linzer 0.7.0 → 0.7.1

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: b5767ac6b96b624e2098faa01e7cda512ca5f1530d6331c0a95c8f57a262da3d
-  data.tar.gz: 0ec39dbe4697fd2617770be2937ec062d5a9336ef5365dd3c3b028e541670903
+  metadata.gz: 9d495888382dc17a4fae60d05b853dd0cbb0036119ae725f960471baa6ff0d4b
+  data.tar.gz: a6860cf3dcfb586e1591b0b683c883bbf8a42de941f57ec6a2ba6f8574a5a2dd
 SHA512:
-  metadata.gz: c471b814bc6310ca41f60947df7a5097c738bb79e89720c3e7da0b7e331949b244bb0e030162363eb00bce411d3b2d6735615f3b529cd7e42815a4cee769b828
-  data.tar.gz: 3beaf6ab15820fb61473811d63da3f0bbd58653d62e58f193dd5709dd8e5e7b54914f420dbec61af557dcb9afd8da571ae0ab007ba39f7b19d48324084f30df7
+  metadata.gz: c4d53b9d1102eaa3fc0241938afa86fd194a9ae780233bdabd171190ab9b83958193f5bc28b5bd78fb11a234c3a25c3145ee87e6ac6116f544cb04e73c67a5bd
+  data.tar.gz: 40e9c1e6bf52d944cd1a82b67502a41ae2939852e723143f1b154bab0b984fb9db6d944ecdf56b6845b6419096f4cbcef01ac545b9b9df73fe8ccc6f0489ace9

data/CHANGELOG.md

@@ -1,5 +1,13 @@
 ## [Unreleased]
 
+## [0.7.1] - 2025-05-18
+
+- Introduce specific exception classes for message signing errors
+  and signature verification exceptions (i.e. Linzer::SigningError
+  and Linzer::VerifyError)
+
+- Fix bug in Linzer::HTTP client that prevented it from working with https URLs.
+
 ## [0.7.0] - 2025-05-17
 
 (No changes since the last beta release, this new stable release just

data/lib/linzer/http.rb

@@ -33,6 +33,8 @@ module Linzer
 
       req_uri = URI(uri)
       http = Net::HTTP.new(req_uri.host, req_uri.port)
+
+      http.use_ssl = req_uri.scheme == "https"
       http.set_debug_output($stderr) if options[:debug]
 
       headers    = build_headers(options[:headers] || {})

data/lib/linzer/signer.rb

@@ -27,11 +27,15 @@ module Linzer
 
       def validate(key, message, components)
         msg = "Message cannot be signed with null %s"
-        raise Error.new msg % "value"     if message.nil?
-        raise Error.new msg % "key"       if key.nil?
-        raise Error.new msg % "component" if components.nil?
-
-        validate_components message, components
+        raise SigningError, msg % "value"     if message.nil?
+        raise SigningError, msg % "key"       if key.nil?
+        raise SigningError, msg % "component" if components.nil?
+
+        begin
+          validate_components message, components
+        rescue Error => ex
+          raise SigningError, ex.message, cause: ex
+        end
       end
 
       def populate_parameters(key, options)

data/lib/linzer/verifier.rb

@@ -19,26 +19,35 @@ module Linzer
       private
 
       def validate(message, key, signature, no_older_than: nil)
-        raise Error.new "Message to verify cannot be null"       if message.nil?
-        raise Error.new "Key to verify signature cannot be null" if key.nil?
-        raise Error.new "Signature to verify cannot be null"     if signature.nil?
+        raise VerifyError, "Message to verify cannot be null"       if message.nil?
+        raise VerifyError, "Key to verify signature cannot be null" if key.nil?
+        raise VerifyError, "Signature to verify cannot be null"     if signature.nil?
 
         if !signature.respond_to?(:value) || !signature.respond_to?(:components)
-          raise Error.new "Signature is invalid"
+          raise VerifyError, "Signature is invalid"
         end
 
-        raise Error.new "Signature raw value to cannot be null" if signature.value.nil?
-        raise Error.new "Components cannot be null"             if signature.components.nil?
+        raise VerifyError, "Signature raw value to cannot be null" if signature.value.nil?
+        raise VerifyError, "Components cannot be null"             if signature.components.nil?
 
-        validate_components message, signature.components
+        begin
+          validate_components message, signature.components
+        rescue Error => ex
+          raise VerifyError, ex.message, cause: ex
+        end
 
         return unless no_older_than
-        raise Error.new "Signature created more than #{no_older_than} seconds ago" if signature.older_than?(no_older_than.to_i)
+        old_sig_msg = "Signature created more than #{no_older_than} seconds ago"
+        begin
+          raise VerifyError, old_sig_msg if signature.older_than?(no_older_than.to_i)
+        rescue Error => ex
+          raise VerifyError, ex.message, cause: ex
+        end
       end
 
       def verify_or_fail(key, signature, data)
         return true if key.verify(signature, data)
-        raise Error.new "Failed to verify message: Invalid signature."
+        raise VerifyError, "Failed to verify message: Invalid signature."
       end
     end
   end

data/lib/linzer/version.rb

@@ -1,5 +1,5 @@
 # frozen_string_literal: true
 
 module Linzer
-  VERSION = "0.7.0"
+  VERSION = "0.7.1"
 end

data/lib/linzer.rb

@@ -29,6 +29,10 @@ require_relative "rack/auth/signature"
 module Linzer
   class Error < StandardError; end
 
+  class VerifyError < Error; end
+
+  class SigningError < Error; end
+
   class << self
     include Key::Helper
 

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: linzer
 version: !ruby/object:Gem::Version
-  version: 0.7.0
+  version: 0.7.1
 platform: ruby
 authors:
 - Miguel Landaeta