rack-auth-travis-webhook 1.0.0

checksums.yaml

@@ -0,0 +1,7 @@
+---
+SHA1:
+  metadata.gz: 9a2d8ff9a1235e06ec48ab8d29eb03da4dce0dd7
+  data.tar.gz: cc068e18c7e312edf7e61ae7cafec84c70115d6a
+SHA512:
+  metadata.gz: 1b3bc252acb6b0e1257e2ab0346c88e2eb48938952a94e7f55947b2c41b5362d3702cde056d454f04d97d9f312fc8fdc8a8531f27f6c29249f5697b3f4f7f792
+  data.tar.gz: c8bb2e5de469f88d69c24bd3161b1de3435a3e8f51a7b8ade91dcea8f06a2902ba3ba0fffe1531dffd6ae7ee8da06492051de8edb08738b8d1bae941668253c7

data/.gitignore

@@ -0,0 +1,12 @@
+/.bundle/
+/.yardoc
+/Gemfile.lock
+/_yardoc/
+/coverage/
+/doc/
+/pkg/
+/spec/reports/
+/tmp/
+
+# rspec failure tracking
+.rspec_status

data/.rspec

@@ -0,0 +1,2 @@
+--format documentation
+--color

data/.rubocop.yml

@@ -0,0 +1,5 @@
+Metrics/BlockLength:
+  Enabled: false
+
+Style/Documentation:
+  Enabled: false

data/.travis.yml

@@ -0,0 +1,5 @@
+sudo: false
+language: ruby
+rvm:
+  - 2.0.0
+before_install: gem install bundler -v 1.14.3

data/Gemfile

@@ -0,0 +1,4 @@
+source 'https://rubygems.org'
+
+# Specify your gem's dependencies in rack-auth-travis_webhook.gemspec
+gemspec

data/LICENSE

@@ -0,0 +1,21 @@
+The MIT License (MIT)
+
+Copyright (c) 2017 Nikhil Benesch
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in
+all copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN
+THE SOFTWARE.

data/README.md

@@ -0,0 +1,16 @@
+# Rack::Auth::TravisWebhook
+
+Rack middleware to [verify Travis CI webhook requests][0].
+
+[0]: https://docs.travis-ci.com/user/notifications/#Verifying-Webhook-requests
+
+## Usage
+
+```ruby
+require 'rack/auth/travis_webhook'
+
+Rack::Builder.new do
+  use Rack::Auth::TravisWebhook
+  run ->(_env) { [200, {}, ["If you can see me, you must be Travis!"]] }
+end
+```

data/Rakefile

@@ -0,0 +1,8 @@
+require 'bundler/gem_tasks'
+require 'rspec/core/rake_task'
+require 'rubocop/rake_task'
+
+RSpec::Core::RakeTask.new(:spec)
+RuboCop::RakeTask.new
+
+task default: [:spec, :rubocop]

data/lib/rack/auth/travis_webhook.rb

@@ -0,0 +1,59 @@
+require 'base64'
+require 'json'
+require 'open-uri'
+require 'openssl'
+require 'rack/auth/travis_webhook/version'
+
+module Rack
+  module Auth
+    class TravisWebhook
+      TRAVIS_CONFIG_URL = 'https://api.travis-ci.org/config'.freeze
+
+      def initialize(app)
+        @app = app
+        @public_key = fetch_public_key
+      end
+
+      def call(env)
+        return status(405) unless request(env).post?
+        return status(401) unless signature(env)
+        return status(400) unless payload(env)
+        return status(403) unless verify(env)
+        @app.call(env)
+      end
+
+      private
+
+      def request(env)
+        @request ||= Rack::Request.new(env)
+      end
+
+      def signature(env)
+        env['HTTP_SIGNATURE']
+      end
+
+      def payload(env)
+        request(env).POST['payload']
+      end
+
+      def verify(env)
+        @public_key.verify(
+          OpenSSL::Digest::SHA1.new,
+          Base64.decode64(signature(env)),
+          payload(env)
+        )
+      end
+
+      def fetch_public_key
+        config = JSON.parse(open(TRAVIS_CONFIG_URL).read)
+        OpenSSL::PKey::RSA.new(
+          config['config']['notifications']['webhook']['public_key']
+        )
+      end
+
+      def status(code)
+        [code, {}, []]
+      end
+    end
+  end
+end

data/lib/rack/auth/travis_webhook/version.rb

@@ -0,0 +1,7 @@
+module Rack
+  module Auth
+    class TravisWebhook
+      VERSION = '1.0.0'.freeze
+    end
+  end
+end

