json-jwt 1.2.3 → 1.2.4

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA1:
-  metadata.gz: 1815ea41a4fd9ae6a1d6232259a7956ba070b713
-  data.tar.gz: 2efa46ef39b82e61e5d58817cd804eb3dd50d053
+  metadata.gz: 277237d4a352434fcec5c0ba7b57c9b1a8d11995
+  data.tar.gz: efabaf69fe883f6fdfb74a57bab183476a52c7c3
 SHA512:
-  metadata.gz: a3ecc9a34475f36916f12242f2293db9d9c5a0382619bf250ef1b5aa5650ae0030cfbcc533a56ebbd63a2f43e065f27322c4dc747fee850310f6d8ecab30ce93
-  data.tar.gz: e4c2d71d75053fc1357e1d0e88b9f88e048587d11189dfdb934e24f3a74b33f7e9dec885aeb1874ffff16609e4bcae15b893efd68d5e5cf6490a90771a4dd3e3
+  metadata.gz: 28b18f91c670f47765b070ce57c0bed07d98f5120c4046e4e4dd4439412e287ce4282a0f2909612bb3a1942260d13bb0c9b36648c9913772c584f5b5b221d1b8
+  data.tar.gz: 636e0f99153f0eef1f477dc4bee7ffb7a75a6fa22e1104b83778c8a88bb19ae5a392e7d93a1c6da69573aa6c72fe2febbf18141efa88dc1d544eca41295a68de

data/README.md

@@ -81,42 +81,110 @@ jwt_string = "jwt_header.jwt_claims.jwt_signature"
 JSON::JWT.decode(jwt_string, key)
 ```
 
+Supported `key` are
+* `String`
+* `OpenSSL::PKey::RSA`
+* `OpenSSL::PKey::EC`
+* `JSON::JWK`
+* `JSON::JWK::Set` # NOTE: proper `JSON::JWK` in the set will be selected by `kid` in the header.
+* `:skip_verification` # NOTE: skip signature verification
+
 ### JWK
 
+`JSON::JWK.new` accepts these instances as key inputs
+* `String` # NOTE: for shared key (kty=oct)
+* `OpenSSL::PKey::RSA`
+* `OpenSSL::PKey::EC`
+* `JSON::JWK`
+* `Hash`
+
+This gem also defines
+* `OpenSSL::PKey::RSA#to_jwk`
+* `OpenSSL::PKey::EC#to_jwk`
+
 #### RSA
 
 ```ruby
 k = OpenSSL::PKey::RSA.new(2048)
-p k.to_jwk
-# => JSON::JWK
+
+k.to_jwk # NOTE: same with `JSON::JWK.new(k)`
+# => JSON::JWK (private key)
+
+k.public_key.to_jwk
+# => JSON::JWK (public key)
+```
+
+```ruby
+jwk = JSON::JWK.new(
+  kty: "RSA",
+  e: "AQAB",
+  n: "0OIOijENzP0AXnxP-X8Dnazt3m4NTamfNsSCkH4xzgZAJj2Eur9-zmq9IukwN37lIrm3oAE6lL4ytNkv-DQpAivKLE8bh4c9qlB9o32VWyg-mg-2af-JlfGXYoaCW2GDMOV6EKqHBxE0x1EI0tG4gcNwO6A_kYtK6_ACgTQudWz_gnPrL-QCunjIMbbrK9JqgMZhgMARMQpB-j8oet2FFsEcquR5MWtBeAn7qC1AD2ya0EmzplZJP6oCka_VVuxAnyWfRGA0bzCBRIVbcGUXVNIXpRtA_4960e7AlGfMSA-ofN-vo7v0CMkA8BwpZHai9CAJ-cTCX1AVbov83LVIWw",
