bitballoon 0.0.6 → 0.0.7

data/README.md

@@ -46,6 +46,15 @@ If you're not authenticating on behalf of a user you can authorize directly with
 bitballoon.authorize_from_credentials!
 ```
 
+If you already have an OAuth2 `access_token` you can instantiate the client like this:
+
+```ruby
+bitballoon = BitBalloon::Client.new(:access_token => access_token)
+```
+
+And the client will be ready to do requests. This means that once you've gotten a token via `authorize!` or `authorize_from_credentials!` you can store it and reuse it for later sessions.
+
+
 Command Line Utility
 ====================
 

data/lib/bitballoon.rb

@@ -9,5 +9,6 @@ require "bitballoon/submissions"
 require "bitballoon/files"
 require "bitballoon/snippets"
 require "bitballoon/deploys"
+require "bitballoon/multipass"
 
 module BitBalloon; end

data/lib/bitballoon/multipass.rb

@@ -0,0 +1,70 @@
+# Multipass implementation used for single-sign-on for resellers
+require "openssl"
+require "base64"
+require "time"
+require "json"
+
+module BitBalloon
+  class Multipass
+    def initialize(multipass_secret)
+      ### Use the Multipass secret to derive two cryptographic keys,
+      ### one for encryption, one for signing
+      key_material = OpenSSL::Digest::Digest.new("sha256").digest(multipass_secret)
+      @encryption_key = key_material[ 0,16]
+      @signature_key  = key_material[16,16]
+    end
+
+    def generate_token(customer_data_hash)
+      ### Store the current time in ISO8601 format.
+      ### The token will only be valid for a small timeframe around this timestamp.
+      customer_data_hash["created_at"] = Time.now.iso8601
+
+      ### Serialize the customer data to JSON and encrypt it
+      ciphertext = encrypt(customer_data_hash.to_json)
+
+      ### Create a signature (message authentication code) of the ciphertext
+      ### and encode everything using URL-safe Base64 (RFC 4648)
+      sig = sign(ciphertext)
+
+      Base64.urlsafe_encode64(ciphertext + sign(ciphertext))
+    end
+
+    def decode_token(token)
+      decoded_token = Base64.urlsafe_decode64(token)
+      ciphertext, signature = [decoded_token[0..-33], decoded_token[-32..-1]]
+
+      sig = sign(ciphertext)
+
+      raise "Bad signature" unless sign(ciphertext) == signature
+
+      JSON.parse(decrypt(ciphertext))
+    end
+
+    private
+    def encrypt(plaintext)
+      cipher = OpenSSL::Cipher::Cipher.new("aes-128-cbc")
+      cipher.encrypt
+      cipher.key = @encryption_key
+
+      ### Use a random IV
+      cipher.iv = iv = cipher.random_iv
+
+      ### Use IV as first block of ciphertext
+      iv + cipher.update(plaintext) + cipher.final
+    end
+
+    def decrypt(ciphertext)
+      decipher = OpenSSL::Cipher::Cipher.new("aes-128-cbc")
+      decipher.decrypt
+      decipher.key = @encryption_key
+
+      decipher.iv, encrypted = [ciphertext[0..15], ciphertext[16..-1]]
+
+      decipher.update(encrypted) + decipher.final
+    end
+
+    def sign(data)
+      OpenSSL::HMAC.digest("sha256", @signature_key, data)
+    end
+  end
+end

data/lib/bitballoon/version.rb

@@ -1,3 +1,3 @@
 module BitBalloon
-  VERSION = "0.0.6"
+  VERSION = "0.0.7"
 end

data/test/multipass_test.rb

@@ -0,0 +1,14 @@
+require 'test_helper'
+require 'digest/sha1'
+
+class MultipassTest < MiniTest::Unit::TestCase
+  def setup
+    @mp = BitBalloon::Multipass.new("secret")
+  end
+
+  def test_generate_and_decode_token
+    data = {"email" => "test@example.com", "uid" => "1234"}
+    token = @mp.generate_token(data)
+    assert_equal data, @mp.decode_token(token), "Data should be the same after generating and decoding"
+  end
+end

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: bitballoon
 version: !ruby/object:Gem::Version
-  version: 0.0.6
+  version: 0.0.7
   prerelease: 
 platform: ruby
 authors:
@@ -9,7 +9,7 @@ authors:
 autorequire: 
 bindir: bin
 cert_chain: []
-date: 2013-10-03 00:00:00.000000000 Z
+date: 2013-10-04 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: oauth2
@@ -116,6 +116,7 @@ files:
 - lib/bitballoon/form.rb
 - lib/bitballoon/forms.rb
 - lib/bitballoon/model.rb
+- lib/bitballoon/multipass.rb
 - lib/bitballoon/site.rb
 - lib/bitballoon/sites.rb
 - lib/bitballoon/snippet.rb
@@ -126,6 +127,7 @@ files:
 - test/client_test.rb
 - test/files/site-dir.zip
 - test/files/site-dir/index.html
+- test/multipass_test.rb
 - test/sites_test.rb
 - test/test_helper.rb
 homepage: https://www.bitballoon.com
@@ -156,6 +158,7 @@ test_files:
 - test/client_test.rb
 - test/files/site-dir.zip
 - test/files/site-dir/index.html
+- test/multipass_test.rb
 - test/sites_test.rb
 - test/test_helper.rb
 has_rdoc: