-
Notifications
You must be signed in to change notification settings - Fork 0
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Release 0.1.1 #8
Conversation
As Ruby >= 2.4 enforces a 32 byte string length
@@ -1,3 +1,3 @@ | |||
module ClaimToken | |||
VERSION = "0.1.0" | |||
VERSION = "0.1.1".freeze |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Do we actually need to specify freeze now ? I though this was being automatically done by ruby ?
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
According to this stack overflow discussion you should do this or add the frozen string literal magic comment until Ruby 3, in which it'd do this by default https://stackoverflow.com/a/37799399
end | ||
end | ||
|
||
def use_test_configuration | ||
before do | ||
ClaimToken.configure do |config| | ||
config.shared_encryption_key = "uFeb25D_z0BAGhgH7WKy8QBSat6kxfDa6PrKw1ox69U=" | ||
config.shared_encryption_key = "fba0d989f259ad36ada12c127356d420" | ||
config.digest_secret = "d22b90c9172649eaf49cd185f73bd4a53ec3ff4dc6f7d51f9dbaac62421e6dd297b38efcd431a7f2" |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
This key is still 64 bits long, no potential issue there ?
@@ -6,7 +6,7 @@ require 'claim_token/version' | |||
Gem::Specification.new do |spec| | |||
spec.name = "claim_token" | |||
spec.version = ClaimToken::VERSION | |||
spec.authors = ["CricHQ"] | |||
spec.authors = ["Daniel Zollinger", "Ben Greville"] |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Aww this lil library still getting love 😁
Patch release allows for Ruby 2.4 and higher OpenSSL support, which enforces a 32 byte string length encryption key.
Existing applications using this gem that are encrypting tokens using the correct length string can continue running the older versions.
This patch also removes a deprecation warning described here: attr-encrypted/attr_encrypted#264
Fixes: #6