rack-oauth2 0.6.9 → 0.7.0

data/.gitignore

@@ -17,6 +17,5 @@ tmtags
 coverage
 rdoc
 pkg
-Gemfile.lock
 
 ## PROJECT::SPECIFIC

data/Gemfile.lock

@@ -0,0 +1,46 @@
+PATH
+  remote: .
+  specs:
+    rack-oauth2 (0.6.9)
+      activesupport (>= 2.3)
+      attr_required (>= 0.0.3)
+      i18n
+      json (>= 1.4.3)
+      rack (>= 1.1)
+      restclient_with_cert
+
+GEM
+  remote: http://rubygems.org/
+  specs:
+    activesupport (3.0.7)
+    attr_required (0.0.3)
+    diff-lcs (1.1.2)
+    fakeweb (1.3.0)
+    i18n (0.5.0)
+    json (1.5.1)
+    mime-types (1.16)
+    rack (1.2.2)
+    rake (0.8.7)
+    rcov (0.9.9)
+    rest-client (1.6.1)
+      mime-types (>= 1.16)
+    restclient_with_cert (0.0.7)
+      rest-client (>= 1.6)
+    rspec (2.5.0)
+      rspec-core (~> 2.5.0)
+      rspec-expectations (~> 2.5.0)
+      rspec-mocks (~> 2.5.0)
+    rspec-core (2.5.2)
+    rspec-expectations (2.5.0)
+      diff-lcs (~> 1.1.2)
+    rspec-mocks (2.5.0)
+
+PLATFORMS
+  ruby
+
+DEPENDENCIES
+  fakeweb (>= 1.3)
+  rack-oauth2!
+  rake (>= 0.8)
+  rcov (>= 0.9)
+  rspec (<= 2.5, >= 2)

data/VERSION

@@ -1 +1 @@
-0.6.9
+0.7.0

data/lib/rack/oauth2/access_token/legacy.rb

@@ -7,7 +7,7 @@ module Rack
           self.expires_in = self.expires_in.try(:to_i)
         end
 
-        def to_s
+        def to_s # This is for fb_graph
           self.access_token
         end
 

data/lib/rack/oauth2/access_token/mac.rb

@@ -2,13 +2,19 @@ module Rack
   module OAuth2
     class AccessToken
       class MAC < AccessToken
-        attr_required :secret, :algorithm
-        attr_optional :timestamp, :nonce, :body_hash, :signature
+        attr_required :mac_key, :mac_algorithm
+        attr_optional :issued_at, :ext
+        attr_reader :nonce, :body_hash, :signature
+
+        def initialize(attributes = {})
+          super(attributes)
+          @issued_at ||= Time.now.utc
+        end
 
         def token_response
           super.merge(
-            :secret => secret,
-            :algorithm => algorithm
+            :mac_key => mac_key,
+            :mac_algorithm => mac_algorithm
           )
         end
 
@@ -16,22 +22,20 @@ module Rack
           if request.body_hash.present?
             _body_hash_ = BodyHash.new(
               :raw_body  => request.body.read,
-              :algorithm => self.algorithm
+              :algorithm => self.mac_algorithm
             )
             _body_hash_.verify!(request.body_hash)
           end
           _signature_ = Signature.new(
-            :token     => request.access_token,
-            :secret    => self.secret,
-            :algorithm => self.algorithm,
-            :timestamp => request.timestamp,
-            :nonce     => request.nonce,
-            :body_hash => request.body_hash,
-            :method    => request.request_method,
-            :host      => request.host,
-            :port      => request.port,
-            :path      => request.path,
-            :query     => request.GET
+            :secret      => self.mac_key,
+            :algorithm   => self.mac_algorithm,
+            :nonce       => request.nonce,
+            :method      => request.request_method,
+            :request_uri => request.fullpath,
+            :host        => request.host,
+            :port        => request.port,
+            :body_hash   => request.body_hash,
+            :ext         => request.ext
           )
           _signature_.verify!(request.signature)
         rescue Verifier::VerificationFailed => e
@@ -62,44 +66,44 @@ module Rack
 
         def authenticate(method, url, headers = {}, payload = {})
           _url_ = URI.parse(url)
-          self.timestamp = Time.now.to_i
-          self.nonce = generate_nonce
+          @nonce = generate_nonce
           if payload.present?
             raw_body = RestClient::Payload.generate(payload).to_s
             _body_hash_ = BodyHash.new(
               :raw_body => raw_body,
-              :algorithm => self.algorithm
+              :algorithm => self.mac_algorithm
             )
-            self.body_hash = _body_hash_.calculate
+            @body_hash = _body_hash_.calculate
           end
           _signature_ = Signature.new(
-            :token     => self.access_token,
-            :secret    => self.secret,
-            :algorithm => self.algorithm,
-            :timestamp => self.timestamp,
-            :nonce     => self.nonce,
-            :body_hash => self.body_hash,
-            :method    => method,
-            :host      => _url_.host,
-            :port      => _url_.port,
-            :path      => _url_.path,
-            :query     => Rack::Utils.parse_nested_query(_url_.query)
+            :secret      => self.mac_key,
+            :algorithm   => self.mac_algorithm,
+            :nonce       => self.nonce,
+            :method      => method,
+            :request_uri => _url_.request_uri,
+            :host        => _url_.host,
+            :port        => _url_.port,
+            :body_hash   => self.body_hash,
+            :ext         => self.ext
           )
-          self.signature = _signature_.calculate
+          @signature = _signature_.calculate
           headers.merge(:AUTHORIZATION => authorization_header)
         end
 
         def authorization_header
           header = "MAC"
-          header << " token=\"#{access_token}\","
-          header << " timestamp=\"#{timestamp}\","
+          header << " id=\"#{access_token}\","
           header << " nonce=\"#{nonce}\","
-          header << " bodyhash=\"#{body_hash}\"," if self.body_hash.present?
-          header << " signature=\"#{signature}\""
+          header << " bodyhash=\"#{body_hash}\"," if body_hash.present?
+          header << " ext=\"#{ext}\"," if ext.present?
+          header << " mac=\"#{signature}\""
         end
 
         def generate_nonce
-          ActiveSupport::SecureRandom.hex(16)
+          [
+            (Time.now.utc - @issued_at).to_i,
+            ActiveSupport::SecureRandom.base64(16)
+          ].join(':')
         end
       end
     end
@@ -108,4 +112,4 @@ end
 
 require 'rack/oauth2/access_token/mac/verifier'
 require 'rack/oauth2/access_token/mac/body_hash'
-require 'rack/oauth2/access_token/mac/signature'
+require 'rack/oauth2/access_token/mac/signature'

data/lib/rack/oauth2/access_token/mac/signature.rb

@@ -3,8 +3,8 @@ module Rack
     class AccessToken
       class MAC
         class Signature < Verifier
-          attr_required :token, :secret, :timestamp, :nonce, :method, :host, :port, :path
-          attr_optional :body_hash, :query
+          attr_required :secret, :nonce, :method, :request_uri, :host, :port
+          attr_optional :body_hash, :ext, :query
 
           def calculate
             Rack::OAuth2::Util.base64_encode OpenSSL::HMAC.digest(
@@ -15,31 +15,18 @@ module Rack
           end
 
           def normalized_request_string
-            arr = [
-              token,
-              timestamp,
+            [
               nonce,
-              body_hash || '',
               method.to_s.upcase,
+              request_uri,
               host,
               port,
-              path,
-              normalized_query
-            ]
-            arr.join("\n")
+              body_hash || '',
+              ext || '',
+              nil
+            ].join("\n")
           end
 
-          def normalized_query
-            if query.present?
-              query.inject([]) do |result, (key, value)|
-                result << [key, value]
-              end.sort.inject('') do |result, (key, value)|
-                result << "#{Rack::OAuth2::Util.rfc3986_encode key}=#{Rack::OAuth2::Util.rfc3986_encode value}\n"
-              end
-            else
-              ''
-            end
-          end
         end
       end
     end

data/lib/rack/oauth2/server/resource/mac.rb

@@ -11,15 +11,15 @@ module Rack
           private
 
           class Request < Resource::Request
-            attr_reader :timestamp, :nonce, :body_hash, :signature
+            attr_reader :nonce, :body_hash, :ext, :signature
 
             def setup!
               auth_params = Rack::Auth::Digest::Params.parse(@auth_header.params).with_indifferent_access
-              @access_token = auth_params[:token]
-              @timestamp = auth_params[:timestamp]
+              @access_token = auth_params[:id]
               @nonce = auth_params[:nonce]
               @body_hash = auth_params[:bodyhash]
-              @signature = auth_params[:signature]
+              @ext = auth_params[:ext]
+              @signature = auth_params[:mac]
               self
             end
 
