authsignal-ruby 1.0.1 → 2.1.1

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 0a28bb75e7f376bd32e42089da85e158e837557c0c491e93bc3f3403efb8c49c
-  data.tar.gz: 401254646dabee360ca33d7ced34e2b19a6806d908dadc495c3308aabeaed7b9
+  metadata.gz: 5ca1d4818fc1ff9c662b04b0fce7b3ad532b081826d8418ea6d359e681bcd0cc
+  data.tar.gz: de37f34d38fc6e63ef6011c86f363b05f60121ddb9fb4ed65401578ef189b55f
 SHA512:
-  metadata.gz: b2e8ecf5359161a227b47c86a17f73816b51617a48dc56d60879cecdbd0962245c176700b1f1005080ad68de4b991b194175ad781679f0b373ebb43853c27af3
-  data.tar.gz: af15344d7b5d3769e86ac9c0087e1e777d84683f96ff107ebf612dbe39c46147e20f6c9e260bf6977e233d8a5fe20de30cc4eed5038c9659094ad6db7abd7b92
+  metadata.gz: 5b4b25771cbe3d0ed5a7614a72822dd8dc4b63c1919bfed01fe63c2771b107b552c637aceee4a4c0253b6cf7f4cea1be18243843297e8909e907ab7d9d3931e7
+  data.tar.gz: fc07cba6d3564da885b71b4883df830fb08c91cba961b0d07d76a71d513e6c5175514ba5f0a749cb65a971b9a3606a7f63dadd437628d0a795ebf98428a02a12

data/Gemfile

@@ -4,5 +4,3 @@ source "https://rubygems.org"
 
 # Specify your gem's dependencies in authsignal-ruby.gemspec
 gemspec
-
-gem 'jwt'

data/Gemfile.lock

@@ -1,7 +1,7 @@
 PATH
   remote: .
   specs:
-    authsignal-ruby (1.0.1)
+    authsignal-ruby (2.1.1)
       httparty (~> 0.21.0)
 
 GEM
@@ -16,7 +16,6 @@ GEM
     httparty (0.21.0)
       mini_mime (>= 1.0.0)
       multi_xml (>= 0.5.2)
-    jwt (2.7.1)
     mini_mime (1.1.5)
     multi_xml (0.6.0)
     public_suffix (4.0.7)
@@ -45,7 +44,6 @@ PLATFORMS
 
 DEPENDENCIES
   authsignal-ruby!
-  jwt
   rake (~> 13.0)
   rspec (~> 3.2)
   webmock (~> 3.14.0)

data/lib/authsignal/client.rb

@@ -4,6 +4,13 @@ module Authsignal
         NO_API_KEY_MESSAGE  = "No Authsignal API Secret Key Set"
         include HTTParty
 
+        def handle_response(response)
+            unless response.success?
+              raise HTTParty::ResponseError, "Failed with status code #{response.code}"
+            end
+            response
+        end
+
         def initialize
             self.class.base_uri Authsignal.configuration.base_uri
             @api_key = require_api_key
@@ -37,8 +44,20 @@ module Authsignal
             get(path)
         end
 
-        def get_action(user_id, action_code, idempotency_key)
-            get("/users/#{ERB::Util.url_encode(user_id)}/actions/#{action_code}/#{ERB::Util.url_encode(idempotency_key)}")
+        def update_user(user_id:, user:)
+            post("/users/#{ERB::Util.url_encode(user_id)}", body: JSON.generate(user))
+        end
+
+        def validate_challenge(user_id: nil, token:)
+            path = "/validate"
+
+            response = post(path, query: {}, body: { userId: user_id, token: token }.to_json)
+
+            handle_response(response)
+        end
+
+        def get_action(user_id, action, idempotency_key)
+            get("/users/#{ERB::Util.url_encode(user_id)}/actions/#{action}/#{ERB::Util.url_encode(idempotency_key)}")
         end
 
         def identify(user_id, user_payload)

data/lib/authsignal/version.rb

@@ -1,5 +1,5 @@
 # frozen_string_literal: true
 
 module Authsignal
-  VERSION = "1.0.1"
+  VERSION = "2.1.1"
 end

data/lib/authsignal.rb

@@ -1,5 +1,4 @@
 require "httparty"
-require 'jwt'
 
 require "authsignal/version"
 require "authsignal/client"
@@ -27,8 +26,13 @@ module Authsignal
             response.transform_keys { |key| underscore(key) }.transform_keys(&:to_sym)
         end
 
-        def get_action(user_id:, action_code:, idempotency_key:)
-            response = Client.new.get_action(user_id, action_code, idempotency_key)
+        def update_user(user_id:, user:)
+            response = Client.new.update_user(user_id: user_id, user: user)
+            response.transform_keys { |key| underscore(key) }.transform_keys(&:to_sym)
+        end
+
+        def get_action(user_id:, action:, idempotency_key:)
+            response = Client.new.get_action(user_id, action, idempotency_key)
             response.transform_keys { |key| underscore(key) }.transform_keys(&:to_sym)
         end
 
@@ -66,33 +70,10 @@ module Authsignal
         end
 
         def validate_challenge(token:, user_id: nil)
-            begin
-                decoded_token = JWT.decode(token, Authsignal.configuration.api_secret_key)[0]
-            rescue JWT::DecodeError
-                puts 'Token verification failed'
-            end
-          
-            decoded_user_id = decoded_token["other"]["userId"]
-            action_code = decoded_token["other"]["actionCode"]
-            idempotency_key = decoded_token["other"]["idempotencyKey"]
-          
-            if user_id && user_id != decoded_user_id
-              return { user_id: decoded_user_id, success: false, state: nil }
-            end
-
-            if action_code && idempotency_key
-              action_result = get_action(user_id: decoded_user_id, action_code: action_code, idempotency_key: idempotency_key)
-          
-              if action_result
-                state = action_result[:state]
-                success = state == "CHALLENGE_SUCCEEDED"
-          
-                return { user_id: decoded_user_id, success: success, state: state, action: action_code }
-              end
-            end
-          
-            { user_id: decoded_user_id, success: false, state: nil }
-          end
+            response = Client.new.validate_challenge(user_id: user_id, token: token)
+            
+            return { user_id: response["userId"], is_valid: response["isValid"], state: response["state"], action: response["actionCode"] }
+        end
 
         private
         def underscore(string)

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: authsignal-ruby
 version: !ruby/object:Gem::Version
-  version: 1.0.1
+  version: 2.1.1
 platform: ruby
 authors:
 - justinsoong
 autorequire:
 bindir: exe
 cert_chain: []
-date: 2023-11-30 00:00:00.000000000 Z
+date: 2024-07-12 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: httparty
@@ -67,7 +67,7 @@ dependencies:
       - !ruby/object:Gem::Version
         version: 3.14.0
 description: Authsignal is a passwordless authentication/multifactor authentication
-  step up service with a FraudOps rules engine
+  with modern factors like passkeys
 email:
 - justin@authsignal.com
 executables: []
@@ -109,7 +109,7 @@ required_rubygems_version: !ruby/object:Gem::Requirement
     - !ruby/object:Gem::Version
       version: '0'
 requirements: []
-rubygems_version: 3.4.10
+rubygems_version: 3.5.11
 signing_key:
 specification_version: 4
 summary: The Authsignal ruby server side signal API.