fridge 0.4.5 → 1.0.1

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: f95fc7ff6e87f6f8d584736fe30f491611b63fc216e0d4453fccfa6f83d46c98
-  data.tar.gz: 02b45faa47f7bcfa6bb572247d1f331a99d254e28e6d28eb982589ebc812dcdc
+  metadata.gz: 615a5d84e21b1df893002c8a7808fb1dbfb23faf34655d117301878cd1172e51
+  data.tar.gz: d9761a131cc36eb1546be33140064a411f54b4fb17aeae438cd9cdeab9a0cfa5
 SHA512:
-  metadata.gz: 1fd27cadc2aadbf83e25d3b6215d504123438f401a36e614ed2c6734476cf53acb78f2d8a9d1957bffeecec071202ddca4f4ce746c319a4fcdc14ec771763ab7
-  data.tar.gz: 00ade0f6d5133df541f4859904cc76951407d058d90c93ddb7b4e8f4925848242c6d86c6e91fca9bb0efbc0438b93c5e211f8f85273cf5e4a0259c0d5eb161f7
+  metadata.gz: e0ea762ece944f13df6461cf41f82f51733396ea627805d34eed0487a870b08b34a2cc214574b113bde377eb3c08b4cb4ceaf3895cb0844008348492499824d1
+  data.tar.gz: 92f7c1cbc303cf43926f34fd0c82e44b631ac61685e80924e51822ebaeb6f5005e837cc6a663e486aae546a763999fdc2444322185e8809252657a79e9240f38

data/.github/CODEOWNERS

@@ -1 +1,2 @@
-*   @dawenster
+*   @aguilinger
+*   @neurosnap

data/.github/workflows/release.yml

@@ -0,0 +1,26 @@
+on:
+  release:
+    types: [published]
+
+jobs:
+  push:
+    name: Push gem to RubyGems.org
+    runs-on: ubuntu-latest
+
+    permissions: 
+        id-token: write
+        contents: write
+
+    steps:
+      - uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8
+        with:
+          persist-credentials: false
+      - name: Set up Ruby
+        uses: ruby/setup-ruby@211ffaaa5f8dda97e9e8bca4e70d0fbaf2f8c41c
+        with:
+          bundler-cache: false
+          ruby-version: "3.3"
+
+      - run: bundle install
+
+      - uses: rubygems/release-gem@1c162a739e8b4cb21a676e97b087e8268d8fc40b

data/.github/workflows/test.yml

@@ -0,0 +1,48 @@
+name: Tests
+
+on:
+  pull_request:
+    branches:
+      - main
+      - master
+  push:
+    branches:
+      - main
+      - master
+
+jobs:
+
+  test:
+    name: Test
+    runs-on: ubuntu-24.04
+    strategy:
+      fail-fast: false
+      matrix:
+        RUBY_VERSION: ["2.5", "2.6", "3.1"]
+
+    steps:
+      - name: Check out code
+        uses: actions/checkout@v4
+
+      - name: Install Ruby ${{ matrix.RUBY_VERSION }}
+        uses: ruby/setup-ruby@v1
+        with:
+          ruby-version: ${{ matrix.RUBY_VERSION }}
+          bundler-cache: true
+
+      - name: Run Tests
+        run: bundle exec rake
+
+  results:
+    if: ${{ always() }}
+    runs-on: ubuntu-latest
+    name: Final Results
+    needs: [test]
+    steps:
+      - run: exit 1
+        # see https://stackoverflow.com/a/67532120/4907315
+        if: >-
+          ${{
+               contains(needs.*.result, 'failure')
+            || contains(needs.*.result, 'cancelled')
+          }}

data/SECURITY.md

@@ -0,0 +1,23 @@
+# Aptible Open Source Security Policies and Procedures
+
+This document outlines security procedures and general policies for the Aptible open source projects as found on https://github.com/aptible.
+
+  * [Reporting a Vulnerability](#reporting-a-vulnerability)
+  * [Responsible Disclosure Policy](#responsible-disclosure-policy)
+
+## Reporting a Vulnerability 
+
+The Aptible team and community take all security vulnerabilities
+seriously. Thank you for improving the security of our open source software. We appreciate your efforts and responsible disclosure and will make every effort to acknowledge your contributions.
+
+Report security vulnerabilities by emailing the Aptible security team at:
+    
+    security@aptible.com
+
+Security researchers can also privately report security vulnerabilities to repository maintainers using the GitHub "Report a Vulnerability" feature. [See how-to here](https://docs.github.com/en/code-security/security-advisories/guidance-on-reporting-and-writing/privately-reporting-a-security-vulnerability#privately-reporting-a-security-vulnerability).
+
+The Aptible team will acknowledge your email within 24 business hours and send a detailed response within 48 business hours indicating the next steps in handling your report. The Aptible security team will keep you informed of the progress and may ask for additional information or guidance.
+
+## Responsible Disclosure Policy
+
+Please see Aptible's Responsible Disclosure Policy here: https://www.aptible.com/legal/responsible-disclosure/

