line-bot-api 0.1.0 → 0.1.1

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA1:
-  metadata.gz: 0cd22ba8ed93ba3f1577f70a5095439755dda529
-  data.tar.gz: 75eae8e81a15b2e6d950487dd18516aea4fd95f9
+  metadata.gz: 53328dc34338632959e4d41e639b22fb47c0c2b5
+  data.tar.gz: ce8777fa1029e0ab4094e86591684795911f0089
 SHA512:
-  metadata.gz: dce0e680763a9d4929580cdb9e0fb75ee7591071d95d2687496e696dbc5ffe666e51644e615c94a31934ffe53e7c66e1e73739fe826dae62471678e114163842
-  data.tar.gz: 7a9538fb64eed37b366366658af3707dce8664e3b26967db41809c2bd0379ec476a60f2359e97f8eb029f6c0c963cd802621492b38e67fd0be6086b59912168b
+  metadata.gz: c9edcef377b3c0cbc1a70260eec62addfb93b4bf4353ca19b45ffc0545008b328369d8428fb0d36b776914c6ca933eff6cc4296b56c861d6f520b92aa02554a5
+  data.tar.gz: b577b38f12b817325958a474578010c404c9069d93409d0d32e6593210e50f5b76c2df33656c32a62498483449aa30d977e535c589ccd009ae917771632c83e0

data/README.md

@@ -1,6 +1,24 @@
-# LINE::Bot::API
+# Line::Bot::API
 
-LINE::Bot::API - SDK of the LINE BOT API Trial for Ruby
+Line::Bot::API - SDK of the LINE BOT API Trial for Ruby
+
+[![Gem-version](https://img.shields.io/gem/v/line-bot-api.svg)](https://rubygems.org/gems/) [![Build Status](https://travis-ci.org/line/line-bot-sdk-ruby.svg?branch=master)](https://travis-ci.org/line/line-bot-sdk-ruby)
+
+## Installation
+
+Add this line to your application's Gemfile:
+
+```ruby
+gem 'line-bot-api'
+```
+
+And then execute:
+
+    $ bundle
+
+Or install it yourself as:
+
+    $ gem install line-bot-api
 
 ## Configuration
 
@@ -201,8 +219,7 @@ Get the preview image file which was sent by user.
 ```
 user_profile = client.get_user_profile("1234567")
 user_profile #=> [Line::Bot::Response::User::Profile]
-contacts = user_profile.contacts
-contacts #=> [Array] Line::Bot::Response::User::Contacts
+user_profile.contacts #=> [Array] Line::Bot::Response::User::Contact
 ```
 
 ## License

data/lib/line/bot/api/version.rb

@@ -1,7 +1,7 @@
 module Line
   module Bot
     module API
-      VERSION = "0.1.0"
+      VERSION = "0.1.1"
     end
   end
 end

data/lib/line/bot/client.rb

@@ -241,7 +241,26 @@ module Line
         hash = OpenSSL::HMAC::digest(OpenSSL::Digest::SHA256.new, channel_secret, content)
         signature = Base64.strict_encode64(hash)
 
-        channel_signature == signature
+        variable_secure_compare(channel_signature, signature)
+      end
+
+      private
+      # Constant time string comparison.
+      #
+      # via timing attacks.
+      # reference: https://github.com/rails/rails/blob/master/activesupport/lib/active_support/security_utils.rb
+      def variable_secure_compare(a, b)
+        secure_compare(::Digest::SHA256.hexdigest(a), ::Digest::SHA256.hexdigest(b))
+      end
+
+      def secure_compare(a, b)
+        return false unless a.bytesize == b.bytesize
+
+        l = a.unpack "C#{a.bytesize}"
+
+        res = 0
+        b.each_byte { |byte| res |= byte ^ l.shift }
+        res == 0
       end
     end
 

data/lib/line/bot/receive/message.rb

@@ -2,7 +2,7 @@ module Line
   module Bot
     module Receive
       class Message
-        attr_reader :id, :from_mid, :to_mid, :from_channel_id, :to_channel_id, :event_type, :content
+        attr_reader :id, :from_mid, :to_mid, :from_channel_id, :to_channel_id, :event_type, :created_time, :content
 
         def initialize(env)
           @id = env['content']['id']
@@ -13,6 +13,10 @@ module Line
           @to_channel_id = env['toChannel']
 
           @event_type = env['eventType']
+
+          (time, usec) = env['content']['createdTime'].to_i.divmod(1000)
+          @created_time = Time.at(time, usec)
+
           @content = create_content(env['content'])
         end
 

data/line-bot-api.gemspec

@@ -18,6 +18,8 @@ Gem::Specification.new do |spec|
   spec.test_files    = spec.files.grep(%r{^(test|spec|features)/})
   spec.require_paths = ["lib"]
 
+  spec.required_ruby_version     = '>= 2.0.0'
+
   spec.add_dependency 'rack', '~> 1.6.4'
 
   spec.add_development_dependency "bundler", "~> 1.11"

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: line-bot-api
 version: !ruby/object:Gem::Version
-  version: 0.1.0
+  version: 0.1.1
 platform: ruby
 authors:
 - LINE Corporation
@@ -91,13 +91,14 @@ files:
 - CODE_OF_CONDUCT.md
 - LICENSE
 - README.md
-- line-bot-api.gemspec
+- lib/line/bot.rb
 - lib/line/bot/api/errors.rb
 - lib/line/bot/api/version.rb
 - lib/line/bot/builder/multiple_message.rb
 - lib/line/bot/builder/rich_message.rb
 - lib/line/bot/client.rb
 - lib/line/bot/event_type.rb
+- lib/line/bot/message.rb
 - lib/line/bot/message/audio.rb
 - lib/line/bot/message/base.rb
 - lib/line/bot/message/content_type.rb
@@ -106,19 +107,18 @@ files:
 - lib/line/bot/message/sticker.rb
 - lib/line/bot/message/text.rb
 - lib/line/bot/message/video.rb
-- lib/line/bot/message.rb
+- lib/line/bot/operation.rb
 - lib/line/bot/operation/add_friend.rb
 - lib/line/bot/operation/base.rb
 - lib/line/bot/operation/block_account.rb
 - lib/line/bot/operation/op_type.rb
-- lib/line/bot/operation.rb
 - lib/line/bot/receive/message.rb
 - lib/line/bot/receive/operation.rb
 - lib/line/bot/receive/request.rb
 - lib/line/bot/request.rb
 - lib/line/bot/response/user/contact.rb
 - lib/line/bot/response/user/profile.rb
-- lib/line/bot.rb
+- line-bot-api.gemspec
 homepage: https://github.com/line/line-bot-sdk-ruby
 licenses:
 - Apache License, Version 2.0
@@ -131,7 +131,7 @@ required_ruby_version: !ruby/object:Gem::Requirement
   requirements:
   - - '>='
     - !ruby/object:Gem::Version
-      version: '0'
+      version: 2.0.0
 required_rubygems_version: !ruby/object:Gem::Requirement
   requirements:
   - - '>='
@@ -139,9 +139,8 @@ required_rubygems_version: !ruby/object:Gem::Requirement
       version: '0'
 requirements: []
 rubyforge_project: 
-rubygems_version: 2.0.14.1
+rubygems_version: 2.4.8
 signing_key: 
 specification_version: 4
 summary: LINE::Bot::API - SDK of the LINE BOT API
 test_files: []
-has_rdoc: