ruby-paseto 0.1.0 → 0.1.2

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 17a0cc0d3441ffa880aacd8cda52257eac34ae0030b6420f86505e7177ed641c
-  data.tar.gz: 1c97be78e2b9580e60643d492a0d590c9e89ec19e59a5c0fcface329c0a10d94
+  metadata.gz: c5a6ccf377d7535330c1b0bf829685b548afc257e9a4e6b24b746e3e311485f2
+  data.tar.gz: ce2ebaa4d4d354cbc6c1145aa129e4b143f352b6346bff34462c6c729b2b9951
 SHA512:
-  metadata.gz: ad05a5d5e3580589ff8bdb3da032858e5af522458552ce86121c823efa267e3ae790d703ea0ce286dfeaf0a17fc3785df64de4114c37d05ac325f65788b77887
-  data.tar.gz: dc99f930cac852930a117c5df2c0a7bea7139e23a816742e04d642c415cd0ff9e8ca9d93760c53e3aad35ff707341f213dca33601db36ca0a615ddf1daf263c9
+  metadata.gz: 68befb60265a2a408f6066aebafd118477eaeaa6c0161b120e1550199e473b27713ba68c2e042f3e13e338aca648edfbc198b7584ae513b4c9b3a78cedd282ba
+  data.tar.gz: 8e3ed014b61f2b71e9f04a0b9ab06fd6d5485735f33670ee4d75e92425e4905072d73cc9271808601d64537192c218b2429f65166069257f31f187355770e4fd

data/CHANGELOG.md

@@ -1,5 +1,14 @@
 ## [Unreleased]
 
+## [0.1.2]
+
+- Fixed versioning in 0.1.1 changelog
+- Removed support for ruby/openssl < 3.0.2
+
+## [0.1.1] - 2023-01-02
+
+- Relax the version constraint on openssl depedency
+
 ## [0.1.0] - 2022-12-13
 
 - Initial release of ruby-paseto

data/lib/paseto/paserk_types.rb

@@ -24,7 +24,7 @@ module Paseto
     end
 
     sig { params(input: String).returns(Interface::Key) }
-    def generate(input) # rubocop:disable Metrics/MethodLength
+    def generate(input) # rubocop:disable Metrics/MethodLength, Metrics/CyclomaticComplexity, Metrics/PerceivedComplexity
       case self
       in K3LocalWrap | K3LocalPBKW | K3Local if input.bytesize == 32
         V3::Local.new(ikm: input)

data/lib/paseto/util.rb

@@ -98,8 +98,7 @@ module Paseto
     def self.openssl?(major, minor = 0, fix = 0, patch = 0)
       return false if OpenSSL::OPENSSL_VERSION.include?('LibreSSL')
 
-      OpenSSL::OPENSSL_VERSION_NUMBER >=
-        (major * 0x10000000) + (minor * 0x100000) + (fix * 0x1000) + (patch * 0x10)
+      (major * 0x10000000) + (minor * 0x100000) + (fix * 0x1000) + (patch * 0x10) <= OpenSSL::OPENSSL_VERSION_NUMBER
     end
   end
 end

