thefacebook 0.1.0

data/.gitignore

@@ -0,0 +1,4 @@
+*.gem
+.bundle
+Gemfile.lock
+pkg/*

data/Gemfile

@@ -0,0 +1,6 @@
+source "http://rubygems.org"
+
+gem 'activesupport', ">= 3.0.0"
+
+# Specify your gem's dependencies in thefacebook.gemspec
+gemspec

data/Rakefile

@@ -0,0 +1 @@
+require "bundler/gem_tasks"

data/lib/thefacebook.rb

@@ -0,0 +1,7 @@
+require "thefacebook/version"
+require "thefacebook/base64_extensions"
+require "thefacebook/parser"
+
+module Thefacebook
+  # Your code goes here...
+end

data/lib/thefacebook/base64_extensions.rb

@@ -0,0 +1,10 @@
+require 'base64'
+module Base64
+  module_function
+
+  def decode64url(str)
+    str = str.ljust((str.size/6+1)*6,"=") if (str.size % 6) > 0
+    Base64.decode64(str.tr("-_", "+/"))
+  end
+
+end

data/lib/thefacebook/signed_request.rb

@@ -0,0 +1,26 @@
+require 'openssl'
+require 'active_support/json'
+require File.dirname(__FILE__) + '/base64_extensions'
+
+module Thefacebook
+
+  class SignedRequest
+    def initialize(signed_request, secret)
+      @signed_request = signed_request
+      @signature, @signed_params = signed_request.split('.') if signed_request
+      @secret = secret
+      self
+    end
+
+    def valid?
+      return false unless [@signature, @signed_params].all? { |str| str.respond_to?(:tr) }
+      expected_signature = OpenSSL::HMAC.digest('SHA256', @secret, @signed_params.tr("-_", "+/"))
+      return expected_signature == Base64.decode64url(@signature)
+    end
+
+    def params
+      ActiveSupport::JSON.decode Base64.decode64url(@signed_params)
+    end
+
+  end
+end

data/lib/thefacebook/version.rb

@@ -0,0 +1,3 @@
+module Thefacebook
+  VERSION = "0.1.0"
+end

data/spec/base64_extensions_test.rb

@@ -0,0 +1,29 @@
+$:.push File.expand_path("../lib")
+require 'minitest/autorun'
+require 'thefacebook/base64_extensions'
+
+def base64url_compare(str)
+  encoded_str = str.gsub('-','+').gsub('_','/')
+  encoded_str += '=' while !(encoded_str.size % 4).zero?
+  Base64.decode64(encoded_str)
+end
+
+
+describe Base64 do
+
+  it "should give the correct encoding with different lengths" do
+    url = "http://123"
+    Base64.decode64url(url).must_equal base64url_compare(url)
+    url = "http://1234"
+    Base64.decode64url(url).must_equal base64url_compare(url)
+    url = "http://12345"
+    Base64.decode64url(url).must_equal base64url_compare(url)
+    url = "http://123456"
+    Base64.decode64url(url).must_equal base64url_compare(url)
+    url = "http://123457"
+    Base64.decode64url(url).must_equal base64url_compare(url)
+    url = "http://1234578"
+    Base64.decode64url(url).must_equal base64url_compare(url)
+  end
+
+end

data/spec/signed_request_test.rb

@@ -0,0 +1,31 @@
+$:.push File.expand_path("../lib")
+require 'minitest/autorun'
+require 'thefacebook/signed_request'
+
+
+describe Thefacebook::SignedRequest do
+
+  it "should validate a correct signed request" do
+    sr = "vlXgu64BQGFSQrY0ZcJBZASMvYvTHu9GQ0YM9rjPSso.eyJhbGdvcml0aG0iOiJITUFDLVNIQTI1NiIsIjAiOiJwYXlsb2FkIn0"
+    result = Thefacebook::SignedRequest.new(sr,"secret")
+    result.valid?.must_equal true
+  end
+
+  it "should not validate an incorrect signed request" do
+    sr = "vlXgu64BQGFSQrY0ZcJBZASMvYvTHu9GQ0YM9rjPSso.eyJhbGdvcml0aG0iOiJITUFDLVNIQTI1NiIsIjAiOiJwYXlsb2FkIn0"
+    result = Thefacebook::SignedRequest.new(sr,"secret_false")
+    result.valid?.must_equal false
+  end
+
+  it "should not validate an empty signed request" do
+    result = Thefacebook::SignedRequest.new(nil,"secret_false")
+    result.valid?.must_equal false
+  end
+
+  it "should decode the encoded params" do
+    sr = "vlXgu64BQGFSQrY0ZcJBZASMvYvTHu9GQ0YM9rjPSso.eyJhbGdvcml0aG0iOiJITUFDLVNIQTI1NiIsIjAiOiJwYXlsb2FkIn0"
+    result = Thefacebook::SignedRequest.new(sr,"secret")
+    result.params["0"].must_equal "payload"
+  end
+
+end

