mauth-client 5.0.0 → 5.0.1

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: fb397d4c368ae894af1012c2305891bdfe4c85269e75e54167d4a7482a034f5a
-  data.tar.gz: 8dc255a280b8304360b305be500b00bf1a8205293a7061af866a99f2eb69ca10
+  metadata.gz: a0e68cfc0209b5a75353832da0b86ad09d62414a7d7b41064140f74015202b62
+  data.tar.gz: 9d7030753959fcb55da17f407d952d271bcb55ce17055b57c7639cab591968fe
 SHA512:
-  metadata.gz: 8e519a163cba44ca112f31d91a2da679601cebeac172eac15704f0ff93cc3ea5a3eba6e654d15cce3cbd2c587cc5bc3e6ae88a1042b84bdaa77f3e71fda01a96
-  data.tar.gz: 18e5b9888c5c56ffa2f78197cdca887958e220f6f63e71807393d043508b5cd013ded15031d29230262cdfeb0de86f1f71f18cffd62a64c5719da030a59915d8
+  metadata.gz: 7d9c6a695ada3e6ba84d8cf315618e502841b59f261a19caadb7ee3f83ff2744a4cd6621571fb8d9f1e6917c5894c002e77d6b90556696cc6124ebc58b47870b
+  data.tar.gz: d623c9f86481d9c159c49bf0222bdc06ea405bd3063763cdabfbd26d97014c3847854a2dcfd26a7100afd9cc3fcc8b79dd334dee0d89d96c45c4aa8ce1960826

data/CHANGELOG.md

@@ -1,3 +1,6 @@
+## v5.0.1
+- Update euresource escaping of query string.
+
 ## v5.0.0
 - Add support for MWSV2 protocol.
 - Change request signing to sign with both V1 and V2 protocols by default.

data/lib/mauth/client/local_authenticator.rb

@@ -86,7 +86,7 @@ module MAuth
           time: object.mcc_time,
           app_uuid: object.signature_app_uuid,
           request_url: euresource_escape(original_request_uri.to_s),
-          query_string: euresource_escape(original_query_string.to_s)
+          query_string: euresource_query_escape(original_query_string.to_s)
         )
 
         pubkey = OpenSSL::PKey::RSA.new(retrieve_public_key(object.signature_app_uuid))
@@ -120,6 +120,14 @@ module MAuth
         CGI.escape(str).gsub(/%2F|%23/, '%2F' => '/', '%23' => '#')
       end
 
+      # Euresource encodes keys and values of query params but does not encode the '='
+      # that separates keys and values and the '&' that separate k/v pairs
+      # Euresource currently adds query parameters via the following method:
+      # https://www.rubydoc.info/gems/addressable/2.3.4/Addressable/URI#query_values=-instance_method
+      def euresource_query_escape(str)
+        CGI.escape(str).gsub(/%3D|%26/, '%3D' => '=', '%26' => '&')
+      end
+
       def retrieve_public_key(app_uuid)
         retrieve_security_token(app_uuid)['security_token']['public_key_str']
       end

data/lib/mauth/version.rb

@@ -1,3 +1,3 @@
 module MAuth
-  VERSION = '5.0.0'.freeze
+  VERSION = '5.0.1'.freeze
 end

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: mauth-client
 version: !ruby/object:Gem::Version
-  version: 5.0.0
+  version: 5.0.1
 platform: ruby
 authors:
 - Matthew Szenher
@@ -11,7 +11,7 @@ authors:
 autorequire: 
 bindir: exe
 cert_chain: []
-date: 2019-07-23 00:00:00.000000000 Z
+date: 2019-08-07 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: faraday
@@ -290,7 +290,8 @@ required_rubygems_version: !ruby/object:Gem::Requirement
     - !ruby/object:Gem::Version
       version: '0'
 requirements: []
-rubygems_version: 3.0.4
+rubyforge_project: 
+rubygems_version: 2.7.7
 signing_key: 
 specification_version: 4
 summary: Sign and authenticate requests and responses with mAuth authentication.