freeclimb 4.1.4 → 4.2.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: f77b3a7bc85c35b3ecb49de7da3c9f4a931270e83b8b69b88e2c2c060e4c14e6
-  data.tar.gz: 6b77f343b068a63cedf2ac8683b6b7d289f77b4d4aab08905c64162a2143bd0f
+  metadata.gz: d7826dfa439ee726cf91d308b8cd9eee895a48d53a425ac24926765525c23760
+  data.tar.gz: cec6eee4ac9ca13157b48a10a23f837c18f684bf3621cbe41fb89655291e493c
 SHA512:
-  metadata.gz: e010f34f66a2f845c498171084b8be76fa3b19639c5a80f565290c992b2768edeb55f3b647243627a3fc14688d4906d76f489b61a36bcc68bd6c1990feae0ca2
-  data.tar.gz: f587c50c621c047f405e09203bf8ba447fccc2e4b6c2c492e66211fedc457c2e624babd24ce0622058fbf1bbb814566ff9fdd1958c8554fc6b75fd32036994fd
+  metadata.gz: 0f6600bdf1b690008a0c6dfffb24de9e180e5e58600103e6e556dff32243fde20bd7f8d84ce5fcc1211804487fa82c68fd3f000b70bb1a4126278d4edbbcd537
+  data.tar.gz: c5e79a2cfbf443175d929f7b6ee271ae8a4c8202c93f7823cc8212a1a97ce0aff0b424f93a2ab022c63a3757cd2405bbfc81ab8b72de24bc7eb2835731d47e25

data/CHANGELOG.md

@@ -9,11 +9,20 @@ This project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.htm
 
 None
 
+<a name="4.2.0"></a>
+
+## [4.2.0] - 2023-04-03
+
+### Added
+
+- Introduce signing secret verification class (RequestVerifier) - https://docs.freeclimb.com/docs/validating-requests-from-freeclimb#how-to-verify-requests-manually
+
 <a name="4.1.4"></a>
 
 ## [4.1.4] - 2023-03-31
 
 ### Changed
+
 - PerclScript.to_json serialization fixed
 
 <a name="4.1.3"></a>

data/Gemfile.lock

@@ -1,7 +1,7 @@
 PATH
   remote: .
   specs:
-    freeclimb (4.1.4)
+    freeclimb (4.2.0)
       typhoeus (~> 1.0, >= 1.0.1)
 
 GEM

data/README.md

@@ -7,7 +7,7 @@ FreeClimb is a cloud-based application programming interface (API) that puts the
 This SDK is automatically generated by the [OpenAPI Generator](https://openapi-generator.tech) project:
 
 - API version: 1.0.0
-- Package version: 4.1.4
+- Package version: 4.2.0
 - Build package: org.openapitools.codegen.languages.RubyClientCodegen
 For more information, please visit [https://www.freeclimb.com/support/](https://www.freeclimb.com/support/)
 
@@ -15,7 +15,7 @@ For more information, please visit [https://www.freeclimb.com/support/](https://
 
 Add this to the Gemfile:
 
-    gem 'freeclimb', '~> 4.1.4'
+    gem 'freeclimb', '~> 4.2.0'
 
 and run from your terminal
 
@@ -44,9 +44,9 @@ gem build freeclimb.gemspec
 Then either install the gem locally:
 
 ```shell
-gem install ./freeclimb-4.1.4.gem
+gem install ./freeclimb-4.2.0.gem
 ```
-(for development, run `gem install --dev ./freeclimb-4.1.4.gem` to install the development dependencies)
+(for development, run `gem install --dev ./freeclimb-4.2.0.gem` to install the development dependencies)
 
