smaak 0.1.0 → 0.1.1

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA1:
-  metadata.gz: 41115c26166ffbbd902b43707e6e219101155802
-  data.tar.gz: 6cb113261fc5c764ebf137eec743297a664d709a
+  metadata.gz: 35ff71fbfaf02d293801182e42f59164750f55fe
+  data.tar.gz: 4880e170915ed649513c20540c1e8622d073a787
 SHA512:
-  metadata.gz: eee3f15e1cb880f556fadc7338900ca6ee0a856b70cd1b0db5ee0d1f8d7d6aeb2d9d3297cc354a840b1b5397af9136a9f603a1a9cddab250572c1c11d757ec71
-  data.tar.gz: 193ecdd1021ff1f8f5cd485196e383af674aa02d02d4552bc5448dc86c3ef1b465d6f1aa9ef45ae1450cdca0c41a4069f1cfc50ad01cf5e26e17641e733bece7
+  metadata.gz: 140f7c33ecb4349c0b244cb7752223fbd7aa05a650bb64322acf4df60c0456a78971024d5d63015dbd1251cbda527311abdbec7a6e95262a210b39381e613c13
+  data.tar.gz: 0d2e39786006a82f6bfdd2e449650a87ea5736cf8bd4f8fcacc3be2f5aed89a8bd9da289fb96f2d522c55af1eb6b0e603573aa92893ef2bb2ee966d0ed36dd9b

data/README.md

@@ -2,7 +2,7 @@
 
 This gems caters for both client and server sides of a signed message interaction over HTTP implementing RFC2617 Digest Access Authentication as well as IETF draft-cavage-http-signatures-04, extended with 'x-smaak-recipient', 'x-smaak-identifier', 'x-smaak-psk', 'x-smaak-expires' and 'x-smaak-nonce' headers. The following compromises are protected against as specified: Man in the middle (header and payload signature, as well as body digest) / snooping (message body encryption), Replay (nonce + expiry), Forgery (signature), Masquerading (identifier and signature), Forwarding / Unintended recipient (recipient pub key check), Clear-text password compromise (MD5 pre-shared key, obfuscated), lack of password (pre-shared key), Message fabrication (associations are purpose-fully provisioned to known associates.)
 
-## Smaak mechanism:
+## Smaak mechanism
 
 When provisioning a Smaak::Server and a Smaak::Client, all associations these services should be aware of are provisioned by calling add_association. The associations are indexed by identifier (e.g. FQDN of the associate,) and remember the associate's public key, a pre-shared key and a boolean indicating whether the association expects data to encrypted.
 
@@ -12,7 +12,7 @@ The signing of an HTTP request and the placement of the signature in an Authoriz
 
 Smaak verifies an AuthMessage signed in the Authorization header by looking at nonce, expiry, recipient and pre-shared key. The order of headers signed is important for signature verification.
 
-### Example Server:
+### Example Server
 
 A Smaak::Server operates on an instance of an HTTP request received. The Smaak module can be told about different request technology implementations by providing an adaptor to a request technology (Smaak::add_request_adaptor). The gem ships with a Rack::Request adaptor. Call Smaak::create_adaptor with your request to get an instance of an adaptor.
 
@@ -25,6 +25,7 @@ When setting up a Smaak::Server, tell the server of your SmaakService and verify
         @smaak_server.set_public_key(File.read '/secure/server_public.pem')
         @smaak_server.set_private_key(File.read '/secure/server_private.pem') # only required when encryption is specified
         @smaak_server.add_association('client-facing-service-needing-back-end-data', File.read '/secure/client_public.pem', 'client-pre-shared-key')
+      end
     end
 
     class SecureService
@@ -35,7 +36,7 @@ When setting up a Smaak::Server, tell the server of your SmaakService and verify
       end
     end
 
-### Example Client:
+### Example Client
 
 A Smaak::Client operates on an instance of an HTTP request. The Smaak module can be told about different request technology implementations by providing an adaptor to a request technology (Smaak::add_request_adaptor). The gem ships with a Net::HTTP adaptor. Call Smaak::create_adaptor with your request to get an instance of an adaptor.
 
@@ -53,6 +54,7 @@ A Smaak::Client operates on an instance of an HTTP request. The Smaak module can
         response = @client.post('service-provider', 'http://service-provider.com:9393/backend', { 'index1' => 'data1', 'index2' => 'data2' }.to_json)
         [200, response.body]
       end
+    end
 
     class SecureConsumer
       def initialize

data/lib/smaak/version.rb

@@ -1,3 +1,3 @@
 module Smaak
-  VERSION = "0.1.0"
+  VERSION = "0.1.1"
 end

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: smaak
 version: !ruby/object:Gem::Version
-  version: 0.1.0
+  version: 0.1.1
 platform: ruby
 authors:
 - Ernst van Graan