mobile_id 0.0.11 → 0.0.12

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: fc57a99a52d432526c2e74e8ced2ebd7c0aaf3917e6b992cc9776ee0d881e84d
-  data.tar.gz: 364768cc2e109000fff79db3fc8df4e2595c94bf643318586c1137044af85304
+  metadata.gz: b4176539bcbf710a8bf046e29e59ba85c61b3a74a9de1f5297fd054aa85fe7e6
+  data.tar.gz: b8fccf6b553ab081cde92ea6824d64b7b2486848478969e87d3b34b9bc66f4e5
 SHA512:
-  metadata.gz: 854a34133201695dad18b9bed17e6cebb86e0744f12502848352b440105b215e6dfce163b4a6eaa62500cfd641a35819ded5008f0bec7bf7147d45446479432d
-  data.tar.gz: 80ea7cf8136347623e7de3ad002f785e3f8f1624910af4dc27d1a615bbe2a2ed085132063c272aedf813e9e38e6926bcf2f3039debd4139068c0be7f5f165f1e
+  metadata.gz: 652482955ea58b873aa56772830b98f65225b9370d0deeedba926461fbec5e55b22f323c9c22ad6aa2f13819266025ae3b0c9c0b465729ef78367763e75f33f1
+  data.tar.gz: c0e552ef60413221b435120ee59267f261707c34a3246c74448ec2c519b7df4968ff51452b6003cc826fc425f209f68eae37a47d3af51a0ad6c9e4fe6aa38c42

data/CHANGELOG.md

@@ -1,3 +1,7 @@
+Release 0.0.12
+* Supports session RUNNING state
+* Validate auth signature
+
 Release 0.0.11
 * Add more live SK certs
 

data/README.md

@@ -113,6 +113,7 @@ After checking out the repo, run `bundle` to install dependencies. For testing c
 
 * Priit Tark
 * Andri Möll for pointing out user signature issue
+* Juri Linkov for pointing out unpack method issue
 
 ## Contributing
 
@@ -120,7 +121,6 @@ Bug reports and pull requests are welcome on GitHub at https://github.com/gitlab
 
 ## Roadmap
 
-* Auth signature validation
 * Document sign
 * Rails generators
 

data/lib/mobile_id/auth.rb

@@ -82,11 +82,24 @@ module MobileId
       )
     end
 
-    def long_poll!(session_id:, doc:)
+    def session_request(session_id)
       response = HTTParty.get(url + "/authentication/session/#{session_id}")
       raise Error, "#{I18n.t('mobile_id.some_error')} #{response.code} #{response}" if response.code != 200
+      response
+    end
+
+    def long_poll!(session_id:, doc:)
+      response = nil
+
+      # Retries until RUNNING state turns to COMPLETE 
+      30.times do |i|
+        response = session_request(session_id)
+        break if response['state'] == 'COMPLETE'
+        sleep 1
+      end
+      raise Error, "#{I18n.t('mobile_id.some_error')} #{response.code} #{response}" if response['state'] != 'COMPLETE'
 
-      if response['state'] == 'COMPLETE' && response['result'] != 'OK'
+      if response['result'] != 'OK'
         message = 
           case response['result']
           when "TIMEOUT"
@@ -104,7 +117,7 @@ module MobileId
           when "SIM_ERROR"
             I18n.t('mobile_id.sim_error')
           end
-        raise Error, message
+          raise Error, message
       end
 
       @user_cert = MobileId::Cert.new(response['cert'], live: live)

data/lib/mobile_id/cert.rb

@@ -65,10 +65,23 @@ module MobileId
       signature = Base64.decode64(signature_base64)
       digest = OpenSSL::Digest::SHA256.new(doc)
 
-      # cert.public_key.verify(digest, signature, doc)
+      valid =
+        begin
+          cert.public_key.verify(digest, signature, doc)
+        rescue OpenSSL::PKey::PKeyError
+          der_signature = cvc_to_der(signature) # Probably signature is CVC encoded
+          cert.public_key.verify(digest, der_signature, doc)
+        end
+
+      raise Error, 'We could not verify user signature' unless valid
+    end
 
-      # TODO OpenSSL does not parse signature correctly
-      # OpenSSL::PKey::PKeyError: EVP_VerifyFinal: nested asn1 error
+    def cvc_to_der(cvc)
+      sign_hex = cvc.unpack('H*').first
+      half = sign_hex.size / 2
+      i = [OpenSSL::ASN1::Integer.new(sign_hex[0...half].to_i(16)), OpenSSL::ASN1::Integer.new(sign_hex[half..sign_hex.size].to_i(16))]
+      seq = OpenSSL::ASN1::Sequence.new(i)
+      seq.to_der
     end
 
     def given_name

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: mobile_id
 version: !ruby/object:Gem::Version
-  version: 0.0.11
+  version: 0.0.12
 platform: ruby
 authors:
 - Priit Tark
 autorequire: 
 bindir: bin
 cert_chain: []
-date: 2020-09-22 00:00:00.000000000 Z
+date: 2020-10-15 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: httparty