encrypted_cookie_store-instructure 1.1.2 → 1.1.3
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- checksums.yaml +4 -4
- data/encrypted_cookie_store-instructure.gemspec +1 -1
- data/lib/encrypted_cookie_store.rb +2 -2
- metadata +2 -2
checksums.yaml
CHANGED
|
@@ -1,7 +1,7 @@
|
|
|
1
1
|
---
|
|
2
2
|
SHA1:
|
|
3
|
-
metadata.gz:
|
|
4
|
-
data.tar.gz:
|
|
3
|
+
metadata.gz: 278cd87cbfbfc67736a38355d9c70356bf4d61d8
|
|
4
|
+
data.tar.gz: 6265bb93accfee6fc47d1836dce00feb10eaa545
|
|
5
5
|
SHA512:
|
|
6
|
-
metadata.gz:
|
|
7
|
-
data.tar.gz:
|
|
6
|
+
metadata.gz: 2882f167f5b6defdb3b927ba2296c7048082512f9bff867b83461e4f77c7cc7e88d1a77cf997713d7ec0aecbcae27fda02e0632fc937023a143739d34acb65ac
|
|
7
|
+
data.tar.gz: 85e2d8388031b8508d00291f367f46291c0ec47fcbd746aefb8ddcb7c54cb3abdd943dc4f73c395cfdbd7d616dc875b860b5728006d014e92224d2bef5c3f3e4
|
|
@@ -119,7 +119,7 @@ module ActionDispatch
|
|
|
119
119
|
end
|
|
120
120
|
encrypted_session_data = @data_cipher.update(compressed_session_data) << @data_cipher.final
|
|
121
121
|
timestamp = Time.now.utc.to_i if expire_after(options)
|
|
122
|
-
digest = OpenSSL::HMAC.digest(OpenSSL::Digest
|
|
122
|
+
digest = OpenSSL::HMAC.digest(OpenSSL::Digest.new(@digest), @secret, session_data + timestamp.to_s)
|
|
123
123
|
|
|
124
124
|
result = "#{base64(iv)}#{compressed_session_data == session_data ? '.' : ' '}#{base64(encrypted_session_data)}.#{base64(digest)}"
|
|
125
125
|
result << ".#{base64([timestamp].pack('N'))}" if expire_after(options)
|
|
@@ -141,7 +141,7 @@ module ActionDispatch
|
|
|
141
141
|
@data_cipher.iv = iv
|
|
142
142
|
session_data = @data_cipher.update(encrypted_session_data) << @data_cipher.final
|
|
143
143
|
session_data = inflate(session_data) if compressed
|
|
144
|
-
return nil unless digest == OpenSSL::HMAC.digest(OpenSSL::Digest
|
|
144
|
+
return nil unless digest == OpenSSL::HMAC.digest(OpenSSL::Digest.new(@digest), @secret, session_data + timestamp.to_s)
|
|
145
145
|
if expire_after(options)
|
|
146
146
|
return nil unless timestamp && Time.now.utc.to_i <= timestamp + expire_after(options)
|
|
147
147
|
end
|
metadata
CHANGED
|
@@ -1,7 +1,7 @@
|
|
|
1
1
|
--- !ruby/object:Gem::Specification
|
|
2
2
|
name: encrypted_cookie_store-instructure
|
|
3
3
|
version: !ruby/object:Gem::Version
|
|
4
|
-
version: 1.1.
|
|
4
|
+
version: 1.1.3
|
|
5
5
|
platform: ruby
|
|
6
6
|
authors:
|
|
7
7
|
- Cody Cutrer
|
|
@@ -112,7 +112,7 @@ required_rubygems_version: !ruby/object:Gem::Requirement
|
|
|
112
112
|
version: '0'
|
|
113
113
|
requirements: []
|
|
114
114
|
rubyforge_project:
|
|
115
|
-
rubygems_version: 2.
|
|
115
|
+
rubygems_version: 2.3.0
|
|
116
116
|
signing_key:
|
|
117
117
|
specification_version: 4
|
|
118
118
|
summary: EncryptedCookieStore for Ruby on Rails 3.2
|