firebase_id_token 1.3.0 → 2.0.0
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- checksums.yaml +4 -4
- data/README.md +6 -11
- data/lib/firebase_id_token/version.rb +1 -1
- metadata +2 -2
checksums.yaml
CHANGED
@@ -1,7 +1,7 @@
|
|
1
1
|
---
|
2
2
|
SHA1:
|
3
|
-
metadata.gz:
|
4
|
-
data.tar.gz:
|
3
|
+
metadata.gz: 1e5b2468c3db9ec6664df7b3513b3a79d8c246f0
|
4
|
+
data.tar.gz: 885685d227198e9e0e2c01996a42ed895b539b85
|
5
5
|
SHA512:
|
6
|
-
metadata.gz:
|
7
|
-
data.tar.gz:
|
6
|
+
metadata.gz: 890f5b46721bff50af9333edc91922f074d23371aa8a1361e21bf0cf34111fbd03b7b58f98cbd4d8c8146a45798c65784adfc39448664b4d03a3a95390ed13f7
|
7
|
+
data.tar.gz: 651bc1ec53dc1f6b129850d1b3165cfb1ff85c5c39e3a8fd9f89b9b0d9ac72b7092611bc2a1436936f8c40fd644fb2542f067f68be1db7539579361e64c9431c
|
data/README.md
CHANGED
@@ -10,13 +10,8 @@ A Ruby gem to verify the signature of Firebase ID Tokens. It uses Redis to store
|
|
10
10
|
|
11
11
|
It also checks the JWT payload parameters as recommended [here](https://firebase.google.com/docs/auth/admin/verify-id-tokens) by Firebase official documentation.
|
12
12
|
|
13
|
-
|
14
|
-
|
15
|
-
**This gem was developed recently and needs real world feedback.**
|
16
|
-
|
17
|
-
If you are going to use it in a production environment, please note that I am still testing it. It has realistic RSpec examples that use real X509 certificates and signed JWT to perform tests and I can say it's working great. But using it implies in security risks, you should be aware.
|
18
|
-
|
19
|
-
Feel free to open any issue or to [contact me](https://fschuindt.github.io/blog/about/) regarding its performance.
|
13
|
+
Feel free to open any issue or to [contact me](https://fschuindt.github.io/blog/about/) directly.
|
14
|
+
Any contribution is welcome.
|
20
15
|
|
21
16
|
## Docs
|
22
17
|
|
@@ -34,7 +29,7 @@ gem install firebase_id_token
|
|
34
29
|
|
35
30
|
or in your Gemfile
|
36
31
|
```
|
37
|
-
gem 'firebase_id_token', '~>
|
32
|
+
gem 'firebase_id_token', '~> 2.0.0'
|
38
33
|
```
|
39
34
|
then
|
40
35
|
```
|
@@ -132,7 +127,7 @@ namespace :firebase do
|
|
132
127
|
end
|
133
128
|
|
134
129
|
desc "Request Google's x509 certificates and override Redis"
|
135
|
-
task
|
130
|
+
task force_request: :environment do
|
136
131
|
FirebaseIdToken::Certificates.request!
|
137
132
|
end
|
138
133
|
end
|
@@ -142,7 +137,7 @@ end
|
|
142
137
|
And in your `config/schedule.rb` you might have:
|
143
138
|
```ruby
|
144
139
|
every 1.hour do
|
145
|
-
rake 'firebase:certificates:
|
140
|
+
rake 'firebase:certificates:force_request'
|
146
141
|
end
|
147
142
|
```
|
148
143
|
|
@@ -153,7 +148,7 @@ $ whenever --update-crontab
|
|
153
148
|
|
154
149
|
I recommend running it once every hour or every 30 minutes, it's up to you. Normally the certificates expiration time is around 4 to 6 hours, but it's good to perform it in a small fraction of this time.
|
155
150
|
|
156
|
-
When developing
|
151
|
+
When developing, you should just run the task:
|
157
152
|
```
|
158
153
|
$ rake firebase:certificates:request
|
159
154
|
```
|
metadata
CHANGED
@@ -1,14 +1,14 @@
|
|
1
1
|
--- !ruby/object:Gem::Specification
|
2
2
|
name: firebase_id_token
|
3
3
|
version: !ruby/object:Gem::Version
|
4
|
-
version:
|
4
|
+
version: 2.0.0
|
5
5
|
platform: ruby
|
6
6
|
authors:
|
7
7
|
- Fernando Schuindt
|
8
8
|
autorequire:
|
9
9
|
bindir: exe
|
10
10
|
cert_chain: []
|
11
|
-
date: 2017-09
|
11
|
+
date: 2017-12-09 00:00:00.000000000 Z
|
12
12
|
dependencies:
|
13
13
|
- !ruby/object:Gem::Dependency
|
14
14
|
name: bundler
|