securenative 0.1.20 → 0.1.26

data/out/production/securenative-ruby/http/securenative_http_client.rb

@@ -1,18 +1,21 @@
 # frozen_string_literal: true
 
-require 'httpclient'
+require 'net/http'
+require 'uri'
+require 'json'
+require 'utils/version_utils'
+require 'utils/secure_native_logger'
 
 class SecureNativeHttpClient
   AUTHORIZATION_HEADER = 'Authorization'
   VERSION_HEADER = 'SN-Version'
   USER_AGENT_HEADER = 'User-Agent'
-  USER_AGENT_HEADER_VALUE = 'SecureNative-python'
+  USER_AGENT_HEADER_VALUE = 'SecureNative-ruby'
   CONTENT_TYPE_HEADER = 'Content-Type'
   CONTENT_TYPE_HEADER_VALUE = 'application/json'
 
   def initialize(securenative_options)
     @options = securenative_options
-    @client = HTTPClient.new
   end
 
   def _headers
@@ -25,8 +28,23 @@ class SecureNativeHttpClient
   end
 
   def post(path, body)
-    url = "#{@options.api_url}/#{path}"
+    uri = URI.parse("#{@options.api_url}/#{path}")
     headers = _headers
-    @client.post(url, body, headers)
+
+    client = Net::HTTP.new(uri.host, uri.port)
+    client.use_ssl = true
+    client.verify_mode = OpenSSL::SSL::VERIFY_NONE
+
+    request = Net::HTTP::Post.new(uri.request_uri, headers)
+    request.body = body
+
+    res = nil
+    begin
+      res = client.request(request)
+    rescue StandardError => e
+      SecureNativeLogger.error("Failed to send request; #{e}")
+      return res
+    end
+    res
   end
 end

data/out/production/securenative-ruby/models/event_options.rb

@@ -1,10 +1,32 @@
 # frozen_string_literal: true
 
+require 'models/event_options'
+require 'models/user_traits'
+require 'errors/securenative_invalid_options_error'
+
 class EventOptions
   attr_reader :event, :user_id, :user_traits, :context, :properties, :timestamp
   attr_writer :event, :user_id, :user_traits, :context, :properties, :timestamp
 
-  def initialize(event, user_id = nil, user_traits = nil, context = nil, properties = nil, timestamp = nil)
+  MAX_PROPERTIES_SIZE = 10
+
+  def initialize(event: nil, user_id: nil, user_traits: nil, user_name: nil, email: nil, phone: nil, created_at: nil, context: nil, properties: nil, timestamp: nil)
+    if !properties.nil? && properties.length > MAX_PROPERTIES_SIZE
+      raise SecureNativeInvalidOptionsError, "You can have only up to #{MAX_PROPERTIES_SIZE} custom properties"
+    end
+
+    if user_traits.nil?
+      if user_name && email && phone && created_at
+        user_traits = UserTraits(user_name, email, phone, created_at)
+      elsif user_name && email && phone
+        user_traits = UserTraits(user_name, email, phone)
+      elsif user_name && email
+        user_traits = UserTraits(user_name, email)
+      else
+        user_traits = UserTraits.new
+      end
+    end
+
     @event = event
     @user_id = user_id
     @user_traits = user_traits

data/out/production/securenative-ruby/models/request_context.rb

@@ -4,7 +4,7 @@ class RequestContext
   attr_reader :cid, :vid, :fp, :ip, :remote_ip, :headers, :url, :http_method
   attr_writer :cid, :vid, :fp, :ip, :remote_ip, :headers, :url, :http_method
 
-  def initialize(cid = nil, vid = nil, fp = nil, ip = nil, remote_ip = nil, headers = nil, url = nil, method = nil)
+  def initialize(cid: nil, vid: nil, fp: nil, ip: nil, remote_ip: nil, headers: nil, url: nil, http_method: nil)
     @cid = cid
     @vid = vid
     @fp = fp
@@ -12,7 +12,7 @@ class RequestContext
     @remote_ip = remote_ip
     @headers = headers
     @url = url
-    @method = method
+    @method = http_method
   end
 end
 