data/lib/paseto/v3/public.rb

@@ -131,74 +131,12 @@ module Paseto
 
       private
 
-      # TODO: Figure out how to get SimpleCov to cover this consistently. With OSSL1.1.1, most of
-      # this doesn't run. With OSSL3, check_key never raises...
-      # :nocov:
-
-      # The openssl gem as of 3.0.0 will prefer EVP_PKEY_public_check over EC_KEY_check_key
-      # whenever the EVP api is available, which is always for the library here as we're requiring
-      # 3.0.0 or greater. However, this has some problems.
-      #
-      # The behavior of EVP_PKEY_public_check is different between 1.1.1 and 3.x. Specifically,
-      # it no longer calls the custom verifier method in EVP_PKEY_METHOD, and only checks the
-      # correctness of the public component. This leads to a problem when calling EC#key_check,
-      # as the private component is NEVER verified for an ECDSA key through the APIs that the gem
-      # makes available to us.
-      #
-      # Until this is fixed in ruby/openssl, I am working around this by implementing the algorithm
-      # used by EVP_PKEY_pairwise_check through the OpenSSL API.
-      #
-      # BUG: https://github.com/ruby/openssl/issues/563
-      # https://www.openssl.org/docs/man1.1.1/man3/EVP_PKEY_public_check.html
-      # https://www.openssl.org/docs/man3.0/man3/EVP_PKEY_public_check.html
       sig(:final) { returns(T::Boolean) }
       def custom_check_key
-        begin
-          @key.check_key
-        rescue StandardError
-          return false
-        end
-
-        return true unless private? && Util.openssl?(3)
-
-        priv_key = @key.private_key
-        group = @key.group
-
-        # int ossl_ec_key_private_check(const EC_KEY *eckey)
-        # {
-        # ...
-        #   if (BN_cmp(eckey->priv_key, BN_value_one()) < 0
-        #     || BN_cmp(eckey->priv_key, eckey->group->order) >= 0) {
-        #     ERR_raise(ERR_LIB_EC, EC_R_INVALID_PRIVATE_KEY);
-        #     return 0;
-        #   }
-        # ...
-        # }
-        #
-        # https://github.com/openssl/openssl/blob/5ac7cfb56211d18596e3c35baa942542f3c0189a/crypto/ec/ec_key.c#L510
-        # private keys must be in range [1, order-1]
-        return false if priv_key < OpenSSL::BN.new(1) || priv_key > group.order
-
-        # int ossl_ec_key_pairwise_check(const EC_KEY *eckey, BN_CTX *ctx)
-        # {
-        # ...
-        #   if (!EC_POINT_mul(eckey->group, point, eckey->priv_key, NULL, NULL, ctx)) {
-        #       ERR_raise(ERR_LIB_EC, ERR_R_EC_LIB);
-        #       goto err;
-        #   }
-        #   if (EC_POINT_cmp(eckey->group, point, eckey->pub_key, ctx) != 0) {
-        #       ERR_raise(ERR_LIB_EC, EC_R_INVALID_PRIVATE_KEY);
-        #       goto err;
-        #   }
-        # ...
-        # }
-        #
-        # https://github.com/openssl/openssl/blob/5ac7cfb56211d18596e3c35baa942542f3c0189a/crypto/ec/ec_key.c#L529
-        # Check generator * priv_key = pub_key
-        @key.public_key == group.generator.mul(priv_key)
+        @key.check_key
+      rescue StandardError
+        false
       end
-
-      # :nocov:
     end
   end
 end

data/lib/paseto/version.rb

@@ -2,5 +2,5 @@
 # frozen_string_literal: true
 
 module Paseto
-  VERSION = '0.1.0'
+  VERSION = '0.1.2'
 end

data/paseto.gemspec

@@ -38,21 +38,9 @@ Gem::Specification.new do |spec|
   spec.require_paths = ['lib']
 
   spec.add_runtime_dependency 'multi_json', '~> 1.15.0'
-  spec.add_runtime_dependency 'openssl', '~> 3.0.0'
+  spec.add_runtime_dependency 'openssl', '~> 3', '>= 3.0.2'
   spec.add_runtime_dependency 'sorbet-runtime'
   spec.add_runtime_dependency 'zeitwerk'
 
-  spec.add_development_dependency 'appraisal'
-  spec.add_development_dependency 'bundler', '~> 2'
-  spec.add_development_dependency 'rake'
-  spec.add_development_dependency 'rspec'
-  spec.add_development_dependency 'rubocop', '~> 1.38.0'
-  spec.add_development_dependency 'rubocop-performance', '~> 1.15.0'
-  spec.add_development_dependency 'rubocop-rspec', '~> 2.14.2'
-  spec.add_development_dependency 'rubocop-sorbet', '~> 0.6.11'
-  spec.add_development_dependency 'simplecov'
-  spec.add_development_dependency 'sorbet'
-  spec.add_development_dependency 'timecop'
-
   spec.metadata['rubygems_mfa_required'] = 'true'
 end

data/sorbet/rbi/gems/{irb@1.5.1.rbi → irb@1.6.3.rbi}

@@ -6,7 +6,7 @@
 
 # An output formatter used internally by the lexer.
 #
-# source://irb//lib/irb/notifier.rb#17
+# source://irb//lib/irb/notifier.rb#11
 module IRB::Notifier
   private
 