 ## Getting Started
 
@@ -285,7 +285,30 @@ Class | Method | HTTP request | Description
 
 - **Type**: HTTP basic authentication
 
+<a name="documentation-for-verify-request-signature"></a>
+
+## Documentation for verifying request signature
+
+- To verify the signature request, we will need to use the verifySignatureRequest method within the Request Verifier class
+
+  Freeclimb::RequestVerifier.verify_request_signature(requestBody, requestHeader, signingSecret, tolerance)
+
+  This is a method that you can call directly from the request verifier class, it will throw exceptions depending on whether all parts of the request signature is valid otherwise it will throw a specific error message depending on which request signature part is causing issues
+
+  This method requires a requestBody of type string, a requestHeader of type string, a signingSecret of type string, and a tolerance value of type int
+
+  Example code down below
+
+  ```ruby
+  class RequestVerifier
+    def verify_request_signature_example()
+        request_header = "t=1679944186,v1=c3957749baf61df4b1506802579cc69a74c77a1ae21447b930e5a704f9ec4120,v1=1ba18712726898fbbe48cd862dd096a709f7ad761a5bab14bda9ac24d963a6a8"
+        signing_secret = "sigsec_ead6d3b6904196c60835d039e91b3341c77a7793"
+        tolerance = (5 * 60)
+        request_body =  "{\"accountId\":\"AC1334ffb694cd8d969f51cddf5f7c9b478546d50c\",\"callId\":\"CAccb0b00506553cda09b51c5477f672a49e0b2213\",\"callStatus\":\"ringing\",\"conferenceId\":null,\"direction\":\"inbound\",\"from\":\"+13121000109\",\"parentCallId\":null,\"queueId\":null,\"requestType\":\"inboundCall\",\"to\":\"+13121000096\"}"
+        Freeclimb::RequestVerifier.verify_request_signature(request_body, request_header, signing_secret, tolerance)
+  ```
 
 ## Getting Help
 
-If you are experiencing difficulties, [contact support](https://freeclimb.com/support).
+If you are experiencing difficulties, [contact support](https://freeclimb.com/support).

data/lib/freeclimb/utils/request_verifier.rb

@@ -0,0 +1,61 @@
+module Freeclimb
+    class RequestVerifier
+        class << self
+            @@DEFAULT_TOLERANCE = 5 * 60 * 1000
+            
+            def verify_request_signature(request_body, request_header, signing_secret, tolerance=DEFAULT_TOLERANCE)
+                request_verifier_object = Freeclimb::RequestVerifier.new()
+                request_verifier_object.instance_eval{ check_request_body(request_body) }
+                request_verifier_object.instance_eval{ check_request_header(request_header) }
+                request_verifier_object.instance_eval{ check_signing_secret(signing_secret) }
+                request_verifier_object.instance_eval{ check_tolerance(tolerance) }
+                info = Freeclimb::SignatureInformation.new(request_header)
+                request_verifier_object.instance_eval{ verify_tolerance(info, tolerance) }
+                request_verifier_object.instance_eval{ verify_signature(info, request_body, signing_secret)}
+            end
+        end
+
+        private
+
+        def check_request_body(request_body)
+            if request_body == "" || request_body == nil
+                raise 'Request Body cannot be empty or null'
+            end
+        end
+
+        def check_request_header(request_header)
+            if request_header == "" || request_header == nil
+                raise 'Error with request header, Request header is empty'
+            elsif !(request_header.include? "t")
+                raise 'Error with request header, timestamp is not present'
+            elsif !(request_header.include? "v1")
+                raise 'Error with request header, signatures are not present'
+            end
+        end
+
+        def check_signing_secret(signing_secret)
+            if signing_secret == "" || signing_secret == nil
+                raise 'Signing secret cannot be empty or null'
+            end
+        end
+
+        def check_tolerance(tolerance)
+            if tolerance <= 0 || !(tolerance.is_a? Integer)
+                raise 'Tolerance value must be a positive integer'
+            end
+        end
+
+        def verify_tolerance(info, tolerance)
+            currentTime = info.get_current_unix_time()
+            if !info.is_request_time_valid(tolerance)
+                raise "Request time exceeded tolerance threshold. Request: " + info.request_timestamp.to_s + ", CurrentTime: " + currentTime.to_s + ", tolerance: " + tolerance.to_s
+            end
+        end
+
+        def verify_signature(info, request_body, signing_secret)
+            if !info.is_signature_safe(request_body, signing_secret)
+                raise "Unverified signature request, If this request was unexpected, it may be from a bad actor. Please proceed with caution. If the request was exepected, please check any typos or issues with the signingSecret"
+            end
+        end
+    end
+end

