duosecurity / duo_api_ruby Goto Github PK

unfortunately, this isn't working for me:

irb(main):020:0> duo_api = DuoApi.new DuoApi::YML[:ikey], DuoApi::YML[:skey], DuoApi::YML[:host]
=> #<DuoApi:0x007fdf74ff3290 @ikey="redacted", @skey="redacted", @host="api-redacted.duosecurity.com">
irb(main):021:0> resp = duo_api.request 'GET', '/admin/v1/users'
=> #<Net::HTTPForbidden 403 Forbidden readbody=true>

any suggestions?

Description

We need the v5 canonicalization algorithm implemented in ruby, so the client can call api endpoints which require it (primarily the policy-related ones)

Expected Behavior

APIs requiring v5 canonicalization can be called

Actual Behavior

They can't

See the Python client for a reference implementation of the v5 algorithm

The fix for URI.escape is obsolete was merged in 6a42122 but no gem version including this fix has been cut. Please cut a current release.

Very similar to this issue in another project: emartech/escher-ruby#5

Basically, Ruby 2.2.3 doesn't have the Digest::HMAC class.

From http://ruby-doc.org//stdlib-1.9.3/libdoc/digest/rdoc/Digest/HMAC.html:

CAUTION: Use of this library is discouraged, because this implementation was meant to be experimental but somehow got into the 1.9 series without being noticed. Please use OpenSSL::HMAC in the “openssl” library instead.

So we need to switch to using the OpenSSL HMAC class instead.