freeclimb 2.2.0 → 3.0.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 3329b44735fb00cbe89d1f64b29bcd20746822b7976acd11e046f0e04553b78c
-  data.tar.gz: 0c10c93eb8bf849cf7e376d111e2e1332470a27a45b67e56a5d7fcbce3e03cce
+  metadata.gz: 8822c0cb7172e4c5ff3cab045f98636e7645b842dcc7c17097fec6b2257c10a7
+  data.tar.gz: fa3c4ec0294ec97f141a1d58dffd65034f1d664b8e4ea65e62fc4ffffb2c6911
 SHA512:
-  metadata.gz: 0d7e751a6941e8e5962b73fad832ab0893d13d0e145e46e1458d5e49781a34b82f275057565b29056094a7ec76c0e579932a81afb8740570413a23e9797c8a50
-  data.tar.gz: 2b96b3486f150332c36af12d84f870497ba8c300b804964d99f4fc1743ece7b33789f06872eaa0c6d63173768ec42e35837d3d8195be48c43a6cb45b7b0887ee
+  metadata.gz: 1ad8968cabebe723a38432655e665764a7841aa97bb21a0275f3d6920bdc9c870ef69b922f03c69e79320e567e9f5a39cc2e6a9d521c8e38c684f793cf8dd761
+  data.tar.gz: a8b822a510b5bed0bba1b77ea3507becc96efe65259a518a6f45d014ee4c564c24828f28d23f3bb75026ceebd40daeb8c337bb998e19373f807c13e7533c37fb

data/CHANGELOG.md

@@ -7,8 +7,13 @@ This project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.htm
 ## [Unreleased]
 None
 
+<a name="3.0.0"></a>
+## [3.0.0] - 2021-05-03
+### Added
+- Add `verify_request` utility function
+
 <a name="2.2.0"></a>
-## [2.1.2] - 2021-04-12
+## [2.2.0] - 2021-04-12
 ### Changed
 - Replace any language instance of `auth_token` or similar speech to `api_key`
 

data/README.md

@@ -5,7 +5,7 @@ FreeClimb is a cloud-based application programming interface (API) that puts the
 This SDK is automatically generated by the [OpenAPI Generator](https://openapi-generator.tech) project:
 
 - API version: 1.0.0
-- Package version: 2.2.0
+- Package version: 3.0.0
 - Build package: org.openapitools.codegen.languages.RubyClientCodegen
 
 ## Installation
@@ -21,16 +21,16 @@ gem build freeclimb.gemspec
 Then either install the gem locally:
 
 ```shell
-gem install ./freeclimb-2.2.0.gem
+gem install ./freeclimb-3.0.0.gem
 ```
 
-(for development, run `gem install --dev ./freeclimb-2.2.0.gem` to install the development dependencies)
+(for development, run `gem install --dev ./freeclimb-3.0.0.gem` to install the development dependencies)
 
 or publish the gem to a gem hosting service, e.g. [RubyGems](https://rubygems.org/).
 
 Finally add this to the Gemfile:
 
-    gem 'freeclimb', '~> 2.2.0'
+    gem 'freeclimb', '~> 3.0.0'
     
 ### Install from Ruby gems
 ```shell

data/lib/freeclimb.rb

@@ -15,6 +15,7 @@ require 'freeclimb/api_client'
 require 'freeclimb/api_error'
 require 'freeclimb/version'
 require 'freeclimb/configuration'
+require 'freeclimb/utils'
 require 'freeclimb/models/percl_command'
 
 # Models

data/lib/freeclimb/api_client.rb

@@ -30,7 +30,7 @@ module Freeclimb
     # @option config [Configuration] Configuration for initializing the object, default to Configuration.default
     def initialize(config = Configuration.default)
       @config = config
-      @user_agent = "FreeClimbSDK/2.2.0/ruby"
+      @user_agent = "FreeClimbSDK/3.0.0/ruby"
       @default_headers = {
         'Content-Type' => 'application/json',
         'User-Agent' => @user_agent

data/lib/freeclimb/utils.rb

@@ -0,0 +1,34 @@
+require 'json'
+require 'cgi'
+require 'date'
+require 'openssl'
+
+module FreeClimb
+  class Utils
+    def self.verify_request(requestBody, signatureHeader, signingSecret, tolerance=5*60*1000)
+      signatureArr = signatureHeader.split(',')
+      signatureHash = {}
+      signatureArr.each { |queryStr|
+        hash = CGI.parse(queryStr)
+        if (signatureHash.key?(hash.keys[0])) 
+          signatureHash[hash.keys[0]] = [signatureHash[hash.keys[0]]].append(hash.values[0][0])
+        else
+          signatureHash[hash.keys[0]] = hash.values[0][0]
+        end
+      }
+
+      currentTime = DateTime.now.strftime('%s')
+      signatureAge = currentTime.to_i - signatureHash["t"].to_i
+      if (tolerance < signatureAge)
+        raise StandardError.new "Request rejected - signature's timestamp failed against current tolerance of #{tolerance} milliseconds. Signature age: #{signatureAge} milliseconds";
+      end
+
+      data = signatureHash["t"] + "." + requestBody
+      hmac = OpenSSL::HMAC.hexdigest('sha256', signingSecret, data)
+
+      if (!signatureHash["v1"].include? hmac)
+        raise StandardError.new "Unverified Request Signature - FreeClimb was unable to verify that this request originated from FreeClimb. If this request was unexpected, it may be from a bad actor. Please proceed with caution. If this request was expected, to fix this issue try checking for any typos or misspelling of your signing secret.";
+      end
+    end
+  end
+end

data/lib/freeclimb/version.rb

@@ -11,5 +11,5 @@ OpenAPI Generator version: 4.3.0-SNAPSHOT
 =end
 
 module Freeclimb
-  VERSION = '2.2.0'
+  VERSION = '3.0.0'
 end

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: freeclimb
 version: !ruby/object:Gem::Version
-  version: 2.2.0
+  version: 3.0.0
 platform: ruby
 authors:
 - OpenAPI-Generator
 autorequire: 
 bindir: bin
 cert_chain: []
-date: 2021-05-04 00:00:00.000000000 Z
+date: 2021-05-11 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: typhoeus
@@ -196,6 +196,7 @@ files:
 - freeclimb-2.1.0.gem
 - freeclimb-2.1.1.gem
 - freeclimb-2.1.2.gem
+- freeclimb-2.2.0.gem
 - freeclimb.gemspec
 - lib/freeclimb.rb
 - lib/freeclimb/api/default_api.rb
@@ -304,6 +305,7 @@ files:
 - lib/freeclimb/models/update_call_request.rb
 - lib/freeclimb/models/update_conference_participant_request.rb
 - lib/freeclimb/models/update_conference_request.rb
+- lib/freeclimb/utils.rb
 - lib/freeclimb/version.rb
 - spec/api/default_api_spec.rb
 - spec/api/web_mocks.rb