tolq-api 0.3.0 → 0.4.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA1:
-  metadata.gz: 79808429da5819b754b3ace0836baff58d5ff9a3
-  data.tar.gz: 4708a7db5757288b8ccff4ab5d41132aa6da414c
+  metadata.gz: 66c210013f56f23ef3c586f7ab567555c3dff938
+  data.tar.gz: 1d5b81afa540594efac4a1593f9965934a7a4903
 SHA512:
-  metadata.gz: b68bfd086a1dacd994a203db2babf9f762057aa103e2f8a4898a41994f9413167794500c370feee08adc95bdc42ce8b5c174d66ad0248004aaeaadf613b18613
-  data.tar.gz: 947ec723d387be9512f1c48d65bd20bf2de23cc5e87843636771555e4c8a24fd80faeb115c1c859632f0bcaf831b8f7b37179e959bec01a3b0381234ae0fa5df
+  metadata.gz: d10c7b1fd61ff0c6c566de8e29cef864051fe61149d89b75a36ff3ba679718c18546cfd6ba885fb80229eb9959576ff80d016825e88e592522c71f9329205412
+  data.tar.gz: 7418eeaaaf964393c29e9dfbc484b479307a58471f87a57afdf2d77e98efd99c1560a621df65a873a237bfe1bc5ac6c3ace9dd2a1462cb9265eb62c41cfd7408

data/CHANGELOG.md

@@ -1,2 +1,5 @@
+# 0.4.0
+* Critical fix for HMAC signature verification, otherwise might use wrong encoding
+
 # 0.3.0
 * Added HMAC signature verification for callbacks

data/Gemfile.lock

@@ -1,7 +1,7 @@
 PATH
   remote: .
   specs:
-    tolq-api (0.2.0)
+    tolq-api (0.3.0)
 
 GEM
   remote: https://rubygems.org/
@@ -37,4 +37,4 @@ DEPENDENCIES
   webmock (~> 1.24.6)
 
 BUNDLED WITH
-   1.11.2
+   1.12.5

data/lib/tolq-api/client.rb

@@ -30,7 +30,7 @@ module Tolq
       # @param signature [String] A sha1 encoded HMAC signature including the 'sha1=' prefix
       # @param payload [String] The body of the payload as a string
       def valid_signature?(signature, payload)
-        payload_signature = 'sha1=' + OpenSSL::HMAC.digest('sha1', self.key, payload)
+        payload_signature = 'sha1=' + OpenSSL::HMAC.hexdigest(OpenSSL::Digest.new('sha1'), self.key, payload)
         payload_signature == signature
       end
 

data/lib/tolq-api/version.rb

@@ -1,5 +1,5 @@
 module Tolq
   module Api
-    VERSION = '0.3.0'.freeze
+    VERSION = '0.4.0'.freeze
   end
 end

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: tolq-api
 version: !ruby/object:Gem::Version
-  version: 0.3.0
+  version: 0.4.0
 platform: ruby
 authors:
 - Timon Vonk
 autorequire: 
 bindir: bin
 cert_chain: []
-date: 2016-05-25 00:00:00.000000000 Z
+date: 2016-06-24 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: bundler
@@ -129,4 +129,3 @@ signing_key:
 specification_version: 4
 summary: A gem that wraps the Tolq.com API
 test_files: []
-has_rdoc: