http_signatures 1.0.0 → 1.0.1

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA1:
-  metadata.gz: ce6a985c77d642db8bc930637ae221f1bb4bba83
-  data.tar.gz: a480d1533927ad95a31835854abb9b74b83fe07b
+  metadata.gz: c5c7339b04086bd5daa91dc6b18f3b81533f968b
+  data.tar.gz: 7795f49a0a2163902cb11b9d4a6c3c96cd445f82
 SHA512:
-  metadata.gz: b277237049594fce36da6a65d4a2cda19360d7b12f80f90c86f1fb91beeaf270a973eba39dfddc4bf48babf542ccc5ae680083b32e97e204b8e4817bf2a161e0
-  data.tar.gz: 959328089a8ca344d30e6219555b0f4e918b4ef56290dd80354034dc707adaf7375a10fc58e1619d5a1f696ccdb536a278f5ab1130c83f05f3f2e302de4c8001
+  metadata.gz: 1643e2f919c5da1fe6f80ed9eef7e6ebfd4443474228c9c92c6f7dcdb6c986232670d6aed3c251196012e8a50d2e84ab3d57d3a1674bfd7d5754e0167f0f913b
+  data.tar.gz: 6f710a1ae21aed1b2fea9e303541116305b0dc57c565f24c233c9364f0e74c8c0bf01a7c41350b006847877c8b665a513c0a13af7c4c8f054e20a628e36ac30d

data/lib/http_signatures/verification.rb

@@ -7,11 +7,19 @@ module HttpSignatures
     end
 
     def valid?
-      expected_signature_base64 == provided_signature_base64
+      signature_header_present? && signature_matches?
     end
 
     private
 
+    def signature_header_present?
+      @message.key?("Signature")
+    end
+
+    def signature_matches?
+      expected_signature_base64 == provided_signature_base64
+    end
+
     def expected_signature_base64
       Base64.strict_encode64(expected_signature_raw)
     end

data/lib/http_signatures/version.rb

@@ -1,3 +1,3 @@
 module HttpSignatures
-  VERSION = "1.0.0"
+  VERSION = "1.0.1"
 end

data/spec/verifier_spec.rb

@@ -24,6 +24,11 @@ RSpec.describe HttpSignatures::Verifier do
     expect(verifier.valid?(message)).to eq(true)
   end
 
+  it "rejects message with missing headers" do
+    headers.clear
+    expect(verifier.valid?(message)).to eq(false)
+  end
+
   it "rejects message with tampered path" do
     message.path << "x"
     expect(verifier.valid?(message)).to eq(false)

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: http_signatures
 version: !ruby/object:Gem::Version
-  version: 1.0.0
+  version: 1.0.1
 platform: ruby
 authors:
 - Paul Annesley
 autorequire: 
 bindir: bin
 cert_chain: []
-date: 2014-08-05 00:00:00.000000000 Z
+date: 2014-09-24 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: bundler