intuit-oauth 1.0.2 → 1.0.3

checksums.yaml

@@ -1,7 +1,7 @@
 ---
-SHA1:
-  metadata.gz: 5293770007819db3f082fc3c5ed10c146d78a509
-  data.tar.gz: d187d95f60e408e112feadb0b06b7786add13164
+SHA256:
+  metadata.gz: 12821c6352e5bf265380ac1fb09c2358a4585b1d56cf073208c170224b47d97d
+  data.tar.gz: 4e819552523026b9e155c69c1bd2b4c33399a9cb731a0a84767d1255420912c0
 SHA512:
-  metadata.gz: 814ed4d32d449787e7f36ee52c9386cf4d7d1f8e7cf4cb17a2d8db0a90663c718b30de87a2a1e0111d6155e0e581ec2721bf4c9fe7e55597931e7f18ee80d562
-  data.tar.gz: d0de03b5c6fa63366adc2c4abaab1aab54b9701e3a5c372317b858567f226106cc26d3dd5f3d9f4ebfd171173bdca69cbdbcf28f7ee213dae91b2911bb90fed2
+  metadata.gz: e466d2b4ce47decf87a91e1052e81ff8f349f63fc7a26c1e79389dbed69313917bb0ddaa6db4a2fefc92ed3a2b81d59e5d3ad2ac54fb0f80d8ca8e9c9883601b
+  data.tar.gz: 24fc28bac722206094234c152e1aa3bfa7cfe507936b5bb828f20e389b5b82d879b1f3ad6ba56a58c54e735a67d4bc6a2891bea085dfc16e6e018a51ade6a2dd

data/intuit-oauth.gemspec

@@ -17,7 +17,7 @@ Gem::Specification.new do |spec|
   spec.required_ruby_version = '>= 1.9.0'
   spec.required_rubygems_version = '>= 1.3.5'
   spec.summary       = 'A Ruby wrapper for the OAuth 2.0 protocol.'
-  spec.version       = '1.0.2'
+  spec.version       = '1.0.3'
 
   spec.require_paths = %w[lib]
   spec.bindir        = 'exe'

data/lib/intuit-oauth/flow/openid.rb

@@ -79,16 +79,16 @@ module IntuitOAuth
         # 4. check if the signature is correct
         response = IntuitOAuth::Transport.request('GET', @client.jwks_uri, nil, nil, false)
         body = response.body
-
-        keys = JSON.parse(body).fetch('keys').first
+        # loop through all the available keys in jwks_uri & find match with kid from id_token_header_json
+        keys_array = JSON.parse(body)['keys']
+        keys_array.each do |keys|
         standard_kid = keys.fetch('kid')
         kid_in_id_token = id_token_header_json.fetch('kid')
 
-        unless standard_kid.eql? kid_in_id_token
-          return false
+        return true if standard_kid.eql? kid_in_id_token
         end
 
-        return true
+        return false
 
         end
     end

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: intuit-oauth
 version: !ruby/object:Gem::Version
-  version: 1.0.2
+  version: 1.0.3
 platform: ruby
 authors:
 - Intuit Inc
-autorequire: 
+autorequire:
 bindir: exe
 cert_chain: []
-date: 2019-11-14 00:00:00.000000000 Z
+date: 2024-02-01 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: httparty
@@ -200,7 +200,7 @@ homepage: https://github.com/intuit/oauth-rubyclient
 licenses:
 - Apache-2.0
 metadata: {}
-post_install_message: 
+post_install_message:
 rdoc_options: []
 require_paths:
 - lib
@@ -215,9 +215,8 @@ required_rubygems_version: !ruby/object:Gem::Requirement
     - !ruby/object:Gem::Version
       version: 1.3.5
 requirements: []
-rubyforge_project: 
-rubygems_version: 2.5.2.3
-signing_key: 
+rubygems_version: 3.4.10
+signing_key:
 specification_version: 4
 summary: A Ruby wrapper for the OAuth 2.0 protocol.
 test_files: []