urlcrypt 0.1.1 → 0.1.2

checksums.yaml

@@ -0,0 +1,7 @@
+---
+SHA256:
+  metadata.gz: 43b85d8e2005d9c5fb0b2181f9865acb54c85123b9e4aeac7c7c66360aedbdfd
+  data.tar.gz: '008bc1517bf2fd48531d97bdfa4738520b59c855f145716238bd92edc5ba52bc'
+SHA512:
+  metadata.gz: 9c663737786ae94458f6a28442936fd6bdcdde71bbb198d13c1693d151a028d03d647ff080ccdb2b243fa49310b6cc97b95ea305abc28fd22d46d918f10e00e0
+  data.tar.gz: 92567f8985d16055720cea95be351e0a675c764734ae9aba366cb85f360d763d623e44136385c09edece332765eb417f5f79be943a2046abcf466323baf6b110

data/README.md

@@ -20,7 +20,7 @@ that doesn't have other authentication or persistence mechanisms (like cookies):
   * Links that come with an expiration date (à la S3)
   * Mini-apps that don't persist data on the server
 
-Works with Ruby 1.8, 1.9 and 2.0.
+Works with Ruby 2.1+
 
 **Important**: As a general guideline, URL lengths shouldn't exceed about 2000
 characters in length, as URLs longer than that will not work in some browsers
@@ -29,14 +29,17 @@ with URLcrypt.
 
 **WORD OF WARNING: THERE IS NO GUARANTEE WHATSOEVER THAT THIS GEM IS ACTUALLY SECURE AND WORKS. USE AT YOUR OWN RISK.**
 
-URLcrypt is an extraction from [Freckle Time Tracking](http://letsfreckle.com/),
+URLcrypt is an extraction from [Noko Time Tracking](https://nokotime.com),
 where it is used to generate URLs for dynamically generated images in emails.
 
 Patches are welcome; please include tests!
 
 ## Installation
 
-Add `urlcrypt` to your Gemfile.
+Add to your Gemfile:
+```ruby
+gem 'urlcrypt', '~> 0.1.1', require: 'URLcrypt'
+```
 
 ## Example
 

data/Rakefile

@@ -38,7 +38,7 @@ gemspec = Gem::Specification.new do |s|
   s.require_paths << 'lib'
   s.requirements << 'none'
   s.summary = "Securely encode and decode short pieces of arbitrary binary data in URLs."
-  s.version = "0.1.1"
+  s.version = "0.1.2"
 end
 
 Gem::PackageTask.new(gemspec) do |pkg|

data/lib/URLcrypt.rb

@@ -72,7 +72,7 @@ module URLcrypt
     def self.cipher(mode)
       cipher = OpenSSL::Cipher.new('aes-256-cbc')
       cipher.send(mode)
-      cipher.key = @key
+      cipher.key = @key.byteslice(0,cipher.key_len)
       cipher
     end
 

data/test/URLcrypt_test.rb

@@ -1,37 +1,7 @@
 # encoding: utf-8
-require 'bundler'
-Bundler.require(:default, :test)
-
-require 'coveralls'
-Coveralls.wear!
-
-require 'test/unit'
-
-class TestURLcrypt < Test::Unit::TestCase
-  
-  require 'URLcrypt'
-  
-  def assert_bytes_equal(string1, string2)
-    bytes1 = string1.bytes.to_a.join(':')
-    bytes2 = string2.bytes.to_a.join(':')
-    assert_equal(bytes1, bytes2)
-  end
-  
-  def assert_decoding(encoded, plain)
-    decoded = URLcrypt.decode(encoded)
-    assert_bytes_equal(plain, decoded)
-  end
-
-  def assert_encoding(encoded, plain)
-    actual = URLcrypt.encode(plain)
-    assert_bytes_equal(encoded, actual)
-  end
-
-  def assert_encode_and_decode(encoded, plain)
-    assert_encoding(encoded, plain)
-    assert_decoding(encoded, plain)
-  end
+require 'test_helper'
 
+class TestURLcrypt < TestClass
   def test_empty_string
     assert_encode_and_decode('', '')
   end
@@ -41,11 +11,11 @@ class TestURLcrypt < Test::Unit::TestCase
       '111gc86f4nxw5zj1b3qmhpb14n5h25l4m7111',
       "\0\0awesome \n ü string\0\0")
   end
-  
+
   def test_invalid_encoding
     assert_decoding('ZZZZZ', '')
   end
-  
+
   def test_arbitrary_byte_strings
     0.step(1500,17) do |n|
       original = (0..n).map{rand(256).chr}.join
@@ -55,10 +25,12 @@ class TestURLcrypt < Test::Unit::TestCase
   end
   
   def test_encryption
-    # this key was generated via rake secret in a rails app, the pack() converts it into a byte array
-    URLcrypt::key =
-['d25883a27b9a639da85ea7e159b661218799c9efa63069fac13a6778c954fb6d721968887a19bdb01af8f59eb5a90d256bd9903355c20b0b4b39bf4048b9b17b'].pack('H*')
-    
+    # pack() converts this secret into a byte array
+    secret = ['d25883a27b9a639da85ea7e159b661218799c9efa63069fac13a6778c954fb6d'].pack('H*')
+    URLcrypt::key = secret
+
+    assert_equal  OpenSSL::Cipher.new('aes-256-cbc').key_len, secret.bytesize
+
     original  = "hello world!"
     encrypted = URLcrypt::encrypt(original)
     assert_equal(URLcrypt::decrypt(encrypted), original)