data/out/production/securenative-ruby/models/sdk_event.rb

@@ -1,14 +1,29 @@
 # frozen_string_literal: true
 
+require 'context/securenative_context'
+require 'errors/securenative_invalid_options_error'
+require 'utils/encryption_utils'
+require 'utils/date_utils'
+require 'models/request_context'
+require 'securerandom'
+
 class SDKEvent
   attr_reader :context, :rid, :event_type, :user_id, :user_traits, :request, :timestamp, :properties
   attr_writer :context, :rid, :event_type, :user_id, :user_traits, :request, :timestamp, :properties
 
   def initialize(event_options, securenative_options)
+    if event_options.user_id.nil? || event_options.user_id.length <= 0 || event_options.user_id == ''
+      raise SecureNativeInvalidOptionsError.new, 'Invalid event structure; User Id is missing'
+    end
+
+    if event_options.event.nil? || event_options.event.length <= 0 || event_options.event == ''
+      raise SecureNativeInvalidOptionsError.new, 'Invalid event structure; Event Type is missing'
+    end
+
     @context = if !event_options.context.nil?
                  event_options.context
                else
-                 ContextBuilder.default_context_builder
+                 SecureNativeContext.default_context_builder
                end
 
     client_token = EncryptionUtils.decrypt(@context.client_token, securenative_options.api_key)
@@ -17,10 +32,11 @@ class SDKEvent
     @event_type = event_options.event
     @user_id = event_options.user_id
     @user_traits = event_options.user_traits
-    @request = RequestContext(cid = client_token ? client_token.cid : '', vid = client_token ? client_token.vid : '',
-                              fp = client_token ? client_token.fp : '', ip = @context.ip,
-                              remote_ip = @context.remote_ip, method = @context.http_method, url = @context.url,
-                              headers = @context.headers)
+    @request = RequestContext.new(cid: client_token ? client_token.cid : '', vid: client_token ? client_token.vid : '',
+                                  fp: client_token ? client_token.fp : '', ip: @context.ip,
+                                  remote_ip: @context.remote_ip, headers: @context.headers,
+                                  url: @context.url, http_method: @context.http_method)
+
 
     @timestamp = DateUtils.to_timestamp(event_options.timestamp)
     @properties = event_options.properties
@@ -28,6 +44,6 @@ class SDKEvent
 
   def to_s
     "context: #{@context}, rid: #{@rid}, event_type: #{@event_type}, user_id: #{@user_id},
-user_traits: #{@user_traits}, request: #{@request}, timestamp: #{@timestamp}, properties: #{@properties}"
+    user_traits: #{@user_traits}, request: #{@request}, timestamp: #{@timestamp}, properties: #{@properties}"
   end
 end

data/out/production/securenative-ruby/models/user_traits.rb

@@ -4,7 +4,7 @@ class UserTraits
   attr_reader :name, :email, :phone, :created_at
   attr_writer :name, :email, :phone, :created_at
 
-  def initialize(name = nil, email = nil, phone = nil, created_at = nil)
+  def initialize(name: nil, email: nil, phone: nil, created_at: nil)
     @name = name
     @email = email
     @created_at = created_at

data/out/production/securenative-ruby/models/verify_result.rb

@@ -4,9 +4,13 @@ class VerifyResult
   attr_reader :risk_level, :score, :triggers
   attr_writer :risk_level, :score, :triggers
 
-  def initialize(risk_level = nil, score = nil, triggers = nil)
+  def initialize(risk_level: nil, score: nil, triggers: nil)
     @risk_level = risk_level
     @score = score
     @triggers = triggers
   end
+
+  def to_s
+    "risk_level: #{@risk_level}, score: #{@score}, triggers: #{@triggers}"
+  end
 end

data/out/production/securenative-ruby/securenative.rb

@@ -8,7 +8,9 @@ require 'errors/securenative_sdk_Illegal_state_error'
 require 'errors/securenative_config_error'
 require 'enums/failover_strategy'
 require 'config/configuration_builder'
+require 'config/configuration_manager'
 require 'event_manager'
+require 'api_manager'
 
 class SecureNative
   attr_reader :options
@@ -60,16 +62,6 @@ class SecureNative
     @securenative
   end
 
-  def self.config_builder(api_key = nil, api_url = 'https://api.securenative.com/collector/api/v1', interval = 1000,
-                          max_events = 1000, timeout = 1500, auto_send = true, disable = false, log_level = 'FATAL',
-                          fail_over_strategy = FailOverStrategy::FAIL_OPEN)
-    ConfigurationBuilder.new(api_key, api_url, interval, max_events, timeout, auto_send, disable, log_level, fail_over_strategy)
-  end
-
-  def self.context_builder(client_token = nil, ip = nil, remote_ip = nil, headers = nil, url = nil, method = nil, body = nil)
-    ContextBuilder.new(client_token, ip, remote_ip, headers, url, method, body)
-  end
-
   def track(event_options)
     @api_manager.track(event_options)
   end

data/out/production/securenative-ruby/utils/date_utils.rb

@@ -2,7 +2,7 @@
 
 class DateUtils
   def self.to_timestamp(date)
-    return Time.now.strftime('%Y-%m-%dT%H:%M:%S%Z') if date.nil?
+    return Time.now.utc.iso8601 if date.nil?
 
