monterail-devise-argon2 1.0.1

checksums.yaml

@@ -0,0 +1,7 @@
+---
+SHA256:
+  metadata.gz: d3603ca0d44f216806caec1af257d010924c9fd8a968e9ddedd6227c64d0c744
+  data.tar.gz: 4404f6c7ada08da93516f75a6fd206b846ba309643991ec6d970184d121d3c4b
+SHA512:
+  metadata.gz: c59a4158e0f50459048a5be14b5506635833fa02358cad9f58a2659dbef9aef88e06af51253a7ba60c2d27f03fb0b7a30c94132a6c79bbc5c1bbd8ccca0cafb8
+  data.tar.gz: 5a6c2f7349ff4aaa1049e5c2be487b5218b250034e88a0d4c5eeda10457a0d40ddee9383e29dd478baacbc65e45c17ada09e561ed6a798ca9c5c1ea5db39174d

data/.gitignore

@@ -0,0 +1,18 @@
+*.gem
+*.rbc
+.bundle
+.config
+.yardoc
+Gemfile.lock
+InstalledFiles
+_yardoc
+coverage
+doc/
+lib/bundler/man
+pkg
+rdoc
+spec/reports
+test/tmp
+test/version_tmp
+tmp
+.ruby-gemset

data/.rspec

@@ -0,0 +1,2 @@
+--color
+--format documentation

data/Gemfile

@@ -0,0 +1,10 @@
+source 'https://rubygems.org'
+
+# Specify your gem's dependencies in gvoe_auth-client.gemspec
+gemspec
+
+gem 'rspec'
+gem 'simplecov'
+gem 'activesupport'
+gem 'activemodel'
+gem 'pry'

data/Rakefile

@@ -0,0 +1 @@
+require "bundler/gem_tasks"

data/devise-argon2.gemspec

@@ -0,0 +1,21 @@
+# -*- encoding: utf-8 -*-
+lib = File.expand_path('../lib', __FILE__)
+$LOAD_PATH.unshift(lib) unless $LOAD_PATH.include?(lib)
+require "devise/encryptable/encryptors/argon2/version"
+
+Gem::Specification.new do |gem|
+  gem.name          = "monterail-devise-argon2"
+  gem.homepage      = "https://github.com/monterail/devise_argon2"
+  gem.version       = Devise::Encryptable::Encryptors::ARGON2_VERSION
+  gem.summary       = ""
+  gem.authors       = [""]
+
+  gem.files         = `git ls-files`.split($/)
+  gem.executables   = gem.files.grep(%r{^bin/}).map{ |f| File.basename(f) }
+  gem.test_files    = gem.files.grep(%r{^(test|spec|features)/})
+  gem.require_paths = ["lib"]
+
+  gem.add_dependency 'devise', '>= 2.1.0'
+  gem.add_dependency 'devise-encryptable', '>= 0.2.0'
+  gem.add_dependency 'argon2', '~> 2.0'
+end

data/lib/devise/encryptable/encryptors/argon2/version.rb

@@ -0,0 +1,7 @@
+module Devise
+  module Encryptable
+    module Encryptors
+      ARGON2_VERSION = '1.0.1'
+    end
+  end
+end

data/lib/devise/encryptable/encryptors/argon2.rb

@@ -0,0 +1,17 @@
+require 'argon2'
+
+module Devise
+  module Encryptable
+    module Encryptors
+      class Argon2 < Base
+        def self.digest(password:, secret: nil)
+          ::Argon2::Password.create(password, secret: secret)
+        end
+
+        def self.compare(encrypted_password:, password:, secret: nil)
+          ::Argon2::Password.verify_password(password, encrypted_password, secret)
+        end
+      end
+    end
+  end
+end

data/lib/devise-argon2.rb

@@ -0,0 +1,4 @@
+require 'devise'
+require 'devise-encryptable'
+require "devise/encryptable/encryptors/argon2/version"
+require "devise/encryptable/encryptors/argon2"

