escher 0.3.6 → 0.3.7

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA1:
-  metadata.gz: 681df740040b4efceff281b94ad161ca37be4819
-  data.tar.gz: de47b720014006d07a4d84d9bc178032f76c03f8
+  metadata.gz: b1c99900670a9017bfe4565037cffade7ea2b9a1
+  data.tar.gz: e3e74a858ff3b42decd6367bfbf4e14ee92a80ee
 SHA512:
-  metadata.gz: 0bcbd87cde7db30cc2aee5ed5f230890d08aefa8ad1274cd63fcf2bafe99130f3806ca71f939accb69b2a9b6677eda37790d4e50b6e56f9e6e3973da726d83ed
-  data.tar.gz: e894f5ffb2c9611ec221e10d1347dae7aba8746266359aad18a98258786601f3aaeda9570fee1eb161fa107a84d2833329199c62a6d03199d9195fe707e9306d
+  metadata.gz: 759ac6e2e5e05b4db8c084e7dcd2a337d785193e0ee76d4abef20b5076cc3e6f382927cc53fc35b9ae4486f5fae69b6b07689c2f9ea9716a52d06c7fb4934179
+  data.tar.gz: d23ffaceb2d89564d48fad3f2e361c66d38c695d579b1c282dff0ba4470d4b30467e957b043a812867bf1f5dbdbaf26e319cffccec96c7c71512de3aa38816ba

data/lib/escher/auth.rb

@@ -20,7 +20,7 @@ module Escher
       headers_to_sign |= [@date_header_name.downcase, 'host']
 
       request = wrap_request req
-      raise EscherError, 'Missing header: Host' unless request.has_header? 'host'
+      raise EscherError, 'The host header is missing' unless request.has_header? 'host'
 
       request.set_header(@date_header_name, format_date_for_header) unless request.has_header? @date_header_name
 
@@ -54,7 +54,7 @@ module Escher
       signature_from_query = get_signing_param('Signature', query_parts)
 
       (['Host'] + (signature_from_query ? [] : [@auth_header_name, @date_header_name])).each do |header|
-        raise EscherError, 'Missing header: ' + header unless request.header header
+        raise EscherError, 'The ' + header + ' header is missing' unless request.header header
       end
 
       if method == 'GET' && signature_from_query
@@ -63,24 +63,26 @@ module Escher
 
         body = 'UNSIGNED-PAYLOAD'
         query_parts.delete [query_key_for('Signature'), signature]
-        query_parts = query_parts.map { |k, v| [uri_decode(k), uri_decode(v)] }
+        query_parts = query_parts.map { |k, v| [k, v] }
       else
         raw_date = request.header @date_header_name
+        raise EscherError, 'The ' + @date_header_name + ' header is missing' unless raw_date
         auth_header = request.header @auth_header_name
+        raise EscherError, 'The ' + @auth_header_name + ' header is missing' unless raw_date
         algorithm, api_key_id, short_date, credential_scope, signed_headers, signature, expires = get_auth_parts_from_header(auth_header)
       end
 
       date = Time.parse(raw_date)
       api_secret = key_db[api_key_id]
 
-      raise EscherError, 'Invalid API key' unless api_secret
+      raise EscherError, 'Invalid Escher key' unless api_secret
       raise EscherError, 'Only SHA256 and SHA512 hash algorithms are allowed' unless %w(SHA256 SHA512).include?(algorithm)
-      raise EscherError, 'Invalid request date' unless short_date(date) == short_date
+      raise EscherError, 'The ' + @auth_header_name + ' header\'s shortDate does not match with the request date' unless short_date(date) == short_date
       raise EscherError, 'The request date is not within the accepted time range' unless is_date_within_range?(date, expires)
-      raise EscherError, 'Invalid credentials' unless credential_scope == @credential_scope
-      raise EscherError, 'Host header is not signed' unless signed_headers.include? 'host'
+      raise EscherError, 'The credential scope is invalid' unless credential_scope == @credential_scope
+      raise EscherError, 'The host header is not signed' unless signed_headers.include? 'host'
       raise EscherError, 'Only the host header should be signed' if signature_from_query && signed_headers != ['host']
-      raise EscherError, 'Date header is not signed' if !signature_from_query && !signed_headers.include?(@date_header_name.downcase)
+      raise EscherError, 'The date header is not signed' if !signature_from_query && !signed_headers.include?(@date_header_name.downcase)
 
       escher = reconfig(algorithm, credential_scope, date)
       expected_signature = escher.generate_signature(api_secret, body, headers, method, signed_headers, path, query_parts)
@@ -107,7 +109,7 @@ module Escher
     def generate_signed_url(url_to_sign, client, expires = 86400)
       uri = Addressable::URI.parse(url_to_sign)
 
