fb-jwt-auth 0.2.1 → 0.6.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 8e1e914f5fe455e0675c3cf5554ec67b56eae840636fb86d5a2011282178b572
-  data.tar.gz: '033953fb853d0888f51433df058074191385f52e6b7188295039bc57a8b3a433'
+  metadata.gz: 5b59f53cd27dd33a8d92b5f6da18f04909dbb6b311db0ff02f939f650666c8ee
+  data.tar.gz: fe95f4ca52683b62e23ff75eb388fd5093c8721b0ce28cd72f989da9a464ec67
 SHA512:
-  metadata.gz: c9285fec02370d269e6d316acea514831e58c5c066327f4066d13a6a164182fdba406d396b778ac2e97210bef0f9bfc1bd72e8d70c0c4f5e7fa0439230413486
-  data.tar.gz: e55416266083dd9e90bb5a74124d0663b12e0ab835fc1023e48ac1bf5309df5eede27ea69862e166111ec0bb8c7577892c478019286d25adebbad105c1f61f24
+  metadata.gz: 11f34bdd3e26da22500f7bd5c31389c415547beb38a61e06fa59b802e577243768582cf542e7c8d26e0f15ab94550d938fb6197e31839ca806183c44cfd116a5
+  data.tar.gz: c7f37479606d260d9ae764558e4430067bdab0ef2cfd0d60735f9a4323f5cb70da77a8806b9299a9ac37fece8ad1477a58742f6f9d5278db7b9f7d8f864068a8

data/.gitignore

@@ -11,3 +11,4 @@
 .rspec_status
 Gemfile.lock
 .byebug_history
+*.gem

data/Changelog.md

@@ -1,3 +1,18 @@
+# 0.6.0
+* Supplier issuer to service token client
+
+# 0.5.0
+* Do not base64 decode private key
+
+# 0.4.0
+* Generate the access token
+
+# 0.3.0
+* Request non cached version of public key if first validition fails
+
+# v0.2.2
+* Add token not present exception when token is empty
+
 # v0.2.1
 * Add better error messages
 

