securenative 0.1.20 → 0.1.26
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- checksums.yaml +4 -4
- data/Gemfile +0 -1
- data/Gemfile.lock +76 -82
- data/README.md +45 -40
- data/lib/securenative/api_manager.rb +41 -0
- data/lib/securenative/config/configuration_builder.rb +29 -0
- data/lib/securenative/config/configuration_manager.rb +58 -0
- data/lib/securenative/config/securenative_options.rb +25 -0
- data/lib/securenative/context/hanami_context.rb +44 -0
- data/lib/securenative/context/rails_context.rb +46 -0
- data/lib/securenative/context/securenative_context.rb +69 -0
- data/lib/securenative/context/sinatra_context.rb +44 -0
- data/lib/securenative/enums/api_route.rb +8 -0
- data/lib/securenative/enums/event_types.rb +25 -0
- data/lib/securenative/enums/failover_strategy.rb +8 -0
- data/lib/securenative/enums/risk_level.rb +9 -0
- data/lib/securenative/errors/securenative_config_error.rb +6 -0
- data/lib/securenative/errors/securenative_http_error.rb +6 -0
- data/lib/securenative/errors/securenative_invalid_options_error.rb +6 -0
- data/lib/securenative/errors/securenative_invalid_uri_error.rb +6 -0
- data/lib/securenative/errors/securenative_parse_error.rb +6 -0
- data/lib/securenative/errors/securenative_sdk_Illegal_state_error.rb +6 -0
- data/lib/securenative/errors/securenative_sdk_error.rb +6 -0
- data/lib/securenative/event_manager.rb +159 -0
- data/lib/securenative/http/secure_native_http_response.rb +14 -0
- data/lib/securenative/http/securenative_http_client.rb +52 -0
- data/lib/securenative/models/client_token.rb +14 -0
- data/lib/securenative/models/device.rb +12 -0
- data/lib/securenative/models/event_options.rb +39 -0
- data/lib/securenative/models/request_context.rb +20 -0
- data/lib/securenative/models/request_options.rb +14 -0
- data/lib/securenative/models/sdk_event.rb +51 -0
- data/lib/securenative/models/user_traits.rb +15 -0
- data/lib/securenative/models/verify_result.rb +18 -0
- data/lib/securenative/sdk.rb +85 -0
- data/lib/securenative/utils/date_utils.rb +11 -0
- data/lib/securenative/utils/encryption_utils.rb +51 -0
- data/lib/securenative/utils/ip_utils.rb +25 -0
- data/lib/securenative/utils/request_utils.rb +71 -0
- data/lib/securenative/utils/secure_native_logger.rb +46 -0
- data/lib/securenative/utils/signature_utils.rb +18 -0
- data/lib/securenative/utils/utils.rb +11 -0
- data/lib/securenative/utils/version_utils.rb +13 -0
- data/out/production/securenative-ruby/api_manager.rb +13 -5
- data/out/production/securenative-ruby/config/configuration_builder.rb +6 -9
- data/out/production/securenative-ruby/config/configuration_manager.rb +24 -23
- data/out/production/securenative-ruby/config/securenative_options.rb +8 -5
- data/{lib → out/production/securenative-ruby}/context/hanami_context.rb +9 -2
- data/{lib → out/production/securenative-ruby}/context/rails_context.rb +4 -1
- data/out/production/securenative-ruby/context/securenative_context.rb +35 -8
- data/{lib → out/production/securenative-ruby}/context/sinatra_context.rb +11 -4
- data/out/production/securenative-ruby/event_manager.rb +15 -14
- data/{lib → out/production/securenative-ruby}/http/secure_native_http_response.rb +0 -0