-      if (uri.port.present?) && (uri.port != uri.default_port)
+      if (not uri.port.nil?) && (uri.port != uri.default_port)
         host = "#{uri.host}:#{uri.port}"
       else
         host = uri.host
@@ -134,7 +136,6 @@ module Escher
 
       signature = generate_signature(client[:api_secret], body, headers, 'GET', headers_to_sign, path, query_parts)
       query_parts_with_signature = (query_parts.map { |k, v| [uri_encode(k), uri_encode(v)] } << query_pair('Signature', signature))
-
       "#{uri.scheme}://#{host}#{path}?#{query_parts_with_signature.map { |k, v| k + '=' + v }.join('&')}#{(fragment === nil ? '' : '#' + fragment)}"
     end
 
@@ -160,9 +161,9 @@ module Escher
 
 
     def get_auth_parts_from_header(auth_header)
-      m = /#{@algo_prefix}-HMAC-(?<algo>[A-Z0-9\,]+) Credential=(?<api_key_id>[A-Za-z0-9\-_]+)\/(?<short_date>[0-9]{8})\/(?<credentials>[A-Za-z0-9\-_\/]+), SignedHeaders=(?<signed_headers>[A-Za-z\-;]+), Signature=(?<signature>[0-9a-f]+)$/
+      m = /#{@algo_prefix}-HMAC-(?<algo>[A-Z0-9\,]+) Credential=(?<api_key_id>[A-Za-z0-9\-_]+)\/(?<short_date>[0-9]{8})\/(?<credentials>[A-Za-z0-9\-_ \/]+), SignedHeaders=(?<signed_headers>[A-Za-z\-;]+), Signature=(?<signature>[0-9a-f]+)$/
       .match auth_header
-      raise EscherError, 'Malformed authorization header' unless m && m['credentials']
+      raise EscherError, 'Could not parse auth header' unless m && m['credentials']
       return m['algo'], m['api_key_id'], m['short_date'], m['credentials'], m['signed_headers'].split(';'), m['signature'], 0
     end
 

data/lib/escher/version.rb

@@ -1,3 +1,3 @@
 module Escher
-  VERSION = '0.3.6'
+  VERSION = '0.3.7'
 end

data/spec/escher/auth_spec.rb

@@ -127,12 +127,13 @@ module Escher
     end
 
 
-    it 'should sign request' do
+    it 'should sign perfect request' do
       escher = described_class.new('us-east-1/iam/aws4_request', ESCHER_EMARSYS_OPTIONS.merge(current_time: Time.parse('20110909T233600Z')))
       client = {:api_key_id => 'AKIDEXAMPLE', :api_secret => 'wJalrXUtnFEMI/K7MDENG+bPxRfiCYEXAMPLEKEY'}
 
       input_headers = [
         ['host', 'iam.amazonaws.com'],
+        ['x-ems-date', '20110909T233600Z'],
         ['content-type', 'application/x-www-form-urlencoded; charset=utf-8'],
       ]
 
@@ -140,9 +141,8 @@ module Escher
         'content-type' => 'application/x-www-form-urlencoded; charset=utf-8',
         'host' => 'iam.amazonaws.com',
         'x-ems-date' => '20110909T233600Z',
-        'x-ems-auth' => 'EMS-HMAC-SHA256 Credential=AKIDEXAMPLE/20110909/us-east-1/iam/aws4_request, SignedHeaders=content-type;host;x-ems-date, Signature=f36c21c6e16a71a6e8dc56673ad6354aeef49c577a22fd58a190b5fcf8891dbd',
+        'x-ems-auth' => 'EMS-HMAC-SHA256 Credential=AKIDEXAMPLE/20110909/us-east-1/iam/aws4_request, SignedHeaders=host;x-ems-date, Signature=26855e3e6d3585277965865934f04dcc4c836648873fd2c33f5bbf4f83ebf2a4',
       }
-      headers_to_sign = %w(content-type)
 
       request = {
         method: 'POST',
@@ -151,6 +151,65 @@ module Escher
         headers: input_headers,
       }
 
