cognito_token_verifier 0.3.2 → 0.6.0

Sign up to get free protection for your applications and to get access to all the features.
checksums.yaml CHANGED
@@ -1,7 +1,7 @@
1
1
  ---
2
2
  SHA256:
3
- metadata.gz: f4add4df0faee00b48160321257e94d72d9baa717311660c0d81399fa033750a
4
- data.tar.gz: d6f223eab096dea2209abb728e005b0d54c2d9ec07535a00a0be64e60526fb67
3
+ metadata.gz: 8edc16e14b8a1bf1f5a49c693cbb6cb9d5fcc98d8903a65fca45beef5643a7dc
4
+ data.tar.gz: 68e7af872f597559db0dc2e9839aecb201d0552e54594921c7fc0cbd9dc3fe4e
5
5
  SHA512:
6
- metadata.gz: 9717904c6e1e6e2f9af8bc421322c5c1dcd613cacead6867fb4d9a76c2f8c12d7319c53ca9a57195f7cd976551ab6de1e409c4abf9831e5e60000a849f12e206
7
- data.tar.gz: 2bf652bfa68803e5c3e1a036bf6c42654665bd8d6bb6420a8ec65a385736ee29d18616b31698148253554cfaf7a5ec197236a1e4f0e5098c788622585182a538
6
+ metadata.gz: 0d13e3aa8021496519106c84557211429266d6347503f196dbc13ecacb8475dd4e86ead1f152a4c769a84c626e90f18ec17f19ef99c8cd61f7b61d1be4e73615
7
+ data.tar.gz: 2675df562c303cd2d111a06f4d025cd9132129316fa7ed07d344fecd9c21f000bec86ee8fd630fcace7343e30d4d7f92c06e87f2129d25a14a13c1dd9bc1c74a
@@ -0,0 +1,70 @@
1
+ # For most projects, this workflow file will not need changing; you simply need
2
+ # to commit it to your repository.
3
+ #
4
+ # You may wish to alter this file to override the set of languages analyzed,
5
+ # or to provide custom queries or build logic.
6
+ #
7
+ # ******** NOTE ********
8
+ # We have attempted to detect the languages in your repository. Please check
9
+ # the `language` matrix defined below to confirm you have the correct set of
10
+ # supported CodeQL languages.
11
+ #
12
+ name: "CodeQL"
13
+
14
+ on:
15
+ push:
16
+ branches: [ master ]
17
+ pull_request:
18
+ # The branches below must be a subset of the branches above
19
+ branches: [ master ]
20
+ schedule:
21
+ - cron: '35 20 * * 6'
22
+
23
+ jobs:
24
+ analyze:
25
+ name: Analyze
26
+ runs-on: ubuntu-latest
27
+ permissions:
28
+ actions: read
29
+ contents: read
30
+ security-events: write
31
+
32
+ strategy:
33
+ fail-fast: false
34
+ matrix:
35
+ language: [ 'ruby' ]
36
+ # CodeQL supports [ 'cpp', 'csharp', 'go', 'java', 'javascript', 'python', 'ruby' ]
37
+ # Learn more about CodeQL language support at https://git.io/codeql-language-support
38
+
39
+ steps:
40
+ - name: Checkout repository
41
+ uses: actions/checkout@v2
42
+
43
+ # Initializes the CodeQL tools for scanning.
44
+ - name: Initialize CodeQL
45
+ uses: github/codeql-action/init@v1
46
+ with:
47
+ languages: ${{ matrix.language }}
48
+ # If you wish to specify custom queries, you can do so here or in a config file.
49
+ # By default, queries listed here will override any specified in a config file.
50
+ # Prefix the list here with "+" to use these queries and those in the config file.
51
+ # queries: ./path/to/local/query, your-org/your-repo/queries@main
52
+
53
+ # Autobuild attempts to build any compiled languages (C/C++, C#, or Java).
54
+ # If this step fails, then you should remove it and run the build manually (see below)
55
+ - name: Autobuild
56
+ uses: github/codeql-action/autobuild@v1
57
+
58
+ # ℹ️ Command-line programs to run using the OS shell.
59
+ # 📚 https://git.io/JvXDl
60
+
61
+ # ✏️ If the Autobuild fails above, remove it and uncomment the following three lines
62
+ # and modify them (or add more) to build your code if your project
63
+ # uses a compiled language
64
+
65
+ #- run: |
66
+ # make bootstrap
67
+ # make release
68
+
69
+ - name: Perform CodeQL Analysis
70
+ uses: github/codeql-action/analyze@v1
@@ -0,0 +1,41 @@
1
+ name: Ruby Gem
2
+
3
+ on:
4
+ push:
5
+ tags:
6
+ - v*
7
+
8
+ jobs:
9
+ build:
10
+ name: Build + Publish
11
+ runs-on: ubuntu-latest
12
+
13
+ steps:
14
+ - uses: actions/checkout@v2
15
+ - name: Set up Ruby 2.7
16
+ uses: ruby/setup-ruby@v1
17
+ with:
18
+ ruby-version: 2.7
19
+
20
+ - name: Publish to GPR
21
+ run: |
22
+ mkdir -p $HOME/.gem
23
+ touch $HOME/.gem/credentials
24
+ chmod 0600 $HOME/.gem/credentials
25
+ printf -- "---\n:github: ${GEM_HOST_API_KEY}\n" > $HOME/.gem/credentials
26
+ gem build *.gemspec
27
+ gem push --KEY github --host https://rubygems.pkg.github.com/${OWNER} *.gem
28
+ env:
29
+ GEM_HOST_API_KEY: "Bearer ${{secrets.GITHUB_TOKEN}}"
30
+ OWNER: ${{ github.repository_owner }}
31
+
32
+ - name: Publish to RubyGems
33
+ run: |
34
+ mkdir -p $HOME/.gem
35
+ touch $HOME/.gem/credentials
36
+ chmod 0600 $HOME/.gem/credentials
37
+ printf -- "---\n:rubygems_api_key: ${GEM_HOST_API_KEY}\n" > $HOME/.gem/credentials
38
+ gem build *.gemspec
39
+ gem push *.gem
40
+ env:
41
+ GEM_HOST_API_KEY: "${{secrets.RUBYGEMS_AUTH_TOKEN}}"
@@ -0,0 +1,30 @@
1
+ name: Ruby CI
2
+
3
+ on:
4
+ push:
5
+ branches: [ master ]
6
+ pull_request:
7
+ branches: [ master ]
8
+
9
+ jobs:
10
+ test:
11
+ name: "Ruby ${{ matrix.ruby }}, Gemfile ${{ matrix.gemfile }}"
12
+ runs-on: ubuntu-latest
13
+
14
+ strategy:
15
+ fail-fast: true
16
+ matrix:
17
+ ruby: ['3.1', '3.0', '2.7']
18
+ gemfile: ['rails52', 'rails6', 'rails61', 'rails7']
19
+
20
+ env: # $BUNDLE_GEMFILE must be set at the job level, so it is set for all steps
21
+ BUNDLE_GEMFILE: ${{ github.workspace }}/gemfiles/${{ matrix.gemfile }}.gemfile
22
+ steps:
23
+ - uses: actions/checkout@v2
24
+ - name: Set up Ruby ${{ matrix.ruby }}
25
+ uses: ruby/setup-ruby@359bebbc29cbe6c87da6bc9ea3bc930432750108
26
+ with:
27
+ ruby-version: ${{ matrix.ruby }}
28
+ bundler-cache: true
29
+ - name: Run tests
30
+ run: bundle exec rspec
data/.tool-versions ADDED
@@ -0,0 +1 @@
1
+ ruby 3.1.0
data/CHANGELOG.md CHANGED
@@ -1,4 +1,29 @@
1
- # CHANGELOG.md
1
+ # CHANGELOG
2
+
3
+ ## 0.6.0 (2022-02-24)
4
+
5
+ - Add Rails 7 support
6
+ - Test against Ruby 3.1
7
+
8
+ ## 0.5.0 (2021-01-27)
9
+
10
+ - Update `nokogiri` version to 1.11 for security patch in gem development
11
+ - Test against Ruby 3.0 and remove near-EOL Ruby 2.5 from test matrix
12
+ - Add Rails 6.1 support
13
+
14
+ ## 0.4.0 (2020-09-12)
15
+
16
+ - Update development version of Rails gems for `actionview` security patch
17
+ - Remove Rails < 5.2 support due to EOL by Rails team
18
+ - Remove EOL Ruby 2.4 from test matrix, and add Ruby 2.7
19
+
20
+ ## 0.3.2 (2020-03-31)
21
+
22
+ - Update development version of Rails gems for `actionview` security patch
23
+
24
+ ## 0.3.1 (2020-02-27)
25
+
26
+ - Update `nokogiri` version to 1.10.8 for security patches in gem development
2
27
 
