client-auth 1.0.6

checksums.yaml

@@ -0,0 +1,7 @@
+---
+SHA1:
+  metadata.gz: 8eabe211ff51313482abc3b4597aa8e693022b1f
+  data.tar.gz: 847b377e7ab06b87cf57dbc2082521dc8d4804cc
+SHA512:
+  metadata.gz: 8eaea007d890fb968d64bb048f0e9ae1c6946e77da5c39137302c514046f7b0adf4f6b3e10784968d18166bab3e4055e2f81a0ec8f2a8a4cbd9439bdf380b0bd
+  data.tar.gz: 4363a967840ff0928ecba398a47dcd4b789b695854380d5ba316c14a9f140df2eaa5173e36357ac3c04d1db10e99885530ddc47c836c322a8a58727a0294b5af

data/lib/client_auth.rb

@@ -0,0 +1,9 @@
+module ClientAuth
+end
+
+require 'active_support/all'
+require 'rest-client'
+
+require 'client_auth/models/errors/base_error'
+
+Dir["#{File.dirname(__FILE__)}/**/*.rb"].each { |file| require file }

data/lib/client_auth/authenticator.rb

@@ -0,0 +1,76 @@
+module ClientAuth
+  class Authenticator
+    EXPIRATION = 10.minutes
+    DELIMITER = ':'.freeze
+
+    def initialize(request, public_key)
+      @request = request
+      @public_key = public_key
+    end
+
+    def authenticate!
+      validate_client_name!
+      validate_timestamp!
+      validate_signature!
+      true
+    end
+
+    private
+
+    def validate_client_name!
+      raise_error('No client name') unless client_name
+    end
+
+    def validate_timestamp!
+      raise_error('No timestamp') unless timestamp
+      raise_error('Timestamp is expired') if expired_timestamp?
+    end
+
+    def validate_signature!
+      raise_error('Signature is missing') unless signature.present?
+      raise_error('Invalid signature') unless signature_valid?
+    end
+
+    def timestamp
+      Integer(@request.headers['X-Timestamp'].to_s)
+    rescue ArgumentError
+      nil
+    end
+
+    def expired_timestamp?
+      (Time.current - Time.at(timestamp)) > EXPIRATION
+    end
+
+    def signature_valid?
+      key = OpenSSL::PKey::RSA.new(@public_key)
+      key.verify(OpenSSL::Digest::SHA256.new, signature, concat_secret_string)
+    end
+
+    def concat_secret_string
+      [
+        client_name,
+        @request.request_method.upcase,
+        @request.fullpath,
+        request_body,
+        timestamp
+      ].join(DELIMITER)
+    end
+
+    def request_body
+      return @request.body.read if @request.request_method == 'GET'
+      @request.raw_post
+    end
+
+    def signature
+      [@request.headers['X-Signature']].pack('H*')
+    end
+
+    def client_name
+      @request.headers['X-Client']
+    end
+
+    def raise_error(message)
+      raise ClientAuth::Errors::PreconditionFailed.new('412', message)
+    end
+  end
+end

data/lib/client_auth/client.rb

@@ -0,0 +1,44 @@
+module ClientAuth
+  class Client
+    attr_reader :config
+
+    delegate :api_host, :app_name, :key, to: :config
+
+    def initialize(config)
+      @config = config
+    end
+
+    def get(path, params = {})
+      resource = resource('GET', path, params)
+      with_rescue { resource[URI.escape(path)].get(params: params) }
+    end
+
+    def post(path, params = {})
+      resource = resource('POST', path)
+      with_rescue { resource[URI.escape(path)].post(params) }
+    end
+
+    def patch(path, params = {})
+      resource = resource('PATCH', path)
+      with_rescue { resource[URI.escape(path)].patch(params) }
+    end
+
+    protected
+
+    def with_rescue
+      yield
+    rescue RestClient::NotFound, RestClient::PreconditionFailed,
+        RestClient::UnprocessableEntity => exception
+      raise ClientAuth::ErrorSerializer.deserialize(exception.response)
+    rescue RestClient::Exception => exception
+      raise ClientAuth::Errors::ClientError.new(exception.http_code, exception.message)
+    end
+
+    def resource(method, path, params = nil)
+      signer = ClientAuth::Signer.new(method, path, params)
+      signer.configure(key, app_name)
+      headers = signer.headers.merge(content_type: :json, accept: :json)
+      ClientAuth::Resource.new(api_host, signer: signer, headers: headers)
+    end
+  end
+end

