apple_id 0.6.0 → 1.0.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 1653f825ddc4e3d854ecbae7ddbc50b9c476ffb6f8ce47b65f5ef5da6f27a3a2
-  data.tar.gz: c850280ffd663ad634eb00abaeca1ff31ddc7da9c4744ef0ba5bf1627703c306
+  metadata.gz: 0e9aeb4597a1a98ef66341021c5587910e618d8b3ad37e355c44abf2a9105803
+  data.tar.gz: 312203fe9cf4ce80ed4b48cff8a024d7a83c03b0b7fda6b9895b9203a83efcd1
 SHA512:
-  metadata.gz: 766ecaa71fd4973a73505393e66c27880eaf7c36ffae2a1c2c0e01432086532fe5e59b0958bb5f6344cb3e7e0e0beb4e7243a811899ad28796e481ae60148735
-  data.tar.gz: 1be4e33bc46e15bced007b8f0288964bcf76d0becb7b67e988f0aca554e982834a421335e981941a4102ebe154bf4c33d178173510ed4fd59eeabee0691a3a7f
+  metadata.gz: 48e60bc4416e5516576b1e61386a72e40e27bc905e026d84444c247dfe1d226b6855abc0157a0955f90847d818c93cf7b33aab5fe8266214c1917ecf89502a04
+  data.tar.gz: 71d120ad10a5179b6925b7014cc37758a238b63544594f21bfec4bd49bca1cd4510fda334a7f7b6590e572e1f56b8cb43967000304ebbcf2edd2721d47f44f81

data/VERSION

@@ -1 +1 @@
-0.6.0
+1.0.0

data/lib/apple_id.rb

@@ -54,3 +54,4 @@ end
 require 'apple_id/client'
 require 'apple_id/access_token'
 require 'apple_id/id_token'
+require 'apple_id/jwks'

data/lib/apple_id/id_token.rb

@@ -34,15 +34,8 @@ module AppleID
 
     private
 
-    def jwks
-      @jwks ||= JSON.parse(
-        OpenIDConnect.http_client.get_content(JWKS_URI)
-      ).with_indifferent_access
-      JSON::JWK::Set.new @jwks[:keys]
-    end
-
     def verify_signature!
-      original_jwt.verify! jwks
+      original_jwt.verify! AppleID::JWKS.fetch(original_jwt.kid)
     rescue
       raise VerificationFailed, 'Signature Verification Failed'
     end

data/lib/apple_id/jwks.rb

@@ -0,0 +1,27 @@
+module AppleID
+  class JWKS
+    class Cache
+      def fetch(cache_key)
+        yield
+      end
+    end
+
+    def self.cache=(cache)
+      @@cache = cache
+    end
+    def self.cache
+      @@cache
+    end
+    self.cache = Cache.new
+
+    def self.fetch(cache_key)
+      jwks = cache.fetch("apple_id:jwks:#{cache_key}") do
+        JSON::JWK::Set.new(
+          JSON.parse(
+            OpenIDConnect.http_client.get_content(JWKS_URI)
+          ).with_indifferent_access[:keys]
+        )
+      end
+    end
+  end
+end

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: apple_id
 version: !ruby/object:Gem::Version
-  version: 0.6.0
+  version: 1.0.0
 platform: ruby
 authors:
 - nov
 autorequire: 
 bindir: exe
 cert_chain: []
-date: 2020-03-25 00:00:00.000000000 Z
+date: 2020-05-16 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: rack-oauth2
@@ -145,6 +145,7 @@ files:
 - lib/apple_id/access_token.rb
 - lib/apple_id/client.rb
 - lib/apple_id/id_token.rb
+- lib/apple_id/jwks.rb
 homepage: https://github.com/nov/apple_id
 licenses:
 - MIT