bankid 0.1.1 → 1.0.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (10) hide show
  1. checksums.yaml +4 -4
  2. data/CHANGELOG.md +8 -0
  3. data/Gemfile.lock +4 -4
  4. data/README.md +20 -0
  5. data/config/certs/development_client_certificate.key +33 -0
  6. data/config/certs/development_client_certificate.pem +32 -0
  7. data/lib/bankid/poll.rb +4 -0
  8. data/lib/bankid/version.rb +1 -1
  9. data/lib/bankid.rb +5 -4
  10. metadata +5 -3
checksums.yaml CHANGED
@@ -1,7 +1,7 @@
1
1
  ---
2
2
  SHA256:
3
- metadata.gz: 14c02c0b68118b5177cbb822613c2e70a1c61746426c50a28bae061d515e3dc9
4
- data.tar.gz: 6e057728f07b7dea959186563808979badef6ca312bd6fab9fdff5803588b165
3
+ metadata.gz: 9fca94ae716a23222cc841afe001128223f92ab1c7bb3ec9062d172438e065df
4
+ data.tar.gz: 6124c99b716cd7aa411d16615e1145e8518f53c043a359aa8011ab0bc49f4388
5
5
  SHA512:
6
- metadata.gz: 2e5c7a9c94d3e2392a10507d0cdd2e866472cf67fc85c2c06b63b60bdfee82b8345c9f35bc0260a87bba983e3d50aa5f5edafab63c1e48fe82744dc7081c6deb
7
- data.tar.gz: 84fee9bb80e346f19e36762f68831e6298469def1dcc49d74081ede8c37f5b45af3b5da2ef22aea9437ba8dea36b60ba9ec2f30bf4bb5cddbf6d140c4d0d1feb
6
+ metadata.gz: ea6b8806a339b2d06669b2eaec28959c9d07bde5d13d2d4635957a3b3aa7e6ea614c52de02f36b5495388897673253d70ff52b711fba5cc0c1059a072bc013a1
7
+ data.tar.gz: b62d199d0aab2f433f33bbbd6b8f02884d2ba32af7bcc2e0e1e22c149968bc73dd2b296e44dc82a40c89408adea702bd36486a67cf5097cfa834ea5850519f93
data/CHANGELOG.md CHANGED
@@ -1,5 +1,13 @@
1
1
  ## [Unreleased]
2
2
 
3
+ ## [1.0.0] - 2022-09-30
4
+
5
+ - Deprecate the `PKCS12` algorithm in favor of `X509`: [issue #3](https://github.com/johanhalse/bankid/issues/3)
6
+
7
+ ## [0.1.2] - 2022-09-08
8
+
9
+ - Add `pending?` method call for poll response object
10
+
3
11
  ## [0.1.1] - 2022-04-06
4
12
 
5
13
  - Make Poll object accept error codes and details from [errors](https://www.bankid.com/utvecklare/guider/teknisk-integrationsguide/graenssnittsbeskrivning/felfall)
data/Gemfile.lock CHANGED
@@ -1,7 +1,7 @@
1
1
  PATH
2
2
  remote: .
3
3
  specs:
4
- bankid (0.1.0)
4
+ bankid (0.1.2)
5
5
  http (~> 5.0.4)
6
6
  rqrcode (~> 2.1.0)
7
7
 