+  d: "BZCgNopMBdQPuHSzZMA_hmnfBHgGHrWQKlNd7x-NkCGWf-5PpPIJHNK3K0DvKetVi3FLNRYTS3ctvqeyoXgyR36HKlsJLrkpqWnvjvV_jygpUs1sXLKUJcyD7foLawfUCO90KxF_-24367967rLrqXldehkw2F3Ppy2Dw5FyU2qBqcpLeruBt6-UdMmBufzNQLisPJ67vhCTVrTNaHDDeCK2gHI3gqsnnbzOMS45VknmFOgKUp1C8GZu5BsT-AdDApEtY-DRZqnr6BxZv4-hG5OdEUA4_LCaI6JwlaAzv0Z74jpBZDC73cXWKJPgVuhARZcll5cexB2_EpgZDB6akQ",
+  p: "6GFVNgaXcW39NG-sRqKPzFtz1usfAkdCydPmfZirfHRhSh3OojX3Glbe7BI_SRSOLc2d2xw2_ZwKRlruY44aGEf4s5gD_nKgq2QS-1cA5uNAU91wRtY2rdoAuCnk2BX3WTZPnzyxkokFY0S0R_9IpJhRz72ggxYyhx0ymRUBIWc",
+  q: "5h1QX2JWLbcIT_cfrkmMoES1z06Fu88MLORYppiRDqkXl3CJFxKFtKJtDPLTf0MeTFexh81V52Ztsd8UttPInyDl9l5T0AOy8NmqHKqjI1063uy4bnHWetN7ovHftc_TOlnldAoQh9bmhZAhEyGlwa5Kros2YD2amIgDhcOmRO0"
+)
+jwk.to_key
+# => OpenSSL::PKey::RSA (private key)
 
 jwk = JSON::JWK.new(
   kty: "RSA",
   e: "AQAB",
-  n: "utwietJHu65N7kIa52bMkKgbS1CGmhKNDx3gTBEvQmQhg1BbKHfdmqapMt699T-aloeslYxeO9ItOhprnE0vG-pbDUE7Jg51gtK6kjpLFZOLNpRHJnRikyF6dav1IdJa4fSpOiEJiHk_DuFnAMI04_1H_NISn1TzEBflbyb6BSyIPkfO9433zR2-clvHdIXppq-N272vHA64Xp5hslzY91QodXo5--9iIblPVxzd9aH-aBMSkRbmlIKuz14tWhR-6RLNsWtqxWfKvgeoBLh5e9E5MrlNuRnaaLqHOMWrW1l9985eqmCD3PD4wjwINFKrU4L0fMBCHgCDAZLhbLfUJw",
-  d: "NtFBpDpwJNT7s7vc3KnBtWY7q5qSAj0S-K5REL-x1448bqNyOqr_bdEarfu-SmZAWYyvyqeFNZNxBSyfCRlzioLz9y19xqpTOu_LH_7N7CR-oKJbRSK7kGIv5Llvjl6BnuwBgTYT799x6lGhwA05KvEw3zBZmjh3ne8Etdj_W-i2LDBDUimgmVrgXWY1KvWFgh2zpptIINX2Q8UxV121bdcBIbj008Cs64m2mMpaa3ggqqNoXnYb8HnJDnYx-WIbUMHJ2-hpZAsVFNet8ZVEMt4cTKaTHY23m9Ditj-7VfFzkoiH9Yj45ewJMpcssadnAPrBgKbjTFuTdJfP8IqMoQ"
+  n: "0OIOijENzP0AXnxP-X8Dnazt3m4NTamfNsSCkH4xzgZAJj2Eur9-zmq9IukwN37lIrm3oAE6lL4ytNkv-DQpAivKLE8bh4c9qlB9o32VWyg-mg-2af-JlfGXYoaCW2GDMOV6EKqHBxE0x1EI0tG4gcNwO6A_kYtK6_ACgTQudWz_gnPrL-QCunjIMbbrK9JqgMZhgMARMQpB-j8oet2FFsEcquR5MWtBeAn7qC1AD2ya0EmzplZJP6oCka_VVuxAnyWfRGA0bzCBRIVbcGUXVNIXpRtA_4960e7AlGfMSA-ofN-vo7v0CMkA8BwpZHai9CAJ-cTCX1AVbov83LVIWw"
 )
 jwk.to_key
-# => OpenSSL::PKey::RSA
+# => OpenSSL::PKey::RSA (public key)
 ```
 
 #### EC
 
 ```ruby
-k = OpenSSL::PKey::RSA.new(2048)
+k = OpenSSL::PKey::EC.new('prime256v1').generate_key
+
+k.to_jwk
+# => JSON::JWK (private key)
+
+k.private_key = nil
 k.to_jwk
+# => JSON::JWK (public key)
+```
+
+```ruby
+jwk = JSON::JWK.new(
+  kty: "EC",
+  crv: "P-256",
+  x: "D4L5V9QocZvfuEEGfGD5YCEbIcXR-KfF7RqqZUaovJ8",
+  y: "VX0T94KUo0YkhuvT2q0MXMOTtfaIjDS4fb9ii54g4gU",
+  d: "MCOTV6Ncg7KTuGh1hTa029ZVkqdlaXaYnfLSkZjJ_uE"
+)
+jwk.to_key
+# => OpenSSL::PKey::EC (private key)
+
+jwk = JSON::JWK.new(
+  kty: "EC",
+  crv: "P-256",
+  x: "D4L5V9QocZvfuEEGfGD5YCEbIcXR-KfF7RqqZUaovJ8",
+  y: "VX0T94KUo0YkhuvT2q0MXMOTtfaIjDS4fb9ii54g4gU"
+)
+jwk.to_key
+# => OpenSSL::PKey::EC (public key)
+```
+
+#### oct
+
+NOTE: no `String#to_jwk` is defined for now.
+
+```ruby
+JSON::JWK.new 'secret'
 # => JSON::JWK
+```
 
+```ruby
 jwk = JSON::JWK.new(
-  kty: "RSA",
-  e: "AQAB",
-  n: "0OIOijENzP0AXnxP-X8Dnazt3m4NTamfNsSCkH4xzgZAJj2Eur9-zmq9IukwN37lIrm3oAE6lL4ytNkv-DQpAivKLE8bh4c9qlB9o32VWyg-mg-2af-JlfGXYoaCW2GDMOV6EKqHBxE0x1EI0tG4gcNwO6A_kYtK6_ACgTQudWz_gnPrL-QCunjIMbbrK9JqgMZhgMARMQpB-j8oet2FFsEcquR5MWtBeAn7qC1AD2ya0EmzplZJP6oCka_VVuxAnyWfRGA0bzCBRIVbcGUXVNIXpRtA_4960e7AlGfMSA-ofN-vo7v0CMkA8BwpZHai9CAJ-cTCX1AVbov83LVIWw",
-  d: "BZCgNopMBdQPuHSzZMA_hmnfBHgGHrWQKlNd7x-NkCGWf-5PpPIJHNK3K0DvKetVi3FLNRYTS3ctvqeyoXgyR36HKlsJLrkpqWnvjvV_jygpUs1sXLKUJcyD7foLawfUCO90KxF_-24367967rLrqXldehkw2F3Ppy2Dw5FyU2qBqcpLeruBt6-UdMmBufzNQLisPJ67vhCTVrTNaHDDeCK2gHI3gqsnnbzOMS45VknmFOgKUp1C8GZu5BsT-AdDApEtY-DRZqnr6BxZv4-hG5OdEUA4_LCaI6JwlaAzv0Z74jpBZDC73cXWKJPgVuhARZcll5cexB2_EpgZDB6akQ",
-  p: "6GFVNgaXcW39NG-sRqKPzFtz1usfAkdCydPmfZirfHRhSh3OojX3Glbe7BI_SRSOLc2d2xw2_ZwKRlruY44aGEf4s5gD_nKgq2QS-1cA5uNAU91wRtY2rdoAuCnk2BX3WTZPnzyxkokFY0S0R_9IpJhRz72ggxYyhx0ymRUBIWc",
-  q: "5h1QX2JWLbcIT_cfrkmMoES1z06Fu88MLORYppiRDqkXl3CJFxKFtKJtDPLTf0MeTFexh81V52Ztsd8UttPInyDl9l5T0AOy8NmqHKqjI1063uy4bnHWetN7ovHftc_TOlnldAoQh9bmhZAhEyGlwa5Kros2YD2amIgDhcOmRO0"
+  kty: "oct",
+  k: "secret"
 )
 jwk.to_key
-# => OpenSSL::PKey::EC
+# => String
 ```
 
 ## Note on Patches/Pull Requests

data/VERSION

@@ -1 +1 @@
-1.2.3
+1.2.4

data/lib/json/jwk.rb

@@ -13,6 +13,7 @@ module JSON
           k: params,
           kty: :oct
         )
+        merge! ex_params
       else
         super params
         merge! ex_params
@@ -40,11 +41,7 @@ module JSON
       when rsa?
         to_rsa_key
       when ec?