@@ -33,4 +33,4 @@ module Rack
   end
 end
 
-require 'rack/oauth2/server/resource/mac/error'
+require 'rack/oauth2/server/resource/mac/error'

data/rack-oauth2.gemspec

@@ -21,6 +21,6 @@ Gem::Specification.new do |s|
   s.add_runtime_dependency "attr_required", ">= 0.0.3"
   s.add_development_dependency "rake", ">= 0.8"
   s.add_development_dependency "rcov", ">= 0.9"
-  s.add_development_dependency "rspec", ">= 2"
+  s.add_development_dependency "rspec", ">= 2", "<= 2.5"
   s.add_development_dependency "fakeweb", ">= 1.3"
 end

data/spec/fake_response/tokens/mac.json

@@ -1,8 +1,8 @@
 {
   "token_type":"mac",
-  "algorithm":"hmac-sha-256",
+  "mac_algorithm":"hmac-sha-256",
   "expires_in":3600,
-  "secret":"secret",
+  "mac_key":"secret",
   "refresh_token":"refresh_token",
   "access_token":"access_token"
 }

data/spec/rack/oauth2/access_token/legacy_spec.rb

@@ -40,4 +40,9 @@ describe Rack::OAuth2::AccessToken::Legacy do
       end
     end
   end
+
+  describe '#to_s' do
+    subject { token }
+    its(:to_s) { should == token.access_token }
+  end
 end

data/spec/rack/oauth2/access_token/mac/body_hash_spec.rb

@@ -0,0 +1,13 @@
+require 'spec_helper'
+
+describe Rack::OAuth2::AccessToken::MAC::BodyHash do
+  # From the example of MAC spec section 3.2
+  # ref) http://tools.ietf.org/pdf/draft-ietf-oauth-v2-http-mac-00.pdf
+  subject do
+    Rack::OAuth2::AccessToken::MAC::BodyHash.new(
+      :algorithm => 'hmac-sha-1',
+      :raw_body => 'hello=world%21'
+    )
+  end
+  its(:calculate) { should == 'k9kbtCIy0CkI3/FEfpS/oIDjk6k=' }
+end

data/spec/rack/oauth2/access_token/mac/signature_spec.rb

@@ -0,0 +1,43 @@
+require 'spec_helper'
+
+describe Rack::OAuth2::AccessToken::MAC::Signature do
+
+  # From the example of MAC spec section 1.2
+  # ref) http://tools.ietf.org/pdf/draft-ietf-oauth-v2-http-mac-00.pdf
+  context 'when body_hash is given' do
+    subject do
+      Rack::OAuth2::AccessToken::MAC::Signature.new(
+        :secret      => '8yfrufh348h',
+        :algorithm   => 'hmac-sha-1',
+        :nonce       => '273156:di3hvdf8',
+        :method      => 'POST',
+        :request_uri => '/request',
+        :host        => 'example.com',
+        :port        => 80,
+        :body_hash   => 'k9kbtCIy0CkI3/FEfpS/oIDjk6k=',
+        :ext         => nil
+      )
+    end
+    its(:calculate) { should == 'W7bdMZbv9UWOTadASIQHagZyirA=' }
+  end
+
+  # From the example of MAC spec section 3.2
+  # ref) http://tools.ietf.org/pdf/draft-ietf-oauth-v2-http-mac-00.pdf
+  context 'otherwize' do
+    subject do
+      Rack::OAuth2::AccessToken::MAC::Signature.new(
+        :secret      => '489dks293j39',
+        :algorithm   => 'hmac-sha-1',
+        :nonce       => '264095:dj83hs9s',
+        :method      => 'GET',
+        :request_uri => '/resource/1?b=1&a=2',
+        :host        => 'example.com',
+        :port        => 80,
+        :body_hash   => nil,
+        :ext         => nil
+      )
+    end
+    its(:calculate) { should == 'SLDJd4mg43cjQfElUs3Qub4L6xE=' }
+  end
+
+end

data/spec/rack/oauth2/access_token/mac_spec.rb

@@ -4,24 +4,24 @@ describe Rack::OAuth2::AccessToken::MAC do
   let :token do
     Rack::OAuth2::AccessToken::MAC.new(
       :access_token => 'access_token',
-      :secret => 'secret',
-      :algorithm => 'hmac-sha-256'
+      :mac_key => 'secret',
+      :mac_algorithm => 'hmac-sha-256'
     )
   end
   let(:resource_endpoint) { 'https://server.example.com/resources/fake' }
   subject { token }
 
