ronin_security 0.0.2

checksums.yaml

@@ -0,0 +1,7 @@
+---
+SHA256:
+  metadata.gz: c5d7295c5345491201b4248b136e2f69b31b6043801fdf547293b1bf2d82cd7b
+  data.tar.gz: 6dd13fa58d67276e80c150e2b3786b8144815903212bbcf910aee69e01ff7b25
+SHA512:
+  metadata.gz: feb81a4cd32ccd3eb0d2f666c75e7cea99b59d2a72c177a8ab7e94c41d9a41283bee27a9e0b1bbbda331116adfae170b4f5aa90657e902cbcf5a8653021c71e9
+  data.tar.gz: 470b209e6fb0a0b8574b658a1de1e46ddccfa5602455bcbb671d38e789054b28de52871811fbc5c0e3eeb1797888551f741d794b1eebde1c1f307d54467495e2

data/lib/ronin_security.rb

@@ -0,0 +1,47 @@
+require 'httparty'
+require 'json'
+class RoninSecurity
+    def self.enforce(url, request)
+      puts request
+      response = HTTParty.get(url)
+      authorizationResponse = JSON.parse(response.body)
+      puts authorizationResponse["authorized"]
+      otp = request.headers["HTTP_OTP"]
+      humantoken = request.headers["HTTP_HUMANTOKEN"]
+      devicetoken = request.headers["HTTP_DEVICE_TOKEN"]
+      ip = request.remote_ip
+      if ip == "::1" || ip == "127.0.0.1"
+        realIpData = HTTParty.get("https://api.ipify.org?format=json")
+        puts realIpData
+        parsedIpData = JSON.parse(realIpData.body)
+        ip = parsedIpData["ip"]
+      end
+      possibletoken = request.headers["HTTP_TOKEN"].split("Bearer ")
+      token = request.headers["HTTP_TOKEN"] || possibletoken
+      headers = { 
+      "method"  => request.method,
+      "ip" => ip,
+      "token" => token,
+      "api" => request.original_url.split(request.original_fullpath)[0],
+      "action" => request.original_fullpath,
+      "fullActionPath" => request.original_url 
+      }
+
+      if devicetoken != nil 
+        headers["device_token"] = devicetoken
+      end
+
+      if otp != nil 
+        headers["otp"] = otp
+      end
+
+      if humantoken != nil
+        headers["humantoken"] = humantoken
+      end
+      authorizedMessage = HTTParty.get(url, :headers => headers)
+      authorizationResult = JSON.parse(authorizedMessage.body)
+      return authorizationResult
+    end
+
+
+  end

metadata

@@ -0,0 +1,57 @@
+--- !ruby/object:Gem::Specification
+name: ronin_security
+version: !ruby/object:Gem::Version
+  version: 0.0.2
+platform: ruby
+authors:
+- andrew van beek
+autorequire:
+bindir: bin
+cert_chain: []
+date: 2021-12-19 00:00:00.000000000 Z
+dependencies:
+- !ruby/object:Gem::Dependency
+  name: httparty
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: '0'
+  type: :runtime
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: '0'
+description: Ronin Enforcement Module for Ruby
+email: andrew.vanbeek@vanbeektech.com
+executables: []
+extensions: []
+extra_rdoc_files: []
+files:
+- lib/ronin_security.rb
+homepage: https://rubygems.org/gems/ronin-enforcement
+licenses:
+- MIT
+metadata: {}
+post_install_message:
+rdoc_options: []
+require_paths:
+- lib
+required_ruby_version: !ruby/object:Gem::Requirement
+  requirements:
+  - - ">="
+    - !ruby/object:Gem::Version
+      version: '0'
+required_rubygems_version: !ruby/object:Gem::Requirement
+  requirements:
+  - - ">="
+    - !ruby/object:Gem::Version
+      version: '0'
+requirements: []
+rubygems_version: 3.2.3
+signing_key:
+specification_version: 4
+summary: Ronin Enforcement Module for Ruby
+test_files: []