rack-slack_request_verification 1.0.0.pre → 1.0.0.pre2

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: b6e156fb4a05f816479e935037c56af58d079f706da577c5d7935cc952195784
-  data.tar.gz: e5f5ccc958eb4458935bfb5ac405381ba7723097aec1206d3287741b4f899f61
+  metadata.gz: 611a7a94c26a77aa4271271bc7ec8c2f0687b67ed9a7d2285f3eacae307aec37
+  data.tar.gz: 78d01fc1898076ebc9a3884fcc683753c073a89f593c26c3171963c0a821f9e2
 SHA512:
-  metadata.gz: 67664cd0e4d1b6a22c316a2c6189d075de516cad1616cae2f46ca4131c9e6965c82a907b61130915a1e244d50a17dbf5be20499df2d9ce211cf5813f4bbe7d6d
-  data.tar.gz: bfbda6a18fbdd5990e25eb881223b2f45a0538cae8aefe342f1e44290be8b23f515f7138472db16b04789d4a363fb1173e86d67758b1ecbf18b30636a00032de
+  metadata.gz: ef98e09441fac16dfd696e220de7b72b3904f8d069c1c683a720f6a76ca95136f9a491ffe92e168158f4ab3f61c559a04d2a98f45be2682611b19bd0b3ae5234
+  data.tar.gz: 780f5340ca7a852fd29482a1b8927500feb02b047b9f0bc9a602e3543030cc7b6099bb38e4870b4bb44b7fad88eecb7715d6619ba3bd9892211a26c8f96e7787

data/Gemfile.lock

@@ -1,7 +1,7 @@
 PATH
   remote: .
   specs:
-    rack-slack_request_verification (1.0.0.pre)
+    rack-slack_request_verification (1.0.0.pre2)
 
 GEM
   remote: https://rubygems.org/

data/README.md

@@ -28,12 +28,12 @@ use Rack::SlackRequestVerification, path_pattern: %{^/slack/}
 run MyApp
 ```
 
-Will use a `SLACK_SIGNING_KEY` environment variable by default.
+Will use a `SLACK_SIGNING_SECRET` environment variable by default.
 
 You can override this with:
 
 ```ruby
-use Rack::SlackRequestVerification, path_pattern: %{^/slack/}, signing_key: '...'
+use Rack::SlackRequestVerification, path_pattern: %{^/slack/}, signing_secret: '...'
 ```
 
 A **401 Not Authorized** is returned in the following circumstances:
@@ -51,10 +51,10 @@ use Rack::SlackRequestVerification, {
     # A regular expression used to determine which requests to verify
     path_pattern: %r{^/slack/},
 
-    # You can provide a signing key directly, set a SLACK_SIGNING_KEY env var
-    # or customise the env var to something else
-    signing_key: nil,
-    signing_key_env_var: 'SLACK_SIGNING_KEY',
+    # You can provide a signing secret directly, set a SLACK_SIGNING_SECRET
+    # env var or customise the env var to something else
+    signing_secret: nil,
+    signing_secret_env_var: 'SLACK_SIGNING_SECRET',
 
     # Mitigates replay attacks by verifying the request was sent recently –
     # a better strategy is to record the signature header to ensure you only

data/lib/rack/slack_request_verification/computed_signature.rb

@@ -4,7 +4,7 @@ require 'forwardable'
 module Rack::SlackRequestVerification
   class ComputedSignature
     extend Forwardable
-    def_delegators :@config, :signing_key, :signing_version
+    def_delegators :@config, :signing_secret, :signing_version
     def_delegators :@request, :body, :timestamp
 
     def initialize(request)
@@ -27,7 +27,7 @@ module Rack::SlackRequestVerification
     end
 
     def digest
-      OpenSSL::HMAC.hexdigest("SHA256", signing_key, signature_base_string)
+      OpenSSL::HMAC.hexdigest("SHA256", signing_secret, signature_base_string)
     end
   end
 end

data/lib/rack/slack_request_verification/configuration.rb

@@ -3,7 +3,7 @@ require 'logger'
 module Rack::SlackRequestVerification
   class Configuration
     attr_reader *%i(
-      signing_key
+      signing_secret
       path_pattern
       signing_version
       timestamp_header
@@ -17,10 +17,10 @@ module Rack::SlackRequestVerification
       # A regular expression used to determine which requests to verify
       path_pattern:,
 
-      # You can provide a signing key directly, set a SLACK_SIGNING_KEY env var
-      # or customise the env var to something else
-      signing_key: nil,
-      signing_key_env_var: 'SLACK_SIGNING_KEY',
+      # You can provide a signing secret directly, set a SLACK_SIGNING_SECRET
+      # env var or customise the env var to something else
+      signing_secret: nil,
+      signing_secret_env_var: 'SLACK_SIGNING_SECRET',
 
       # Mitigates replay attacks by verifying the request was sent recently –
       # a better strategy is to record the signature header to ensure you only
@@ -46,8 +46,8 @@ module Rack::SlackRequestVerification
       @max_staleness_in_secs = max_staleness_in_secs
       @request_body_limit_in_bytes = request_body_limit_in_bytes
 
-      @signing_key = signing_key || ENV.fetch(signing_key_env_var) do
-        fail Error, "#{signing_key_env_var} env var not set, please configure a signing key"
+      @signing_secret = signing_secret || ENV.fetch(signing_secret_env_var) do
+        fail Error, "#{signing_secret_env_var} env var not set, please configure a signing secret"
       end
     end
 

data/lib/rack/slack_request_verification/version.rb

@@ -1,5 +1,5 @@
 module Rack
   module SlackRequestVerification
-    VERSION = "1.0.0.pre"
+    VERSION = "1.0.0.pre2"
   end
 end

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: rack-slack_request_verification
 version: !ruby/object:Gem::Version
-  version: 1.0.0.pre
+  version: 1.0.0.pre2
 platform: ruby
 authors:
 - Pete Nicholls