econt 0.1.0 → 0.1.1

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 72d630d421e9bfb7d741ba051f81722c740f251fd6d50e2d66b98fb73d1aba4f
-  data.tar.gz: a1c465eaf16fecc9a83f114d0e5403de12e2af41d24b7a2381cde2a3d1968165
+  metadata.gz: c826a914b9d9ef63b097a5a03c60b9aa3c53ca23ef08ea9b3657d03033818e30
+  data.tar.gz: 64500b8cd2713d506155ab1b2319f8cc769e17f791bdae090a22989a055e50e7
 SHA512:
-  metadata.gz: cc999dd5f5f08b1468d56444500a5b623a56a16a3f805757db5899a8365dbc56315ea9a5139d5f3768b54a076bcfe16735166030d4c5794c91efcd6808d26dbf
-  data.tar.gz: 553ef848b6016d4d1635dba09e8a7f27c0b6aca61ac3f974a31d62c9f47bfe34e2451d132a90dfc76477f0d5cd81e8363c735a7cd97a28e87fdae1072f603211
+  metadata.gz: e1d3761fb0e925f8b8fa12a61a09b73477d17f3868e32ec83b32ce0a5d0193b996605f369faa22b1053d39d0bff88ff96ef7b700b89f836c9c1f81c5093a9c5b
+  data.tar.gz: 7dd66c57c80d09f9ee3fe472e61ca1ab9afa546152f04e045d49fe0974b024d947632c34cc09602747bf828ca4af20986d1082e3daa8d4750d0a642669553ef3

data/CHANGELOG.md

@@ -1,3 +1,15 @@
 # Changelog
 
-Release notes will start after the initial release.
+## Unreleased
+
+## 0.1.1 — 2026-10-12
+
+- Default demo API requests to HTTPS and update production configuration examples.
+- Explicitly enable TLS certificate verification.
+- Clarify that Econt supports HTTPS with Basic authentication; client-certificate
+  authentication is a separate unsupported feature. Explicit HTTP URLs remain
+  configurable, but TLS failures never cause an HTTP fallback.
+
+## 0.1.0 — 2026-10-12
+
+- Initial release of the Econt Ruby API client.

data/README.md

@@ -6,7 +6,7 @@ typed responses, Basic authentication, and configurable timeouts.
 Only JSON endpoints are supported; SOAP is not supported.
 
 Community maintained; not affiliated with or endorsed by Econt.
-See the [official API documentation](http://ee.econt.com/services/) for account
+See the [official API documentation](https://ee.econt.com/services/) for account
 access and required fields.
 
 ## Installation
@@ -24,18 +24,21 @@ Econt::Client.configure do |config|
   config.username = ENV.fetch('ECONT_USERNAME')
   config.password = ENV.fetch('ECONT_PASSWORD')
   # Demo is the default. Use this URL for production:
-  config.base_url = 'http://ee.econt.com/services/'
+  config.base_url = 'https://ee.econt.com/services/'
   config.open_timeout = 10
   config.read_timeout = 30
   config.write_timeout = 30
 end
 ```
 
-**Transport warning:** Econt documents HTTP service endpoints. Basic credentials
-and shipment data are transmitted without TLS. Use a trusted server-side network
-path and assess this risk before production use; never call the API from browser
-code. Demo uses `http://demo.econt.com/ee/services/`, with separate credentials.
-The client does not replace documented URLs with HTTPS.
+The default demo URL is `https://demo.econt.com/ee/services/`; production uses
+`https://ee.econt.com/services/`, with separate credentials. Econt's documentation
+lists HTTP example URLs but explicitly permits SSL connections with Basic
+authentication. Authentication using client SSL certificates is not supported;
+this is separate from HTTPS transport. Use HTTPS to protect credentials and
+shipment data in transit, and keep requests server-side. TLS certificate
+verification is enabled by default; TLS failures do not trigger an HTTP fallback.
+An explicitly configured HTTP URL is still accepted but sends data without TLS.
 
 ### Rails initializer
 
@@ -44,7 +47,7 @@ The client does not replace documented URLs with HTTPS.
 Econt::Client.configure do |config|
   config.username = Rails.application.credentials.dig(:econt, :username)
   config.password = Rails.application.credentials.dig(:econt, :password)
-  config.base_url = ENV.fetch('ECONT_BASE_URL', 'http://demo.econt.com/ee/services/')
+  config.base_url = ENV.fetch('ECONT_BASE_URL', 'https://demo.econt.com/ee/services/')
 end
 ```
 

data/SECURITY.md

@@ -15,17 +15,21 @@ has taken place.
 Only the latest released version receives security fixes. Pull requests are
 welcome after coordinated disclosure.
 
-## Econt transport limitation
+## HTTPS transport and credentials
 
-Econt documents its demo and production service URLs as HTTP endpoints using
-HTTP Basic authentication. Consequently, credentials and shipment data are not
-protected by TLS in transit. This gem preserves those documented URLs and does
-not claim to solve that carrier-side limitation.
+The client defaults to `https://demo.econt.com/ee/services/`. Use
+`https://ee.econt.com/services/` for production. Econt's documentation lists HTTP
+example URLs but explicitly supports SSL connections with Basic authentication.
+The lack of client-certificate authentication does not mean HTTPS is unavailable.
 
-Run requests only from trusted server-side infrastructure and through a network
-path whose risks you accept. Never call Econt directly from browser code. Keep
-credentials out of source control, rotate them if exposed, and limit access to
-application logs and VCR cassettes.
+TLS certificate verification is enabled by default. The client does not fall
+back to HTTP when TLS fails. Explicit HTTP base URLs remain configurable for
+compatibility, but they transmit credentials and shipment data without TLS.
+Use HTTPS and do not disable certificate verification.
+
+Run requests only from server-side infrastructure. Never call Econt directly
+from browser code. Keep credentials out of source control, rotate them if
+exposed, and limit access to application logs and VCR cassettes.
 
