m2m_keygen 0.4.9 → 0.5.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 9a3fa41ea7545a0aed4eadb8591b68304db951ca1b8030b7c0e15468426665ee
-  data.tar.gz: 7f552ef4e18ac42fe8ae5536624195523ae1fe00f7cb1bcdc3590670acfbf6ed
+  metadata.gz: b10fd7bdd2b0d18a6a4eb3884234067c9301279d9ed67d00f62d3b6741b1e54d
+  data.tar.gz: 9458d8214b797f5b67e0f873e47989979d2820c239d7496f7ea95c92b9e958c0
 SHA512:
-  metadata.gz: cdf621ceda2a4348f6079d0774e3844380851bbef2a64b51b09d46eb55c038f1b04ac2856b5b9ecfb3d814e48d8720ac373c571b495d9db1826c270bf59cc28a
-  data.tar.gz: 21d0468ceeed8b9fe5159e19a5f54d838829c74079cbfebbd82e209de5e4a695e4f988760649e95cba11b9df8cfc2c07f9c53db9c6a08384dc59bf095a32e8a3
+  metadata.gz: ce0d9d928ae0e158eb2e75696fb2cdcd57c69fdba591c318480e21d0f73252a8711753a14ccf00be623ca3e63cf50e84f7882c21197469a01f32de8a4daa38a3
+  data.tar.gz: 55aeed0f80d63816313f8abd652e25ebec8dbd86bb5b7e8cbe3380fca5df7300a1c58c0767c3736dc4bad6aaf7466d2f47b4c77d036cd5a80e0afd4ff9af6cc7

data/.overcommit.yml

@@ -41,22 +41,19 @@ PreCommit:
     enabled: true
   BundleAudit:
     enabled: true
-  Prettier:
+  SyntaxTree:
     enabled: true
-    required_executable: './bin/prettirun'
+    required_executable: './bin/streerun'
   Sorbet:
     enabled: true
     required_executable: './bin/sorbet_check'
-  Documentation:
-    enabled: true
-    required_executable: './bin/generate_and_add_documentation'
 PrePush:
   RSpec:
     enabled: true
     command: ['bundle', 'exec', 'rspec', '-f', 'p'] # Invoke within Bundler context
-  Prettier:
+  SyntaxTree:
     enabled: true
-    required_executable: './bin/prettirun'
+    required_executable: './bin/streerun'
   Rubocop:
     enabled: true
     required_executable: './bin/ruborun'

data/.rubocop.yml

@@ -1,36 +1,39 @@
 inherit_from:
   - http://relaxed.ruby.style/rubocop.yml
 
-inherit_gem:
-  prettier: rubocop.yml
-
 require:
   - rubocop-faker
   - rubocop-performance
   - rubocop-sorbet
 
+Layout:
+  Enabled: false
+
+Style:
+  Enabled: false
+
+# `sign`/`validate` are documented public API methods that return booleans;
+# renaming them to end with `?` would be a breaking change.
+Naming/PredicateMethod:
+  Enabled: false
+
 AllCops:
   NewCops: enable
-  TargetRubyVersion: 3.0
+  TargetRubyVersion: 3.3
   DisplayStyleGuide: true
   DisplayCopNames: true
   SuggestExtensions: false
   Exclude:
-    - 'bin/*'
-    - 'vendor/**/*'
-    - 'node_modules/**/*'
+    - "bin/*"
+    - "vendor/**/*"
 
 Metrics/BlockLength:
   Exclude:
-    - 'spec/**/*.rb'
-    - 'Guardfile'
-    - 'config/environments/*.rb'
-    - 'lib/tasks/*.rake'
-    - 'm2m_keygen.gemspec'
-
-### Prettier
-Style:
-  Enabled: false
+    - "spec/**/*.rb"
+    - "Guardfile"
+    - "config/environments/*.rb"
+    - "lib/tasks/*.rake"
+    - "m2m_keygen.gemspec"
 
