rails-auth 0.5.0 → 0.5.1

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA1:
-  metadata.gz: 5b53b6e5c83754e0969eb6316702cb4c86d400ef
-  data.tar.gz: 742a2563345cbfa9e46f76455e751a8401d121e7
+  metadata.gz: 2d372187c646424f03fc0c51565e968dcbb3f6a4
+  data.tar.gz: 5de2b2d0f88d7112402a9dee2680772fd04e23a9
 SHA512:
-  metadata.gz: f2dc8374a0087e53aa9abb7f9a9525154b1d77af73ff19438d41e344aad213f6a98b835a8013ec454988418833970dff6f5b3c6dbce70a922709347e737be4ee
-  data.tar.gz: 57c08bf49162fef4de03e307fa2895353edfd8709cc3f453ac4def792a19723bd053639a2fb0419672dbc952582b4b08e29be5f15ce5d38ff63b69a73ddd1f1a
+  metadata.gz: 0a8445e89067478c73a7a98a7e4bec6ede6986e883af8e252ee488853b281f1d626bf651a740e178e4ec29d3f907e34d09445ad64a36feefdef14b310e6a2ca6
+  data.tar.gz: 52f2b7cc60c0ca6ec7a71cd167e8d2a2041a9b650e20949aa8f9d841d06e3fdb1ae83a83693dbe2321ebf43eb4a7281f886ec740f40eea74ec986100aa6aadc8

data/CHANGES.md

@@ -1,3 +1,9 @@
+### 0.5.1 (2016-04-24)
+
+* [#20](https://github.com/square/rails-auth/pull/20)
+  Handle X5.09 filter exceptions.
+  ([@tarcieri])
+
 ### 0.5.0 (2016-04-24)
 
 * [#19](https://github.com/square/rails-auth/pull/19)

data/lib/rails/auth/version.rb

@@ -3,6 +3,6 @@
 module Rails
   # Pluggable authentication and authorization for Rack/Rails
   module Auth
-    VERSION = "0.5.0".freeze
+    VERSION = "0.5.1".freeze
   end
 end

data/lib/rails/auth/x509/middleware.rb

@@ -46,10 +46,7 @@ module Rails
 
         def extract_credential(env)
           @cert_filters.each do |key, filter|
-            raw_cert = env[key]
-            next unless raw_cert
-
-            cert = filter.call(raw_cert)
+            cert = extract_certificate_with_filter(filter, env[key])
             next unless cert
 
             if @truststore.verify(cert)
@@ -65,6 +62,18 @@ module Rails
           nil
         end
 
+        def extract_certificate_with_filter(filter, raw_cert)
+          case raw_cert
+          when String   then return if raw_cert.empty?
+          when NilClass then return
+          end
+
+          filter.call(raw_cert)
+        rescue => ex
+          @logger.debug("rails-auth: Certificate error: #{ex.class}: #{ex.message}") if @logger
+          nil
+        end
+
         def log(message, cert)
           @logger.debug("rails-auth: #{message} (#{subject(cert)})") if @logger
         end

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: rails-auth
 version: !ruby/object:Gem::Version
-  version: 0.5.0
+  version: 0.5.1
 platform: ruby
 authors:
 - Tony Arcieri
 autorequire: 
 bindir: exe
 cert_chain: []
-date: 2016-04-24 00:00:00.000000000 Z
+date: 2016-04-25 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: rack