lyrebird 1.0.0 → 1.0.1

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 61005075359475ff6b492db62c80f7fea1724bb059c03f19a3f9d04c1f37871f
-  data.tar.gz: 0e44c46fe69c8701c7b5441f7a23b6bbf752ad957ae044e5f19d398c01a8db91
+  metadata.gz: a2c22dc89d09728d25d5563a9db0c136b144865ddea516ea71bd1806a4bf0ce2
+  data.tar.gz: 002da134ef786dd04b2f61a3b2f01a2fe43ec4e772081b9d76dd4b4f5788e839
 SHA512:
-  metadata.gz: 1ccd8ff5e0c7a4f441dc275a6231924f8969993c7b670b83a60d01f16e4ebf8fff33ccedffaad21a45dc6bca056d1450c5b6566699f9fd733f71fc9342818bec
-  data.tar.gz: c0ebff2c3cc4134b84fb52327ee41c7d34bd9b2ab3d89ac7a50a3485bc912ca6936ad64388b04253001106a961f7f2caad313b88a2915e86c7bbd4c516eae673
+  metadata.gz: dc069741583e5940e825df140b405fe9c5710632c38927d2fb0baa80c52a4dafcb06170ac72a82259b9708f651e83e2ca11ee1d758d0031c1502f2d068faba57
+  data.tar.gz: 78a80065561c35f30b81a588a9584c173b044064a9b73266385a6708109f0b02952e0acbcbc1d6768d1750ea47ebdcbf346f42dbc7b9e151e0731a43316c995a

data/README.md

@@ -15,6 +15,10 @@ gem "lyrebird", group: :test
 ```ruby
 # test/integration/saml_test.rb
 class SAMLTest < ActionDispatch::IntegrationTest
+  setup do
+    @idp_cert = Lyrebird::Certificate.build
+  end
+
   test "consume creates a session" do
     user = users(:alice)
 
@@ -24,6 +28,7 @@ class SAMLTest < ActionDispatch::IntegrationTest
       r.recipient = saml_consume_url
       r.audience = root_url
       r.name_id = user.email
+      r.sign_with = @idp_cert
 
       r.attributes do |a|
         a.email = user.email
@@ -168,7 +173,6 @@ cert.key          # OpenSSL::PKey::RSA private key
 cert.x509         # OpenSSL::X509::Certificate object
 cert.key_pem      # PEM-encoded private key
 cert.x509_pem     # PEM-encoded certificate
-cert.sign(data)   # Sign data with RSA-SHA256
 cert.base64       # Base64-encoded certificate (for SAML metadata)
 cert.fingerprint  # SHA256 fingerprint
 ```

data/lib/lyrebird/assertion.rb

@@ -28,7 +28,7 @@ module Lyrebird
     end
 
     def document
-      Nokogiri::XML::Document.new.tap do |doc|
+      @document ||= Nokogiri::XML::Document.new.tap do |doc|
         doc.root = root(doc)
       end
     end

data/lib/lyrebird/certificate.rb

@@ -49,10 +49,6 @@ module Lyrebird
       Base64.strict_encode64(@x509.to_der)
     end
 
-    def sign(data)
-      @key.sign("SHA256", data)
-    end
-
     private
 
     def build_x509

data/lib/lyrebird/response.rb

@@ -39,7 +39,7 @@ module Lyrebird
     end
 
     def document
-      Nokogiri::XML::Document.new.tap do |doc|
+      @document ||= Nokogiri::XML::Document.new.tap do |doc|
         doc.root = build_response(doc)
         sign_assertion(doc) if @sign_with && !@encrypt_with
         sign_response(doc) if @sign_with

data/lib/lyrebird/signature.rb

@@ -13,6 +13,7 @@ module Lyrebird
     def sign!
       issuer = @element.at_xpath("saml:Issuer", "saml" => SAML_ASSERTION_NS)
       issuer.add_next_sibling(build_signature)
+      populate_signature_value
       self
     end
 
@@ -52,16 +53,14 @@ module Lyrebird
     def build_signature_value
       @doc.create_element("SignatureValue").tap do |sv|
         sv.namespace = @ds
-        canonical = canonicalize_signed_info
-        sig = @certificate.sign(canonical)
-        sv.content = Base64.strict_encode64(sig)
+        @signature_value = sv
       end
     end
 
-    def canonicalize_signed_info
-      xml = @signed_info.to_xml(save_with: Nokogiri::XML::Node::SaveOptions::AS_XML)
-      xml = xml.sub("<ds:SignedInfo>", "<ds:SignedInfo xmlns:ds=\"#{XMLDSIG_NS}\">")
-      Nokogiri::XML(xml).root.canonicalize(C14N_EXCLUSIVE)
+    def populate_signature_value
+      canonical = @signed_info.canonicalize(C14N_EXCLUSIVE)
+      sig = @certificate.key.sign("SHA256", canonical)
+      @signature_value.content = Base64.strict_encode64(sig)
     end
 
     def build_key_info

data/lib/lyrebird/version.rb

@@ -1,5 +1,5 @@
 # frozen_string_literal: true
 
 module Lyrebird
-  VERSION = "1.0.0"
+  VERSION = "1.0.1"
 end

data/lib/lyrebird.rb

@@ -18,8 +18,6 @@ require_relative "lyrebird/signature"
 require_relative "lyrebird/version"
 
 module Lyrebird
-  class Error < StandardError; end
-
   rails_env = ENV["RAILS_ENV"]&.downcase
   rack_env = ENV["RACK_ENV"]&.downcase
 

data/test/lyrebird/assertion_test.rb

@@ -33,6 +33,11 @@ module Lyrebird
       assert_equal "saml", @root.namespace.prefix
     end
 
+    def test_document_is_memoized
+      assertion = Assertion.new
+      assert_same assertion.document, assertion.document
+    end
+
     def test_root_namespace
       assert_equal SAML_ASSERTION_NS, @root.namespace.href
     end

data/test/lyrebird/certificate_test.rb

@@ -53,13 +53,6 @@ module Lyrebird
       assert @certificate.x509.verify(@certificate.key)
     end
 
-    def test_sign
-      data = "test"
-      signature = @certificate.sign(data)
-      public_key = @certificate.x509.public_key
-      assert public_key.verify("SHA256", signature, data)
-    end
-
     def test_x509_with_custom_subject
       certificate = Certificate.build(cn: "Test", o: "Acme")
       subject = certificate.x509.subject.to_s

data/test/lyrebird/response_test.rb

@@ -100,6 +100,14 @@ module Lyrebird
       assert decoded.include?("<saml:Assertion")
     end
 
+    def test_document_is_memoized
+      assert_same @response.document, @response.document
+    end
+
+    def test_mimic_is_stable
+      assert_equal @response.mimic, @response.mimic
+    end
+
     def test_root_name
       assert_equal "Response", @root.name
       assert_equal "samlp", @root.namespace.prefix

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: lyrebird
 version: !ruby/object:Gem::Version
-  version: 1.0.0
+  version: 1.0.1
 platform: ruby
 authors:
 - Josh
 autorequire:
 bindir: bin
 cert_chain: []
-date: 2026-02-02 00:00:00.000000000 Z
+date: 2026-05-01 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: base64