udap_security_test_kit 0.9.0 → 0.9.2

Sign up to get free protection for your applications and to get access to all the features.
Files changed (8) hide show
  1. checksums.yaml +4 -4
  2. data/lib/udap_security_test_kit/dynamic_client_registration_group.rb +1 -0
  3. data/lib/udap_security_test_kit/signed_metadata_contents_test.rb +1 -1
  4. data/lib/udap_security_test_kit/udap_jwt_builder.rb +1 -1
  5. data/lib/udap_security_test_kit/udap_jwt_validator.rb +1 -1
  6. data/lib/udap_security_test_kit/version.rb +1 -1
  7. data/lib/udap_security_test_kit.rb +19 -0
  8. metadata +3 -3
checksums.yaml CHANGED
@@ -1,7 +1,7 @@
1
1
  ---
2
2
  SHA256:
3
- metadata.gz: bd0f7eeeda6734c1bd79c8ed30ea10dae1a74b7869cb1f2ec3a3a86255eb72df
4
- data.tar.gz: 7d9a2c235883ef6cce3b273099a780a9a710738731026de95a9aac587c9f313a
3
+ metadata.gz: 6434b6856c5921b1846d46d1e705cda99c91f8c9d1cc3e344f8c119fb62c4a22
4
+ data.tar.gz: f54f00f46ba5f61b5e3f8edfb11b87bd1fef67b82a3b91e6f96283ee6e224d51
5
5
  SHA512:
6
- metadata.gz: a434c3c7b537520605b670bcf61c92679c2fc4658ff8d07111b1e43609dbabf72f5adf46287f2ee6c05f57349ffb5a3a1901cd20a576c3b4f31e002311462b73
7
- data.tar.gz: ffed51ee343dab385f3e9cea5ce72e43b30a50111b780489a3208edd6d2401cc05eb421aa548ab733eec918afcfb4098cb64794ff4e1c992f4df7f3a357e5988
6
+ metadata.gz: 06e9e1a1806f44417881c60b44d0b2c8e85b8cb3bf1b260ed1e1785971572548944dc02c815ccf7978744303792fd28819c988b71f1d4e4cc43d6a1a2d82a982
7
+ data.tar.gz: 971aa818c9122d76204a103cafb53faec868e0cb8f8ac36bb22059ffa195238262bb5845300faaa3ba6c762e1a0de0f6ba62b27a4cf41e2950c686f9878d4657
data/lib/udap_security_test_kit/dynamic_client_registration_group.rb CHANGED
@@ -1,3 +1,4 @@
1
+ require_relative 'generate_client_certs_test'
1
2
  require_relative 'registration_failure_invalid_contents_test'
2
3
  require_relative 'registration_failure_invalid_jwt_signature_test'
3
4
  require_relative 'registration_success_test'
data/lib/udap_security_test_kit/signed_metadata_contents_test.rb CHANGED
@@ -26,7 +26,7 @@ module UDAPSecurityTestKit
26
26
  assert token_header.key?('x5c'), 'JWT header does not contain `x5c` field'
27
27
  assert token_header.key?('alg'), 'JWT header does not contain `alg` field'
28
28
 
29
- leaf_cert_der = Base64.urlsafe_decode64(token_header['x5c'].first)
29
+ leaf_cert_der = Base64.decode64(token_header['x5c'].first)
30
30
  leaf_cert = OpenSSL::X509::Certificate.new(leaf_cert_der)
31
31
  signature_validation_result = UDAPSecurityTestKit::UDAPJWTValidator.validate_signature(
32
32
  signed_metadata_jwt,
data/lib/udap_security_test_kit/udap_jwt_builder.rb CHANGED
@@ -21,7 +21,7 @@ module UDAPSecurityTestKit
21
21
 
22
22
  x5c_certs_encoded = x5c_certs_pem_string.map do |cert|
23
23
  cert_pem = OpenSSL::X509::Certificate.new(cert)
24
- Base64.urlsafe_encode64(cert_pem.to_der)
24
+ Base64.encode64(cert_pem.to_der)
25
25
  end
26
26
 
27
27
  JWT.encode payload, private_key, alg, { x5c: x5c_certs_encoded }
data/lib/udap_security_test_kit/udap_jwt_validator.rb CHANGED
@@ -22,7 +22,7 @@ module UDAPSecurityTestKit
22
22
 
23
23
  def self.validate_trust_chain(x5c_header_encoded, trust_anchor_certs)
24
24
  cert_chain = x5c_header_encoded.map do |cert|
25
- cert_der = Base64.urlsafe_decode64(cert)
25
+ cert_der = Base64.decode64(cert)
26
26
  OpenSSL::X509::Certificate.new(cert_der)
27
27
  end
28
28
  crl_uris = cert_chain.map(&:crl_uris).compact.flatten
data/lib/udap_security_test_kit/version.rb CHANGED
@@ -1,3 +1,3 @@
1
1
  module UDAPSecurityTestKit
2
- VERSION = '0.9.0'.freeze
2
+ VERSION = '0.9.2'.freeze
3
3
  end
data/lib/udap_security_test_kit.rb CHANGED
@@ -57,6 +57,25 @@ module UDAPSecurityTestKit
57
57
  request.query_parameters['state']
58
58
  end
59
59
 
60
+ links [
61
+ {
62
+ label: 'Report Issue',
63
+ url: 'https://github.com/inferno-framework/udap-security-test-kit/issues'
64
+ },
65
+ {
66
+ label: 'Open Source',
67
+ url: 'https://github.com/inferno-framework/udap-security-test-kit'
68
+ },
69
+ {
70
+ label: 'Download',
71
+ url: 'https://github.com/inferno-framework/udap-security-test-kit/releases'
72
+ },
73
+ {
74
+ label: 'Implementation Guide',
75
+ url: 'https://hl7.org/fhir/us/udap-security/STU1'
76
+ }
77
+ ]
78
+
60
79
  group from: :udap_authorization_code_group
61
80
  group from: :udap_client_credentials_group
62
81
  end
metadata CHANGED
@@ -1,7 +1,7 @@
1
1
  --- !ruby/object:Gem::Specification
2
2
  name: udap_security_test_kit
3
3
  version: !ruby/object:Gem::Version
4
- version: 0.9.0
4
+ version: 0.9.2
5
5
  platform: ruby
6
6
  authors:
7
7
  - Stephen MacVicar
@@ -9,7 +9,7 @@ authors:
9
9
  autorequire:
10
10
  bindir: bin
11
11
  cert_chain: []
12
- date: 2024-08-13 00:00:00.000000000 Z
12
+ date: 2024-10-07 00:00:00.000000000 Z
13
13
  dependencies:
14
14
  - !ruby/object:Gem::Dependency
15
15
  name: inferno_core
@@ -117,7 +117,7 @@ required_rubygems_version: !ruby/object:Gem::Requirement
117
117
  - !ruby/object:Gem::Version
118
118
  version: '0'
119
119
  requirements: []
120
- rubygems_version: 3.3.7
120
+ rubygems_version: 3.5.9
121
121
  signing_key:
122
122
  specification_version: 4
123
123
  summary: UDAP Security IG Test Kit