slack_msgr 0.0.5 → 0.0.6

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: ba93be303c5728b994007644a45678eec7bec9aeefd338d97e09e7d68382a7f2
-  data.tar.gz: 0a40e7e180a44821106e2450e403afbc606361c46861a2a74663005b37984cc6
+  metadata.gz: f44e74f96bec3baf31f333e3cc965aedcfccd2bf9373eb4ee8d43e89ec2c5f9f
+  data.tar.gz: 7f43e04b3900ec50c3c0e223bf2b9df11760145ca39398b1ed8bd24dd012a2a0
 SHA512:
-  metadata.gz: 4ac47b139f27763a56f9266f37af7e9e7ec67fdb5e958faddf5b4aeedc746e77abf49ca251bf4667aba765afd49e6c6ed12c26cd4840e7563ee4987aa2e84428
-  data.tar.gz: 914e94e373131ec0c5152eb602e73be370aa53c5019bc71c20bf0f313f31ec9ff636749f32aae0941440ee70b900fba7da7590ac3ef7032bd4b0c0f862f6b3b6
+  metadata.gz: 67b61a9469da611a81dec53fc613e679df13fcffbd51f51ae6436059e48172ab947379fd2a0282cd58ffa220e08914a3eac1f4fe2de586d7deddb13f9d5738f0
+  data.tar.gz: e6aa49addf640888d861f5b90cb1c8030dbbe6d99d130bde8ebb4ffec15c4c839212ffee1e91e1a88d6326be3b6b924bb22698d63e505a03abe1e7f6df0c192a

data/.rubocop.yml

@@ -58,10 +58,10 @@ AllCops:
     - bin/**
 
 Metrics/LineLength:
-  Description: 'Limit lines to 100 characters.'
-  StyleGuide: '#100-character-limits'
+  Description: 'Limit lines to 120 characters.'
+  StyleGuide: '#120-character-limits'
   Enabled: true
-  Max: 100
+  Max: 120
   # To make it possible to copy or click on URIs in the code, we allow lines
   # containing a URI to be longer than Max.
   AllowHeredoc: true

data/.tool-versions

@@ -0,0 +1 @@
+ruby 2.6.2

data/Gemfile.lock

@@ -1,7 +1,7 @@
 PATH
   remote: .
   specs:
-    slack_msgr (0.0.5)
+    slack_msgr (0.0.6)
       faraday (~> 0.15.4)
 
 GEM
@@ -26,7 +26,7 @@ GEM
       multipart-post (>= 1.2, < 3)
     ice_nine (0.11.2)
     jaro_winkler (1.5.2)
-    json (2.2.0)
+    json (2.3.1)
     kwalify (0.7.2)
     method_source (0.9.2)
     multipart-post (2.1.1)
@@ -38,7 +38,7 @@ GEM
       method_source (~> 0.9.0)
     psych (3.1.0)
     rainbow (3.0.0)
-    rake (10.5.0)
+    rake (13.0.1)
     reek (5.4.0)
       codeclimate-engine-rb (~> 0.4.0)
       kwalify (~> 0.7.0)
@@ -85,7 +85,7 @@ PLATFORMS
 DEPENDENCIES
   bundler (~> 2.0)
   pry
-  rake (~> 10.0)
+  rake (~> 13.0)
   reek (~> 5.4.0)
   rspec (~> 3.0)
   rubocop (~> 0.71.0)

data/lib/config/constants.rb

@@ -5,5 +5,5 @@ module SlackMsgr
 
   SLACK_URL = 'https://slack.com'
 
-  VERSION = '0.0.5'
+  VERSION = '0.0.6'
 end

data/lib/config/initializer.rb

@@ -8,6 +8,7 @@ require_relative './constants'
 path = __dir__
 
 require "#{path}/../slack_msgr/slack_method"
+require "#{path}/../slack_msgr/authenticate"
 require "#{path}/../slack_msgr/chat"
 require "#{path}/../slack_msgr/configuration"
 require "#{path}/../slack_msgr/users"

data/lib/slack_msgr/authenticate.rb

@@ -0,0 +1,36 @@
+# frozen_string_literal: true
+
+module SlackMsgr
+  # Handles various authentication patterns offered by Slack
+  class Authenticate
+    class << self
+      def verification_token?(token)
+        token == SlackMsgr.configuration.verification_token
+      end
+
+      def signing_secret?(request)
+        signature = request.headers['X-Slack-Signature']
+        timestamp = request.headers['X-Slack-Request-Timestamp']
+        version   = signature.split('=').first
+        body      = request.body.read
+
+        # The request timestamp is more than five minutes from local time.
+        # It could be a replay attack, so let's ignore it.
+        return false if timestamp_over_five_minutes_old?(timestamp)
+
+        signature == "#{version}=#{compute_hash_sha256(version, timestamp, body)}"
+      end
+
+      private
+
+      def compute_hash_sha256(version, timestamp, body)
+        digest = OpenSSL::Digest::SHA256.new
+        OpenSSL::HMAC.hexdigest(digest, SlackMsgr.configuration.signing_secret, "#{version}:#{timestamp}:#{body}")
+      end
+
+      def timestamp_over_five_minutes_old?(timestamp)
+        (Time.now - Time.at(timestamp.to_i)) > (60 * 5)
+      end
+    end
+  end
+end

data/lib/slack_msgr/chat.rb

@@ -49,7 +49,8 @@ module SlackMsgr
     private
 
     def sanitize_body
-      ErrorHandling.raise(:req_args_missing, req_args: REQUIRED_ARGUMENTS, method: method) if req_args_missing? # rubocop:disable LineLength
+      ErrorHandling.raise(:req_args_missing, req_args: REQUIRED_ARGUMENTS, method: method) if req_args_missing?
+
       opts.keys.each_with_object({}) do |key, body|
         body[key] ||= opts[key] if PERMITTED_ARGUMENTS.include?(key)
         body

data/lib/slack_msgr/configuration.rb

@@ -10,7 +10,7 @@ module SlackMsgr
                   :access_tokens,
                   :set_default_token
 