 Gemspec/RequiredRubyVersion:
   Enabled: false

data/.ruby-version

@@ -1 +1 @@
-3.2.2
+3.4.7

data/.streerc

@@ -0,0 +1 @@
+--plugins=plugin/single_quotes,plugin/trailing_comma

data/.tool-versions

@@ -1 +1 @@
-ruby 3.2.2
+ruby 3.4.7

data/CHANGELOG.md

@@ -7,6 +7,63 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 
 ## [Unreleased]
 
+## [0.5.0] - 2026-07-03
+
+**This release replaces the signature scheme with a new, incompatible one
+(`m2m-keygen/2`). Senders and receivers must upgrade together. See
+[docs/MIGRATING.md](docs/MIGRATING.md).**
+
+### Added
+
+- New `m2m-keygen/2` signature scheme: the HMAC now covers the request's wire
+  bytes (method, path, byte-order-sorted query, raw body) length-prefixed, plus
+  a signed expiry and nonce. This closes the v1 canonicalization collisions
+  (unescaped delimiters, nil/empty ambiguity, type confusion, field boundaries).
+- Anti-replay: a signed per-request nonce plus a pluggable `NonceStore`
+  (`Memory` for single-process, `Disabled` for an explicit opt-out), with
+  reference `Redis`/`Postgres` stores under `examples/nonce_store/`.
+- `RequestSigner`: a client helper that builds the query and the
+  signature/expiry/nonce headers for an outgoing request.
+- `docs/SPEC.md`: the language-agnostic wire-format spec and golden vectors —
+  the contract the TypeScript sibling must reproduce.
+- CI now tests Ruby 3.3/3.4/4.0 and a Rack 2 / Rack 3 compatibility matrix.
+
+### Changed
+
+- **BREAKING** `Signature#sign` / `#validate` take
+  `verb:`/`path:`/`expiry:`/`nonce:`/`query:`/`body:` (no longer a `params:`
+  hash).
+- **BREAKING** `RackValidator.new` now requires a `nonce_store:` (no default —
+  the anti-replay choice must be explicit), and reads the expiry and nonce from
+  `X-M2M-Expiry` / `X-M2M-Nonce` headers.
+- Require Ruby `>= 3.3` (was `>= 2.7`); bind runtime deps
+  (`rack (>= 2.2, < 4.0)`, `sorbet-runtime (>= 0.5)`, `zeitwerk (>= 2.6, < 3.0)`).
+- Replace Prettier with Syntax Tree and Solargraph with ruby-lsp; upgrade dev
+  dependencies (RuboCop 1.88, Sorbet 0.6, RSpec 3.13, Tapioca 0.19, …) and
+  Bundler 4.
+
+### Removed
+
+- **BREAKING** `ParamsEncoder` (replaced by `Canonicalizer`) and the v1 hash-based
+  signing input.
+- Committed YARD HTML documentation and the Ruby 2.7 constant-time comparison
+  fallback.
+
+### Security
+
+- Real replay protection: signed nonces enforced through the `NonceStore`
+  (the receiver fails closed on a missing nonce unless replay protection is
+  explicitly disabled).
+- `Signature` no longer exposes the secret through a public reader and masks it
+  in `#inspect`.
+- Update dependencies to clear all known advisories (rexml, concurrent-ruby,
+  yard, …).
+
+### Fixed
+
+- Restore the published gem metadata (homepage, source code, changelog and bug
+  tracker URIs) that was previously overwritten.
+
 ## [0.4.9] - 2026-07-01
 