+      downcase = escher.sign!(request, client)[:headers].map { |k, v| {k.downcase => v} }.reduce({}, &:merge)
+      expect(downcase).to eq expected_headers
+    end
+
+
+    it 'should sign request and add date header' do
+      escher = described_class.new('us-east-1/iam/aws4_request', ESCHER_EMARSYS_OPTIONS.merge(current_time: Time.parse('20110909T233600Z')))
+      client = {:api_key_id => 'AKIDEXAMPLE', :api_secret => 'wJalrXUtnFEMI/K7MDENG+bPxRfiCYEXAMPLEKEY'}
+
+      input_headers = [
+          ['host', 'iam.amazonaws.com'],
+          ['content-type', 'application/x-www-form-urlencoded; charset=utf-8'],
+      ]
+
+      expected_headers = {
+          'content-type' => 'application/x-www-form-urlencoded; charset=utf-8',
+          'host' => 'iam.amazonaws.com',
+          'x-ems-date' => '20110909T233600Z',
+          'x-ems-auth' => 'EMS-HMAC-SHA256 Credential=AKIDEXAMPLE/20110909/us-east-1/iam/aws4_request, SignedHeaders=host;x-ems-date, Signature=26855e3e6d3585277965865934f04dcc4c836648873fd2c33f5bbf4f83ebf2a4',
+      }
+
+      request = {
+          method: 'POST',
+          uri: '/',
+          body: 'Action=ListUsers&Version=2010-05-08',
+          headers: input_headers,
+      }
+
+      downcase = escher.sign!(request, client)[:headers].map { |k, v| {k.downcase => v} }.reduce({}, &:merge)
+      expect(downcase).to eq expected_headers
+    end
+
+
+    it 'should sign request with headers_to_sign parameter' do
+      escher = described_class.new('us-east-1/iam/aws4_request', ESCHER_EMARSYS_OPTIONS.merge(current_time: Time.parse('20110909T233600Z')))
+      client = {:api_key_id => 'AKIDEXAMPLE', :api_secret => 'wJalrXUtnFEMI/K7MDENG+bPxRfiCYEXAMPLEKEY'}
+
+      input_headers = [
+          ['host', 'iam.amazonaws.com'],
+          ['x-ems-date', '20110909T233600Z'],
+          ['content-type', 'application/x-www-form-urlencoded; charset=utf-8'],
+      ]
+
+      expected_headers = {
+          'content-type' => 'application/x-www-form-urlencoded; charset=utf-8',
+          'host' => 'iam.amazonaws.com',
+          'x-ems-date' => '20110909T233600Z',
+          'x-ems-auth' => 'EMS-HMAC-SHA256 Credential=AKIDEXAMPLE/20110909/us-east-1/iam/aws4_request, SignedHeaders=content-type;host;x-ems-date, Signature=f36c21c6e16a71a6e8dc56673ad6354aeef49c577a22fd58a190b5fcf8891dbd',
+      }
+
+      headers_to_sign = %w(content-type)
+
+      request = {
+          method: 'POST',
+          uri: '/',
+          body: 'Action=ListUsers&Version=2010-05-08',
+          headers: input_headers,
+      }
+
       downcase = escher.sign!(request, client, headers_to_sign)[:headers].map { |k, v| {k.downcase => v} }.reduce({}, &:merge)
       expect(downcase).to eq expected_headers
     end
@@ -204,6 +263,75 @@ module Escher
       expect(escher.generate_signed_url('http://example.com/something?arr%5B%5C=apple&arr%5B%5C=pear', client, 123456)).to eq expected_url
     end
 