- data/out/production/securenative-ruby/http/securenative_http_client.rb +23 -5
- data/out/production/securenative-ruby/models/event_options.rb +23 -1
- data/out/production/securenative-ruby/models/request_context.rb +2 -2
- data/out/production/securenative-ruby/models/sdk_event.rb +22 -6
- data/out/production/securenative-ruby/models/user_traits.rb +1 -1
- data/out/production/securenative-ruby/models/verify_result.rb +5 -1
- data/out/production/securenative-ruby/securenative.rb +2 -10
- data/out/production/securenative-ruby/utils/date_utils.rb +1 -1
- data/out/production/securenative-ruby/utils/encryption_utils.rb +38 -24
- data/out/production/securenative-ruby/utils/request_utils.rb +53 -7
- data/out/production/securenative-ruby/utils/secure_native_logger.rb +6 -6
- data/out/production/securenative-ruby/utils/version_utils.rb +5 -6
- data/out/test/securenative-ruby/spec_api_manager.rb +37 -31
- data/out/test/securenative-ruby/spec_context_builder.rb +52 -34
- data/out/test/securenative-ruby/spec_encryption_utils.rb +13 -13
- data/out/test/securenative-ruby/spec_event_manager.rb +49 -15
- data/out/test/securenative-ruby/spec_helper.rb +8 -0
- data/out/test/securenative-ruby/spec_request_utils.rb +25 -0
- data/out/test/securenative-ruby/spec_sdk_event.rb +24 -0
- data/out/test/securenative-ruby/spec_securenative.rb +35 -39
- data/out/test/securenative-ruby/spec_securenative_http_client.rb +13 -5
- data/out/test/securenative-ruby/spec_signature_utils.rb +1 -1
- data/out/test/securenative-ruby/spec_version_util.rb +10 -0
- data/securenative.gemspec +16 -14
- metadata +48 -45
- data/VERSION +0 -1
- data/lib/api_manager.rb +0 -35
- data/lib/config/configuration_builder.rb +0 -30
- data/lib/config/configuration_manager.rb +0 -55
- data/lib/config/securenative_options.rb +0 -22
- data/lib/context/securenative_context.rb +0 -67
- data/lib/enums/api_route.rb +0 -6
- data/lib/enums/event_types.rb +0 -23
- data/lib/enums/failover_strategy.rb +0 -6
- data/lib/enums/risk_level.rb +0 -7
- data/lib/errors/securenative_config_error.rb +0 -4
- data/lib/errors/securenative_http_error.rb +0 -4
- data/lib/errors/securenative_invalid_options_error.rb +0 -4
- data/lib/errors/securenative_invalid_uri_error.rb +0 -4
- data/lib/errors/securenative_parse_error.rb +0 -4
- data/lib/errors/securenative_sdk_Illegal_state_error.rb +0 -4
- data/lib/errors/securenative_sdk_error.rb +0 -4
- data/lib/event_manager.rb +0 -156
- data/lib/event_options.rb +0 -32
- data/lib/http/securenative_http_client.rb +0 -38
- data/lib/models/client_token.rb +0 -12
- data/lib/models/device.rb +0 -10
- data/lib/models/event_options.rb +0 -15
- data/lib/models/request_context.rb +0 -18
- data/lib/models/request_options.rb +0 -12
- data/lib/models/sdk_event.rb +0 -35
- data/lib/models/user_traits.rb +0 -13
- data/lib/models/verify_result.rb +0 -12
- data/lib/securenative.rb +0 -95
- data/lib/utils/date_utils.rb +0 -9
- data/lib/utils/encryption_utils.rb +0 -35
- data/lib/utils/ip_utils.rb +0 -23
- data/lib/utils/request_utils.rb +0 -54
- data/lib/utils/secure_native_logger.rb +0 -44
- data/lib/utils/signature_utils.rb +0 -16
- data/lib/utils/utils.rb +0 -9
- data/lib/utils/version_utils.rb +0 -12