 ### Added
@@ -91,7 +148,9 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 
 - Basic skeleton for gem
 
-[unreleased]: https://github.com/zaratan/m2m_keygen_ruby/compare/v0.4.8...HEAD
+[unreleased]: https://github.com/zaratan/m2m_keygen_ruby/compare/v0.5.0...HEAD
+[0.5.0]: https://github.com/zaratan/m2m_keygen_ruby/releases/tag/v0.5.0
+[0.4.9]: https://github.com/zaratan/m2m_keygen_ruby/releases/tag/v0.4.9
 [0.4.8]: https://github.com/zaratan/m2m_keygen_ruby/releases/tag/v0.4.8
 [0.4.7]: https://github.com/Billcorporate/m2m_keygen_ruby/releases/tag/v0.4.7
 [0.4.6]: https://github.com/Billcorporate/m2m_keygen_ruby/releases/tag/v0.4.6

data/Gemfile

@@ -12,7 +12,6 @@ group :development do
   gem 'faker'
   gem 'guard-rspec', require: false
   gem 'overcommit', require: false
-  gem 'prettier', require: false
   gem 'pry-byebug'
   gem 'rake', '>= 13.0'
   gem 'rspec', '>= 3.0'
@@ -21,9 +20,10 @@ group :development do
   gem 'rubocop-faker', require: false
   gem 'rubocop-performance', require: false
   gem 'rubocop-sorbet', require: false
+  gem 'ruby-lsp', require: false
   gem 'simplecov', require: false
-  gem 'solargraph', require: false
   gem 'sorbet', require: false
+  gem 'syntax_tree', require: false
   gem 'tapioca', require: false
   gem 'yard', require: false
   gem 'yard-sorbet', require: false

data/Gemfile.lock

@@ -1,42 +1,39 @@
 PATH
   remote: .
   specs:
-    m2m_keygen (0.4.9)
-      rack
-      sorbet-runtime
-      zeitwerk (>= 2.6)
+    m2m_keygen (0.5.0)
+      rack (>= 2.2, < 4.0)
+      sorbet-runtime (>= 0.5)
+      zeitwerk (>= 2.6, < 3.0)
 
