Class: OpenProject::Token::Extractor
- Inherits:
-
Object
- Object
- OpenProject::Token::Extractor
- Defined in:
- lib/open_project/token/extractor.rb
Defined Under Namespace
Classes: DecryptionError, Error, KeyError
Instance Attribute Summary collapse
-
#key ⇒ Object
Returns the value of attribute key.
Instance Method Summary collapse
-
#initialize(key) ⇒ Extractor
constructor
A new instance of Extractor.
- #read(data) ⇒ Object
Constructor Details
#initialize(key) ⇒ Extractor
Returns a new instance of Extractor.
10 11 12 |
# File 'lib/open_project/token/extractor.rb', line 10 def initialize(key) @key = key end |
Instance Attribute Details
#key ⇒ Object
Returns the value of attribute key.
8 9 10 |
# File 'lib/open_project/token/extractor.rb', line 8 def key @key end |
Instance Method Details
#read(data) ⇒ Object
14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 |
# File 'lib/open_project/token/extractor.rb', line 14 def read(data) unless key.public? raise KeyError, "Provided key is not a public key." end json_data = Base64.decode64(data.chomp) begin encryption_data = JSON.parse(json_data) rescue JSON::ParserError raise DecryptionError, "Encryption data is invalid JSON." end unless %w(data key iv).all? { |key| encryption_data[key] } raise DecryptionError, "Required field missing from encryption data." end encrypted_data = Base64.decode64(encryption_data["data"]) encrypted_key = Base64.decode64(encryption_data["key"]) aes_iv = Base64.decode64(encryption_data["iv"]) begin # Decrypt the AES key using asymmetric RSA encryption. aes_key = self.key.public_decrypt(encrypted_key) rescue OpenSSL::PKey::RSAError raise DecryptionError, "AES encryption key could not be decrypted." end # Decrypt the data using symmetric AES encryption. cipher = OpenSSL::Cipher::AES128.new(:CBC) cipher.decrypt begin cipher.key = aes_key rescue OpenSSL::Cipher::CipherError raise DecryptionError, "AES encryption key is invalid." end begin cipher.iv = aes_iv rescue OpenSSL::Cipher::CipherError raise DecryptionError, "AES IV is invalid." end begin data = cipher.update(encrypted_data) + cipher.final rescue OpenSSL::Cipher::CipherError raise DecryptionError, "Data could not be decrypted." end data end |