myinfo_ruby 1.0.0

checksums.yaml

@@ -0,0 +1,7 @@
+---
+SHA1:
+  metadata.gz: fae89a585898afb8d15885bc4b5522663a4c486c
+  data.tar.gz: 791fcb3e5ca1fcce6c5a1fb00eda437e0de7eec4
+SHA512:
+  metadata.gz: e12a0c3c2923f33f9645db8f562d16023ff14a5cfc46ca2ff06d77cf20cd77bc98e5254581ab79988683b756cc6b86976dc1fa3c82315a80996181e340701b4b
+  data.tar.gz: 74469086e899a695d14dc1f99db1a4b630d7b445dd9edcc18cffdbe69861b5438ed5dd8824fe9338ef678f9e05b9c0c73d50279ba827bf6d00f04c877f255c23

data/lib/myinfo_ruby.rb

@@ -0,0 +1,10 @@
+require "myinfo_ruby/version"
+require "myinfo_ruby/client"
+
+module MyinfoRuby
+  class << self
+    def new config
+      @client ||= MyinfoRuby::Client.new config
+    end
+  end
+end

data/lib/myinfo_ruby/client.rb

@@ -0,0 +1,42 @@
+require_relative 'security'
+
+module MyinfoRuby
+  class Client
+    include MyinfoRuby::Security
+
+    def initialize config
+      # Token api url
+      @token_url = config[:token_url]
+      # Personal api url
+      @personal_url = config[:personal_url]
+      # authorization code
+      @code = config[:code]
+      @private_key = config[:private_key]
+      @client_id = config[:client_id]
+      @client_secret = config[:client_secret]
+      # Attributes to be fetched from MyInfo
+      @attributes = config[:attributes]
+      @redirect_uri = config[:redirect_url]
+      @auth_level = config[:auth_level]
+    end
+
+    def fetch_personal
+      # ********* Access Token *********
+		  token_response = create_token_request(@token_url, @code, @redirect_url, @client_id, @client_secret, @auth_level, @private_key)
+
+      # ********* Verify JWS *********
+      decoded_jws = verify_JWS(token_response, @private_key)
+
+      # ********* Personal Data *********'
+      personal_response = get_personal_data(@personal_url, decoded_jws['sub'], token_response, @client_id, @attributes, @auth_level, @private_key)
+      if personal_response.code == 200
+        personal_data = decrypt_JWE_response(personal_response, @private_key)
+        personal_data['uinfin'] = decoded_jws['sub']
+        personal_data
+      else
+        puts "#{personal_response.code} : Error occoured while Fetching data"
+        personal_response
+      end
+    end
+  end
+end