3
28
  ## 0.3.0 (2019-11-14)
4
29
 
data/Gemfile.lock CHANGED
@@ -1,93 +1,95 @@
1
1
  PATH
2
2
  remote: .
3
3
  specs:
4
- cognito_token_verifier (0.3.2)
5
- activesupport (>= 4.2, < 6.1)
4
+ cognito_token_verifier (0.5.0)
5
+ activesupport (>= 5.2)
6
6
  json-jwt (~> 1.11)
7
7
  rest-client (~> 2.0)
8
8
 
9
9
  GEM
10
10
  remote: https://rubygems.org/
11
11
  specs:
12
- actionpack (6.0.2.2)
13
- actionview (= 6.0.2.2)
14
- activesupport (= 6.0.2.2)
15
- rack (~> 2.0, >= 2.0.8)
12
+ actionpack (6.1.4.6)
13
+ actionview (= 6.1.4.6)
14
+ activesupport (= 6.1.4.6)
15
+ rack (~> 2.0, >= 2.0.9)
16
16
  rack-test (>= 0.6.3)
17
17
  rails-dom-testing (~> 2.0)
18
18
  rails-html-sanitizer (~> 1.0, >= 1.2.0)
19
- actionview (6.0.2.2)
20
- activesupport (= 6.0.2.2)
19
+ actionview (6.1.4.6)
20
+ activesupport (= 6.1.4.6)
21
21
  builder (~> 3.1)
22
22
  erubi (~> 1.4)
23
23
  rails-dom-testing (~> 2.0)
24
24
  rails-html-sanitizer (~> 1.1, >= 1.2.0)
25
- activesupport (6.0.2.2)
25
+ activesupport (6.1.4.6)
26
26
  concurrent-ruby (~> 1.0, >= 1.0.2)
27
- i18n (>= 0.7, < 2)
28
- minitest (~> 5.1)
29
- tzinfo (~> 1.1)
30
- zeitwerk (~> 2.2)
31
- aes_key_wrap (1.0.1)
32
- bindata (2.4.4)
27
+ i18n (>= 1.6, < 2)
28
+ minitest (>= 5.1)
29
+ tzinfo (~> 2.0)
30
+ zeitwerk (~> 2.3)
31
+ aes_key_wrap (1.1.0)
32
+ bindata (2.4.10)
33
33
  builder (3.2.4)
34
- byebug (11.0.1)
35
- concurrent-ruby (1.1.6)
34
+ byebug (11.1.3)
35
+ concurrent-ruby (1.1.9)
36
36
  crass (1.0.6)
37
- diff-lcs (1.3)
37
+ diff-lcs (1.4.4)
38
38
  domain_name (0.5.20190701)
39
39
  unf (>= 0.0.5, < 1.0.0)
40
- erubi (1.9.0)
40
+ erubi (1.10.0)
41
41
  http-accept (1.7.0)
42
42
  http-cookie (1.0.3)
43
43
  domain_name (~> 0.5)
44
- i18n (1.8.2)
44
+ i18n (1.9.1)
45
45
  concurrent-ruby (~> 1.0)
46
- json-jwt (1.11.0)
46
+ json-jwt (1.13.0)
47
47
  activesupport (>= 4.2)
48
48
  aes_key_wrap
49
49
  bindata
50
- loofah (2.4.0)
50
+ loofah (2.14.0)
51
51
  crass (~> 1.0.2)
52
52
  nokogiri (>= 1.5.9)
53
53
  method_source (1.0.0)
54
- mime-types (3.3)
54
+ mime-types (3.3.1)
55
55
