crumbl 0.0.2 → 0.0.3

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA1:
-  metadata.gz: c3b8dd0f98053b98e04343c60659836908c22ef6
-  data.tar.gz: fe1bf8a3c123ac1650989dcd5712bf6e0a70d669
+  metadata.gz: 006098adc496eebb23ab9c02422bad0b71bbd141
+  data.tar.gz: 919397a66ec03e852e7cefc8d61d50e58f3eeb2f
 SHA512:
-  metadata.gz: 813d43fa0cf1b6f070b8cbe0c24a5d3d1b17029422de9e40d28e0e54e340bf2c85245fad93bace746077d11046c4a408bb9047da6074e4d1c77806cb7cc38f39
-  data.tar.gz: 236ca9d70db70d6ee5192c723086a69620b8725c0845fbad8547e64b414124967cfdea1eff974dd8327b2d11ecb95e32c5503e1488d49a9728816244e679b9bb
+  metadata.gz: 0981f5e8bed17773f8fb770fedd2700ff337078fbe8670c2bbacf7f71cd0b208d3752959e9dc9310b77c52618b40409db8aa0e98c02754bb303a83ffd0aa1287
+  data.tar.gz: 79c61c3bbd0c3befd0dcd9263696b463bee18a430be2d33a02063edbd55533da513cb9dc3c2cd84d6f66bbec97ef3310d82364a37bfd0889f3d8def9962e34dc

data/.gitignore

@@ -0,0 +1,34 @@
+*.gem
+*.rbc
+/.config
+/coverage/
+/InstalledFiles
+/pkg/
+/spec/reports/
+/test/tmp/
+/test/version_tmp/
+/tmp/
+
+## Specific to RubyMotion:
+.dat*
+.repl_history
+build/
+
+## Documentation cache and generated files:
+/.yardoc/
+/_yardoc/
+/doc/
+/rdoc/
+
+## Environment normalisation:
+/.bundle/
+/lib/bundler/man/
+
+# for a library or gem, you might want to ignore these files since the code is
+# intended to run in multiple environments; otherwise, check them in:
+# Gemfile.lock
+# .ruby-version
+# .ruby-gemset
+
+# unless supporting rvm < 1.11.0 or doing something fancy, ignore this:
+.rvmrc

data/.travis.yml

@@ -0,0 +1,3 @@
+language: ruby
+rvm:
+  - 1.9.3

data/Gemfile

@@ -0,0 +1,7 @@
+source "https://rubygems.org"
+
+gemspec
+
+group :test do
+  gem "rake"
+end

data/LICENSE

@@ -0,0 +1,22 @@
+The MIT License (MIT)
+
+Copyright (c) 2014 dlanner
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.
+

data/README.md

@@ -0,0 +1,36 @@
+crumbl
+============
+
+Command line tool for reading and manipulating encoded or encrypted Rails cookies
+
+# Installation
+`gem install crumbl`
+
+# Usage
+
+#### Decrypt Rails 4 encrypted cookie:
+
+```
+$ crumbl decrypt "secret key base" RWRWZ0xHSEsrNmx1TlZFOEpmcCtNVEY4QjdKelNETWlNdVV0TnlCZU0zTnA4ejZka2ZCR2EyQStydGhOaTRySC0tOEQyMFc2SkpLejRidjV5V1ZBUXpEUT09--67e625ac91a2fecc9a3da7146a3a92b667e0ed17
+{"session_type"=>"user"}
+```
+
+#### Encrypt Rails 4 cookie:
+```
+$ crumbl encrypt "secret key base" --data session_type:admin
+QnprY1BXSlI3WFo1MkxlZmJ6REE3b1N2ZExFaHdqYncvYnNTcHZTL0dQbmZ3RVVwU3hxNmpiVkJtQmNOTW4zYy0tNitvbnhGQ0szbWtIOTU4czNzMnJSUT09--4f397df94a66a3449511485c76e130ac10a35f32
+```
+
+#### Decode Rails 3 signed cookie:
+
+```
+$ crumbl decode BAh7BkkiEXNlc3Npb25fdHlwZQY6BkVUSSIJdXNlcgY7AFQ=--ff2751f14c049e970cd817b6bbb6575b7c8a7bd8
+{"session_type"=>"user"}
+```
+
+#### Encode Rails 3 signed cookie:
+
+```
+$ crumbl encode "signing key" --data session_type:admin
+BAh7BkkiEXNlc3Npb25fdHlwZQY6BkVUSSIKYWRtaW4GOwBU--a44fc16d8c2f185e4b667c4276e790ae1d40c505
+```

data/Rakefile

@@ -0,0 +1,8 @@
+require 'rake/testtask'
+
+Rake::TestTask.new do |t|
+  t.libs << 'test'
+end
+
+desc "Run tests"
+task :default => :test

data/crumbl.gemspec

@@ -0,0 +1,23 @@
+# -*- encoding: utf-8 -*-
+lib = File.expand_path('../lib', __FILE__)
+$LOAD_PATH.unshift(lib) unless $LOAD_PATH.include?(lib)
+require "crumbl/version"
+
+Gem::Specification.new do |s|
+  s.name        = 'crumbl'
+  s.version     = Crumbl::VERSION
+  s.date        = '2014-10-08'
+  s.summary     = "Read and manipulate encoded or encrypted Rails cookies"
+  s.description = "Command line tool for reading and manipulating encoded or encrypted Rails cookies"
+  s.authors     = ["David Lanner"]
+  s.email       = 'dhlanner2@gmail.com'
+  s.files       = `git ls-files -z`.split("\x0")
+  s.executables = s.files.grep(%r{^bin/}) { |f| File.basename(f) }
+  s.test_files  = s.files.grep(%r{^(test|spec|features)/})
+  s.require_paths = ["lib", "bin"]
+  s.homepage    =
+    'https://github.com/dlanner/crumbl'
+  s.license       = 'MIT'
+  s.add_runtime_dependency "rack"
+  s.add_runtime_dependency "activesupport", '~> 4.0.0'
+end

data/lib/crumbl/base.rb

@@ -1,7 +1,7 @@
 require 'active_support/all'
 require 'rack'
 
