request_signing 0.1.0.pre2 → 0.1.0.pre3

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA1:
-  metadata.gz: c849272285074c0ce2bc3ca1944796400e21829f
-  data.tar.gz: ad2a7a2f9c537a8accce4a29776c74b4fd707eb4
+  metadata.gz: 54aa72ad7948b5b1f34da5abd6efa5d10d4e5bef
+  data.tar.gz: 670402e483314b0057ab6a336def431bbebf48b8
 SHA512:
-  metadata.gz: d28bfca428c611472be89b9eb7e4b8c387f833c6d3c8b53e1e14e846f158d7d67dbb25ebc8b0a771149069114570dc870262547ecd55e4bedfd20f34bcc0ab60
-  data.tar.gz: 3c680932ce2c57e7a9839f75767a4e062a5415f6a6305a31322e30553ded2f136697f2ed7820c9b3a4676b6a66e198a82130d8d775cc13ad91611a34e9907a25
+  metadata.gz: fd206d497060a433d516d179cc355d23e50f74e7bc61b86e1444fd3a87142910ba713f59523991457c02ce06a6828c6b068e911f0d9657dfbfa2f34286eee023
+  data.tar.gz: cc1b7ecebc2c183fd81ea3a17406fd946988bcc3a4b18a2cc29fa6a051d10a645b8a47fd863aed88e413792ceed833eb91a1d6512e3f905d62f4b8391eeef791

data/lib/request_signing.rb

@@ -62,7 +62,7 @@ module RequestSigning
       string_for_signing = RequestSigning.make_string_for_signing(signature_parameters.headers, verifiable_req)
       signature = decode_signature(signature_parameters.signature)
       unless alg.verify_signature(key, signature, string_for_signing)
-        raise SignatureMismatch
+        raise SignatureMismatch, key_id: signature_parameters.key_id
       end
     end
 

data/lib/request_signing/errors.rb

@@ -1,7 +1,19 @@
 module RequestSigning
 
   # Base class for all errors
-  class Error < StandardError; end
+  class Error < StandardError
+    attr_reader :key_id
+
+    def initialize(*args, key_id: nil)
+      super(*args)
+      @key_id = key_id
+    end
+
+    def message
+      return super unless key_id
+      "#{super}, key_id=#{key_id}"
+    end
+  end
 
   # Key with specified keyId could not be found
   class KeyNotFound < Error; end

data/lib/request_signing/key_stores/static.rb

@@ -39,7 +39,7 @@ module RequestSigning
       def fetch(key_id)
         @keys.fetch(key_id)
       rescue KeyError
-        raise KeyNotFound, key_id
+        raise KeyNotFound, key_id: key_id
       end
 
       # @param key_id [String] id of the key

data/lib/request_signing/test_utils.rb

@@ -0,0 +1,55 @@
+module RequestSigning
+  module TestUtils
+    # Provides helpers for testing request signature verification integration
+    # Example:
+    #   require 'rack/test'
+    #   require 'request_signing'
+    #   require 'request_signing/test_utils'
+    #
+    #   class MyServerTest < Minitest::Test
+    #     include Rack::Test::Methods
+    #     include RequestSigning::TestUtils::Rack
+    #
+    #     attr_reader :app
+    #
+    #     def setup
+    #       my_app = MyApp.new
+    #       signer_key_store = RequestSigning::KeyStores::Static.new(
+    #         "test_key"     => "123qweasdzxc456rtyfghvbn789uiojk",
+    #         "bad_test_key" => "11111111111111111111111111111111"
+    #       )
+    #       signer = RequestSigning::Signer.new(adapter: :rack, key_store: signer_key_store)
+    #       @app = wrap_with_request_signer(app: my_app, signer: signer)
+    #     end
+    #
+    #     def test_lets_signed_requests_through
+    #       signed(key_id: "test_key") { post "/v1/foo" }
+    #       assert last_response.successful?
+    #     end
+    #
+    #     def test_rejects_requests_with_bad_signatures
+    #       signed(key_id: "bad_test_key") { post "/v1/foo" }
+    #       refute last_response.successful?
+    #     end
+    #
+    module Rack
+      def wrap_with_request_signer(signer:, app:)
+        proc do |env|
+          if sign_params = env["request_signing.test.sign_params"]
+            env["HTTP_DATE"] ||= Time.now.httpdate
+            env["HTTP_SIGNATURE"] = signer.create_signature!(env, sign_params).to_s
+          end
+          app.call(env)
+        end
+      end
+
+      def signed(key_id:, algorithm: "hmac-sha256", headers: %w[(request-target) host date])
+        env "request_signing.test.sign_params", { key_id: key_id, algorithm: algorithm, headers: headers }
+        yield
+      ensure
+        env "request_signing.test.sign_params", nil
+      end
+    end
+  end
+end
+

