ey-hmac 2.0.2 → 2.1.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA1:
-  metadata.gz: 8fb0c319d78d62b3a2c0dc9f006a806612790afd
-  data.tar.gz: 394cb290db9772f2846b2643987d1651f20848de
+  metadata.gz: 993156b2650af65ee323f3a1f5715c6fff44508d
+  data.tar.gz: 464d21118f68dc3513db89c2fcbaff3ddbf677d4
 SHA512:
-  metadata.gz: f2a86f65cdfafb683257853c022cfdbfed5aaadd82eb7a602fcc629916553b5db98a2c6a28a85ac06068df176e88ed37fe5e8a0e12fe48bf88e465c1905cfd00
-  data.tar.gz: 565198e1eb37c1695a9b776d88aa9193d24b64a7b7725bb1310a85db2f8c88196a4bc5d84fc2d90d524a04950d2b4461039ba26f9c5b1e6f02ea23827499444d
+  metadata.gz: 16ded2fdf25966104d2dfe09ddfdf19a6a5a1ef6b1e140d9ea6aecb3b721826a288055b106266b56cb2594a31606eaeae49503fa4590b7e779212e5885956b80
+  data.tar.gz: 0a3b84006e99a02540e5e4a90f61015d2ad336652f63055f9c1c666e28ff86b11fce45ac86bad23ea7e4da4fffb526b18c0e7cf84eb6f22db78adccdde18c807

data/lib/ey-hmac.rb

@@ -12,6 +12,7 @@ module Ey
     MissingSecret        = Class.new(Error)
     MissingAuthorization = Class.new(Error)
     SignatureMismatch    = Class.new(Error)
+    ExpiredHmac          = Class.new(Error)
 
     autoload :Adapter, "ey-hmac/adapter"
     autoload :Faraday, "ey-hmac/faraday"

data/lib/ey-hmac/adapter.rb

@@ -10,6 +10,7 @@ class Ey::Hmac::Adapter
 
   # @param [Object] request signer-specific request implementation
   # @option options [Integer] :version signature version
+  # @option options [Integer] :ttl (nil) duration during which HMAC is valid after signed date
   # @option options [String] :authorization_header ('Authorization') Authorization header key.
   # @option options [String] :server ('EyHmac') service name prefixed to {#authorization}. set to {#service}
   # @option options [Symbol] :sign_with (:sha_256) outgoing signature digest algorithm. See {OpenSSL::Digest#new}
@@ -17,6 +18,7 @@ class Ey::Hmac::Adapter
   def initialize(request, options={})
     @request, @options = request, options
 
+    @ttl                  = options[:ttl]
     @authorization_header = options[:authorization_header] || 'Authorization'
     @service              = options[:service] || 'EyHmac'
     @sign_with            = options[:sign_with] || :sha256
@@ -121,6 +123,14 @@ class Ey::Hmac::Adapter
       raise(Ey::Hmac::MissingSecret, "Failed to find secret matching #{key_id.inspect}")
     end
 
+    unless @ttl.nil?
+      expiry = Time.parse(date).to_i + @ttl
+      current_time = Time.now.to_i
+      unless expiry > current_time
+        raise(Ey::Hmac::ExpiredHmac, "Signature has expired passed #{expiry}. Current time is #{current_time}")
+      end
+    end
+
     calculated_signatures = self.accept_digests.map { |ad| signature(key_secret, ad) }
 
     unless calculated_signatures.any? { |cs| secure_compare(signature_value, cs) }

data/lib/ey-hmac/version.rb

@@ -1,5 +1,5 @@
 module Ey
   module Hmac
-    VERSION = "2.0.2"
+    VERSION = "2.1.0"
   end
 end

data/spec/shared/authenticated.rb

@@ -51,5 +51,25 @@ shared_examples_for "authentication" do
         end).to be_falsey
       }.to raise_exception(Ey::Hmac::MissingAuthorization)
     end
+
+    context "when the server specifies an HMAC TTL" do
+      it "should not authenticate expired hmac" do
+        Ey::Hmac.sign!(request, key_id, key_secret, adapter: adapter)
+        expect {
+          Ey::Hmac.authenticate!(request, adapter: adapter, ttl: 0) do |auth_id|
+            (auth_id == key_id) && key_secret
+          end
+        }.to raise_exception(Ey::Hmac::ExpiredHmac)
+      end
+
+      it "should authenticate non-expired hmac" do
+        Ey::Hmac.sign!(request, key_id, key_secret, adapter: adapter)
+        expect {
+          Ey::Hmac.authenticate!(request, adapter: adapter, ttl: 100) do |auth_id|
+            (auth_id == key_id) && key_secret
+          end
+        }.to_not raise_exception
+      end
+    end
   end
 end

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: ey-hmac
 version: !ruby/object:Gem::Version
-  version: 2.0.2
+  version: 2.1.0
 platform: ruby
 authors:
 - Josh Lane & Jason Hansen
 autorequire: 
 bindir: bin
 cert_chain: []
-date: 2015-09-17 00:00:00.000000000 Z
+date: 2015-12-03 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: rake
@@ -83,7 +83,7 @@ required_rubygems_version: !ruby/object:Gem::Requirement
       version: '0'
 requirements: []
 rubyforge_project: 
-rubygems_version: 2.4.5
+rubygems_version: 2.4.5.1
 signing_key: 
 specification_version: 4
 summary: Lightweight HMAC signing libraries and middleware for Farday and Rack