-class Crumbl
+module Crumbl
 
   DEFAULT_ITERATIONS                   = 1000
   DEFAULT_ENCRYPTED_COOKIE_SALT        = "encrypted cookie"

data/lib/crumbl/version.rb

@@ -1,3 +1,3 @@
 module Crumbl
-  VERSION = "0.0.2"
+  VERSION = "0.0.3"
 end

data/test/test_crumbl.rb

@@ -0,0 +1,56 @@
+require 'minitest/autorun'
+require 'crumbl'
+
+class CrumblTest < Minitest::Unit::TestCase
+  def setup
+    @data = {:foo => "bar"}
+    @key_base = "secret key base"
+    @custom_iterations = 1001
+    @custom_encrypted_cookie_salt = @custom_encrypted_signed_cookie_salt = "salty"
+  end
+
+  def test_decrypt_encrypted
+    encrypted = Crumbl.encrypt(@data, @key_base)
+    decrypted = Crumbl.decrypt(encrypted, @key_base)
+    assert_equal @data, decrypted
+  end
+
+  def test_custom_iterations_equal
+    encrypted = Crumbl.encrypt(@data, @key_base, @custom_iterations)
+    decrypted = Crumbl.decrypt(encrypted, @key_base, @custom_iterations)
+    assert_equal @data, decrypted
+  end
+
+  def test_custom_iterations_not_equal
+    encrypted = Crumbl.encrypt(@data, @key_base)
+    assert_raises ActiveSupport::MessageVerifier::InvalidSignature do
+      Crumbl.decrypt(encrypted, @key_base, @custom_iterations)
+    end
+  end
+
+  def test_custom_encrypted_cookie_salt_equal
+    encrypted = Crumbl.encrypt(@data, @key_base, Crumbl::DEFAULT_ITERATIONS, @custom_encrypted_cookie_salt)
+    decrypted = Crumbl.decrypt(encrypted, @key_base, Crumbl::DEFAULT_ITERATIONS, @custom_encrypted_cookie_salt)
+    assert_equal @data, decrypted
+  end
+
+  def test_custom_encrypted_cookie_salt_not_equal
+    encrypted = Crumbl.encrypt(@data, @key_base)
+    assert_raises ActiveSupport::MessageEncryptor::InvalidMessage do
+      Crumbl.decrypt(encrypted, @key_base, Crumbl::DEFAULT_ITERATIONS, @custom_encrypted_cookie_salt)
+    end
+  end
+
+  def test_custom_encrypted_signed_cookie_salt_equal
+    encrypted = Crumbl.encrypt(@data, @key_base, Crumbl::DEFAULT_ITERATIONS, Crumbl::DEFAULT_ENCRYPTED_COOKIE_SALT, @custom_encrypted_signed_cookie_salt)
+    decrypted = Crumbl.decrypt(encrypted, @key_base, Crumbl::DEFAULT_ITERATIONS, Crumbl::DEFAULT_ENCRYPTED_COOKIE_SALT, @custom_encrypted_signed_cookie_salt)
+    assert_equal @data, decrypted
+  end
+
+  def test_custom_encrypted_signed_cookie_salt_not_equal
+    encrypted = Crumbl.encrypt(@data, @key_base)
+    assert_raises ActiveSupport::MessageVerifier::InvalidSignature do
+      Crumbl.decrypt(encrypted, @key_base, Crumbl::DEFAULT_ITERATIONS, Crumbl::DEFAULT_ENCRYPTED_COOKIE_SALT, @custom_encrypted_signed_cookie_salt)
+    end
+  end
+end

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: crumbl
 version: !ruby/object:Gem::Version
-  version: 0.0.2
+  version: 0.0.3
 platform: ruby
 authors:
 - David Lanner
 autorequire: 
 bindir: bin
 cert_chain: []
-date: 2014-10-07 00:00:00.000000000 Z
+date: 2014-10-08 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: rack
@@ -46,10 +46,18 @@ executables:
 extensions: []
 extra_rdoc_files: []
 files:
+- ".gitignore"
+- ".travis.yml"
+- Gemfile
+- LICENSE
+- README.md
+- Rakefile
 - bin/crumbl
+- crumbl.gemspec
 - lib/crumbl.rb
 - lib/crumbl/base.rb
 - lib/crumbl/version.rb
+- test/test_crumbl.rb
 homepage: https://github.com/dlanner/crumbl
 licenses:
 - MIT
@@ -75,4 +83,5 @@ rubygems_version: 2.4.2
 signing_key: 
 specification_version: 4
 summary: Read and manipulate encoded or encrypted Rails cookies
-test_files: []
+test_files:
+- test/test_crumbl.rb