clerk-sdk-ruby 4.0.1 → 4.1.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: d0afe6493d39ec3b1273a7c15930cd38ccd9ea35eec5d46c9f3ca50c7212fab5
-  data.tar.gz: af49ba2bec123f277107c118fdf7576fece156a78de328c7351e3db8bc37e401
+  metadata.gz: 2c5d13e407e2b3827d2d451604f62d018e90ecb79fb28b12864318358bc7bcdf
+  data.tar.gz: c0c69cab555345231c04bec2dfb48316f4f4c66a04f8a5270588ba9a8e98230f
 SHA512:
-  metadata.gz: 2440592868199c1c08ba259b2a32f3e551d17ceda2d8a7865b7bd8442e312b8cca7881280702e537a2b1952794c9e379fd71efd9a391f0c761f5cf57909809ba
-  data.tar.gz: 474c06a1094afb7d39d1e9e3ee727f070873ca58f470d457fc5bc586b3f611de928935ff50237a41cc13bb437f36f4846a604752c645b0788e7de1a115e656e6
+  metadata.gz: 3f3b78b75a176ee0667fc492e85bb3672ce258c8fa869cc2196943ed85014e47526abc677d8771d034bcd505ee4edb4999a790f3e16206e0417b2cdaa29cbf96
+  data.tar.gz: 5b7f5366e6ed26d47c4e9856622c0424d46e6dbaf07f218e94f908e587755700b876069e677ecd4c75dc49ced41d18f113d4c2fdd9653dadde99922c8ea3da1f

data/CHANGELOG.md

@@ -1,3 +1,7 @@
+## 4.1.0 - 2025-04-10
+
+- feat: Add support for org. claims of v2 session tokens [https://github.com/clerk/clerk-sdk-ruby/pull/89]
+
 ## 4.0.0.beta4 - 2025-01-06
 
 [BREAKING] This release introduces our new `clerk-http-client` gem, which is a generated directly from the Clerk API OpenAPI specs. This will help to ensure that the SDK is always in sync with the Clerk API.

data/Gemfile.lock

@@ -1,7 +1,7 @@
 PATH
   remote: .
   specs:
-    clerk-sdk-ruby (4.0.1)
+    clerk-sdk-ruby (4.1.0)
       clerk-http-client (~> 2.0)
       concurrent-ruby (~> 1.1)
       faraday (>= 1.4.1, < 3.0)

data/lib/clerk/sdk.rb

@@ -5,14 +5,14 @@ require "jwt"
 
 module Clerk
   class SDK < ClerkHttpClient::SDK
-    # TODO: Move to constants?
     DEFAULT_HEADERS = {
       "User-Agent": "Clerk/#{Clerk::VERSION}; Faraday/#{Faraday::VERSION}; Ruby/#{RUBY_VERSION}",
-      "X-Clerk-SDK": "ruby/#{Clerk::VERSION}" # TODO: Add framework identifier
+      "X-Clerk-SDK": "ruby/#{Clerk::VERSION}",
+      "Clerk-API-Version": "2025-04-10",
     }
 
     # How often (in seconds) should JWKs be refreshed
-    JWKS_CACHE_LIFETIME = 3600 # 1 hour / TODO: Move to constants?
+    JWKS_CACHE_LIFETIME = 3600 # 1 hour
 
     @@jwks_cache = JWKSCache.new(JWKS_CACHE_LIFETIME)
 
@@ -41,7 +41,44 @@ module Clerk
         {keys: SDK.jwks_cache.fetch(self, kid_not_found: options[:invalidate] || options[:kid_not_found], force_refresh: force_refresh_jwks)}
       end
 
-      JWT.decode(token, nil, true, algorithms: algorithms, exp_leeway: timeout, jwks: jwk_loader).first
+      claims = JWT.decode(token, nil, true, algorithms: algorithms, exp_leeway: timeout, jwks: jwk_loader).first
+
+      # orgs
+      if claims["v"].nil? || claims["v"] == 1
+        claims["v"] = 1
+      elsif claims["v"] == 2 && claims["o"]
+        claims["org_id"]          = claims["o"].fetch("id", nil)
+        claims["org_slug"]        = claims["o"].fetch("slg", nil)
+        claims["org_role"]        = "org:#{claims["o"].fetch("rol", nil)}"
+
+        org_permissions = compute_org_permissions_from_v2_token(claims)
+        claims["org_permissions"] = org_permissions if org_permissions.any?
+        claims.delete("o")
+        claims.delete("fea")
+      end
+
+      claims
+    end
+
+    private
+
+    def compute_org_permissions_from_v2_token(claims)
+      features    = claims["fea"].split(",")
+      permissions = claims["o"]["per"].split(",")
+      mappings    = claims["o"]["fpm"].split(",")
+      org_permissions = []
+
+      mappings.each_with_index do |mapping, i|
+        scope, feature = features[i].split(":")
+
+        next if !scope.include?("o") # not an orgs-related permission
+
+        mapping.to_i.to_s(2).reverse.each_char.each_with_index do |bit, i|
+          org_permissions << "org:#{feature}:#{permissions[i]}" if bit == "1"
+        end
+      end
+
+      org_permissions
     end
   end
 end

data/lib/clerk/version.rb

@@ -1,5 +1,5 @@
 # frozen_string_literal: true
 
 module Clerk
-  VERSION = "4.0.1"
+  VERSION = "4.1.0"
 end

metadata

@@ -1,13 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: clerk-sdk-ruby
 version: !ruby/object:Gem::Version
-  version: 4.0.1
+  version: 4.1.0
 platform: ruby
 authors:
 - Clerk
+autorequire:
 bindir: exe
 cert_chain: []
-date: 2025-02-14 00:00:00.000000000 Z
+date: 2025-04-10 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: faraday
@@ -306,6 +307,7 @@ metadata:
   homepage_uri: https://github.com/clerkinc/clerk-sdk-ruby
   source_code_uri: https://github.com/clerkinc/clerk-sdk-ruby
   changelog_uri: https://github.com/clerkinc/clerk-sdk-ruby/blob/main/CHANGELOG.md
+post_install_message:
 rdoc_options: []
 require_paths:
 - lib
@@ -320,7 +322,8 @@ required_rubygems_version: !ruby/object:Gem::Requirement
     - !ruby/object:Gem::Version
       version: '0'
 requirements: []
-rubygems_version: 3.6.2
+rubygems_version: 3.5.3
+signing_key:
 specification_version: 4
 summary: Clerk SDK for Ruby.
 test_files: []