoadError

data/VERSION

@@ -1 +1 @@
-0.5.10
+0.5.12

data/apricoteatsgorilla.gemspec

@@ -5,7 +5,7 @@
 
 Gem::Specification.new do |s|
   s.name = %q{apricoteatsgorilla}
-  s.version = "0.5.10"
+  s.version = "0.5.11"
 
   s.required_rubygems_version = Gem::Requirement.new(">= 0") if s.respond_to? :required_rubygems_version=
   s.authors = ["Daniel Harrington"]
@@ -23,10 +23,12 @@ Gem::Specification.new do |s|
      "apricoteatsgorilla.gemspec",
      "lib/apricoteatsgorilla.rb",
      "lib/apricoteatsgorilla/apricoteatsgorilla.rb",
+     "lib/apricoteatsgorilla/wsse.rb",
      "lib/apricoteatsgorilla/xml_node.rb",
      "spec/apricoteatsgorilla/apricoteatsgorilla_spec.rb",
      "spec/apricoteatsgorilla/hash_to_xml_spec.rb",
      "spec/apricoteatsgorilla/soap_envelope_spec.rb",
+     "spec/apricoteatsgorilla/wsse_spec.rb",
      "spec/apricoteatsgorilla/xml_node_spec.rb",
      "spec/apricoteatsgorilla/xml_to_hash_spec.rb",
      "spec/spec_helper.rb"

data/lib/apricoteatsgorilla/wsse.rb

@@ -0,0 +1,69 @@
+%w(base64 digest/sha1).each do |gem|
+  require gem
+end
+
+class WSSE
+
+  # Namespace for WS Security Secext.
+  WSENamespace = "http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1.0.xsd"
+
+  # Namespace for WS Security Utility.
+  WSUNamespace = "http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-utility-1.0.xsd"
+
+  class << self
+
+    # Returns the header for the SOAP request. Takes +wsse+ details for adding
+    # WSSE authentication. Defaults to returning +nil+ if +wsse+ is missing.
+    def soap_header(username, password, digest = false)
+      created_at = Time.now.strftime(ApricotEatsGorilla::SOAPDateTimeFormat)
+
+      xml_node("wsse:Security", "xmlns:wsse" => WSENamespace) do
+        xml_node("wsse:UsernameToken", "xmlns:wsu" => WSUNamespace) do
+          xml_node("wsse:Username") { username } <<
+          password_node(password, created_at, digest) <<
+          xml_node("wsse:Nonce") { nonce(created_at) } <<
+          xml_node("wsu:Created") { created_at }
+        end
+      end
+    end
+
+    # Returns the password node for WSSE authentication. Takes the +wsse+ details,
+    # a +created+ Time object and a +nonce+. Creates a passwordText or passwordDigest
+    # node based on the +wsse[:password_digest]+ flag.
+    def password_node(password, created_at, digest = false)
+      if digest
+        attributes = { "Type" => "wsse:PasswordDigest" }
+        token = nonce(created_at) + created_at + password
+        password = Base64.encode64(Digest::SHA1.hexdigest(token)).chomp!
+      else
+        attributes = nil
+      end
+      xml_node("wsse:Password", attributes) { password }
+    end
+
+  private
+
+    # Returns an XML tag with a given +name+. Accepts a +block+ for tag content.
+    # Defaults to returning an empty-element tag in case no block was given.
+    # Also accepts a Hash of +attributes+ to be added to the XML tag.
+    def xml_node(name, attributes = nil)
+      node = XMLNode.new(name.to_s)
+      node.attributes = attributes
+      node.body = yield if block_given?
+
+      node.to_tag
+    end
+
+    # Returns a random WSSE nonce. Expects +Time.now+ for +created+.
+    def nonce(random = nil)
+      random ||= Time.now.to_i
+      Digest::SHA1.hexdigest(random_string + random.to_s)
+    end
+
+    # Returns a random string of a given +length+. Defaults to 100 characters.
+    def random_string(length = 100)
+      (0...length).map { ("a".."z").to_a[rand(26)] }.join
+    end
+
+  end
+end

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification 
 name: apricoteatsgorilla
 version: !ruby/object:Gem::Version 
-  version: 0.5.10
+  version: 0.5.11
 platform: ruby
 authors: 
 - Daniel Harrington
@@ -48,10 +48,12 @@ files:
 - apricoteatsgorilla.gemspec
 - lib/apricoteatsgorilla.rb
 - lib/apricoteatsgorilla/apricoteatsgorilla.rb
+- lib/apricoteatsgorilla/wsse.rb
 - lib/apricoteatsgorilla/xml_node.rb
 - spec/apricoteatsgorilla/apricoteatsgorilla_spec.rb
 - spec/apricoteatsgorilla/hash_to_xml_spec.rb
 - spec/apricoteatsgorilla/soap_envelope_spec.rb
+- spec/apricoteatsgorilla/wsse_spec.rb
 - spec/apricoteatsgorilla/xml_node_spec.rb
 - spec/apricoteatsgorilla/xml_to_hash_spec.rb
 - spec/spec_helper.rb