data/thefacebook.gemspec

@@ -0,0 +1,24 @@
+# -*- encoding: utf-8 -*-
+$:.push File.expand_path("../lib", __FILE__)
+require "thefacebook/version"
+
+Gem::Specification.new do |s|
+  s.name        = "thefacebook"
+  s.version     = Thefacebook::VERSION
+  s.authors     = ["Sascha Brink"]
+  s.email       = ["sascha.brink@gmail.com"]
+  s.homepage    = "http://github.com/sbrink/thefacebook"
+  s.summary     = %q{Facebook tools for rails to generate signed request}
+  s.description = %q{Facebook tools for rails to generate signed request. Helpers soon to be included.}
+
+  s.rubyforge_project = "thefacebook"
+
+  s.files         = `git ls-files`.split("\n")
+  s.test_files    = `git ls-files -- {test,spec,features}/*`.split("\n")
+  s.executables   = `git ls-files -- bin/*`.split("\n").map{ |f| File.basename(f) }
+  s.require_paths = ["lib"]
+
+  # specify any dependencies here; for example:
+  # s.add_development_dependency "rspec"
+  s.add_runtime_dependency "activesupport", ">= 3.0.0"
+end

metadata

@@ -0,0 +1,69 @@
+--- !ruby/object:Gem::Specification
+name: thefacebook
+version: !ruby/object:Gem::Version
+  version: 0.1.0
+  prerelease: 
+platform: ruby
+authors:
+- Sascha Brink
+autorequire: 
+bindir: bin
+cert_chain: []
+date: 2011-12-19 00:00:00.000000000Z
+dependencies:
+- !ruby/object:Gem::Dependency
+  name: activesupport
+  requirement: &70220929106180 !ruby/object:Gem::Requirement
+    none: false
+    requirements:
+    - - ! '>='
+      - !ruby/object:Gem::Version
+        version: 3.0.0
+  type: :runtime
+  prerelease: false
+  version_requirements: *70220929106180
+description: Facebook tools for rails to generate signed request. Helpers soon to
+  be included.
+email:
+- sascha.brink@gmail.com
+executables: []
+extensions: []
+extra_rdoc_files: []
+files:
+- .gitignore
+- Gemfile
+- Rakefile
+- lib/thefacebook.rb
+- lib/thefacebook/base64_extensions.rb
+- lib/thefacebook/signed_request.rb
+- lib/thefacebook/version.rb
+- spec/base64_extensions_test.rb
+- spec/signed_request_test.rb
+- thefacebook.gemspec
+homepage: http://github.com/sbrink/thefacebook
+licenses: []
+post_install_message: 
+rdoc_options: []
+require_paths:
+- lib
+required_ruby_version: !ruby/object:Gem::Requirement
+  none: false
+  requirements:
+  - - ! '>='
+    - !ruby/object:Gem::Version
+      version: '0'
+required_rubygems_version: !ruby/object:Gem::Requirement
+  none: false
+  requirements:
+  - - ! '>='
+    - !ruby/object:Gem::Version
+      version: '0'
+requirements: []
+rubyforge_project: thefacebook
+rubygems_version: 1.8.10
+signing_key: 
+specification_version: 3
+summary: Facebook tools for rails to generate signed request
+test_files:
+- spec/base64_extensions_test.rb
+- spec/signed_request_test.rb