  mime-types-data (~> 3.2015)
56
- mime-types-data (3.2019.1009)
57
- mini_portile2 (2.4.0)
58
- minitest (5.14.0)
56
+ mime-types-data (3.2020.0512)
57
+ mini_portile2 (2.7.1)
58
+ minitest (5.15.0)
59
59
  netrc (0.11.0)
60
- nokogiri (1.10.9)
61
- mini_portile2 (~> 2.4.0)
62
- rack (2.2.2)
60
+ nokogiri (1.13.1)
61
+ mini_portile2 (~> 2.7.0)
62
+ racc (~> 1.4)
63
+ racc (1.6.0)
64
+ rack (2.2.3)
63
65
  rack-test (1.1.0)
64
66
  rack (>= 1.0, < 3)
65
67
  rails-dom-testing (2.0.3)
66
68
  activesupport (>= 4.2.0)
67
69
  nokogiri (>= 1.6)
68
- rails-html-sanitizer (1.3.0)
70
+ rails-html-sanitizer (1.4.2)
69
71
  loofah (~> 2.3)
70
- railties (6.0.2.2)
71
- actionpack (= 6.0.2.2)
72
- activesupport (= 6.0.2.2)
72
+ railties (6.1.4.6)
73
+ actionpack (= 6.1.4.6)
74
+ activesupport (= 6.1.4.6)
73
75
  method_source
74
- rake (>= 0.8.7)
75
- thor (>= 0.20.3, < 2.0)
76
- rake (13.0.1)
76
+ rake (>= 0.13)
77
+ thor (~> 1.0)
78
+ rake (13.0.3)
77
79
  rest-client (2.1.0)
78
80
  http-accept (>= 1.7.0, < 2.0)
79
81
  http-cookie (>= 1.0.2, < 2.0)
80
82
  mime-types (>= 1.16, < 4.0)
81
83
  netrc (~> 0.8)
82
- rspec-core (3.9.0)
83
- rspec-support (~> 3.9.0)
84
- rspec-expectations (3.9.0)
84
+ rspec-core (3.9.2)
85
+ rspec-support (~> 3.9.3)
86
+ rspec-expectations (3.9.2)
85
87
  diff-lcs (>= 1.2.0, < 2.0)
86
88
  rspec-support (~> 3.9.0)
87
- rspec-mocks (3.9.0)
89
+ rspec-mocks (3.9.1)
88
90
  diff-lcs (>= 1.2.0, < 2.0)
89
91
  rspec-support (~> 3.9.0)
90
- rspec-rails (3.9.0)
92
+ rspec-rails (3.9.1)
91
93
  actionpack (>= 3.0)
92
94
  activesupport (>= 3.0)
93
95
  railties (>= 3.0)
@@ -95,21 +97,20 @@ GEM
95
97
  rspec-expectations (~> 3.9.0)
96
98
  rspec-mocks (~> 3.9.0)
97
99
  rspec-support (~> 3.9.0)
98
- rspec-support (3.9.0)
99
- thor (1.0.1)
100
- thread_safe (0.3.6)
101
- tzinfo (1.2.6)
102
- thread_safe (~> 0.1)
100
+ rspec-support (3.9.3)
101
+ thor (1.2.1)
102
+ tzinfo (2.0.4)
103
+ concurrent-ruby (~> 1.0)
103
104
  unf (0.1.4)
104
105
  unf_ext
105
- unf_ext (0.0.7.6)
106
- zeitwerk (2.3.0)
106
+ unf_ext (0.0.7.7)
107
+ zeitwerk (2.5.4)
107
108
 
