blockstack 0.5.0

checksums.yaml

@@ -0,0 +1,7 @@
+---
+SHA1:
+  metadata.gz: 6b061ec50aaa10a3c6feb8939111acf4c28c6cc7
+  data.tar.gz: 9dce6bc3757ca33baf262eb859797078c83a8f57
+SHA512:
+  metadata.gz: c8c0e48cb1966c604863fee585cf1b41b70ec93658024c66ac9858a5290a57e4f7ae0b843e5ca82ba19cf81064d6ef5fb4e51aa2ba7d45f5e4f8d15bf83aa306
+  data.tar.gz: 556edb8cce317d6067bd2bb876828f63ac72556b70c574a04dc2c9edc578eb2aa97777e1d11679417c64f11fe36d131164cfe94078b6286e291bc20172a5be4b

data/.gitignore

@@ -0,0 +1,9 @@
+/.bundle/
+/.yardoc
+/Gemfile.lock
+/_yardoc/
+/coverage/
+/doc/
+/pkg/
+/spec/reports/
+/tmp/

data/.travis.yml

@@ -0,0 +1,5 @@
+sudo: false
+language: ruby
+rvm:
+  - 2.3.3
+before_install: gem install bundler -v 1.13.6

data/Gemfile

@@ -0,0 +1,5 @@
+source 'https://rubygems.org'
+
+# Specify your gem's dependencies in blockstack.gemspec
+gemspec
+gem 'jwt', git: 'https://github.com/larrysalibra/ruby-jwt.git', branch: 'add-secp256k1-support'

data/LICENSE.txt

@@ -0,0 +1,23 @@
+Copyright (c) 2014 Appartisan Limited
+Copyright (c) 2017 Blockstack Inc
+
+MIT License
+
+Permission is hereby granted, free of charge, to any person obtaining
+a copy of this software and associated documentation files (the
+"Software"), to deal in the Software without restriction, including
+without limitation the rights to use, copy, modify, merge, publish,
+distribute, sublicense, and/or sell copies of the Software, and to
+permit persons to whom the Software is furnished to do so, subject to
+the following conditions:
+
+The above copyright notice and this permission notice shall be
+included in all copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND,
+EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF
+MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND
+NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE
+LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION
+OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION
+WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.

data/README.md

@@ -0,0 +1,38 @@
+# Blockstack
+
+The Blockstack ruby library for identity and authentication
+
+## Installation
+
+Add this line to your application's Gemfile:
+
+```ruby
+gem 'blockstack'
+```
+
+And then execute:
+
+    $ bundle
+
+Or install it yourself as:
+
+    $ gem install blockstack
+
+## Usage
+
+TODO: Write usage instructions here
+
+## Development
+
+After checking out the repo, run `bin/setup` to install dependencies. Then, run `rake test` to run the tests. You can also run `bin/console` for an interactive prompt that will allow you to experiment.
+
+To install this gem onto your local machine, run `bundle exec rake install`. To release a new version, update the version number in `version.rb`, and then run `bundle exec rake release`, which will create a git tag for the version, push git commits and tags, and push the `.gem` file to [rubygems.org](https://rubygems.org).
+
+## Contributing
+
+Bug reports and pull requests are welcome on GitHub at https://github.com/[USERNAME]/blockstack. This project is intended to be a safe, welcoming space for collaboration, and contributors are expected to adhere to the [Contributor Covenant](http://contributor-covenant.org) code of conduct.
+
+
+## License
+
+The gem is available as open source under the terms of the [MIT License](http://opensource.org/licenses/MIT).

data/Rakefile

@@ -0,0 +1,7 @@
+require "bundler/gem_tasks"
+require "rspec/core/rake_task"
+
+RSpec::Core::RakeTask.new
+
+task :default => :spec
+task :test => :spec

data/bin/console

@@ -0,0 +1,14 @@
+#!/usr/bin/env ruby
+
+require "bundler/setup"
+require "blockstack"
+
+# You can add fixtures and/or initialization code here to make experimenting
+# with your gem easier. You can also use a different console, if you like.
+
+# (If you use this, don't forget to add pry to your Gemfile!)
+# require "pry"
+# Pry.start
+
+require "irb"
+IRB.start

data/bin/setup

@@ -0,0 +1,8 @@
+#!/usr/bin/env bash
+set -euo pipefail
+IFS=$'\n\t'
+set -vx
+
+bundle install
+
+# Do any other automated setup that you need to do here

