linzer 0.7.0.beta4 → 0.7.1

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 5cfa8303792377ef25d8a81300b1e22c2e6593237436e152ec04e99176eea1f7
-  data.tar.gz: e2f89b7b4d771a9912000961862bf77cda5ccf2caf40a3906394afa1b1595adc
+  metadata.gz: 9d495888382dc17a4fae60d05b853dd0cbb0036119ae725f960471baa6ff0d4b
+  data.tar.gz: a6860cf3dcfb586e1591b0b683c883bbf8a42de941f57ec6a2ba6f8574a5a2dd
 SHA512:
-  metadata.gz: 3881ae41ea932485f39838bba647f60fce089f740dabe7db7e01d34c368ebaf85ec71788d997d64d9cc662811dd703babd62300f7d02c6a21072c1dafbb45ee5
-  data.tar.gz: 7a9589f81440612f7e3bc959973aa947614c132f67db247e043f911d1653c7621c376ade8005181fa6fc4814e542ec82556bf79ec5f2b0d3ede739d48d4ffeb0
+  metadata.gz: c4d53b9d1102eaa3fc0241938afa86fd194a9ae780233bdabd171190ab9b83958193f5bc28b5bd78fb11a234c3a25c3145ee87e6ac6116f544cb04e73c67a5bd
+  data.tar.gz: 40e9c1e6bf52d944cd1a82b67502a41ae2939852e723143f1b154bab0b984fb9db6d944ecdf56b6845b6419096f4cbcef01ac545b9b9df73fe8ccc6f0489ace9

data/CHANGELOG.md

@@ -1,5 +1,36 @@
 ## [Unreleased]
 
+## [0.7.1] - 2025-05-18
+
+- Introduce specific exception classes for message signing errors
+  and signature verification exceptions (i.e. Linzer::SigningError
+  and Linzer::VerifyError)
+
+- Fix bug in Linzer::HTTP client that prevented it from working with https URLs.
+
+## [0.7.0] - 2025-05-17
+
+(No changes since the last beta release, this new stable release just
+bundles all the features/changes introduced during 0.7.0 beta releases) 
+
+- Introduce Rack::Auth::Signature middleware.
+
+- Refactor and improve Rack::Auth::Signature code organization.
+
+- Do not expose secret material on HMAC SHA-256 key when #inspect method is used.
+
+- Update Rack::Auth::Signature configuration file options.
+
+- Validate and test Rack::Auth::Signature with example Rails and Sinatra apps.
+
+- Refactor to improve Linzer APIs and streamline its usage along with different
+  HTTP libraries. (Issues [#6](https://github.com/nomadium/linzer/issues/6) and
+  [#11](https://github.com/nomadium/linzer/issues/11))
+
+- Provide integration with http.rb gem to allow signing outgoing HTTP requests.
+
+- Add simple HTTP client module.
+
 ## [0.7.0.beta4] - 2025-05-17
 
 - Provide integration with http.rb gem to allow signing outgoing HTTP requests.

data/lib/linzer/http.rb

@@ -33,6 +33,8 @@ module Linzer
 
       req_uri = URI(uri)
       http = Net::HTTP.new(req_uri.host, req_uri.port)
+
+      http.use_ssl = req_uri.scheme == "https"
       http.set_debug_output($stderr) if options[:debug]
 
       headers    = build_headers(options[:headers] || {})

data/lib/linzer/signer.rb

@@ -27,11 +27,15 @@ module Linzer
 
       def validate(key, message, components)
         msg = "Message cannot be signed with null %s"
-        raise Error.new msg % "value"     if message.nil?
-        raise Error.new msg % "key"       if key.nil?
-        raise Error.new msg % "component" if components.nil?
-
-        validate_components message, components
+        raise SigningError, msg % "value"     if message.nil?
+        raise SigningError, msg % "key"       if key.nil?
+        raise SigningError, msg % "component" if components.nil?
+
+        begin
+          validate_components message, components
+        rescue Error => ex
+          raise SigningError, ex.message, cause: ex
+        end
       end
 
       def populate_parameters(key, options)

data/lib/linzer/verifier.rb

@@ -19,26 +19,35 @@ module Linzer
       private
 
       def validate(message, key, signature, no_older_than: nil)
-        raise Error.new "Message to verify cannot be null"       if message.nil?
-        raise Error.new "Key to verify signature cannot be null" if key.nil?
-        raise Error.new "Signature to verify cannot be null"     if signature.nil?
+        raise VerifyError, "Message to verify cannot be null"       if message.nil?
+        raise VerifyError, "Key to verify signature cannot be null" if key.nil?
+        raise VerifyError, "Signature to verify cannot be null"     if signature.nil?
 
         if !signature.respond_to?(:value) || !signature.respond_to?(:components)
-          raise Error.new "Signature is invalid"
+          raise VerifyError, "Signature is invalid"
         end
 
-        raise Error.new "Signature raw value to cannot be null" if signature.value.nil?
-        raise Error.new "Components cannot be null"             if signature.components.nil?
+        raise VerifyError, "Signature raw value to cannot be null" if signature.value.nil?
+        raise VerifyError, "Components cannot be null"             if signature.components.nil?
 
-        validate_components message, signature.components
+        begin
+          validate_components message, signature.components
+        rescue Error => ex
+          raise VerifyError, ex.message, cause: ex
+        end
 
         return unless no_older_than
-        raise Error.new "Signature created more than #{no_older_than} seconds ago" if signature.older_than?(no_older_than.to_i)
+        old_sig_msg = "Signature created more than #{no_older_than} seconds ago"
+        begin
+          raise VerifyError, old_sig_msg if signature.older_than?(no_older_than.to_i)
+        rescue Error => ex
+          raise VerifyError, ex.message, cause: ex
+        end
       end
 
       def verify_or_fail(key, signature, data)
         return true if key.verify(signature, data)
-        raise Error.new "Failed to verify message: Invalid signature."
+        raise VerifyError, "Failed to verify message: Invalid signature."
       end
     end
   end

data/lib/linzer/version.rb

@@ -1,5 +1,5 @@
 # frozen_string_literal: true
 
 module Linzer
-  VERSION = "0.7.0.beta4"
+  VERSION = "0.7.1"
 end

data/lib/linzer.rb

@@ -29,6 +29,10 @@ require_relative "rack/auth/signature"
 module Linzer
   class Error < StandardError; end
 
+  class VerifyError < Error; end
+
+  class SigningError < Error; end
+
   class << self
     include Key::Helper
 

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: linzer
 version: !ruby/object:Gem::Version
-  version: 0.7.0.beta4
+  version: 0.7.1
 platform: ruby
 authors:
 - Miguel Landaeta
@@ -239,7 +239,7 @@ required_rubygems_version: !ruby/object:Gem::Requirement
     - !ruby/object:Gem::Version
       version: '0'
 requirements: []
-rubygems_version: 3.6.8
+rubygems_version: 3.6.7
 specification_version: 4
 summary: An implementation of HTTP Messages Signatures (RFC9421)
 test_files: []