max_api_client 0.1.0 → 0.1.3

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 90a56c712907fd53b66e127a84f712e96fc9d9172fae831fdcdc0f6dac9da0db
-  data.tar.gz: 93042ed433e745dfc1a7eec5fac783f8bf71cd6a683d17c9e13125096b986230
+  metadata.gz: 9fde75c48daf67e3c6daac640e467b02b31601c5abef3e92ed3fd14f83509d28
+  data.tar.gz: 53f4dd194924f9853a98fcc60789bd7678320bedb73d7a0dbe35bd2bb1196817
 SHA512:
-  metadata.gz: 70cf625de3554498841b7de213767e0bc31f87b3921569751d9ddaee7758e4796a6b060f100642e386900d76a2a0bf570f0d565ec308a46f5f96782aab3ebee2
-  data.tar.gz: 8f7346ee0587d47ff1ee60314eb216f3d4cd3a63ff6f4b86cb0650a5313f244d120cb25ef0b494c1acabd8906fc186ca98582e2dd5805807fdd55f058f70b244
+  metadata.gz: 0bd30a89346e414d46dace23dfe18745a7e54ecec52024a3f48d7ba12e97b8e5df09eca5cad6be05e4ac0488c99b679f1671d85d132d09c7e9eb0b10197729cd
+  data.tar.gz: b9bedc2313023176b3b92e21c34c97e1d012f13afb1c8dfaa322c4e8c9125f61be75c33476b84e0dcd3ea6cf80a9c5ce197c6b809ff1a5d1d218df858f2af1e9

data/.ruby-version

@@ -0,0 +1 @@
+3.4.5

data/CHANGELOG.md

@@ -1,7 +1,17 @@
 ## [Unreleased]
 
-- Rewrote `README.md` with installation instructions, project status, TS vs Ruby comparison, and Max Bot API reference sections.
-- Filled gem metadata in `max_api_client.gemspec`.
+## [0.1.3] - 2026-07-16
+
+- Switched the default API endpoint to `https://platform-api2.max.ru`.
+- Added the Russian Trusted Root CA to the TLS trust store, with optional `ca_file` override.
+- Added an explicit `verify_ssl: false` option for environments that must temporarily ignore certificate errors.
+- Documented the new endpoint and TLS configuration options.
+- Updated the TypeScript reference client link.
+
+## [0.1.2] - 2026-03-27
+
+- Configured RubyGems trusted publishing through GitHub Actions.
+- Added release tag validation and updated the Ruby CI matrix.
 
