beyond_canvas 0.15.2.pre → 0.15.3.pre

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 70836ce40a293f66cd6e356d731409917770f7a0f491778d4fa9571132454741
-  data.tar.gz: 1c9c24f161e23c8009a463c30ccde514e84277d47db0c2f0f645915b0c716e38
+  metadata.gz: 3c99bc0b145e7d7bf5e4bfa4c34bc419905684a3042c6c271c9c18841a154f95
+  data.tar.gz: 881dcf747b8a6c24abc2412286b127dfd92f538bbd59fe190877cc7ffb384b31
 SHA512:
-  metadata.gz: 702fe9f4ea8fc0d26c791e2944dd0271ac3ccb3ba861d04d8f515177098513f1f694f3a758fe2d4d70cccf4adfc798b35b4e6a87bfed69f89ba6792d555a291f
-  data.tar.gz: 97a8105ded178daa6e013b1163bd3474938248e2471091f2cd543f02336b578f061cd7ddf0757bbe77e346c042be92115c2d9ce166943cb885673a0bee01d2a7
+  metadata.gz: 26a751147067f809f2a9b7cb52835a0125cf1426eb9873b5e67534d515f1c05080640dcbeb6ec4cf099e026dd3d8d207c2a7714aab26d7d33d6c2b9954b6b233
+  data.tar.gz: c070ae8eee82ea3679ed8e1703fc6151b3404dfe8f8cd4e35b89a7bb004d58e17706e5aff7553533a82c10f5dad5d180737c5022b544a78d169f7e75397f2a1f

data/app/controllers/concerns/beyond_canvas/request_validation.rb

@@ -31,7 +31,7 @@ module BeyondCanvas
     def valid_signature?(signature, data, secret)
       digest = OpenSSL::Digest.new('SHA1')
       hmac = OpenSSL::HMAC.digest(digest, secret, data)
-      signature == Base64.encode64(hmac).chop
+      URI.decode(signature) == Base64.encode64(hmac).chop
     end
   end
 end

data/lib/beyond_canvas/version.rb

@@ -1,5 +1,5 @@
 # frozen_string_literal: true
 
 module BeyondCanvas
-  VERSION = '0.15.2.pre'
+  VERSION = '0.15.3.pre'
 end

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: beyond_canvas
 version: !ruby/object:Gem::Version
-  version: 0.15.2.pre
+  version: 0.15.3.pre
 platform: ruby
 authors:
 - Unai Abrisketa
 autorequire: 
 bindir: bin
 cert_chain: []
-date: 2020-06-16 00:00:00.000000000 Z
+date: 2020-06-18 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: beyond_api