data/lib/freeclimb/utils/signature_information.rb

@@ -0,0 +1,45 @@
+require 'date'
+require 'openssl'
+
+module Freeclimb
+    class SignatureInformation
+        attr_accessor :request_timestamp
+        attr_accessor :signatures
+
+        def initialize(request_header)
+            @request_timestamp = 0
+            @signatures = []
+            signatureHeader = request_header.try(:split, ",")
+            signatureHeader.each { |signature|
+                header, value = signature.try(:split, "=")
+                if header == "t"
+                    @request_timestamp = value.to_i
+                elsif header == "v1"
+                    @signatures.append(value)
+                end 
+            }
+        end
+
+        def is_request_time_valid(tolerance)
+            currentTime = self.get_current_unix_time()
+            timeCalculation = @request_timestamp + tolerance
+            return (timeCalculation) < currentTime
+        end
+
+        def is_signature_safe(request_body, signing_secret)
+            hashValue = self.compute_hash(request_body, signing_secret)
+            return @signatures.include? hashValue
+        end
+
+        def compute_hash(request_body, signing_secret)
+            data = @request_timestamp.to_s + "." + request_body
+            return OpenSSL::HMAC.hexdigest('sha256', signing_secret, data)
+        end
+
+        def get_current_unix_time()
+            return DateTime.now.strftime('%s').to_i
+        end
+
+        private :compute_hash
+    end
+end

data/lib/freeclimb/version.rb

@@ -11,5 +11,5 @@ OpenAPI Generator version: 5.4.0
 =end
 
 module Freeclimb
-  VERSION = '4.1.4'
+  VERSION = '4.2.0'
 end

data/lib/freeclimb.rb

@@ -148,6 +148,10 @@ require 'freeclimb/models/unpark'
 # APIs
 require 'freeclimb/api/default_api'
 
+#Utils
+require 'freeclimb/utils/signature_information'
+require 'freeclimb/utils/request_verifier'
+
 module Freeclimb
   class << self
     # Customize default settings for the SDK using block.

