azure_jwt_auth 0.1.1 → 0.2.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: f26367508cac71e2138946eca9d96411ada1093c7ca9b6ce88366ca27799c108
-  data.tar.gz: edd4ae435720cbc4d8d5438ce447fdbefd18071530afa84c60b21c7d799558fc
+  metadata.gz: 669372be8a4bd023f45dd4a365a67ad05617d6cc6f9a04602c991acd50ef00dc
+  data.tar.gz: b4c7376361a1bd94e70df695ea1495af847c927761c3b58fd44dc0970681f655
 SHA512:
-  metadata.gz: dd67132ec694be2951a296f4bfdc3c7b393389e17cb188a0dc738ab2d1da2333346e770ac6c0164f68113ae10f506916236b05e5f1dc53da4f531a65f4b670a7
-  data.tar.gz: e47ac0cbe7aaabacb6df6293dfbdc7d7beaf33b150ed3b9f5211dcc0624503541a407699a610b500530ecbea6480d26a6fb066bbe0c3472d91bc7c1ca080c5f5
+  metadata.gz: d05c977588d65da4411c95eb166c7789d5f1c9a39aaf8d949977d204b493fcf529daf8f896001d4fc4adffc25535985eb5688b37bf708973febc63033a2b6640
+  data.tar.gz: 1a82da154c632e9919dbadf9e5bf48a080f7ac3739e3f71f1e508dc547ed753c5ca499fdef8c5ed2c09ed94e4c218bb57f39bc5edba94df13c7f77f0d77ef6cc

data/lib/azure_jwt_auth/jwt_manager.rb

@@ -22,16 +22,20 @@ module AzureJwtAuth
       raise ProviderNotFound unless (@provider = self.class.find_provider(provider_id))
 
       @jwt = request.env['HTTP_AUTHORIZATION'].split.last # remove Bearer
-      @jwt_info = decode
+      @jwt_info = JWT.decode(@jwt, nil, false)
     end
 
     def payload
       @jwt_info ? @jwt_info.first : nil
     end
 
-    # Validates the payload hash for expiration and meta claims
-    def valid?
-      payload && iss_valid? && custom_valid?
+    def header
+      @jwt_info ? @jwt_info.last : nil
+    end
+
+    # Validates issuer
+    def iss_valid?
+      payload['iss'] == @provider.config['issuer']
     end
 
     # Check custom validations defined into provider
@@ -43,17 +47,16 @@ module AzureJwtAuth
       true
     end
 
-    # Validates issuer
-    def iss_valid?
-      payload['iss'] == @provider.config['issuer']
+    # Validates the payload hash for expiration and meta claims
+    def valid?
+      payload && iss_valid? && custom_valid? && rsa_decode
     end
 
     private
 
     # Decodes the JWT with the signed secret
-    def decode
-      dirty_token = JWT.decode(@jwt, nil, false)
-      kid = dirty_token.last['kid']
+    def rsa_decode
+      kid = header['kid']
       try = false
 
       begin

data/lib/azure_jwt_auth/version.rb

@@ -1,3 +1,3 @@
 module AzureJwtAuth
-  VERSION = '0.1.1'
+  VERSION = '0.2.0'
 end

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: azure_jwt_auth
 version: !ruby/object:Gem::Version
-  version: 0.1.1
+  version: 0.2.0
 platform: ruby
 authors:
 - rjurado
 autorequire: 
 bindir: bin
 cert_chain: []
-date: 2018-04-04 00:00:00.000000000 Z
+date: 2018-04-17 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: bcrypt