-        if RUBY_VERSION >= '2.0.0'
-          to_ec_key
-        else
-          raise UnknownAlgorithm.new('This feature requires Ruby 2.0+')
-        end
+        to_ec_key
       when oct?
         self[:k]
       else

data/lib/json/jwk/jwkizable.rb

@@ -21,13 +21,6 @@ module JSON
 
       module EC
         def to_jwk(ex_params = {})
-          # NOTE:
-          #  OpenSSL::PKey::EC instance can be both public & private key at the same time.
-          #  In such case, is it handled as public key or private key?
-          #  For now, this gem handles any OpenSSL::PKey::EC instances as public key.
-          unless public_key?
-            raise UnknownAlgorithm.new('EC private key is not supported yet')
-          end
           params = {
             kty: :EC,
             crv: curve_name,

data/lib/json/jwk/set.rb

@@ -1,6 +1,8 @@
 module JSON
   class JWK
     class Set < Array
+      class KidNotFound < JWT::Exception; end
+
       def initialize(*jwks)
         jwks = Array(jwks).flatten.collect do |jwk|
           JWK.new jwk

data/lib/json/jws.rb

@@ -129,7 +129,7 @@ module JSON
       when JSON::JWK::Set
         key.detect do |jwk|
           jwk[:kid] && jwk[:kid] == header[:kid]
-        end.try(:to_key)
+        end.try(:to_key) or raise JWK::Set::KidNotFound
       else
         key
       end

data/spec/json/jwk/jwkizable_spec.rb

@@ -1,46 +1,48 @@
 require 'spec_helper'
 
 describe JSON::JWK::JWKizable do
-  shared_examples_for :jwkizable do
-    describe '#to_jwk' do
-      it { key.to_jwk.should be_instance_of JSON::JWK }
-      it { key.to_jwk.should include *expected_attributes.collect(&:to_s) }
-    end
-  end
+  describe '#to_jwk' do
+    subject { key.to_jwk }
 
-  describe OpenSSL::PKey::RSA do
-    describe :public_key do
-      let(:key) { public_key :rsa }
-      let(:expected_attributes) { [:kty, :n, :e] }
-      it_behaves_like :jwkizable
+    shared_examples_for :jwkizable_as_public do
+      it { should be_instance_of JSON::JWK }
+      it { should include *public_key_attributes.collect(&:to_s) }
+      it { should_not include *private_key_attributes.collect(&:to_s) }
     end
 
-    describe :private_key do
-      let(:key) { private_key :rsa }
-      let(:expected_attributes) { [:kty, :n, :e, :d] }
-      it_behaves_like :jwkizable
+    shared_examples_for :jwkizable_as_private do
+      it { should be_instance_of JSON::JWK }
+      it { should include *public_key_attributes.collect(&:to_s) }
+      it { should include *private_key_attributes.collect(&:to_s) }
     end
-  end
 
-  describe OpenSSL::PKey::EC do
-    describe :public_key do
-      let(:key) { public_key :ecdsa }
-      let(:expected_attributes) { [:kty, :crv, :x, :y] }
-      it_behaves_like :jwkizable
+    describe OpenSSL::PKey::RSA do
+      let(:public_key_attributes) { [:kty, :n, :e] }
+      let(:private_key_attributes) { [:d, :p, :q] }
