u2f 0.0.5 → 0.1.0
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- checksums.yaml +4 -4
- data/README.md +10 -9
- data/lib/u2f.rb +1 -0
- data/lib/u2f/errors.rb +1 -1
- data/lib/u2f/u2f.rb +2 -2
- data/lib/version.rb +1 -1
- data/spec/lib/u2f_spec.rb +2 -2
- metadata +3 -3
checksums.yaml
CHANGED
|
@@ -1,7 +1,7 @@
|
|
|
1
1
|
---
|
|
2
2
|
SHA1:
|
|
3
|
-
metadata.gz:
|
|
4
|
-
data.tar.gz:
|
|
3
|
+
metadata.gz: 60022b213b355bdb9a7c8e30d115cd460990d5bb
|
|
4
|
+
data.tar.gz: c59e0bce1c57789b4fe71f12bfd74576382e78ce
|
|
5
5
|
SHA512:
|
|
6
|
-
metadata.gz:
|
|
7
|
-
data.tar.gz:
|
|
6
|
+
metadata.gz: 02a8053ff4803e1d9f8ebb0c4fd7b9ea36beebcad129d6b4842ca7b4db13a1f4b5611418b41c4571351f470c5641fc1a0200cd40c0d1cd2d9f10c168a50180c4
|
|
7
|
+
data.tar.gz: 537e239d9577a020d3a796dbf9840aa243b0432274fe29ed40e02b2ece1c75384dadd18ee26417d7153126e40dc903c9f5d7b6e7844696fc0ba40a95a60fc210
|
data/README.md
CHANGED
|
@@ -1,12 +1,12 @@
|
|
|
1
1
|
# Ruby U2F
|
|
2
2
|
|
|
3
3
|
[](http://badge.fury.io/rb/u2f)
|
|
4
|
-
[](https://gemnasium.com/castle/ruby-u2f)
|
|
5
|
+
[](https://hakiri.io/github/castle/ruby-u2f/master)
|
|
6
6
|
|
|
7
|
-
[](https://travis-ci.org/castle/ruby-u2f)
|
|
8
|
+
[](https://codeclimate.com/github/castle/ruby-u2f)
|
|
9
|
+
[](https://coveralls.io/r/castle/ruby-u2f)
|
|
10
10
|
|
|
11
11
|
Provides functionality for working with the server side aspects of the U2F
|
|
12
12
|
protocol as defined in the [FIDO specifications](http://fidoalliance.org/specifications/download). To read more about U2F and how to use a U2F library, visit [developers.yubico.com/U2F](http://developers.yubico.com/U2F).
|
|
@@ -17,7 +17,7 @@ U2F is an open 2-factor authentication standard that enables keychain devices, m
|
|
|
17
17
|
|
|
18
18
|
## Working example application
|
|
19
19
|
|
|
20
|
-
Check out the [example](https://github.com/
|
|
20
|
+
Check out the [example](https://github.com/castle/ruby-u2f/tree/master/example) directory for a fully working Padrino server demonstrating U2F.
|
|
21
21
|
|
|
22
22
|
## Installation
|
|
23
23
|
|
|
@@ -42,7 +42,7 @@ The U2F library has two major tasks:
|
|
|
42
42
|
|
|
43
43
|
Each task starts by generating a challenge on the server, which is rendered to a web view, read by the browser API:s and transmitted to the plugged in U2F devices for verification. The U2F device responds and triggers a callback in the browser, and a form is posted back to your server where you verify the challenge and store the U2F device information to your database.
|
|
44
44
|
|
|
45
|
-
You'll need an instance of `U2F:U2F`, which is conveniently placed in an [instance method](https://github.com/
|
|
45
|
+
You'll need an instance of `U2F:U2F`, which is conveniently placed in an [instance method](https://github.com/castle/ruby-u2f/blob/master/example/app/helpers/helpers.rb) on the controller. The initializer takes an **App ID** as argument.