data/spec/utils/request_verifier_spec.rb

@@ -0,0 +1,148 @@
+require 'spec_helper'
+
+describe 'RequestVerifier' do
+    before do
+        @request_verifier_object = Freeclimb::RequestVerifier.new()
+    end
+
+    describe '#check_request_body' do
+        context 'Request Body is empty' do
+            it 'throws "Request Body cannot be empty or null"' do
+                request_header = "t=1679944186,v1=c3957749baf61df4b1506802579cc69a74c77a1ae21447b930e5a704f9ec4120,v1=1ba18712726898fbbe48cd862dd096a709f7ad761a5bab14bda9ac24d963a6a8"
+                signing_secret = "sigsec_ead6d3b6904196c60835d039e91b3341c77a7793"
+                tolerance = 5 * 60
+                request_body = ""
+                expect { Freeclimb::RequestVerifier.verify_request_signature(request_body, request_header, signing_secret, tolerance) }.to raise_error("Request Body cannot be empty or null")
+            end
+        end
+        context 'Request Body is nil' do
+            it 'throws "Request Body cannot be empty or null"' do
+                request_header = "t=1679944186,v1=c3957749baf61df4b1506802579cc69a74c77a1ae21447b930e5a704f9ec4120,v1=1ba18712726898fbbe48cd862dd096a709f7ad761a5bab14bda9ac24d963a6a8"
+                signing_secret = "sigsec_ead6d3b6904196c60835d039e91b3341c77a7793"
+                tolerance = 5 * 60
+                request_body = nil
+                expect { Freeclimb::RequestVerifier.verify_request_signature(request_body, request_header, signing_secret, tolerance) }.to raise_error("Request Body cannot be empty or null")
+            end
+        end
+    end
+
+    describe '#check_request_header' do
+        context 'signatures are not present' do
+            it 'throws "Error with request header, signatures are not present"' do
+                request_header = "t=1679944186,"
+                signing_secret = "sigsec_ead6d3b6904196c60835d039e91b3341c77a7793"
+                tolerance = 5 * 60
+                request_body = "{\"accountId\":\"AC1334ffb694cd8d969f51cddf5f7c9b478546d50c\",\"callId\":\"CAccb0b00506553cda09b51c5477f672a49e0b2213\",\"callStatus\":\"ringing\",\"conferenceId\":null,\"direction\":\"inbound\",\"from\":\"+13121000109\",\"parentCallId\":null,\"queueId\":null,\"requestType\":\"inboundCall\",\"to\":\"+13121000096\"}"
+                expect { Freeclimb::RequestVerifier.verify_request_signature(request_body, request_header, signing_secret, tolerance) }.to raise_error("Error with request header, signatures are not present")
+            end
+        end
+        context 'timestamp is not present' do
+            it 'throws "Error with request header, timestamp is not present"' do
+                request_header = "v1=c3957749baf61df4b1506802579cc69a74c77a1ae21447b930e5a704f9ec4120,v1=1ba18712726898fbbe48cd862dd096a709f7ad761a5bab14bda9ac24d963a6a8"
+                signing_secret = "sigsec_ead6d3b6904196c60835d039e91b3341c77a7793"
+                tolerance = 5 * 60
+                request_body = "{\"accountId\":\"AC1334ffb694cd8d969f51cddf5f7c9b478546d50c\",\"callId\":\"CAccb0b00506553cda09b51c5477f672a49e0b2213\",\"callStatus\":\"ringing\",\"conferenceId\":null,\"direction\":\"inbound\",\"from\":\"+13121000109\",\"parentCallId\":null,\"queueId\":null,\"requestType\":\"inboundCall\",\"to\":\"+13121000096\"}"
+                expect { Freeclimb::RequestVerifier.verify_request_signature(request_body, request_header, signing_secret, tolerance) }.to raise_error("Error with request header, timestamp is not present")
+            end
+        end
+        context 'Request header is empty' do
+            it 'throws "Error with request header, Request header is empty"' do
+                request_header = ""
+                signing_secret = "sigsec_ead6d3b6904196c60835d039e91b3341c77a7793"
+                tolerance = 5 * 60
+                request_body = "{\"accountId\":\"AC1334ffb694cd8d969f51cddf5f7c9b478546d50c\",\"callId\":\"CAccb0b00506553cda09b51c5477f672a49e0b2213\",\"callStatus\":\"ringing\",\"conferenceId\":null,\"direction\":\"inbound\",\"from\":\"+13121000109\",\"parentCallId\":null,\"queueId\":null,\"requestType\":\"inboundCall\",\"to\":\"+13121000096\"}"
+                expect { Freeclimb::RequestVerifier.verify_request_signature(request_body, request_header, signing_secret, tolerance) }.to raise_error("Error with request header, Request header is empty")
+            end
+        end
