Sha256: fe5e898da0b0bdb110e0df5c3483e3fed38c7f3f1501f08928c989aac6308ac1

Contents?: true

Size: 1.26 KB

Versions: 63

Compression:

Stored size: 1.26 KB

Contents

require 'base64'
require 'openssl'

module FbGraph
  class Auth
    class SignedRequest
      OAUTH_DIALOG_ENDPOINT = 'https://www.facebook.com/dialog/oauth'

      def self.verify(client, signed_request)
        signature, payload = signed_request.split('.')
        raise VerificationFailed.new('No Signature') if signature.blank?
        raise VerificationFailed.new('No Payload') if payload.blank?
        signature = base64_url_decode signature
        data = decode_json base64_url_decode(payload)
        raise VerificationFailed.new('Unexpected Signature Algorithm') unless data[:algorithm] == 'HMAC-SHA256'
        _signature_ = sign(client.secret, payload)
        raise VerificationFailed.new('Signature Invalid') unless signature == _signature_
        data
      end

      private

      def self.sign(key, payload)
        klass = OpenSSL::Digest::SHA256.new
        OpenSSL::HMAC.digest(klass, key, payload)
      end

      def self.decode_json(json)
        JSON.parse(json).with_indifferent_access
      rescue => e
        raise VerificationFailed.new('Invalid JSON')
      end

      def self.base64_url_decode(str)
        str += '=' * (4 - str.length.modulo(4))
        str = str.gsub('-', '+').gsub('_', '/')
        Base64.decode64 str
      end
    end
  end
end

Version data entries

63 entries across 63 versions & 1 rubygems

Version Path
fb_graph-2.5.9 lib/fb_graph/auth/signed_request.rb
fb_graph-2.5.8 lib/fb_graph/auth/signed_request.rb
fb_graph-2.5.7 lib/fb_graph/auth/signed_request.rb
fb_graph-2.5.6 lib/fb_graph/auth/signed_request.rb
fb_graph-2.5.5 lib/fb_graph/auth/signed_request.rb
fb_graph-2.5.4 lib/fb_graph/auth/signed_request.rb
fb_graph-2.5.3 lib/fb_graph/auth/signed_request.rb
fb_graph-2.5.2 lib/fb_graph/auth/signed_request.rb
fb_graph-2.5.1 lib/fb_graph/auth/signed_request.rb
fb_graph-2.5.0 lib/fb_graph/auth/signed_request.rb
fb_graph-2.4.20 lib/fb_graph/auth/signed_request.rb
fb_graph-2.4.19 lib/fb_graph/auth/signed_request.rb
fb_graph-2.4.18 lib/fb_graph/auth/signed_request.rb
fb_graph-2.4.17 lib/fb_graph/auth/signed_request.rb
fb_graph-2.4.16 lib/fb_graph/auth/signed_request.rb
fb_graph-2.4.15 lib/fb_graph/auth/signed_request.rb
fb_graph-2.4.14 lib/fb_graph/auth/signed_request.rb
fb_graph-2.4.13 lib/fb_graph/auth/signed_request.rb
fb_graph-2.4.12 lib/fb_graph/auth/signed_request.rb
fb_graph-2.4.11 lib/fb_graph/auth/signed_request.rb