whispler-signature 0.1.0

data/Manifest

@@ -0,0 +1,4 @@
+Manifest
+README.rdoc
+Rakefile
+lib/whispler-signature.rb

data/README.rdoc

@@ -0,0 +1,2 @@
+Whispler signatures
+===================

data/Rakefile

@@ -0,0 +1,12 @@
+require 'rubygems'  
+require 'rake'  
+require 'echoe'  
+  
+Echoe.new('whispler-signature', '0.1.0') do |p|  
+  p.description     = "Implements whispler signatures"
+  p.url             = "http://github.com/pboy/whispler-signature"  
+  p.author          = "Whispler"  
+  p.email           = "developers@whispler.com"  
+  p.ignore_pattern  = ["tmp/*", "script/*"]  
+  p.development_dependencies = []  
+end  

data/lib/whispler-signature.rb

@@ -0,0 +1,59 @@
+module WhisplerSignature
+
+  HEADER = "X-W-Signature"
+
+  #
+  # calculate outgoing signature; returns as a hash
+  #
+  # { "X-W-Signature", "ajhgdkhjgd:kjhgsjkhsgjhksgs" }
+  def self.calculate(api_key, verb, path, headers, body)
+    api_key = api_key.api_key if api_key.respond_to?(:api_key)
+    return {} unless api_key
+    
+    salt = salt!
+    signature = calc_signature verb, path, api_key, salt, body
+    { HEADER => "#{salt}:#{signature}" }
+  end
+
+  #
+  # validates incoming signature
+  #
+  # - true: valid request signature
+  # - false: no request signature
+  #
+  # Raises an exception (ArgumentError) is the signature exists, but 
+  # is invalid.
+  def self.validate?(api_key, req)
+    api_key = api_key.api_key if api_key.respond_to?(:api_key)
+    return false unless api_key && signature = req.headers[HEADER]
+
+    raise ArgumentError, "Invalid signature format" unless signature =~ /^(.+):([^:]+)$/
+
+    salt, checksum = $1, $2
+    sig = calc_signature req.method, req.env["REQUEST_URI"], req.raw_post, api_key, salt
+
+    raise ArgumentError, "Invalid signature" unless checksum == sig
+
+    true
+  end
+  
+  private
+  
+  # this is not a cryptographically strong salt generator
+  def self.salt!
+    "#{Time.now.to_i % 10177}-#{rand(0xffffff)}"
+  end
+
+  HEADER_ONLY_VERBS = [ :get, :head, :options ]
+  
+  def self.calc_signature(verb, path, body, api_key, salt)
+    data = verb.to_s.upcase + "\n" +
+      path + "\n" +
+      api_key + "\n" +
+      salt + "\n"
+
+    data += body unless HEADER_ONLY_VERBS.include?(verb)
+
+    Digest::SHA1.hexdigest(data)
+  end
+end

data/whispler-signature.gemspec

@@ -0,0 +1,30 @@
+# -*- encoding: utf-8 -*-
+
+Gem::Specification.new do |s|
+  s.name = %q{whispler-signature}
+  s.version = "0.1.0"
+
+  s.required_rubygems_version = Gem::Requirement.new(">= 1.2") if s.respond_to? :required_rubygems_version=
+  s.authors = ["Whispler"]
+  s.date = %q{2009-12-12}
+  s.description = %q{Implements whispler signatures}
+  s.email = %q{developers@whispler.com}
+  s.extra_rdoc_files = ["README.rdoc", "lib/whispler-signature.rb"]
+  s.files = ["Manifest", "README.rdoc", "Rakefile", "lib/whispler-signature.rb", "whispler-signature.gemspec"]
+  s.homepage = %q{http://github.com/pboy/whispler-signature}
+  s.rdoc_options = ["--line-numbers", "--inline-source", "--title", "Whispler-signature", "--main", "README.rdoc"]
+  s.require_paths = ["lib"]
+  s.rubyforge_project = %q{whispler-signature}
+  s.rubygems_version = %q{1.3.5}
+  s.summary = %q{Implements whispler signatures}
+
+  if s.respond_to? :specification_version then
+    current_version = Gem::Specification::CURRENT_SPECIFICATION_VERSION
+    s.specification_version = 3
+
+    if Gem::Version.new(Gem::RubyGemsVersion) >= Gem::Version.new('1.2.0') then
+    else
+    end
+  else
+  end
+end

metadata

@@ -0,0 +1,65 @@
+--- !ruby/object:Gem::Specification 
+name: whispler-signature
+version: !ruby/object:Gem::Version 
+  version: 0.1.0
+platform: ruby
+authors: 
+- Whispler
+autorequire: 
+bindir: bin
+cert_chain: []
+
+date: 2009-12-12 00:00:00 +01:00
+default_executable: 
+dependencies: []
+
+description: Implements whispler signatures
+email: developers@whispler.com
+executables: []
+
+extensions: []
+
+extra_rdoc_files: 
+- README.rdoc
+- lib/whispler-signature.rb
+files: 
+- Manifest
+- README.rdoc
+- Rakefile
+- lib/whispler-signature.rb
+- whispler-signature.gemspec
+has_rdoc: true
+homepage: http://github.com/pboy/whispler-signature
+licenses: []
+
+post_install_message: 
+rdoc_options: 
+- --line-numbers
+- --inline-source
+- --title
+- Whispler-signature
+- --main
+- README.rdoc
+require_paths: 
+- lib
+required_ruby_version: !ruby/object:Gem::Requirement 
+  requirements: 
+  - - ">="
+    - !ruby/object:Gem::Version 
+      version: "0"
+  version: 
+required_rubygems_version: !ruby/object:Gem::Requirement 
+  requirements: 
+  - - ">="
+    - !ruby/object:Gem::Version 
+      version: "1.2"
+  version: 
+requirements: []
+
+rubyforge_project: whispler-signature
+rubygems_version: 1.3.5
+signing_key: 
+specification_version: 3
+summary: Implements whispler signatures
+test_files: []
+