hephaestus 0.8.15.4 → 0.8.16

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: c3b5cd0cf6fc559d74c9caa5f801a99be5f2c2615788389c180a6258c2894a0f
-  data.tar.gz: 984ba33d4aeded9f438f67e3ab94e25bfff3f34b4a3cb591732641e9b9e2774e
+  metadata.gz: f141bfecf20df190360c8c07e940e02c2a9e3a9273e2b9c3a3acb3bf0cb35cd5
+  data.tar.gz: 44feab3fcbf8e863111293651bb1e87c75ae24af25f1563b61256b8e154141de
 SHA512:
-  metadata.gz: 81f0d1e36d1bcf846d43f1620c21cb03a2c2d676179b3f731ab4ebc9e75e547aa785a8f30745cf7bc02d9f7a543838edc40f6e39bfe504cae52ef652d15bd4ca
-  data.tar.gz: 898187ff9d79d17d23e5415c063721bf943f1cd92e79cec3508ce13ce65ca47c9e4a54cd7c80cba248e9135d1b99f25b4873a857ba5af26381ed7d2534b8641f
+  metadata.gz: ccb5ea73b4707487c46242394367680a8488dbf77180597f016771e3d4d89990b123ace277cf8414a10729d849dbe1939538310d179cd4037db190adda3d9963
+  data.tar.gz: dcc54b5a9195f4e4955b2450c7e1c08c930dc38ffaa7b47fa27792589a354f4a67bfcc82ddd8b2bd5b8c3d71923269a5eb857140f7e3ca37b87b964bd2292c9b

data/CHANGELOG.md

@@ -1,3 +1,11 @@
+# [v0.8.16] - 26-01-2025
+## What's Changed
+* Point to new API url by @gjtorikian in https://github.com/yettoapp/hephaestus/pull/105
+
+
+**Full Changelog**: https://github.com/yettoapp/hephaestus/compare/v0.8.15.5...v0.8.16
+# [v0.8.15.5] - 16-01-2025
+**Full Changelog**: https://github.com/yettoapp/hephaestus/compare/v0.8.15.4...v0.8.15.5
 # [v0.8.15.4] - 16-01-2025
 **Full Changelog**: https://github.com/yettoapp/hephaestus/compare/v0.8.15.3...v0.8.15.4
 # [v0.8.15.3] - 16-01-2025

data/app/controllers/concerns/hephaestus/validates_from_yetto.rb

@@ -17,7 +17,7 @@ module Hephaestus
       return bad_request unless yetto_signature.start_with?("sha256=")
 
       hmac_header = yetto_signature.split("sha256=").last
-      body = request.env.fetch("RAW_POST_DATA", "")
+      body = request.raw_post
 
       calculated_hmac = OpenSSL::HMAC.hexdigest(SHA256_DIGEST, Hephaestus::YETTO_SIGNING_SECRET, body)
 

data/config/initializers/environment.rb

@@ -6,7 +6,7 @@ OP_INFRA_SECRETS = {}
 
 def fetch_vault_secret(label:, default: "")
   if productionish?
-    OP_VAULT_SECRETS.delete(label) || raise("Secret `#{label}` not found in 1Password")
+    OP_VAULT_SECRETS.delete(label) || Rails.logger.error("Secret `#{label}` not found in 1Password")
   else
     ENV.fetch(label, default.is_a?(Pathname) ? default.read : default)
   end
@@ -14,7 +14,7 @@ end
 
 def fetch_infra_secret(label:, default: "")
   if productionish?
-    OP_INFRA_SECRETS.delete(label) || raise("Secret `#{label}` not found in 1Password")
+    OP_INFRA_SECRETS.delete(label) || Rails.logger.error("Secret `#{label}` not found in 1Password")
   else
     ENV.fetch(label, default.is_a?(Pathname) ? default.read : default)
   end
@@ -24,7 +24,7 @@ def op_load_vault_into_env(vault:, tag: nil)
   include_sudo = !Rails.env.local? ? "sudo -E " : ""
   include_tag = tag ? " --tags #{tag} " : ""
   %x(#{include_sudo}op item list --vault #{vault}#{include_tag}--format json | #{include_sudo}op item get - --reveal --format=json).tap do
-    raise "Failed to fetch value `#{vault}` for `#{tag}` from 1Password" unless $CHILD_STATUS.success?
+    Rails.logger.error("Failed to fetch value `#{vault}` for `#{tag}` from 1Password") unless $CHILD_STATUS.success?
   end
 end
 
@@ -80,16 +80,28 @@ module Hephaestus
   end
 
   PROTOCOL = Rails.env.development? ? "http://" : "https://"
-  YETTO_URL = if Rails.env.production?
-    "web.yetto.app"
+
+  YETTO_DOMAIN = if Rails.env.production?
+    "yetto.app"
   elsif Rails.env.staging?
-    "web.yetto.dev"
-  elsif Rails.env.development?
-    "localhost:3000"
+    "yetto.dev"
   elsif Rails.env.test?
-    "web.yetto.test"
+    "yetto.test"
+  end
+  YETTO_URL = if Rails.env.development?
+    "localhost:3000"
+  else
+    "web.#{YETTO_DOMAIN}"
   end
 
+  YETTO_API_URL = if Rails.env.local?
+    "localhost:3000/api"
+  else
+    "api.#{YETTO_DOMAIN}"
+  end
+
+  YETTO_REDIRECT_URL = productionish? ? "#{PROTOCOL}#{YETTO_URL}" : "#{PROTOCOL}127.0.0.1:3000"
+
   # Every plug has secrets; to reduce the amount of API calls to 1Password,
   # we can grab one document that contains all the secrets we need
   if productionish?
@@ -114,9 +126,6 @@ module Hephaestus
     end
   end
 
-  YETTO_API_URL = "#{YETTO_URL}/api"
-  YETTO_REDIRECT_URL = productionish? ? "#{PROTOCOL}#{YETTO_URL}" : "#{PROTOCOL}127.0.0.1:3000"
-
   YETTO_PLUG_PEM = fetch_vault_secret(
     label: "YETTO_PLUG_PEM",
     default: Rails.root.join("test/fixtures/files/fake_pem_file/fake.pem"),

data/lib/hephaestus/version.rb

@@ -2,7 +2,7 @@
 # frozen_string_literal: true
 
 module Hephaestus
-  VERSION = "0.8.15.4"
+  VERSION = "0.8.16"
   RAILS_VERSION = ">= 8.0"
   RUBY_VERSION = File
     .read("#{File.dirname(__FILE__)}/../../.ruby-version")

data/templates/root/hephaestus_gitignore

@@ -294,4 +294,4 @@ app/javascript/controllers/*.js
 !app/javascript/controllers/index.js
 
 security_results.json
-vendor/cache/
+vendor/cache

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: hephaestus
 version: !ruby/object:Gem::Version
-  version: 0.8.15.4
+  version: 0.8.16
 platform: ruby
 authors:
 - Garen Torikian
 autorequire:
 bindir: bin
 cert_chain: []
-date: 2025-01-16 00:00:00.000000000 Z
+date: 2025-01-26 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: bootsnap