authentic-rb 1.6.0 → 1.7.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: bb1a72bbd0adfdc4e710bc9cb998eed816b68c2d478ee69d7e891028249a9b78
-  data.tar.gz: a05603819fde73ff95e53a6c3feba89ddab1481bebf64a2fb2dffe6443231d62
+  metadata.gz: da8309740cedbfb47574f118cef97aa11a12df4b0e676224ad4fef77cc5c22b4
+  data.tar.gz: 46d7a401a4592ca7b1b300b6a1fb9d5f56c19768ec4912dc22b6176e8a697527
 SHA512:
-  metadata.gz: ff375b3fa277837009eb7027a918d395a0aaebcd5eebc633b71070f02519407107112b6a1775143d0e3831441efe7e0188af0c3d1ae95de1866bf90e9b7a4660
-  data.tar.gz: 8f48caceb8e1302b4a54d2a41bf42af3df2b8c66f609f5d5621368305c5efe0867945c311b2c52423840d63288520ad1fa2ea94f12f176a8f61a82bd7c56cc37
+  metadata.gz: cf58441c9eadd7ce25ad68c4b3ff630a0453c3c070bfc8090130a6ecf26fb811299d34e81f9ec7cc9579549883ea0bb4cf637898bd1d5bdcd304625e17b27ca8
+  data.tar.gz: 3248768b576342da140b068aa5d52afd8be6786e44eefb47763814ce4d4368492f655af880c9a980d9a38afda45ed71f43e34fbdd75073cc9ba345dde60622db

data/lib/authentic/error.rb

@@ -22,4 +22,7 @@ module Authentic
 
   # Public: Represents an expired JWT.
   class ExpiredToken < StandardError; end
+
+  # Public: Represents an issuer that is not whitelisted. This should produce a 403 response.
+  class InvalidIssuer < StandardError; end
 end

data/lib/authentic/validator.rb

@@ -25,7 +25,7 @@ module Authentic
     def valid?(token)
       ensure_valid(token)
       true
-    rescue InvalidToken, ExpiredToken, InvalidKey, RequestError
+    rescue InvalidToken, ExpiredToken, InvalidKey, RequestError, InvalidIssuer
       false
     end
 
@@ -63,7 +63,7 @@ module Authentic
       raise InvalidToken, 'JWT was nil' unless token
 
       JSON::JWT.decode(token, :skip_verification).tap do |jwt|
-        raise InvalidToken, 'JWT iss was not located in provided whitelist' unless iss_whitelist.include?(jwt[:iss])
+        raise InvalidIssuer, 'JWT iss was not located in provided whitelist' unless iss_whitelist.include?(jwt[:iss])
       end
     rescue JSON::JWT::InvalidFormat
       raise InvalidToken, 'JWT was in an invalid format'

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: authentic-rb
 version: !ruby/object:Gem::Version
-  version: 1.6.0
+  version: 1.7.0
 platform: ruby
 authors:
 - Articulate
@@ -9,7 +9,7 @@ authors:
 autorequire: 
 bindir: bin
 cert_chain: []
-date: 2019-03-13 00:00:00.000000000 Z
+date: 2019-03-18 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: json-jwt