+    it 'should generate presigned url with URL encoded' do
+              escher = described_class.new('us-east-1/host/aws4_request', ESCHER_MIXED_OPTIONS.merge(current_time: Time.parse('2011/05/11 12:00:00 UTC')))
+              expected_url =
+                'http://example.com/something?tz=Europe%2FVienna&' +
+                  'X-EMS-Algorithm=EMS-HMAC-SHA256&' +
+                  'X-EMS-Credentials=th3K3y%2F20110511%2Fus-east-1%2Fhost%2Faws4_request&' +
+                  'X-EMS-Date=20110511T120000Z&' +
+                  'X-EMS-Expires=123456&' +
+                  'X-EMS-SignedHeaders=host&' +
+                  'X-EMS-Signature=b73d097c8c8ea1a954ffebafec84884ce2a487b001d62ccd71787964d01df39b'
+
+              client = {:api_key_id => 'th3K3y', :api_secret => 'very_secure'}
+              expect(escher.generate_signed_url('http://example.com/something?tz=Europe%2FVienna', client, 123456)).to eq expected_url
+            end
+
+    it 'should validate double encoded presigned url' do
+          escher = described_class.new('us-east-1/host/aws4_request', ESCHER_MIXED_OPTIONS.merge(current_time: Time.parse('2011/05/12 21:59:00 UTC')))
+          presigned_uri =
+            '/something?tz=Europe%2FVienna&' +
+            'X-EMS-Algorithm=EMS-HMAC-SHA256&' +
+            'X-EMS-Credentials=th3K3y%2F20110511%2Fus-east-1%2Fhost%2Faws4_request&' +
+            'X-EMS-Date=20110511T120000Z&' +
+            'X-EMS-Expires=123456&' +
+            'X-EMS-SignedHeaders=host&' +
+            'X-EMS-Signature=b73d097c8c8ea1a954ffebafec84884ce2a487b001d62ccd71787964d01df39b'
+
+          client = {:api_key_id => 'th3K3y', :api_secret => 'very_secure'}
+          expect { escher.authenticate({
+                                         :method => 'GET',
+                                         :headers => [%w(host example.com)],
+                                         :uri => presigned_uri,
+                                         :body => 'IRRELEVANT'
+                                       }, key_db) }.not_to raise_error
+        end
+
+    it 'should generate presigned url with double URL encoded' do
+          escher = described_class.new('us-east-1/host/aws4_request', ESCHER_MIXED_OPTIONS.merge(current_time: Time.parse('2011/05/11 12:00:00 UTC')))
+          expected_url =
+            'http://example.com/something?tz=Europe%252FVienna&' +
+              'X-EMS-Algorithm=EMS-HMAC-SHA256&' +
+              'X-EMS-Credentials=th3K3y%2F20110511%2Fus-east-1%2Fhost%2Faws4_request&' +
+              'X-EMS-Date=20110511T120000Z&' +
+              'X-EMS-Expires=123456&' +
+              'X-EMS-SignedHeaders=host&' +
+              'X-EMS-Signature=8eeb0171cf2acc4efcb6b3ff13a53d49ab3ee98d631898608d0ebf9de7281066'
+
+          client = {:api_key_id => 'th3K3y', :api_secret => 'very_secure'}
+          expect(escher.generate_signed_url('http://example.com/something?tz=Europe%252FVienna', client, 123456)).to eq expected_url
+        end
+
+    it 'should validate double encoded presigned url' do
+          escher = described_class.new('us-east-1/host/aws4_request', ESCHER_MIXED_OPTIONS.merge(current_time: Time.parse('2011/05/12 21:59:00 UTC')))
+          presigned_uri =
+            '/something?tz=Europe%252FVienna&' +
+              'X-EMS-Algorithm=EMS-HMAC-SHA256&' +
+              'X-EMS-Credentials=th3K3y%2F20110511%2Fus-east-1%2Fhost%2Faws4_request&' +
+              'X-EMS-Date=20110511T120000Z&' +
+              'X-EMS-Expires=123456&' +
+              'X-EMS-SignedHeaders=host&' +
+              'X-EMS-Signature=8eeb0171cf2acc4efcb6b3ff13a53d49ab3ee98d631898608d0ebf9de7281066'
+
+          client = {:api_key_id => 'th3K3y', :api_secret => 'very_secure'}
+          expect { escher.authenticate({
+                                         :method => 'GET',
+                                         :headers => [%w(host example.com)],
+                                         :uri => presigned_uri,
+                                         :body => 'IRRELEVANT'
+                                       }, key_db) }.not_to raise_error
+        end
 
     [
         ['http://iam.amazonaws.com:5000/', 'iam.amazonaws.com:5000'],
@@ -283,6 +411,16 @@ module Escher
     end
 
 
+    it 'should not throw parse error if credential scope contains whitespaces' do
+      headers = [
+          %w(Host host.foo.com),
+          ['Date', 'Mon, 09 Sep 2011 23:36:00 GMT'],
+          ['Authorization', 'AWS4-HMAC-SHA256 Credential=AKIDEXAMPLE/20110909/us-ea st-1/host/aws4_request, SignedHeaders=date;host, Signature=b27ccfbfa7df52a200ff74193ca6e32d4b48b8856fab7ebf1c595d0670a7e470'],
+      ]
+      expect { call_validate(headers) }.to raise_error(EscherError, 'The credential scope is invalid')
+    end
+
+
     it 'should detect if signatures do not match' do
       headers = [
         %w(Host host.foo.com),
@@ -300,7 +438,7 @@ module Escher
         ['Date', "Mon, #{yesterday} Sep 2011 23:36:00 GMT"],
         ['Authorization', GOOD_AUTH_HEADER],
       ]
-      expect { call_validate(headers) }.to raise_error(EscherError, 'Invalid request date')
+      expect { call_validate(headers) }.to raise_error(EscherError, 'The Authorization header\'s shortDate does not match with the request date')
     end
 
 
@@ -320,7 +458,7 @@ module Escher
         ['Date', 'Mon, 09 Sep 2011 23:36:00 GMT'],
         ['Authorization', GOOD_AUTH_HEADER],
       ]
-      expect { call_validate(headers) }.to raise_error(EscherError, 'Missing header: Host')
+      expect { call_validate(headers) }.to raise_error(EscherError, 'The Host header is missing')
     end
 
 
@@ -329,7 +467,7 @@ module Escher
         %w(Host host.foo.com),
         ['Authorization', GOOD_AUTH_HEADER],
       ]
-      expect { call_validate(headers) }.to raise_error(EscherError, 'Missing header: Date')
+      expect { call_validate(headers) }.to raise_error(EscherError, 'The Date header is missing')
     end
 
 
@@ -338,7 +476,7 @@ module Escher
         %w(Host host.foo.com),
         ['Date', 'Mon, 09 Sep 2011 23:36:00 GMT'],
       ]
-      expect { call_validate(headers) }.to raise_error(EscherError, 'Missing header: Authorization')
+      expect { call_validate(headers) }.to raise_error(EscherError, 'The Authorization header is missing')
     end
 
 
@@ -348,7 +486,7 @@ module Escher
         ['Date', 'Mon, 09 Sep 2011 23:36:00 GMT'],
         ['Authorization', 'AWS4-HMAC-SHA256 Credential=AKIDEXAMPLE/20110909/us-east-1/host/aws4_request, SignedHeaders=date;host, Signature=UNPARSABLE'],
       ]
-      expect { call_validate(headers) }.to raise_error(EscherError, 'Malformed authorization header')
+      expect { call_validate(headers) }.to raise_error(EscherError, 'Could not parse auth header')
     end
 
 
@@ -358,7 +496,7 @@ module Escher
         ['Date', 'Mon, 09 Sep 2011 23:36:00 GMT'],
         ['Authorization', 'AWS4-HMAC-SHA256 Credential=BAD-CREDENTIAL-SCOPE, SignedHeaders=date;host, Signature=b27ccfbfa7df52a200ff74193ca6e32d4b48b8856fab7ebf1c595d0670a7e470'],
       ]
-      expect { call_validate(headers) }.to raise_error(EscherError, 'Malformed authorization header')
+      expect { call_validate(headers) }.to raise_error(EscherError, 'Could not parse auth header')
     end
 
 
@@ -368,7 +506,7 @@ module Escher
         ['Date', 'Mon, 09 Sep 2011 23:36:00 GMT'],
         ['Authorization', 'AWS4-HMAC-SHA256 Credential=AKIDEXAMPLE/20110909/us-east-1/host/aws4_request, SignedHeaders=date, Signature=b27ccfbfa7df52a200ff74193ca6e32d4b48b8856fab7ebf1c595d0670a7e470'],
       ]
-      expect { call_validate(headers) }.to raise_error(EscherError, 'Host header is not signed')
+      expect { call_validate(headers) }.to raise_error(EscherError, 'The host header is not signed')
     end
 
 
@@ -378,7 +516,7 @@ module Escher
         ['Date', 'Mon, 09 Sep 2011 23:36:00 GMT'],
         ['Authorization', 'AWS4-HMAC-SHA256 Credential=AKIDEXAMPLE/20110909/us-east-1/host/aws4_request, SignedHeaders=host, Signature=b27ccfbfa7df52a200ff74193ca6e32d4b48b8856fab7ebf1c595d0670a7e470'],
       ]
-      expect { call_validate(headers) }.to raise_error(EscherError, 'Date header is not signed')
+      expect { call_validate(headers) }.to raise_error(EscherError, 'The date header is not signed')
     end
 
