signatron 0.0.9

checksums.yaml

@@ -0,0 +1,15 @@
+---
+!binary "U0hBMQ==":
+  metadata.gz: !binary |-
+    Y2VlOGMwNDEzNTk5ZDY0ZWQ0YTI1YTgxYzVjYzFlNmRkMDNkNTYzYg==
+  data.tar.gz: !binary |-
+    Y2JkODBmYTEzMjgwNDlkMjU4MjcwZjA1ODQ4NDg2MzA1ZmFkMTUxYg==
+!binary "U0hBNTEy":
+  metadata.gz: !binary |-
+    NzY1ZmUzNmQ1MjFjYzJiNzRiNWYyMWY1NmFhZWU0NWNiOTlkOGU3ZDAzMDZk
+    NDQyOGQ0YmNmMjg1Zjk1OGZiMTQxZDQ4MzY5ZGE0YjJkMzQxNDhlOWI3Nzlk
+    ODk2YTE5ZDI1Y2VlOTNmYTkzOTJkNGJlZDg2ZWE1NGM1NmNhNmE=
+  data.tar.gz: !binary |-
+    ODBmNWQzNWE4OTUzZjdjNmM0YzJhMzU5MjYzYTQyMDg4ZWJmYzljOWUwNDE2
+    YmQ2ZDVmYjc1YTdhMDY5YTY5NTUzZGEyY2VkYTM4ZjU5YjdiYTY4ODhmMGUz
+    Zjk0YjI5MjQ5ZGM5NDAyNTY4ZTI3ZmI4ODUwYTcwOTNmNGE0NjU=

data/.gitignore

@@ -0,0 +1,17 @@
+*.gem
+*.rbc
+.bundle
+.config
+.yardoc
+Gemfile.lock
+InstalledFiles
+_yardoc
+coverage
+doc/
+lib/bundler/man
+pkg
+rdoc
+spec/reports
+test/tmp
+test/version_tmp
+tmp

data/Gemfile

@@ -0,0 +1,4 @@
+source 'https://rubygems.org'
+
+# Specify your gem's dependencies in signatron.gemspec
+gemspec

data/Rakefile

@@ -0,0 +1 @@
+require "bundler/gem_tasks"

data/lib/signatron/version.rb

@@ -0,0 +1,3 @@
+module Signatron
+	VERSION = '0.0.9'
+end

data/lib/signatron.rb

@@ -0,0 +1,40 @@
+require 'base64'
+require 'yaml'
+require 'hmac-sha1'
+
+module Signatron
+	def self.verify(body, timestamp, timeout, signature)
+		setup
+
+		begin
+			raise unless timestamp.to_i > Time.now.to_i - timeout
+
+			proper_signature = self.sign body, timestamp, timeout
+			signature == proper_signature
+		rescue
+			false
+		end
+	end
+
+	def self.sign(body, timestamp, timeout)
+		setup
+
+		data = body + '&' + timestamp.to_i.to_s + '&' + timeout.to_s
+		@hmac.update data
+		Base64.strict_encode64 @hmac.digest
+	end
+
+	private
+
+	@initialized = false
+
+	def self.setup
+		return if @initialized
+
+		settings = YAML::load_file "#{Rails.root}/config/sign-a-tron.yml"
+		@key = Base64.decode64 settings['key']
+		@hmac = HMAC::SHA1.new @key
+
+		@initialized = true
+	end
+end

data/signatron.gemspec

@@ -0,0 +1,17 @@
+lib = File.expand_path('../lib', __FILE__)
+$LOAD_PATH.unshift(lib) unless $LOAD_PATH.include?(lib)
+require 'signatron/version'
+
+Gem::Specification.new do |spec|
+	spec.name = 'signatron'
+	spec.version = Signatron::VERSION
+	spec.authors = ['Gabriel Kirkpatrick', 'James Billingham']
+	spec.email = ['g@be-k.biz', 'james@billingham.net']
+	spec.summary = 'Signing for internal secure requests'
+
+	spec.files = `git ls-files`.split($/)
+	spec.require_paths = ['lib']
+
+	spec.add_dependency 'ruby-hmac'
+	spec.add_dependency 'rails', '>= 3'
+end

metadata

@@ -0,0 +1,79 @@
+--- !ruby/object:Gem::Specification
+name: signatron
+version: !ruby/object:Gem::Version
+  version: 0.0.9
+platform: ruby
+authors:
+- Gabriel Kirkpatrick
+- James Billingham
+autorequire: 
+bindir: bin
+cert_chain: []
+date: 2013-05-08 00:00:00.000000000 Z
+dependencies:
+- !ruby/object:Gem::Dependency
+  name: ruby-hmac
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - ! '>='
+      - !ruby/object:Gem::Version
+        version: '0'
+  type: :runtime
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - ! '>='
+      - !ruby/object:Gem::Version
+        version: '0'
+- !ruby/object:Gem::Dependency
+  name: rails
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - ! '>='
+      - !ruby/object:Gem::Version
+        version: '3'
+  type: :runtime
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - ! '>='
+      - !ruby/object:Gem::Version
+        version: '3'
+description: 
+email:
+- g@be-k.biz
+- james@billingham.net
+executables: []
+extensions: []
+extra_rdoc_files: []
+files:
+- .gitignore
+- Gemfile
+- Rakefile
+- lib/signatron.rb
+- lib/signatron/version.rb
+- signatron.gemspec
+homepage: 
+licenses: []
+metadata: {}
+post_install_message: 
+rdoc_options: []
+require_paths:
+- lib
+required_ruby_version: !ruby/object:Gem::Requirement
+  requirements:
+  - - ! '>='
+    - !ruby/object:Gem::Version
+      version: '0'
+required_rubygems_version: !ruby/object:Gem::Requirement
+  requirements:
+  - - ! '>='
+    - !ruby/object:Gem::Version
+      version: '0'
+requirements: []
+rubyforge_project: 
+rubygems_version: 2.0.3
+signing_key: 
+specification_version: 4
+summary: Signing for internal secure requests
+test_files: []