@@ -19,7 +19,7 @@ module IRB::Notifier
   # expressions will be sent directly to STDOUT without any additional
   # formatting.
   #
-  # source://irb//lib/irb/notifier.rb#37
+  # source://irb//lib/irb/notifier.rb#31
   def def_notifier(prefix = T.unsafe(nil), output_method = T.unsafe(nil)); end
 
   class << self
@@ -32,7 +32,7 @@ module IRB::Notifier
     # expressions will be sent directly to STDOUT without any additional
     # formatting.
     #
-    # source://irb//lib/irb/notifier.rb#37
+    # source://irb//lib/irb/notifier.rb#31
     def def_notifier(prefix = T.unsafe(nil), output_method = T.unsafe(nil)); end
   end
 end
@@ -41,20 +41,20 @@ end
 # LeveledNotifier to inherit. It provides several wrapper methods for the
 # OutputMethod object used by the Notifier.
 #
-# source://irb//lib/irb/notifier.rb#45
+# source://irb//lib/irb/notifier.rb#39
 class IRB::Notifier::AbstractNotifier
   # Creates a new Notifier object
   #
   # @return [AbstractNotifier] a new instance of AbstractNotifier
   #
-  # source://irb//lib/irb/notifier.rb#47
+  # source://irb//lib/irb/notifier.rb#41
   def initialize(prefix, base_notifier); end
 
   # Execute the given block if notifications are enabled.
   #
   # @yield [@base_notifier]
   #
-  # source://irb//lib/irb/notifier.rb#105
+  # source://irb//lib/irb/notifier.rb#99
   def exec_if; end
 
   # A wrapper method used to determine whether notifications are enabled.
@@ -63,14 +63,14 @@ class IRB::Notifier::AbstractNotifier
   #
   # @return [Boolean]
   #
-  # source://irb//lib/irb/notifier.rb#59
+  # source://irb//lib/irb/notifier.rb#53
   def notify?; end
 
   # Same as #ppx, except it uses the #prefix given during object
   # initialization.
   # See OutputMethod#ppx for more detail.
   #
-  # source://irb//lib/irb/notifier.rb#88
+  # source://irb//lib/irb/notifier.rb#82
   def pp(*objs); end
 
   # Same as #pp, except it concatenates the given +prefix+ with the #prefix
@@ -78,33 +78,33 @@ class IRB::Notifier::AbstractNotifier
   #
   # See OutputMethod#ppx for more detail.
   #
-  # source://irb//lib/irb/notifier.rb#98
+  # source://irb//lib/irb/notifier.rb#92
   def ppx(prefix, *objs); end
 
   # The +prefix+ for this Notifier, which is appended to all objects being
   # inspected during output.
   #
-  # source://irb//lib/irb/notifier.rb#54
+  # source://irb//lib/irb/notifier.rb#48
   def prefix; end
 
   # See OutputMethod#print for more detail.
   #
-  # source://irb//lib/irb/notifier.rb#64
+  # source://irb//lib/irb/notifier.rb#58
   def print(*opts); end
 
   # See OutputMethod#printf for more detail.
   #
-  # source://irb//lib/irb/notifier.rb#74
+  # source://irb//lib/irb/notifier.rb#68
   def printf(format, *opts); end
 
   # See OutputMethod#printn for more detail.
   #
-  # source://irb//lib/irb/notifier.rb#69
+  # source://irb//lib/irb/notifier.rb#63
   def printn(*opts); end
 
   # See OutputMethod#puts for more detail.
   #
-  # source://irb//lib/irb/notifier.rb#79
+  # source://irb//lib/irb/notifier.rb#73
   def puts(*objs); end
 end
 
@@ -119,14 +119,14 @@ end
 # object you create, sibling notifiers can be initialized with
 # #def_notifier.
 #
-# source://irb//lib/irb/notifier.rb#122
+# source://irb//lib/irb/notifier.rb#114
 class IRB::Notifier::CompositeNotifier < ::IRB::Notifier::AbstractNotifier
   # Create a new composite notifier object with the given +prefix+, and
   # +base_notifier+ to use for output.
   #
   # @return [CompositeNotifier] a new instance of CompositeNotifier
   #
-  # source://irb//lib/irb/notifier.rb#123
+  # source://irb//lib/irb/notifier.rb#117
   def initialize(prefix, base_notifier); end
 
   # Creates a new LeveledNotifier in the composite #notifiers group.
@@ -136,12 +136,12 @@ class IRB::Notifier::CompositeNotifier < ::IRB::Notifier::AbstractNotifier
   #
   # This method returns the newly created instance.
   #
-  # source://irb//lib/irb/notifier.rb#139
+  # source://irb//lib/irb/notifier.rb#133
   def def_notifier(level, prefix = T.unsafe(nil)); end
 
   # Returns the leveled notifier for this object
   #
-  # source://irb//lib/irb/notifier.rb#146
+  # source://irb//lib/irb/notifier.rb#140
   def level; end
 
