rainforest_auth 0.0.11 → 0.1.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA1:
-  metadata.gz: 7ed033ff327dbcd6999dabaebf9e75299142c096
-  data.tar.gz: f22f960921dc3fb5d7dcf5a850d8ee74d5510afc
+  metadata.gz: 249cec5e62b6a45777bfce7594bbd2ff2212b2e7
+  data.tar.gz: f0fe7101381ea10ff5514d83b91d63bc45823eb5
 SHA512:
-  metadata.gz: a73c2c8563ab632429b489eac299834dfc98db5cdc853108682b98e42ef192a1c688169019244ab5576c719e7a4c91f8e4d2d9b684d7452cd39eec4a99120198
-  data.tar.gz: 63c4721efaf3d8cc7a53d74e857f7996239ee28b71fd05b599f335b17579ffeb768a25c91cf702210446d8e67d47f1b1f95014b57ab96e558fcdd9df89b1fa95
+  metadata.gz: 5090047e6ef0d300ded3f7139230d668e9ca8eb22a9d240ad361f3c77493d3dedc712a054d0b490f085b2ed66de562a08c9fa380cf8c3414a071a9f71f2475ad
+  data.tar.gz: 925598ed41d78140b75823642fc46d08423cd7bb529c346e51c9c355af38f3b2205179a203eb418131f54038a013e88a445a8ff2b4a6dbd16bee0c3591659e7a

data/.ruby-version

@@ -0,0 +1 @@
+2.1.1

data/.travis.yml

@@ -1,5 +1,9 @@
+language: ruby
+before_install: gem install bundler
 rvm:
+  - 2.4.0
+  - 2.3.3
   - 2.1.1
   - 2.1.0
   - 2.0.0
-  - 1.9.3
+  - 1.9.3

data/Gemfile.lock

@@ -1,14 +1,14 @@
 PATH
   remote: .
   specs:
-    rainforest_auth (0.0.11)
+    rainforest_auth (0.1.0)
       json
 
 GEM
   remote: http://rubygems.org/
   specs:
     diff-lcs (1.2.5)
-    json (1.8.1)
+    json (2.0.3)
     rake (10.1.1)
     rspec (2.14.1)
       rspec-core (~> 2.14.0)
@@ -28,3 +28,6 @@ DEPENDENCIES
   rainforest_auth!
   rake (>= 0.8.7)
   rspec (>= 2.0)
+
+BUNDLED WITH
+   1.14.4

data/LICENSE

@@ -1,4 +1,4 @@
-Copyright (c) 2010 Michael Bleigh and Intridea, Inc.
+Copyright (c) 2013 CLDRDR, Inc.
 
 Permission is hereby granted, free of charge, to any person obtaining
 a copy of this software and associated documentation files (the

data/lib/rainforest_auth.rb

@@ -11,8 +11,14 @@ require 'json'
 class RainforestAuth
   attr_reader :key
 
-  def initialize(key)
+  def initialize(key, key_hash=nil)
     @key = key
+
+    if @key.nil?
+      @key_hash = key_hash
+    else
+      @key_hash = Digest::SHA256.hexdigest(key)
+    end
     self
   end
 
@@ -23,12 +29,21 @@ class RainforestAuth
 
   # Return a signature for a callback_type and specified options
   def sign(callback_type, options = nil)
+    OpenSSL::HMAC.hexdigest(digest, @key_hash, merge_data(callback_type, options))
+  end
+
+  # Return a signature for a callback_type and specified options
+  def sign_old(callback_type, options = nil)
     OpenSSL::HMAC.hexdigest(digest, @key, merge_data(callback_type, options))
   end
 
   # Verify a digest vs callback_type and options
   def verify(digest, callback_type, options = nil)
-    digest == sign(callback_type, options)
+    if key.nil?
+      digest == sign(callback_type, options)
+    else
+      digest == sign(callback_type, options) || digest == sign_old(callback_type, options)
+    end
   end
 
