devise-jwt 0.5.2 → 0.5.3

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA1:
-  metadata.gz: 6ae27be60b14e728a0f86baaef42c0dc4bf04813
-  data.tar.gz: b671e8223fcc31bfbae9e020ef3c363b600e63e0
+  metadata.gz: 513c35a60d789e0dd80233c4d9bdfa7ae35701bc
+  data.tar.gz: 9b5898453832eefb55490b14044efd82b68322ef
 SHA512:
-  metadata.gz: b78d89e4b8ef89e96a07b7ea49417b52aa04672ae585056c335d74a1fbb9c0f4e8ee7f7442df44753f20de04ebe7607af48250395451fd944595bfcf99229b23
-  data.tar.gz: 232d88e6253117a24b34909c253fb4cd9ae81f147a2bd4e85b79e48c9d18d04cacc42c6d4f881b5ff6be805bf0903262fcedb357a3228e9b1854fb44daae9666
+  metadata.gz: bfa429578e3a4014f1f7d839a05a7a49ac010374c416bea67af442a4f20fbcc6ead7d2883c25c5b378ddf01f112885c0c653c3b7a50e3a87dc1e342fdd1e15f6
+  data.tar.gz: fbd7dffa673dee31069d347d27682041221c195aa24eff667862ad2262a8bb0fb9a5673d8df94f4f615b92705c9b4437cbad6a589d23c0a5b914426eb5f048ed

data/.rubocop.yml

@@ -12,3 +12,5 @@ RSpec/ContextWording:
 Metrics/BlockLength:
   Exclude:
     - "spec/**/*.rb"
+Style/SafeNavigation:
+  Enabled: false

data/CHANGELOG.md

@@ -4,6 +4,13 @@ All notable changes to this project will be documented in this file.
 The format is based on [Keep a Changelog](http://keepachangelog.com/) 
 and this project adheres to [Semantic Versioning](http://semver.org/).
 
+## [0.5.3] - 2017-12-31
+### Fixed
+- Do not crash for consecutive revocations of same token in blacklist &
+  whitelist strategies
+- Update `warden-jwt_auth` dependency to allow a JWT scope to be fetched from
+  session in a html request
+
 ## [0.5.2] - 2017-12-23
 ### Added
 - Added a test helper to authenticate request headers

data/README.md

@@ -26,7 +26,7 @@ You can read about which security concerns this library takes into account and a
 Add this line to your application's Gemfile:
 
 ```ruby
-gem 'devise-jwt', '~> 0.5.2'
+gem 'devise-jwt', '~> 0.5.3'
 ```
 
 And then execute:

data/devise-jwt.gemspec

@@ -22,7 +22,7 @@ Gem::Specification.new do |spec|
   spec.require_paths = ["lib"]
 
   spec.add_dependency 'devise', '~> 4.0'
-  spec.add_dependency 'warden-jwt_auth', '~> 0.3.2'
+  spec.add_dependency 'warden-jwt_auth', '~> 0.3.3'
 
   spec.add_development_dependency "bundler", "~> 1.12"
   spec.add_development_dependency "rake", "~> 10.0"

data/lib/devise/jwt/revocation_strategies/blacklist.rb

@@ -21,8 +21,8 @@ module Devise
 
           # @see Warden::JWTAuth::Interfaces::RevocationStrategy#revoke_jwt
           def self.revoke_jwt(payload, _user)
-            create(jti: payload['jti'],
-                   exp: Time.at(payload['exp'].to_i))
+            find_or_create_by!(jti: payload['jti'],
+                               exp: Time.at(payload['exp'].to_i))
           end
         end
       end

data/lib/devise/jwt/revocation_strategies/whitelist.rb

@@ -32,7 +32,8 @@ module Devise
 
           # @see Warden::JWTAuth::Interfaces::RevocationStrategy#revoke_jwt
           def self.revoke_jwt(payload, user)
-            user.whitelisted_jwts.find_by(payload.slice('jti', 'aud')).destroy!
+            jwt = user.whitelisted_jwts.find_by(payload.slice('jti', 'aud'))
+            jwt.destroy! if jwt
           end
         end
 

data/lib/devise/jwt/version.rb

@@ -2,6 +2,6 @@
 
 module Devise
   module JWT
-    VERSION = '0.5.2'
+    VERSION = '0.5.3'
   end
 end

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: devise-jwt
 version: !ruby/object:Gem::Version
-  version: 0.5.2
+  version: 0.5.3
 platform: ruby
 authors:
 - Marc Busqué
 autorequire: 
 bindir: exe
 cert_chain: []
-date: 2017-12-23 00:00:00.000000000 Z
+date: 2017-12-31 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: devise
@@ -30,14 +30,14 @@ dependencies:
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: 0.3.2
+        version: 0.3.3
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: 0.3.2
+        version: 0.3.3
 - !ruby/object:Gem::Dependency
   name: bundler
   requirement: !ruby/object:Gem::Requirement