   # Sets the leveled notifier for this object.
@@ -159,12 +159,12 @@ class IRB::Notifier::CompositeNotifier < ::IRB::Notifier::AbstractNotifier
   # found in the existing #notifiers Array, or an instance of
   # AbstractNotifier
   #
-  # source://irb//lib/irb/notifier.rb#163
+  # source://irb//lib/irb/notifier.rb#157
   def level=(value); end
 
   # Returns the leveled notifier for this object
   #
-  # source://irb//lib/irb/notifier.rb#146
+  # source://irb//lib/irb/notifier.rb#140
   def level_notifier; end
 
   # Sets the leveled notifier for this object.
@@ -182,35 +182,35 @@ class IRB::Notifier::CompositeNotifier < ::IRB::Notifier::AbstractNotifier
   # found in the existing #notifiers Array, or an instance of
   # AbstractNotifier
   #
-  # source://irb//lib/irb/notifier.rb#163
+  # source://irb//lib/irb/notifier.rb#157
   def level_notifier=(value); end
 
   # List of notifiers in the group
   #
-  # source://irb//lib/irb/notifier.rb#131
+  # source://irb//lib/irb/notifier.rb#125
   def notifiers; end
 end
 
-# source://irb//lib/irb/notifier.rb#18
+# source://irb//lib/irb/notifier.rb#12
 class IRB::Notifier::ErrUndefinedNotifier < ::StandardError
   # @return [ErrUndefinedNotifier] a new instance of ErrUndefinedNotifier
   #
-  # source://irb//lib/irb/notifier.rb#19
+  # source://irb//lib/irb/notifier.rb#13
   def initialize(val); end
 end
 
-# source://irb//lib/irb/notifier.rb#23
+# source://irb//lib/irb/notifier.rb#17
 class IRB::Notifier::ErrUnrecognizedLevel < ::StandardError
   # @return [ErrUnrecognizedLevel] a new instance of ErrUnrecognizedLevel
   #
-  # source://irb//lib/irb/notifier.rb#24
+  # source://irb//lib/irb/notifier.rb#18
   def initialize(val); end
 end
 
 # A leveled notifier is comparable to the composite group from
 # CompositeNotifier#notifiers.
 #
-# source://irb//lib/irb/notifier.rb#181
+# source://irb//lib/irb/notifier.rb#175
 class IRB::Notifier::LeveledNotifier < ::IRB::Notifier::AbstractNotifier
   include ::Comparable
 
@@ -223,7 +223,7 @@ class IRB::Notifier::LeveledNotifier < ::IRB::Notifier::AbstractNotifier
   #
   # @return [LeveledNotifier] a new instance of LeveledNotifier
   #
-  # source://irb//lib/irb/notifier.rb#190
+  # source://irb//lib/irb/notifier.rb#184
   def initialize(base, level, prefix); end
 
   # Compares the level of this notifier object with the given +other+
@@ -231,12 +231,12 @@ class IRB::Notifier::LeveledNotifier < ::IRB::Notifier::AbstractNotifier
   #
   # See the Comparable module for more information.
   #
-  # source://irb//lib/irb/notifier.rb#203
+  # source://irb//lib/irb/notifier.rb#197
   def <=>(other); end
 
   # The current level of this notifier object
   #
-  # source://irb//lib/irb/notifier.rb#197
+  # source://irb//lib/irb/notifier.rb#191
   def level; end
 
   # Whether to output messages to the output method, depending on the level
@@ -244,7 +244,7 @@ class IRB::Notifier::LeveledNotifier < ::IRB::Notifier::AbstractNotifier
   #
   # @return [Boolean]
   #
-  # source://irb//lib/irb/notifier.rb#209
+  # source://irb//lib/irb/notifier.rb#203
   def notify?; end
 end
 
@@ -254,13 +254,13 @@ end
 # This notifier is used as the +zero+ index, or level +0+, for
 # CompositeNotifier#notifiers, and will not output messages of any sort.
 #
-# source://irb//lib/irb/notifier.rb#220
+# source://irb//lib/irb/notifier.rb#213
 class IRB::Notifier::NoMsgNotifier < ::IRB::Notifier::LeveledNotifier
   # Creates a new notifier that should not be used to output messages.
   #
   # @return [NoMsgNotifier] a new instance of NoMsgNotifier
   #
-  # source://irb//lib/irb/notifier.rb#221
+  # source://irb//lib/irb/notifier.rb#215
   def initialize; end
 
