mobile_id 0.0.4 → 0.0.9

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: ac2213a077be1331007897be4a68ddde6e428cb7b4a0ca712950367d38c5d6c7
-  data.tar.gz: 7d7736fb27da9413c707b30ea98797a5dcbe05160ff2fc434b802fdf58310645
+  metadata.gz: 2bcb3f7e69f425ea215f86a911b42b36fd0bba8012b25491dba9bfe2983f61ae
+  data.tar.gz: d322ceae5ef98c798beed98fd1927111a81fee624c667897bc43b5b0bb2ffc30
 SHA512:
-  metadata.gz: 3e04950d1fda22037f6e7f5f72bbf1b0f4038632028940e80bb020626efa54b46d94bd1af4f01c99113db5cf6f58fa6f6e2a6578543ef6b85771e6a88ef86487
-  data.tar.gz: bee3d0498d13db91e956c8daf69df2bd4e3c659be5379e40b1a6a9e1d3e7ddbd5f58c310f01c1bd9ed16f6ee92ee4ed6ea027627f770a7915fedda5a3e198382
+  metadata.gz: c3b858ba860c6194f7c52a47d5496835535462ba8ca60570c8eaa5e407de5349fac8dc205fc8a98cb796522cf8b3295a8693e418e7d7078cbd05a10a61105fc6
+  data.tar.gz: d3fde770330ab1614f2192d008b9ed202cc65caa06a065bb78833514e52d34c2d2dcfcf44435e6a20a68304df6dc7e309b1beae0af3997fdd08cfc3084c0040f

data/CHANGELOG.md

@@ -1,3 +1,18 @@
+Release 0.0.9
+* Fixed verification code
+
+Release 0.0.8
+* Release cleanup
+
+Release 0.0.7
+* Cert cleanup
+
+Release 0.0.6
+* Cert path fix
+
+Release 0.0.5
+* Added user certificate validation 
+
 Release 0.0.4
 * Refactored MobileId to MobileId::Auth
 

data/README.md

@@ -109,12 +109,18 @@ end
 
 After checking out the repo, run `bundle` to install dependencies. For testing code, run `rspec`
 
+## Contributors
+
+* Priit Tark
+* Andri Möll for pointing out user signature issue
+
 ## Contributing
 
 Bug reports and pull requests are welcome on GitHub at https://github.com/gitlabeu/mobile_id
 
 ## Roadmap
 
+* Auth signature validation
 * Document sign
 * Rails generators
 

data/lib/mobile_id.rb

@@ -17,4 +17,5 @@ module MobileId
   LOCALES = [:en, :et, :ru]
 end
 
+require 'mobile_id/cert'
 require 'mobile_id/auth'

data/lib/mobile_id/auth.rb

@@ -9,13 +9,19 @@ module MobileId
     TEST_UUID  = "00000000-0000-0000-0000-000000000000"
     TEST_NAME  = "DEMO"
 
-    attr_accessor :url, :uuid, :name, :hash, :cert, :cert_subject
+    attr_accessor :url, :uuid, :name, :doc, :hash, :user_cert, :live
 
     def initialize(live:, uuid: nil, name: nil)
       self.url = live == true ? LIVE_URL : TEST_URL
       self.uuid = live == true ? uuid : TEST_UUID
       self.name = live == true ? name : TEST_NAME
-      self.hash = Digest::SHA256.base64digest(SecureRandom.uuid)
+      self.live = live
+      init_doc(SecureRandom.hex(40))
+    end
+
+    def init_doc(doc)
+      self.doc = doc
+      self.hash = Digest::SHA256.digest(doc)
     end
 
     def authenticate!(phone_calling_code: nil, phone:, personal_code:, language: nil, display_text: nil)
@@ -44,7 +50,7 @@ module MobileId
           relyingPartyName: name,
           phoneNumber: full_phone.to_s.strip,
           nationalIdentityNumber: personal_code.to_s.strip,
-          hash: hash,
+          hash: Base64.strict_encode64(hash),
           hashType: 'SHA256',
           language: language,
           displayText: display_text,
@@ -58,12 +64,13 @@ module MobileId
       ActiveSupport::HashWithIndifferentAccess.new(
         session_id: response['sessionID'],
         phone: phone,
-        phone_calling_code: phone_calling_code
+        phone_calling_code: phone_calling_code,
+        doc: doc
       )
     end
 
     def verify!(auth)
-      long_poll!(session_id: auth['session_id'])
+      long_poll!(session_id: auth['session_id'], doc: auth['doc'])
 
       ActiveSupport::HashWithIndifferentAccess.new(
         personal_code: personal_code,
@@ -75,7 +82,7 @@ module MobileId
       )
     end
 
-    def long_poll!(session_id:)
+    def long_poll!(session_id:, doc:)
       response = HTTParty.get(url + "/authentication/session/#{session_id}")
       raise Error, "#{I18n.t('mobile_id.some_error')} #{response.code} #{response}" if response.code != 200
 
