ig-identity-rp-validator 0.0.1

checksums.yaml

@@ -0,0 +1,7 @@
+---
+SHA1:
+  metadata.gz: ca4c4b510af010481e7e8364a16da941fe7c79ce
+  data.tar.gz: baf415ab58106517502f5fe67aef029980e42cac
+SHA512:
+  metadata.gz: bff52fcfc07458bd3ada7a533aab4f0df0e7c7a05e636b77d3b74dfa01b6f16b8bce3b0987bc5ff317b6a0336e39515170506e733669a041e929c17d03cf6680
+  data.tar.gz: a13085b8f32a8b6cd44a37b0a98dad2f4c9c1e865d67b00e8f9db34c8d7750f5694daf49f98740f1720cc352cbe5b458e5f5f15ff0a1703e1f60326d33281c44

data/lib/ig-identity-rp-validator.rb

@@ -0,0 +1,41 @@
+require 'ig-crypto-utils'
+require 'base64'
+require 'json'
+
+module IgIdentity
+
+  module RelyingParty
+
+    class AuthValidator
+
+      # 1. decrypt the auth payload using shared AES key + iv
+      # 2. validate the signature using ecdsa_secret_key
+      # 3. parse the username and role (and ip address if present) from the payload
+      # 4. parse the expiry date from the payload and check if expired
+      # 5. if all valid, generate response of the form {:valid => true, :auth => {...}}
+      def validate_auth(auth, iv, aes_key, ecdsa_public_key)
+
+        begin
+          decrypted_result = Base64.decode64 CryptoUtils::AesUtil.new.decrypt(auth, aes_key, iv)
+          parsed_result = JSON.parse(decrypted_result, :symbolize_names => true)
+
+          token = parsed_result[:token]
+          signature = parsed_result[:signature]
+
+          # validate the signature
+          return {:valid => true, :auth => parsed_result} if
+              CryptoUtils::EcdsaUtil.new.validate_signature(token, signature, ecdsa_public_key)
+
+          {:valid => false, auth: nil}
+
+        rescue
+          {:valid => false, auth: nil}
+        end
+
+      end
+
+    end
+
+  end
+
+end

metadata

@@ -0,0 +1,58 @@
+--- !ruby/object:Gem::Specification
+name: ig-identity-rp-validator
+version: !ruby/object:Gem::Version
+  version: 0.0.1
+platform: ruby
+authors:
+- Infinity-G
+autorequire: 
+bindir: bin
+cert_chain: []
+date: 2015-02-18 00:00:00.000000000 Z
+dependencies:
+- !ruby/object:Gem::Dependency
+  name: ig-crypto-utils
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - '='
+      - !ruby/object:Gem::Version
+        version: 0.0.1
+  type: :runtime
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - '='
+      - !ruby/object:Gem::Version
+        version: 0.0.1
+description: Relying party validator for payloads generated by the id-io API
+email: developer@infinity-g.com
+executables: []
+extensions: []
+extra_rdoc_files: []
+files:
+- lib/ig-identity-rp-validator.rb
+homepage: ''
+licenses:
+- MIT
+metadata: {}
+post_install_message: 
+rdoc_options: []
+require_paths:
+- lib
+required_ruby_version: !ruby/object:Gem::Requirement
+  requirements:
+  - - '>='
+    - !ruby/object:Gem::Version
+      version: '0'
+required_rubygems_version: !ruby/object:Gem::Requirement
+  requirements:
+  - - '>='
+    - !ruby/object:Gem::Version
+      version: '0'
+requirements: []
+rubyforge_project: 
+rubygems_version: 2.4.2
+signing_key: 
+specification_version: 4
+summary: Auth validator
+test_files: []