rack-simple_auth 0.0.9 → 0.1.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA1:
-  metadata.gz: b5fe75792b1cb30cd2b7ef7810d2c552c586c35e
-  data.tar.gz: b19a3bc05f918adbc4ee1150f3fa400048523cb5
+  metadata.gz: 4ed00cc40f3111fa03accfd030db1def811ad27a
+  data.tar.gz: cc12d38b646cb6f258e1914e42467258e1da1598
 SHA512:
-  metadata.gz: 11512be444876aaa302ca891fe8f710fa8572e6410e9e5f8154ff80fb52fe737014329617124cf2c34da5085cccb0c8b2466302200bc6a27263005f52f74c05d
-  data.tar.gz: fd484a1159cbe66f4b35397fa6e302d6d6ff5e6da994fe1f525d6b7e34a29063b7d7ca8a35ed293283539a78ea957e0faf833d9e209a5095e1f2c956aebff973
+  metadata.gz: ee8ef0e6b86dc1d199fb32db40721ea0ac79be6d0ad2d1d561c2b9b8acb71b218bd96ddc1591cc5929f8f2cd967445c8d21de7994df700eb419cc0de7ac5d30e
+  data.tar.gz: 44443667ba5df710dfd7fd0340397eb2e6e45fd02f91ef8d208dc060a6a3a50fa12dfb3f14ea6719476042a542aebb20a8542109773853896c14554b23640ff5

data/.travis.yml

@@ -1,6 +1,11 @@
 language: ruby
 cache: bundler
 
+before_install:
+  - gem update --system
+  - gem --version
+  - gem install bundler
+
 rvm:
   - 2.0.0
   - 2.1.0

data/Rakefile

@@ -2,6 +2,7 @@ require "bundler/gem_tasks"
 require 'rake/testtask'
 # require 'cucumber/rake/task'
 
+GEMSPEC = Gem::Specification.load('rack-simple_auth.gemspec')
 Dir.glob('task/*.rake').each { |r| import r }
 
 

data/lib/rack/simple_auth/hmac.rb

@@ -5,14 +5,14 @@ module Rack
     class HMAC
       # Constructor for Rack Middleware (passing the rack stack)
       # @param [Rack Application] app [next middleware or rack app which gets called]
-      # @param [String] signature [Public Signature]
-      # @param [String] secret [Secret used for Message Encryption]
+      # @param [Hash] config [config hash where tolerance, secret, signature etc.. are set]
       def initialize(app, config)
         @app = app
         @signature = config['signature'] || ''
         @secret = config['secret'] || ''
         @tolerance = config['tolerance'] || 0 # 0 if tolerance not set in config hash
         @logpath = config['logpath']
+        @steps = config['steps'] || 1
 
         @config = config
       end
@@ -60,7 +60,8 @@ module Rack
       def build_allowed_messages(request)
         hash_array = []
 
-        (-(@tolerance)..@tolerance).each do |i|
+        (-(@tolerance)..@tolerance).step(@steps) do |i|
+          i = i.round(2)
           hash_array << OpenSSL::HMAC.hexdigest(OpenSSL::Digest.new('sha256'), @secret, message(request, i))
         end
 
@@ -73,6 +74,11 @@ module Rack
       # @return [Hash] message [message which will be encrypted]
       def message(request, delay = 0)
         date = Time.now.to_i + delay
+
+        if delay.eql?(0.0)
+          date = date.to_i
+        end
+
         case request.request_method
         when 'GET'
           return { 'method' => request.request_method, 'date' => date, 'data' => request_data(request, @config) }.to_json

data/lib/rack/simple_auth/version.rb

@@ -2,6 +2,6 @@ module Rack
   # Module which Contains different Authorization / Authentication Classes (HMAC, ..)
   module SimpleAuth
     # Current Gem Version
-    VERSION = '0.0.9'
+    VERSION = '0.1.0'
   end
 end

data/rack-simple_auth.gemspec

@@ -7,12 +7,15 @@ Gem::Specification.new do |spec|
   spec.name          = "rack-simple_auth"
   spec.version       = Rack::SimpleAuth::VERSION
   spec.authors       = ["Benny1992"]
-  spec.email         = ["klotz.benjamin@yahoo.de"]
+  spec.email         = ["r3qnbenni@gmail.com"]
   spec.summary       = %q{SimpleAuth HMAC authentication}
   spec.description   = spec.summary
   spec.homepage      = "https://github.com/Benny1992/rack-simple_auth"
   spec.license       = "MIT"
 
+  spec.post_install_message = 'Please report any issues at: ' \
+      'https://github.com/Benny1992/rack-simple_auth/issues/new'
+
   spec.files = File.read(File.expand_path('../MANIFEST', __FILE__)).split("\n")
   spec.require_paths = ["lib"]
 
@@ -20,8 +23,8 @@ Gem::Specification.new do |spec|
 
   spec.add_runtime_dependency "rack"
 
-  spec.add_development_dependency "bundler", "~> 1.5"
-  spec.add_development_dependency "rake", '~> 10.2.2'
-  spec.add_development_dependency "coveralls", '~> 0.7.0'
-  spec.add_development_dependency "rack-test", '~> 0.6.2'
+  spec.add_development_dependency "bundler", "~> 1.6"
+  spec.add_development_dependency "rake", '~>  10.3'
+  spec.add_development_dependency "coveralls", '~>  0.7'
+  spec.add_development_dependency "rack-test", '~>  0.6'
 end

data/test/config.ru

@@ -7,10 +7,11 @@ config = {
   'DELETE' => 'path',
   'PUT' => 'path',
   'PATCH' => 'path',
-  'tolerance' => 2,
+  'tolerance' => 1,
   'signature' => 'test_signature',
   'secret' => 'test_secret',
-  'logpath' => "#{File.expand_path('..', __FILE__)}/logs"
+  'logpath' => "#{File.expand_path('..', __FILE__)}/logs",
+  'steps' => 0.1
 }
 
 use Rack::SimpleAuth::HMAC, config

data/test/rack/simple_auth/hmac_fail_test.rb

@@ -5,7 +5,7 @@ class HMACFailTest < MiniTest::Unit::TestCase
   include Rack::Test::Methods
 
   def setup
-  	@secret = 'test_secret'
+    @secret = 'test_secret'
     @signature = 'test_signature'
   end
 

data/test/rack/simple_auth/hmac_test.rb

@@ -35,7 +35,7 @@ class HMACTest < MiniTest::Unit::TestCase
 
   def test_get_with_delay_in_tolerance_range
     uri = '/'
-    message = { 'method' => 'GET', 'date' => Time.now.to_i - 2, 'data' => uri }.to_json
+    message = { 'method' => 'GET', 'date' => Time.now.to_i - 0.5, 'data' => uri }.to_json
     hash = OpenSSL::HMAC.hexdigest(OpenSSL::Digest.new('sha256'), @secret, message)
 
     get uri, {}, 'HTTP_AUTHORIZATION' => "#{hash}:#{@signature}"
@@ -53,6 +53,16 @@ class HMACTest < MiniTest::Unit::TestCase
     assert_equal(401, last_response.status, 'Delay not in tolerance range should receive 401')
   end
 
+  def test_get_with_wrong_step
+    uri = '/'
+    message = { 'method' => 'GET', 'date' => Time.now.to_i + 0.03, 'data' => uri }.to_json
+    hash = OpenSSL::HMAC.hexdigest(OpenSSL::Digest.new('sha256'), @secret, message)
+
+    get uri, {}, 'HTTP_AUTHORIZATION' => "#{hash}:#{@signature}"
+
+    assert_equal(401, last_response.status, 'Message with wrong step should receive 401')
+  end
+
   def test_post_with_wrong_auth_header
     post '/', { 'name' => 'Bensn' }, 'HTTP_AUTHORIZATION' => 'wrong_header'
     assert_equal(401, last_response.status, 'Wrong HTTP_AUTHORIZATION Header should receive 401')
@@ -90,7 +100,7 @@ class HMACTest < MiniTest::Unit::TestCase
 
   def test_put_with_right_auth_header
     uri = '/'
-    message = { 'method' => 'PUT', 'date' => Time.now.to_i, 'data' => uri }.to_json
+    message = { 'method' => 'PUT', 'date' => Time.now.to_i , 'data' => uri }.to_json
     hash = OpenSSL::HMAC.hexdigest(OpenSSL::Digest.new('sha256'), @secret, message)
 
     put uri, {}, 'HTTP_AUTHORIZATION' => "#{hash}:#{@signature}"

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: rack-simple_auth
 version: !ruby/object:Gem::Version
-  version: 0.0.9
+  version: 0.1.0
 platform: ruby
 authors:
 - Benny1992
 autorequire: 
 bindir: bin
 cert_chain: []
-date: 2014-04-11 00:00:00.000000000 Z
+date: 2014-04-21 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: rack
@@ -30,59 +30,59 @@ dependencies:
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: '1.5'
+        version: '1.6'
   type: :development
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: '1.5'
+        version: '1.6'
 - !ruby/object:Gem::Dependency
   name: rake
   requirement: !ruby/object:Gem::Requirement
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: 10.2.2
+        version: '10.3'
   type: :development
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: 10.2.2
+        version: '10.3'
 - !ruby/object:Gem::Dependency
   name: coveralls
   requirement: !ruby/object:Gem::Requirement
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: 0.7.0
+        version: '0.7'
   type: :development
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: 0.7.0
+        version: '0.7'
 - !ruby/object:Gem::Dependency
   name: rack-test
   requirement: !ruby/object:Gem::Requirement
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: 0.6.2
+        version: '0.6'
   type: :development
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: 0.6.2
+        version: '0.6'
 description: SimpleAuth HMAC authentication
 email:
-- klotz.benjamin@yahoo.de
+- r3qnbenni@gmail.com
 executables: []
 extensions: []
 extra_rdoc_files: []
@@ -114,7 +114,7 @@ homepage: https://github.com/Benny1992/rack-simple_auth
 licenses:
 - MIT
 metadata: {}
-post_install_message: 
+post_install_message: 'Please report any issues at: https://github.com/Benny1992/rack-simple_auth/issues/new'
 rdoc_options: []
 require_paths:
 - lib
@@ -135,4 +135,3 @@ signing_key:
 specification_version: 4
 summary: SimpleAuth HMAC authentication
 test_files: []
-has_rdoc: