Contents

module Xmldsig
  class SignedDocument
    attr_accessor :document, :id_attr, :force

    def initialize(document, options = {})
      @document = if document.kind_of?(Nokogiri::XML::Document)
        document
      else
        Nokogiri::XML(document, nil, nil, Nokogiri::XML::ParseOptions::STRICT)
      end
      @id_attr  = options[:id_attr] if options[:id_attr]
      @force    = options[:force]
    end

    def validate(certificate = nil, schema = nil, &block)
      signatures.any? && signatures.all? { |signature| signature.valid?(certificate, schema, &block) }
    end

    def sign(private_key = nil, instruct = true, &block)
      signatures.reverse.each do |signature|
        signature.sign(private_key, &block) if signature.unsigned? || force
      end

      if instruct
        @document.to_xml(save_with: Nokogiri::XML::Node::SaveOptions::AS_XML)
      else
        @document.to_xml(save_with: Nokogiri::XML::Node::SaveOptions::AS_XML | Nokogiri::XML::Node::SaveOptions::NO_DECLARATION)
      end
    end

    def signed_nodes
      signatures.flat_map(&:references).map(&:referenced_node)
    end

    def signatures
      document.xpath("//ds:Signature", NAMESPACES).
          sort { |left, right| left.ancestors.size <=> right.ancestors.size }.
          collect { |node| Signature.new(node, @id_attr) } || []
    end
  end
end

Version data entries

2 entries across 2 versions & 1 rubygems

Version	Path
xmldsig-0.6.5	lib/xmldsig/signed_document.rb
xmldsig-0.6.4	lib/xmldsig/signed_document.rb