istox 0.1.49 → 0.1.50

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 03e23c188c24e12bb7379c507bc748e2175c0a6c514be4a428da848beea2cfb0
-  data.tar.gz: 3e97d011a7573807eb0ef06ba2219dc45ae1ceb29d2dc1796a6716fa21365341
+  metadata.gz: a8efa94470b6ef77ad498221a04fe70940441f4788785f1c9ff23eedc8d82986
+  data.tar.gz: f480a1a25dd92b8a14d1c764b253a2d076d639cd2eed513108316056b3a204dd
 SHA512:
-  metadata.gz: 4d4b5646f2be32172e92e57c820382cd93443fbb512d609bbd63aafafe8184589568f53f6d46aae5f97ee641f4ef9b1701517ce99923c54c35d2f076e1e5bbb3
-  data.tar.gz: 011cea9f9aa15d6d3a3771f38f5b249e46cd79b27d2546ca8a2c828147f8951265471ab0275379d0b55efca7fbae76fb042e31049cdbf0521985b3807bf52934
+  metadata.gz: 87e64ac79e3087424f0a975ff99382158fb0c664f3a888c8bf01b7682387ff5b106132515c5cd2dc9b589379baced2d49db98fb6a5ad5e8a057b332540ca5f89
+  data.tar.gz: 9a49bac856ee1081020a15d581b719946706d273021c4b3d745a7b88f31d6facf9d32c42a811b02f3b747b47f09f85e809859e6b471b31d0515ffc50642472d0

data/README.md

@@ -5,3 +5,5 @@ to publish new version
 2. gem build istox
 
 3. gem push istox-<VERSION>.gem
+
+4. in local repo: bundle install istox@<VERSION> --full-index

data/istox.gemspec

@@ -33,6 +33,7 @@ Gem::Specification.new do |spec|
 
   spec.add_dependency "bunny", ">= 2.12.0"
   spec.add_dependency "gruf"
+  spec.add_dependency 'vault', '~> 0.1'
   spec.add_dependency "paranoia", "~> 2.2"
   spec.add_dependency "graphlient"
   spec.add_development_dependency "bundler", "~> 1.16"

data/lib/istox/helpers/vault.rb

@@ -0,0 +1,87 @@
+require 'vault'
+
+module Istox
+  module Vault
+    module TOTP
+      class << self
+
+        def create(sid)
+          Rails.logger.debug { "Generate vault TOTP for key #{totp_key(sid).inspect}" }
+
+          write_data(totp_key(sid),
+                     generate: true,
+                     issuer: ENV.fetch('APP_NAME', 'ISTOX'),
+                     account_name: sid,
+                     qr_size: 300)
+        end
+
+        def generate_code(sid)
+          Rails.logger.debug { "Generate 6-digit OTP code: key #{totp_code_key(sid)}" }
+          code = read_data(totp_code_key(sid)).data[:code]
+          code
+        end
+
+        def validate?(sid, code)
+          return false unless exist?(sid)
+          Rails.logger.debug { "Validate TOTP code: key #{totp_code_key(sid)}, code: #{code}" }
+          result = write_data(totp_code_key(sid), code: code).data[:valid]
+
+          unless result
+            code = read_data(totp_code_key(sid)).data[:code]
+            Rails.logger.debug { "Code is not valid, it should be #{code}" }
+          end
+
+          result
+        end
+
+        private
+
+        def read_data(key)
+          vault.read(key)
+        end
+
+        def write_data(key, params)
+          Vault.logical.write(key, params)
+        end
+
+        def totp_key(sid)
+          "totp/keys/#{sid}"
+        end
+
+        def totp_code_key(sid)
+          "totp/code/#{sid}"
+        end
+      end
+    end
+
+    class << self
+      def initialize(secret_key, file_location)
+        Vault.configure do |config|
+          config.address = secret_key
+
+          if File.exist?(file_location)
+            token = File.read(file_location).strip
+            config.token = token
+            config.ssl_verify = false
+            config.timeout = 60
+          else
+            Rails.logger.info 'Vault token not found, OTP will not be able to use'
+          end
+        end
+      end
+    end
+
+    def get_otp(sid)
+      Vault::TOTP.create(sid)
+      otp = Vault::TOTP.generate_code(sid)
+
+      return otp
+    end
+
+    def validate_otp(sid, otp)
+      return Vault::TOTP.validate?(sid, otp)
+    rescue => e
+      return false
+    end
+  end
+end

data/lib/istox/version.rb

@@ -1,3 +1,3 @@
 module Istox
-  VERSION = "0.1.49"
+  VERSION = "0.1.50"
 end

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: istox
 version: !ruby/object:Gem::Version
-  version: 0.1.49
+  version: 0.1.50
 platform: ruby
 authors:
 - Siong Leng
 autorequire: 
 bindir: exe
 cert_chain: []
-date: 2019-06-12 00:00:00.000000000 Z
+date: 2019-06-13 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: bunny
@@ -38,6 +38,20 @@ dependencies:
     - - ">="
       - !ruby/object:Gem::Version
         version: '0'
+- !ruby/object:Gem::Dependency
+  name: vault
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '0.1'
+  type: :runtime
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '0.1'
 - !ruby/object:Gem::Dependency
   name: paranoia
   requirement: !ruby/object:Gem::Requirement
@@ -232,6 +246,7 @@ files:
 - lib/istox/helpers/message_service.rb
 - lib/istox/helpers/order_book.rb
 - lib/istox/helpers/publisher.rb
+- lib/istox/helpers/vault.rb
 - lib/istox/interfaces/chainhub/transaction.rb
 - lib/istox/migrations/create_blockchain_receipts.rb
 - lib/istox/models/blockchain_receipt.rb