travis-encrypt 0.0.1 → 0.0.5

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA1:
-  metadata.gz: 3cc5b08f7b744a0d65048a30fbc106574ca09020
-  data.tar.gz: d305be5fa49e303584418c5f848f6a3a333808a7
+  metadata.gz: 4b4c5b90d121b7f46e33422a7627814a3cfb2625
+  data.tar.gz: 5a34a737000fb84382fa53b83bb010e5f2d464c4
 SHA512:
-  metadata.gz: cd83823e74a711d52dd0e2631f32a0124a38bd6758eb39b76943b4a0f23db04ae8422637b2615f38fa606b4855679f89b1e8a59dd1f0cd24209e1983f772eda3
-  data.tar.gz: 7daf90258525aaadabb554da5ed37702117b02e756a98065a7f6125c69ee442be9b8d08971f57195c1236f6658f75f15fc714ee9bba2f37e5c40e9cda02c09f7
+  metadata.gz: 72b1a0b20ec4384530d5322dffd601f14e5b658bab3a9901db98733a284b29b1b7ffe27cb73a03fad2d18d1ada711da3b7f0330d901b5f0580977d4834bb07e2
+  data.tar.gz: b11628cc49b98f62f90d58aa06e2e31a1a0bcaa8880a5a4546b439f0402710e557ad0cea23d839b91ef29215f19f37bda00157ea6c66ead5dc85f8ebce9b9e75

data/Gemfile

@@ -1,6 +1,10 @@
 source 'https://rubygems.org'
 
-ruby '2.2.2'
+# ruby '2.2.2'
+
+platform :jruby do
+  gem 'jruby-openssl', '~> 0.9.8', require: false
+end
 
 group :test do
   gem 'rspec'

data/README.md

@@ -0,0 +1,49 @@
+# travis-encrypt
+
+Encryption support for models and helpers in travis-ci services.
+
+Usage:
+
+```ruby
+require 'travis/encrypt'
+
+Encrypt.setup(key: 'secret')
+
+class Foo < ActiveRecord::Base
+  include Travis::Encrypt::Helpers::ActiveRecord
+
+  attr_encrypted :foo
+end
+```
+
+or:
+
+```ruby
+require 'travis/encrypt'
+
+class Foo < ActiveRecord::Base
+  include Travis::Encrypt::Helpers::ActiveRecord
+
+  attr_encrypted :foo, key: 'secret'
+end
+```
+
+For Sequel models use `Travis::Encrypt::Helpers::Sequel`, which also decrypts
+values in `values`.
+
+Note this currently goes through normal attribute accessors, so not all methods
+might return decrypted values (e.g. ActiveRecord's `pluck`, and Sequel's
+`select_map`).
+
+### Doing releases
+
+Bump the version in
+[travis/encrypt/version.rb](https://github.com/travis-ci/travis-encrypt/blob/master/lib/travis/encrypt/version.rb),
+create a git tag, and push to https://rubygems.org
+
+Or:
+
+```
+$ gem install gem-release
+$ gem bump --push --tag --release
+```

data/lib/travis/encrypt.rb

@@ -1,5 +1,6 @@
-require 'securerandom'
 require 'base64'
+require 'securerandom'
+require 'openssl'
 require 'travis/encrypt/decryptor'
 require 'travis/encrypt/encryptor'
 require 'travis/encrypt/helpers'

data/lib/travis/encrypt/{common.rb → base.rb}

@@ -1,7 +1,17 @@
 module Travis
   module Encrypt
-    module Common
+    class Base
+      attr_reader :string, :key, :options
+
+      def initialize(string, options)
+        @string  = string
+        @key     = options[:key]
+        @options = options
+        validate
+      end
+
       def create_aes(mode = :encrypt, key, iv)
+        key = key[0, 32] # https://github.com/ruby/ruby/commit/ce635262f53b760284d56bb1027baebaaec175d1
         aes = OpenSSL::Cipher::AES.new(256, :CBC)
         aes.send(mode)
         aes.key = key
@@ -28,6 +38,13 @@ module Travis
       def decode(str)
         Base64.strict_decode64(str)
       end
+
+      private
+
+        def validate
+          key               || fail('No key given')
+          key.is_a?(String) || fail("Invalid key given: #{key.inspect}")
+        end
     end
   end
 end

data/lib/travis/encrypt/decryptor.rb

@@ -1,18 +1,8 @@
-require 'travis/encrypt/common'
+require 'travis/encrypt/base'
 
 module Travis
   module Encrypt
-    class Decryptor
-      include Common
-
-      attr_reader :string, :key, :options
-
-      def initialize(string, options)
-        @string  = string
-        @key     = options[:key] || fail("Need to pass a key")
-        @options = options || {}
-      end
-
+    class Decryptor < Base
       def apply?
         string && (!use_prefix? || prefix_used?)
       end

data/lib/travis/encrypt/encryptor.rb

@@ -1,18 +1,8 @@
-require 'travis/encrypt/common'
+require 'travis/encrypt/base'
 
 module Travis
   module Encrypt
-    class Encryptor
-      include Common
-
-      attr_reader :string, :key, :options
-
-      def initialize(string, options)
-        @string  = string
-        @key     = options[:key] || fail("Need to pass a key")
-        @options = options || {}
-      end
-
+    class Encryptor < Base
       def apply?
         !!string && !string.empty? && !options[:disable] # TODO ask piotr
       end