+
+      describe :public_key do
+        let(:key) { public_key :rsa }
+        it_behaves_like :jwkizable_as_public
+      end
+
+      describe :private_key do
+        let(:key) { private_key :rsa }
+        it_behaves_like :jwkizable_as_private
+      end
     end
 
-    describe :private_key do
-      let(:key) { private_key :ecdsa }
-      let(:expected_attributes) { [:kty, :crv, :x, :y] } # NOTE: handled as public key
-      it_behaves_like :jwkizable
-
-      context 'when public key is not contained' do
-        before { key.public_key = nil }
-        it do
-          expect do
-            key.to_jwk
-          end.to raise_error JSON::JWK::UnknownAlgorithm, 'EC private key is not supported yet'
-        end
+    describe OpenSSL::PKey::EC do
+      let(:public_key_attributes) { [:kty, :crv, :x, :y] }
+      let(:private_key_attributes) { [:d] }
+
+      describe :public_key do
+        let(:key) { public_key :ecdsa }
+        it_behaves_like :jwkizable_as_public
+      end
+
+      describe :private_key do
+        let(:key) { private_key :ecdsa }
+        it_behaves_like :jwkizable_as_private
       end
     end
   end

data/spec/json/jwk_spec.rb

@@ -72,9 +72,14 @@ describe JSON::JWK do
         it { should == '6v7pXTnQLMiQgvJlPJUdhAUSuGLzgF8C1r3ABAMFet6bc53ea-Pq4ZGbGu3RoAFsNRT1-RhTzDqtqXuLU6NOtw' }
       end
     end
+
+    describe '#to_key' do
+      it { jwk.to_key.should be_instance_of OpenSSL::PKey::RSA }
+    end
   end
 
-  context 'when ECDSA public key given' do
+  context 'when EC public key given' do
+    let(:jwk) { JSON::JWK.new public_key(:ecdsa) }
     let(:expected_coordinates) do
       {
         256 => {
@@ -91,6 +96,7 @@ describe JSON::JWK do
         }
       }
     end
+
     [256, 384, 512].each do |digest_length|
       describe "EC#{digest_length}" do
         let(:jwk) { JSON::JWK.new public_key(:ecdsa, digest_length: digest_length) }
@@ -109,49 +115,52 @@ describe JSON::JWK do
         end.to raise_error JSON::JWK::UnknownAlgorithm, 'Unknown EC Curve'
       end
     end
-  end
 
-  describe 'unknown key type' do
-    it do
-      key = OpenSSL::PKey::DSA.generate 256
-      expect do
-        JSON::JWK.new key
-      end.to raise_error JSON::JWK::UnknownAlgorithm, 'Unknown Key Type'
+    describe '#thumbprint' do
+      context 'using default hash function' do
+        subject { jwk.thumbprint }
+        it { should == '-egRpLjyZCqxBh4OOfd8JSvXwayHmNFAUNkbi8exfhc' }
+      end
+
+      context 'using SHA512 hash function' do
+        subject { jwk.thumbprint :SHA512 }
+        it { should == 'B_yXDZJ9doudaVCj5q5vqxshvVtW2IFnz_ypvRt5O60gemkDAhO78L6YMyTWH0ZRm15cO2_laTSaNO9yZQFsvQ' }
+      end
+    end
+
+    describe '#to_key' do
+      it { jwk.to_key.should be_instance_of OpenSSL::PKey::EC }
     end
   end
 
-  describe '#thumbprint' do
-    context 'when kty=RSA' do
