rack-u2f 0.1.0 → 0.1.1

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA1:
-  metadata.gz: 293216cb2f753e7ffae84b3d65aabd4a5b472359
-  data.tar.gz: 173f07ee1e0ef64ad696b5994dbd0a993de0bd04
+  metadata.gz: 75385507e44ffd51443e6d4a864251a72cbf9724
+  data.tar.gz: 3d20699e67ed4f01aa90177111d1b8dddd786a9a
 SHA512:
-  metadata.gz: cc091c574805618fa863b6cef886e6ce249151c8b622f08e37bb0fc2ff91ea486f565a08161b4d19b85682560c1b25ee1337fc8931ec9401bc31ca01482e7cb5
-  data.tar.gz: f1175bd3ce0366219a8cca9db89b962e063cd47dbfa631a8d13861b26958fa5bb2f08a7fea3279379c4043e5ec876bdf68590beb78a24939f0261fd5e3507208
+  metadata.gz: df5d4356775a6eb09cd2ed8a816a74359bbd666b111575a587e56f47a059c0ae9712ef4c6389afed2222c1748186110647c5a575a694743e4dcd5b1529814a2e
+  data.tar.gz: f3e91e2bee2371b14c40eb1a7ed4ef15847d004603bc9f51938d4e0796b13baeb2ef2233166705d205c0efc0d53c34afc8e393b8001821799f00a7032b2c34c7

data/README.md

@@ -2,6 +2,8 @@
 
 Note: This gem needs a tidy up and will be properly released by end of Nov 2017
 
+[![Gem Version](https://badge.fury.io/rb/rack-u2f.svg)](https://badge.fury.io/rb/rack-u2f)
+
 ## Installation
 
 Add this line to your application's Gemfile:
@@ -26,23 +28,28 @@ Rack middleware to authenticate against registered U2F devices
 
 In rails:
 
-In `config/routes.rb`:
-
-```ruby
-mount Rack::U2f::RegistrationServer.new(store: Rack::U2f::RegistrationStore::RedisStore.new), at: '/u2f_registration'
-```
-
 in `config/application.rb`
 
 ```ruby
 config.middleware.use Rack::U2f::AuthenticationMiddleware, {
   store: Rack::U2f::RegistrationStore::RedisStore.new,
-  exclude_urls: [/\Au2f/, /\A\/\z/]
+  exclude_urls: [/\Au2f/, /\A\/\z/],
+  enable_registration: ENV['ENABLE_U2F_REGISTRATION'] == "true",
+  after_sign_in_url: '/', # optional, defaults to '/'
+  u2f_register_path: '/_u2f_register' #optional, defaults to '/_u2f_register'
 }
 ```
 
 Currently only a redis store is developed, but other stores such as active record will be easy to add.
 
+if `enable_registration` is set to `"true"` then you will be able to visit `/_u2f_register` to register a new key.
+
+Note: U2F only works on *https* connections.
+
+In addition, the registration depends on the url used to register, so data from one environment will not work on another.
+
+When authenticated, the session is used to store that fact. *You must be using a secure session store*.
+
 ## Development
 
 After checking out the repo, run `bin/setup` to install dependencies. Then, run `rake spec` to run the tests. You can also run `bin/console` for an interactive prompt that will allow you to experiment.

data/lib/rack/u2f/authentication_middleware.rb

@@ -6,13 +6,16 @@ module Rack
 
       def initialize(app, config = nil)
         @app = app
+        @config = config
+        @u2f_register_path = config[:u2f_register_path] || '/_u2f_register'
         @store = config[:store] || raise('Please specify a U2F store such as Rack::U2f::RegistrationStore::RedisStore.new')
-        @exclude_urls = config[:exclude_urls] || [/\A\/u2f/]
+        @exclude_urls = config[:exclude_urls] || []
       end
 
       def call(env)
         request = Rack::Request.new(env)
         return @app.call(env) if excluded?(request)
+        return RegistrationServer.new(@config).call(env) if request.path == '/_u2f_register'
         return @app.call(env) if authenticated?(request)
         return resp_auth_from_u2f(request) if request.params['u2f_auth']
         challenge_page(request)

data/lib/rack/u2f/helpers.rb

@@ -7,7 +7,6 @@ module Rack
         return app_id if [443, 80].include?(request.port)
         app_id + ':' + request.port
       end
-
     end
   end
 end

data/lib/rack/u2f/registration_server.rb

@@ -14,7 +14,7 @@ module Rack
       end
 
       def call(env)
-        return [403, {}, ['']] unless ENV['ENABLE_U2F_REGISTRATION']
+        return [403, {}, ['Registration Disabled']] unless @config[:enable_registration]
         request = Rack::Request.new(env)
         if request.get?
           generate_registration(request)

data/lib/rack/u2f/version.rb

@@ -1,5 +1,5 @@
 module Rack
   module U2f
-    VERSION = "0.1.0"
+    VERSION = "0.1.1"
   end
 end

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: rack-u2f
 version: !ruby/object:Gem::Version
-  version: 0.1.0
+  version: 0.1.1
 platform: ruby
 authors:
 - Eaden McKee