-  its(:secret)    { should == 'secret' }
-  its(:algorithm) { should == 'hmac-sha-256' }
+  its(:mac_key)    { should == 'secret' }
+  its(:mac_algorithm) { should == 'hmac-sha-256' }
   its(:token_response) do
     should == {
-      :token_type => :mac,
       :access_token => 'access_token',
-      :secret => 'secret',
-      :algorithm => 'hmac-sha-256',
-      :expires_in => nil,
       :refresh_token => nil,
-      :scope => ''
+      :token_type => :mac,
+      :expires_in => nil,
+      :scope => '',
+      :mac_key => 'secret',
+      :mac_algorithm => 'hmac-sha-256'
     }
   end
   its(:generate_nonce) { should be_a String }
@@ -37,7 +37,7 @@ describe Rack::OAuth2::AccessToken::MAC do
         Time.fix(Time.at(1302361200)) do
           RestClient.should_receive(:get).with(
             resource_endpoint,
-            :AUTHORIZATION => "MAC token=\"access_token\", timestamp=\"1302361200\", nonce=\"51e74de734c05613f37520872e68db5f\", signature=\"l7uMvWa3BIHjBaJrS3MHKPUAwEFTf5Xyp+N3R7Fda/s=\""
+            :AUTHORIZATION => 'MAC id="access_token", nonce="51e74de734c05613f37520872e68db5f", mac="gMJ8AmvTGmfPFCJCf5DUwNTmT7ksw6GqyoGW2lUIUZ0="'
           )
           token.get resource_endpoint
         end
@@ -50,7 +50,7 @@ describe Rack::OAuth2::AccessToken::MAC do
           RestClient.should_receive(:post).with(
             resource_endpoint,
             {:key => :value},
-            {:AUTHORIZATION => "MAC token=\"access_token\", timestamp=\"1302361200\", nonce=\"51e74de734c05613f37520872e68db5f\", bodyhash=\"Vj8DVxGNBe8UXWvd8pZswj6Gyo8vAT+RXlZa/fCfeiM=\", signature=\"r7IH6k98Wo0qxA6udjhsgURJoxdlS4MQ3rV6YOlGmXA=\""}
+            {:AUTHORIZATION => 'MAC id="access_token", nonce="51e74de734c05613f37520872e68db5f", bodyhash="Vj8DVxGNBe8UXWvd8pZswj6Gyo8vAT+RXlZa/fCfeiM=", mac="7OOseGqNi14lThhRnwhItACXACM4Qp5GleBEuizzUpw="'}
           )
           token.post resource_endpoint, :key => :value
         end
@@ -63,7 +63,7 @@ describe Rack::OAuth2::AccessToken::MAC do
           RestClient.should_receive(:put).with(
             resource_endpoint,
             {:key => :value},
-            {:AUTHORIZATION => "MAC token=\"access_token\", timestamp=\"1302361200\", nonce=\"51e74de734c05613f37520872e68db5f\", bodyhash=\"Vj8DVxGNBe8UXWvd8pZswj6Gyo8vAT+RXlZa/fCfeiM=\", signature=\"JP0Kvw+0wVF+XRlweJNCXsEJGjjZGz8ZU7ehc4/7Z10=\""}
+            {:AUTHORIZATION => 'MAC id="access_token", nonce="51e74de734c05613f37520872e68db5f", bodyhash="Vj8DVxGNBe8UXWvd8pZswj6Gyo8vAT+RXlZa/fCfeiM=", mac="lxTg/F29zkE7vBEbAK9VULRpM4IN5uShqHbj2k7e9lA="'}
           )
           token.put resource_endpoint, :key => :value
         end
@@ -75,7 +75,7 @@ describe Rack::OAuth2::AccessToken::MAC do
         Time.fix(Time.at(1302361200)) do
           RestClient.should_receive(:delete).with(
             resource_endpoint,
-            :AUTHORIZATION => "MAC token=\"access_token\", timestamp=\"1302361200\", nonce=\"51e74de734c05613f37520872e68db5f\", signature=\"aPVm8GmDwc/BZ8AYus4FICZ6ylsNECCWdxWYKJSCX2s=\""
+            :AUTHORIZATION => 'MAC id="access_token", nonce="51e74de734c05613f37520872e68db5f", mac="JtOibEO1rBQNBGy6hUPT29L2cHSmLP09K+kUL4oEe/g="'
           )
           token.delete resource_endpoint
         end
@@ -90,12 +90,12 @@ describe Rack::OAuth2::AccessToken::MAC do
       let(:env) do
         Rack::MockRequest.env_for(
           '/protected_resources',
-          'HTTP_AUTHORIZATION' => "MAC token=\"access_token\", timestamp=\"1302361200\", nonce=\"51e74de734c05613f37520872e68db5f\", signature=\"#{signature}\""
+          'HTTP_AUTHORIZATION' => %{MAC id="access_token", nonce="51e74de734c05613f37520872e68db5f", mac="#{signature}"}
         )
       end
 