 ## [0.1.0] - 2026-02-12
 

data/README.md

@@ -24,11 +24,84 @@ gem "max_api_client", git: "git@github.com:Ziaw/max_api_client.git"
 bundle install
 ```
 
+## Адрес API и сертификат Минцифры
+
+По умолчанию клиент использует актуальный адрес `https://platform-api2.max.ru`.
+В gem включён корневой сертификат `Russian Trusted Root CA`, поэтому TLS-цепочка
+MAX проверяется вместе с обычным системным хранилищем доверенных сертификатов.
+По умолчанию проверка TLS включена.
+
+Актуальные сертификаты и инструкции по их системной установке опубликованы
+на Госуслугах: <https://www.gosuslugi.ru/crt>.
+
+Обычное подключение не требует дополнительных настроек:
+
+```ruby
+api = MaxApiClient::Api.new(
+  token: ENV.fetch("MAX_BOT_TOKEN")
+)
+```
+
+Доступные параметры подключения:
+
+- `base_url` — адрес MAX API, по умолчанию `https://platform-api2.max.ru`;
+- `ca_file` — путь к дополнительному доверенному CA-файлу;
+- `verify_ssl` — проверять сертификат сервера, по умолчанию `true`;
+- `open_timeout` — таймаут установления соединения;
+- `read_timeout` — таймаут чтения ответа.
+
+Эти параметры поддерживают как `MaxApiClient::Api`, так и
+`MaxApiClient::Client`.
+
+### Подключение собственного сертификата
+
+Передайте путь к актуальному сертификату Минцифры в формате PEM:
+
+```ruby
+api = MaxApiClient::Api.new(
+  token: ENV.fetch("MAX_BOT_TOKEN"),
+  ca_file: "/etc/ssl/certs/russian_trusted_root_ca.pem"
+)
+```
+
+Чтобы использовать только системное хранилище сертификатов, передайте
+`ca_file: nil`.
+
+### Игнорирование неверного сертификата
+
+Если окружение временно не может проверить сертификат, отключите проверку
+параметром `verify_ssl: false`:
+
+```ruby
+api = MaxApiClient::Api.new(
+  token: ENV.fetch("MAX_BOT_TOKEN"),
+  verify_ssl: false
+)
+```
+
+`verify_ssl: false` принимает любой серверный сертификат и делает соединение
+уязвимым для перехвата. Используйте эту настройку только как временный обходной
+вариант. Для постоянной настройки передайте актуальный сертификат через
+`ca_file` или установите его в системное хранилище.
+
+Полный пример настройки:
+
+```ruby
+api = MaxApiClient::Api.new(
+  token: ENV.fetch("MAX_BOT_TOKEN"),
+  base_url: "https://platform-api2.max.ru",
+  ca_file: MaxApiClient::Client::DEFAULT_CA_FILE,
+  verify_ssl: true,
+  open_timeout: 10,
+  read_timeout: 30
+)
+```
+
 ## Справочник API
 
 ### Методы бота
 
-Методы Ruby, доступные через `MaxApiClient::Api`:
+Методы доступные через `MaxApiClient::Api`, порт официального клиента <https://github.com/max-messenger/max-bot-api-client-ts>, названия сохранены, poller собственный:
 
 - `get_my_info`
 - `edit_my_info(**extra)`

data/certs/russian_trusted_root_ca.pem

@@ -0,0 +1,33 @@
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----

data/lib/max_api_client/api.rb

@@ -7,13 +7,15 @@ module MaxApiClient
 
     # rubocop:disable Metrics/ParameterLists
     def initialize(token:, base_url: Client::DEFAULT_BASE_URL, adapter: nil, open_timeout: nil, read_timeout: nil,
-                   logger: nil)
+                   ca_file: Client::DEFAULT_CA_FILE, verify_ssl: true, logger: nil)
       @client = Client.new(
         token:,
         base_url:,
         adapter:,
         open_timeout:,
         read_timeout:,
+        ca_file:,
+        verify_ssl:,
         logger:
       )
       @raw = RawApi.new(client)

data/lib/max_api_client/certificate_store.rb

@@ -0,0 +1,19 @@
+# frozen_string_literal: true
+
+module MaxApiClient
+  # Builds a TLS trust store from the system defaults and an optional CA file.
+  class CertificateStore
+    def self.configure(http, ca_file:, verify_ssl:)
+      http.use_ssl = true
+      http.verify_mode = verify_ssl ? OpenSSL::SSL::VERIFY_PEER : OpenSSL::SSL::VERIFY_NONE
+      http.cert_store = build(ca_file:) if verify_ssl
+    end
+
+    def self.build(ca_file:)
+      OpenSSL::X509::Store.new.tap do |store|
+        store.set_default_paths
+        store.add_file(ca_file) if ca_file
+      end
+    end
+  end
+end

data/lib/max_api_client/client.rb

@@ -3,7 +3,8 @@
 module MaxApiClient
   # HTTP transport client responsible for authenticated API requests.
   class Client
-    DEFAULT_BASE_URL = "https://platform-api.max.ru"
+    DEFAULT_BASE_URL = "https://platform-api2.max.ru"
+    DEFAULT_CA_FILE = File.expand_path("../../certs/russian_trusted_root_ca.pem", __dir__)
     REQUEST_CLASSES = {
       get: Net::HTTP::Get,
       post: Net::HTTP::Post,
@@ -12,15 +13,18 @@ module MaxApiClient
       delete: Net::HTTP::Delete
     }.freeze
 
-    attr_reader :token, :base_url