data/lib/travis/encrypt/version.rb

@@ -1,5 +1,5 @@
 module Travis
   module Encrypt
-    VERSION = '0.0.1'
+    VERSION = '0.0.5'
   end
 end

data/spec/encrypt_spec.rb

@@ -4,7 +4,7 @@ describe Travis::Encrypt do
   let(:string)    { 'travis' }
   let(:encrypted) { encrypt(string, options) }
   let(:decrypted) { decrypt(encrypted, options) }
-  let(:options)   { { key: 'abcd' * 8 } }
+  let(:options)   { { key: 'secret' * 10 } }
 
   it 'can decrypt an encrypted string' do
     expect(decrypted).to eql(string)
@@ -18,4 +18,9 @@ describe Travis::Encrypt do
     options[:use_prefix] = false
     expect(encrypted[0..7]).to_not eql(described_class::PREFIX)
   end
+
+  describe 'travis-core legacy compat' do
+    let(:encrypted) { '--ENCR--q/BkAx83j9FaMqw0RR2mqzBmMjI1ZGFjMGI3YTY3ZDc=' }
+    it { expect(decrypted).to eq('foo') }
+  end
 end

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: travis-encrypt
 version: !ruby/object:Gem::Version
-  version: 0.0.1
+  version: 0.0.5
 platform: ruby
 authors:
 - Travis CI
 autorequire: 
 bindir: bin
 cert_chain: []
-date: 2015-08-26 00:00:00.000000000 Z
+date: 2017-07-25 00:00:00.000000000 Z
 dependencies: []
 description: Travis CI encryption support.
 email: contact@travis-ci.org
@@ -16,21 +16,20 @@ executables: []
 extensions: []
 extra_rdoc_files: []
 files:
-- Gemfile
-- Gemfile.lock
-- lib/travis/encrypt.rb
-- lib/travis/encrypt/common.rb
+- lib/travis/encrypt/base.rb
 - lib/travis/encrypt/decryptor.rb
 - lib/travis/encrypt/encryptor.rb
-- lib/travis/encrypt/helpers.rb
 - lib/travis/encrypt/helpers/active_record.rb
 - lib/travis/encrypt/helpers/common.rb
 - lib/travis/encrypt/helpers/sequel.rb
+- lib/travis/encrypt/helpers.rb
 - lib/travis/encrypt/version.rb
+- lib/travis/encrypt.rb
 - spec/encrypt_spec.rb
 - spec/helpers_spec.rb
 - spec/spec_helper.rb
-- travis-encrypt.gemspec
+- Gemfile
+- README.md
 homepage: https://github.com/travis-ci/travis-encrypt
 licenses:
 - MIT
@@ -41,19 +40,18 @@ require_paths:
 - lib
 required_ruby_version: !ruby/object:Gem::Requirement
   requirements:
-  - - ">="
+  - - '>='
     - !ruby/object:Gem::Version
       version: '0'
 required_rubygems_version: !ruby/object:Gem::Requirement
   requirements:
-  - - ">="
+  - - '>='
     - !ruby/object:Gem::Version
       version: '0'
 requirements: []
 rubyforge_project: 
-rubygems_version: 2.4.5
+rubygems_version: 2.0.14.1
 signing_key: 
 specification_version: 4
 summary: Travis CI encryption support
 test_files: []
-has_rdoc: 

data/Gemfile.lock

@@ -1,23 +0,0 @@
-GEM
-  remote: https://rubygems.org/
-  specs:
-    diff-lcs (1.2.5)
-    rspec (3.3.0)
-      rspec-core (~> 3.3.0)
-      rspec-expectations (~> 3.3.0)
-      rspec-mocks (~> 3.3.0)
-    rspec-core (3.3.2)
-      rspec-support (~> 3.3.0)
-    rspec-expectations (3.3.1)
-      diff-lcs (>= 1.2.0, < 2.0)
-      rspec-support (~> 3.3.0)
-    rspec-mocks (3.3.2)
-      diff-lcs (>= 1.2.0, < 2.0)
-      rspec-support (~> 3.3.0)
-    rspec-support (3.3.0)
-
-PLATFORMS
-  ruby
-
-DEPENDENCIES
-  rspec

data/travis-encrypt.gemspec

@@ -1,19 +0,0 @@
-# encoding: utf-8
-
-$:.unshift File.expand_path('../lib', __FILE__)
-require 'travis/encrypt/version'
-
-Gem::Specification.new do |s|
-  s.name         = "travis-encrypt"
-  s.version      = Travis::Encrypt::VERSION
-  s.authors      = ["Travis CI"]
-  s.email        = "contact@travis-ci.org"
-  s.homepage     = "https://github.com/travis-ci/travis-encrypt"
-  s.summary      = "Travis CI encryption support"
-  s.description  = "#{s.summary}."
-  s.license      = "MIT"
-
-  s.files        = Dir['{bin/**/*,lib/**/*,spec/**/*,[A-Z]*}']
-  s.platform     = Gem::Platform::RUBY
-  s.require_path = 'lib'
-end