@@ -27,7 +27,7 @@ GEM
27
27
  http-cookie (~> 1.0)
28
28
  http-form_data (~> 2.2)
29
29
  llhttp-ffi (~> 0.4.0)
30
- http-cookie (1.0.4)
30
+ http-cookie (1.0.5)
31
31
  domain_name (~> 0.5)
32
32
  http-form_data (2.3.0)
33
33
  llhttp-ffi (0.4.0)
@@ -46,7 +46,7 @@ GEM
46
46
  rake (13.0.6)
47
47
  regexp_parser (2.2.0)
48
48
  rexml (3.2.5)
49
- rqrcode (2.1.0)
49
+ rqrcode (2.1.2)
50
50
  chunky_png (~> 1.0)
51
51
  rqrcode_core (~> 1.0)
52
52
  rqrcode_core (1.2.0)
@@ -64,7 +64,7 @@ GEM
64
64
  ruby-progressbar (1.11.0)
65
65
  unf (0.1.4)
66
66
  unf_ext
67
- unf_ext (0.0.8)
67
+ unf_ext (0.0.8.2)
68
68
  unicode-display_width (2.1.0)
69
69
  webmock (3.14.0)
70
70
  addressable (>= 2.8.0)
data/README.md CHANGED
@@ -58,6 +58,26 @@ raise "logged in!" if response.status == "complete"
58
58
 
59
59
  Keep polling until your response status changes to "complete", and the response object will be a struct containing the `completion_data` property you're ultimately looking for.
60
60
 
61
+ ## Certificates
62
+
63
+ Your BankID provider will have given you a certificate. It might be in `.p12` format. If that's the case, you'll need to convert it to an OpenSSL X509 certificate - version 0.1.x of the BankID gem relied on PKCS12 which saw [big changes in OpenSSL v3](https://github.com/johanhalse/bankid/issues/3), so the implementation has been switched to X509 instead. The gem looks for a certificate and a key in these default locations:
64
+
65
+ ```
66
+ ./config/certs/#{environment}_client_certificate.pem
67
+ ./config/certs/#{environment}_client_certificate.key
68
+ ```
69
+
70
+ If you're upgrading from 0.1.x and want to convert an existing p12 key, it's pretty straightforward:
71
+
72
+ ```
73
+ # Export certificate
74
+ openssl pkcs12 -legacy -in my_certificate.p12 -clcerts -nokeys -out my_certificate.pem
75
+ # Export key
76
+ openssl pkcs12 -legacy -in my_certificate.p12 -clcerts -nocerts -out my_certificate.key
77
+ ```
78
+
79
+ That should hopefully get things running again.
80
+
61
81
  ## Development
62
82
 