data/README.md

@@ -25,6 +25,16 @@ Fb::Jwt::Auth.configure do |config|
   config.service_token_cache_root_url = ENV['SERVICE_TOKEN_CACHE_ROOT_URL']
 end
 ```
+In order to generate the service access token we need to use `Fb::Jwt::Auth::ServiceAccessToken.new.generate` or if you require a subject, `Fb::Jwt::Auth::ServiceAccessToken.new(subject: subject).generate`
+
+In the case you need to configure the service access token as a client
+```ruby
+Fb::Jwt::Auth.configure do |config|
+  config.issuer = 'fb-editor'
+  config.namespace = 'formbuilder-saas-test'
+  config.encoded_private_key = 'base64 encoded private key'
+end
+```
 
 ### Using other endpoint versions
 

data/lib/fb/jwt/auth.rb

@@ -1,18 +1,23 @@
 require 'fb/jwt/auth/version'
 require 'openssl'
 require 'jwt'
-require 'active_support/core_ext'
+require 'active_support/all'
 
 module Fb
   module Jwt
     class Auth
-      cattr_accessor :service_token_cache_root_url, :service_token_cache_api_version
+      cattr_accessor :service_token_cache_root_url,
+                     :service_token_cache_api_version,
+                     :encoded_private_key,
+                     :issuer,
+                     :namespace
 
       def self.configure(&block)
         yield self
       end
 
       autoload :ServiceTokenClient, 'fb/jwt/auth/service_token_client'
+      autoload :ServiceAccessToken, 'fb/jwt/auth/service_access_token'
 
       class TokenNotPresentError < StandardError
       end
@@ -39,13 +44,12 @@ module Fb
       end
 
       def verify!
-        raise TokenNotPresentError.new('Token is not present') if token.nil?
+        raise TokenNotPresentError.new('Token is not present') if token.blank?
 
         application_details = find_application_info
 
         begin
-          hmac_secret = public_key(application_details)
-          payload, _header = decode(hmac_secret: hmac_secret)
+          payload, _header = retrieve_and_decode_public_key(application_details)
         rescue StandardError => e
           error_message = "Token is not valid: error #{e}"
           logger.debug(error_message)
@@ -67,6 +71,15 @@ module Fb
         payload
       end
 
+      def retrieve_and_decode_public_key(application_details)
+        hmac_secret = public_key(application_details)
+        decode(hmac_secret: hmac_secret)
+      rescue JWT::VerificationError
+        logger.debug('First validation failed. Requesting non cached public key')
+        hmac_secret = public_key(application_details.merge(ignore_cache: true))
+        decode(hmac_secret: hmac_secret)
+      end
+
       def decode(verify: true, hmac_secret: nil)
         JWT.decode(
           token,

data/lib/fb/jwt/auth/service_access_token.rb

@@ -0,0 +1,43 @@
+module Fb
+  module Jwt
+    class Auth
+      class ServiceAccessToken
+        attr_reader :encoded_private_key,
+                    :issuer,
+                    :subject,
+                    :namespace
+
+        def initialize(subject: nil, issuer: nil)
+          @subject = subject
+          @encoded_private_key = Fb::Jwt::Auth.encoded_private_key
+          @namespace = Fb::Jwt::Auth.namespace
+          @issuer = issuer || Fb::Jwt::Auth.issuer
+        end
+
+        def generate
+          return '' if encoded_private_key.blank?
+
+          private_key = OpenSSL::PKey::RSA.new(encoded_private_key.chomp)
+
+          JWT.encode(
+            token,
+            private_key,
+            'RS256'
+          )
+        end
+
+        private
+
+        def token
+          payload = {
+            iss: issuer,
+            iat: Time.current.to_i
+          }
+          payload[:sub] = subject if subject.present?
+          payload[:namespace] = namespace if namespace.present?
+          payload
+        end
+      end
+    end
+  end
+end

data/lib/fb/jwt/auth/service_token_client.rb

@@ -12,9 +12,10 @@ class Fb::Jwt::Auth::ServiceTokenClient
 
   attr_accessor :application, :namespace, :root_url, :api_version
 
-  def initialize(application:, namespace: nil)
+  def initialize(application:, namespace: nil, ignore_cache: false)
     @application = application
     @namespace = namespace
+    @ignore_cache = ignore_cache
     @root_url = Fb::Jwt::Auth.service_token_cache_root_url
     @api_version = Fb::Jwt::Auth.service_token_cache_api_version || :v2
   end
@@ -38,8 +39,14 @@ class Fb::Jwt::Auth::ServiceTokenClient
 
   private
 
+  attr_reader :ignore_cache
+
   def public_key_uri
-    URI.join(root_url, version_url)
+    URI.join(root_url, "#{version_url}#{query_param}")
+  end
+
+  def query_param
+    ignore_cache ? '?ignore_cache=true' : ''
   end
 
   def version_url

data/lib/fb/jwt/auth/version.rb

@@ -1,7 +1,7 @@
 module Fb
   module Jwt
     class Auth
-      VERSION = "0.2.1"
+      VERSION = "0.6.0"
     end
   end
 end

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: fb-jwt-auth
 version: !ruby/object:Gem::Version
-  version: 0.2.1
+  version: 0.6.0
 platform: ruby
 authors:
 - Form builder developers
 autorequire: 
 bindir: exe
 cert_chain: []
-date: 2020-10-23 00:00:00.000000000 Z
+date: 2021-02-22 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: jwt
@@ -73,6 +73,7 @@ files:
 - bin/setup
 - fb-jwt-auth.gemspec
 - lib/fb/jwt/auth.rb
+- lib/fb/jwt/auth/service_access_token.rb
 - lib/fb/jwt/auth/service_token_client.rb
 - lib/fb/jwt/auth/version.rb
 homepage: https://github.com/ministryofjustice/fb-jwt-auth