 
@@ -398,7 +536,7 @@ module Escher
         ['Date', 'Mon, 09 Sep 2011 23:36:00 GMT'],
         ['Authorization', 'AWS4-HMAC-SHA256 Credential=AKIDEXAMPLE/20110909/us-east-1/INVALID/aws4_request, SignedHeaders=date;host, Signature=b27ccfbfa7df52a200ff74193ca6e32d4b48b8856fab7ebf1c595d0670a7e470'],
       ]
-      expect { call_validate(headers) }.to raise_error(EscherError, 'Invalid credentials')
+      expect { call_validate(headers) }.to raise_error(EscherError, 'The credential scope is invalid')
     end
 
 

metadata

@@ -1,97 +1,97 @@
 --- !ruby/object:Gem::Specification
 name: escher
 version: !ruby/object:Gem::Version
-  version: 0.3.6
+  version: 0.3.7
 platform: ruby
 authors:
 - Andras Barthazi
 autorequire: 
 bindir: bin
 cert_chain: []
-date: 2015-06-23 00:00:00.000000000 Z
+date: 2015-10-14 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: bundler
   requirement: !ruby/object:Gem::Requirement
     requirements:
-    - - ~>
+    - - "~>"
       - !ruby/object:Gem::Version
         version: '1.6'
   type: :development
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
-    - - ~>
+    - - "~>"
       - !ruby/object:Gem::Version
         version: '1.6'
 - !ruby/object:Gem::Dependency
   name: rails
   requirement: !ruby/object:Gem::Requirement
     requirements:
-    - - '>='
+    - - ">="
       - !ruby/object:Gem::Version
         version: '0'
   type: :development
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
-    - - '>='
+    - - ">="
       - !ruby/object:Gem::Version
         version: '0'
 - !ruby/object:Gem::Dependency
   name: rake
   requirement: !ruby/object:Gem::Requirement
     requirements:
-    - - ~>
+    - - "~>"
       - !ruby/object:Gem::Version
         version: '10'
   type: :development
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
-    - - ~>
+    - - "~>"
       - !ruby/object:Gem::Version
         version: '10'
 - !ruby/object:Gem::Dependency
   name: rspec
   requirement: !ruby/object:Gem::Requirement
     requirements:
-    - - ~>
+    - - "~>"
       - !ruby/object:Gem::Version
         version: '2'
   type: :development
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
-    - - ~>
+    - - "~>"
       - !ruby/object:Gem::Version
         version: '2'
 - !ruby/object:Gem::Dependency
   name: rack
   requirement: !ruby/object:Gem::Requirement
     requirements:
-    - - '>='
+    - - ">="
       - !ruby/object:Gem::Version
         version: '0'
   type: :development
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
-    - - '>='
+    - - ">="
       - !ruby/object:Gem::Version
         version: '0'
 - !ruby/object:Gem::Dependency
   name: addressable
   requirement: !ruby/object:Gem::Requirement
     requirements:
-    - - ~>
+    - - "~>"
       - !ruby/object:Gem::Version
         version: '2.3'
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
-    - - ~>
+    - - "~>"
       - !ruby/object:Gem::Version
         version: '2.3'
 description: Escher helps you creating secure HTTP requests (for APIs) by signing
@@ -102,8 +102,8 @@ executables: []
 extensions: []
 extra_rdoc_files: []
 files:
-- .gitignore
-- .travis.yml
+- ".gitignore"
+- ".travis.yml"
 - Gemfile
 - LICENSE
 - README.md
@@ -314,17 +314,17 @@ require_paths:
 - lib
 required_ruby_version: !ruby/object:Gem::Requirement
   requirements:
-  - - '>='
+  - - ">="
     - !ruby/object:Gem::Version
       version: '1.9'
 required_rubygems_version: !ruby/object:Gem::Requirement
   requirements:
-  - - '>='
+  - - ">="
     - !ruby/object:Gem::Version
       version: '0'
 requirements: []
 rubyforge_project: 
-rubygems_version: 2.0.14
+rubygems_version: 2.4.5
 signing_key: 
 specification_version: 4
 summary: Library for HTTP request signing (Ruby implementation)