encrypt_env 1.0.4 → 1.0.7

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 27c78b9777eaf2d1de712e3e14e0eb69aeaeb4126c658831e093fd3d009a74e1
-  data.tar.gz: 602f65454d578bedeb4afcb7cab5e8bdd15fec83804a7ca638e31eceba512aba
+  metadata.gz: e35036de05df44f35b795a71ce0ed572b0f2dcfc44feb4a698dfe8bee1297f99
+  data.tar.gz: 04dedad57df86333120ba5a7ce89fc9cdcb4aef4b4766bc34dc102aeb3ce2329
 SHA512:
-  metadata.gz: 51bbe5039a0e27aaad62b0504cf9ae9a316ffd0e4c33e02b4559541901fe9691cc077a9e4a304e42ac90fe146747a66cdd221a5b97c02dd283a92065f23063d8
-  data.tar.gz: b84ca2e78d722954cd6f67614d6290101c0688856497086bbd091cfce6424d7baa6f426464682a5ffbbd1cae1edba262756e698aa8bd5f7bc48a30d8e3989fcf
+  metadata.gz: 4a6dd9844f93379572d3ba096f0e1d598a86ae194bb9442084e6cd989c76df1a533cfbd2921ba1128d683ac0a92b10fe8cb0561f8baa4271720a8a25946fb9fe
+  data.tar.gz: 6ba4369b23622f34a45d287d9834bf514ff6f86e9f416adc9a8a9e12840a7dbfe5bb4a27dadb579c2f4f5ffc48b99a82017f4e2881929a1be2b99e6cf4c92674

data/lib/encrypt_env.rb

@@ -7,7 +7,6 @@ require 'active_support/core_ext/hash/indifferent_access'
 require 'tempfile'
 
 # gem 'encrypt_env'
-# rubocop: disable all
 class EncryptEnv
   private_class_method def self.master_key
     key = File.read("#{@path_root}/config/master.key")
@@ -18,7 +17,7 @@ class EncryptEnv
     encrypted = raw_data.slice(0, raw_data.length - 28)
     iv = raw_data.slice(raw_data.length - 28, 12)
     tag = raw_data.slice(raw_data.length - 16, 16)
-    return { encrypted: encrypted, iv: iv, tag: tag }
+    { encrypted: encrypted, iv: iv, tag: tag }
   end
 
   private_class_method def self.encrypt(content)
@@ -26,9 +25,10 @@ class EncryptEnv
     cipher.encrypt
     cipher.key = master_key
     iv = cipher.random_iv
+    cipher.auth_data = ''
     encrypted = cipher.update(content) + cipher.final
     tag = cipher.auth_tag
-    hex_string = (encrypted + iv + tag).unpack('H*').first
+    hex_string = (encrypted + iv + tag).unpack('H*')[0]
     File.open("#{@path_root}/config/secrets.yml.enc", 'w') { |file| file.write(hex_string) }
   end
 
@@ -37,11 +37,13 @@ class EncryptEnv
     decipher.decrypt
     hex_string = File.read("#{@path_root}/config/secrets.yml.enc")
     data = data_decrypt([hex_string].pack('H*'))
-    decipher.iv = data[:iv]
+    encrypted = data[:encrypted]
     decipher.key = master_key
+    decipher.iv = data[:iv]
     decipher.auth_tag = data[:tag]
+    decipher.auth_data = ''
 
-    decipher.update(data[:encrypted]) + decipher.final
+    decipher.update(encrypted) + decipher.final
   end
 
   private_class_method def self.path_root
@@ -59,7 +61,7 @@ class EncryptEnv
     @secret_file = File.expand_path("#{@path_root}/config/secrets.yml")
     key = OpenSSL::Random.random_bytes(16)
     # save key in master.key file
-    File.open("#{@path_root}/config/master.key", 'w') { |file| file.write(key.unpack('H*').first) }
+    File.open("#{@path_root}/config/master.key", 'w') { |file| file.write(key.unpack('H*')[0]) }
     encrypt(File.read(@secret_file))
   end
 
@@ -86,9 +88,7 @@ class EncryptEnv
     return @decrypted if @decrypted
 
     path_root unless @path_root
-    @decrypted = HashWithIndifferentAccess.new(YAML.safe_load(
-                                                 decrypt, aliases: true
-                                               ))
+    @decrypted = HashWithIndifferentAccess.new(YAML.load(decrypt, aliases: true))
     unless defined?(Rails)
       env = `rails r "print Rails.env"`.to_sym
       return @decrypted[env] || @decrypted[:default] || @decrypted

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: encrypt_env
 version: !ruby/object:Gem::Version
-  version: 1.0.4
+  version: 1.0.7
 platform: ruby
 authors:
 - Nhu Tan