clerk-sdk-ruby 2.9.0 → 2.10.0.beta1

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: cbaa98cd305b04c0b904e1a2c86d3443f366aa9dba7f71c5c0a0bc7696da3934
-  data.tar.gz: da3b5c3910d7d04453ce910a1e56a5d3057e7b6971aa9e25944e45ac4552d99f
+  metadata.gz: c0081a8408ee5ff5693b6f12a953ec361d9699784dd4c950c02123419a7dfac6
+  data.tar.gz: f32a7f5aab84fd626a6f3944e40ab6abb9a1f9041231cbf0327afb5ed59b112d
 SHA512:
-  metadata.gz: bbede149e1d228a36ca7bcc38dee963498364f770c1facda036b14a183ef7abd0281b627399db911b44c73d22247969845b53db23808c0631628b550a630a69d
-  data.tar.gz: 5b4156f656adf0db7b92a718fd171b6d6b861624df5f9f1b56dd0b6c25ed8b2b18a4af73bb771e79c1ae22420a06beaa486941549757a4a3a858f527f17a421b
+  metadata.gz: 6b987d81b469ca882c77c2c50d572d33390e4ca1984d6f60b969cba65205d37b625abc26b639a6484277adab595564df20aa1d8aa50d1d9ba62b4a6c48675ab5
+  data.tar.gz: 1a26cb6a57a73080e586ab68a615b2c5db363c6eac5856a2c47c52c9d95ee11d5f0a5668c9fbd205fe8bce28f5e8f3d19e7f856f8b7c12ce5b37cd1e5253f30c

data/CHANGELOG.md

@@ -1,5 +1,9 @@
 ## unreleased
 
+## 2.10.0.beta1 - 2023-03-08
+
+- fix: Change signed-out & interstitial request state conditions [https://github.com/clerkinc/clerk-sdk-ruby/pull/30]
+
 ## 2.9.0
 
 Identical to 2.9.0.beta3

data/CODEOWNERS

@@ -0,0 +1 @@
+* @clerkinc/backend-team

data/Gemfile.lock

@@ -1,7 +1,7 @@
 PATH
   remote: .
   specs:
-    clerk-sdk-ruby (2.9.0.beta3)
+    clerk-sdk-ruby (2.10.0.beta1)
       concurrent-ruby (~> 1.1)
       faraday (~> 1.4.1)
       jwt (~> 2.5)
@@ -10,7 +10,7 @@ GEM
   remote: https://rubygems.org/
   specs:
     byebug (11.1.3)
-    concurrent-ruby (1.1.10)
+    concurrent-ruby (1.2.2)
     faraday (1.4.3)
       faraday-em_http (~> 1.0)
       faraday-em_synchrony (~> 1.0)
@@ -24,14 +24,15 @@ GEM
     faraday-excon (1.1.0)
     faraday-net_http (1.0.1)
     faraday-net_http_persistent (1.2.0)
-    jwt (2.6.0)
-    minitest (5.17.0)
-    multipart-post (2.2.3)
+    jwt (2.7.0)
+    minitest (5.18.0)
+    multipart-post (2.3.0)
     rake (13.0.6)
     ruby2_keywords (0.0.5)
     timecop (0.9.6)
 
 PLATFORMS
+  arm64-darwin-22
   universal-darwin-21
   x86_64-linux
 

data/lib/clerk/rack_middleware_v2.rb

@@ -124,8 +124,12 @@ module Clerk
           return signed_out(env)  # malformed JSON authorization header
         end
 
-        token = verify_token(header_token)
-        return signed_in(env, token, header_token) if token
+        begin
+          token = verify_token(header_token)
+          return signed_in(env, token, header_token) if token
+        rescue JWT::ExpiredSignature, JWT::InvalidIatError
+          unknown(interstitial: false)
+        end
 
         # Clerk.js should refresh the token and retry
         return unknown(interstitial: false)
@@ -162,10 +166,15 @@ module Clerk
         return signed_out(env)
       end
 
