facebook-signed-request 0.2.0 → 0.2.1

data/README.md

@@ -4,6 +4,12 @@ Usage
 
 ```ruby
     require 'facebook-signed-request'
+
+    # The secret can be set globally
+    Facebook::SignedRequest.secret = "dkhsdfhjsd123d2ed3q1wd222qd2"
+    request = Facebook::SignedRequest.new( params[:signed_request] )
+
+    # or as an optional parameter for individual calls
     request = Facebook::SignedRequest.new( params[:signed_request], secret )
 
     request.valid?
@@ -38,3 +44,5 @@ Usage
     # => g_eE3hoQDPKFusHcc_Tj7k2xxo3mCKsOEXKMViq0pAY=.eyJmb28iOiJiYXIifQ==
 
 ```
+
+Run the tests with ```rake test:units```

data/Rakefile

@@ -1 +1,12 @@
 require 'bundler/gem_tasks'
+require 'rake/testtask'
+
+namespace :test do
+  Rake::TestTask.new(:units) do |t|
+    t.libs << "test"
+    t.test_files = FileList['test/*_test.rb']
+
+    t.verbose = true
+  end
+end
+

data/lib/facebook-signed-request.rb

@@ -1,7 +1,7 @@
 $LOAD_PATH.unshift(File.join(File.dirname(__FILE__), 'facebook-signed-request'))
 
 require "facebook-signed-request/version"
-require 'digest'
+require 'openssl'
 require 'base64'
 require 'json'
 require 'signed_request'

data/lib/facebook-signed-request/signed_request.rb

@@ -9,8 +9,8 @@ module Facebook
       def encode_and_sign options
         encoded_data      = Base64.strict_encode64( options.to_json )
 
-        digestor          = Digest::HMAC.new( @secret, Digest::SHA256 )
-        signature         = digestor.digest( encoded_data )
+        digestor          = OpenSSL::Digest::Digest.new('sha256')
+        signature         = OpenSSL::HMAC.digest( digestor, @secret, encoded_data )
         encoded_signature = Base64.strict_encode64( signature )
         encoded_signature = encoded_signature.gsub('+','_').gsub('/', '_')
 
@@ -95,8 +95,10 @@ module Facebook
     end
 
     def validate_signature
-      digestor = Digest::HMAC.new( @secret, Digest::SHA256 )
-      computed_signature = digestor.digest( @encoded_data )
+      digestor            = OpenSSL::Digest::Digest.new('sha256')
+      computed_signature  = OpenSSL::HMAC.digest(
+        digestor, @secret, @encoded_data
+      )
 
       if @signature != computed_signature
         message = "Signatures do not match. " \

data/lib/facebook-signed-request/version.rb

@@ -1,5 +1,5 @@
 module Facebook
   class SignedRequest
-    VERSION = "0.2.0"
+    VERSION = "0.2.1"
   end
 end

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: facebook-signed-request
 version: !ruby/object:Gem::Version
-  version: 0.2.0
+  version: 0.2.1
   prerelease: 
 platform: ruby
 authors:
@@ -9,7 +9,7 @@ authors:
 autorequire: 
 bindir: bin
 cert_chain: []
-date: 2011-06-26 00:00:00.000000000 +02:00
+date: 2011-06-27 00:00:00.000000000 +02:00
 default_executable: 
 dependencies: []
 description: Parses and validates Facebook signed requests