rack-contrib-nonce 0.0.1

Sign up to get free protection for your applications and to get access to all the features.
checksums.yaml ADDED
@@ -0,0 +1,7 @@
1
+ ---
2
+ SHA1:
3
+ metadata.gz: 0f138ec3d636ee77361d9874ce8481540168133f
4
+ data.tar.gz: a45e17849c2b307e5c93021554fe6b0c17c2a6dc
5
+ SHA512:
6
+ metadata.gz: c3220fd16f3be7b86f666e1b14e3e37b88ff1780609f632061277bfc3e191d9327dabc7cf7d46c862ff7341dd613f9ef4254e34866a5ce8683f3b0d6bd4271c8
7
+ data.tar.gz: fed70e46e2ad6ad393f78ad1cddb6c6112dce5ff1ff41df3264bb0f910a3cad66bcc516ce9e6c16dc55d55ef5f54d2622759fa330ab09d2dd82f9c6f6c3a3927
data/.gitignore ADDED
@@ -0,0 +1 @@
1
+ pkg/
data/Guardfile ADDED
@@ -0,0 +1,8 @@
1
+ #!/usr/bin/env ruby
2
+
3
+ guard :rspec, all_on_start: false, all_after_pass: false, notification: false do
4
+ watch(%r{^spec/.+_spec\.rb$})
5
+ watch(%r{^lib/(.+)\.rb$}) { |m| "spec/#{m[1]}_spec.rb" }
6
+ watch('spec/spec_helper.rb') { "spec" }
7
+ end
8
+
data/LICENSE ADDED
@@ -0,0 +1,21 @@
1
+ The MIT License (MIT)
2
+
3
+ Copyright (c) 2013 ZippyKid
4
+
5
+ Permission is hereby granted, free of charge, to any person obtaining a copy of
6
+ this software and associated documentation files (the "Software"), to deal in
7
+ the Software without restriction, including without limitation the rights to
8
+ use, copy, modify, merge, publish, distribute, sublicense, and/or sell copies of
9
+ the Software, and to permit persons to whom the Software is furnished to do so,
10
+ subject to the following conditions:
11
+
12
+ The above copyright notice and this permission notice shall be included in all
13
+ copies or substantial portions of the Software.
14
+
15
+ THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
16
+ IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS
17
+ FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR
18
+ COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER
19
+ IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN
20
+ CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.
21
+
data/Rakefile ADDED
@@ -0,0 +1,6 @@
1
+ require "bundler/gem_tasks"
2
+ require 'rspec/core/rake_task'
3
+
4
+ RSpec::Core::RakeTask.new(:spec)
5
+ task :default => :spec
6
+
@@ -0,0 +1,35 @@
1
+ module Rack
2
+ module Contrib
3
+ class Nonce
4
+ VERSION = '0.0.1'
5
+
6
+ def initialize app, opts
7
+ @app = app
8
+ @logger = opts[:logger] || Logger.new('/dev/null')
9
+ @seen = opts[:seen] || []
10
+ @header = opts[:header] || 'Nonce'
11
+ end
12
+
13
+ def header_name
14
+ 'HTTP_' + @header.upcase
15
+ end
16
+
17
+ def call env
18
+ unless env[header_name]
19
+ @logger.error "Denied: #{header} not present."
20
+ return [401, {}, []]
21
+ end
22
+
23
+ if @seen.include? env[header_name]
24
+ @logger.error "Denied: #{header} not unique."
25
+ return [401, {}, []]
26
+ end
27
+
28
+ @seen << env[header_name]
29
+
30
+ @app.call(env)
31
+ end
32
+ end
33
+ end
34
+ end
35
+
@@ -0,0 +1,24 @@
1
+ lib = File.expand_path('../lib', __FILE__)
2
+ $LOAD_PATH.unshift(lib) unless $LOAD_PATH.include?(lib)
3
+
4
+ require 'rack/contrib/nonce'
5
+
6
+ Gem::Specification.new do |gem|
7
+ gem.name = 'rack-contrib-nonce'
8
+ gem.version = Rack::Contrib::Nonce::VERSION
9
+ gem.summary = 'Ensure a nonce is not used twice, to prevent replay attacks.'
10
+ gem.homepage = 'https://github.com/zippykid/rack-contrib-nonce'
11
+ gem.authors = ['Graham Christensen']
12
+ gem.email = ['info@zippykid.com']
13
+ gem.licenses = ['MIT']
14
+
15
+ gem.files = `git ls-files`.split($/)
16
+ gem.test_files = gem.files.grep(%r{^(test|spec|features)/})
17
+ gem.require_paths = ['lib']
18
+
19
+ gem.add_development_dependency('rake')
20
+ gem.add_development_dependency('rspec')
21
+ gem.add_development_dependency('guard')
22
+ gem.add_development_dependency('guard-rspec')
23
+ end
24
+
metadata ADDED
@@ -0,0 +1,106 @@
1
+ --- !ruby/object:Gem::Specification
2
+ name: rack-contrib-nonce
3
+ version: !ruby/object:Gem::Version
4
+ version: 0.0.1
5
+ platform: ruby
6
+ authors:
7
+ - Graham Christensen
8
+ autorequire:
9
+ bindir: bin
10
+ cert_chain: []
11
+ date: 2013-07-29 00:00:00.000000000 Z
12
+ dependencies:
13
+ - !ruby/object:Gem::Dependency
14
+ name: rake
15
+ requirement: !ruby/object:Gem::Requirement
16
+ requirements:
17
+ - - '>='
18
+ - !ruby/object:Gem::Version
19
+ version: '0'
20
+ type: :development
21
+ prerelease: false
22
+ version_requirements: !ruby/object:Gem::Requirement
23
+ requirements:
24
+ - - '>='
25
+ - !ruby/object:Gem::Version
26
+ version: '0'
27
+ - !ruby/object:Gem::Dependency
28
+ name: rspec
29
+ requirement: !ruby/object:Gem::Requirement
30
+ requirements:
31
+ - - '>='
32
+ - !ruby/object:Gem::Version
33
+ version: '0'
34
+ type: :development
35
+ prerelease: false
36
+ version_requirements: !ruby/object:Gem::Requirement
37
+ requirements:
38
+ - - '>='
39
+ - !ruby/object:Gem::Version
40
+ version: '0'
41
+ - !ruby/object:Gem::Dependency
42
+ name: guard
43
+ requirement: !ruby/object:Gem::Requirement
44
+ requirements:
45
+ - - '>='
46
+ - !ruby/object:Gem::Version
47
+ version: '0'
48
+ type: :development
49
+ prerelease: false
50
+ version_requirements: !ruby/object:Gem::Requirement
51
+ requirements:
52
+ - - '>='
53
+ - !ruby/object:Gem::Version
54
+ version: '0'
55
+ - !ruby/object:Gem::Dependency
56
+ name: guard-rspec
57
+ requirement: !ruby/object:Gem::Requirement
58
+ requirements:
59
+ - - '>='
60
+ - !ruby/object:Gem::Version
61
+ version: '0'
62
+ type: :development
63
+ prerelease: false
64
+ version_requirements: !ruby/object:Gem::Requirement
65
+ requirements:
66
+ - - '>='
67
+ - !ruby/object:Gem::Version
68
+ version: '0'
69
+ description:
70
+ email:
71
+ - info@zippykid.com
72
+ executables: []
73
+ extensions: []
74
+ extra_rdoc_files: []
75
+ files:
76
+ - .gitignore
77
+ - Guardfile
78
+ - LICENSE
79
+ - Rakefile
80
+ - lib/rack/contrib/nonce.rb
81
+ - rack-contrib-nonce.gemspec
82
+ homepage: https://github.com/zippykid/rack-contrib-nonce
83
+ licenses:
84
+ - MIT
85
+ metadata: {}
86
+ post_install_message:
87
+ rdoc_options: []
88
+ require_paths:
89
+ - lib
90
+ required_ruby_version: !ruby/object:Gem::Requirement
91
+ requirements:
92
+ - - '>='
93
+ - !ruby/object:Gem::Version
94
+ version: '0'
95
+ required_rubygems_version: !ruby/object:Gem::Requirement
96
+ requirements:
97
+ - - '>='
98
+ - !ruby/object:Gem::Version
99
+ version: '0'
100
+ requirements: []
101
+ rubyforge_project:
102
+ rubygems_version: 2.0.5
103
+ signing_key:
104
+ specification_version: 4
105
+ summary: Ensure a nonce is not used twice, to prevent replay attacks.
106
+ test_files: []