Merge pull request #160 from p8/security/gid-inspect

Don't show secrets for SignedGlobalID#inspect

Author: rafaelfranca

lib/global_id/signed_global_id.rb

@@ -72,6 +72,10 @@ def ==(other)
     super && @purpose == other.purpose
   end
 
+  def inspect # :nodoc:
+    "#<#{self.class.name}:#{'%#016x' % (object_id << 1)}>"
+  end
+
   private
     def pick_expiration(options)
       return options[:expires_at] if options.key?(:expires_at)

test/cases/signed_global_id_test.rb

@@ -29,6 +29,10 @@ class SignedGlobalIDTest < ActiveSupport::TestCase
   test 'to param' do
     assert_equal @person_sgid.to_s, @person_sgid.to_param
   end
+
+  test 'inspect' do
+    assert_match(/\A#<SignedGlobalID:0x[0-9a-f]+>\z/, @person_sgid.inspect)
+  end
 end
 
 class SignedGlobalIDPurposeTest < ActiveSupport::TestCase