devise-jwt-cookie 0.2.0 → 0.3.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 81e6f3af0d1646f1720c8d748d5bb5a61c800256257c9483be4714a530c65501
-  data.tar.gz: 6266de7bdd7e127ddee28d82e41189e39cdc8eefd1e2f87edd2678dcb40dd64a
+  metadata.gz: 4ca1a25c926bf8fca7e684ded8c47026ee168171ba24806d1f620363e241add5
+  data.tar.gz: 9961f8133c48c29940fe974c40c2d2ec2e3c5006a7bf67bcaddde6221a81bd3a
 SHA512:
-  metadata.gz: beb8781ebbe675e9eabe22902fed8a1467b227bf5688e7592a2b612d8cddb19c9947072a37615b42a74c6a8ac21afa7e71023d2a94ce3dd700e8c73880fc193e
-  data.tar.gz: b68f139960bfe9973da858f1dcd48360b4b26ac3fb6be0abfe45a43222211dea16005948400fbc00960563ebdf09237019fc8b12a072e7524586013124cc39d8
+  metadata.gz: 634cbfa8f6b97d1c0b67b27d562436870dd084f8809414e7e32e3471fefbb8362812f53090516c28568547a8f550637819e09b842b921d68af505484e6276ccc
+  data.tar.gz: 8ccdb1f626c644cb96896c869bab967191dd9613efb76ce3a450c5cf8beb9bfa9cc7986877fb8f7c78b17ecd065a2a8d7e47d4de6fb458b62e151b8d50c04059

data/README.md

@@ -7,7 +7,7 @@
 Add this line to your application's Gemfile:
 
 ```ruby
-gem 'devise-jwt', '~> 0.5.9'
+gem 'devise-jwt-cookie', '~> 0.2.0'
 ```
 
 And then execute:
@@ -41,6 +41,7 @@ Devise.setup do |config|
   end
   config.jwt_cookie do |jwt_cookie|
     # ...
+    jwt_cookie.secure = false if Rails.env.development?
   end
 end
 ```

data/lib/devise/jwt/cookie/cookie_helper.rb

@@ -5,19 +5,45 @@ module Devise
         include Cookie::Import['name', 'domain', 'secure']
 
         def build(token)
+          if token.nil?
+            remove_cookie
+          else
+            create_cookie(token)
+          end
+        end
+
+        def read_from(cookies)
+          cookies[name]
+        end
+
+        private
+
+        def create_cookie(token)
+          jwt = Warden::JWTAuth::TokenDecoder.new.call(token)
           res = {
             value: token,
             path: '/',
             httponly: true,
-            secure: secure
+            secure: secure,
+            expires: Time.at(jwt['exp'].to_i)
           }
           res[:domain] = domain if domain.present?
           [name, res]
         end
 
-        def read_from(cookies)
-          cookies[name]
+        def remove_cookie
+          res = {
+            value: nil,
+            path: '/',
+            httponly: true,
+            secure: secure,
+            max_age: '0',
+            expires: Time.at(0)
+          }
+          res[:domain] = domain if domain.present?
+          [name, res]
         end
+
       end
     end
   end

data/lib/devise/jwt/cookie/middleware.rb

@@ -4,18 +4,36 @@ module Devise
       class Middleware
         ENV_KEY = 'warden-jwt_auth.token'
 
+        attr_reader :app, :config
+
         def initialize(app)
           @app = app
+          @config = Warden::JWTAuth.config
         end
 
         def call(env)
-          status, headers, response = @app.call(env)
+          status, headers, response = app.call(env)
           if headers['Authorization'] && env[ENV_KEY]
             name, cookie = CookieHelper.new.build(env[ENV_KEY])
             Rack::Utils.set_cookie_header!(headers, name, cookie)
+          elsif token_should_be_revoked?(env)
+            name, cookie = CookieHelper.new.build(nil)
+            Rack::Utils.set_cookie_header!(headers, name, cookie)
           end
           [status, headers, response]
         end
+
+        def token_should_be_revoked?(env)
+          path_info = env['PATH_INFO'] || ''
+          method = env['REQUEST_METHOD']
+          revocation_requests = config.revocation_requests
+          revocation_requests.each do |tuple|
+            revocation_method, revocation_path = tuple
+            return true if path_info.match(revocation_path) &&
+                           method == revocation_method
+          end
+          false
+        end
       end
     end
   end

data/lib/devise/jwt/cookie/version.rb

@@ -1,7 +1,7 @@
 module Devise
   module JWT
     module Cookie
-      VERSION = '0.2.0'
+      VERSION = '0.3.0'
     end
   end
 end

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: devise-jwt-cookie
 version: !ruby/object:Gem::Version
-  version: 0.2.0
+  version: 0.3.0
 platform: ruby
 authors:
 - Niels van der Zanden
 autorequire: 
 bindir: exe
 cert_chain: []
-date: 2020-04-01 00:00:00.000000000 Z
+date: 2020-04-14 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: devise-jwt