data/spec/devise-argon2_spec.rb

@@ -0,0 +1,42 @@
+# encoding: utf-8
+require 'spec_helper'
+
+describe Devise::Encryptable::Encryptors::Argon2 do
+  let(:argon2)    { Devise::Encryptable::Encryptors::Argon2 }
+  let(:password)  { 'Tr0ub4dor&3' }
+
+  describe "used with pepper" do
+    let(:pepper)    { "I don't really want to stop the show But I thought that you might like to know That the singer's going to sing a song And he wants you all to sing along" }
+
+    describe ".compare" do
+      let(:encrypted) { Argon2::Password.create(password, secret: pepper).to_s }
+
+      it "is true when the encrypted password contains the argon2id format" do
+        expect(encrypted).to match /argon2id/
+      end
+
+      it "is true when comparing an encrypted password against given plaintext" do
+        expect(argon2.compare(encrypted_password: encrypted, password: password, secret: pepper)).to be true
+      end
+
+      it "is false when comparing with wrong password" do
+        expect(argon2.compare(encrypted_password: encrypted, password: 'hunter2', secret: pepper)).to be false
+      end
+
+      it "is false when comparing with correct password but wrong pepper" do
+        expect(argon2.compare(encrypted_password: encrypted, password: password, secret: 'beatles')).to be false
+      end
+    end
+
+    describe "without any pepper" do
+      let(:encrypted) { Argon2::Password.create(password).to_s }
+      let(:pepper) { nil }
+
+      it "is still works" do
+        expect(argon2.compare(encrypted_password: encrypted, password: password)).to be true
+      end
+    end
+
+  end
+
+end

data/spec/spec_helper.rb

@@ -0,0 +1,9 @@
+require 'rubygems'
+require 'simplecov'
+SimpleCov.start
+require 'pry'
+require 'bundler/setup'
+require 'devise-argon2'
+
+RSpec.configure do |config|
+end

metadata

@@ -0,0 +1,95 @@
+--- !ruby/object:Gem::Specification
+name: monterail-devise-argon2
+version: !ruby/object:Gem::Version
+  version: 1.0.1
+platform: ruby
+authors:
+- ''
+autorequire:
+bindir: bin
+cert_chain: []
+date: 2021-11-08 00:00:00.000000000 Z
+dependencies:
+- !ruby/object:Gem::Dependency
+  name: devise
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: 2.1.0
+  type: :runtime
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: 2.1.0
+- !ruby/object:Gem::Dependency
+  name: devise-encryptable
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: 0.2.0
+  type: :runtime
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: 0.2.0
+- !ruby/object:Gem::Dependency
+  name: argon2
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '2.0'
+  type: :runtime
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '2.0'
+description:
+email:
+executables: []
+extensions: []
+extra_rdoc_files: []
+files:
+- ".gitignore"
+- ".rspec"
+- Gemfile
+- Rakefile
+- devise-argon2.gemspec
+- lib/devise-argon2.rb
+- lib/devise/encryptable/encryptors/argon2.rb
+- lib/devise/encryptable/encryptors/argon2/version.rb
+- spec/devise-argon2_spec.rb
+- spec/spec_helper.rb
+homepage: https://github.com/monterail/devise_argon2
+licenses: []
+metadata: {}
+post_install_message:
+rdoc_options: []
+require_paths:
+- lib
+required_ruby_version: !ruby/object:Gem::Requirement
+  requirements:
+  - - ">="
+    - !ruby/object:Gem::Version
+      version: '0'
+required_rubygems_version: !ruby/object:Gem::Requirement
+  requirements:
+  - - ">="
+    - !ruby/object:Gem::Version
+      version: '0'
+requirements: []
+rubygems_version: 3.1.2
+signing_key:
+specification_version: 4
+summary: ''
+test_files:
+- spec/devise-argon2_spec.rb
+- spec/spec_helper.rb