savonrb / akami / 35145633609

91%

push

github

Add support for signed WS-Security timestamps

Allow signing the wsu:Timestamp element in the WSSE Security header.

Signature.new now accepts an options hash with :timestamp, :created_at
and :expires_at. When timestamp is enabled, a wsu:Timestamp node is
added to the Security header and covered by its own digest Reference
in SignedInfo, so the timestamp cannot be altered without invalidating
the signature. Disabled by default; existing callers are unaffected.

29 of 33 new or added lines in 2 files covered. (87.88%)

289 of 313 relevant lines covered (92.33%)

21.61 hits per line