     Time.parse(date).iso8601
   end

data/out/production/securenative-ruby/utils/encryption_utils.rb

@@ -1,35 +1,49 @@
 # frozen_string_literal: true
 
 require 'openssl'
+require 'digest'
+require 'base64'
+require 'models/client_token'
 
 class EncryptionUtils
-  BLOCK_SIZE = 16
-  KEY_SIZE = 32
-
-  def self.encrypt(text, cipher_key)
-    cipher = OpenSSL::Cipher::AES.new(KEY_SIZE, :CBC).encrypt
-    cipher.padding = 0
-
-    if text.size % BLOCK_SIZE != 0
-      return nil
+  def self.padding_key(key, length)
+    if key.length == length
+      key
+    else
+      if key.length > length
+        key.slice(0, length)
+      else
+        (length - key.length).times { key << '0' }
+        key
+      end
     end
-
-    cipher_key = Digest::SHA1.hexdigest cipher_key
-    cipher.key = cipher_key.slice(0, BLOCK_SIZE)
-    s = cipher.update(text) + cipher.final
-
-    s.unpack('H*')[0].upcase
   end
 
-  def self.decrypt(encrypted, cipher_key)
-    cipher = OpenSSL::Cipher::AES.new(KEY_SIZE, :CBC).decrypt
-    cipher.padding = 0
-
-    cipher_key = Digest::SHA1.hexdigest cipher_key
-    cipher.key = cipher_key.slice(0, BLOCK_SIZE)
-    s = [encrypted].pack('H*').unpack('C*').pack('c*')
+  def self.encrypt(plain_text, secret_key)
+    begin
+      cipher = OpenSSL::Cipher.new('aes-256-cbc')
+      cipher.encrypt
+      iv = cipher.random_iv
+      cipher.key = padding_key(secret_key, 32)
+      encrypted = cipher.update(plain_text) + cipher.final
+      (iv + encrypted).unpack1('H*')
+    rescue StandardError
+      ''
+    end
+  end
 
-    rv = cipher.update(s) + cipher.final
-    rv.strip
+  def self.decrypt(cipher_text, secret_key)
+    begin
+      cipher = OpenSSL::Cipher.new('aes-256-cbc')
+      cipher.decrypt
+      raw_data = [cipher_text].pack('H*')
+      cipher.iv = raw_data.slice(0, 16)
+      cipher.key = padding_key(secret_key, 32)
+      decrypted = JSON.parse(cipher.update(raw_data.slice(16, raw_data.length)) + cipher.final)
+
+      return ClientToken.new(decrypted['cid'], decrypted['vid'], decrypted['fp'])
+    rescue StandardError
+      ClientToken.new('', '','')
+    end
   end
 end

data/out/production/securenative-ruby/utils/request_utils.rb

@@ -5,19 +5,65 @@ class RequestUtils
   SECURENATIVE_HEADER = 'x-securenative'
 
   def self.get_secure_header_from_request(headers)
-    return headers[RequestUtils.SECURENATIVE_HEADER] unless headers.nil?
-
+    begin
+      return headers[SECURENATIVE_HEADER] unless headers.nil?
+    rescue StandardError
+      []
+    end
     []
   end
 
