bundler_audit_notifier 0.0.6 → 0.0.7

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 02e1b895bd9b372142235bb973c3df0e0551f1857ef5cd7991b93431a929d533
-  data.tar.gz: 1f9fa7a4d41567e5eaa1d93210acc58aaf3bbf0f2dbd961de7bf1a72b3d4ba94
+  metadata.gz: b03380d456fbced6f980ed440aba6dab76c1ff64df758c9c01a027b853dba4fe
+  data.tar.gz: d217dcd33669a7a8c4bf137d41fb7bbc9885dcf37af7f7b3b0c6c86d74d5db1f
 SHA512:
-  metadata.gz: 87efd7b317c0dfd7971b455a8eaaa42170cb7716d9028559c2653ed52e02c2ffaf3a5c9faafe5c46c30250404e9d7f39d98ac490970176527a86b61471bafac3
-  data.tar.gz: e02e9546b44ed147dc8017618e5dcec962dcdd144792068e9ec6d372b6eef166b94544fd4534b666a5f64483555a8850e6221db52f7752bf07e3f47a6c18c3c1
+  metadata.gz: 0b1f9056a5307b5e519ffa0356cabc9846362167dcff090859c788752cb2efc782b99aaa5f8a2ea6a6cf906d5ef385d2581d5bc6d9bd8642f55123999e4f9091
+  data.tar.gz: 0e49a1985f9728f9da180045a481b91910f9ed9fb1bd78bc5f73f741e928f565e159845da5ae6d11029d7ceec5f13519064f0539f57204a7933eddce5e0adf4d

data/app/controllers/bundler_audit_issues_controller.rb

@@ -1,4 +1,6 @@
 class BundlerAuditIssuesController < ActionController::Base
+  before_action :authenticate, only: [:ignore]
+
   def ignore
     @bundler_audit_issue = BundlerAuditIssue.where(token: params[:token]).first
     @bundler_audit_issue.ignore = true
@@ -6,8 +8,23 @@ class BundlerAuditIssuesController < ActionController::Base
       render :ignore
     end
   end 
+
   private
 
+  def authenticate
+    if params[:token].present?
+      bundler_audit_issue = BundlerAuditIssue.where(token: params[:token]).first
+      if bundler_audit_issue
+      ::Rails.logger.info("Authorized accesss to api for bundler audit issue: #{params[:token]}")
+        return true 
+      else 
+        ::Rails.logger.warn("Unauthorized accesss to api for bundler audit issue: #{params[:token]}")
+        head :unauthorized
+        return false
+      end
+    end
+  end 
+
   def bundler_audit_issue_params
     params.require(:bundler_audit_issue).permit(:name, :version, :advisory, :token, :criticality, :url, :title, :solution, :ignore)
   end

data/lib/generators/bundler_audit_notifier/bundler_audit_notifier_generator.rb

@@ -1,4 +1,4 @@
-# Run this command to generate migration: rails generate bundler_audit_notifier
+# Run this command to generate migration: rails generate bundler_audit_notifier:bundler_audit_notifier
 require "rails/generators/active_record"
 require "rails/generators"
 module BundlerAuditNotifier

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: bundler_audit_notifier
 version: !ruby/object:Gem::Version
-  version: 0.0.6
+  version: 0.0.7
 platform: ruby
 authors:
 - Marley Stipich