mini_fb 0.1.2 → 0.1.3

data/README.markdown

@@ -3,6 +3,13 @@ MiniFB - the simple miniature facebook library
 
 MiniFB is a small, lightweight Ruby library for interacting with the [Facebook API](http://wiki.developers.facebook.com/index.php/API).
 
+Installation
+-------------
+
+We're using gemcutter so be sure to have gemcutter as a source, then: 
+
+    gem install mini_fb
+
 General Usage
 -------------
 
@@ -35,4 +42,8 @@ Or if you want other photos, try:
 
     photos = @fb.photos("pids"=>[12343243,920382343,9208348])
 
+Support
+--------
+
+Join our Discussion Group at: http://groups.google.com/group/mini_fb
 

data/lib/mini_fb.rb

@@ -12,6 +12,7 @@ module MiniFB
     def enable_logging
         @@logging = true
     end
+
     def disable_logging
         @@logging = false
     end
@@ -130,6 +131,10 @@ module MiniFB
 
         puts 'kwargs=' + kwargs.inspect
 
+        if secret.is_a? String
+            secret = FaceBookSecret.new(secret)
+        end
+
         # Prepare arguments for call
         call_id = kwargs.fetch("call_id", true)
         if call_id == true then
@@ -146,6 +151,7 @@ module MiniFB
 
         # Hash with secret
         arg_string = String.new
+        # todo: convert symbols to strings, symbols break the next line
         kwargs.sort.each { |kv| arg_string << kv[0] << "=" << kv[1].to_s }
         kwargs["sig"] = Digest::MD5.hexdigest( arg_string + secret.value.call )
 
@@ -167,6 +173,35 @@ module MiniFB
         return data
     end
 
+    # Returns true is signature is valid, false otherwise.
+    def MiniFB.verify_signature( secret, arguments )
+        signature = arguments.delete( "fb_sig" )
+        return false if signature.nil?
+
+        unsigned = Hash.new
+        signed = Hash.new
+
+        arguments.each do |k, v|
+            if k =~ /^fb_sig_(.*)/ then
+                signed[$1] = v
+            else
+                unsigned[k] = v
+            end
+        end
+
+        arg_string = String.new
+        signed.sort.each { |kv| arg_string << kv[0] << "=" << kv[1] }
+        if Digest::MD5.hexdigest( arg_string + secret ) == signature
+            return true
+        end
+        return false
+    end
+
+    def self.login_url(api_key, go_next=nil)
+        login_url = "http://api.facebook.com/login.php"
+        next_param = go_next.blank? ? "" : "&next=#{go_next}"
+        return "#{login_url}?api_key=#{api_key}#{next_param}"
+    end
 
     # This function expects arguments as a hash, so
     # it is agnostic to different POST handling variants in ruby.
@@ -185,6 +220,7 @@ module MiniFB
     # The secret argument should be an instance of FacebookSecret
     # to hide value from simple introspection.
 #
+    # DEPRECATED, use verify_signature instead
     def MiniFB.validate( secret, arguments )
 
         signature = arguments.delete( "fb_sig" )
@@ -203,7 +239,7 @@ module MiniFB
 
         arg_string = String.new
         signed.sort.each { |kv| arg_string << kv[0] << "=" << kv[1] }
-        if Digest::MD5.hexdigest( arg_string + secret ) != signature then
+        if Digest::MD5.hexdigest( arg_string + secret ) != signature
             unsigned # Hash is incorrect, return only unsigned fields.
         else
             unsigned.merge signed

data/test/mini_fb_tests.rb

@@ -6,6 +6,9 @@ class MiniFBTests < Test::Unit::TestCase
     end
     def teardown
 
+    end
+    def test_signature
+        
     end
 
     def test_basic_calls
@@ -19,4 +22,5 @@ class MiniFBTests < Test::Unit::TestCase
     def test_photos
         
     end
+
 end

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification 
 name: mini_fb
 version: !ruby/object:Gem::Version 
-  version: 0.1.2
+  version: 0.1.3
 platform: ruby
 authors: 
 - Travis Reeder
@@ -9,7 +9,7 @@ autorequire:
 bindir: bin
 cert_chain: []
 
-date: 2009-10-27 00:00:00 -07:00
+date: 2009-11-10 00:00:00 -08:00
 default_executable: 
 dependencies: []