json-jwt 1.16.3 → 1.16.5

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: e15d6297f3fe38127afb9686fcf44f6718b203b15988019897901dc62ebed1ca
-  data.tar.gz: 4fa5a17b443fb0811dc1634db20b39471aca3a7475aa4181cfe2c5c2790d7f47
+  metadata.gz: 46f2aab7219bdad2e450a22e1e3ab31570af928e24c23afacf19a1a9ebe35aab
+  data.tar.gz: 419365f9ee8fb8471dd59cca70f0418fbc593b34ff651d8c58b51fdf9bd877f4
 SHA512:
-  metadata.gz: 7869a764a0700e9d016e9b3ad30952e5e34a4a2bd1b5b58b3b48887b2d7edc2836f3ec0c7ce72f3246ebda7f00cb18409e33a79953777583f347837a5445d994
-  data.tar.gz: 033e08b8548ad17468e07ea1f21bb115552a3d54163796a252d26b3e728382dc8d7a8f906555967eedb939b683880dec4603decadae7a80800cf0cc8dc082fbf
+  metadata.gz: 79b8633df8ea4ba76c2245f832711566ece8ceee80c8ed22efd23b96d420edc0adf1d7527107e5ecbb198aea0191436b7ce757e44a70415c48516fa7799b1a99
+  data.tar.gz: 74a9a5a2fb5dc618192fcf9b47801af2f258d5aaaf78457548229b081d1de5ab298b0234a42be57b1b38060af9532fdc2274b18a0532180a9bf3df7b6128ff04

data/.github/workflows/spec.yml

@@ -3,7 +3,7 @@ name: Spec
 on:
   push:
     branches:
-      - master
+      - main
   pull_request:
 
 permissions:
@@ -14,7 +14,7 @@ jobs:
     strategy:
       matrix:
         os: ['ubuntu-20.04', 'ubuntu-22.04']
-        ruby-version: ['3.1', '3.2']
+        ruby-version: ['3.1', '3.2', '3.3']
         include:
         - os: 'ubuntu-20.04'
           ruby-version: '3.0'

data/VERSION

@@ -1 +1 @@
-1.16.3
+1.16.5

data/json-jwt.gemspec

@@ -14,6 +14,7 @@ Gem::Specification.new do |gem|
   gem.require_paths = ['lib']
   gem.required_ruby_version = '>= 2.4'
   gem.add_runtime_dependency 'activesupport', '>= 4.2'
+  gem.add_runtime_dependency 'base64'
   gem.add_runtime_dependency 'bindata'
   gem.add_runtime_dependency 'aes_key_wrap'
   gem.add_runtime_dependency 'faraday', '~> 2.0'

data/lib/json/jws.rb

@@ -124,7 +124,8 @@ module JSON
       public_key_or_secret = with_jwk_support public_key_or_secret
       case
       when hmac?
-        secure_compare sign(signature_base_string, public_key_or_secret), signature
+        secret = public_key_or_secret
+        secure_compare sign(signature_base_string, secret), signature
       when rsa?
         public_key = public_key_or_secret
         public_key.verify digest, signature, signature_base_string

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: json-jwt
 version: !ruby/object:Gem::Version
-  version: 1.16.3
+  version: 1.16.5
 platform: ruby
 authors:
 - nov matake
 autorequire:
 bindir: bin
 cert_chain: []
-date: 2023-01-24 00:00:00.000000000 Z
+date: 2024-01-03 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: activesupport
@@ -24,6 +24,20 @@ dependencies:
     - - ">="
       - !ruby/object:Gem::Version
         version: '4.2'
+- !ruby/object:Gem::Dependency
+  name: base64
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: '0'
+  type: :runtime
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: '0'
 - !ruby/object:Gem::Dependency
   name: bindata
   requirement: !ruby/object:Gem::Requirement
@@ -197,7 +211,7 @@ required_rubygems_version: !ruby/object:Gem::Requirement
     - !ruby/object:Gem::Version
       version: '0'
 requirements: []
-rubygems_version: 3.3.26
+rubygems_version: 3.4.10
 signing_key:
 specification_version: 4
 summary: JSON Web Token and its family (JSON Web Signature, JSON Web Encryption and