dwolla-ruby 2.6.2 → 2.6.3

data/README.md

@@ -2,7 +2,7 @@
 Official Ruby wrapper for Dwolla's API
 
 ## Version
-2.6.2
+2.6.3
 
 [![Build Status](https://travis-ci.org/Dwolla/dwolla-ruby.svg?branch=master)](https://travis-ci.org/Dwolla/dwolla-ruby)
 
@@ -31,8 +31,26 @@ This repo includes various usage examples, including:
 * Transacting money (includes sending) [transactions.rb]
 * Getting a user's balance [balance.rb]
 
+## Concurrent requests
+
+If making requests using any background processing library such as `Sidkiq` or `Resque`, we recommend that you manually pass in tokens to functions which take an OAuth token. 
+
+For example, we can do this with the `Contacts` class:
+
+```ruby
+# Include the Dwolla gem
+require 'rubygems'
+require 'pp'
+require 'dwolla'
+
+Dwolla::Contacts.get(nil, "your_token")
+```
+
 ## Changelog
 
+2.6.3
+* Fixed webhook validation, cleaned up OpenSSL Digest calls (thanks, @michaelblinn)!
+
 2.6.2
 * Fixed bug with generation of Off-Site Gateway checkout URLs
 

data/lib/dwolla/offsite_gateway.rb

@@ -94,8 +94,7 @@ module Dwolla
 
         def self.read_callback(body)
             data = JSON.load(body)
-
-            verify_callback_signature(data['Signature'], data['CheckoutId'], data['Amount'])
+            verify_callback_signature(data['signature'], data['checkoutId'], data['amount'])
 
             return data
         end
@@ -105,17 +104,16 @@ module Dwolla
         end
 
         private
-
-        def self.verify_callback_signature(candidate=nil, checkout_id=nil, amount=nil)
+	def self.verify_callback_signature(candidate=nil, checkout_id=nil, amount=nil)
             key = "#{checkout_id}&#{amount}"
-            digest  = OpenSSL::Digest::Digest.new('sha1')
+            digest  = OpenSSL::Digest.new('sha1')
             signature = OpenSSL::HMAC.hexdigest(digest, Dwolla::api_secret, key)
 
             raise APIError.new("Invalid callback signature (#{candidate} vs #{signature})") unless candidate == signature
         end
 
         def self.verify_webhook_signature(candidate=nil, body=nil)
-            digest  = OpenSSL::Digest::Digest.new('sha1')
+            digest  = OpenSSL::Digest.new('sha1')
             signature = OpenSSL::HMAC.hexdigest(digest, Dwolla::api_secret, body)
 
             raise APIError.new("Invalid Webhook signature (#{candidate} vs #{signature})") unless candidate == signature

