authi 0.0.1

checksums.yaml

@@ -0,0 +1,7 @@
+---
+SHA1:
+  metadata.gz: 5c8e642e8a4f623ad706645634ce3649503418e2
+  data.tar.gz: c797223eff7fb120b58a58d2027f594e9bd9303f
+SHA512:
+  metadata.gz: ae732dade8677ccf0ecfcc08fa2b78a42e6237e00f2afe42d50ad787e43ee265764da1648c9a82edcce12c2d5b99b55526257518b53d64c3b8dd24a475c6a329
+  data.tar.gz: f4d56ed1bff4149b1d584350062d2b16be4343e9418cbe9a2bb26cfe09c82dde08232c4d753f294e1962e3124b4288d253e97bebdb7c36ed52741dafa23a4082

data/lib/authi.rb

@@ -0,0 +1,79 @@
+require 'openssl'
+require 'base64'
+require 'securerandom'
+# Api Authentication Module
+module Authy
+  # Create a signed hash using input parameter
+  #
+  # Example:
+  #   >> Authy.generate_signed_header({ 'key' => value })
+  #   => {:"X-OWNING-SERVICE"=>"l", :"X-SIGNING-ORDER"=>"", :"X-SIGNATURE"=>""}
+  #
+  # Arguments:
+  #   data: (map)
+  def self.generate_signed_header(data, service_name = ENV['service_name'])
+    processed_data, deep_lookup_table = Authy.fully_qualified_keys(data)
+    signing_order = processed_data + ',' + 'owning_service,signing_order'
+    request_data = Authy.build_query(processed_data, deep_lookup_table)
+    unsigned_data = request_data + \
+                    '&owning_service=' + service_name + '&signing_order=' + \
+                    signing_order
+    digest = OpenSSL::Digest.new('sha1')
+    hmac = OpenSSL::HMAC.digest(digest, ENV['shared_key'], unsigned_data)
+    signed_str = Base64.strict_encode64(hmac)
+    { 'X-OWNING-SERVICE': ENV['service_name'], 'X-SIGNING-ORDER': signing_order,
+      'X-SIGNATURE': signed_str }
+  end
+
+  # Method to create signed order and signed parameter deep lookup map
+  def self.fully_qualified_keys(object, fully_qualified_keys = [], val = '', prefix = nil, map = {}) # :nodoc:
+    if object.is_a? Hash
+      object.each do |key, value|
+        key_ = prefix.nil? ? key : prefix + '[' + key + ']'
+        Authy.fully_qualified_keys(val, fully_qualified_keys,
+                                     value, key_, map)
+      end
+    elsif object.is_a? Array
+      object.each_with_index do |item, index|
+        key_ = prefix + '[' + index.to_s + ']'
+        Authy.fully_qualified_keys(item, fully_qualified_keys,
+                                     item, key_, map)
+      end
+    else
+      map[prefix] = val.to_s
+      fully_qualified_keys << prefix
+    end
+    [fully_qualified_keys.join(','), map]
+  end
+
+  # Utility method to build quary from deep lookup table and parameters
+  def self.build_query(processed_data, deep_lookup_table) # :nodoc:
+    query = []
+    processed_data.split(',').each { |data| query << data + '=' + deep_lookup_table[data].to_s }
+    query.join('&')
+  end
+
+  # Validate API
+  #
+  # Example:
+  #   >> Authy.validate_api(params, request.headers)
+  #   => true/false
+  #
+  # Arguments:
+  #   params: (map)
+  #   header
+  def self.validate_api(params, header)
+    owning_service = header['Authorization'][:'X-OWNING-SERVICE']
+    expected_header = Authy.generate_signed_header(params, owning_service)
+    expected_header[:'X-SIGNATURE'] == header['Authorization'][:'X-SIGNATURE']
+  end
+
+  # Generate a pre-shared key for client
+  #
+  # Example:
+  #   >> Authy.generate_secret_key
+  #   => "63SnNesbvA9IuwXlkpF9KA=="
+  def self.generate_secret_key
+    SecureRandom.base64
+  end
+end

metadata

@@ -0,0 +1,48 @@
+--- !ruby/object:Gem::Specification
+name: authi
+version: !ruby/object:Gem::Version
+  version: 0.0.1
+platform: ruby
+authors:
+- Nithin Kumar
+autorequire: 
+bindir: bin
+cert_chain: []
+date: 2018-12-13 00:00:00.000000000 Z
+dependencies: []
+description: Authi is a Ruby gem designed to be used both in your client and server
+  HTTP-based applications. It implements the authentication methods based on HMAC-SHA1
+  encryption algorithm and a pre-shared key.The gem will sign your requests on the
+  client side and authenticate that signature on the server side. It will even generate
+  the secret keys necessary for your clients to sign their requests.]
+email: kv.nithin.90@gmail.com
+executables: []
+extensions: []
+extra_rdoc_files: []
+files:
+- lib/authi.rb
+homepage: http://rubygems.org/gems/authi
+licenses:
+- MIT
+metadata: {}
+post_install_message: 
+rdoc_options: []
+require_paths:
+- lib
+required_ruby_version: !ruby/object:Gem::Requirement
+  requirements:
+  - - ">="
+    - !ruby/object:Gem::Version
+      version: '0'
+required_rubygems_version: !ruby/object:Gem::Requirement
+  requirements:
+  - - ">="
+    - !ruby/object:Gem::Version
+      version: '0'
+requirements: []
+rubyforge_project: 
+rubygems_version: 2.5.1
+signing_key: 
+specification_version: 4
+summary: Authi!
+test_files: []