 GEM
   remote: https://rubygems.org/
   specs:
-    activesupport (7.0.8)
-      concurrent-ruby (~> 1.0, >= 1.0.2)
-      i18n (>= 1.6, < 2)
-      minitest (>= 5.1)
-      tzinfo (~> 2.0)
-    ast (2.4.2)
-    backport (1.2.0)
-    base64 (0.1.1)
-    benchmark (0.2.1)
-    bundler-audit (0.9.1)
-      bundler (>= 1.2.0, < 3)
+    ast (2.4.3)
+    benchmark (0.5.0)
+    bundler-audit (0.9.3)
+      bundler (>= 1.2.0)
       thor (~> 1.0)
-    byebug (11.1.3)
-    childprocess (4.1.0)
+    byebug (13.0.0)
+      reline (>= 0.6.0)
+    childprocess (5.1.0)
+      logger (~> 1.5)
     coderay (1.1.3)
-    concurrent-ruby (1.2.2)
-    diff-lcs (1.5.0)
-    docile (1.4.0)
-    dotenv (2.8.1)
-    e2mmap (0.1.0)
-    erubi (1.12.0)
-    faker (3.2.1)
+    concurrent-ruby (1.3.7)
+    diff-lcs (1.6.2)
+    docile (1.4.1)
+    dotenv (3.2.0)
+    erubi (1.13.1)
+    faker (3.8.0)
       i18n (>= 1.8.11, < 2)
-    ffi (1.16.3)
-    formatador (1.1.0)
-    guard (2.18.1)
+    ffi (1.17.4-arm64-darwin)
+    ffi (1.17.4-x86_64-linux-gnu)
+    formatador (1.2.3)
+      reline
+    guard (2.20.1)
       formatador (>= 0.2.4)
       listen (>= 2.7, < 4.0)
+      logger (~> 1.6)
       lumberjack (>= 1.0.12, < 2.0)
       nenv (~> 0.1)
       notiffany (~> 0.0)
@@ -48,174 +45,154 @@ GEM
       guard (~> 2.1)
       guard-compat (~> 1.1)
       rspec (>= 2.99.0, < 4.0)
-    haml (6.2.3)
-      temple (>= 0.8.2)
-      thor
-      tilt
-    i18n (1.14.1)
+    i18n (1.15.2)
       concurrent-ruby (~> 1.0)
     iniparse (1.5.0)
-    jaro_winkler (1.5.6)
-    json (2.6.3)
-    kramdown (2.4.0)
-      rexml
-    kramdown-parser-gfm (1.1.0)
-      kramdown (~> 2.0)
-    language_server-protocol (3.17.0.3)
-    listen (3.8.0)
+    io-console (0.8.2)
+    json (2.20.0)
+    language_server-protocol (3.17.0.6)
+    lint_roller (1.1.0)
+    listen (3.10.0)
+      logger
       rb-fsevent (~> 0.10, >= 0.10.3)
       rb-inotify (~> 0.9, >= 0.9.10)
-    lumberjack (1.2.9)
-    method_source (1.0.0)
-    minitest (5.20.0)
+    logger (1.7.0)
+    lumberjack (1.4.2)
+    method_source (1.1.0)
     nenv (0.3.0)
     netrc (0.11.0)
-    nokogiri (1.15.4-arm64-darwin)
-      racc (~> 1.4)
-    nokogiri (1.15.4-x86_64-linux)
-      racc (~> 1.4)
     notiffany (0.1.3)
       nenv (~> 0.1)
       shellany (~> 0.0)
-    overcommit (0.60.0)
-      childprocess (>= 0.6.3, < 5)
+    overcommit (0.71.0)
+      childprocess (>= 0.6.3, < 6)
       iniparse (~> 1.4)
-      rexml (~> 3.2)
-    parallel (1.23.0)
-    parser (3.2.2.4)
+      rexml (>= 3.3.9)
+    parallel (2.1.0)
+    parser (3.3.11.1)
       ast (~> 2.4.1)
       racc
-    prettier (4.0.2)
-      syntax_tree (>= 4.0.1)
-      syntax_tree-haml (>= 2.0.0)
-      syntax_tree-rbs (>= 0.2.0)
     prettier_print (1.2.1)
-    pry (0.14.2)
+    prism (1.9.0)
+    pry (0.16.0)
       coderay (~> 1.1)
       method_source (~> 1.0)
-    pry-byebug (3.10.1)
-      byebug (~> 11.0)
-      pry (>= 0.13, < 0.15)
-    racc (1.7.1)
+      reline (>= 0.6.0)
+    pry-byebug (3.12.0)
+      byebug (~> 13.0)