63
83
  After checking out the repo, run `bin/setup` to install dependencies. Then, run `rake test` to run the tests. You can also run `bin/console` for an interactive prompt that will allow you to experiment.
data/config/certs/development_client_certificate.key ADDED
@@ -0,0 +1,33 @@
1
+ Bag Attributes
2
+ localKeyID: 93 12 D6 E8 2C AA 74 2E 52 10 29 3F 33 3C 39 7B 02 73 34 25
3
+ Key Attributes: <No Attributes>
4
+ -----BEGIN ENCRYPTED PRIVATE KEY-----
5
+ MIIFHDBOBgkqhkiG9w0BBQ0wQTApBgkqhkiG9w0BBQwwHAQIbee4rppk/vsCAggA
6
+ MAwGCCqGSIb3DQIJBQAwFAYIKoZIhvcNAwcECOmlvppFUN4xBIIEyDfJxmEJ0/mb
7
+ OHFPRbWbcaGv1MggkjWYmeqJN/h8KPrY9MGQ3WS41qq1ox7ae32qZI1h3alvibeU
8
+ 0lwtfVJAdtOgAk7HKVjO9MJAwn9UJgfd5W6Vlcx7Y0GWHQ2TLyw7XxUi9d4hDHeS
9
+ g/oV5hQ3kWKQMGHkUqoM7n2YKJ7yErU+hWrClzGc4l5sKSSzxf/1doZDnDJg3uR1
10
+ VaSazx26U2ocCbtp0Y86DtxDHVyzZu0m82vRcpivLUDpYZkcWiriYGAamA0DKUGd
11
+ CuZN+klPucTLjbrr1wxk+du8MkplBBh6jjVUeWmU8hw9Xon47B+0Qd7oW6s2d+AL
12
+ I44X6AHImsnno/BddML4NytNCrIs2iLZXuOi6OiCtIxCxpS0evU5Lo8DpAG2Wmfu
13
+ uZ7vgFzSAGQDB1kZwelC8h/dQe1dgQBTp3Y6If1ZTEMND/YqqLRPDM/Rwtj+Cxbt
14
+ bnlY0IUTw7+KqSx7PKyB+P2dSFbwb9WcD3nbRdcKrjQpYGv5VQclTydICDAbuPyk
15
+ TYJlYcrjbbc9PfyaOmD7nbwymRNfB1tPG6QGgTVc5O7FgQqPKba3zUZzwhIzjG37
16
+ moiMatjdt2pYZbuhNXCiVS4I2th7Gu/WI5sVqq9OEBtsD/h+pKo3VeJJ/RQM3kO4
17
+ 6X+obZqIdXiOL7K4YzzqrkE71rWNfKcSjmGGfCIcw9dWFG0/mBoeFRjBkaKW5xry
18
+ bk8K0iQvFThmdVQcXMGcXrc2l3efAwu5bK0j8o4C33DAqpOngcSBkrXsKPheXcHM
19
+ R+ConNg9QM4sMuXtSDJZOHzSEt0d9lkn7poiad6Fcr7cm3RaY4rLfB5/8h7jrB4e
20
+ WStcFjCVmENxkOc9rRqaFHWbD4Z7DambS4Nl7JfpjHOK0ifxAlIhIn0sRN5FKWGk
21
+ UbDEHNg8Wl9p44BglsV7AwHAl8etmY2RiKvhKsHwMsE0P5RdauXq6FMOOxwaZsRs
22
+ XN6lARqyQbPI4BM7/kySMKPQ7QUGsQ2oKUUBUSRxVQM5ULYRKZE4x3m6tMX8nNjF
23
+ TK/kTaZx2ZN4Lv8Zuy65KKd5eKRrl2hnBfN/Vl6yzdgJx22WjCufDLCpeNZcK7lN
24
+ Zca6UKebuCazunPUlJOTempn0Lfd4sXvnaR/mFEk01Rqwy3e6PvOTFRB3smWTIpM
25
+ bCNJ2kWwqEc+x12j/29YmQx6aWc+IKFTXIa7tt6QrV2xZBATlld9xxeUmwdLkYyd
26
+ K9GicnAovbaKwJBugdhkRDIsPLP9UQ/CE4C49GqzHa7sH2lWsST2h+ksWUptWUFl
27
+ Izx0MzVaUWZR7AkKrZk3dkDNva1gQTmRLC3eI7jZJ2bUgwMGqPgj4XQKF3AsIKth
28
+ RtMCV6N/GRH/0NWb+8GQHyShJhwIcqdI8Aimlgxrj4KuYeHTOe+bU8qgSbTgKlYp
29
+ k2+sAdKN8lP7mT1YYZyj/NENX/8WS3nwvlJ4mfmBvmAGRGgSofsVMFsAmSI3t8pJ
30
+ fWnjpacUXi9mF9gm8SgjUl2ekYU1r03ig1+cjMsaYkzTdVVMovwp0HRrL8Vs8pQf
31
+ 3JhG+mws+sWkEofOiyOYeoPtdoD+HqtgIQ8w9AswpNdqnLARUQ/fMVKgyQXFTqHQ
32
+ YlQoSLz8brIM69Tp9W+frA==
33
+ -----END ENCRYPTED PRIVATE KEY-----
