escher 1.0.0 → 1.0.2

checksums.yaml

@@ -1,7 +1,7 @@
 ---
-SHA1:
-  metadata.gz: f5d7892a58786fb9802e66a734ddc2f7f84a4b42
-  data.tar.gz: 18bf4433e019a4581eb6980f9819f2b336c3495a
+SHA256:
+  metadata.gz: ed681ad1ed9b0e334edab0c608c10beee1ea80f655340a2020853f924a473953
+  data.tar.gz: 5d5674e195e7189d2c6f7e398388a00b6cc759c360cfe5a4a9f0d91f7c2eac6f
 SHA512:
-  metadata.gz: 006d627eddd82e86ef6e803019bee58183314d85b299a82a62da7e2579b069bd11e247d20d444822dd87acba7276612d19af415f608d5f55ccb88e532bdc36e4
-  data.tar.gz: 6d7cabbbaba10921751b255dcd9865f9bdc6abb08b1a7114190aac257f168f1118f9ea40b8399ac6502530ae3f04b38ebc7ef43cdc044eedf9f5eee9c4fcc71b
+  metadata.gz: d8d0d08e443b6bc9aad9d8935b0da925df5a7130c41d1b1c9d7657f36dc7678cdb8bb7199cc456b09bb5f88d61af530eb447889e5b13de37bc677993e14548f0
+  data.tar.gz: 18102fee551348688aa7614ddf065dfbd12fc0d02c9a174c5debbebe743de0a82ad809e8657e0bda773ea5d460ce0055bc0f88e2b2a11476c5ca87bbaa8cb94b

data/.travis.yml

@@ -3,3 +3,11 @@ rvm:
   - 2.2.3
   - 2.3.0
 before_script: ./scripts/checkout_test_suite.sh
+deploy:
+  provider: rubygems
+  api_key: ${RUBYGEMS_API_KEY}
+  gem: escher
+  gemspec: escher.gemspec
+  skip_cleanup: true
+  on:
+    tags: true

data/lib/escher/auth.rb

@@ -6,7 +6,7 @@ module Escher
       @algo_prefix = options[:algo_prefix] || 'ESR'
       @vendor_key = options[:vendor_key] || 'Escher'
       @hash_algo = options[:hash_algo] || 'SHA256'
-      @current_time = options[:current_time] || Time.now
+      @current_time = options[:current_time]
       @auth_header_name = options[:auth_header_name] || 'X-Escher-Auth'
       @date_header_name = options[:date_header_name] || 'X-Escher-Date'
       @clock_skew = options[:clock_skew] || 300
@@ -78,10 +78,9 @@ module Escher
       raise EscherError, 'Invalid Escher key' unless api_secret
       raise EscherError, 'Invalid hash algorithm, only SHA256 and SHA512 are allowed' unless %w(SHA256 SHA512).include?(algorithm)
       raise EscherError, 'The request method is invalid' unless valid_request_method?(method)
-      raise EscherError, "The request body shouldn't be empty if the request method is POST" if (method.upcase == 'POST' && body.empty?)
       raise EscherError, "The request url shouldn't contains http or https" if path.match /^https?:\/\//
       raise EscherError, 'Invalid date in authorization header, it should equal with date header' unless short_date(date) == short_date
-      raise EscherError, 'The request date is not within the accepted time range' unless is_date_within_range?(date, expires)
+      raise EscherError, 'The request date is not within the accepted time range' unless is_date_within_range?(date, expires, @current_time || Time.now)
       raise EscherError, 'Invalid Credential Scope' unless credential_scope == @credential_scope
       raise EscherError, 'The mandatorySignedHeaders parameter must be undefined or array of strings' unless mandatory_signed_headers_valid?(mandatory_signed_headers)
       raise EscherError, 'The host header is not signed' unless signed_headers.include? 'host'
@@ -255,7 +254,7 @@ module Escher
         when 'SHA256'
           @algo = OpenSSL::Digest::SHA256.new
         when 'SHA512'
-          @algo = OpenSSL::Digest::SHA521.new
+          @algo = OpenSSL::Digest::SHA512.new
         else
           raise EscherError, 'Unidentified hash algorithm'
       end
@@ -275,8 +274,8 @@ module Escher
 
 
 
-    def is_date_within_range?(request_date, expires)
-      (request_date - @clock_skew .. request_date + expires + @clock_skew).cover? @current_time
+    def is_date_within_range?(request_date, expires, current_time)
+      (request_date - @clock_skew .. request_date + expires + @clock_skew).cover? current_time
     end
 
 

data/lib/escher/version.rb

@@ -1,3 +1,3 @@
 module Escher
-  VERSION = '1.0.0'
+  VERSION = '1.0.2'
 end

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: escher
 version: !ruby/object:Gem::Version
-  version: 1.0.0
+  version: 1.0.2
 platform: ruby
 authors:
 - Andras Barthazi
 autorequire: 
 bindir: bin
 cert_chain: []
-date: 2017-01-23 00:00:00.000000000 Z
+date: 2019-07-24 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: bundler
@@ -341,7 +341,7 @@ required_rubygems_version: !ruby/object:Gem::Requirement
       version: '0'
 requirements: []
 rubyforge_project: 
-rubygems_version: 2.6.8
+rubygems_version: 2.7.7
 signing_key: 
 specification_version: 4
 summary: Library for HTTP request signing (Ruby implementation)