inst_access 0.4.3 → 0.4.4

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: a559457afcb20a5ef4814c6320932e837a2c40713956ca89c72dbae487e41a47
-  data.tar.gz: a075d8e49d0244b3a2a36b7246500f4bbd833cdacc954b5320e066164824a822
+  metadata.gz: d5ba1db50c0d9738f9845b2f553e2c3906c9e8bcad0bfb1fbf7d50027b5357f8
+  data.tar.gz: 226f184ea24923d9eb95a836ddb6ee7b03258eed74d070bb2686db85c8075984
 SHA512:
-  metadata.gz: d0de198d5e310d3262dbe9bb558b2fee295dba2977e50b83cfdd4cb5e54d8582f8de9d209e2c0c3d590a84456c367a40b030e574cf0ccbcd5ee99a7572a33322
-  data.tar.gz: 97d977d4b0a4f83b93702d3b71635629ba710046f23dcd71f3f7ff333c15ed5eca5263dfccd667adc2f2397fb35e95e0cc7d25482276870d2fda6d87899d3ec3
+  metadata.gz: 7ab6da2741107934b9d52f168a7d88821b850ee60850d7ab2e190531d08c4e3390822faf25f03a0619e3c311f91215315d51d0eac35e67e7d28562b2f8a690ec
+  data.tar.gz: 0c2058387c8f73dea54577a38691fc5eca384dbaf9cac6d04398fac3ebf49b2d0a239c4dc72b9fa49d5cca6953660102b155bb2e11fb0347cb76e0fb3be08fa2

data/lib/inst_access/token.rb

@@ -159,8 +159,8 @@ module InstAccess
 
       def token?(string)
         jwt = JSON::JWT.decode(string, :skip_verification)
-        issuers = InstAccess.configured? && (issuers = InstAccess.config.issuers)
-        issuers ? issuers.include?(jwt[:iss]) : jwt[:iss] == ISSUER
+        InstAccess.configured? && (issuers = InstAccess.config.issuers)
+        issuers&.include?(jwt[:iss]) || jwt[:iss] == ISSUER
       rescue StandardError
         false
       end

data/lib/inst_access/version.rb

@@ -19,5 +19,5 @@
 #
 
 module InstAccess
-  VERSION = '0.4.3'
+  VERSION = '0.4.4'
 end

data/spec/inst_access/token_spec.rb

@@ -63,6 +63,18 @@ describe InstAccess::Token do
           expect(described_class.token?(unencrypted_token)).to eq(true)
         end
       end
+
+      it 'returns true for JWTs from the default issuer when issuers are configured' do
+        token = described_class.for_user(user_uuid: 'user-uuid', account_uuid: 'acct-uuid')
+        jws = InstAccess.with_config(signing_key: signing_priv_key) do
+          token.to_unencrypted_token_string
+        end
+        jwt = JSON::JWT.decode(jws, :skip_verification)
+        expect(jwt[:iss]).to eq(InstAccess::Token::ISSUER)
+        InstAccess.with_config(signing_key: signing_priv_key, issuers: issuers) do
+          expect(described_class.token?(jws)).to eq(true)
+        end
+      end
     end
 
     it 'returns true for an expired InstAccess token' do

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: inst_access
 version: !ruby/object:Gem::Version
-  version: 0.4.3
+  version: 0.4.4
 platform: ruby
 authors:
 - Michael Ziwisky
 autorequire: 
 bindir: bin
 cert_chain: []
-date: 2024-09-05 00:00:00.000000000 Z
+date: 2024-09-19 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: activesupport