data/lib/client_auth/config.rb

@@ -0,0 +1,11 @@
+module ClientAuth
+  module Config
+    class << self
+      attr_accessor :api_host, :app_name, :key
+
+      def inspect
+        "ClientAuth::Config: {api_host: #{api_host}, app_name: #{app_name}, key: #{key}}"
+      end
+    end
+  end
+end

data/lib/client_auth/models/error_serializer.rb

@@ -0,0 +1,15 @@
+module ClientAuth
+  class ErrorSerializer
+    def self.serialize(error)
+      err = {status: error.status.to_s, title: error.title, detail: error.detail}
+      serialization = {errors: [err]}
+      serialization.to_json
+    end
+
+    def self.deserialize(data)
+      attrs = JSON.parse(data)['errors'].first
+      klass = attrs['title'].constantize
+      klass.new(attrs['status'], attrs['detail'])
+    end
+  end
+end

data/lib/client_auth/models/errors/base_error.rb

@@ -0,0 +1,23 @@
+module ClientAuth
+  module Errors
+    class BaseError < StandardError
+      attr_accessor :status, :title, :detail
+
+      alias message detail
+
+      def initialize(status, detail)
+        @status = status
+        @title = self.class.name
+        @detail = detail
+      end
+
+      def inspect
+        "#{status} #{title}: '#{detail}'"
+      end
+
+      def headers
+        {}
+      end
+    end
+  end
+end

data/lib/client_auth/models/errors/client_error.rb

@@ -0,0 +1,6 @@
+module ClientAuth
+  module Errors
+    class ClientError < BaseError
+    end
+  end
+end

data/lib/client_auth/models/errors/internal_server_error.rb

@@ -0,0 +1,11 @@
+module ClientAuth
+  module Errors
+    class InternalServerError < BaseError
+      def initialize(message = 'Internal server error')
+        @status = 500
+        @title = self.class.name
+        @detail = message
+      end
+    end
+  end
+end

data/lib/client_auth/models/errors/precondition_failed.rb

@@ -0,0 +1,6 @@
+module ClientAuth
+  module Errors
+    class PreconditionFailed < BaseError
+    end
+  end
+end

data/lib/client_auth/models/errors/resource_not_found.rb

@@ -0,0 +1,6 @@
+module ClientAuth
+  module Errors
+    class ResourceNotFound < BaseError
+    end
+  end
+end

data/lib/client_auth/models/errors/unprocessable_entity.rb

@@ -0,0 +1,6 @@
+module ClientAuth
+  module Errors
+    class UnprocessableEntity < BaseError
+    end
+  end
+end

data/lib/client_auth/request.rb

@@ -0,0 +1,19 @@
+module ClientAuth
+  class Request < RestClient::Request
+
+    def init_headers(args, signer)
+      @headers = (args[:headers] || {}).dup
+      @headers.merge!(signer.headers)
+
+      if args[:url]
+        @url = process_url_params(normalize_url(args[:url]), @headers)
+      else
+        raise ArgumentError, 'must pass :url'
+      end
+      parse_url_with_auth!(url)
+      @cookie_jar = process_cookie_args!(@uri, @headers, args)
+      @processed_headers = make_headers @headers
+    end
+
+  end
+end

data/lib/client_auth/resource.rb

@@ -0,0 +1,32 @@
+module ClientAuth
+  class Resource < RestClient::Resource
+    attr_reader :signer
+
+    def initialize(url, options = {}, backwards_compatibility = nil, &block)
+      @signer = options[:signer]
+      super(url, options, backwards_compatibility, &block)
+    end
+
+    def post(payload, additional_headers = {}, &block)
+      args = args_for(:post, payload, additional_headers)
+      client_request(args).execute(&(block || @block))
+    end
+
+    def patch(payload, additional_headers = {}, &block)
+      args = args_for(:patch, payload, additional_headers)
+      client_request(args).execute(&(block || @block))
+    end
+
+    def client_request(args)
+      ClientAuth::Request.new(args).tap do |client_request|
+        signer.payload = client_request.payload
+        client_request.init_headers(args, signer)
+      end
+    end
+
+    def args_for(name, payload, additional_headers)
+      headers = (options[:headers] || {}).merge(additional_headers)
+      options.merge(method: name, url: url, payload: payload, headers: headers)
+    end
+  end
+end

