bigbluebutton-api-ruby 2.0.0 → 2.1.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: aafd43debf5600795258e7b1fa9bd62bf97ddef6a861a2b3e1222e017b543138
-  data.tar.gz: 7e4327ef4a7e4c87a3b3548d530498135dc69b442a088e0fc6b7a4c1df75108c
+  metadata.gz: 0e1ed8b5e115c66225c9d24e69b3abcb89bb7cdda0a2d54428b05322ac6eafbd
+  data.tar.gz: bef1ef6931bf78098f563c9138658695c33d8bb29ecc87fea4f982457f0a69a3
 SHA512:
-  metadata.gz: 638d5cb4df6314a9006838ad0e110882034545697e6256f4db1a7bded2d23d566f87bd945ec971f7e26f55ec25d27cb6bb1a2e5cb00fd3a1d8a1ea40945a16b5
-  data.tar.gz: 5d279604af73aaca506c7125d0c8a8bb59fe08922f66ad1120da2684b82a8fe54b8df20e3e6b65457114ccf1131cccef325d82e20205db4ca86dbbc419b014ce
+  metadata.gz: b852593d483c21c5ae5d12c5ba1c3d623e6edbcbcfd15fb4f88c9dd54d346a5f1ae336182950d2f1657189bcc33a9fdf053c6930743b055d00b44df053d492ff
+  data.tar.gz: 8b8e3eb8255aa8a88f3f5827f87e4fa028ff12ec9ad7229e7295fe3469d4ab37f6537d10de15e85da5758d8f0cc19c48679e2648a538b5e752831f2407533fee

data/Gemfile.lock

@@ -1,7 +1,7 @@
 PATH
   remote: .
   specs:
-    bigbluebutton-api-ruby (2.0.0)
+    bigbluebutton-api-ruby (2.1.0)
       base64 (>= 0.1.0)
       xml-simple (~> 1.1)
 

data/bigbluebutton-api-ruby.gemspec

@@ -2,7 +2,7 @@ $:.push File.expand_path("../lib", __FILE__)
 
 Gem::Specification.new do |s|
   s.name             = "bigbluebutton-api-ruby"
-  s.version          = "2.0.0"
+  s.version          = "2.1.0"
   s.licenses         = ["MIT"]
   s.extra_rdoc_files = ["README.md", "LICENSE", "LICENSE_003", "CHANGELOG.md"]
   s.summary          = "BigBlueButton integration for ruby"

data/lib/bigbluebutton_api.rb

@@ -67,15 +67,15 @@ module BigBlueButton
     # secret::    Shared secret for this server
     # version::   API version e.g. 0.81
     # logger::    Logger object to log actions (so apps can use their own loggers)
-    # sha256::    Flag to use sha256 when hashing url contents for checksum
-    def initialize(url, secret, version=nil, logger=nil, sha256=false)
+    # algorithm:: Define which algorithm to use [sha1, sha256, sha512]
+    def initialize(url, secret, version=nil, logger=nil, algorithm="sha1")
       @supported_versions = ['0.8', '0.81', '0.9', '1.0']
       @url = url.chomp('/')
       @secret = secret
       @timeout = 10         # default timeout for api requests
       @request_headers = {} # http headers sent in all requests
       @logger = logger
-      @sha256 = sha256
+      @algorithm = algorithm
       # If logger is not informed, it defaults to STDOUT with INFO level
       if logger.nil?
         @logger = Logger.new(STDOUT)
@@ -604,7 +604,7 @@ module BigBlueButton
       # checksum calc
       checksum_param = params_string + @secret
       checksum_param = method.to_s + checksum_param
-      checksum = @sha256 ? Digest::SHA256.hexdigest(checksum_param) : Digest::SHA1.hexdigest(checksum_param)
+      checksum = calculate_checksum(checksum_param)
 
       url = "#{@url}/#{method}?"
       url += "#{params_string}&" unless params_string.empty?
@@ -721,5 +721,15 @@ module BigBlueButton
       end
     end
 