108
109
  PLATFORMS
109
110
  ruby
110
111
 
111
112
  DEPENDENCIES
112
- actionpack (>= 4.2, < 6.1)
113
+ actionpack (>= 5.2)
113
114
  bundler (~> 2.0)
114
115
  byebug (~> 11.0)
115
116
  cognito_token_verifier!
@@ -117,4 +118,4 @@ DEPENDENCIES
117
118
  rspec-rails (~> 3.0)
118
119
 
119
120
  BUNDLED WITH
120
- 2.0.2
121
+ 2.1.4
data/README.md CHANGED
@@ -1,6 +1,6 @@
1
- # CognitoTokenVerifier [![Build Status](https://travis-ci.org/CodingAnarchy/cognito_token_verifier.svg?branch=master)](https://travis-ci.org/CodingAnarchy/cognito_token_verifier)
1
+ # CognitoTokenVerifier ![Build Status](https://github.com/CodingAnarchy/cognito_token_verifier/actions/workflows/ruby-ci.yml/badge.svg)
2
2
 
3
- Verify and decode AWS Cognito tokens for use in your Rails 5.2+ application. Rails 4.2 may work on 0.3+, but as it is no longer supported for security fixes by the Rails team, I make no guarantees of this and changes may result that break compatibility.
3
+ Verify and decode AWS Cognito tokens for use in your Rails 5.2+ application. Rails versions <= 5.2 are incompatible with the required gemspec as of 0.4+, as they are no longer supported for security fixes by the Rails team.
4
4
 
5
5
  ## Installation
6
6
 
@@ -12,7 +12,7 @@ Gem::Specification.new do |spec|
12
12
  spec.summary = %q{Verify and parse AWS Cognito JWTs to authenticate endpoints}
13
13
  spec.homepage = "https://github.com/CodingAnarchy/cognito_token_verifier"
14
14
  spec.license = "MIT"
15
- spec.required_ruby_version = ">= 2.3.8"
15
+ spec.required_ruby_version = ">= 2.6.0"
16
16
 
17
17
  # Prevent pushing this gem to RubyGems.org. To allow pushes either set the 'allowed_push_host'
18
18
  # to allow pushing to a single host or delete this section to allow pushing to any host.
@@ -31,7 +31,7 @@ Gem::Specification.new do |spec|
31
31
  spec.executables = spec.files.grep(%r{^exe/}) { |f| File.basename(f) }
32
32
  spec.require_paths = ["lib"]
33
33
 
34
- spec.add_runtime_dependency "activesupport", [">= 4.2", "< 6.1"]
34
+ spec.add_runtime_dependency "activesupport", [">= 5.2"]
35
35
  spec.add_runtime_dependency "json-jwt", "~> 1.11"
36
36
  spec.add_runtime_dependency "rest-client", "~> 2.0"
37
37
 
@@ -39,5 +39,5 @@ Gem::Specification.new do |spec|
39
39
  spec.add_development_dependency "bundler", "~> 2.0"
40
40
  spec.add_development_dependency "rake", [">= 10.0", "< 14.0"]
41
41
  spec.add_development_dependency "rspec-rails", "~> 3.0"
42
- spec.add_development_dependency "actionpack", [">= 4.2", "< 6.1"]
42
+ spec.add_development_dependency "actionpack", [">= 5.2"]
43
43
  end
@@ -1,11 +1,11 @@
1
1
  source "https://rubygems.org"
2
2
 
3
- gem "activesupport", "~> 5.1.0"
3
+ gem "activesupport", "~> 6.1.0"
4
4
  gem "json-jwt", "~> 1.11"
5
5
  gem "rest-client", "~> 2.0"
6
6
 