       context 'when signature is valid' do
-        let(:signature) { 'zohXlhqYIVrRlT6YTR4pIZuKgAYepZ6/GlnGqHahOog=' }
+        let(:signature) { 'jWo6L7w86ZKNlkRYjzQxp/HJpSxZJXq60hfd+yw4si0=' }
         it do
           Time.fix(Time.at(1302361200)) do
             token.verify!(request.setup!).should == :verified
@@ -122,7 +122,7 @@ describe Rack::OAuth2::AccessToken::MAC do
           :params => {
             :key1 => 'value1'
           },
-          'HTTP_AUTHORIZATION' => "MAC token=\"access_token\", timestamp=\"1302361200\", nonce=\"51e74de734c05613f37520872e68db5f\", bodyhash=\"#{body_hash}\", signature=\"#{signature}\""
+          'HTTP_AUTHORIZATION' => %{MAC id="access_token", nonce="51e74de734c05613f37520872e68db5f", bodyhash="#{body_hash}", mac="#{signature}"}
         )
       end
       let(:signature) { 'invalid' }
@@ -141,7 +141,7 @@ describe Rack::OAuth2::AccessToken::MAC do
         let(:body_hash) { 'TPzUbFn1S16mpfmwXCi1L+8oZHRxlLX9/D1ZwAV781o=' }
 
         context 'when signature is valid' do
-          let(:signature) { 'xq2HfmPIC6VL4zXulRLYi9AesMyT58Jztu4Kn9k9MJ0=' }
+          let(:signature) { 'xNoae5ETuB9BVFH/vFV8y8S0fXdY41bSq0bekoLClwM=' }
           it do
             Time.fix(Time.at(1302361200)) do
               token.verify!(request.setup!).should == :verified

data/spec/rack/oauth2/server/resource/mac_spec.rb

@@ -7,8 +7,8 @@ describe Rack::OAuth2::Server::Resource::MAC do
       when 'valid_token'
         Rack::OAuth2::AccessToken::MAC.new(
           :access_token => 'valid_token',
-          :secret => 'secret',
-          :algorithm => 'hmac-sha-256'
+          :mac_key => 'secret',
+          :mac_algorithm => 'hmac-sha-256'
         ).verify!(request)
       when 'insufficient_scope_token'
         request.insufficient_scope!
@@ -62,27 +62,27 @@ describe Rack::OAuth2::Server::Resource::MAC do
 
   context 'when valid_token is given' do
     context 'when other required params are missing' do
-      let(:env) { Rack::MockRequest.env_for('/protected_resource', 'HTTP_AUTHORIZATION' => 'MAC token="valid_token"') }
+      let(:env) { Rack::MockRequest.env_for('/protected_resource', 'HTTP_AUTHORIZATION' => 'MAC id="valid_token"') }
       it_behaves_like :unauthorized_mac_request
     end
 
     context 'when other required params are invalid' do
-      let(:env) { Rack::MockRequest.env_for('/protected_resource', 'HTTP_AUTHORIZATION' => 'MAC token="valid_token", timestamp="1302361200", nonce="51e74de734c05613f37520872e68db5f", signature="invalid""') }
+      let(:env) { Rack::MockRequest.env_for('/protected_resource', 'HTTP_AUTHORIZATION' => 'MAC id="valid_token", nonce="51e74de734c05613f37520872e68db5f", mac="invalid""') }
       it_behaves_like :unauthorized_mac_request
     end
 