+    def calculate_checksum(checksum_param)
+      case @algorithm
+      when "sha512"
+        Digest::SHA512.hexdigest(checksum_param)
+      when "sha2", "sha256", true # checks true for legacy support
+        Digest::SHA256.hexdigest(checksum_param)
+      else
+        Digest::SHA1.hexdigest(checksum_param)
+      end
+    end
   end
 end

data/spec/bigbluebutton_api_spec.rb

@@ -465,31 +465,55 @@ describe BigBlueButton::BigBlueButtonApi do
         end
 
         context "includes the checksum" do
-          context "when @sha256 is false or nil" do
-            let(:params) { { param1: "value1", param2: "value2" } }
-            let(:checksum) {
-              # the hash can be sorted differently depending on the ruby version
-              if params.map{ |k, v| k }.join =~ /^param1/
-                "67882ae54f49600f56f358c10d24697ef7d8c6b2"
-              else
-                "85a54e28e4ec18bfdcb214a73f74d35b09a84176"
-              end
-            }
+          let(:method) { "join" }
+          let(:params) { { param1: "value1", param2: "value2" } }
+          let(:params_string) { params.map{ |k,v| "#{k}=" + URI.encode_www_form_component(v.to_s) unless k.nil? || v.nil? }.join("&") }
+          let(:checksum_param) { method.to_s + params_string + secret }
+
+          context "when @algorithm is false or nil" do
+            let(:checksum) { Digest::SHA1.hexdigest(checksum_param ) }
+
+            subject { api.get_url(:join, params)[0] }
+            it('uses SHA1') { subject.should match(/checksum=#{checksum}$/) }
+          end
+
+          context "when @algorithm is is set to 'sha1'" do
+            let(:api) { BigBlueButton::BigBlueButtonApi.new(url, secret, version, logger, "sha1") }
+            let(:checksum) { Digest::SHA1.hexdigest(checksum_param ) }
+
             subject { api.get_url(:join, params)[0] }
             it('uses SHA1') { subject.should match(/checksum=#{checksum}$/) }
           end
 
-          context "when @sha256 flag is true" do
+          context "when @algorithm flag is set to 'sha2'" do
+            let(:api) { BigBlueButton::BigBlueButtonApi.new(url, secret, version, logger, "sha2") }
+            let(:checksum) { Digest::SHA256.hexdigest(checksum_param ) }
+
+            subject { api.get_url(:join, params)[0] }
+            it('uses SHA256') { subject.should match(/checksum=#{checksum}$/) }
+          end
+
+          context "when @algorithm flag is set to 'sha256'" do
+            let(:api) { BigBlueButton::BigBlueButtonApi.new(url, secret, version, logger, "sha256") }
+            let(:checksum) { Digest::SHA256.hexdigest(checksum_param ) }
+
+            subject { api.get_url(:join, params)[0] }
+            it('uses SHA256') { subject.should match(/checksum=#{checksum}$/) }
+          end
+
+          context "when @algorithm flag is set to 'sha512'" do
+            let(:api) { BigBlueButton::BigBlueButtonApi.new(url, secret, version, logger, "sha512") }
+            let(:checksum) { Digest::SHA512.hexdigest(checksum_param ) }
+
+            subject { api.get_url(:join, params)[0] }
+            it('uses SHA256') { subject.should match(/checksum=#{checksum}$/) }
+          end
+
+          # Ensure legacy support
+          context "when @algorithm flag is true" do
             let(:api) { BigBlueButton::BigBlueButtonApi.new(url, secret, version, logger, true) }
-            let(:params) { { param1: "value1", param2: "value2" } }
-            let(:checksum) {
-              # the hash can be sorted differently depending on the ruby version
-              if params.map{ |k,v| k }.join =~ /^param1/
-                "0e7b1611809fad890a114dddae1a37fecf14c28971afc10ee3eac432da5b8b41"
-              else
-                "21bf2d24c27251c4b2b2f0d5dd4b966a2f16fbfc7882e102b44c6d67f728f0c8"
-              end
-            }
+            let(:checksum) { Digest::SHA256.hexdigest(checksum_param ) }
+
             subject { api.get_url(:join, params)[0] }
             it('uses SHA256') { subject.should match(/checksum=#{checksum}$/) }
           end

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: bigbluebutton-api-ruby
 version: !ruby/object:Gem::Version
-  version: 2.0.0
+  version: 2.1.0
 platform: ruby
 authors:
 - Mconf
@@ -9,7 +9,7 @@ authors:
 autorequire:
 bindir: bin
 cert_chain: []
-date: 2025-09-19 00:00:00.000000000 Z
+date: 2026-03-11 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: xml-simple