ndr_authenticate 0.3.5 → 0.4.0
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- checksums.yaml +4 -4
- data/CHANGELOG.md +5 -1
- data/SECURITY.md +35 -0
- data/lib/ndr_authenticate/version.rb +1 -1
- metadata +9 -12
checksums.yaml
CHANGED
|
@@ -1,7 +1,7 @@
|
|
|
1
1
|
---
|
|
2
2
|
SHA256:
|
|
3
|
-
metadata.gz:
|
|
4
|
-
data.tar.gz:
|
|
3
|
+
metadata.gz: 28aae64da5ae88aac1a63815e4122a4cb58002140c5c14062f3a8a24d12e4d18
|
|
4
|
+
data.tar.gz: f24ee8318c9d82bb94508e79dec9a9bfd39eb6b0e72324a65a92f853744929fc
|
|
5
5
|
SHA512:
|
|
6
|
-
metadata.gz:
|
|
7
|
-
data.tar.gz:
|
|
6
|
+
metadata.gz: 13128a0cc0edd35baa4597350b06391341dba89f788d4bbdf5bccb4887ed8d9dfb01a7f4a7aa024b81de1ad44c3cfb7d1734fe86844d4a838fd1252548e501a9
|
|
7
|
+
data.tar.gz: a89e710f0e134d026e620b23a3cc421ce6a4f72066aa003c5b411b75c960961ed1312ecbb1ed9982344fa23a3249ca44b6a7fd614d44b364be2546b96334421e
|
data/CHANGELOG.md
CHANGED
data/SECURITY.md
ADDED
|
@@ -0,0 +1,35 @@
|
|
|
1
|
+
# Security
|
|
2
|
+
|
|
3
|
+
NHS England takes security and the protection of private data extremely seriously. If you believe you have found a vulnerability or other issue which has compromised or could compromise the security of any of our systems and/or private data managed by our systems, please do not hesitate to contact us using the methods outlined below.
|
|
4
|
+
|
|
5
|
+
## Table of Contents
|
|
6
|
+
|
|
7
|
+
- [Security](#security)
|
|
8
|
+
- [Table of Contents](#table-of-contents)
|
|
9
|
+
- [Reporting a vulnerability](#reporting-a-vulnerability)
|
|
10
|
+
- [Email](#email)
|
|
11
|
+
- [NCSC](#ncsc)
|
|
12
|
+
- [General Security Enquiries](#general-security-enquiries)
|
|
13
|
+
|
|
14
|
+
## Reporting a vulnerability
|
|
15
|
+
|
|
16
|
+
Please note, email is our preferred method of receiving reports.
|
|
17
|
+
|
|
18
|
+
### Email
|
|
19
|
+
|
|
20
|
+
If you wish to notify us of a vulnerability via email, please include detailed information on the nature of the vulnerability and any steps required to reproduce it.
|
|
21
|
+
|
|
22
|
+
You can reach us at:
|
|
23
|
+
|
|
24
|
+
- [Brian.Shand@nhs.net](mailto:Brian.Shand@nhs.net)
|
|
25
|
+
- [cybersecurity@nhs.net](mailto:cybersecurity@nhs.net)
|
|
26
|
+
|
|
27
|
+
### NCSC
|
|
28
|
+
|
|
29
|
+
You can send your report to the National Cyber Security Centre, who will assess your report and pass it on to NHS England if necessary.
|
|
30
|
+
|
|
31
|
+
You can report vulnerabilities here: [https://www.ncsc.gov.uk/information/vulnerability-reporting](https://www.ncsc.gov.uk/information/vulnerability-reporting)
|
|
32
|
+
|
|
33
|
+
## General Security Enquiries
|
|
34
|
+
|
|
35
|
+
If you have general enquiries regarding our cybersecurity, please reach out to us at [cybersecurity@nhs.net](mailto:cybersecurity@nhs.net)
|
metadata
CHANGED
|
@@ -1,14 +1,13 @@
|
|
|
1
1
|
--- !ruby/object:Gem::Specification
|
|
2
2
|
name: ndr_authenticate
|
|
3
3
|
version: !ruby/object:Gem::Version
|
|
4
|
-
version: 0.
