capbac_cli 0.4.3

checksums.yaml

@@ -0,0 +1,7 @@
+---
+SHA256:
+  metadata.gz: 886d97ead136540c97f3294c37d77d5a982933ee449b405e44d91629974efb92
+  data.tar.gz: 1934bac409b4e2c3f83efae982f597507ffa27fdacd68ee7f7290bf9147c1fdb
+SHA512:
+  metadata.gz: a49c48ff999c693f66c07474caaa4abf77b5648b7e38298789ee01591f43dcb35f45ce54c357dee9d36711e44ea9d094de9246e1758722cd55de4389b32c5d01
+  data.tar.gz: e49baea931de42f78c8774fad81ee613f7cfd021cde1ea53c87ee8ebe975ec7ad95961692c7791d0f7b3e63f1c08084fe44868e95485df44b4842328c0c8a39e

data/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2020 Xapix GmbH
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

data/README.md

@@ -0,0 +1,35 @@
+# Capbac
+
+Welcome to your new gem! In this directory, you'll find the files you need to be able to package up your Ruby library into a gem. Put your Ruby code in the file `lib/capbac`. To experiment with that code, run `bin/console` for an interactive prompt.
+
+TODO: Delete this and the text above, and describe your gem
+
+## Installation
+
+Add this line to your application's Gemfile:
+
+```ruby
+gem 'capbac'
+```
+
+And then execute:
+
+    $ bundle
+
+Or install it yourself as:
+
+    $ gem install capbac
+
+## Usage
+
+TODO: Write usage instructions here
+
+## Development
+
+After checking out the repo, run `bin/setup` to install dependencies. Then, run `rake spec` to run the tests. You can also run `bin/console` for an interactive prompt that will allow you to experiment.
+
+To install this gem onto your local machine, run `bundle exec rake install`. To release a new version, update the version number in `version.rb`, and then run `bundle exec rake release`, which will create a git tag for the version, push git commits and tags, and push the `.gem` file to [rubygems.org](https://rubygems.org).
+
+## Contributing
+
+Bug reports and pull requests are welcome on GitHub at https://github.com/[USERNAME]/capbac.

