openstax_api 8.1.1 → 8.2.0

data/spec/lib/openstax/api/params_spec.rb

@@ -0,0 +1,78 @@
+# coding: utf-8
+require 'rails_helper'
+
+module OpenStax
+  module Api
+    describe Params do
+
+      let(:params) { {a: '1', b: 2, c: nil, d: '', e: '♥', f: true} }
+      let(:signed) { described_class.sign(params: params, secret: 'secret') }
+
+      it 'disallows blank secrets' do
+        expect{
+          described_class.sign(params: {}, secret: nil)
+        }.to raise_error(StandardError)
+      end
+
+      it 'signs and verifies' do
+        expect(signed[:timestamp]).not_to be_blank
+        expect(signed[:signature]).not_to be_blank
+
+        expect(
+          described_class.signature_and_timestamp_valid?(params: signed, secret: 'secret')
+        ).to eq true
+      end
+
+      it 'does not verify is signature does not match' do
+        signed[:signature] += "a"
+        expect(
+          described_class.signature_and_timestamp_valid?(params: signed, secret: 'secret')
+        ).to eq false
+      end
+
+      it 'does not verify if signature blank' do
+        signed[:signature] = " "
+        expect(
+          described_class.signature_and_timestamp_valid?(params: signed, secret: 'secret')
+        ).to eq false
+      end
+
+      describe "altered params" do
+
+        it 'rejects additions' do
+          expect(
+            described_class.signature_and_timestamp_valid?(
+              params: signed.merge(evil: 'yes'),
+              secret: 'secret')
+          ).to eq false
+        end
+
+        it 'rejects alterations' do
+          expect(
+            described_class.signature_and_timestamp_valid?(
+              params: signed.merge(b: 10000),
+              secret: 'secret')
+          ).to eq false
+        end
+
+        it 'rejects deletions' do
+          expect(
+            described_class.signature_and_timestamp_valid?(
+              params: signed.except(:a),
+              secret: 'secret')
+          ).to eq false
+        end
+
+      end
+
+      it 'does not verify if timestamp too long ago' do
+        expect(
+          described_class.signature_and_timestamp_valid?(params: signed,
+                                                         secret: 'secret',
+                                                         timestamp_window_width: 0.minutes)
+        ).to eq false
+      end
+
+    end
+  end
+end

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: openstax_api
 version: !ruby/object:Gem::Version
-  version: 8.1.1
+  version: 8.2.0
 platform: ruby
 authors:
 - Dante Soares
@@ -9,7 +9,7 @@ authors:
 autorequire: 
 bindir: bin
 cert_chain: []
-date: 2017-01-13 00:00:00.000000000 Z
+date: 2017-09-13 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: rails
@@ -247,6 +247,20 @@ dependencies:
     - - ">="
       - !ruby/object:Gem::Version
         version: '0'
+- !ruby/object:Gem::Dependency
+  name: byebug
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: '0'
+  type: :development
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: '0'
 description: Provides models, controllers and libraries that help OpenStax products
   define API's for user applications.
 email:
@@ -267,6 +281,7 @@ files:
 - lib/openstax/api/constraints.rb
 - lib/openstax/api/doorkeeper_application_includes.rb
 - lib/openstax/api/engine.rb
+- lib/openstax/api/params.rb
 - lib/openstax/api/representable_schema_printer.rb
 - lib/openstax/api/responder_with_put_patch_delete_content.rb
 - lib/openstax/api/roar.rb
@@ -324,6 +339,7 @@ files:
 - spec/lib/openstax/api/apipie_spec.rb
 - spec/lib/openstax/api/constraints_spec.rb
 - spec/lib/openstax/api/doorkeeper_application_includes_spec.rb
+- spec/lib/openstax/api/params_spec.rb
 - spec/lib/openstax/api/representable_schema_printer_spec.rb
 - spec/lib/openstax/api/roar_spec.rb
 - spec/lib/openstax/api/routing_mapper_includes_spec.rb
@@ -352,7 +368,7 @@ required_rubygems_version: !ruby/object:Gem::Requirement
       version: '0'
 requirements: []
 rubyforge_project: 
-rubygems_version: 2.6.6
+rubygems_version: 2.4.5.1
 signing_key: 
 specification_version: 4
 summary: API utilities for OpenStax products and tools.
@@ -407,6 +423,7 @@ test_files:
 - spec/lib/openstax/api/apipie_spec.rb
 - spec/lib/openstax/api/constraints_spec.rb
 - spec/lib/openstax/api/doorkeeper_application_includes_spec.rb
+- spec/lib/openstax/api/params_spec.rb
 - spec/lib/openstax/api/representable_schema_printer_spec.rb
 - spec/lib/openstax/api/roar_spec.rb
 - spec/lib/openstax/api/routing_mapper_includes_spec.rb