@@ -100,51 +107,41 @@ module MobileId
         raise Error, message
       end
 
-      self.cert = OpenSSL::X509::Certificate.new(Base64.decode64(response['cert']))
-      self.cert_subject = build_cert_subject
-      cert
+      @user_cert = MobileId::Cert.new(response['cert'], live: live)
+      @user_cert.verify_signature!(response['signature']['value'], doc)
+      self.user_cert = @user_cert
     end
 
     def verification_code
-      format("%04d", (Digest::SHA2.new(256).digest(Base64.decode64(hash))[-2..-1].unpack1('n') % 10000))
+      binary = hash.unpack('B*').first
+      "%04d" % (binary[0...6] + binary[-7..-1]).to_i(2)
     end
 
     def given_name
-      cert_subject["GN"].tr(",", " ")
+      user_cert.given_name
     end
     alias first_name given_name
 
     def surname
-      cert_subject["SN"].tr(",", " ")
+      user_cert.surname
     end
     alias last_name surname
     
     def country
-      cert_subject["C"].tr(",", " ")
+      user_cert.country
     end
 
     def common_name
-      cert_subject["CN"]
+      user_cert.common_name
     end
 
     def organizational_unit
-      cert_subject["OU"]
+      user_cert.organizational_unit
     end
 
     def serial_number
-      cert_subject["serialNumber"]
+      user_cert.serial_number
     end
     alias personal_code serial_number
-
-    private
-
-    def build_cert_subject
-      self.cert_subject = cert.subject.to_utf8.split(/(?<!\\)\,+/).each_with_object({}) do |c, result|
-        next unless c.include?("=")
-
-        key, val = c.split("=")
-        result[key] = val
-      end
-    end
   end
 end

data/lib/mobile_id/cert.rb

@@ -0,0 +1,98 @@
+# frozen_string_literal: true
+
+module MobileId
+  class Cert
+    class << self
+      def root_path
+        @root_path ||= File.expand_path('certs', __dir__)
+      end
+
+      def live_store
+        @live_store ||= 
+          build_store([
+            File.join(root_path, 'EE_Certification_Centre_Root_CA.pem.crt'),
+            File.join(root_path, 'ESTEID-SK_2015.pem.crt')
+          ])
+      end
+
+      def test_store
+        @test_store ||= 
+          build_store([
+            File.join(root_path, 'TEST_of_EE_Certification_Centre_Root_CA.pem.crt'),
+            File.join(root_path, 'TEST_of_ESTEID-SK_2015.pem.crt')
+          ])
+      end
+
+      def build_store(paths)
+        store = OpenSSL::X509::Store.new
+        paths.each { |path| cert = OpenSSL::X509::Certificate.new(File.read(path)); store.add_cert(cert) }
+        store
+      end
+    end
+
+    attr_accessor :cert, :subject
+
+    def initialize(base64_cert, live:)
+      self.cert = OpenSSL::X509::Certificate.new(Base64.decode64(base64_cert))
+      verify!(self.cert, live: live)
+      build_cert_subject
+    end
+
+    def verify!(cert, live:)
+      store = live == true ? self.class.live_store : self.class.test_store
+      raise Error, 'User certificate is not valid' unless store.verify(cert)
+      raise Error, 'User certificate is not valid' unless cert.public_key.check_key
+      raise Error, 'User certificate is expired' unless (cert.not_before..cert.not_after) === Time.now
+
+      true
+    end
+
+    def verify_signature!(signature_base64, doc)
+      signature = Base64.decode64(signature_base64)
+      digest = OpenSSL::Digest::SHA256.new(doc)
+
+      # cert.public_key.verify(digest, signature, doc)
+
+      # TODO OpenSSL does not parse signature correctly
+      # OpenSSL::PKey::PKeyError: EVP_VerifyFinal: nested asn1 error
+    end
+
+    def given_name
+      subject["GN"].tr(",", " ")
+    end
+    alias first_name given_name
+
+    def surname
+      subject["SN"].tr(",", " ")
+    end
+    alias last_name surname
+    
+    def country
+      subject["C"].tr(",", " ")
+    end
+
+    def common_name
+      subject["CN"]
+    end
+
+    def organizational_unit
+      subject["OU"]
+    end
+
+    def serial_number
+      subject["serialNumber"]
+    end
+    alias personal_code serial_number
+
+    private
+
+    def build_cert_subject
+      self.subject = cert.subject.to_utf8.split(/(?<!\\)\,+/).each_with_object({}) do |c, result|
+        next unless c.include?("=")
+
+        key, val = c.split("=")
+        result[key] = val
+      end
+    end
+  end
+end

data/lib/mobile_id/certs/EE_Certification_Centre_Root_CA.pem.crt

@@ -0,0 +1,24 @@
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----

data/lib/mobile_id/certs/ESTEID-SK_2015.pem.crt

@@ -0,0 +1,37 @@
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----

data/lib/mobile_id/certs/TEST_of_EE_Certification_Centre_Root_CA.pem.crt

@@ -0,0 +1,24 @@
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----

data/lib/mobile_id/certs/TEST_of_ESTEID-SK_2015.pem.crt

@@ -0,0 +1,37 @@
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: mobile_id
 version: !ruby/object:Gem::Version
-  version: 0.0.4
+  version: 0.0.9
 platform: ruby
 authors:
 - Priit Tark
@@ -105,6 +105,11 @@ files:
 - README.md
 - lib/mobile_id.rb
 - lib/mobile_id/auth.rb
+- lib/mobile_id/cert.rb
+- lib/mobile_id/certs/EE_Certification_Centre_Root_CA.pem.crt
+- lib/mobile_id/certs/ESTEID-SK_2015.pem.crt
+- lib/mobile_id/certs/TEST_of_EE_Certification_Centre_Root_CA.pem.crt
+- lib/mobile_id/certs/TEST_of_ESTEID-SK_2015.pem.crt
 - lib/mobile_id/locales/en.yml
 - lib/mobile_id/locales/et.yml
 - lib/mobile_id/locales/ru.yml