Class: Heroku::Bouncer::DecryptedHash

Inherits:
Hash
  • Object
show all
Defined in:
lib/heroku/bouncer/decrypted_hash.rb

Overview

Encapsulates encrypting and decrypting a hash of data. Does not store the key that is passed in.

Constant Summary collapse

Lockbox = 
::Heroku::Bouncer::Lockbox

Class Method Summary collapse

Instance Method Summary collapse

Constructor Details

#initialize(decrypted_hash = nil) ⇒ DecryptedHash

Returns a new instance of DecryptedHash.



9
10
11
12
 
# File 'lib/heroku/bouncer/decrypted_hash.rb', line 9

def initialize(decrypted_hash = nil)
  super
  replace(decrypted_hash) if decrypted_hash
end

Class Method Details

.unlock(data, key) ⇒ Object 



14
15
16
17
18
19
20
21
22
23
24
25
26
27
 
# File 'lib/heroku/bouncer/decrypted_hash.rb', line 14

def self.unlock(data, key)
  if data && data = Lockbox.new(key).unlock(data)
    data, digest = data.split("--")
    if digest == Lockbox.generate_hmac(data, key)
      data = data.unpack('m*').first
      data = Marshal.load(data)
      new(data)
    else
      new
    end
  else
    new
  end
end

Instance Method Details

#lock(key) ⇒ Object 



29
30
31
32
33
34
35
36
 
# File 'lib/heroku/bouncer/decrypted_hash.rb', line 29

def lock(key)
  # marshal a Hash, not a DecryptedHash
  data = {}.replace(self)
  data = Marshal.dump(data)
  data = [data].pack('m*')
  data = "#{data}--#{Lockbox.generate_hmac(data, key)}"
  Lockbox.new(key).lock(data)
end