configuration_management_backdoor 1.1.0 → 2.0.0.pre.1

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA1:
-  metadata.gz: 61a3be6cee6598d25a52622f495c28169c313d49
-  data.tar.gz: faa4145afb1ce798e94334d27a674356e994b3b6
+  metadata.gz: de7e5db83a7fff3c95f20f69eb248f513b03e171
+  data.tar.gz: d6db5a6af63cdf4ca6c3033d36e544e1d3735d2c
 SHA512:
-  metadata.gz: abeb2203f38462a1cb2a94603722b34f794e3ba83341575b3782cfe57497043cb12001e1427d5c571b2171eeae0e7fe18b99badc593a012f861f66f95431e410
-  data.tar.gz: 949a23db3a9e507c89bb1bf0aff313d1e46c69ee85f69f49b18f216a0ef01c8a43cb5f5ef4c4895d5a28eb0eff4c11287c713441b7a37c54bc16fcc8763285a2
+  metadata.gz: 902dc9c7dd3680e98fec265b9dda78f9de3d79fc49e005a243d5cb5233781a2888afa6f9d0806bc7731492d05b90022cc6a3810381b5ce888549ee5b7be9ed47
+  data.tar.gz: 185bf61e0edbbaef6a8985259410667eb9d681743178c9bb5e873409881c390915c8c56f6b4c1a0a4fb84303d19c38540346e1398df640330d60eef5122839c9

data/app/controllers/configuration_management_backdoor_controller.rb

@@ -3,23 +3,24 @@ class ConfigurationManagementBackdoorController < ApplicationController
 
   def authenticate
     _username, password = ActionController::HttpAuthentication::Basic \
-                          .user_name_and_password(request) rescue [nil, nil]
-    unless Rails.application.secrets.secret_key_base == password
-      response.headers['WWW-Authenticate'] =
-        'Basic realm="Configuration Management Backdoor via secret_key_base"'
-      render plain: 'unauthorized', status: :unauthorized
+      .user_name_and_password(request) rescue [nil, nil]
+    if password == nil
+      response.headers['WWW-Authenticate'] = 'Basic realm="Configuration Management Backdoor via secret_key_base"'
+      render plain: 'unauthorized', status: 401
+    elsif Rails.application.secrets.secret_key_base != password
+      render plain: 'Forbidden', status: 403
     end
   end
 
   def invoke_ruby
     code = request.body.read
-    render plain: eval(code)
+    render json: {result: eval(code).inspect}
   end
 
   def invoke_sql
     code = request.body.gets
     res = ActiveRecord::Base.connection.execute code
-    render plain: res.to_a.to_s
+    render json: {result: res.inspect}
   end
 
   def invoke

data/lib/configuration_management_backdoor/version.rb

@@ -1,3 +1,3 @@
 module ConfigurationManagementBackdoor
-  VERSION = '1.1.0'
+  VERSION = '2.0.0-1'
 end

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: configuration_management_backdoor
 version: !ruby/object:Gem::Version
-  version: 1.1.0
+  version: 2.0.0.pre.1
 platform: ruby
 authors:
 - Thomas Schank
 autorequire: 
 bindir: bin
 cert_chain: []
-date: 2015-09-19 00:00:00.000000000 Z
+date: 2015-10-28 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: rails
@@ -74,14 +74,13 @@ required_ruby_version: !ruby/object:Gem::Requirement
       version: '0'
 required_rubygems_version: !ruby/object:Gem::Requirement
   requirements:
-  - - ">="
+  - - ">"
     - !ruby/object:Gem::Version
-      version: '0'
+      version: 1.3.1
 requirements: []
 rubyforge_project: 
-rubygems_version: 2.4.8
+rubygems_version: 2.4.5.1
 signing_key: 
 specification_version: 4
 summary: Configuration Management Backdoor for Ruby on Rails
 test_files: []
-has_rdoc: