sworn 0.0.2 → 0.0.3

data/lib/sworn.rb

@@ -1,6 +1,8 @@
 require "sworn/configuration"
 require "sworn/middleware"
 require "sworn/replay_protector/custom"
+require "sworn/replay_protector/memory"
+require "sworn/replay_protector/redis"
 require "sworn/verifier"
 require "sworn/version"
 

data/lib/sworn/replay_protector/memory.rb

@@ -0,0 +1,15 @@
+module Sworn
+  module ReplayProtector
+    class Memory
+      def initialize(*options)
+        @store ||= Set.new
+      end
+
+      def replayed?(oauth)
+        return true if @store.include?(oauth)
+        @store << oauth
+        false
+      end
+    end
+  end
+end

data/lib/sworn/replay_protector/redis.rb

@@ -0,0 +1,28 @@
+module Sworn
+  module ReplayProtector
+    class Redis
+      def initialize(*args)
+        options, _ = args.flatten
+        @connection = options.fetch(:redis_connection)
+      end
+
+      def replayed?(oauth)
+        key = nonce_key(oauth)
+
+        return true if @connection.exists(key)
+        @connection.setex(key, Sworn.configuration.max_drift, 1)
+
+        false
+      end
+
+      private
+
+      def nonce_key(oauth)
+        timestamp = oauth.fetch(:timestamp)
+        nonce     = oauth.fetch(:nonce)
+
+        "nonce:#{timestamp}:#{nonce}"
+      end
+    end
+  end
+end

data/lib/sworn/version.rb

@@ -1,3 +1,3 @@
 module Sworn
-  VERSION = "0.0.2"
+  VERSION = "0.0.3"
 end

data/spec/sworn/middleware_spec.rb

@@ -14,12 +14,7 @@ describe Sworn::Middleware do
       config.consumers    = { "consumer" => "consumersecret" }
       config.tokens       = { "token" => "tokensecret" }
       config.max_drift    = 30
-      config.replay_protector = Sworn::ReplayProtector::Custom, lambda { |oauth|
-                                  @store ||= Set.new
-                                  return true if @store.include?(oauth)
-                                  @store << oauth
-                                  false
-                                }
+      config.replay_protector = Sworn::ReplayProtector::Memory
     end
 
     Sworn::Middleware.new dummy_app

data/spec/sworn/replay_protector/memory_spec.rb

@@ -0,0 +1,15 @@
+require 'spec_helper'
+
+describe Sworn::ReplayProtector::Memory do
+  let(:memory) { Sworn::ReplayProtector::Memory.new }
+  describe "#replayed?" do
+    it "returns false for fresh tokens" do
+      expect(memory.replayed?("signature")).to be_false
+    end
+
+    it "returns true for replayed tokens" do
+      memory.replayed?("signature")
+      expect(memory.replayed?("signature")).to be_true
+    end
+  end
+end

data/spec/sworn/replay_protector/redis_spec.rb

@@ -0,0 +1,40 @@
+require 'spec_helper'
+
+class DummyRedis
+  def initialize
+    @store = Hash.new
+  end
+
+  def exists(key)
+    @store.has_key?(key)
+  end
+
+  def setex(key, ttl, value)
+    raise 'ttl mismatch' unless ttl == Sworn.configuration.max_drift
+    @store[key] = [ttl, value]
+  end
+end
+
+describe Sworn::ReplayProtector::Redis do
+  let(:redis_protector) do
+    Sworn::ReplayProtector::Redis.new(:redis_connection => DummyRedis.new)
+  end
+
+  let(:signature) do
+    {
+      :timestamp => 123,
+      :nonce => "abc"
+    }
+  end
+
+  describe "#replayed?" do
+    it "returns false for fresh tokens" do
+      expect(redis_protector.replayed?(signature)).to be_false
+    end
+
+    it "returns true for replayed tokens" do
+      redis_protector.replayed?(signature)
+      expect(redis_protector.replayed?(signature)).to be_true
+    end
+  end
+end

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: sworn
 version: !ruby/object:Gem::Version
-  version: 0.0.2
+  version: 0.0.3
   prerelease: 
 platform: ruby
 authors:
@@ -124,10 +124,14 @@ files:
 - lib/sworn/configuration.rb
 - lib/sworn/middleware.rb
 - lib/sworn/replay_protector/custom.rb
+- lib/sworn/replay_protector/memory.rb
+- lib/sworn/replay_protector/redis.rb
 - lib/sworn/verifier.rb
 - lib/sworn/version.rb
 - spec/spec_helper.rb
 - spec/sworn/middleware_spec.rb
+- spec/sworn/replay_protector/memory_spec.rb
+- spec/sworn/replay_protector/redis_spec.rb
 - spec/sworn_spec.rb
 - sworn.gemspec
 homepage: ''
@@ -158,4 +162,6 @@ summary: Rack middleware for OAuth 1.0a signed requests
 test_files:
 - spec/spec_helper.rb
 - spec/sworn/middleware_spec.rb
+- spec/sworn/replay_protector/memory_spec.rb
+- spec/sworn/replay_protector/redis_spec.rb
 - spec/sworn_spec.rb