   # Run a block if valid

data/rainforest_auth.gemspec

@@ -1,7 +1,7 @@
 Gem::Specification.new do |s|
   s.name          = "rainforest_auth"
-  s.version       = "0.0.11"
-  s.date          = "2014-02-13"
+  s.version       = "0.1.0"
+  s.date          = "2017-03-07"
   s.summary       = "Authentication of messages for Rainforest webhooks"
   s.description   = "Signs / Authenticates messages"
   s.authors       = ["Russell Smith"]

data/spec/rainforest_auth_spec.rb

@@ -43,34 +43,65 @@ describe RainforestAuth do
     end
 
     it "returns the expected signature" do
-      @auth.sign('test', {:option => 1}).should == '5957ba2707a51852d32309d16184e8adce9c4d8e'
+      @auth.sign('test', {:option => 1}).should == '65f2253344287b3c5634a1ce6163fb694b2280b1'
     end
 
     it "changes the signature with different data" do
-      @auth.sign('test', {:option => 2}).should_not == '5957ba2707a51852d32309d16184e8adce9c4d8e'
+      @auth.sign('test', {:option => 2}).should_not == '65f2253344287b3c5634a1ce6163fb694b2280b1'
     end
 
     it "works with no options parameter" do
-      @auth.sign('test').should == '0a41bdf26fac08a89573a7f5efe0a5145f2730df'
+      @auth.sign('test').should == 'd38f897889c808c021a8ed97d2caacdac48b8259'
+    end
+  end
+
+  #TODO: nuke
+  context ".sign_old" do
+    before :all do
+      @auth = RainforestAuth.new('key')
+    end
+
+    it "returns the expected signature" do
+      @auth.sign_old('test', {:option => 1}).should == '5957ba2707a51852d32309d16184e8adce9c4d8e'
+    end
+
+    it "changes the signature with different data" do
+      @auth.sign_old('test', {:option => 2}).should_not == '5957ba2707a51852d32309d16184e8adce9c4d8e'
+    end
+
+    it "works with no options parameter" do
+      @auth.sign_old('test').should == '0a41bdf26fac08a89573a7f5efe0a5145f2730df'
     end
   end
 
   context ".verify" do
     before :all do
       @auth = RainforestAuth.new('key')
-      @digest = '5957ba2707a51852d32309d16184e8adce9c4d8e'
+      @old_digest = '5957ba2707a51852d32309d16184e8adce9c4d8e'
+      @digest = '65f2253344287b3c5634a1ce6163fb694b2280b1'
     end
 
     it "returns true for a valid signature" do
       @auth.verify(@digest, 'test', {:option => 1}).should be_true
     end
 
+    it "returns true for a valid old signature" do
+      @auth.verify(@old_digest, 'test', {:option => 1}).should be_true
+    end
+
     it "returns false for a bad signature" do
       @auth.verify(@digest, 'test', {:option => 2}).should be_false
     end
 
+    it "returns false for a bad old signature" do
+      @auth.verify(@old_digest, 'test', {:option => 2}).should be_false
+    end
+
     it "works with no options parameter" do
+      #OLD
       @auth.verify('0a41bdf26fac08a89573a7f5efe0a5145f2730df', 'test').should be_true
+      #NEW
+      @auth.verify('d38f897889c808c021a8ed97d2caacdac48b8259', 'test').should be_true
     end
   end
 
@@ -80,7 +111,7 @@ describe RainforestAuth do
       @object = "test"
       @object.stub(:some_method) { 3 }
 
-      @digest = '5957ba2707a51852d32309d16184e8adce9c4d8e'
+      @digest = '65f2253344287b3c5634a1ce6163fb694b2280b1'
     end
 
     it "executes the block if there is a valid signature" do
@@ -99,4 +130,4 @@ describe RainforestAuth do
       }
     end
   end
-end
+end

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: rainforest_auth
 version: !ruby/object:Gem::Version
-  version: 0.0.11
+  version: 0.1.0
 platform: ruby
 authors:
 - Russell Smith
 autorequire: 
 bindir: bin
 cert_chain: []
-date: 2014-02-13 00:00:00.000000000 Z
+date: 2017-03-07 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: json
@@ -33,6 +33,7 @@ extra_rdoc_files: []
 files:
 - ".gitignore"
 - ".rspec"
+- ".ruby-version"
 - ".rvmrc"
 - ".travis.yml"
 - Gemfile
@@ -67,6 +68,4 @@ rubygems_version: 2.2.2
 signing_key: 
 specification_version: 4
 summary: Authentication of messages for Rainforest webhooks
-test_files:
-- spec/rainforest_auth_spec.rb
-- spec/spec_helper.rb
+test_files: []