-      subject do
-        JSON::JWK.new(
-          kty: :RSA,
-          e: 'AQAB',
-          n: '0OIOijENzP0AXnxP-X8Dnazt3m4NTamfNsSCkH4xzgZAJj2Eur9-zmq9IukwN37lIrm3oAE6lL4ytNkv-DQpAivKLE8bh4c9qlB9o32VWyg-mg-2af-JlfGXYoaCW2GDMOV6EKqHBxE0x1EI0tG4gcNwO6A_kYtK6_ACgTQudWz_gnPrL-QCunjIMbbrK9JqgMZhgMARMQpB-j8oet2FFsEcquR5MWtBeAn7qC1AD2ya0EmzplZJP6oCka_VVuxAnyWfRGA0bzCBRIVbcGUXVNIXpRtA_4960e7AlGfMSA-ofN-vo7v0CMkA8BwpZHai9CAJ-cTCX1AVbov83LVIWw'
-        )
+  context 'when shared secret given' do
+    let(:jwk) { JSON::JWK.new 'secret' }
+    its(:kty) { jwk[:kty].should == :oct }
+    its(:x) { jwk[:k].should == 'secret' }
+
+    describe '#thumbprint' do
+      context 'using default hash function' do
+        subject { jwk.thumbprint }
+        it { should == 'XZPWsTEZFIerowAF9GHzBtq5CkAOcVvIBnkMu0IIQH0' }
       end
-      its(:thumbprint) { should == 'fFn3D1P0H7Qo1ugQ-5LM6LC63LtArbkPsbQcs2F-1yA' }
-    end
 
-    context 'when kty=EC' do
-      subject do
-        JSON::JWK.new(
-          kty: 'EC',
-          crv: 'P-256',
-          x: 'saPyrO4Lh9kh2FxrF9y1QVmZznWnRRJwpr12UHqzrVY',
-          y: 'MMz4W9zzqlrJhqr-JyrpvlnaIIyZQE6DfrgPkxMAw1M'
-        )
+      context 'using SHA512 hash function' do
+        subject { jwk.thumbprint :SHA512 }
+        it { should == 'rK7EtcEe9Xr0kryR9lNnyOTRe7Vb_BglbTBtbcVG2LzvL26_PFaMCwOtiUiXWfCK-wV8vcxjmvbcvV4ZxDE0FQ' }
       end
-      its(:thumbprint) { should == '-egRpLjyZCqxBh4OOfd8JSvXwayHmNFAUNkbi8exfhc' }
     end
 
-    context 'when kty=oct' do
-      subject do
-        JSON::JWK.new(
-          kty: 'oct',
-          k: 'secret'
-        )
-      end
-      its(:thumbprint) { should == 'XZPWsTEZFIerowAF9GHzBtq5CkAOcVvIBnkMu0IIQH0' }
+    describe '#to_key' do
+      it { jwk.to_key.should be_instance_of String }
+    end
+  end
+
+  describe 'unknown key type' do
+    it do
+      key = OpenSSL::PKey::DSA.generate 256
+      expect do
+        JSON::JWK.new key
+      end.to raise_error JSON::JWK::UnknownAlgorithm, 'Unknown Key Type'
     end
   end
 
@@ -167,30 +176,17 @@ describe JSON::JWK do
       let(:e) { 'AQAB' }
       let(:n) { 'AK8ppaAGn6N3jDic2DhDN5mI5mWzvhfL1AFZOS9q2EBM8L5sjZbYiaHeNoKillZGmEF9a9g6Z20bDnoHTuHPsx93HYkZqPumFZ8K9lLCbqKAMWw2Qgk10RgrZ-kblJotTBCeer9-tZSWO-OWFzP4gp8MpSuQOQbwTJwDgEkFIQLUK2YgzWbn1PoW8xcfbVyWhZD880ELGRW6GhRgYAl0DN_EQS8kyUa0CusYCzOOg2W3-7qjYeojyP6jiOEr-eyjC7hcUvTVoTfz84BiZv72KS3i5JS8ZNNuRp5Ce51wjoDDUoNxDLWv6Da6qMaGpKz6NTSNbvhE_KFhpp4wf5yRQD8=' }
       let(:pem) do
-        if RUBY_VERSION >= '1.9.3'
-          <<-PEM.strip_heredoc
-            -----BEGIN PUBLIC KEY-----
-            MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArymloAafo3eMOJzYOEM3
-            mYjmZbO+F8vUAVk5L2rYQEzwvmyNltiJod42gqKWVkaYQX1r2DpnbRsOegdO4c+z
-            H3cdiRmo+6YVnwr2UsJuooAxbDZCCTXRGCtn6RuUmi1MEJ56v361lJY745YXM/iC