data/config/certs/development_client_certificate.pem ADDED
@@ -0,0 +1,32 @@
1
+ Bag Attributes
2
+ localKeyID: 93 12 D6 E8 2C AA 74 2E 52 10 29 3F 33 3C 39 7B 02 73 34 25
3
+ subject=C = SE, O = Testbank A AB (publ), serialNumber = 5566304928, name = Test av BankID, CN = FP Testcert 3
4
+ issuer=C = SE, O = Testbank A AB (publ), serialNumber = 111111111111, CN = Testbank A RP CA v1 for BankID Test
5
+ -----BEGIN CERTIFICATE-----
6
+ MIIEyjCCArKgAwIBAgIILFi5Qu2eUu4wDQYJKoZIhvcNAQELBQAwcTELMAkGA1UE
7
+ BhMCU0UxHTAbBgNVBAoMFFRlc3RiYW5rIEEgQUIgKHB1YmwpMRUwEwYDVQQFEwwx
8
+ MTExMTExMTExMTExLDAqBgNVBAMMI1Rlc3RiYW5rIEEgUlAgQ0EgdjEgZm9yIEJh
9
+ bmtJRCBUZXN0MB4XDTIwMDYxNzIyMDAwMFoXDTIyMDkwNTIxNTk1OVowcjELMAkG
10
+ A1UEBhMCU0UxHTAbBgNVBAoMFFRlc3RiYW5rIEEgQUIgKHB1YmwpMRMwEQYDVQQF
11
+ Ewo1NTY2MzA0OTI4MRcwFQYDVQQpDA5UZXN0IGF2IEJhbmtJRDEWMBQGA1UEAwwN
12
+ RlAgVGVzdGNlcnQgMzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAMCb
13
+ Fluh4O4TEl4vydPGIUc4kAFDSVk1RM5TDYn8UDlWVxHVbalbXaJbtNQFYFm7lmpk
14
+ FXiif50iupanvIq+k4DIGm01MnGasWl4EW9uoExCoZC4EemZry+Hk7hm2vbwGudf
15
+ uIR8P43AD1MV7kp/skJaTH16qEeWTKQSoVlC+XNP/7Tl6Z8JE1GOR3+oAXWs+f/o
16
+ 5SxXq4kIlBPkSK3tiTbEAP0/dNnSqSprv5MFHnTTWZyl8TK02TGrazyVUp/em6e6
17
+ V/lTtJylBmHNJMpzl7PGixgXApRSMj4ltHwjqAizBMatDoXE6qXG0fEj+vhqSo/v
18
+ wajY9t6FHNovhNdI+CcCAwEAAaNlMGMwEQYDVR0gBAowCDAGBgQqAwQFMA4GA1Ud
19
+ DwEB/wQEAwIHgDAfBgNVHSMEGDAWgBTiuVUIvGKgRjldgAxQSpIBy0zvizAdBgNV
20
+ HQ4EFgQU8xDQD1mLJ7MpUSxGB4lUDC5pdgswDQYJKoZIhvcNAQELBQADggIBAGWn
21
+ PRoXUxPITv9Uo+4llmIHhHg5XR5ejenJOFyCvTAtteQozdFJ2rby+Q4WZNAdtP8Q
22
+ tWcDaDigylDZSwi9TBGTRPSLH2cDFEWCQZVHs8svsF5VyBfkdtaRomiSAsk9KKLf
23
+ 6Vo6ik1hlh4+NTBMX3VW0LjUZrPXmQ14El/XiJmHOvs54kAYf9ZTcO332Gqo8RF+
24
+ M3CRDVxPSrU34u6fvvxQuAvXvPumWvHaSAkOhpsn+Idr+KQ0Rip6fmgTG7UMicUi
25
+ PxTE66xpaMsHDmuPaeC+cTK/iXAW60+X/Vv/ANn7UOz6tvrjo6Sd1DIpEEjqW/yE
26
+ L4F05lbXhixKS2IRY+mAejoC66N2tz+0bv1grK4147jsYw4i9Y/rGyggkSrRd+1k
27
+ QM7uBxW3Cu5fSKOUZ/0UTcBGf82Ze8SlbFFvpagELy9cJHwMKarzTkuX92hJ9KG0
28
+ h26JBdOHzberG2tQiYzMPYVcch7WCAFWR++w6qInFs0WK7F7SBP0fyZew3hZZDoO
29
+ snqLWMgG+YagjAsMAcr99RvwqX7TJtISejdxz9lxxN2jKM0b1f2v8K88tzRekrGG
30
+ CPUQlnPu7sj7nPLVs5/sUEbaVRz8G8lKjYGsMuecRLpuVRQ/vPAd5whfiIzQFK76
31
+ boWGbSHS6OXfIfDrowTNlzAP+/H9f7DyBZTdwrVX
32
+ -----END CERTIFICATE-----
data/lib/bankid/poll.rb CHANGED
@@ -24,6 +24,10 @@ module Bankid
24
24
  status == "failed" || error_code
25
25
  end
26
26
 