- data/out/production/securenative-ruby/event_options.rb +0 -32
- data/out/production/securenative-ruby/http/http_response.rb +0 -12
data/lib/utils/date_utils.rb
DELETED
@@ -1,35 +0,0 @@
|
|
1
|
-
# frozen_string_literal: true
|
2
|
-
|
3
|
-
require 'openssl'
|
4
|
-
|
5
|
-
class EncryptionUtils
|
6
|
-
BLOCK_SIZE = 16
|
7
|
-
KEY_SIZE = 32
|
8
|
-
|
9
|
-
def self.encrypt(text, cipher_key)
|
10
|
-
cipher = OpenSSL::Cipher::AES.new(KEY_SIZE, :CBC).encrypt
|
11
|
-
cipher.padding = 0
|
12
|
-
|
13
|
-
if text.size % BLOCK_SIZE != 0
|
14
|
-
return nil
|
15
|
-
end
|
16
|
-
|
17
|
-
cipher_key = Digest::SHA1.hexdigest cipher_key
|
18
|
-
cipher.key = cipher_key.slice(0, BLOCK_SIZE)
|
19
|
-
s = cipher.update(text) + cipher.final
|
20
|
-
|
21
|
-
s.unpack('H*')[0].upcase
|
22
|
-
end
|
23
|
-
|
24
|
-
def self.decrypt(encrypted, cipher_key)
|
25
|
-
cipher = OpenSSL::Cipher::AES.new(KEY_SIZE, :CBC).decrypt
|
26
|
-
cipher.padding = 0
|
27
|
-
|
28
|
-
cipher_key = Digest::SHA1.hexdigest cipher_key
|
29
|
-
cipher.key = cipher_key.slice(0, BLOCK_SIZE)
|
30
|
-
s = [encrypted].pack('H*').unpack('C*').pack('c*')
|
31
|
-
|
32
|
-
rv = cipher.update(s) + cipher.final
|
33
|
-
rv.strip
|
34
|
-
end
|
35
|
-
end
|
data/lib/utils/ip_utils.rb
DELETED
@@ -1,23 +0,0 @@
|
|
1
|
-
# frozen_string_literal: true
|
2
|
-
|
3
|
-
require "resolv"
|
4
|
-
|
5
|
-
class IpUtils
|
6
|
-
def self.ip_address?(ip_address)
|
7
|
-
return true if ip_address =~ Resolv::IPv4::Regex
|
8
|
-
return true if ip_address =~ Resolv::IPv6::Regex
|
9
|
-
|
10
|
-
false
|
11
|
-
end
|
12
|
-
|
13
|
-
def self.valid_public_ip?(ip_address)
|
14
|
-
ip = IPAddr.new(ip_address)
|
15
|
-
return false if ip.loopback? || ip.private? || ip.link_local? || ip.untrusted? || ip.tainted?
|
16
|
-
|
17
|
-
true
|
18
|
-
end
|
19
|
-
|
20
|
-
def self.loop_back?(ip_address)
|
21
|
-
IPAddr.new(ip_address).loopback?
|
22
|
-
end
|
23
|
-
end
|
data/lib/utils/request_utils.rb
DELETED
@@ -1,54 +0,0 @@
|
|
1
|
-
# frozen_string_literal: true
|
2
|
-
|
3
|
-
class RequestUtils
|
4
|
-
SECURENATIVE_COOKIE = '_sn'
|
5
|
-
SECURENATIVE_HEADER = 'x-securenative'
|
6
|
-
|
7
|
-
def self.get_secure_header_from_request(headers)
|
8
|
-
begin
|
9
|
-
return headers[SECURENATIVE_HEADER] unless headers.nil?
|
10
|
-
rescue StandardError
|
11
|
-
[]
|
12
|
-
end
|
13
|
-
[]
|
14
|
-
end
|
15
|
-
|
16
|
-
def self.get_client_ip_from_request(request)
|
17
|
-
begin
|
18
|
-
return request.ip unless request.ip.nil?
|
19
|
-
rescue NoMethodError
|
20
|
-
end
|
21
|
-
|
22
|
-
begin
|
23
|
-
x_forwarded_for = request.env['HTTP_X_FORWARDED_FOR']
|
24
|
-
return x_forwarded_for unless x_forwarded_for.nil?
|
25
|
-
rescue NoMethodError
|
26
|
-
begin
|
27
|
-
x_forwarded_for = request['HTTP_X_FORWARDED_FOR']
|
28
|
-
return x_forwarded_for unless x_forwarded_for.nil?
|
29
|
-
rescue NoMethodError
|
30
|
-
end
|
31
|
-
end
|
32
|
-
|
33
|
-
begin
|
34
|
-
x_forwarded_for = request.env['REMOTE_ADDR']
|
35
|
-
return x_forwarded_for unless x_forwarded_for.nil?
|
36
|
-
rescue NoMethodError
|
37
|
-
begin
|
38
|
-
x_forwarded_for = request['REMOTE_ADDR']
|
39
|
-
return x_forwarded_for unless x_forwarded_for.nil?