|
|
4
|
+
version: 0.4.0
|
|
5
5
|
platform: ruby
|
|
6
6
|
authors:
|
|
7
7
|
- NCRS Development Team
|
|
8
|
-
autorequire:
|
|
9
8
|
bindir: bin
|
|
10
9
|
cert_chain: []
|
|
11
|
-
date:
|
|
10
|
+
date: 1980-01-02 00:00:00.000000000 Z
|
|
12
11
|
dependencies:
|
|
13
12
|
- !ruby/object:Gem::Dependency
|
|
14
13
|
name: devise
|
|
@@ -44,14 +43,14 @@ dependencies:
|
|
|
44
43
|
requirements:
|
|
45
44
|
- - ">="
|
|
46
45
|
- !ruby/object:Gem::Version
|
|
47
|
-
version: '
|
|
46
|
+
version: '4.1'
|
|
48
47
|
type: :runtime
|
|
49
48
|
prerelease: false
|
|
50
49
|
version_requirements: !ruby/object:Gem::Requirement
|
|
51
50
|
requirements:
|
|
52
51
|
- - ">="
|
|
53
52
|
- !ruby/object:Gem::Version
|
|
54
|
-
version: '
|
|
53
|
+
version: '4.1'
|
|
55
54
|
- !ruby/object:Gem::Dependency
|
|
56
55
|
name: net-ldap
|
|
57
56
|
requirement: !ruby/object:Gem::Requirement
|
|
@@ -75,7 +74,7 @@ dependencies:
|
|
|
75
74
|
version: '7.1'
|
|
76
75
|
- - "<"
|
|
77
76
|
- !ruby/object:Gem::Version
|
|
78
|
-
version: '8.
|
|
77
|
+
version: '8.2'
|
|
79
78
|
type: :runtime
|
|
80
79
|
prerelease: false
|
|
81
80
|
version_requirements: !ruby/object:Gem::Requirement
|
|
@@ -85,7 +84,7 @@ dependencies:
|
|
|
85
84
|
version: '7.1'
|
|
86
85
|
- - "<"
|
|
87
86
|
- !ruby/object:Gem::Version
|
|
88
|
-
version: '8.
|
|
87
|
+
version: '8.2'
|
|
89
88
|
- !ruby/object:Gem::Dependency
|
|
90
89
|
name: yubikey
|
|
91
90
|
requirement: !ruby/object:Gem::Requirement
|
|
@@ -210,6 +209,7 @@ files:
|
|
|
210
209
|
- MIT-LICENSE
|
|
211
210
|
- README.md
|
|
212
211
|
- Rakefile
|
|
212
|
+
- SECURITY.md
|
|
213
213
|
- app/assets/config/ndr_authenticate_manifest.js
|
|
214
214
|
- app/assets/images/ndr_authenticate/.keep
|
|
215
215
|
- app/assets/javascripts/ndr_authenticate/ndr_authenticate.js
|
|
@@ -261,11 +261,9 @@ files:
|
|
|
261
261
|
- lib/ndr_authenticate/yubikey.rb
|
|
262
262
|
- lib/ndr_authenticate/yubikey/verify.rb
|
|
263
263
|
- lib/tasks/ndr_authenticate_tasks.rake
|
|
264
|
-
homepage:
|
|
265
264
|
licenses:
|
|
266
265
|
- MIT
|
|
267
266
|
metadata: {}
|
|
268
|
-
post_install_message:
|
|
269
267
|
rdoc_options: []
|
|
270
268
|
require_paths:
|
|
271
269
|
- lib
|
|
@@ -273,15 +271,14 @@ required_ruby_version: !ruby/object:Gem::Requirement
|
|
|
273
271
|
requirements:
|
|
274
272
|
- - ">="
|
|
275
273
|
- !ruby/object:Gem::Version
|
|
276
|
-
version: '3.
|
|
274
|
+
version: '3.3'
|
|
277
275
|
required_rubygems_version: !ruby/object:Gem::Requirement
|
|
278
276
|
requirements:
|
|
279
277
|
- - ">="
|
|
280
278
|
- !ruby/object:Gem::Version
|
|
281
279
|
version: '0'
|
|
282
280
|
requirements: []
|
|
283
|
-
rubygems_version: 3.
|
|
284
|
-
signing_key:
|
|
281
|
+
rubygems_version: 3.6.9
|
|
285
282
|
specification_version: 4
|
|
286
283
|
summary: Authenticate login
|
|
287
284
|
test_files: []
|