waylon-core 0.2.3 → 0.2.4

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 44b2586a3ba29a3b2da02d66f880a826b445d2658ea6f83fa3e8a0a9935d0898
-  data.tar.gz: b1d602e2f41f06c37752c31eb2d9a0a983f699f3bcd7c73372305719c6a68874
+  metadata.gz: 0d0e47ec62eadd0848b4538d1bb32238b7e769f09500d536925cbd7d4367be68
+  data.tar.gz: 0ecd0c0d42d07861138d8df7170cb49f9eab7bf9a142844bbca44c57d1222bff
 SHA512:
-  metadata.gz: 6d40939e62fa6c4a58c7bf31ec716fdde3d0d878e36aa6331dcfdabd73b67b02b441973243a3baefd9c96ad01681a1ab382146d26ffa4de83db3ea41355a060f
-  data.tar.gz: 581ba5ccbececbb637a09efab4bd202c3e8112edca8999e57e5fe3bda3b1cb40097f92c73d5e959c76c454039f9d7581fd13955580d5d72d0b3ba773b3991ca0
+  metadata.gz: a9dcad0d9c4ad06afa6579d0a38daa70733fc8a0c692fb9f12b52ddd49f4ab998768ffbd92bfe7fc3a54b5b6691f91f4719c882d730e824364ea5adb190119b3
+  data.tar.gz: 94867f2bb0fde6993ded3026d827c36dbc4af5e3979281a005feea6f202a2e59a700b72ad2bf368d16add33eee9e631451d9aba76b38eb38d04a9c422097e234

data/Gemfile.lock

@@ -1,7 +1,7 @@
 PATH
   remote: .
   specs:
-    waylon-core (0.2.3)
+    waylon-core (0.2.4)
       addressable (~> 2.8)
       faraday (~> 1.8)
       i18n (~> 1.8)

data/lib/waylon/storage.rb

@@ -9,7 +9,7 @@ module Waylon
     )
 
     def self.cipher
-      key_bytes = RbNaCl::Hash.sha256(ENV.fetch("ENCRYPTION_KEY", "thisisVeryUnsafe4U"))[0..31]
+      key_bytes = RbNaCl::Hash.sha256(encryption_key)[0..31]
       RbNaCl::SimpleBox.from_secret_key(key_bytes)
     end
 
@@ -21,6 +21,15 @@ module Waylon
       storage.delete(key)
     end
 
+    def self.encryption_key
+      ENV.fetch("ENCRYPTION_KEY", "thisisVeryUnsafe4U")
+    end
+
+    def self.encryption_key_fingerprint
+      base = RbNaCl::Hash.sha256(encryption_key)[0..15]
+      Base64.urlsafe_encode64(RbNaCl::Hash.sha256(base)[0..7])
+    end
+
     def self.key?(name)
       storage.key?(name)
     end
@@ -30,7 +39,11 @@ module Waylon
       raw = storage.load(key)
       return nil unless raw
 
-      decoded = Base64.decode64(raw)
+      wrapper = JSON.parse(raw)
+      value = wrapper["data"]
+      return nil unless value
+
+      decoded = Base64.decode64(value)
       plain = this_cipher.decrypt(decoded)
       JSON.parse(plain)
     end
@@ -47,7 +60,8 @@ module Waylon
       this_cipher = cipher
       encrypted = this_cipher.encrypt(value.to_json)
       encoded = Base64.encode64(encrypted)
-      storage.store(key, encoded)
+      wrapper = { cipher: cipher.class.name, data: encoded, key: encryption_key_fingerprint }
+      storage.store(key, wrapper.to_json)
     end
   end
 end

data/lib/waylon/version.rb

@@ -6,7 +6,7 @@ module Waylon
     VERSION = [
       0, # Major
       2, # Minor
-      3  # Patch
+      4  # Patch
     ].join(".")
   end
 end

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: waylon-core
 version: !ruby/object:Gem::Version
-  version: 0.2.3
+  version: 0.2.4
 platform: ruby
 authors:
 - Jonathan Gnagy
 autorequire: 
 bindir: exe
 cert_chain: []
-date: 2022-08-30 00:00:00.000000000 Z
+date: 2022-08-31 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: addressable