+    end
+
+    describe '#check_signing_secret' do
+        context 'Signing secret is empty' do
+            it 'throws "Signing secret cannot be empty or null"' do
+                request_header = "t=1679944186,v1=c3957749baf61df4b1506802579cc69a74c77a1ae21447b930e5a704f9ec4120,v1=1ba18712726898fbbe48cd862dd096a709f7ad761a5bab14bda9ac24d963a6a8"
+                signing_secret = ""
+                tolerance = 5 * 60
+                request_body = "{\"accountId\":\"AC1334ffb694cd8d969f51cddf5f7c9b478546d50c\",\"callId\":\"CAccb0b00506553cda09b51c5477f672a49e0b2213\",\"callStatus\":\"ringing\",\"conferenceId\":null,\"direction\":\"inbound\",\"from\":\"+13121000109\",\"parentCallId\":null,\"queueId\":null,\"requestType\":\"inboundCall\",\"to\":\"+13121000096\"}"
+                expect { Freeclimb::RequestVerifier.verify_request_signature(request_body, request_header, signing_secret, tolerance) }.to raise_error("Signing secret cannot be empty or null")
+            end
+        end
+        context 'Signing secret is nil' do
+            it 'throws "Signing secret cannot be empty or null"' do
+                request_header = "t=1679944186,v1=c3957749baf61df4b1506802579cc69a74c77a1ae21447b930e5a704f9ec4120,v1=1ba18712726898fbbe48cd862dd096a709f7ad761a5bab14bda9ac24d963a6a8"
+                signing_secret = nil
+                tolerance = 5 * 60
+                request_body = "{\"accountId\":\"AC1334ffb694cd8d969f51cddf5f7c9b478546d50c\",\"callId\":\"CAccb0b00506553cda09b51c5477f672a49e0b2213\",\"callStatus\":\"ringing\",\"conferenceId\":null,\"direction\":\"inbound\",\"from\":\"+13121000109\",\"parentCallId\":null,\"queueId\":null,\"requestType\":\"inboundCall\",\"to\":\"+13121000096\"}"
+                expect { Freeclimb::RequestVerifier.verify_request_signature(request_body, request_header, signing_secret, tolerance) }.to raise_error("Signing secret cannot be empty or null")
+            end
+        end
+    end
+
+    describe '#check_tolerance' do
+        context 'Tolerance value is a negative value' do
+            it 'throws "Tolerance value must be a positive integer"' do
+                request_header = "t=1679944186,v1=c3957749baf61df4b1506802579cc69a74c77a1ae21447b930e5a704f9ec4120,v1=1ba18712726898fbbe48cd862dd096a709f7ad761a5bab14bda9ac24d963a6a8"
+                signing_secret = "sigsec_ead6d3b6904196c60835d039e91b3341c77a7793"
+                tolerance = -5
+                request_body = "{\"accountId\":\"AC1334ffb694cd8d969f51cddf5f7c9b478546d50c\",\"callId\":\"CAccb0b00506553cda09b51c5477f672a49e0b2213\",\"callStatus\":\"ringing\",\"conferenceId\":null,\"direction\":\"inbound\",\"from\":\"+13121000109\",\"parentCallId\":null,\"queueId\":null,\"requestType\":\"inboundCall\",\"to\":\"+13121000096\"}"
+                expect { Freeclimb::RequestVerifier.verify_request_signature(request_body, request_header, signing_secret, tolerance) }.to raise_error("Tolerance value must be a positive integer")
+            end
+        end
+        context 'Tolerance value is 0' do
+            it 'throws "Tolerance value must be a positive integer"' do
+                request_header = "t=1679944186,v1=c3957749baf61df4b1506802579cc69a74c77a1ae21447b930e5a704f9ec4120,v1=1ba18712726898fbbe48cd862dd096a709f7ad761a5bab14bda9ac24d963a6a8"
+                signing_secret = "sigsec_ead6d3b6904196c60835d039e91b3341c77a7793"
+                tolerance = 0
+                request_body = "{\"accountId\":\"AC1334ffb694cd8d969f51cddf5f7c9b478546d50c\",\"callId\":\"CAccb0b00506553cda09b51c5477f672a49e0b2213\",\"callStatus\":\"ringing\",\"conferenceId\":null,\"direction\":\"inbound\",\"from\":\"+13121000109\",\"parentCallId\":null,\"queueId\":null,\"requestType\":\"inboundCall\",\"to\":\"+13121000096\"}"
+                expect { Freeclimb::RequestVerifier.verify_request_signature(request_body, request_header, signing_secret, tolerance) }.to raise_error("Tolerance value must be a positive integer")
+            end
+        end
+        context 'Tolerance value is NaN' do
+            it 'throws "Tolerance value must be a positive integer"' do
+                request_header = "t=1679944186,v1=c3957749baf61df4b1506802579cc69a74c77a1ae21447b930e5a704f9ec4120,v1=1ba18712726898fbbe48cd862dd096a709f7ad761a5bab14bda9ac24d963a6a8"
+                signing_secret = "sigsec_ead6d3b6904196c60835d039e91b3341c77a7793"
+                tolerance = Float::NAN