-            nwylK5A5BvBMnAOASQUhAtQrZiDNZufU+hbzFx9tXJaFkPzzQQsZFboaFGBgCXQM
-            38RBLyTJRrQK6xgLM46DZbf7uqNh6iPI/qOI4Sv57KMLuFxS9NWhN/PzgGJm/vYp
-            LeLklLxk025GnkJ7nXCOgMNSg3EMta/oNrqoxoakrPo1NI1u+ET8oWGmnjB/nJFA
-            PwIDAQAB
-            -----END PUBLIC KEY-----
-          PEM
-        else
-          <<-PEM.strip_heredoc
-            -----BEGIN RSA PUBLIC KEY-----
-            MIIBCgKCAQEArymloAafo3eMOJzYOEM3mYjmZbO+F8vUAVk5L2rYQEzwvmyNltiJ
-            od42gqKWVkaYQX1r2DpnbRsOegdO4c+zH3cdiRmo+6YVnwr2UsJuooAxbDZCCTXR
-            GCtn6RuUmi1MEJ56v361lJY745YXM/iCnwylK5A5BvBMnAOASQUhAtQrZiDNZufU
-            +hbzFx9tXJaFkPzzQQsZFboaFGBgCXQM38RBLyTJRrQK6xgLM46DZbf7uqNh6iPI
-            /qOI4Sv57KMLuFxS9NWhN/PzgGJm/vYpLeLklLxk025GnkJ7nXCOgMNSg3EMta/o
-            NrqoxoakrPo1NI1u+ET8oWGmnjB/nJFAPwIDAQAB
-            -----END RSA PUBLIC KEY-----
-          PEM
-        end
+        <<-PEM.strip_heredoc
+          -----BEGIN PUBLIC KEY-----
+          MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArymloAafo3eMOJzYOEM3
+          mYjmZbO+F8vUAVk5L2rYQEzwvmyNltiJod42gqKWVkaYQX1r2DpnbRsOegdO4c+z
+          H3cdiRmo+6YVnwr2UsJuooAxbDZCCTXRGCtn6RuUmi1MEJ56v361lJY745YXM/iC
+          nwylK5A5BvBMnAOASQUhAtQrZiDNZufU+hbzFx9tXJaFkPzzQQsZFboaFGBgCXQM
+          38RBLyTJRrQK6xgLM46DZbf7uqNh6iPI/qOI4Sv57KMLuFxS9NWhN/PzgGJm/vYp
+          LeLklLxk025GnkJ7nXCOgMNSg3EMta/oNrqoxoakrPo1NI1u+ET8oWGmnjB/nJFA
+          PwIDAQAB
+          -----END PUBLIC KEY-----
+        PEM
       end
 
       it { should be_instance_of OpenSSL::PKey::RSA }
@@ -206,43 +202,30 @@ describe JSON::JWK do
     end
 
     context 'when ECDSA' do
-      if RUBY_VERSION >= '2.0.0'
-        [{
-          alg: 'EC',
-          crv: 'P-256',
-          kty: 'EC',
-          x: 'saPyrO4Lh9kh2FxrF9y1QVmZznWnRRJwpr12UHqzrVY',
-          y: 'MMz4W9zzqlrJhqr-JyrpvlnaIIyZQE6DfrgPkxMAw1M'
-        }, {
-          alg: 'EC',
-          crv: 'P-384',
-          kty: 'EC',
-          x: 'plzApyFnK7qzhg5XnIZbFj2hZoH2Vdl4-RFm7DnsNMG9tyqrpfq2RyjfKABbcFRt',
-          y: 'ixBzffhk3fcbmeipGLkvQBNCzeNm6QL3hOUTH6IFBzOL0Y7HsGTopNTTspLjlivb'
-        }, {
-          alg: 'EC',
-          crv: 'P-521',
-          kty: 'EC',
-          x: 'AcMCD-a0a6rnE9TvC0mOqF_DGXRg5Y3iTb4eHNwTm2kD6iujx9M_f8d_FGHr0OhpqzEn4rYPYZouGsbIPEgL0q__',
-          y: 'AULYEd8l-bV_BI289aezhSLZ1RDF2ltgDPEy9Y7YtqYa4cJcpiyzVDMpXWwBp6cjg6TXINkoVrVXZhN404ihu4I2'
-        }].each do |jwk|
-          describe jwk['crv'] do
-            it do
-              JSON::JWK.decode(jwk).should be_instance_of OpenSSL::PKey::EC
-            end
+      [{
+        alg: 'EC',
+        crv: 'P-256',
+        kty: 'EC',
+        x: 'saPyrO4Lh9kh2FxrF9y1QVmZznWnRRJwpr12UHqzrVY',
+        y: 'MMz4W9zzqlrJhqr-JyrpvlnaIIyZQE6DfrgPkxMAw1M'
+      }, {
+        alg: 'EC',
+        crv: 'P-384',
+        kty: 'EC',