-  def self.get_client_ip_from_request(request)
-    x_forwarded_for = request.env['HTTP_X_FORWARDED_FOR']
-    return x_forwarded_for unless x_forwarded_for.nil?
+  def self.get_client_ip_from_request(request, options = nil)
+    begin
+      return request.ip unless request.ip.nil?
+    rescue NoMethodError
+    end
+
+    begin
+      x_forwarded_for = request.env['HTTP_X_FORWARDED_FOR']
+      return x_forwarded_for unless x_forwarded_for.nil?
+    rescue NoMethodError
+      begin
+        x_forwarded_for = request['HTTP_X_FORWARDED_FOR']
+        return x_forwarded_for unless x_forwarded_for.nil?
+      rescue NoMethodError
+      end
+    end
+
+    begin
+      x_forwarded_for = request.env['REMOTE_ADDR']
+      return x_forwarded_for unless x_forwarded_for.nil?
+    rescue NoMethodError
+      begin
+        x_forwarded_for = request['REMOTE_ADDR']
+        return x_forwarded_for unless x_forwarded_for.nil?
+      rescue NoMethodError
+      end
+    end
+
+    unless options.nil?
+      for header in options.proxy_headers do
+        begin
+          h = request.env[header]
+          return h unless h.nil?
+        rescue NoMethodError
+          begin
+            h = request[header]
+            return h unless h.nil?
+          rescue NoMethodError
+          end
+        end
+      end
+    end
 
-    request.env['REMOTE_ADDR']
+    ''
   end
 
   def self.get_remote_ip_from_request(request)
-    request.remote_ip
+    begin
+      request.remote_ip
+    rescue NoMethodError
+      ''
+    end
   end
 end

data/out/production/securenative-ruby/utils/secure_native_logger.rb

@@ -8,17 +8,17 @@ class SecureNativeLogger
   def self.init_logger(level = 'DEBUG')
     @logger.level = case level
                     when 'WARN'
-                      SecureNativeLogger::WARN
+                      Logger::WARN
                     when 'DEBUG'
-                      SecureNativeLogger::DEBUG
+                      Logger::DEBUG
                     when 'ERROR'
-                      SecureNativeLogger::ERROR
+                      Logger::ERROR
                     when 'FATAL'
-                      SecureNativeLogger::FATAL
+                      Logger::FATAL
                     when 'INFO'
-                      SecureNativeLogger::INFO
+                      Logger::INFO
                     else
-                      SecureNativeLogger::FATAL
+                      Logger::FATAL
                     end
 
     @logger.formatter = proc do |severity, datetime, progname, msg|

data/out/production/securenative-ruby/utils/version_utils.rb

@@ -2,11 +2,10 @@
 
 class VersionUtils
   def self.version
-    path = 'VERSION'
-    file = File.open(path)
-    version = file.read
-    file.close
-
-    version
+    begin
+      Gem.loaded_specs['securenative'].version.to_s
+    rescue StandardError
+      'unknown'
+    end
   end
 end

data/out/test/securenative-ruby/spec_api_manager.rb

@@ -2,45 +2,39 @@
 
 require 'api_manager'
 require 'webmock/rspec'
+require 'config/configuration_builder'
+require 'errors/securenative_invalid_options_error'
+require 'models/event_options'
+require 'models/verify_result'
+require 'models/user_traits'
+require 'enums/event_types'
+require 'enums/risk_level'
+require 'event_manager'
 require 'rspec'
 
 RSpec.describe ApiManager do
-  let(:context) do
-    ContextBuilder(ip: '127.0.0.1', client_token: 'SECURED_CLIENT_TOKEN',
-                   headers: { 'user-agent' => 'Mozilla/5.0 (iPad; U; CPU OS 3_2_1 like Mac OS X; en-us)
-                   AppleWebKit/531.21.10 (KHTML, like Gecko) Mobile/7B405' })
-  end
-  let(:event_options) do
-    EventOptions(event_type: EventTypes.LOG_IN, user_id: 'USER_ID',
-                 user_traits: UserTraits('USER_NAME', 'USER_EMAIL', '+1234567890'),
-                 properties: { prop1: 'CUSTOM_PARAM_VALUE', prop2: true, prop3: 3 }).build
-  end
-
   it 'tracks an event' do
     options = ConfigurationBuilder.new(api_key: 'YOUR_API_KEY', auto_send: true, interval: 10, api_url: 'https://api.securenative-stg.com/collector/api/v1')
 