|
40
|
-
rescue NoMethodError
|
41
|
-
end
|
42
|
-
end
|
43
|
-
|
44
|
-
''
|
45
|
-
end
|
46
|
-
|
47
|
-
def self.get_remote_ip_from_request(request)
|
48
|
-
begin
|
49
|
-
request.remote_ip
|
50
|
-
rescue NoMethodError
|
51
|
-
''
|
52
|
-
end
|
53
|
-
end
|
54
|
-
end
|
@@ -1,44 +0,0 @@
|
|
1
|
-
# frozen_string_literal: true
|
2
|
-
|
3
|
-
require 'logger'
|
4
|
-
|
5
|
-
class SecureNativeLogger
|
6
|
-
@logger = Logger.new(STDOUT)
|
7
|
-
|
8
|
-
def self.init_logger(level = 'DEBUG')
|
9
|
-
@logger.level = case level
|
10
|
-
when 'WARN'
|
11
|
-
Logger::WARN
|
12
|
-
when 'DEBUG'
|
13
|
-
Logger::DEBUG
|
14
|
-
when 'ERROR'
|
15
|
-
Logger::ERROR
|
16
|
-
when 'FATAL'
|
17
|
-
Logger::FATAL
|
18
|
-
when 'INFO'
|
19
|
-
Logger::INFO
|
20
|
-
else
|
21
|
-
Logger::FATAL
|
22
|
-
end
|
23
|
-
|
24
|
-
@logger.formatter = proc do |severity, datetime, progname, msg|
|
25
|
-
"[#{datetime}] #{severity} (#{progname}): #{msg}\n"
|
26
|
-
end
|
27
|
-
end
|
28
|
-
|
29
|
-
def self.info(msg)
|
30
|
-
@logger.info(msg)
|
31
|
-
end
|
32
|
-
|
33
|
-
def self.debug(msg)
|
34
|
-
@logger.debug(msg)
|
35
|
-
end
|
36
|
-
|
37
|
-
def self.warning(msg)
|
38
|
-
@logger.warning(msg)
|
39
|
-
end
|
40
|
-
|
41
|
-
def self.error(msg)
|
42
|
-
@logger.error(msg)
|
43
|
-
end
|
44
|
-
end
|
@@ -1,16 +0,0 @@
|
|
1
|
-
# frozen_string_literal: true
|
2
|
-
|
3
|
-
require 'openssl'
|
4
|
-
|
5
|
-
class SignatureUtils
|
6
|
-
SIGNATURE_HEADER = 'x-securenative'
|
7
|
-
|
8
|
-
def self.valid_signature?(api_key, payload, header_signature)
|
9
|
-
key = api_key.encode('utf-8')
|
10
|
-
body = payload.encode('utf-8')
|
11
|
-
calculated_signature = OpenSSL::HMAC.hexdigest(OpenSSL::Digest.new('sha512'), key, body)
|
12
|
-
calculated_signature.eql? header_signature
|
13
|
-
rescue StandardError
|
14
|
-
false
|
15
|
-
end
|
16
|
-
end
|
data/lib/utils/utils.rb
DELETED
data/lib/utils/version_utils.rb
DELETED
@@ -1,32 +0,0 @@
|
|
1
|
-
# frozen_string_literal: true
|
2
|
-
|
3
|
-
class EventOptions
|
4
|
-
MAX_PROPERTIES_SIZE = 10
|
5
|
-
|
6
|
-
def initialize(event_type, user_id, user_traits, user_name, email, phone, created_at, context, properties, timestamp)
|
7
|
-
traits = UserTraits(user_name)
|
8
|
-
if user_name && email && phone && created_at
|
9
|
-
traits = UserTraits(user_name, email, phone, created_at)
|
10
|
-
elsif user_name && email && phone
|
11
|
-
traits = UserTraits(user_name, email, phone)
|
12
|
-
elsif user_name && email
|
13
|
-
traits = UserTraits(user_name, email)
|
14
|
-
end
|
15
|
-
|
16
|
-
@event_options = EventOptions(event_type)
|
17
|
-
@event_options.user_id = user_id
|
18
|
-
@event_options.user_traits = user_traits if user_traits
|
19
|
-
@event_options.user_traits = traits
|
20
|
-
@event_options.context = context
|
21
|
-
@event_options.properties = properties
|
22
|
-
@event_options.timestamp = timestamp
|
23
|
-
end
|
24
|
-
|
25
|
-
def build
|
26
|
-
if !@event_options.properties.nil? && @event_options.properties.length > MAX_PROPERTIES_SIZE
|
27
|
-
raise SecureNativeInvalidOptionsError('You can have only up to {} custom properties', MAX_PROPERTIES_SIZE)
|
28
|
-
end
|
29
|
-
|
30
|
-
@event_options
|
31
|
-
end
|
32
|
-
end
|