Class: Insight::ParamsSignature

Inherits:

Object

• Object
• Insight::ParamsSignature

show all

Extended by:

ERB::Util

Defined in:

lib/insight/params_signature.rb

Instance Attribute Summary (collapse)

• - (Object) request readonly

  Returns the value of attribute request.

Class Method Summary (collapse)

• + (Object) sign(request, hash)

Instance Method Summary (collapse)

• - (ParamsSignature) initialize(request) constructor

  A new instance of ParamsSignature.

• - (Object) secret_key
• - (Boolean) secret_key_blank?
• - (Object) signature(params)
• - (Object) signature_base(params)
• - (Object) validate!

23
24
25

# File 'lib/insight/params_signature.rb', line 23

def initialize(request)
  @request = request
end

21
22
23

# File 'lib/insight/params_signature.rb', line 21

def request
  @request
end

8
9
10
11
12
13
14
15
16
17
18
19

# File 'lib/insight/params_signature.rb', line 8

def self.sign(request, hash)
  parts = []

  hash.keys.sort.each do |key|
    parts << "#{key}=#{u(hash[key])}"
  end

  signature = new(request).signature(hash)
  parts << "hash=#{u(signature)}"

  parts.join("&amp;")
end

27
28
29

# File 'lib/insight/params_signature.rb', line 27

def secret_key
  @request.env['insight.secret_key']
end

31
32
33

# File 'lib/insight/params_signature.rb', line 31

def secret_key_blank?
  secret_key.nil? || secret_key == ""
end

43
44
45

# File 'lib/insight/params_signature.rb', line 43

def signature(params)
  Digest::SHA1.hexdigest(signature_base(params))
end

47
48
49
50
51
52
53
54
55
56
57

# File 'lib/insight/params_signature.rb', line 47

def signature_base(params)
  signature = []
  signature << secret_key

  params.keys.sort.each do |key|
    next if key == "hash"
    signature << params[key].to_s
  end

  signature.join(":")
end

35
36
37
38
39
40
41

# File 'lib/insight/params_signature.rb', line 35

def validate!
  if secret_key_blank?
    raise SecurityError.new("Missing secret key")
  elsif request.params["hash"] != signature(request.params)
    raise SecurityError.new("Invalid query hash.")
  end
end