request_signing-rack 0.1.0.pre1

checksums.yaml

@@ -0,0 +1,7 @@
+---
+SHA1:
+  metadata.gz: 990891400b8e0e83e423d658dc26026259a4fe7c
+  data.tar.gz: 200fd6b4d5f2361fdcd6bd8461fa15ce609a307e
+SHA512:
+  metadata.gz: ac88f6d1a7d976524e17977da1ee15fe6be800a1cbcb1d61fd1e58b848aa1e6a5fe1d1c0f94c6794ec8ea9365c53d337f1daf2e3824183a0eec4944a51635cf1
+  data.tar.gz: 71b8c0efbda1713f60dd16ae1184921b8ab436d4b8b1424d8cec81e0e1989aacd5a317e11eba27b659f1fe632a1a990a83f8a7197af0c857bdaf11ce4d877b9d

data/lib/request_signing/rack.rb

@@ -0,0 +1,90 @@
+require "rack/request"
+require "request_signing"
+
+module RequestSigning
+  module Adapters
+
+    # Registers `:rack` adapter for user with {RequestSigning::Verifier}
+    #
+    # @example
+    #   v = RequestSigning::Verifier.new(adapter: :rack, key_store: key_store)
+    class Rack
+      def call(rack_request_env)
+        rack_request = ::Rack::Request.new(rack_request_env)
+        headers =
+          rack_request.each_header.select do |h, _|
+            h.start_with?("HTTP_") || %w[CONTENT_TYPE CONTENT_LENGTH].include?(h)
+          end.map do |h, v|
+            [h.gsub(/\AHTTP_/, "").gsub(/_/, "-").downcase, Array(v)]
+          end.to_h
+
+        GenericHTTPRequest.new(
+          rack_request.request_method.downcase,
+          rack_request.fullpath,
+          headers
+        )
+      end
+    end
+  end
+  register_adapter :rack, ->() { Adapters::Rack.new }
+
+  module Rack
+
+    ##
+    # Provides rack middleware for request signature verification
+    #
+    # @example common use case
+    #   key_store = RequestSigning::KeyStores::Static.new(
+    #     "app_1.v1" => ENV["APP_1_PUBKEY"],
+    #     "app_2.v1" => ENV["APP_2_PUBKEY"],
+    #   )
+    #   use RequestSigning::Rack::Middleware, key_store: key_store
+    #
+    # @example custom error handling
+    #   key_store = RequestSigning::KeyStores::Static.new(
+    #     "app_1.v1" => ENV["APP_1_PUBKEY"],
+    #     "app_2.v1" => ENV["APP_2_PUBKEY"],
+    #   )
+    #   logger = Logger.new(STDOUT)
+    #
+    #   use RequestSigning::Rack::Middleware, key_store: key_store do |error, env, app|
+    #     case error
+    #     when RequestSigning::KeyNotFound, RequestSigning::MissingSignatureHeader
+    #       # Useful during transition period while some clients still don't sign requests
+    #       logger.debug("skipping signature verification: #{error}")
+    #       app.call(env)
+    #     else
+    #       logger.error(error)
+    #       [401, { "Content-Type" => "application/json" }, [%q({"error": "signature verification error"})]]
+    #     end
+    #   end
+    ##
+    class Middleware
+      ##
+      # @overload initialize(app, key_store:)
+      #   @param app [#call] underlying rack app
+      #   @param key_store [#fetch, #key?] verification key repository
+      #   @raise [RequestSigning::Error] request signature verification error
+      #
+      # @overload initialize(app, key_store:)
+      #   @param app [#call] underlying rack app
+      #   @param key_store [#fetch, #key?] verification key repository
+      #   @yieldparam err [RequestSigning::Error] signature verification error object
+      #   @yieldparam env [Rack::Request::Env] rack request
+      #   @yieldparam app [#call] the underlying rack app
+      ##
+      def initialize(app, key_store:, &block)
+        @app = app
+        @verifier = RequestSigning::Verifier.new(adapter: :rack, key_store: key_store)
+        @block = block || proc { |err, _, _| raise err if err }
+      end
+
+      def call(env)
+        @verifier.verify!(env)
+        @app.call(env)
+      rescue RequestSigning::Error => e
+        @block.call(e, env, @app)
+      end
+    end
+  end
+end

metadata

@@ -0,0 +1,74 @@
+--- !ruby/object:Gem::Specification
+name: request_signing-rack
+version: !ruby/object:Gem::Version
+  version: 0.1.0.pre1
+platform: ruby
+authors:
+- Vlad Yarotsky
+autorequire: 
+bindir: bin
+cert_chain: []
+date: 2017-10-27 00:00:00.000000000 Z
+dependencies:
+- !ruby/object:Gem::Dependency
+  name: request_signing
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - '='
+      - !ruby/object:Gem::Version
+        version: 0.1.0.pre1
+  type: :runtime
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - '='
+      - !ruby/object:Gem::Version
+        version: 0.1.0.pre1
+- !ruby/object:Gem::Dependency
+  name: rack
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '2.0'
+  type: :runtime
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '2.0'
+description: Rack middleware for request signature verification based on request_signing
+email:
+- vlad@remind101.com
+executables: []
+extensions: []
+extra_rdoc_files: []
+files:
+- lib/request_signing/rack.rb
+homepage: https://github.com/remind101/request_signing
+licenses:
+- MIT
+metadata:
+  yard.run: yri
+post_install_message: 
+rdoc_options: []
+require_paths:
+- lib
+required_ruby_version: !ruby/object:Gem::Requirement
+  requirements:
+  - - ">="
+    - !ruby/object:Gem::Version
+      version: '0'
+required_rubygems_version: !ruby/object:Gem::Requirement
+  requirements:
+  - - ">"
+    - !ruby/object:Gem::Version
+      version: 1.3.1
+requirements: []
+rubyforge_project: 
+rubygems_version: 2.6.8
+signing_key: 
+specification_version: 4
+summary: Rack middleware for request signature verification
+test_files: []