disco_app 0.4.3 → 0.4.4

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 05c8aa89d8624265452b4a5f46c28579f90c4c985f5cbb38c0a256b9d9221d32
-  data.tar.gz: a2ca5ed701971e55445170bb9796c94213d01a6c3f3ddc16cbe4a92c203bbb52
+  metadata.gz: d222fef3052055acefd393dca486ab68f5f7693d5a01cc30164a83808d9125c1
+  data.tar.gz: 515b778901873217f1932c63822031cde81c3f1efe1c1ec11d5c515c8128e3eb
 SHA512:
-  metadata.gz: 1cef1ceb859bc5cfa9ebdb22d206426f714907b9c88d1f72d66869a61087b92c09112f41769b4893b26870615f9b522dfcdc821049c626d46e29531b15dbbc2a
-  data.tar.gz: 308cf3007d6f16d8978d2ee8e0acbe447f9bc76674a235184d25aa6e7f8dc7a69673d1ad24d66e048ce9005c0d7d54a2f51fa68a3c3d44383e54b69a79c04ce5
+  metadata.gz: ceb9c5f888bab2694146b7585b7e6258dd32233fed4458b17c8d09fb6aa307bc2a5541ff0cfe8f74dba4695929ce4133467cd5e045aaf624146c3c51caf0865b
+  data.tar.gz: b2b5d1789bc7b4b61b8632316ec0dde497c9912609327ba379b43b727224cfc8f28f735ba929cbe8de8dfe72a3802fe0ee4a543aca7e70ba35ac726cb801622f

data/app/controllers/disco_app/carrier_request_controller.rb

@@ -0,0 +1,32 @@
+module DiscoApp
+  module CarrierRequestController
+    extend ActiveSupport::Concern
+
+    included do
+      before_action :verify_carrier_request_signature
+    end
+    
+    private
+
+      def verify_carrier_request_signature
+        unless carrier_request_signature_is_valid?
+          head :unauthorized
+        end
+      end
+
+      def carrier_request_signature_is_valid?
+        return true unless Rails.env.production?
+        data = request.body.read.to_s
+        hmac_header = request.headers['HTTP_X_SHOPIFY_HMAC_SHA256']
+        digest  = OpenSSL::Digest::Digest.new('sha256')
+        calculated_hmac = Base64.encode64(OpenSSL::HMAC.digest(digest, ShopifyApp.configuration.secret, data)).strip
+        request.body.rewind
+        calculated_hmac == hmac_header
+      end
+
+      def carrier_request_domain
+        request.headers['HTTP_X_SHOPIFY_SHOP_DOMAIN']
+      end
+
+  end
+end

data/lib/disco_app/version.rb

@@ -1,3 +1,3 @@
 module DiscoApp
-  VERSION = "0.4.3"
+  VERSION = "0.4.4"
 end

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: disco_app
 version: !ruby/object:Gem::Version
-  version: 0.4.3
+  version: 0.4.4
 platform: ruby
 authors:
 - Gavin Ballard
@@ -192,6 +192,7 @@ files:
 - app/assets/stylesheets/disco_app/disco_app.scss
 - app/controllers/disco_app/app_proxy_controller.rb
 - app/controllers/disco_app/authenticated_controller.rb
+- app/controllers/disco_app/carrier_request_controller.rb
 - app/controllers/disco_app/charges_controller.rb
 - app/controllers/disco_app/install_controller.rb
 - app/controllers/disco_app/webhooks_controller.rb