     context 'when all required params are valid' do
-      let(:env) { Rack::MockRequest.env_for('/protected_resource', 'HTTP_AUTHORIZATION' => 'MAC token="valid_token", timestamp="1302361200", nonce="51e74de734c05613f37520872e68db5f", signature="cK4sig+1Rb7w5Dtvadj6q9RqCFnY4/Y+dvaVjXlm5Wk="') }
+      let(:env) { Rack::MockRequest.env_for('/protected_resource', 'HTTP_AUTHORIZATION' => 'MAC id="valid_token", nonce="51e74de734c05613f37520872e68db5f", mac="H1laxA3HXmg4jjyhDmWUEGpdZwc6tcA4U9OMAUXtoFs="') }
       it_behaves_like :authenticated_mac_request
     end
   end
 
   context 'when invalid_token is given' do
-    let(:env) { Rack::MockRequest.env_for('/protected_resource', 'HTTP_AUTHORIZATION' => 'MAC token="invalid_token"') }
+    let(:env) { Rack::MockRequest.env_for('/protected_resource', 'HTTP_AUTHORIZATION' => 'MAC id="invalid_token"') }
     it_behaves_like :unauthorized_mac_request
 
     describe 'realm' do
-      let(:env) { Rack::MockRequest.env_for('/protected_resource', 'HTTP_AUTHORIZATION' => 'MAC token="invalid_token"') }
+      let(:env) { Rack::MockRequest.env_for('/protected_resource', 'HTTP_AUTHORIZATION' => 'MAC id="invalid_token"') }
 
       context 'when specified' do
         let(:realm) { 'server.example.com' }

data/spec/spec_helper.rb

@@ -1,6 +1,3 @@
-$LOAD_PATH.unshift(File.dirname(__FILE__))
-$LOAD_PATH.unshift(File.join(File.dirname(__FILE__), '..', 'lib'))
-
 require 'rack/oauth2'
 require 'rspec'
 require 'fakeweb'

metadata

@@ -2,7 +2,7 @@
 name: rack-oauth2
 version: !ruby/object:Gem::Version 
   prerelease: 
-  version: 0.6.9
+  version: 0.7.0
 platform: ruby
 authors: 
 - nov matake
@@ -10,7 +10,7 @@ autorequire:
 bindir: bin
 cert_chain: []
 
-date: 2011-05-10 00:00:00 Z
+date: 2011-05-18 00:00:00 Z
 dependencies: 
 - !ruby/object:Gem::Dependency 
   name: rack
@@ -109,6 +109,9 @@ dependencies:
     - - ">="
       - !ruby/object:Gem::Version 
         version: "2"
+    - - <=
+      - !ruby/object:Gem::Version 
+        version: "2.5"
   type: :development
   version_requirements: *id009
 - !ruby/object:Gem::Dependency 
@@ -136,6 +139,7 @@ files:
 - .gitignore
 - .rspec
 - Gemfile
+- Gemfile.lock
 - LICENSE
 - README.rdoc
 - Rakefile
@@ -190,6 +194,8 @@ files:
 - spec/helpers/time.rb
 - spec/rack/oauth2/access_token/bearer_spec.rb
 - spec/rack/oauth2/access_token/legacy_spec.rb
+- spec/rack/oauth2/access_token/mac/body_hash_spec.rb
+- spec/rack/oauth2/access_token/mac/signature_spec.rb
 - spec/rack/oauth2/access_token/mac/verifier_spec.rb
 - spec/rack/oauth2/access_token/mac_spec.rb
 - spec/rack/oauth2/access_token_spec.rb
@@ -253,6 +259,8 @@ test_files:
 - spec/helpers/time.rb
 - spec/rack/oauth2/access_token/bearer_spec.rb
 - spec/rack/oauth2/access_token/legacy_spec.rb
+- spec/rack/oauth2/access_token/mac/body_hash_spec.rb
+- spec/rack/oauth2/access_token/mac/signature_spec.rb
 - spec/rack/oauth2/access_token/mac/verifier_spec.rb
 - spec/rack/oauth2/access_token/mac_spec.rb
 - spec/rack/oauth2/access_token_spec.rb