+                request_body = "{\"accountId\":\"AC1334ffb694cd8d969f51cddf5f7c9b478546d50c\",\"callId\":\"CAccb0b00506553cda09b51c5477f672a49e0b2213\",\"callStatus\":\"ringing\",\"conferenceId\":null,\"direction\":\"inbound\",\"from\":\"+13121000109\",\"parentCallId\":null,\"queueId\":null,\"requestType\":\"inboundCall\",\"to\":\"+13121000096\"}"
+                expect { Freeclimb::RequestVerifier.verify_request_signature(request_body, request_header, signing_secret, tolerance) }.to raise_error("Tolerance value must be a positive integer")
+            end
+        end
+    end
+
+    describe '#verify_tolerance' do
+        context 'Request plus tolerance is not less than the current datetime' do
+            it 'throws "Request time exceeded tolerance threshold. Request: 1900871395, CurrentTime: currentTimeValue, tolerance, toleranceValue"' do
+                currentTime = DateTime.now.strftime('%s').to_i
+                request_header = "t=1900871395,v1=1d798c86e977ff734dec3a8b8d67fe8621dcc1df46ef4212e0bfe2e122b01bfd,v1=1ba18712726898fbbe48cd862dd096a709f7ad761a5bab14bda9ac24d963a6a8"
+                signing_secret = "sigsec_ead6d3b6904196c60835d039e91b3341c77a7793"
+                tolerance = (5 * 60)
+                request_body =  "{\"accountId\":\"AC1334ffb694cd8d969f51cddf5f7c9b478546d50c\",\"callId\":\"CAccb0b00506553cda09b51c5477f672a49e0b2213\",\"callStatus\":\"ringing\",\"conferenceId\":null,\"direction\":\"inbound\",\"from\":\"+13121000109\",\"parentCallId\":null,\"queueId\":null,\"requestType\":\"inboundCall\",\"to\":\"+13121000096\"}"
+                expect { Freeclimb::RequestVerifier.verify_request_signature(request_body, request_header, signing_secret, tolerance) }.to raise_error("Request time exceeded tolerance threshold. Request: 1900871395" + ", CurrentTime: " + currentTime.to_s + ", tolerance: " + tolerance.to_s)
+            end
+        end
+    end
+
+    describe '#verify_signature' do
+        context 'Signature request is unverified, signing secret does not exist in signatures, potential typo' do
+            it 'throws "Unverified signature request, If this request was unexpected, it may be from a bad actor. Please proceed with caution. If the request was exepected, please check any typos or issues with the signingSecret"' do
+                currentTime = DateTime.now.strftime('%s').to_i
+                request_header = "t=1679944186,v1=c3957749baf61df4b1506802579cc69a74c77a1ae21447b930e5a704f9ec4120,v1=1ba18712726898fbbe48cd862dd096a709f7ad761a5bab14bda9ac24d963a6a8"
+                signing_secret = "sigsec_ead6d3b6904196c60835d039e91b3341c77a7794"
+                tolerance = (5 * 60)
+                request_body =  "{\"accountId\":\"AC1334ffb694cd8d969f51cddf5f7c9b478546d50c\",\"callId\":\"CAccb0b00506553cda09b51c5477f672a49e0b2213\",\"callStatus\":\"ringing\",\"conferenceId\":null,\"direction\":\"inbound\",\"from\":\"+13121000109\",\"parentCallId\":null,\"queueId\":null,\"requestType\":\"inboundCall\",\"to\":\"+13121000096\"}"
+                expect { Freeclimb::RequestVerifier.verify_request_signature(request_body, request_header, signing_secret, tolerance) }.to raise_error("Unverified signature request, If this request was unexpected, it may be from a bad actor. Please proceed with caution. If the request was exepected, please check any typos or issues with the signingSecret")
+            end
+        end
+    end
+
+    describe '#verify_request_signature' do
+        context 'Request is valid' do
+            it 'No errors are thrown' do
+                request_header = "t=1679944186,v1=c3957749baf61df4b1506802579cc69a74c77a1ae21447b930e5a704f9ec4120,v1=1ba18712726898fbbe48cd862dd096a709f7ad761a5bab14bda9ac24d963a6a8"
+                signing_secret = "sigsec_ead6d3b6904196c60835d039e91b3341c77a7793"
+                tolerance = (5 * 60)
+                request_body =  "{\"accountId\":\"AC1334ffb694cd8d969f51cddf5f7c9b478546d50c\",\"callId\":\"CAccb0b00506553cda09b51c5477f672a49e0b2213\",\"callStatus\":\"ringing\",\"conferenceId\":null,\"direction\":\"inbound\",\"from\":\"+13121000109\",\"parentCallId\":null,\"queueId\":null,\"requestType\":\"inboundCall\",\"to\":\"+13121000096\"}"
+                expect { Freeclimb::RequestVerifier.verify_request_signature(request_body, request_header, signing_secret, tolerance) }.not_to raise_error
+            end
+        end
+    end
+    
+end