data/rack-auth-travis-webhook.gemspec

@@ -0,0 +1,28 @@
+# coding: utf-8
+lib = File.expand_path('../lib', __FILE__)
+$LOAD_PATH.unshift(lib) unless $LOAD_PATH.include?(lib)
+require 'rack/auth/travis_webhook/version'
+
+Gem::Specification.new do |spec|
+  spec.name          = 'rack-auth-travis-webhook'
+  spec.version       = Rack::Auth::TravisWebhook::VERSION
+  spec.authors       = ['Nikhil Benesch']
+  spec.email         = ['nikhil.benesch@gmail.com']
+
+  spec.summary       = 'Rack middleware to verify Travis CI webhook requests.'
+  spec.homepage      = 'https://github.com/benesch/rack-auth-travis-webhook'
+  spec.license       = 'MIT'
+
+  spec.files         = `git ls-files -z`.split("\x0").reject do |f|
+    f.match(%r{^(test|spec|features)/})
+  end
+  spec.require_paths = ['lib']
+
+  spec.add_development_dependency 'bundler', '~> 1.14'
+  spec.add_development_dependency 'rack-test', '~> 0.6'
+  spec.add_development_dependency 'rake', '~> 10.0'
+  spec.add_development_dependency 'rspec', '~> 3.0'
+  spec.add_development_dependency 'rubocop', '~> 0.47'
+  spec.add_development_dependency 'vcr', '~> 3.0'
+  spec.add_development_dependency 'webmock', '~> 2.1'
+end

metadata

@@ -0,0 +1,153 @@
+--- !ruby/object:Gem::Specification
+name: rack-auth-travis-webhook
+version: !ruby/object:Gem::Version
+  version: 1.0.0
+platform: ruby
+authors:
+- Nikhil Benesch
+autorequire: 
+bindir: bin
+cert_chain: []
+date: 2017-01-25 00:00:00.000000000 Z
+dependencies:
+- !ruby/object:Gem::Dependency
+  name: bundler
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - ~>
+      - !ruby/object:Gem::Version
+        version: '1.14'
+  type: :development
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - ~>
+      - !ruby/object:Gem::Version
+        version: '1.14'
+- !ruby/object:Gem::Dependency
+  name: rack-test
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - ~>
+      - !ruby/object:Gem::Version
+        version: '0.6'
+  type: :development
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - ~>
+      - !ruby/object:Gem::Version
+        version: '0.6'
+- !ruby/object:Gem::Dependency
+  name: rake
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - ~>
+      - !ruby/object:Gem::Version
+        version: '10.0'
+  type: :development
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - ~>
+      - !ruby/object:Gem::Version
+        version: '10.0'
+- !ruby/object:Gem::Dependency
+  name: rspec
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - ~>
+      - !ruby/object:Gem::Version
+        version: '3.0'
+  type: :development
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - ~>
+      - !ruby/object:Gem::Version
+        version: '3.0'
+- !ruby/object:Gem::Dependency
+  name: rubocop
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - ~>
+      - !ruby/object:Gem::Version
+        version: '0.47'
+  type: :development
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - ~>
+      - !ruby/object:Gem::Version
+        version: '0.47'
+- !ruby/object:Gem::Dependency
+  name: vcr
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - ~>
+      - !ruby/object:Gem::Version
+        version: '3.0'
+  type: :development
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - ~>
+      - !ruby/object:Gem::Version
+        version: '3.0'
+- !ruby/object:Gem::Dependency
+  name: webmock
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - ~>
+      - !ruby/object:Gem::Version
+        version: '2.1'
+  type: :development
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - ~>
+      - !ruby/object:Gem::Version
+        version: '2.1'
+description: 
+email:
+- nikhil.benesch@gmail.com
+executables: []
+extensions: []
+extra_rdoc_files: []
+files:
+- .gitignore
+- .rspec
+- .rubocop.yml
+- .travis.yml
+- Gemfile
+- LICENSE
+- README.md
+- Rakefile
+- lib/rack/auth/travis_webhook.rb
+- lib/rack/auth/travis_webhook/version.rb
+- rack-auth-travis-webhook.gemspec
+homepage: https://github.com/benesch/rack-auth-travis-webhook
+licenses:
+- MIT
+metadata: {}
+post_install_message: 
+rdoc_options: []
+require_paths:
+- lib
+required_ruby_version: !ruby/object:Gem::Requirement
+  requirements:
+  - - '>='
+    - !ruby/object:Gem::Version
+      version: '0'
+required_rubygems_version: !ruby/object:Gem::Requirement
+  requirements:
+  - - '>='
+    - !ruby/object:Gem::Version
+      version: '0'
+requirements: []
+rubyforge_project: 
+rubygems_version: 2.0.14.1
+signing_key: 
+specification_version: 4
+summary: Rack middleware to verify Travis CI webhook requests.
+test_files: []