 Debug mode filters the configured username, password, and Basic token. Request
 and response bodies are disabled by default because they may contain personal

data/docs/API.md

@@ -33,7 +33,7 @@ logistics = Econt::Services::ThreeWayLogistics::ThreeWayLogistics.new
 
 Signatures show Ruby defaults, not carrier requirements: an optional `nil`
 or empty array does **not** mean the API accepts an incomplete request. Supply
-the business fields required by the [official EEcont documentation](http://ee.econt.com/services/).
+the business fields required by the [official EEcont documentation](https://ee.econt.com/services/).
 Nested hashes use snake_case except the legacy three-way logistics operation.
 
 Examples are independent snippets, not a script to execute wholesale.
@@ -550,7 +550,7 @@ result = logistics.three_way_logistics(**logistics_payload)
 ## Payload and model details
 
 For nested request fields, consult the corresponding operation and model on the
-[official service index](http://ee.econt.com/services/): `ShippingLabel`,
+[official service index](https://ee.econt.com/services/): `ShippingLabel`,
 `Address`, `ClientProfile`, `CDPayOptions`, `PaymentInstruction`,
 `PaymentAdditionPrice`, and `ThreeWayLogisticsRequest`.
 The gem forwards supplied request fields; it does not perform full business validation.

data/docs/VCR.md

@@ -14,6 +14,10 @@ overridden. WebMock also disables network connections. The replay spec is
 separate from the opt-in recording suite, so account-specific recording settings
 cannot silently skip CI coverage.
 
+Existing reviewed cassettes were recorded over HTTP. Replay explicitly uses
+that historical base URL with all network access blocked; the recordings are
+not relabeled as HTTPS evidence. New demo recordings default to HTTPS.
+
 Each endpoint has an independent cassette so a failed recording can be removed
 and retried without discarding unrelated evidence.
 

data/lib/econt/client.rb

@@ -27,7 +27,7 @@ module Econt
                   :open_timeout, :read_timeout, :write_timeout
 
     def initialize
-      @base_url = 'http://demo.econt.com/ee/services/' # Default to demo
+      @base_url = 'https://demo.econt.com/ee/services/' # Default to demo
       @adapter = Faraday.default_adapter
       @acronyms = {} # nil to disable, {} to keep defaults
       @replace_acronym_defaults = false
@@ -46,7 +46,7 @@ module Econt
     def setup_connection!
       validate_credentials!
 
-      @connection = Faraday.new(base_url) do |conn|
+      @connection = Faraday.new(base_url, ssl: { verify: true }) do |conn|
         configure_timeouts(conn)
         conn.use Econt::CamelCaseMiddleware,
                  acronyms: @acronyms,

data/lib/econt/services/nomenclatures/nomenclatures.rb

@@ -19,7 +19,7 @@ module Econt
         def get_countries
           response = post('getCountries')
           collection(response, Econt::Models::Nomenclatures::Country)
-          # http://ee.econt.com/services/Nomenclatures/NomenclaturesService.getCountries.json(.soap?wsdl)
+          # https://ee.econt.com/services/Nomenclatures/NomenclaturesService.getCountries.json(.soap?wsdl)
         end
 
         # List cities for a country.
@@ -36,7 +36,7 @@ module Econt
         def get_cities(country_code:)
           response = post('getCities', body: { country_code: country_code })
           collection(response, Econt::Models::Nomenclatures::City)
-          # http://ee.econt.com/services/Nomenclatures/NomenclaturesService.getCities.json(.soap?wsdl)
+          # https://ee.econt.com/services/Nomenclatures/NomenclaturesService.getCities.json(.soap?wsdl)
         end
 
         # Fetch cities and derive unique, sorted region names; this is a local helper, not a separate endpoint.
@@ -80,7 +80,7 @@ module Econt
                             serving_receptions: serving_receptions
                           })
           collection(response, Econt::Models::Nomenclatures::Office)
-          # http://ee.econt.com/services/Nomenclatures/NomenclaturesService.getOffices.json(.soap?wsdl)
+          # https://ee.econt.com/services/Nomenclatures/NomenclaturesService.getOffices.json(.soap?wsdl)
         end
 
         # List streets, optionally restricted to a city.
@@ -97,7 +97,7 @@ module Econt
         def get_streets(city_id: nil)
           response = post('getStreets', body: { city_id: city_id })
           collection(response, Econt::Models::Nomenclatures::Street)
-          # http://ee.econt.com/services/Nomenclatures/NomenclaturesService.getStreets.json(.soap?wsdl)
+          # https://ee.econt.com/services/Nomenclatures/NomenclaturesService.getStreets.json(.soap?wsdl)
         end
 
         # List quarters, optionally restricted to a city.
@@ -114,7 +114,7 @@ module Econt
         def get_quarters(city_id: nil)
           response = post('getQuarters', body: { city_id: city_id })
           collection(response, Econt::Models::Nomenclatures::Quarter)
-          # http://ee.econt.com/services/Nomenclatures/NomenclaturesService.getQuarters.json(.soap?wsdl)
+          # https://ee.econt.com/services/Nomenclatures/NomenclaturesService.getQuarters.json(.soap?wsdl)
         end
       end
     end

data/lib/econt/version.rb

@@ -1,5 +1,5 @@
 # frozen_string_literal: true
 
 module Econt
-  VERSION = '0.1.0'
+  VERSION = '0.1.1'
 end

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: econt
 version: !ruby/object:Gem::Version
-  version: 0.1.0
+  version: 0.1.1
 platform: ruby
 authors:
 - Boyan Georgiev