google-id-token 1.0.0 → 1.1.0

data/README.rdoc

@@ -9,7 +9,7 @@ GoogleIDToken currently provides a single useful class "Validator", which provid
 === Examples
 
   validator = GoogleIDToken::Validator.new
-  jwt = validator.validate(token, required_audience, required_client_id)
+  jwt = validator.check(token, required_audience, required_client_id)
   if jwt
     email = jwt['email']
   else

data/lib/google-id-token.rb

@@ -52,7 +52,7 @@ module GoogleIDToken
     # @param [String] aud
     #   The required audience value
     # @param [String] cid
-    #   The optional client-id value
+    #   The optional client-id ("azp" field) value
     #
     # @return [Hash] The decoded ID token, or null
     def check(token, aud, cid = nil)
@@ -93,6 +93,15 @@ module GoogleIDToken
         begin
           public_key = cert.public_key
           @token = JWT.decode(token, public_key, !!public_key)
+
+          # in Feb 2013, the 'cid' claim became the 'azp' claim per changes
+          #  in the OIDC draft. At some future point we can go all-azp, but
+          #  this should keep everything running for a while
+          if @token['azp']
+            @token['cid'] = @token['azp']
+          elsif @token['cid']
+            @token['azp'] = @token['cid']
+          end
         rescue JWT::DecodeError
           nil # go on, try the next cert
         end

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: google-id-token
 version: !ruby/object:Gem::Version
-  version: 1.0.0
+  version: 1.1.0
   prerelease: 
 platform: ruby
 authors:
@@ -10,7 +10,7 @@ authors:
 autorequire: 
 bindir: bin
 cert_chain: []
-date: 2012-12-06 00:00:00.000000000 Z
+date: 2013-02-22 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: multi_json
@@ -120,7 +120,7 @@ required_rubygems_version: !ruby/object:Gem::Requirement
       version: '0'
 requirements: []
 rubyforge_project: 
-rubygems_version: 1.8.21
+rubygems_version: 1.8.25
 signing_key: 
 specification_version: 3
 summary: Google ID Token utilities