data/spec/utils/signature_information_spec.rb

@@ -0,0 +1,38 @@
+require 'spec_helper'
+
+describe 'SignatureInformation' do
+    before do
+        @request_header = "t=1679944186,v1=c3957749baf61df4b1506802579cc69a74c77a1ae21447b930e5a704f9ec4120,v1=1ba18712726898fbbe48cd862dd096a709f7ad761a5bab14bda9ac24d963a6a8"
+        @signature_information_object = Freeclimb::SignatureInformation.new(@request_header)
+    end
+    describe '#is_request_time_valid' do
+        context 'request time is within tolerance threshold' do
+            it 'returns true' do
+                tolerance = 5 * 60
+                expect(@signature_information_object.is_request_time_valid(tolerance)).to be true
+            end
+        end
+        context 'request time is not within tolerance threshold' do
+            it 'returns false since it does not match condition of request time being within tolerance threshold' do
+                tolerance = 5 * 60 * 10000
+                expect(@signature_information_object.is_request_time_valid(tolerance)).to be false
+            end
+        end
+    end
+    describe '#is_signature_safe' do
+        context 'signingSecret exists in signature array' do
+            it 'returns true' do
+                request_body = "{\"accountId\":\"AC1334ffb694cd8d969f51cddf5f7c9b478546d50c\",\"callId\":\"CAccb0b00506553cda09b51c5477f672a49e0b2213\",\"callStatus\":\"ringing\",\"conferenceId\":null,\"direction\":\"inbound\",\"from\":\"+13121000109\",\"parentCallId\":null,\"queueId\":null,\"requestType\":\"inboundCall\",\"to\":\"+13121000096\"}"
+                signing_secret = "sigsec_ead6d3b6904196c60835d039e91b3341c77a7793"
+                expect(@signature_information_object.is_signature_safe(request_body, signing_secret)).to be true
+            end
+        end
+        context 'signingSecret does not exists in signature array' do
+            it 'returns false since it does not match condition of signingSecret being within signature array' do
+                request_body = "{\"accountId\":\"AC1334ffb694cd8d969f51cddf5f7c9b478546d50c\",\"callId\":\"CAccb0b00506553cda09b51c5477f672a49e0b2213\",\"callStatus\":\"ringing\",\"conferenceId\":null,\"direction\":\"inbound\",\"from\":\"+13121000109\",\"parentCallId\":null,\"queueId\":null,\"requestType\":\"inboundCall\",\"to\":\"+13121000096\"}"
+                signing_secret = "sigsec_ead6d3b6904196c60835d039e91b3341c77a7794"
+                expect(@signature_information_object.is_signature_safe(request_body, signing_secret)).to be false
+            end
+        end
+    end
+end

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: freeclimb
 version: !ruby/object:Gem::Version
-  version: 4.1.4
+  version: 4.2.0
 platform: ruby
 authors:
 - OpenAPI-Generator
 autorequire: 
 bindir: bin
 cert_chain: []
-date: 2023-04-03 00:00:00.000000000 Z
+date: 2023-04-04 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: typhoeus
@@ -330,6 +330,8 @@ files:
 - lib/freeclimb/models/update_conference_participant_request.rb
 - lib/freeclimb/models/update_conference_request.rb
 - lib/freeclimb/models/update_conference_request_status.rb
+- lib/freeclimb/utils/request_verifier.rb
+- lib/freeclimb/utils/signature_information.rb
 - lib/freeclimb/version.rb
 - openapi.json
 - spec/api/default_api_spec.rb
@@ -423,6 +425,8 @@ files:
 - spec/models/update_conference_request_status_spec.rb
 - spec/quickstart_spec.rb
 - spec/spec_helper.rb
+- spec/utils/request_verifier_spec.rb
+- spec/utils/signature_information_spec.rb
 homepage: https://freeclimb.com
 licenses:
 - Unlicense
@@ -538,3 +542,5 @@ test_files:
 - spec/models/if_machine_spec.rb
 - spec/quickstart_spec.rb
 - spec/spec_helper.rb
+- spec/utils/signature_information_spec.rb
+- spec/utils/request_verifier_spec.rb