diff options
| author | Chris Walters <cw@opscode.com> | 2010-02-01 23:50:25 +0000 |
|---|---|---|
| committer | Chris Walters <cw@opscode.com> | 2010-02-01 23:50:25 +0000 |
| commit | 498268d205df3b5898f134d60835ae96daf0c694 (patch) | |
| tree | 529669843a5c7b747fc0ae355a5d2c0e524c72f4 /lib/mixlib/authentication/signatureverification.rb | |
| parent | 065c909660bb1509224e7f7525adc7bc90e4512b (diff) | |
| download | mixlib-authentication-498268d205df3b5898f134d60835ae96daf0c694.tar.gz | |
PL-232: Adding request path to signature
Diffstat (limited to 'lib/mixlib/authentication/signatureverification.rb')
| -rw-r--r-- | lib/mixlib/authentication/signatureverification.rb | 8 |
1 files changed, 5 insertions, 3 deletions
diff --git a/lib/mixlib/authentication/signatureverification.rb b/lib/mixlib/authentication/signatureverification.rb index 570a5b9..ee837ee 100644 --- a/lib/mixlib/authentication/signatureverification.rb +++ b/lib/mixlib/authentication/signatureverification.rb @@ -1,6 +1,7 @@ # # Author:: Christopher Brown (<cb@opscode.com>) -# Copyright:: Copyright (c) 2009 Opscode, Inc. +# Author:: Christopher Walters (<cw@opscode.com>) +# Copyright:: Copyright (c) 2009, 2010 Opscode, Inc. # License:: Apache License, Version 2.0 # # Licensed under the Apache License, Version 2.0 (the "License"); @@ -27,7 +28,7 @@ module Mixlib include Mixlib::Authentication::SignedHeaderAuth - attr_reader :hashed_body, :timestamp, :http_method, :user_id + attr_reader :hashed_body, :timestamp, :http_method, :path, :user_id # Takes the request, boils down the pieces we are interested in, # looks up the user, generates a signature, and compares to @@ -43,11 +44,12 @@ module Mixlib Mixlib::Authentication::Log.debug "Initializing header auth : #{request.inspect}" headers ||= request.env.inject({ }) { |memo, kv| memo[$2.gsub(/\-/,"_").downcase.to_sym] = kv[1] if kv[0] =~ /^(HTTP_)(.*)/; memo } - digester = Mixlib::Authentication::Digester.new + digester = Mixlib::Authentication::Digester.new begin @allowed_time_skew = time_skew # in seconds @http_method = request.method.to_s + @path = request.path.to_s @signing_description = headers[:x_ops_sign].chomp @user_id = headers[:x_ops_userid].chomp @timestamp = headers[:x_ops_timestamp].chomp |