data/lib/myinfo_ruby/security.rb

@@ -0,0 +1,99 @@
+require 'openssl'
+require 'rest-client'
+require 'jose'
+module MyinfoRuby
+  module Security
+    def create_token_request(token_url, code, redirect_url, client_id, client_secret, auth_level, private_key)
+      token_params = {
+        grant_type: 'authorization_code',
+        code: code,
+        redirect_uri: redirect_url,
+        client_id: client_id,
+        client_secret: client_secret
+      }
+      token_header = {'Content-Type' => "application/x-www-form-urlencoded", 'Cache-Control' => "no-cache"}
+
+      authorization_header = nil
+      if auth_level == 'L2'
+        authorization_header = generate_signature(token_url, token_params, 'POST', 'application/x-www-form-urlencoded', client_id, private_key)
+
+        token_header.merge!({"Authorization" => authorization_header})
+      end
+      token_response = RestClient.post(token_url, token_params, token_header)
+      JSON.parse(token_response)
+    end
+
+    def get_personal_data(personal_url, uinfin, token_response, client_id, attributes, auth_level, private_key)
+      puts '------ Fetching personal data ------'
+      parameters = {
+        :client_id => client_id,
+        :attributes => attributes
+      }
+      authorization_header = token_response['token_type']+' '+token_response['access_token']
+      url = personal_url + "/" + uinfin + "/"
+
+      if auth_level == 'L2'
+        auth_header = generate_signature(url, parameters, 'GET', 'application/x-www-form-urlencoded', client_id, private_key)
+
+        authorization_header = auth_header+','+authorization_header
+      end
+
+      personal_header = {
+        'Cache-Control' => "no-cache",
+        :Authorization => authorization_header,
+        :params => parameters
+      }
+      RestClient.get(url, personal_header)
+    end
+
+    # Verify JWS
+    def verify_JWS(token_response, private_key)
+      jwk = JOSE::JWK.from_pem_file(private_key)
+      decoded_JWS = jwk.verify(token_response["access_token"])
+      decoded = JSON.parse(decoded_JWS[1])
+      decoded
+    end
+
+    # Decrypt JWE
+    def decrypt_JWE_response(personal_data_response, private_key)
+      jwk = JOSE::JWK.from_pem_file(private_key)
+      decrypted_personal_JWE = jwk.block_decrypt(personal_data_response.body)
+      decrypted_personal_JWT = jwk.verify(decrypted_personal_JWE[0])
+      JSON.parse(decrypted_personal_JWT[1])
+    end
+
+    private
+
+    # Generate digital fingerprint
+    def generate_signature(url, params, method, content_type, app_id, private_key)
+      url = url.gsub(".api.gov.sg", ".e.api.gov.sg");
+      time_stamp = DateTime.now.strftime('%Q')
+      nonce_value = time_stamp+'00'
+
+      # Initialize header
+      apex_headers = {
+        "app_id": app_id,
+        "nonce": nonce_value,
+        "signature_method": "RS256",
+        "timestamp": time_stamp
+      }
+
+      if method == 'POST' && content_type!= "application/x-www-form-urlencoded"
+        params = {}
+      end
+
+      # Construct baseString
+      base_params =  apex_headers.merge(params).to_query
+      baseString = URI.unescape(method + "&" + url + "&" + base_params)
+
+      # Sign the baseString with private_key
+      pkey = OpenSSL::PKey::RSA.new(File.read(private_key))
+      digest = OpenSSL::Digest::SHA256.new
+      digital_signature = Base64.strict_encode64(pkey.sign(digest, baseString))
+      # v3 auth header
+      authorization_header = "PKI_SIGN app_id="+app_id+
+      ",timestamp="+time_stamp+",nonce="+nonce_value+
+      ",signature_method=RS256,signature="+digital_signature
+    end
+  end
+end

data/lib/myinfo_ruby/version.rb

@@ -0,0 +1,3 @@
+module MyinfoRuby
+  VERSION = "1.0.0"
+end

metadata

@@ -0,0 +1,124 @@
+--- !ruby/object:Gem::Specification
+name: myinfo_ruby
+version: !ruby/object:Gem::Version
+  version: 1.0.0
+platform: ruby
+authors:
+- Manoj More S
+autorequire: 
+bindir: exe
+cert_chain: []
+date: 2019-05-11 00:00:00.000000000 Z
+dependencies:
+- !ruby/object:Gem::Dependency
+  name: bundler
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '1.16'
+  type: :development
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '1.16'
+- !ruby/object:Gem::Dependency
+  name: rake
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '10.0'
+  type: :development
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '10.0'
+- !ruby/object:Gem::Dependency
+  name: rspec
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '3.0'
+  type: :development
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '3.0'
+- !ruby/object:Gem::Dependency
+  name: jose
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '1.1'
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: 1.1.0
+  type: :development
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '1.1'
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: 1.1.0
+- !ruby/object:Gem::Dependency
+  name: rest-client
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - '='
+      - !ruby/object:Gem::Version
+        version: '2.0'
+  type: :development
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - '='
+      - !ruby/object:Gem::Version
+        version: '2.0'
+description: Use this to fetch the personal details from MyInfo API.
+email:
+- lettertomanojmore@gmail.com
+executables: []
+extensions: []
+extra_rdoc_files: []
+files:
+- lib/myinfo_ruby.rb
+- lib/myinfo_ruby/client.rb
+- lib/myinfo_ruby/security.rb
+- lib/myinfo_ruby/version.rb
+homepage: https://github.com/ManojmoreS/myinfo_ruby
+licenses:
+- MIT
+metadata: {}
+post_install_message: 
+rdoc_options: []
+require_paths:
+- lib
+required_ruby_version: !ruby/object:Gem::Requirement
+  requirements:
+  - - ">="
+    - !ruby/object:Gem::Version
+      version: 2.0.0
+required_rubygems_version: !ruby/object:Gem::Requirement
+  requirements:
+  - - ">="
+    - !ruby/object:Gem::Version
+      version: '0'
+requirements: []
+rubyforge_project: 
+rubygems_version: 2.5.2.3
+signing_key: 
+specification_version: 4
+summary: Ruby gem for Singapore MyInfo API.
+test_files: []