+      pry (>= 0.13, < 0.17)
+    racc (1.8.1)
     rack (3.2.6)
     rainbow (3.1.1)
-    rake (13.0.6)
+    rake (13.4.2)
     rb-fsevent (0.11.2)
-    rb-inotify (0.10.1)
+    rb-inotify (0.11.1)
       ffi (~> 1.0)
-    rbi (0.1.1)
-      sorbet-runtime (>= 0.5.9204)
-      yarp (>= 0.11.0)
-    rbs (2.8.4)
-    regexp_parser (2.8.1)
-    reverse_markdown (2.1.1)
-      nokogiri
-    rexml (3.2.6)
-    rspec (3.12.0)
-      rspec-core (~> 3.12.0)
-      rspec-expectations (~> 3.12.0)
-      rspec-mocks (~> 3.12.0)
-    rspec-core (3.12.2)
-      rspec-support (~> 3.12.0)
-    rspec-expectations (3.12.3)
+    rbi (0.3.14)
+      prism (~> 1.0)
+      rbs (>= 4.0.1)
+    rbs (4.0.3)
+      logger
+      prism (>= 1.6.0)
+      tsort
+    regexp_parser (2.12.0)
+    reline (0.6.3)
+      io-console (~> 0.5)
+    require-hooks (0.4.0)
+    rexml (3.4.4)
+    rspec (3.13.2)
+      rspec-core (~> 3.13.0)
+      rspec-expectations (~> 3.13.0)
+      rspec-mocks (~> 3.13.0)
+    rspec-core (3.13.6)
+      rspec-support (~> 3.13.0)
+    rspec-expectations (3.13.5)
       diff-lcs (>= 1.2.0, < 2.0)
-      rspec-support (~> 3.12.0)
-    rspec-mocks (3.12.6)
+      rspec-support (~> 3.13.0)
+    rspec-mocks (3.13.8)
       diff-lcs (>= 1.2.0, < 2.0)
-      rspec-support (~> 3.12.0)
-    rspec-support (3.12.1)
-    rspec_in_context (1.1.0.3)
-      activesupport (> 2.0)
-      rspec (> 3.0)
-    rubocop (1.56.4)
-      base64 (~> 0.1.1)
+      rspec-support (~> 3.13.0)
+    rspec-support (3.13.7)
+    rspec_in_context (1.2.2)
+      rspec (~> 3.0)
+    rubocop (1.88.1)
       json (~> 2.3)
-      language_server-protocol (>= 3.17.0)
-      parallel (~> 1.10)
-      parser (>= 3.2.2.3)
+      language_server-protocol (~> 3.17.0.2)
+      lint_roller (~> 1.1.0)
+      parallel (>= 1.10)
+      parser (>= 3.3.0.2)
       rainbow (>= 2.2.2, < 4.0)
-      regexp_parser (>= 1.8, < 3.0)
-      rexml (>= 3.2.5, < 4.0)
-      rubocop-ast (>= 1.28.1, < 2.0)
+      regexp_parser (>= 2.9.3, < 3.0)
+      rubocop-ast (>= 1.49.0, < 2.0)
       ruby-progressbar (~> 1.7)
-      unicode-display_width (>= 2.4.0, < 3.0)
-    rubocop-ast (1.29.0)
-      parser (>= 3.2.1.0)
-    rubocop-faker (1.1.0)
+      unicode-display_width (>= 2.4.0, < 4.0)
+    rubocop-ast (1.49.1)
+      parser (>= 3.3.7.2)
+      prism (~> 1.7)
+    rubocop-faker (1.3.0)
       faker (>= 2.12.0)
-      rubocop (>= 0.82.0)
-    rubocop-performance (1.19.1)
-      rubocop (>= 1.7.0, < 2.0)
-      rubocop-ast (>= 0.4.0)
-    rubocop-sorbet (0.7.4)
-      rubocop (>= 0.90.0)
+      lint_roller (~> 1.1)
+      rubocop (>= 1.72.1)
+    rubocop-performance (1.26.1)
+      lint_roller (~> 1.1)
+      rubocop (>= 1.75.0, < 2.0)
+      rubocop-ast (>= 1.47.1, < 2.0)
+    rubocop-sorbet (0.12.0)
+      lint_roller
+      rubocop (>= 1.75.2)
+    ruby-lsp (0.26.9)
+      language_server-protocol (~> 3.17.0)
+      prism (>= 1.2, < 2.0)
+      rbs (>= 3, < 5)
     ruby-progressbar (1.13.0)
+    rubydex (0.2.7-arm64-darwin)
+    rubydex (0.2.7-x86_64-linux)
     shellany (0.0.1)
