zero-captcha 0.0.5 → 0.0.6

checksums.yaml

@@ -1,7 +1,7 @@
 ---
-SHA1:
-  metadata.gz: 29b399f60630d69b79a68a2b1e040b84ba3d33b8
-  data.tar.gz: 84cac48391c72ac2c20357a4b0d220cb7297124c
+SHA256:
+  metadata.gz: 4bb96a46a3c46abad01b0b0e4281fe67e637c33e3e8068696dc90ff5b93dcca2
+  data.tar.gz: 98588bd93a31afda9e65ac1e16ea7e53eb77f826707a2375ff2aab1cfb8e1ebf
 SHA512:
-  metadata.gz: 6430b7f31395e7dd97d25626cd3da71b65ad348b4bbf37eb7b7bbe3e6b7fbe62cfbc5c353a556a595dfedd6b8711bc7b7976864625351d1ae291262032f6ef76
-  data.tar.gz: bc3096a5624909ea0900cb6de7c790a01b6980b382f80f3da499f3094d478996b0442d98e02657d0bbf5b04dbc905be4c098e0872295d7a4d04b71290908f736
+  metadata.gz: e1db16192a10b4a4b9a38dd37495a44ce5e8604776c900a33db12604a371d497de0b2ada92463297f719d28de55bbbe8d832ceda8e433c1c5c22f6360fa23d0f
+  data.tar.gz: c753273a0168b417ea3ea6c1b373d795db6b37c4b1725db590395024c3110be734fa051ce106a67d3c957ef22323f0e6c17c52ff49bcaaa2143ff74b077e6130

data/README.markdown

@@ -13,7 +13,7 @@ of defense alongside honeypot captchas and/or more traditional captchas.
 
 ## Requirements
 
-Requires jQuery on running on the client side.
+Requires Rails 5+
 
 ## Installation
 

data/VERSION

@@ -1 +1 @@
-0.0.3
+0.0.6

data/lib/zero-captcha/form_tag_helper.rb

@@ -26,7 +26,7 @@ module ActionView
           content_tag :div do
             hidden_field_tag(name, 'verify') +
             javascript_tag do
-              "jQuery('input[name=#{name}]').val('#{value}')".html_safe
+              "document.getElementsByName('#{name}')[0].setAttribute('value', '#{value}');".html_safe
             end
           end
         end.join

data/lib/zero-captcha.rb

@@ -2,12 +2,25 @@ require 'zero-captcha/form_tag_helper'
 
 module ZeroCaptcha
   module SpamProtection
+    # change this in controller by overriding `zero_captcha_fields`
+    # to force forms to feed through specific values
     def zero_captcha_fields
-      { :_zc_field => '5b5cd0da3121fc53b4bc84d0c8af2e81' } # change this in controller by overriding `zero_captcha_fields`
+      timestamp = Time.current.to_i
+      return { 
+        :_zc_field => OpenSSL::HMAC.hexdigest('sha256', Rails.application.secret_key_base, "#{timestamp}"),
+        :_timestamp => timestamp
+      } 
     end
 
+    # change this in controller by overriding `zero_captcha_fields`
+    # to force forms to feed through specific values
     def protect_from_spam_with_zero_captcha
-      head :ok if zero_captcha_fields.any? { |name, value| params[name] && params[name] != value }
+      if request.post?
+        head :ok if !params[:_timestamp]
+        head :ok if !params[:_zc_field]
+        head :ok if Time.at(params[:_timestamp].to_i) < 20.minutes.ago 
+        head :ok if params[:_zc_field] != OpenSSL::HMAC.hexdigest('sha256', Rails.application.secret_key_base, "#{params[:_timestamp]}")
+      end
     end
 
     def require_zero_captcha

data/zero-captcha.gemspec

@@ -1,11 +1,11 @@
 # -*- encoding: utf-8 -*-
 Gem::Specification.new do |s|
   s.name = %q{zero-captcha}
-  s.version = "0.0.5"
+  s.version = "0.0.6"
 
   s.required_rubygems_version = Gem::Requirement.new(">= 0") if s.respond_to? :required_rubygems_version=
   s.authors = ['lunaru']
-  s.date = %q{2014-10-25}
+  s.date = %q{2023-08-24}
   s.description = %q{A simple way to add zero friction captchas to Rails forms}
   s.extra_rdoc_files = [
     "LICENSE",

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: zero-captcha
 version: !ruby/object:Gem::Version
-  version: 0.0.5
+  version: 0.0.6
 platform: ruby
 authors:
 - lunaru
 autorequire: 
 bindir: bin
 cert_chain: []
-date: 2014-10-25 00:00:00.000000000 Z
+date: 2023-08-24 00:00:00.000000000 Z
 dependencies: []
 description: A simple way to add zero friction captchas to Rails forms
 email: 
@@ -45,8 +45,7 @@ required_rubygems_version: !ruby/object:Gem::Requirement
     - !ruby/object:Gem::Version
       version: '0'
 requirements: []
-rubyforge_project: 
-rubygems_version: 2.5.2
+rubygems_version: 3.0.3.1
 signing_key: 
 specification_version: 3
 summary: A simple way to add zero friction captchas to Rails forms