data/blockstack.gemspec

@@ -0,0 +1,32 @@
+# coding: utf-8
+lib = File.expand_path('../lib', __FILE__)
+$LOAD_PATH.unshift(lib) unless $LOAD_PATH.include?(lib)
+require 'blockstack/version'
+
+Gem::Specification.new do |spec|
+  spec.name          = "blockstack"
+  spec.version       = Blockstack::VERSION
+  spec.authors       = ["Larry Salibra"]
+  spec.email         = ["rubygems@larrysalibra.com"]
+  spec.summary       = "The Blockstack ruby library for identity and authentication"
+  spec.homepage      = "https://github.com/larrysalibra/blockstack-ruby"
+  spec.license       = "MIT"
+
+  spec.files         = `git ls-files -z`.split("\x0").reject do |f|
+      f.match(%r{^(test|spec|features)/})
+  end
+  spec.bindir        = "exe"
+  spec.executables   = spec.files.grep(%r{^exe/}) { |f| File.basename(f) }
+  spec.require_paths = ["lib"]
+
+  spec.add_development_dependency "bundler", "~> 1.13"
+  spec.add_development_dependency "rake", "~> 10.0"
+  spec.add_development_dependency "rspec"
+  spec.add_development_dependency "webmock"
+  spec.add_development_dependency "vcr"
+
+  spec.add_dependency "jwt"
+  spec.add_dependency "bitcoin"
+  spec.add_dependency "faraday"
+
+end

data/lib/blockstack/version.rb

@@ -0,0 +1,3 @@
+module Blockstack
+    VERSION = "0.5.0"
+end

data/lib/blockstack.rb

@@ -0,0 +1,103 @@
+require "blockstack/version"
+require "bitcoin"
+require "faraday"
+require "jwt"
+
+module Blockstack
+    USER_AGENT = "blockstack-ruby #{VERSION}"
+    ALGORITHM = "ES256K"
+    REQUIRED_CLAIMS = %w(iss iat jti exp username profile publicKeys)
+    LEEWAY = 300 # seconds
+    VALID_WITHIN = 300 # seconds
+    BLOCKSTACK_API = "http://localhost:6270"
+
+    class InvalidAuthResponse < StandardError; end
+
+    def self.verify_auth_response(auth_token)
+      # decode & verify token without checking signature so we can extract
+      # public keys
+      public_key = nil
+      verify = false
+      decoded_tokens = JWT.decode auth_token, public_key, verify, algorithm: ALGORITHM
+      decoded_token = decoded_tokens[0]
+      puts decoded_token
+      REQUIRED_CLAIMS.each do |field|
+        raise InvalidAuthResponse.new("Missing required '#{field}' claim.") if !decoded_token.key?(field.to_s)
+      end
+      raise InvalidAuthResponse.new("Missing required 'iat' claim.") if !decoded_token["iat"]
+      raise InvalidAuthResponse.new("'iat' timestamp claim is skewed too far from present.") if (Time.now.to_i - decoded_token["iat"]).abs > VALID_WITHIN
+
+      public_keys = decoded_token['publicKeys']
+
+      raise InvalidAuthResponse.new("Invalid publicKeys array: only 1 key is supported") unless public_keys.length == 1
+
+      compressed_hex_public_key = public_keys[0]
+      bignum = OpenSSL::BN.new(compressed_hex_public_key, 16)
+      group = OpenSSL::PKey::EC::Group.new 'secp256k1'
+      public_key = OpenSSL::PKey::EC::Point.new(group, bignum)
+      ecdsa_key = OpenSSL::PKey::EC.new 'secp256k1'
+      ecdsa_key.public_key = public_key
+      verify = true
+
+      # decode & verify signature
+      decoded_tokens = JWT.decode auth_token, ecdsa_key, verify, algorithm: ALGORITHM, exp_leeway: LEEWAY
+      decoded_token = decoded_tokens[0]
+
+      raise InvalidAuthResponse.new("Public keys don't match issuer address") unless self.public_keys_match_issuer?(decoded_token)
+
+      raise InvalidAuthResponse.new("Public keys don't match owner of claimed username") unless self.public_keys_match_username?(BLOCKSTACK_API, decoded_token)
+    rescue JWT::VerificationError => error
+      raise InvalidAuthResponse.new("Signature on JWT is invalid")
+    rescue JWT::DecodeError => error
+      raise InvalidAuthResponse.new("Unable to decode JWT")
+    rescue RuntimeError => error
+      raise InvalidAuthResponse.new(error.message)
+    end
+
+    def self.get_did_type(decentralized_id)
+      did_parts = decentralized_id.split(':')
+      raise 'Decentralized IDs must have 3 parts' if did_parts.length != 3
+      raise 'Decentralized IDs must start with "did"' if did_parts[0].downcase != 'did'
+      did_parts[1].downcase
+    end
+
+    def self.get_address_from_did(decentralized_id)
+      did_type = get_did_type(decentralized_id)
+      return nil if did_type != 'btc-addr'
+      decentralized_id.split(':')[2]
+    end
+
+    def self.public_keys_match_issuer?(decoded_token)
+      public_keys = decoded_token['publicKeys']
+      address_from_issuer = get_address_from_did(decoded_token['iss'])
+
+      raise 'Multiple public keys are not supported' unless public_keys.count == 1
+
+      address_from_public_keys = Bitcoin::pubkey_to_address public_keys.first
+
+      address_from_issuer == address_from_public_keys
+    end
+
+    def self.public_keys_match_username?(blockstack_api, decoded_token)
+      username = decoded_token["username"]
+      return true if username.nil?
+
+      response = Faraday.get "#{blockstack_api}/v1/names/#{username}"
+      json = JSON.parse response.body
+
+      raise "Issuer claimed username that doesn't exist" if response.status == 404
+      raise "Unable to verify issuer's claimed username" if response.status != 200
+
+      name_owning_address = json['address']
+      address_from_issuer = get_address_from_did decoded_token['iss']
+      name_owning_address == address_from_issuer
+    end
+
+    protected
+
+    def self.faraday
+      connection = Faraday.new
+      connection.headers[:user_agent] = USER_AGENT
+      connection
+    end
+end