data/lib/client_auth/signer.rb

@@ -0,0 +1,70 @@
+module ClientAuth
+  class Signer
+    attr_reader :client_name, :payload
+
+    def initialize(method, path, params = {})
+      @method = method.upcase
+      @path = path
+      @payload = params
+    end
+
+    def payload=(value)
+      @payload = value
+    end
+
+    def headers
+      raise NotImplementedError, 'Client name not configured' unless client_name
+
+      {
+        'X-Client' => client_name,
+        'X-Timestamp' => timestamp,
+        'X-Signature' => signature
+      }
+    end
+
+    def configure(client_key, client_name)
+      @client_key = client_key
+      @client_name = client_name
+    end
+
+    private
+
+    def timestamp
+      @timestamp ||= Time.now.to_i.to_s
+    end
+
+    def signature
+      raise NotImplementedError, 'Client key not configured' unless @client_key
+      key.sign(OpenSSL::Digest::SHA256.new, secret_string).unpack('H*').first
+    end
+
+    def key
+      @key ||= OpenSSL::PKey::RSA.new(@client_key)
+    end
+
+    def secret_string
+      [
+        client_name,
+        @method,
+        fullpath,
+        request_body,
+        timestamp
+      ].join(ClientAuth::Authenticator::DELIMITER)
+    end
+
+    def request_body
+      return if @method == 'GET'
+      payload
+    end
+
+    def fullpath
+      fullpath = [safe_path]
+      fullpath.push(payload.to_query) if @method == 'GET' && payload.present?
+      fullpath.join('?')
+    end
+
+    def safe_path
+      '/' + URI.encode(@path).gsub(%r{\A\/}, '')
+    end
+  end
+end

data/lib/client_auth/version.rb

@@ -0,0 +1,4 @@
+# File is auto-generated.
+module ClientAuth
+  VERSION = '1.0.6'.freeze
+end

metadata

@@ -0,0 +1,184 @@
+--- !ruby/object:Gem::Specification
+name: client-auth
+version: !ruby/object:Gem::Version
+  version: 1.0.6
+platform: ruby
+authors:
+- Yuriy Lavryk
+autorequire: 
+bindir: bin
+cert_chain: []
+date: 2017-04-03 00:00:00.000000000 Z
+dependencies:
+- !ruby/object:Gem::Dependency
+  name: rest-client
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: '0'
+  type: :runtime
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: '0'
+- !ruby/object:Gem::Dependency
+  name: activesupport
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: '0'
+  type: :runtime
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: '0'
+- !ruby/object:Gem::Dependency
+  name: pry
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: '0'
+  type: :development
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: '0'
+- !ruby/object:Gem::Dependency
+  name: rake
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '10.0'
+  type: :development
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '10.0'
+- !ruby/object:Gem::Dependency
+  name: rspec
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '3.0'
+  type: :development
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '3.0'
+- !ruby/object:Gem::Dependency
+  name: rspec-its
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '1.2'
+  type: :development
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '1.2'
+- !ruby/object:Gem::Dependency
+  name: webmock
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: '0'
+  type: :development
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: '0'
+- !ruby/object:Gem::Dependency
+  name: rubocop
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '0.46'
+  type: :development
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '0.46'
+- !ruby/object:Gem::Dependency
+  name: rubocop-rspec
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '1.8'
+  type: :development
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '1.8'
+description: Authentication for matic clients
+email:
+- yuriy@getmatic.com
+executables: []
+extensions: []
+extra_rdoc_files: []
+files:
+- lib/client_auth.rb
+- lib/client_auth/authenticator.rb
+- lib/client_auth/client.rb
+- lib/client_auth/config.rb
+- lib/client_auth/models/error_serializer.rb
+- lib/client_auth/models/errors/base_error.rb
+- lib/client_auth/models/errors/client_error.rb
+- lib/client_auth/models/errors/internal_server_error.rb
+- lib/client_auth/models/errors/precondition_failed.rb
+- lib/client_auth/models/errors/resource_not_found.rb
+- lib/client_auth/models/errors/unprocessable_entity.rb
+- lib/client_auth/request.rb
+- lib/client_auth/resource.rb
+- lib/client_auth/signer.rb
+- lib/client_auth/version.rb
+homepage: https://github.com/matic-insurance/client-auth
+licenses: []
+metadata: {}
+post_install_message: 
+rdoc_options: []
+require_paths:
+- lib
+required_ruby_version: !ruby/object:Gem::Requirement
+  requirements:
+  - - ">="
+    - !ruby/object:Gem::Version
+      version: '0'
+required_rubygems_version: !ruby/object:Gem::Requirement
+  requirements:
+  - - ">="
+    - !ruby/object:Gem::Version
+      version: '0'
+requirements: []
+rubyforge_project: 
+rubygems_version: 2.5.1
+signing_key: 
+specification_version: 4
+summary: Authentication client
+test_files: []