|
|
46
46
|
|
|
47
47
|
```ruby
|
|
48
48
|
def u2f
|
|
@@ -190,7 +190,8 @@ def create
|
|
|
190
190
|
|
|
191
191
|
begin
|
|
192
192
|
u2f.authenticate!(session[:challenges], response,
|
|
193
|
-
registration.public_key,
|
|
193
|
+
Base64.decode64(registration.public_key),
|
|
194
|
+
registration.counter)
|
|
194
195
|
rescue U2F::Error => e
|
|
195
196
|
return "Unable to authenticate: <%= e.class.name %>"
|
|
196
197
|
ensure
|
|
@@ -205,4 +206,4 @@ end
|
|
|
205
206
|
|
|
206
207
|
## License
|
|
207
208
|
|
|
208
|
-
MIT License. Copyright (c)
|
|
209
|
+
MIT License. Copyright (c) 2015 by Johan Brissmyr and Sebastian Wallin
|
data/lib/u2f.rb
CHANGED
data/lib/u2f/errors.rb
CHANGED
|
@@ -8,7 +8,7 @@ module U2F
|
|
|
8
8
|
class AttestationSignatureError < Error; end
|
|
9
9
|
class NoMatchingRequestError < Error; end
|
|
10
10
|
class NoMatchingRegistrationError < Error; end
|
|
11
|
-
class
|
|
11
|
+
class CounterTooLowError < Error; end
|
|
12
12
|
class AuthenticationFailedError < Error; end
|
|
13
13
|
class UserNotPresentError < Error;end
|
|
14
14
|
|
data/lib/u2f/u2f.rb
CHANGED
|
@@ -39,7 +39,7 @@ module U2F
|
|
|
39
39
|
# - +ClientDataTypeError+:: if the response is of the wrong type
|
|
40
40
|
# - +AuthenticationFailedError+:: if the authentication failed
|
|
41
41
|
# - +UserNotPresentError+:: if the user wasn't present during the authentication
|
|
42
|
-
# - +
|
|
42
|
+
# - +CounterTooLowError+:: if there is a counter mismatch between the registered one and the one in the response.
|
|
43
43
|
#
|
|
44
44
|
def authenticate!(challenges, response, registration_public_key,
|
|
45
45
|
registration_counter)
|
|
@@ -60,7 +60,7 @@ module U2F
|
|
|
60
60
|
fail UserNotPresentError unless response.user_present?
|
|
61
61
|
|
|
62
62
|
unless response.counter > registration_counter
|
|
63
|
-
fail
|
|
63
|
+
fail CounterTooLowError
|
|
64
64
|
end
|
|
65
65
|
end
|
|
66
66
|
|
data/lib/version.rb
CHANGED
data/spec/lib/u2f_spec.rb
CHANGED
|
@@ -61,8 +61,8 @@ describe U2F do
|
|
|
61
61
|
|
|
62
62
|
context 'with incorrect counter' do
|
|
63
63
|
let(:counter) { 1000 }
|
|
64
|
-
it 'raises
|
|
65
|
-
expect { u2f_authenticate }.to raise_error(U2F::
|
|
64
|
+
it 'raises CounterTooLowError' do
|
|
65
|
+
expect { u2f_authenticate }.to raise_error(U2F::CounterTooLowError)
|
|
66
66
|
end
|
|
67
67
|
end
|
|
68
68
|
context 'with incorrect counter' do
|
metadata
CHANGED
|
@@ -1,7 +1,7 @@
|
|
|
1
1
|
--- !ruby/object:Gem::Specification
|
|
2
2
|
name: u2f
|
|
3
3
|
version: !ruby/object:Gem::Version
|
|
4
|
-
version: 0.0
|
|
4
|
+
version: 0.1.0
|
|
5
5
|
platform: ruby
|
|
6
6
|
authors:
|
|
7
7
|
- Johan Brissmyr
|
|
@@ -9,7 +9,7 @@ authors:
|
|
|
9
9
|
autorequire:
|
|
10
10
|
bindir: bin
|
|
11
11
|
cert_chain: []
|
|
12
|
-
date:
|
|
12
|
+
date: 2015-02-20 00:00:00.000000000 Z
|
|
13
13
|
dependencies:
|
|
14
14
|
- !ruby/object:Gem::Dependency
|
|
15
15
|
name: rake
|
|
@@ -122,7 +122,7 @@ files:
|
|
|
122
122
|
- spec/lib/sign_response_spec.rb
|
|
123
123
|
- spec/lib/u2f_spec.rb
|
|
124
124
|
- spec/spec_helper.rb
|
|
125
|
-
homepage: https://github.com/
|
|
125
|
+
homepage: https://github.com/castle/ruby-u2f
|
|
126
126
|
licenses:
|
|
127
127
|
- MIT
|
|
128
128
|
metadata: {}
|