data/fridge.gemspec

@@ -21,7 +21,7 @@ Gem::Specification.new do |spec|
   spec.require_paths = ['lib']
 
   spec.add_dependency 'gem_config'
-  spec.add_dependency 'jwt', '~> 1.5.6'
+  spec.add_dependency 'jwt', '~> 2.3.0'
 
   spec.add_development_dependency 'aptible-tasks'
   spec.add_development_dependency 'pry'

data/lib/fridge/version.rb

@@ -1,3 +1,3 @@
 module Fridge
-  VERSION = '0.4.5'.freeze
+  VERSION = '1.0.1'.freeze
 end

data/spec/fridge/access_token_spec.rb

@@ -79,21 +79,22 @@ describe Fridge::AccessToken do
     end
 
     it 'should be verifiable with the application public key' do
-      expect { JWT.decode(subject.serialize, public_key) }.not_to raise_error
+      expect { JWT.decode(subject.serialize, public_key, true, algorithm: 'RS512') }
+        .not_to raise_error
     end
 
     it 'should be tamper-resistant' do
       header, _, signature = subject.serialize.split('.')
-      tampered_claim = JWT.base64url_encode({ foo: 'bar' }.to_json)
+      tampered_claim = JWT::Base64.url_encode({ foo: 'bar' }.to_json)
       tampered_token = [header, tampered_claim, signature].join('.')
 
       expect do
-        JWT.decode(tampered_token, public_key)
+        JWT.decode(tampered_token, public_key, true, algorithm: 'RS512')
       end.to raise_error JWT::DecodeError
     end
 
     it 'should represent :exp in seconds since the epoch' do
-      hash, = JWT.decode(subject.serialize, public_key)
+      hash, = JWT.decode(subject.serialize, public_key, true, algorithm: 'RS512')
       expect(hash['exp']).to be_a Integer
     end
 
@@ -133,7 +134,7 @@ describe Fridge::AccessToken do
       # test that, although eventually we'll want to see symbols back.
       actor_s = { 'sub' => 'foo', 'username' => 'test',
                   'act' => { 'sub' => 'bar' } }
-      hash, = JWT.decode(subject.serialize, public_key)
+      hash, = JWT.decode(subject.serialize, public_key, true, algorithm: 'RS512')
       expect(hash['act']).to eq(actor_s)
 
       # Now, check that we properly get symbols back

data/spec/spec_helper.rb

@@ -1,6 +1,7 @@
 $LOAD_PATH.unshift(File.join(File.dirname(__FILE__), '..', 'lib'))
 $LOAD_PATH.unshift(File.dirname(__FILE__))
 
+require 'logger'
 require 'active_support/all'
 require 'action_controller'
 require 'action_dispatch'

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: fridge
 version: !ruby/object:Gem::Version
-  version: 0.4.5
+  version: 1.0.1
 platform: ruby
 authors:
 - Frank Macreery
 autorequire:
 bindir: bin
 cert_chain: []
-date: 2022-11-30 00:00:00.000000000 Z
+date: 2025-12-29 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: gem_config
@@ -30,14 +30,14 @@ dependencies:
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: 1.5.6
+        version: 2.3.0
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: 1.5.6
+        version: 2.3.0
 - !ruby/object:Gem::Dependency
   name: aptible-tasks
   requirement: !ruby/object:Gem::Requirement
@@ -130,13 +130,15 @@ extensions: []
 extra_rdoc_files: []
 files:
 - ".github/CODEOWNERS"
+- ".github/workflows/release.yml"
+- ".github/workflows/test.yml"
 - ".gitignore"
 - ".rspec"
-- ".travis.yml"
 - Gemfile
 - LICENSE.md
 - README.md
 - Rakefile
+- SECURITY.md
 - fridge.gemspec
 - lib/fridge.rb
 - lib/fridge/access_token.rb
@@ -169,7 +171,7 @@ required_rubygems_version: !ruby/object:Gem::Requirement
     - !ruby/object:Gem::Version
       version: '0'
 requirements: []
-rubygems_version: 3.0.3.1
+rubygems_version: 3.5.22
 signing_key:
 specification_version: 4
 summary: Token validation for distributed resource servers

data/.travis.yml

@@ -1,6 +0,0 @@
-sudo: false
-rvm:
-  - 2.2
-  - 2.5
-  - 2.6
-  - 3.1