27
+ def pending?
28
+ status == "pending"
29
+ end
30
+
27
31
  def timed_out?
28
32
  hint_code == "startFailed"
29
33
  end
data/lib/bankid/version.rb CHANGED
@@ -1,5 +1,5 @@
1
1
  # frozen_string_literal: true
2
2
 
3
3
  module Bankid
4
- VERSION = "0.1.1"
4
+ VERSION = "1.0.0"
5
5
  end
data/lib/bankid.rb CHANGED
@@ -36,7 +36,7 @@ module Bankid
36
36
  @env = env
37
37
  @url = Bankid.const_get("#{env.upcase}_URL")
38
38
  @cert_password = cert_password
39
- @cert, @root_cert = load_certificates
39
+ @cert, @key, @root_cert = load_certificates
40
40
  end
41
41
 
42
42
  def generate_qr(start_token:, start_secret:, seconds:)
@@ -81,7 +81,8 @@ module Bankid
81
81
  return if @env == "test"
82
82
 
83
83
  [
84
- OpenSSL::PKCS12.new(File.read(cert_path("client_certificate.p12")), @cert_password),
84
+ OpenSSL::X509::Certificate.new(File.read(cert_path("client_certificate.pem"))),
85
+ OpenSSL::PKey::RSA.new(File.read(cert_path("client_certificate.key")), @cert_password),
85
86
  OpenSSL::X509::Certificate.new(File.read(cert_path("bankid_certificate.pem")))
86
87
  ]
87
88
  end
@@ -95,8 +96,8 @@ module Bankid
95
96
  def ssl_context
96
97
  OpenSSL::SSL::SSLContext.new.tap do |ctx|
97
98
  ctx.add_certificate(
98
- @cert.certificate,
99
- @cert.key,
99
+ @cert,
100
+ @key,
100
101
  [@root_cert]
101
102
  )
102
103
  end
metadata CHANGED
@@ -1,14 +1,14 @@
1
1
  --- !ruby/object:Gem::Specification
2
2
  name: bankid
3
3
  version: !ruby/object:Gem::Version
4
- version: 0.1.1
4
+ version: 1.0.0
5
5
  platform: ruby
6
6
  authors:
7
7
  - Johan Halse
8
8
  autorequire:
9
9
  bindir: exe
10
10
  cert_chain: []
11
- date: 2022-04-06 00:00:00.000000000 Z
11
+ date: 2022-09-30 00:00:00.000000000 Z
12
12
  dependencies:
13
13
  - !ruby/object:Gem::Dependency
14
14
  name: http
@@ -55,7 +55,9 @@ files:
55
55
  - bin/console
56
56
  - bin/setup
57
57
  - config/certs/development_bankid_certificate.pem
58
+ - config/certs/development_client_certificate.key
58
59
  - config/certs/development_client_certificate.p12
60
+ - config/certs/development_client_certificate.pem
59
61
  - config/certs/production_bankid_certificate.pem
60
62
  - lib/bankid.rb
61
63
  - lib/bankid/authentication.rb
@@ -85,7 +87,7 @@ required_rubygems_version: !ruby/object:Gem::Requirement
85
87
  - !ruby/object:Gem::Version
86
88
  version: '0'
87
89
  requirements: []
88
- rubygems_version: 3.3.3
90
+ rubygems_version: 3.3.7
89
91
  signing_key:
90
92
  specification_version: 4
91
93
  summary: BankID authentication for Ruby.