-    expected = '{"eventType":"sn.user.login","userId":"USER_ID","userTraits":{' \
-                   '"name":"USER_NAME","email":"USER_EMAIL","phone":"+1234567890","createdAt":null},"request":{' \
-                   '"cid":null,"vid":null,"fp":null,"ip":"127.0.0.1","remoteIp":null,"headers":{' \
-                   '"user-agent":"Mozilla/5.0 (iPad; U; CPU OS 3_2_1 like Mac OS X; en-us) ' \
-                   'AppleWebKit/531.21.10 (KHTML, like Gecko) Mobile/7B405"},"url":null,"method":null},' \
-                   '"properties":{"prop2":true,"prop1":"CUSTOM_PARAM_VALUE","prop3":3}}'
-
-    stub_request(:post, 'https://api.securenative-stg.com/collector/api/v1/track')
-      .with(body: JSON.parse(expected)).to_return(status: 200)
+    stub_request(:post, 'https://api.securenative-stg.com/collector/api/v1/track').to_return(status: 200)
     event_manager = EventManager.new(options)
     event_manager.start_event_persist
     api_manager = ApiManager.new(event_manager, options)
+    event_options = EventOptions.new(event: EventTypes::LOG_IN, user_id: 'USER_ID',
+                                     user_traits: UserTraits.new(name: 'USER_NAME', email: 'USER_EMAIL', phone: '+1234567890'),
+                                     properties: { prop1: 'CUSTOM_PARAM_VALUE', prop2: true, prop3: 3 })
 
     begin
-      api_manager.track(:event_options)
+      res = api_manager.track(event_options)
     ensure
       event_manager.stop_event_persist
     end
+
+    expect(res).to_not be_nil
   end
 
   it 'uses invalid options' do
-    options = ConfigurationBuilder(api_key: 'YOUR_API_KEY', auto_send: true, interval: 10, api_url: 'https://api.securenative-stg.com/collector/api/v1')
+    options = ConfigurationBuilder.new(api_key: 'YOUR_API_KEY', auto_send: true, interval: 10, api_url: 'https://api.securenative-stg.com/collector/api/v1')
 
     properties = {}
     (0..12).each do |i|
@@ -53,7 +47,7 @@ RSpec.describe ApiManager do
     api_manager = ApiManager.new(event_manager, options)
 
     begin
-      expect { api_manager.track(EventOptions(event_type: EventTypes.LOG_IN, properties: properties).build) }
+      expect { api_manager.track(EventOptions.new(event: EventTypes::LOG_IN, properties: properties)) }
         .to raise_error(SecureNativeInvalidOptionsError)
     ensure
       event_manager.stop_event_persist
@@ -61,21 +55,33 @@ RSpec.describe ApiManager do
   end
 
   it 'verifies an event' do
-    options = ConfigurationBuilder(api_key: 'YOUR_API_KEY', api_url: 'https://api.securenative-stg.com/collector/api/v1')
+    options = ConfigurationBuilder.new(api_key: 'YOUR_API_KEY', api_url: 'https://api.securenative-stg.com/collector/api/v1')
+
+    stub_request(:post, "https://api.securenative-stg.com/collector/api/v1/verify").
+        with(
+            headers: {
+                'Accept'=>'*/*',
+                'Accept-Encoding'=>'gzip;q=1.0,deflate;q=0.6,identity;q=0.3',
+                'Authorization'=>'YOUR_API_KEY',
+                'Content-Type'=>'application/json',
+                'Sn-Version'=>'0.1.22',
+                'User-Agent'=>'SecureNative-ruby'
+            }).
+        to_return(status: 200, body: "", headers: {})
 
-    stub_request(:post, 'https://api.securenative-stg.com/collector/api/v1/track')
-      .with(body: { riskLevel: 'medium', score: 0.32, triggers: ['New IP', 'New City'] }).to_return(status: 200)
-    verify_result = VerifyResult.new(RiskLevel.LOW, 0, nil)
 
     event_manager = EventManager.new(options)
     event_manager.start_event_persist
     api_manager = ApiManager.new(event_manager, options)
+    event_options = EventOptions.new(event: EventTypes::LOG_IN, user_id: 'USER_ID',
+                                     user_traits: UserTraits.new(name: 'USER_NAME', email: 'USER_EMAIL', phone: '+1234567890'),
+                                     properties: { prop1: 'CUSTOM_PARAM_VALUE', prop2: true, prop3: 3 })
 
-    result = api_manager.verify(:event_options)
+    result = api_manager.verify(event_options)
 
     expect(result).not_to be_nil
-    expect(result.risk_level).to eq(verify_result.risk_level)
-    expect(result.score).to eq(verify_result.score)
-    expect(result.triggers).to eq(verify_result.triggers)
+    expect(result.risk_level).to eq('low')
+    expect(result.score).to eq(0)
+    expect(result.triggers).to eq(nil)
   end
 end