data/lib/request_signing/version.rb

@@ -1,3 +1,3 @@
 module RequestSigning
-  VERSION = "0.1.0.pre2"
+  VERSION = "0.1.0.pre3"
 end

data/request_signing-faraday.gemspec

@@ -1,11 +1,10 @@
 # coding: utf-8
 lib = File.expand_path('../lib', __FILE__)
 $LOAD_PATH.unshift(lib) unless $LOAD_PATH.include?(lib)
-require 'request_signing/version'
 
 Gem::Specification.new do |spec|
   spec.name          = "request_signing-faraday"
-  spec.version       = "0.1.0.pre1"
+  spec.version       = "0.1.0.pre3"
   spec.authors       = ["Vlad Yarotsky"]
   spec.email         = ["vlad@remind101.com"]
 
@@ -19,6 +18,6 @@ Gem::Specification.new do |spec|
   spec.require_paths = ["lib"]
   spec.metadata["yard.run"] = "yri"
 
-  spec.add_dependency "request_signing", RequestSigning::VERSION
+  spec.add_dependency "request_signing", "~> 0.1.0.pre2"
   spec.add_dependency "faraday", "~> 0.9"
 end

data/request_signing-rack.gemspec

@@ -1,11 +1,10 @@
 # coding: utf-8
 lib = File.expand_path('../lib', __FILE__)
 $LOAD_PATH.unshift(lib) unless $LOAD_PATH.include?(lib)
-require 'request_signing/version'
 
 Gem::Specification.new do |spec|
   spec.name          = "request_signing-rack"
-  spec.version       = "0.1.0.pre1"
+  spec.version       = "0.1.0.pre3"
   spec.authors       = ["Vlad Yarotsky"]
   spec.email         = ["vlad@remind101.com"]
 
@@ -19,6 +18,6 @@ Gem::Specification.new do |spec|
   spec.require_paths = ["lib"]
   spec.metadata["yard.run"] = "yri"
 
-  spec.add_dependency "request_signing", RequestSigning::VERSION
+  spec.add_dependency "request_signing", "~> 0.1.0.pre2"
   spec.add_dependency "rack", "~> 2.0"
 end

data/request_signing-ssm.gemspec

@@ -1,11 +1,10 @@
 # coding: utf-8
 lib = File.expand_path('../lib', __FILE__)
 $LOAD_PATH.unshift(lib) unless $LOAD_PATH.include?(lib)
-require 'request_signing/version'
 
 Gem::Specification.new do |spec|
   spec.name          = "request_signing-ssm"
-  spec.version       = "0.1.0.pre1"
+  spec.version       = "0.1.0.pre3"
   spec.authors       = ["Vlad Yarotsky"]
   spec.email         = ["vlad@remind101.com"]
 
@@ -19,6 +18,6 @@ Gem::Specification.new do |spec|
   spec.require_paths = ["lib"]
   spec.metadata["yard.run"] = "yri"
 
-  spec.add_dependency "request_signing", RequestSigning::VERSION
+  spec.add_dependency "request_signing", "~> 0.1.0.pre2"
   spec.add_dependency "aws-sdk-ssm", "~> 1"
 end

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: request_signing
 version: !ruby/object:Gem::Version
-  version: 0.1.0.pre2
+  version: 0.1.0.pre3
 platform: ruby
 authors:
 - Vlad Yarotsky
 autorequire: 
 bindir: bin
 cert_chain: []
-date: 2017-10-27 00:00:00.000000000 Z
+date: 2017-11-08 00:00:00.000000000 Z
 dependencies: []
 description: Implementation of http request signing draft https://tools.ietf.org/html/draft-cavage-http-signatures-08
 email:
@@ -43,6 +43,7 @@ files:
 - lib/request_signing/key_stores/static.rb
 - lib/request_signing/parameter_parser.rb
 - lib/request_signing/signature_parameters.rb
+- lib/request_signing/test_utils.rb
 - lib/request_signing/version.rb
 - request_signing-faraday.gemspec
 - request_signing-rack.gemspec