json-jwt 1.16.4 → 1.16.6

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
checksums.yaml CHANGED
@@ -1,7 +1,7 @@
1
1
  ---
2
2
  SHA256:
3
- metadata.gz: 6b8013564b4b30c4927b62572072fa1b3ad320837edd986c0525e12b30f128c9
4
- data.tar.gz: b540e2f4622eade018e080d516a73345d88e22a3cae28b2df73f7e4dd98d0291
3
+ metadata.gz: 67d205daa24111b954cc01c6b9b68baf98c0f932a6afc02c86ca0ff766d4bdd2
4
+ data.tar.gz: e2d61533659adb4d6d99314aeb0ff7581c1806a09604d4060e0433ceadc82c47
5
5
  SHA512:
6
- metadata.gz: 4792bb934891114a6a9c48324fa65fa00bcdcc42739c4c578befd642fefaa6974ece725eafaff7377d54e6629757c7b03efeb073210f510aebc2460d4b1c2180
7
- data.tar.gz: 1ea058c659af6509bdb7f818e76058fc0645caf7c7f5943dd399f4ec7398ca843677bf2190587270246b22f298db323fa58ae99e7c94144444d04a41ba6d833a
6
+ metadata.gz: 23bfcadd5ef026d90357e2c9501783811f2e10d9a4950269024e4181a8c3b235077066bf0da00d8334159bf4d8d69ddd49754f60e1a93dcef0f4b5a9bb531118
7
+ data.tar.gz: 3b22c8b470f40c0b392a1236aad0b2921bc629e915351d41db384ad9c302926c4144be36f859b6e70242c15ca909e69535a0abeac4a3ed1f7d01f2397811796d
data/VERSION CHANGED
@@ -1 +1 @@
1
- 1.16.4
1
+ 1.16.6
data/json-jwt.gemspec CHANGED
@@ -14,6 +14,7 @@ Gem::Specification.new do |gem|
14
14
  gem.require_paths = ['lib']
15
15
  gem.required_ruby_version = '>= 2.4'
16
16
  gem.add_runtime_dependency 'activesupport', '>= 4.2'
17
+ gem.add_runtime_dependency 'base64'
17
18
  gem.add_runtime_dependency 'bindata'
18
19
  gem.add_runtime_dependency 'aes_key_wrap'
19
20
  gem.add_runtime_dependency 'faraday', '~> 2.0'
data/lib/json/jws.rb CHANGED
@@ -124,7 +124,8 @@ module JSON
124
124
  public_key_or_secret = with_jwk_support public_key_or_secret
125
125
  case
126
126
  when hmac?
127
- secure_compare sign(signature_base_string, public_key_or_secret), signature
127
+ secret = public_key_or_secret
128
+ secure_compare sign(signature_base_string, secret), signature
128
129
  when rsa?
129
130
  public_key = public_key_or_secret
130
131
  public_key.verify digest, signature, signature_base_string
data/lib/json/jwt.rb CHANGED
@@ -109,7 +109,11 @@ module JSON
109
109
  when JWS::NUM_OF_SEGMENTS
110
110
  JWS.decode_compact_serialized jwt_string, key_or_secret, algorithms, allow_blank_payload
111
111
  when JWE::NUM_OF_SEGMENTS
112
- JWE.decode_compact_serialized jwt_string, key_or_secret, algorithms, encryption_methods
112
+ if allow_blank_payload
113
+ raise InvalidFormat.new("JWE w/ blank payload is not supported.")
114
+ else
115
+ JWE.decode_compact_serialized jwt_string, key_or_secret, algorithms, encryption_methods
116
+ end
113
117
  else
114
118
  raise InvalidFormat.new("Invalid JWT Format. JWT should include #{JWS::NUM_OF_SEGMENTS} or #{JWE::NUM_OF_SEGMENTS} segments.")
115
119
  end
metadata CHANGED
@@ -1,14 +1,14 @@
1
1
  --- !ruby/object:Gem::Specification
2
2
  name: json-jwt
3
3
  version: !ruby/object:Gem::Version
4
- version: 1.16.4
4
+ version: 1.16.6
5
5
  platform: ruby
6
6
  authors:
7
7
  - nov matake
8
8
  autorequire:
9
9
  bindir: bin
10
10
  cert_chain: []
11
- date: 2023-12-27 00:00:00.000000000 Z
11
+ date: 2024-03-03 00:00:00.000000000 Z
12
12
  dependencies:
13
13
  - !ruby/object:Gem::Dependency
14
14
  name: activesupport
@@ -24,6 +24,20 @@ dependencies:
24
24
  - - ">="
25
25
  - !ruby/object:Gem::Version
26
26
  version: '4.2'
27
+ - !ruby/object:Gem::Dependency
28
+ name: base64
29
+ requirement: !ruby/object:Gem::Requirement
30
+ requirements:
31
+ - - ">="
32
+ - !ruby/object:Gem::Version
33
+ version: '0'
34
+ type: :runtime
35
+ prerelease: false
36
+ version_requirements: !ruby/object:Gem::Requirement
37
+ requirements:
38
+ - - ">="
39
+ - !ruby/object:Gem::Version
40
+ version: '0'
27
41
  - !ruby/object:Gem::Dependency
28
42
  name: bindata
29
43
  requirement: !ruby/object:Gem::Requirement
@@ -197,7 +211,7 @@ required_rubygems_version: !ruby/object:Gem::Requirement
197
211
  - !ruby/object:Gem::Version
198
212
  version: '0'
199
213
  requirements: []
200
- rubygems_version: 3.4.10
214
+ rubygems_version: 3.5.3
201
215
  signing_key:
202
216
  specification_version: 4
203
217
  summary: JSON Web Token and its family (JSON Web Signature, JSON Web Encryption and