data/lib/dwolla/version.rb

@@ -1,3 +1,3 @@
 module Dwolla
-  VERSION = "2.6.2"
+  VERSION = "2.6.3"
 end

metadata

@@ -1,18 +1,20 @@
 --- !ruby/object:Gem::Specification
 name: dwolla-ruby
 version: !ruby/object:Gem::Version
-  version: 2.6.2
+  version: 2.6.3
+  prerelease: 
 platform: ruby
 authors:
 - Michael Schonfeld
 autorequire: 
 bindir: bin
 cert_chain: []
-date: 2014-10-20 00:00:00.000000000 Z
+date: 2015-02-11 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: rest-client
   requirement: !ruby/object:Gem::Requirement
+    none: false
     requirements:
     - - ~>
       - !ruby/object:Gem::Version
@@ -20,6 +22,7 @@ dependencies:
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
+    none: false
     requirements:
     - - ~>
       - !ruby/object:Gem::Version
@@ -27,6 +30,7 @@ dependencies:
 - !ruby/object:Gem::Dependency
   name: multi_json
   requirement: !ruby/object:Gem::Requirement
+    none: false
     requirements:
     - - ! '>='
       - !ruby/object:Gem::Version
@@ -37,6 +41,7 @@ dependencies:
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
+    none: false
     requirements:
     - - ! '>='
       - !ruby/object:Gem::Version
@@ -47,6 +52,7 @@ dependencies:
 - !ruby/object:Gem::Dependency
   name: addressable
   requirement: !ruby/object:Gem::Requirement
+    none: false
     requirements:
     - - ! '>='
       - !ruby/object:Gem::Version
@@ -54,6 +60,7 @@ dependencies:
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
+    none: false
     requirements:
     - - ! '>='
       - !ruby/object:Gem::Version
@@ -61,6 +68,7 @@ dependencies:
 - !ruby/object:Gem::Dependency
   name: mocha
   requirement: !ruby/object:Gem::Requirement
+    none: false
     requirements:
     - - ! '>='
       - !ruby/object:Gem::Version
@@ -68,6 +76,7 @@ dependencies:
   type: :development
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
+    none: false
     requirements:
     - - ! '>='
       - !ruby/object:Gem::Version
@@ -75,6 +84,7 @@ dependencies:
 - !ruby/object:Gem::Dependency
   name: test-unit
   requirement: !ruby/object:Gem::Requirement
+    none: false
     requirements:
     - - ! '>='
       - !ruby/object:Gem::Version
@@ -82,6 +92,7 @@ dependencies:
   type: :development
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
+    none: false
     requirements:
     - - ! '>='
       - !ruby/object:Gem::Version
@@ -89,6 +100,7 @@ dependencies:
 - !ruby/object:Gem::Dependency
   name: rake
   requirement: !ruby/object:Gem::Requirement
+    none: false
     requirements:
     - - ! '>='
       - !ruby/object:Gem::Version
@@ -96,6 +108,7 @@ dependencies:
   type: :development
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
+    none: false
     requirements:
     - - ! '>='
       - !ruby/object:Gem::Version
@@ -156,26 +169,27 @@ files:
 homepage: https://github.com/dwolla/dwolla-ruby
 licenses:
 - MIT
-metadata: {}
 post_install_message: 
 rdoc_options: []
 require_paths:
 - lib
 required_ruby_version: !ruby/object:Gem::Requirement
+  none: false
   requirements:
   - - ! '>='
     - !ruby/object:Gem::Version
       version: '0'
 required_rubygems_version: !ruby/object:Gem::Requirement
+  none: false
   requirements:
   - - ! '>='
     - !ruby/object:Gem::Version
       version: '0'
 requirements: []
 rubyforge_project: dwolla-ruby
-rubygems_version: 2.1.10
+rubygems_version: 1.8.23
 signing_key: 
-specification_version: 4
+specification_version: 3
 summary: Official Ruby Wrapper for Dwolla's API
 test_files:
 - test/test_accounts.rb

checksums.yaml

@@ -1,15 +0,0 @@
----
-!binary "U0hBMQ==":
-  metadata.gz: !binary |-
-    YzJhM2M5ZDI1ZmIxODI2YTkwMDdiYmQ5NWIyNzgxYzFhNGU1ZjhhNw==
-  data.tar.gz: !binary |-
-    YzhjNDNhNmY3ZGY2ZGU2ZTA5ZTYxYWQ5NTU4MDI1OTM5YmM4YTVhOA==
-SHA512:
-  metadata.gz: !binary |-
-    MjIwYzFjMmE2NWQ3NzExYTliMDA1YzBjOWRkNmRlY2M3MGJmZjg0NzI2YzQ0
-    ZWRlZjk3ZjEzNzczZjZmYTRmNmE0NWQ4NWY4MTAwNmQ3MmE4MDZjODE2ZmEy
-    ZGVmNDNiYTM1ODdmYjA2YWYzM2EyODQ4N2Q2ZGMzNWM3ZTI4MDI=
-  data.tar.gz: !binary |-
-    YzYwNTNiZTFiNzFkZDI0OTZjZmJjYjlkYzBmZjc4MzZiYmM5MTBkY2JiMDZk
-    N2E5MDdkYmY1NTJmZGJmYWQxZjZkYmJkYzlhZmI4YTBmY2QyZTYxOThjMzZi
-    MTYyNjQxOGZhMWJkZTE0NGQzZDA5MzJkZDg2N2QwZDZmNTgxN2M=