mailtruss 0.1.0 → 0.1.1

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 0aefd75093db988be98ed2ee2a5649567f768ea1a5506306fec9cf13dce5e161
-  data.tar.gz: 552f058e0408b3d83845ddd2ed98fb363f8bb7a0c734e1a526e0dee4f4eb89ba
+  metadata.gz: 7b7ba3baa7fb9c34eca4e865b3ddcf567348c1f2b6d81a81adcff5bf2da090f0
+  data.tar.gz: c77f8b6f2cef32c1709314cccf7bdf9cf8d3e1cdbe8a43023c76b019743d13db
 SHA512:
-  metadata.gz: 1ff4df3ef60ab13e0778b5c469459d126f33219431b0ec81f828191b368b3add7a8a657ab107ac35fdc7be81776924d5ccae693c2db44d7940081f235d0c02af
-  data.tar.gz: 890aeea078fbf44a6e0d4b875a10ee0618526656d622a9f554d884fb9c2c76a5e60b20918aadc2beb82e50c3ebe9f294cd08a0f9ac02646b9600a7dc19064c0f
+  metadata.gz: 834727cff3301866deec42c38d8361331f3e080656bbd152f223b036fe88540b3ef808626c5cad6d0f2136b74908092db8d86687ae4f39a1bec2bad9112e9c30
+  data.tar.gz: d5beda2e8a193e96c11664e53479566af75d4f8951b6f0d7c54bb6c7b5574bc155e18671e0504b38603daa9837d3fcdd258146a024d6a5e44ecc6792fc3e8341

data/lib/mailtruss/delivery_method.rb

@@ -49,7 +49,7 @@ module Mailtruss
       end
       if mail.attachments.any?
         p[:attachments] = mail.attachments.map do |a|
-          att = { filename: a.filename, content: Base64.strict_encode64(a.decoded), content_type: a.mime_type }
+          att = { filename: a.filename, content: [a.decoded].pack("m0"), content_type: a.mime_type }
           att[:content_id] = a.content_id.to_s.delete("<>") if a.inline?
           att
         end

data/lib/mailtruss/version.rb

@@ -1,3 +1,3 @@
 module Mailtruss
-  VERSION = "0.1.0"
+  VERSION = "0.1.1"
 end

data/lib/mailtruss.rb

@@ -1,7 +1,6 @@
 require "json"
 require "net/http"
 require "openssl"
-require "base64"
 require "uri"
 require_relative "mailtruss/version"
 
@@ -159,8 +158,8 @@ module Mailtruss
     raise WebhookError, "Missing webhook-id, webhook-timestamp or webhook-signature header" unless id && ts && sigs
     raise WebhookError, "Webhook timestamp is outside the allowed window" unless ts.to_s.match?(/\A\d+\z/) && (now - ts.to_i).abs <= tolerance
     # Secrets issued before 2026-11-14 (whsec_ + 32 url-safe characters) are used as text; newer ones are base64 key bytes.
-    key = secret.match?(/\Awhsec_[A-Za-z0-9_-]{32}\z/) ? secret : Base64.strict_decode64(secret.delete_prefix("whsec_"))
-    expected = Base64.strict_encode64(OpenSSL::HMAC.digest("SHA256", key, "#{id}.#{ts}.#{body}"))
+    key = secret.match?(/\Awhsec_[A-Za-z0-9_-]{32}\z/) ? secret : secret.delete_prefix("whsec_").unpack1("m0")
+    expected = [OpenSSL::HMAC.digest("SHA256", key, "#{id}.#{ts}.#{body}")].pack("m0")
     ok = sigs.to_s.split.any? { |part| v, sig = part.split(",", 2); v == "v1" && sig && sig.bytesize == expected.bytesize && OpenSSL.fixed_length_secure_compare(sig, expected) }
     raise WebhookError, "Webhook signature does not match" unless ok
     JSON.parse(body)

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: mailtruss
 version: !ruby/object:Gem::Version
-  version: 0.1.0
+  version: 0.1.1
 platform: ruby
 authors:
 - Mailtruss