-    def initialize(
+    def initialize( # rubocop:disable Metrics/ParameterLists
       verification_token: nil,
       client_secret: nil,
       signing_secret: nil,

data/lib/slack_msgr/slack_method.rb

@@ -6,9 +6,7 @@ module SlackMsgr
     class << self
       private
 
-      attr_reader :conn
-
-      def establish_connection
+      def conn
         @conn ||= Faraday.new(url: SLACK_URL) do |config|
           config.request  :url_encoded             # form-encode POST params
           config.adapter  Faraday.default_adapter  # make requests with Net::HTTP
@@ -21,11 +19,10 @@ module SlackMsgr
 
       def add_metadata_to_response(response)
         JSON.parse(response.body, symbolize_names: true)
-          .merge!(auth_token: conceal(conn.headers['Authorization']))
+            .merge!(auth_token: conceal(conn.headers['Authorization']))
       end
 
-      def send_post_request_to_slack(obj, **request_opts)
-        establish_connection
+      def send_post_request_to_slack(obj)
         conn.authorization :Bearer, SlackMsgr.configuration.oauth_access_token(obj.opts[:use_token])
         response = conn.post do |req|
           req.url "/api/#{obj.method}"
@@ -36,7 +33,6 @@ module SlackMsgr
       end
 
       def send_legacy_request_to_slack(obj)
-        establish_connection
         conn.authorization :Bearer, SlackMsgr.configuration.legacy_token
         response = conn.post do |req|
           req.url "/api/#{obj.method}"

data/lib/slack_msgr/users.rb

@@ -37,19 +37,18 @@ module SlackMsgr
         ErrorHandling.raise(:unknown_method, method: method) unless USERS_METHODS[method]
 
         USERS_METHODS[method]
-      end.join(".")
+      end.join('.')
 
       @method = "users.#{users_method}"
       @opts   = opts
       @body   = sanitize_body
-      puts body
     end
 
     private
 
     def sanitize_body
-      ErrorHandling.raise(:req_args_missing, req_args: REQUIRED_ARGUMENTS, method: method) if req_args_missing? # rubocop:disable LineLength
-      puts opts.merge(token)
+      ErrorHandling.raise(:req_args_missing, req_args: REQUIRED_ARGUMENTS, method: method) if req_args_missing?
+
       opts.merge!(token).keys.each_with_object({}) do |key, body|
         body[key] ||= opts[key] if PERMITTED_ARGUMENTS.include?(key)
         body
@@ -61,7 +60,7 @@ module SlackMsgr
     end
 
     def token
-      {token: SlackMsgr.configuration.legacy_token}
+      { token: SlackMsgr.configuration.legacy_token }
     end
   end
 end

data/slack_msgr.gemspec

@@ -33,7 +33,7 @@ Gem::Specification.new do |spec|
   spec.add_dependency 'faraday', '~>0.15.4'
 
   spec.add_development_dependency 'bundler', '~> 2.0'
-  spec.add_development_dependency 'rake', '~> 10.0'
+  spec.add_development_dependency 'rake', '~> 13.0'
   spec.add_development_dependency 'rspec', '~> 3.0'
   spec.add_development_dependency 'rubocop', '~> 0.71.0'
   spec.add_development_dependency 'reek', '~> 5.4.0'

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: slack_msgr
 version: !ruby/object:Gem::Version
-  version: 0.0.5
+  version: 0.0.6
 platform: ruby
 authors:
 - Ryan Workman
-autorequire: 
+autorequire:
 bindir: exe
 cert_chain: []
-date: 2019-10-25 00:00:00.000000000 Z
+date: 2020-11-28 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: faraday
@@ -44,14 +44,14 @@ dependencies:
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: '10.0'
+        version: '13.0'
   type: :development
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: '10.0'
+        version: '13.0'
 - !ruby/object:Gem::Dependency
   name: rspec
   requirement: !ruby/object:Gem::Requirement
@@ -134,6 +134,7 @@ files:
 - ".reek.yml"
 - ".rspec"
 - ".rubocop.yml"
+- ".tool-versions"
 - CODE_OF_CONDUCT.md
 - Gemfile
 - Gemfile.lock
@@ -145,6 +146,7 @@ files:
 - lib/config/constants.rb
 - lib/config/initializer.rb
 - lib/slack_msgr.rb
+- lib/slack_msgr/authenticate.rb
 - lib/slack_msgr/chat.rb
 - lib/slack_msgr/configuration.rb
 - lib/slack_msgr/slack_method.rb
@@ -157,7 +159,7 @@ licenses:
 metadata:
   homepage_uri: https://github.com/rdavid1099/slack-msgr
   source_code_uri: https://github.com/rdavid1099/slack_msgr
-post_install_message: 
+post_install_message:
 rdoc_options: []
 require_paths:
 - lib
@@ -172,8 +174,8 @@ required_rubygems_version: !ruby/object:Gem::Requirement
     - !ruby/object:Gem::Version
       version: '0'
 requirements: []
-rubygems_version: 3.0.3
-signing_key: 
+rubygems_version: 3.1.4
+signing_key:
 specification_version: 4
 summary: A Ruby gem to send and receive messages through Slack
 test_files: []