atomic_tenant 1.2.0 → 1.2.1

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 1fb823e9a69ae301f4c54a2fdd0212a1ab1a722d8a29693eb19ab368bfe20426
-  data.tar.gz: 5dfc41443847da7d515de0aea9303d44cacac5ba424fbc9e2837335221c90a59
+  metadata.gz: 6e57d91be8f21aae13497dd47d5f8994255db2ed06c8ca4a56d5146f7e6c5f41
+  data.tar.gz: 50e61c38f180111756a40610dfa4b393c6338502cf6a44f6bb6d3990b8e5a003
 SHA512:
-  metadata.gz: 178f0e154893bed333c5d1a308b6598c795b5516b9884083fc4303e57949cc623725a282bf7c7d6a01ae1bb334eb9d73bdc1e8fc5ad5986cb015f377eb0bfd11
-  data.tar.gz: de989225aac86e31b254e23c514bf1714bae793f319e63f48bcb140b3eb1e233e591c481d7b03e4c20325ac66153c147df9243ec0ddfb87051a2b816f1cd6f2c
+  metadata.gz: d47e3b7877366c0d0c4ed86c077855cb782ab61dacc8cece23a64340bae92272b7dade2fb29d39870fe2efce38594b08e9e840011a762634f1c7240a2ddab58b
+  data.tar.gz: 83a990b687230361365f9708795bef710e88ef0c7651685459458531bd3e75aa60798e25ead2af5fe3f7f5b8d2f0d4ce066e4c222aadd71d1be4db3551ba4876

data/lib/atomic_tenant/current_application_instance_middleware.rb

@@ -57,14 +57,15 @@ module AtomicTenant
           env['atomic.validated.application_instance_id'] = app_instance.id
         elsif encoded_token(request).present?
           token = encoded_token(request)
-          # TODO: decoded token should be put on request
-          decoded_token = AtomicTenant::JwtToken.decode(token)
+          # We don't validate the token here because this step is only designed to set
+          # the tenant for the request. If the token is invalid or expired the app must
+          # return 401 or take other action.
+          decoded_token = AtomicTenant::JwtToken.decode(token, validate: false)
           if decoded_token.present? && decoded_token.first.present?
             if app_instance_id = decoded_token.first['application_instance_id']
               env['atomic.validated.application_instance_id'] = app_instance_id
             end
           end
-
         end
 
       rescue StandardError => e

data/lib/atomic_tenant/jwt_token.rb

@@ -1,17 +1,19 @@
 module AtomicTenant
   module JwtToken
     class InvalidTokenError < StandardError; end
- 
+
     ALGORITHM = "HS512".freeze
 
-    def self.decode(token,  algorithm = ALGORITHM)
+    def self.decode(token,  algorithm = ALGORITHM, validate: true)
       decoded_token = JWT.decode(
         token,
         AtomicTenant.jwt_secret,
-        true,
+        validate,
         { algorithm: algorithm },
       )
-      raise InvalidTokenError if AtomicTenant.jwt_aud != decoded_token[0]["aud"]
+      if AtomicTenant.jwt_aud != decoded_token[0]["aud"]
+        return nil
+      end
 
       decoded_token
     end

data/lib/atomic_tenant/version.rb

@@ -1,3 +1,3 @@
 module AtomicTenant
-  VERSION = '1.2.0'
+  VERSION = '1.2.1'
 end

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: atomic_tenant
 version: !ruby/object:Gem::Version
-  version: 1.2.0
+  version: 1.2.1
 platform: ruby
 authors:
 - Nick Benoit
 autorequire:
 bindir: bin
 cert_chain: []
-date: 2023-08-16 00:00:00.000000000 Z
+date: 2023-09-20 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: atomic_lti
@@ -87,7 +87,7 @@ required_rubygems_version: !ruby/object:Gem::Requirement
     - !ruby/object:Gem::Version
       version: '0'
 requirements: []
-rubygems_version: 3.4.15
+rubygems_version: 3.4.19
 signing_key:
 specification_version: 4
 summary: Summary of AtomicTenant.