metadata

@@ -0,0 +1,167 @@
+--- !ruby/object:Gem::Specification
+name: blockstack
+version: !ruby/object:Gem::Version
+  version: 0.5.0
+platform: ruby
+authors:
+- Larry Salibra
+autorequire: 
+bindir: exe
+cert_chain: []
+date: 2017-03-14 00:00:00.000000000 Z
+dependencies:
+- !ruby/object:Gem::Dependency
+  name: bundler
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '1.13'
+  type: :development
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '1.13'
+- !ruby/object:Gem::Dependency
+  name: rake
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '10.0'
+  type: :development
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '10.0'
+- !ruby/object:Gem::Dependency
+  name: rspec
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: '0'
+  type: :development
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: '0'
+- !ruby/object:Gem::Dependency
+  name: webmock
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: '0'
+  type: :development
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: '0'
+- !ruby/object:Gem::Dependency
+  name: vcr
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: '0'
+  type: :development
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: '0'
+- !ruby/object:Gem::Dependency
+  name: jwt
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: '0'
+  type: :runtime
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: '0'
+- !ruby/object:Gem::Dependency
+  name: bitcoin
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: '0'
+  type: :runtime
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: '0'
+- !ruby/object:Gem::Dependency
+  name: faraday
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: '0'
+  type: :runtime
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: '0'
+description: 
+email:
+- rubygems@larrysalibra.com
+executables: []
+extensions: []
+extra_rdoc_files: []
+files:
+- ".gitignore"
+- ".travis.yml"
+- Gemfile
+- LICENSE.txt
+- README.md
+- Rakefile
+- bin/console
+- bin/setup
+- blockstack.gemspec
+- lib/blockstack.rb
+- lib/blockstack/version.rb
+homepage: https://github.com/larrysalibra/blockstack-ruby
+licenses:
+- MIT
+metadata: {}
+post_install_message: 
+rdoc_options: []
+require_paths:
+- lib
+required_ruby_version: !ruby/object:Gem::Requirement
+  requirements:
+  - - ">="
+    - !ruby/object:Gem::Version
+      version: '0'
+required_rubygems_version: !ruby/object:Gem::Requirement
+  requirements:
+  - - ">="
+    - !ruby/object:Gem::Version
+      version: '0'
+requirements: []
+rubyforge_project: 
+rubygems_version: 2.6.8
+signing_key: 
+specification_version: 4
+summary: The Blockstack ruby library for identity and authentication
+test_files: []