data/cli_lib/capbac_cli.rb

@@ -0,0 +1,159 @@
+# frozen_string_literal: true
+
+require 'capbac'
+require 'capbac/version'
+require 'commander/import'
+require 'optparse/uri'
+require 'uri'
+
+class RegexpTrustChecker < CapBAC::TrustChecker
+  def initialize(regex)
+    @check_regex = regex
+  end
+
+  def trusted?(id)
+    !!@check_regex.match(id.to_s)
+  end
+end
+
+class HashPubs < CapBAC::Pubs
+  def initialize(pubs)
+    @pubs = {}
+    pubs.each do |pub|
+      pair = pub.split('=')
+      @pubs[URI.parse(pair[0])] = File.read(pair[1])
+    end
+  end
+
+  def get(id)
+    @pubs[id]
+  end
+end
+
+# :name is optional, otherwise uses the basename of this executable
+program :name, 'CapBAC CLI'
+program :version, CapBAC::VERSION
+program :description, 'CapBAC CLI tool to forge, delegate and validate certificates and invocations.'
+
+command :forge do |c|
+  c.option '--capability CAPABILITY', String
+  c.option '--subject SUBJECT', URI
+  c.option '--me ME', URI
+  c.option '--sk SK', String
+  c.option '--exp [EXP]', Integer
+  c.action do |_args, options|
+    holder = CapBAC::Holder.new(options.me, File.read(options.sk))
+    ios = IO.new STDOUT.fileno
+    cert = holder.forge(subject: options.subject, capability: options.capability)
+    ios.write cert
+    ios.close
+  end
+end
+
+command :delegate do |c|
+  c.option '--capability CAPABILITY', String
+  c.option '--subject SUBJECT', URI
+  c.option '--me ME', URI
+  c.option '--sk SK', String
+  c.option '--exp [EXP]', Integer
+  c.action do |_args, options|
+    holder = CapBAC::Holder.new(options.me, File.read(options.sk))
+    cert = holder.delegate(STDIN.read, subject: options.subject, capability: options.capability)
+    ios = IO.new STDOUT.fileno
+    ios.write cert
+    ios.close
+  end
+end
+
+command :invoke do |c|
+  c.option '--action ACTION', String
+  c.option '--cert CERT', String
+  c.option '--me ME', URI
+  c.option '--sk SK', String
+  c.option '--exp EXP', Integer
+  c.action do |_args, options|
+    holder = CapBAC::Holder.new(options.me, File.read(options.sk))
+    inv = holder.invoke(cert: File.read(options.cert), action: options.action, exp: options.exp)
+    ios = IO.new STDOUT.fileno
+    ios.write inv
+    ios.close
+  end
+end
+
+command 'certificate-validate' do |c|
+  pubs = []
+  c.option '--now NOW', Integer
+  c.option '--trust-ids REGEX', Regexp
+  c.option('--pub PUB', String) { |x| pubs << x }
+  c.action do |_args, options|
+    trust_checker = RegexpTrustChecker.new(options.trust_ids)
+    pubs = HashPubs.new(pubs)
+    validator = CapBAC::Validator.new(trust_checker, pubs)
+    begin
+      validator.validate_cert(STDIN.read, options.now)
+    rescue CapBAC::Malformed => e
+      say e
+      exit 11
+    rescue CapBAC::BadURL => e
+      say e
+      exit 12
+    rescue CapBAC::UnknownPub => e
+      say e
+      exit 12
+    rescue CapBAC::BadIssuer => e
+      say e
+      exit 13
+    rescue CapBAC::BadInvoker => e
+      say e
+      exit 13
+    rescue CapBAC::Untrusted => e
+      say e
+      exit 13
+    rescue CapBAC::Expired
+      say 'Expired'
+      exit 14
+    rescue CapBAC::BadSign
+      say 'Bad sign'
+      exit 15
+    end
+  end
+end
+
+command 'invocation-validate' do |c|
+  pubs = []
+  c.option '--now NOW', Integer
+  c.option '--trust-ids REGEX', Regexp
+  c.option('--pub PUB', String) { |x| pubs << x }
+  c.action do |_args, options|
+    trust_checker = RegexpTrustChecker.new(options.trust_ids)
+    pubs = HashPubs.new(pubs)
+    validator = CapBAC::Validator.new(trust_checker, pubs)
+    begin
+      validator.validate_invocation(STDIN.read, options.now)
+    rescue CapBAC::Malformed => e
+      say e
+      exit 11
+    rescue CapBAC::BadURL => e
+      say e
+      exit 12
+    rescue CapBAC::UnknownPub => e
+      say e
+      exit 12
+    rescue CapBAC::BadIssuer => e
+      say e
+      exit 13
+    rescue CapBAC::BadInvoker => e
+      say e
+      exit 13
+    rescue CapBAC::Untrusted => e
+      say e
+      exit 13
+    rescue CapBAC::Expired
+      say 'Expired'
+      exit 14
+    rescue CapBAC::BadSign
+      say 'Bad sign'
+      exit 15
+    end
+  end
+end

data/exe/capbac-cli

@@ -0,0 +1,5 @@
+#!/usr/bin/env ruby
+# frozen_string_literal: true
+
+require 'rubygems'
+require 'capbac_cli'

metadata

@@ -0,0 +1,75 @@
+--- !ruby/object:Gem::Specification
+name: capbac_cli
+version: !ruby/object:Gem::Version
+  version: 0.4.3
+platform: ruby
+authors:
+- Kirill Chernyshov
+autorequire:
+bindir: exe
+cert_chain: []
+date: 2020-08-11 00:00:00.000000000 Z
+dependencies:
+- !ruby/object:Gem::Dependency
+  name: capbac
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - '='
+      - !ruby/object:Gem::Version
+        version: 0.4.3
+  type: :runtime
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - '='
+      - !ruby/object:Gem::Version
+        version: 0.4.3
+- !ruby/object:Gem::Dependency
+  name: commander
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: 4.5.2
+  type: :runtime
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: 4.5.2
+description:
+email: delaguardo@gmail.com
+executables:
+- capbac-cli
+extensions: []
+extra_rdoc_files: []
+files:
+- LICENSE
+- README.md
+- cli_lib/capbac_cli.rb
+- exe/capbac-cli
+homepage: http://capbac.org
+licenses:
+- MIT
+metadata: {}
+post_install_message:
+rdoc_options: []
+require_paths:
+- cli_lib
+required_ruby_version: !ruby/object:Gem::Requirement
+  requirements:
+  - - ">="
+    - !ruby/object:Gem::Version
+      version: '0'
+required_rubygems_version: !ruby/object:Gem::Requirement
+  requirements:
+  - - ">="
+    - !ruby/object:Gem::Version
+      version: '0'
+requirements: []
+rubygems_version: 3.1.2
+signing_key:
+specification_version: 4
+summary: Command line utility for Capability-based Access Control model
+test_files: []