     simplecov (0.22.0)
       docile (~> 1.1)
       simplecov-html (~> 0.11)
       simplecov_json_formatter (~> 0.1)
-    simplecov-html (0.12.3)
+    simplecov-html (0.13.2)
     simplecov_json_formatter (0.1.4)
-    solargraph (0.49.0)
-      backport (~> 1.2)
-      benchmark
-      bundler (~> 2.0)
-      diff-lcs (~> 1.4)
-      e2mmap
-      jaro_winkler (~> 1.5)
-      kramdown (~> 2.3)
-      kramdown-parser-gfm (~> 1.1)
-      parser (~> 3.0)
-      rbs (~> 2.0)
-      reverse_markdown (~> 2.0)
-      rubocop (~> 1.38)
-      thor (~> 1.0)
-      tilt (~> 2.0)
-      yard (~> 0.9, >= 0.9.24)
-    sorbet (0.5.11062)
-      sorbet-static (= 0.5.11062)
-    sorbet-runtime (0.5.11062)
-    sorbet-static (0.5.11062-universal-darwin)
-    sorbet-static (0.5.11062-x86_64-linux)
-    sorbet-static-and-runtime (0.5.11062)
-      sorbet (= 0.5.11062)
-      sorbet-runtime (= 0.5.11062)
-    spoom (1.2.4)
+    sorbet (0.6.13323)
+      sorbet-static (= 0.6.13323)
+    sorbet-runtime (0.6.13323)
+    sorbet-static (0.6.13323-universal-darwin)
+    sorbet-static (0.6.13323-x86_64-linux)
+    sorbet-static-and-runtime (0.6.13323)
+      sorbet (= 0.6.13323)
+      sorbet-runtime (= 0.6.13323)
+    spoom (1.8.2)
       erubi (>= 1.10.0)
+      prism (>= 0.28.0)
+      rbi (>= 0.3.14)
+      rbs (>= 4.0.0.dev.5)
+      rexml (>= 3.2.6)
       sorbet-static-and-runtime (>= 0.5.10187)
-      syntax_tree (>= 6.1.1)
       thor (>= 0.19.2)
-    syntax_tree (6.2.0)
+    syntax_tree (6.3.0)
       prettier_print (>= 1.2.0)
-    syntax_tree-haml (4.0.3)
-      haml (>= 5.2)
-      prettier_print (>= 1.2.1)
-      syntax_tree (>= 6.0.0)
-    syntax_tree-rbs (1.0.0)
-      prettier_print
-      rbs
-      syntax_tree (>= 2.0.1)
-    tapioca (0.11.9)
+    tapioca (0.19.2)
+      benchmark
       bundler (>= 2.2.25)
       netrc (>= 0.11.0)
       parallel (>= 1.21.0)
-      rbi (~> 0.1.0, >= 0.1.0)
-      sorbet-static-and-runtime (>= 0.5.10187)
-      spoom (~> 1.2.0, >= 1.2.0)
+      rbi (>= 0.3.7)
+      require-hooks (>= 0.2.2)
+      rubydex (>= 0.1.0.beta10)
+      sorbet-static-and-runtime (>= 0.6.12698)
+      spoom (>= 1.7.16)
       thor (>= 1.2.0)
-      yard-sorbet
-    temple (0.10.3)
-    thor (1.2.2)
-    tilt (2.3.0)
-    tzinfo (2.0.6)
-      concurrent-ruby (~> 1.0)
-    unicode-display_width (2.5.0)
-    yard (0.9.34)
-    yard-sorbet (0.8.1)
-      sorbet-runtime (>= 0.5)
-      yard (>= 0.9)
-    yarp (0.13.0)
+      tsort
+    thor (1.5.0)
+    tsort (0.2.0)
+    unicode-display_width (3.2.0)
+      unicode-emoji (~> 4.1)
+    unicode-emoji (4.2.0)
+    yard (0.9.44)
+    yard-sorbet (0.9.0)
+      sorbet-runtime
+      yard
     zeitwerk (2.8.2)
 
 PLATFORMS
@@ -232,7 +209,6 @@ DEPENDENCIES
   guard-rspec
   m2m_keygen!
   overcommit
-  prettier
   pry-byebug
   rake (>= 13.0)
   rspec (>= 3.0)
@@ -241,12 +217,13 @@ DEPENDENCIES
   rubocop-faker
   rubocop-performance
   rubocop-sorbet
+  ruby-lsp
   simplecov
-  solargraph
   sorbet
+  syntax_tree
   tapioca
   yard
   yard-sorbet
 
 BUNDLED WITH
-   2.3.21
+  4.0.13