+    attr_reader :token, :base_url, :ca_file, :verify_ssl
 
     # rubocop:disable Metrics/ParameterLists
-    def initialize(token:, base_url: DEFAULT_BASE_URL, adapter: nil, open_timeout: nil, read_timeout: nil, logger: nil)
+    def initialize(token:, base_url: DEFAULT_BASE_URL, adapter: nil, open_timeout: nil, read_timeout: nil,
+                   ca_file: DEFAULT_CA_FILE, verify_ssl: true, logger: nil)
       @token = token
       @base_url = base_url
       @adapter = adapter
       @open_timeout = open_timeout
       @read_timeout = read_timeout
+      @ca_file = ca_file
+      @verify_ssl = verify_ssl
       @logger = logger || MaxApiClient.logger
     end
     # rubocop:enable Metrics/ParameterLists
@@ -122,10 +126,13 @@ module MaxApiClient
     end
 
     def configured_http(uri, open_timeout:, read_timeout:)
+      open_timeout ||= @open_timeout
+      read_timeout ||= @read_timeout
+
       Net::HTTP.new(uri.host, uri.port).tap do |http|
-        http.use_ssl = uri.scheme == "https"
-        http.open_timeout = open_timeout || @open_timeout if open_timeout || @open_timeout
-        http.read_timeout = read_timeout || @read_timeout if read_timeout || @read_timeout
+        CertificateStore.configure(http, ca_file:, verify_ssl:) if uri.scheme == "https"
+        http.open_timeout = open_timeout if open_timeout
+        http.read_timeout = read_timeout if read_timeout
       end
     end
 

data/lib/max_api_client/version.rb

@@ -2,5 +2,5 @@
 
 # Root namespace for gem version information.
 module MaxApiClient
-  VERSION = "0.1.0"
+  VERSION = "0.1.3"
 end

data/lib/max_api_client.rb

@@ -2,11 +2,13 @@
 
 require "json"
 require "net/http"
+require "openssl"
 require "uri"
 require "securerandom"
 
 require_relative "max_api_client/version"
 require_relative "max_api_client/error"
+require_relative "max_api_client/certificate_store"
 require_relative "max_api_client/client"
 require_relative "max_api_client/base_api"
 require_relative "max_api_client/raw_api"

data/sig/max_api_client.rbs

@@ -17,9 +17,12 @@ module MaxApiClient
 
   class Client
     DEFAULT_BASE_URL: String
+    DEFAULT_CA_FILE: String
     attr_reader token: String
     attr_reader base_url: String
-    def initialize: (token: String, ?base_url: String, ?adapter: untyped, ?open_timeout: Numeric?, ?read_timeout: Numeric?, ?logger: untyped) -> void
+    attr_reader ca_file: String?
+    attr_reader verify_ssl: bool
+    def initialize: (token: String, ?base_url: String, ?adapter: untyped, ?open_timeout: Numeric?, ?read_timeout: Numeric?, ?ca_file: String?, ?verify_ssl: bool, ?logger: untyped) -> void
     def call: (method: Symbol | String, ?path: String?, ?query: untyped, ?body: untyped, ?path_params: untyped, ?headers: untyped, ?url: String?, ?raw_body: untyped, ?parse_json: bool) -> Hash[Symbol, untyped]
   end
 
@@ -123,7 +126,7 @@ module MaxApiClient
     attr_reader raw: RawApi
     attr_reader upload: Upload
     attr_reader client: Client
-    def initialize: (token: String, ?base_url: String, ?adapter: untyped, ?open_timeout: Numeric?, ?read_timeout: Numeric?, ?logger: untyped) -> void
+    def initialize: (token: String, ?base_url: String, ?adapter: untyped, ?open_timeout: Numeric?, ?read_timeout: Numeric?, ?ca_file: String?, ?verify_ssl: bool, ?logger: untyped) -> void
     def get_my_info: () -> untyped
     def edit_my_info: (untyped extra) -> untyped
     def set_my_commands: (Array[bot_command] commands) -> untyped

metadata

@@ -1,13 +1,13 @@
 --- !ruby/object:Gem::Specification
 name: max_api_client
 version: !ruby/object:Gem::Version
-  version: 0.1.0
+  version: 0.1.3
 platform: ruby
 authors:
 - Alexandr Zimin
 bindir: exe
 cert_chain: []
-date: 2026-03-26 00:00:00.000000000 Z
+date: 1980-01-02 00:00:00.000000000 Z
 dependencies: []
 description: Ruby client for Max Bot API.
 email:
@@ -17,15 +17,18 @@ extensions: []
 extra_rdoc_files: []
 files:
 - ".rubocop.yml"
+- ".ruby-version"
 - CHANGELOG.md
 - CODE_OF_CONDUCT.md
 - LICENSE.txt
 - README.md
 - Rakefile
+- certs/russian_trusted_root_ca.pem
 - lib/max_api_client.rb
 - lib/max_api_client/api.rb
 - lib/max_api_client/attachments.rb
 - lib/max_api_client/base_api.rb
+- lib/max_api_client/certificate_store.rb
 - lib/max_api_client/client.rb
 - lib/max_api_client/error.rb
 - lib/max_api_client/polling.rb
@@ -55,7 +58,7 @@ required_rubygems_version: !ruby/object:Gem::Requirement
     - !ruby/object:Gem::Version
       version: '0'
 requirements: []
-rubygems_version: 3.6.2
+rubygems_version: 3.6.9
 specification_version: 4
 summary: Ruby client for Max Bot API
 test_files: []