+        x: 'plzApyFnK7qzhg5XnIZbFj2hZoH2Vdl4-RFm7DnsNMG9tyqrpfq2RyjfKABbcFRt',
+        y: 'ixBzffhk3fcbmeipGLkvQBNCzeNm6QL3hOUTH6IFBzOL0Y7HsGTopNTTspLjlivb'
+      }, {
+        alg: 'EC',
+        crv: 'P-521',
+        kty: 'EC',
+        x: 'AcMCD-a0a6rnE9TvC0mOqF_DGXRg5Y3iTb4eHNwTm2kD6iujx9M_f8d_FGHr0OhpqzEn4rYPYZouGsbIPEgL0q__',
+        y: 'AULYEd8l-bV_BI289aezhSLZ1RDF2ltgDPEy9Y7YtqYa4cJcpiyzVDMpXWwBp6cjg6TXINkoVrVXZhN404ihu4I2'
+      }].each do |jwk|
+        describe jwk['crv'] do
+          it do
+            JSON::JWK.decode(jwk).should be_instance_of OpenSSL::PKey::EC
           end
         end
-      else
-        it do
-          expect do
-            JSON::JWK.decode(
-              kty: :EC,
-              crv: 'P-256',
-              x: 'MKBCTNIcKUSDii11ySs3526iDZ8AiTo7Tu6KPAqv7D4',
-              y: '4Etl6SRW2YiLUrN5vfvVHuhp7x8PxltmWWlbbM4IFyM'
-            )
-          end.to raise_error JSON::JWK::UnknownAlgorithm
-        end
       end
     end
 

data/spec/json/jws_spec.rb

@@ -122,7 +122,26 @@ describe JSON::JWS do
     end
 
     context 'when JSON::JWK::Set key given' do
-      it :TODO
+      let(:alg) { :HS256 }
+      let(:kid) { 'kid' }
+      let(:jwks) do
+        jwk = JSON::JWK.new shared_secret, kid: kid
+        JSON::JWK::Set.new jwk, JSON::JWK.new('another')
+      end
+      let(:signed) { jws.sign!(jwks) }
+
+      context 'when jwk is found by given kid' do
+        before { jws.header[:kid] = kid }
+        it { should == jws.sign!('secret') }
+      end
+
+      context 'otherwise' do
+        it do
+          expect do
+            subject
+          end.to raise_error JSON::JWK::Set::KidNotFound
+        end
+      end
     end
 
     describe 'unknown algorithm' do
@@ -211,6 +230,31 @@ describe JSON::JWS do
       end
     end
 
+    context 'when JSON::JWK::Set key given' do
+      subject { JSON::JWT.decode signed.to_s, jwks }
+
+      let(:alg) { :HS256 }
+      let(:kid) { 'kid' }
+      let(:jwks) do
+        jwk = JSON::JWK.new shared_secret, kid: kid
+        JSON::JWK::Set.new jwk, JSON::JWK.new('another')
+      end
+      let(:signed) { jws.sign!(jwks) }
+
+      context 'when jwk is found by given kid' do
+        before { jws.header[:kid] = kid }
+        it { should == signed }
+      end
+
+      context 'otherwise' do
+        it do
+          expect do
+            subject
+          end.to raise_error JSON::JWK::Set::KidNotFound
+        end
+      end
+    end
+
     describe 'unknown algorithm' do
       let(:alg) { :unknown }
       it do

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: json-jwt
 version: !ruby/object:Gem::Version
-  version: 1.2.3
+  version: 1.2.4
 platform: ruby
 authors:
 - nov matake
 autorequire: 
 bindir: bin
 cert_chain: []
-date: 2015-08-13 00:00:00.000000000 Z
+date: 2015-08-14 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: multi_json