spiffy_stores_app 8.2.6 → 8.2.7

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: a78e64b5b0748a7da935db707643314cc0f24b6ba0a0094fdfc3ce10190664a7
-  data.tar.gz: 7e0acce6ae15900333c1e7674adbb13712cada445649c93077a7d60f51d70dea
+  metadata.gz: 04f150282d7af3f803d50abfdbf1d60907d38e55d66279cfae79dacda621d3b9
+  data.tar.gz: 60c184beb327fcb80a40580523d79700a69ccd48f7398ef974f1475a75a96605
 SHA512:
-  metadata.gz: e52e85775523f58aeb3bda9186f858d889de0be007e9e68ff9b1d273952e04c86058f440a45b6d7ab27853f1db6a4abfa9e4a45198a8d9ff2f9d323db22906db
-  data.tar.gz: f276ac6f2d6843e4b9bc3cca44d4051f9e1bf0a907e3d0bc82bd78d62d7bede1962d774798aff027ba877ada7c9475b538fa130163e5716177577a65f9dd110c
+  metadata.gz: d1282f18bdffa942e272e23e6375b8d5025efd70885d1bfa1d7d48e8961ca0323f5b4ff3e5951448736cbe7166556f401500e909e3ccecdf78a986a16c6e61e9
+  data.tar.gz: 7567b09235914ca2a10e6328ae431f9b824477367a27f5d134063ac3f3c6ba8cb23536e0f5767695495f3a4ce5c0de624284934d7628f91b42412ad2de74a974

data/CHANGELOG.md

@@ -1,3 +1,7 @@
+8.2.7
+-----
+* Fix the HMAC verification code.
+
 8.2.6
-----
+-----
 * Initial Release

data/lib/spiffy_stores_app/controller_concerns/webhook_verification.rb

@@ -17,9 +17,10 @@ module SpiffyStoresApp
     def hmac_valid?(data)
       secret = SpiffyStoresApp.configuration.secret
       digest = OpenSSL::Digest.new('sha256')
+      encoded_params = JSON.parse(data).map {|i| "#{URI.escape(i[0].to_s, '&=%')}=#{URI.escape(i[1].to_s, '&%')}"}.sort.join('&')
       ActiveSupport::SecurityUtils.secure_compare(
         spiffy_stores_hmac,
-        Base64.encode64(OpenSSL::HMAC.digest(digest, secret, data)).strip
+        OpenSSL::HMAC.hexdigest(digest, secret, encoded_params)
       )
     end
 

data/lib/spiffy_stores_app/version.rb

@@ -1,3 +1,3 @@
 module SpiffyStoresApp
-  VERSION = '8.2.6'.freeze
+  VERSION = '8.2.7'.freeze
 end

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: spiffy_stores_app
 version: !ruby/object:Gem::Version
-  version: 8.2.6
+  version: 8.2.7
 platform: ruby
 authors:
 - Spiffy Stores
 autorequire: 
 bindir: bin
 cert_chain: []
-date: 2018-07-06 00:00:00.000000000 Z
+date: 2018-08-29 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: rails