data/test/regression_test.rb

@@ -0,0 +1,36 @@
+# encoding: utf-8
+class URLcryptRegressionTest < TestClass
+  def test_encryption_and_decryption
+    original = '{"some":"json_data","token":"dfsfsdfsdf"}'
+    encrypted = URLcrypt.encrypt(original)
+
+    encrypted = URLcrypt::encrypt(original)
+    assert_equal(URLcrypt::decrypt(encrypted), original)
+  end
+
+  def test_encryption_with_too_long_key
+    # this key was generated via rake secret in a rails app, the pack() converts it into a byte array
+    secret = ['d25883a27b9a639da85ea7e159b661218799c9efa63069fac13a6778c954fb6d721968887a19bdb01af8f59eb5a90d256bd9903355c20b0b4b39bf4048b9b17b'].pack('H*')
+    URLcrypt::key = secret
+
+    assert OpenSSL::Cipher.new('aes-256-cbc').key_len < secret.bytesize
+
+    original  = "hello world!"
+    encrypted = URLcrypt::encrypt(original)
+    assert_equal(URLcrypt::decrypt(encrypted), original)
+  end
+
+  def test_encryption_and_decryption_with_too_long_key
+    # this key was generated via rake secret in a rails app, the pack() converts it into a byte array
+    secret = ['d25883a27b9a639da85ea7e159b661218799c9efa63069fac13a6778c954fb6d721968887a19bdb01af8f59eb5a90d256bd9903355c20b0b4b39bf4048b9b17b'].pack('H*')
+    URLcrypt::key = secret
+
+    assert OpenSSL::Cipher.new('aes-256-cbc').key_len < secret.bytesize
+
+    original = '{"some":"json_data","token":"dfsfsdfsdf"}'
+    encrypted = URLcrypt.encrypt(original)
+
+    encrypted = URLcrypt::encrypt(original)
+    assert_equal(URLcrypt::decrypt(encrypted), original)
+  end
+end

data/test/test_helper.rb

@@ -0,0 +1,33 @@
+# encoding: utf-8
+require 'bundler'
+Bundler.require(:default, :test)
+
+require 'coveralls'
+Coveralls.wear!
+
+require 'test/unit'
+
+class TestClass < Test::Unit::TestCase
+  require 'URLcrypt'
+
+  def assert_bytes_equal(string1, string2)
+    bytes1 = string1.bytes.to_a.join(':')
+    bytes2 = string2.bytes.to_a.join(':')
+    assert_equal(bytes1, bytes2)
+  end
+  
+  def assert_decoding(encoded, plain)
+    decoded = URLcrypt.decode(encoded)
+    assert_bytes_equal(plain, decoded)
+  end
+
+  def assert_encoding(encoded, plain)
+    actual = URLcrypt.encode(plain)
+    assert_bytes_equal(encoded, actual)
+  end
+
+  def assert_encode_and_decode(encoded, plain)
+    assert_encoding(encoded, plain)
+    assert_decoding(encoded, plain)
+  end
+end

metadata

@@ -1,70 +1,51 @@
---- !ruby/object:Gem::Specification 
+--- !ruby/object:Gem::Specification
 name: urlcrypt
-version: !ruby/object:Gem::Version 
-  hash: 25
-  prerelease: 
-  segments: 
-  - 0
-  - 1
-  - 1
-  version: 0.1.1
+version: !ruby/object:Gem::Version
+  version: 0.1.2
 platform: ruby
-authors: 
+authors:
 - Thomas Fuchs
 autorequire: 
 bindir: bin
 cert_chain: []
-
-date: 2015-03-18 00:00:00 Z
+date: 2020-11-02 00:00:00.000000000 Z
 dependencies: []
-
 description: 
 email: thomas@slash7.com
 executables: []
-
 extensions: []
-
-extra_rdoc_files: 
+extra_rdoc_files:
+- README.md
+files:
 - README.md
-files: 
 - Rakefile
 - config/environment.rb
 - lib/URLcrypt.rb
 - test/URLcrypt_test.rb
-- README.md
+- test/regression_test.rb
+- test/test_helper.rb
 homepage: 
 licenses: []
-
+metadata: {}
 post_install_message: 
 rdoc_options: []
-
-require_paths: 
+require_paths:
 - lib
 - lib
-required_ruby_version: !ruby/object:Gem::Requirement 
-  none: false
-  requirements: 
+required_ruby_version: !ruby/object:Gem::Requirement
+  requirements:
   - - ">="
-    - !ruby/object:Gem::Version 
-      hash: 3
-      segments: 
-      - 0
-      version: "0"
-required_rubygems_version: !ruby/object:Gem::Requirement 
-  none: false
-  requirements: 
+    - !ruby/object:Gem::Version
+      version: '0'
+required_rubygems_version: !ruby/object:Gem::Requirement
+  requirements:
   - - ">="
-    - !ruby/object:Gem::Version 
-      hash: 3
-      segments: 
-      - 0
-      version: "0"
-requirements: 
+    - !ruby/object:Gem::Version
+      version: '0'
+requirements:
 - none
-rubyforge_project: 
-rubygems_version: 1.8.24
+rubygems_version: 3.1.2
 signing_key: 
-specification_version: 3
+specification_version: 4
 summary: Securely encode and decode short pieces of arbitrary binary data in URLs.
 test_files: []
-