-      token = verify_token(cookie_token)
+      begin
+        token = verify_token(cookie_token)
+        return signed_out(env) if !token
 
-      if token && token["iat"] && client_uat && Integer(client_uat) <= token["iat"]
-        return signed_in(env, token, cookie_token)
+        if token["iat"] && client_uat && Integer(client_uat) <= token["iat"]
+          return signed_in(env, token, cookie_token)
+        end
+      rescue JWT::ExpiredSignature, JWT::InvalidIatError
+        unknown(interstitial: true)
       end
 
       unknown(interstitial: true)
@@ -186,11 +195,11 @@ module Clerk
     end
 
     # Outcome C
-    def unknown(interstitial: false)
-      return [401, {}, []] if !interstitial
+    def unknown(interstitial: false, opts: {})
+      return [401, interstitial_headers(opts), []] if !interstitial
 
       # Load Clerk.js to update the __session and __client_uat cookies.
-      [401, {"Content-Type" => "text/html"}, [sdk.interstitial]]
+      [401, interstitial_headers(opts), [sdk.interstitial]]
     end
 
     def development_or_staging?
@@ -231,6 +240,8 @@ module Clerk
 
       begin
         sdk.verify_token(token)
+      rescue JWT::ExpiredSignature, JWT::InvalidIatError => e
+        raise e
       rescue JWT::DecodeError, JWT::RequiredDependencyError => e
         false
       end
@@ -239,5 +250,14 @@ module Clerk
     def sdk
       Clerk::SDK.new
     end
+
+    def interstitial_headers(reason: nil, message: nil, status: nil)
+      {
+        "Content-Type" => "text/html",
+        "X-Clerk-Auth-Reason" => reason,
+        "X-Clerk-Auth-Message" => message,
+        "X-Clerk-Auth-Status" => status,
+      }.compact
+    end
   end
 end

data/lib/clerk/version.rb

@@ -1,5 +1,5 @@
 # frozen_string_literal: true
 
 module Clerk
-  VERSION = "2.9.0"
+  VERSION = "2.10.0.beta1"
 end

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: clerk-sdk-ruby
 version: !ruby/object:Gem::Version
-  version: 2.9.0
+  version: 2.10.0.beta1
 platform: ruby
 authors:
 - Clerk
-autorequire: 
+autorequire:
 bindir: exe
 cert_chain: []
-date: 2023-02-28 00:00:00.000000000 Z
+date: 2023-03-08 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: faraday
@@ -90,6 +90,7 @@ files:
 - ".github/workflows/main.yml"
 - ".gitignore"
 - CHANGELOG.md
+- CODEOWNERS
 - Gemfile
 - Gemfile.lock
 - LICENSE.txt
@@ -104,7 +105,6 @@ files:
 - lib/clerk/authenticatable.rb
 - lib/clerk/errors.rb
 - lib/clerk/jwks_cache.rb
-- lib/clerk/proxy.rb
 - lib/clerk/rack_middleware.rb
 - lib/clerk/rack_middleware_v2.rb
 - lib/clerk/railtie.rb
@@ -132,7 +132,7 @@ metadata:
   homepage_uri: https://github.com/clerkinc/clerk-sdk-ruby
   source_code_uri: https://github.com/clerkinc/clerk-sdk-ruby
   changelog_uri: https://github.com/clerkinc/clerk-sdk-ruby/blob/main/CHANGELOG.md
-post_install_message: 
+post_install_message:
 rdoc_options: []
 require_paths:
 - lib
@@ -143,12 +143,12 @@ required_ruby_version: !ruby/object:Gem::Requirement
       version: 2.4.0
 required_rubygems_version: !ruby/object:Gem::Requirement
   requirements:
-  - - ">="
+  - - ">"
     - !ruby/object:Gem::Version
-      version: '0'
+      version: 1.3.1
 requirements: []
-rubygems_version: 3.3.7
-signing_key: 
+rubygems_version: 3.2.3
+signing_key:
 specification_version: 4
 summary: Clerk SDK for Ruby.
 test_files: []