Class: Komtet::Credentials

Inherits:
Object
  • Object
show all
Defined in:
lib/komtet/credentials.rb

Overview

relates to a task queue (a set of registrators)

Instance Attribute Summary collapse

Class Method Summary collapse

Instance Method Summary collapse

Constructor Details

#initialize(shop_id:, signature_key:, queue_id: nil) ⇒ Credentials

Returns a new instance of Credentials.



11
12
13
14
15
16
 
# File 'lib/komtet/credentials.rb', line 11

def initialize(shop_id:, signature_key:, queue_id:nil)
  # TODO: also LLC data here
  @shop_id = shop_id
  @signature_key = signature_key
  @queue_id = queue_id
end

Instance Attribute Details

#queue_id ⇒ Object

Returns the value of attribute queue_id.



9
10
11
 
# File 'lib/komtet/credentials.rb', line 9

def queue_id
  @queue_id
end

#shop_id ⇒ Object

Returns the value of attribute shop_id.



9
10
11
 
# File 'lib/komtet/credentials.rb', line 9

def shop_id
  @shop_id
end

#signature_key ⇒ Object

Returns the value of attribute signature_key.



9
10
11
 
# File 'lib/komtet/credentials.rb', line 9

def signature_key
  @signature_key
end

Class Method Details

.from_hash(hash, key_pass: nil) ⇒ Object 



18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
 
# File 'lib/komtet/credentials.rb', line 18

def self.from_hash(hash, key_pass:nil)
  unless (decoded_signature = hash[:signature_key] || hash["signature_key"])
    cipher = OpenSSL::Cipher.new('aes-256-cbc')
    cipher.decrypt
    cipher.key = key_pass
    cipher.iv  = Base64.strict_decode64(hash[:signature_key_iv] || hash["signature_key_iv"])
    decoded_signature = cipher.update(
      Base64.strict_decode64(hash[:signature_key_enc] || hash["signature_key_enc"])
      ) + cipher.final
    unless Digest::MD5.hexdigest(decoded_signature) == (hash[:signature_key_hash] || hash["signature_key_hash"])
      # actually there's usually OpenSSL::Cipher::CipherError, but not guaranteed
      raise "Signature md5 does not match, probably wrong key_pass (bad decrypt)"
    end
  end

  new(
    shop_id: hash[:shop_id] || hash["shop_id"],
    signature_key: decoded_signature,
    queue_id: hash[:queue_id] || hash["queue_id"],
  )
end

Instance Method Details

#signature(http_method, full_url, body = nil) ⇒ Object 



55
56
57
58
59
60
61
 
# File 'lib/komtet/credentials.rb', line 55

def signature(http_method, full_url, body=nil)
  OpenSSL::HMAC.hexdigest(
      OpenSSL::Digest::MD5.new,
      @signature_key,
      "#{http_method.to_s.upcase}#{full_url}#{body}"
  )
end

#to_hash(key_pass:) ⇒ Object 



40
41
42
43
44
45
46
47
48
49
50
51
52
53
 
# File 'lib/komtet/credentials.rb', line 40

def to_hash(key_pass:)
  cipher = OpenSSL::Cipher.new('aes-256-cbc')
  cipher.encrypt
  cipher.key = key_pass
  signature_key_iv = Base64.strict_encode64(cipher.random_iv)

  {
    shop_id: shop_id,
    queue_id: queue_id,
    signature_key_iv: signature_key_iv,
    signature_key_hash: Digest::MD5.hexdigest(signature_key), # may be unsafe, but we a guarding mostly against production data in development
    signature_key_enc: Base64.strict_encode64(cipher.update(signature_key) + cipher.final),
  }
end