cf-uaa-lib 3.4.0 → 3.5.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA1:
-  metadata.gz: f245d2cfe14edb44c63bc69fa6fe487f4ef64589
-  data.tar.gz: c0f530c759641e62bf5f0b38be7233233e058ed0
+  metadata.gz: dbe6ea6062d205c929b98f06cf3cd02356b6d9b8
+  data.tar.gz: 5f57643c8e7dc8993de4d08603674b758bd54118
 SHA512:
-  metadata.gz: 70bb9323f4c2955b266a8ad69f3b274ff3e1dda1c8aee11d15920b00fcbe5104281077cf3249cfdcbda0f260789ef9ff3ef9cd62b45376eecd86b38863975434
-  data.tar.gz: 4f0a349fdcc4635de8c7692783353d7c5fda26e974fa4423f73c3f8b968666a977071a56cb738a10ff6fa453913dd49e744739ecfd5d1232b6d58df0e09535df
+  metadata.gz: c4bc0c8fc0767ea6aa5ae255f3a51e2ed0b0d5aad5e5a2fb4f7fef71a9f53ae2b08688e0042221a68168337ebceb4a5b751d0c407a335162d67ade14a03644d8
+  data.tar.gz: ce106ed5356cc816412ca39fa06693d71c6a29cc21c52e307f66992145b656b8fcb94cef97ffb3a1551cda97dc669041e38338957ac7484a6a8389a21e8e774e

data/.travis.yml

@@ -1,5 +1,9 @@
 language: ruby
 
+before_install:
+  - gem update
+  - gem install bundler
+
 rvm:
   - 1.9.3
 

data/lib/uaa/info.rb

@@ -99,6 +99,29 @@ class Info
     json_get(target, "/token_key", key_style, hdrs)
   end
 
+  # Gets all currently valid token verification keys. If the server has had
+  # its signing key changed, then +/token_key+ will return a verification key
+  # that does not match a JWT token issued before the change. To validate the
+  # signature of these tokens, refer to the +kid+ header of the JWT token. The
+  # +validation_keys_hash+ method returns a hash of all currently valid
+  # verification keys, indexed by +kid+. To retrieve symmetric keys as part of
+  # the result, client credentials are required.
+  # @param (see Misc.server)
+  # @return [Hash]
+  def validation_keys_hash(client_id = nil, client_secret = nil)
+    hdrs = client_id && client_secret ?
+        { "authorization" => Http.basic_auth(client_id, client_secret)} : {}
+    response = json_get(target, "/token_keys", key_style, hdrs)
+
+    keys_map = {}
+
+    response['keys'].each do |key|
+      keys_map[key['kid']] = key
+    end
+
+    keys_map
+  end
+
   # Sends +token+ to the server to validate and decode. Authenticates with
   # +client_id+ and +client_secret+. If +audience_ids+ are specified and the
   # token's "aud" attribute does not contain one or more of the audience_ids,

data/lib/uaa/version.rb

@@ -14,6 +14,6 @@
 # Cloud Foundry namespace
 module CF
   module UAA
-    VERSION = "3.4.0"
+    VERSION = "3.5.0"
   end
 end

data/spec/info_spec.rb

@@ -115,5 +115,26 @@ module CF::UAA
         result['alg'].should == 'SHA256withRSA'
       end
     end
+
+    describe "validation keys" do
+      let(:target_url) { "https://login.cloudfoundry.com/token_keys" }
+      let(:response_body) { '{ "keys": [ { "kid": "the_key", "alg": "SHA256withRSA", "value": "-----BEGIN PUBLIC KEY-----\nabc123\n-----END PUBLIC KEY-----\n", "kty": "RSA", "use": "sig", "n": "Ufn7Qc", "e": "EEXZ" }, { "kid": "the_other_key", "alg": "SHA256withRSA", "value": "-----BEGIN PUBLIC KEY-----\ndef456\n-----END PUBLIC KEY-----\n", "kty": "RSA", "use": "sig", "n": "AMcW9/P", "e": "AQAB" } ] }' }
+
+      it "returns a hash of keys" do
+        result = uaa_info.validation_keys_hash(authorization)
+
+        the_key = result['the_key']
+        the_key.should_not be_nil
+
+        the_other_key = result['the_other_key']
+        the_other_key.should_not be_nil
+
+        the_key['alg'].should == 'SHA256withRSA'
+        the_other_key['alg'].should == 'SHA256withRSA'
+
+        the_key['value'].should == "-----BEGIN PUBLIC KEY-----\nabc123\n-----END PUBLIC KEY-----\n"
+        the_other_key['value'].should == "-----BEGIN PUBLIC KEY-----\ndef456\n-----END PUBLIC KEY-----\n"
+      end
+    end
   end
 end

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: cf-uaa-lib
 version: !ruby/object:Gem::Version
-  version: 3.4.0
+  version: 3.5.0
 platform: ruby
 authors:
 - Dave Syer
@@ -12,7 +12,7 @@ authors:
 autorequire: 
 bindir: bin
 cert_chain: []
-date: 2016-03-31 00:00:00.000000000 Z
+date: 2016-06-22 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: multi_json
@@ -187,7 +187,7 @@ required_rubygems_version: !ruby/object:Gem::Requirement
       version: '0'
 requirements: []
 rubyforge_project: cf-uaa-lib
-rubygems_version: 2.2.2
+rubygems_version: 2.4.6
 signing_key: 
 specification_version: 4
 summary: Client library for CloudFoundry UAA