Skip to content

issues Search Results · repo:Asquera/warden-hmac-authentication language:Ruby

Filter by

9 results
 (96 ms)

9 results

inAsquera/warden-hmac-authentication (press backspace or delete to remove)

Asquera/warden-hmac-authentication
Design question

I ve just started work on a Rails API and looking to protect endpoints using this gem. I ve established that I can make the following type calls successfully: :hmac_header, GET example: curl -i -H ...
  • sauy7
  • Opened 
    on Jan 22, 2014
  • #29

Asquera/warden-hmac-authentication
Extract hmac-signer

Any chance we could get this as an individual gem? I can always pull it out, license it under the same code, push, and give you rights.
  • krainboltgreene
  • 2
  • Opened 
    on Nov 12, 2013
  • #28

Asquera/warden-hmac-authentication
hmac signer breaks with query value "%"

Hey together, If you pass a simple % symbol as a query value to the hmac signer it breaks with ArgumentError: invalid %-encoding (%) . 1.9.3p194 :001 require uri = true 1.9.3p194 :002 require ...
  • mmack
  • 1
  • Opened 
    on Mar 19, 2013
  • #25

Asquera/warden-hmac-authentication
Content-MD5 and request content validation

In README you say that Content-MD5 header is always included in canonical representation (if it exists) but the library does not provide any validations that Content-MD5 is valid and Faraday middleware ...
  • fxposter
  • 2
  • Opened 
    on Oct 8, 2012
  • #21

Asquera/warden-hmac-authentication
Can't convert Hash into String. (TypeError)

is there issues with different version of ruby? I ve tried on linux and windows with 1.9.3, 1.9.2 and 1.8.7 and get this error when i run: rake test c:/Ruby193/lib/ruby/gems/1.9.1/gems/addressable-2.3.2/lib/addressable/uri.rb:340:in ...
  • greenail
  • 3
  • Opened 
    on Sep 27, 2012
  • #19

Asquera/warden-hmac-authentication
Adressable 2.2.9 breaks

see https://github.com/sporkmonger/addressable/issues/77. Support for nested query parameters has been removed in 2.2.9, 2.2.8 is working just fine.
  • Xylakant
  • 2
  • Opened 
    on Sep 14, 2012
  • #18

Asquera/warden-hmac-authentication
Use a more secure string comparison for tokens

The signer uses def validate_signature(signature, params) signature == generate_signature(params) end to validate a token. Ruby s string compare is probably efficient and short-circuits ...
  • Xylakant
  • 1
  • Opened 
    on Jun 11, 2012
  • #16

Asquera/warden-hmac-authentication
Header-Based Auth fails because headers are capitalized

the hmac_header strategy assumes that headers are in regular case, but rack actually capitalizes all headers in the incoming request: { ACCEPT = / , AUTHORIZATION = HMAC a5b83b105607d1f661387b75f1602d45f6448b60 ...
  • Xylakant
  • 1
  • Opened 
    on Jan 15, 2012
  • #12

Asquera/warden-hmac-authentication
Signing a url with no query parameters fails

/home/vagrant/warden-hmac-authentication/lib/hmac_signer.rb:199:in sign_request : undefined method[]= for nil:NilClass (NoMethodError) from /home/vagrant/warden-hmac-authentication/lib/hmac_signer.rb:228:in ...
  • Xylakant
  • 1
  • Opened 
    on Jul 16, 2011
  • #7
Issue origami icon

Learn how you can use GitHub Issues to plan and track your work.

Save views for sprints, backlogs, teams, or releases. Rank, sort, and filter issues to suit the occasion. The possibilities are endless.Learn more about GitHub Issues
ProTip! 
Restrict your search to the title by using the in:title qualifier.
Issue origami icon

Learn how you can use GitHub Issues to plan and track your work.

Save views for sprints, backlogs, teams, or releases. Rank, sort, and filter issues to suit the occasion. The possibilities are endless.Learn more about GitHub Issues
ProTip! 
Press the
/
key to activate the search input again and adjust your query.
Issue search results · GitHub