7
7
  gem "byebug"
8
8
  gem "bundler", "~> 2.0"
9
- gem "rake", "~> 11.0"
9
+ gem "rake", "~> 12.0"
10
10
  gem "rspec-rails", "~> 3.0"
11
- gem "actionpack", "~> 5.1.0"
11
+ gem "actionpack", "~> 6.1.0"
@@ -0,0 +1,11 @@
1
+ source "https://rubygems.org"
2
+
3
+ gem "activesupport", "~> 7.0.0"
4
+ gem "json-jwt", "~> 1.11"
5
+ gem "rest-client", "~> 2.0"
6
+
7
+ gem "byebug"
8
+ gem "bundler", "~> 2.0"
9
+ gem "rake", "~> 12.0"
10
+ gem "rspec-rails", "~> 3.0"
11
+ gem "actionpack", "~> 7.0.0"
@@ -1,3 +1,3 @@
1
1
  module CognitoTokenVerifier
2
- VERSION = "0.3.2"
2
+ VERSION = "0.6.0"
3
3
  end
metadata CHANGED
@@ -1,14 +1,14 @@
1
1
  --- !ruby/object:Gem::Specification
2
2
  name: cognito_token_verifier
3
3
  version: !ruby/object:Gem::Version
4
- version: 0.3.2
4
+ version: 0.6.0
5
5
  platform: ruby
6
6
  authors:
7
7
  - Matt Tanous
8
8
  autorequire:
9
9
  bindir: exe
10
10
  cert_chain: []
11
- date: 2020-03-31 00:00:00.000000000 Z
11
+ date: 2022-02-24 00:00:00.000000000 Z
12
12
  dependencies:
13
13
  - !ruby/object:Gem::Dependency
14
14
  name: activesupport
@@ -16,20 +16,14 @@ dependencies:
16
16
  requirements:
17
17
  - - ">="
18
18
  - !ruby/object:Gem::Version
19
- version: '4.2'
20
- - - "<"
21
- - !ruby/object:Gem::Version
22
- version: '6.1'
19
+ version: '5.2'
23
20
  type: :runtime
24
21
  prerelease: false
25
22
  version_requirements: !ruby/object:Gem::Requirement
26
23
  requirements:
27
24
  - - ">="
28
25
  - !ruby/object:Gem::Version
29
- version: '4.2'
30
- - - "<"
31
- - !ruby/object:Gem::Version
32
- version: '6.1'
26
+ version: '5.2'
33
27
  - !ruby/object:Gem::Dependency
34
28
  name: json-jwt
35
29
  requirement: !ruby/object:Gem::Requirement
@@ -126,20 +120,14 @@ dependencies:
126
120
  requirements:
127
121
  - - ">="
128
122
  - !ruby/object:Gem::Version
129
- version: '4.2'
130
- - - "<"
131
- - !ruby/object:Gem::Version
132
- version: '6.1'
123
+ version: '5.2'
133
124
  type: :development
134
125
  prerelease: false
135
126
  version_requirements: !ruby/object:Gem::Requirement
136
127
  requirements:
137
128
  - - ">="
138
129
  - !ruby/object:Gem::Version
139
- version: '4.2'
140
- - - "<"
141
- - !ruby/object:Gem::Version
142
- version: '6.1'
130
+ version: '5.2'
143
131
  description:
144
132
  email:
145
133
  - mtanous22@gmail.com
@@ -147,9 +135,12 @@ executables: []
147
135
  extensions: []
148
136
  extra_rdoc_files: []
149
137
  files:
138
+ - ".github/workflows/codeql-analysis.yml"
139
+ - ".github/workflows/gem-push.yml"
140
+ - ".github/workflows/ruby-ci.yml"
150
141
  - ".gitignore"
151
142
  - ".rspec"
152
- - ".travis.yml"
143
+ - ".tool-versions"
153
144
  - CHANGELOG.md
154
145
  - Gemfile
155
146
  - Gemfile.lock
@@ -159,9 +150,10 @@ files:
159
150
  - bin/console
160
151
  - bin/setup
161
152
  - cognito_token_verifier.gemspec
162
- - gemfiles/rails51.gemfile
163
153
  - gemfiles/rails52.gemfile
164
154
  - gemfiles/rails6.gemfile
155
+ - gemfiles/rails61.gemfile
156
+ - gemfiles/rails7.gemfile
165
157
  - lib/cognito_token_verifier.rb
166
158
  - lib/cognito_token_verifier/config.rb
167
159
  - lib/cognito_token_verifier/controller_macros.rb
@@ -183,14 +175,14 @@ required_ruby_version: !ruby/object:Gem::Requirement
183
175
  requirements:
184
176
  - - ">="
185
177
  - !ruby/object:Gem::Version
186
- version: 2.3.8
178
+ version: 2.6.0
187
179
  required_rubygems_version: !ruby/object:Gem::Requirement
188
180
  requirements:
189
181
  - - ">="
190
182
  - !ruby/object:Gem::Version
191
183
  version: '0'
192
184
  requirements: []
193
- rubygems_version: 3.0.6
185
+ rubygems_version: 3.1.6
194
186
  signing_key:
195
187
  specification_version: 4
196
188
  summary: Verify and parse AWS Cognito JWTs to authenticate endpoints
data/.travis.yml DELETED
@@ -1,21 +0,0 @@
1
- ---
2
- sudo: false
3
- language: ruby
4
- cache: bundler
5
- rvm:
6
- - 2.4.9
7
- - 2.5.7
8
- - 2.6.5
9
- before_install: gem install bundler
10
- gemfile:
11
- - Gemfile
12
- - gemfiles/rails51.gemfile
13
- - gemfiles/rails52.gemfile
14
- - gemfiles/rails6.gemfile
15
-
16
- jobs:
17
- exclude:
18
- - rvm: 2.4.9
19
- gemfile: Gemfile
20
- - rvm: 2.4.9
21
- gemfile: gemfiles/rails6.gemfile