   # Ensures notifications are ignored, see AbstractNotifier#notify? for
@@ -268,7 +268,7 @@ class IRB::Notifier::NoMsgNotifier < ::IRB::Notifier::LeveledNotifier
   #
   # @return [Boolean]
   #
-  # source://irb//lib/irb/notifier.rb#229
+  # source://irb//lib/irb/notifier.rb#223
   def notify?; end
 end
 
@@ -276,7 +276,7 @@ end
 # IRB::Notifier. You can define your own output method to use with Irb.new,
 # or Context.new
 #
-# source://irb//lib/irb/output-method.rb#17
+# source://irb//lib/irb/output-method.rb#11
 class IRB::OutputMethod
   # Returns an array of the given +format+ and +opts+ to be used by
   # Kernel#sprintf, if there was a successful Regexp match in the given
@@ -289,14 +289,14 @@ class IRB::OutputMethod
   #     #<length modifier>(hh|h|l|ll|L|q|j|z|t)
   #     <conversion specifier>[diouxXeEfgGcsb%]
   #
-  # source://irb//lib/irb/output-method.rb#54
+  # source://irb//lib/irb/output-method.rb#48
   def parse_printf_format(format, opts); end
 
   # Prints the given +objs+ calling Object#inspect on each.
   #
   # See #puts for more detail.
   #
-  # source://irb//lib/irb/output-method.rb#70
+  # source://irb//lib/irb/output-method.rb#64
   def pp(*objs); end
 
   # Prints the given +objs+ calling Object#inspect on each and appending the
@@ -304,7 +304,7 @@ class IRB::OutputMethod
   #
   # See #puts for more detail.
   #
-  # source://irb//lib/irb/output-method.rb#78
+  # source://irb//lib/irb/output-method.rb#72
   def ppx(prefix, *objs); end
 
   # Open this method to implement your own output method, raises a
@@ -312,31 +312,31 @@ class IRB::OutputMethod
   #
   # @raise [NotImplementedError]
   #
-  # source://irb//lib/irb/output-method.rb#26
+  # source://irb//lib/irb/output-method.rb#20
   def print(*opts); end
 
   # Extends IO#printf to format the given +opts+ for Kernel#sprintf using
   # #parse_printf_format
   #
-  # source://irb//lib/irb/output-method.rb#37
+  # source://irb//lib/irb/output-method.rb#31
   def printf(format, *opts); end
 
   # Prints the given +opts+, with a newline delimiter.
   #
-  # source://irb//lib/irb/output-method.rb#31
+  # source://irb//lib/irb/output-method.rb#25
   def printn(*opts); end
 
   # Calls #print on each element in the given +objs+, followed by a newline
   # character.
   #
-  # source://irb//lib/irb/output-method.rb#60
+  # source://irb//lib/irb/output-method.rb#54
   def puts(*objs); end
 end
 
-# source://irb//lib/irb/output-method.rb#18
+# source://irb//lib/irb/output-method.rb#12
 class IRB::OutputMethod::NotImplementedError < ::StandardError
   # @return [NotImplementedError] a new instance of NotImplementedError
   #
-  # source://irb//lib/irb/output-method.rb#19
+  # source://irb//lib/irb/output-method.rb#13
   def initialize(val); end
 end

data/sorbet/rbi/gems/{oj@3.13.23.rbi → oj@3.14.2.rbi}

@@ -4,10 +4,10 @@
 # This is an autogenerated file for types exported from the `oj` gem.
 # Please instead update this file by running `bin/tapioca gem oj`.
 
-# source://json/2.6.3/lib/json/common.rb#35
+# source://json/2.6.3/json/common.rb#35
 JSON::Parser = JSON::Ext::Parser
 
-# source://json/2.6.3/lib/json/common.rb#73
+# source://json/2.6.3/json/common.rb#73
 JSON::State = JSON::Ext::Generator::State
 
 # source://oj//lib/oj.rb#2
@@ -24,6 +24,7 @@ module Oj
   def generate(*_arg0); end
   def load(*_arg0); end
   def load_file(*_arg0); end
+  def mem_report; end
   def mimic_JSON(*_arg0); end
   def object_load(*_arg0); end
   def optimize_rails; end
@@ -50,6 +51,7 @@ module Oj
     def generate(*_arg0); end
     def load(*_arg0); end
     def load_file(*_arg0); end
+    def mem_report; end
     def mimic_JSON(*_arg0); end
 
     # Loads mimic-ed JSON paths. Used by Oj.mimic_JSON().