json-jwt 1.16.1 → 1.16.2

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
checksums.yaml CHANGED
@@ -1,7 +1,7 @@
1
1
  ---
2
2
  SHA256:
3
- metadata.gz: '0593ae4268dde10889b1e4272e01d7c95f2fdb2c69b365b81b67837b66d30531'
4
- data.tar.gz: 27badbcb85bf47a663eed76b859cf0c7d502a0bb683a8f10ce9d8e3539a9149c
3
+ metadata.gz: 943e11e9656a90f2d3557da3a0c227453b1e110e06d01bf6e1935deebc8bd44c
4
+ data.tar.gz: 0645022a7f9972fbfcf82afe24f209e62c168f57d4e2d6128adcfd00309bdf80
5
5
  SHA512:
6
- metadata.gz: aa6a607b44857bddb3f1f489c60cea213eaef6c4ab3481ffb3b665b21c4088bc7e12724bda2ca6c66d55cc2032cc392f85d08cabc6e774f5e8cb13bd62ec695d
7
- data.tar.gz: c75bd449bb1e6d746e456ea2c58582cfff85a4d285f30d53e4b724f7904d13f626f84899034dffccdf4e9c41db0721b1573d968c45d2c123b1fb1e42e1379f8b
6
+ metadata.gz: d70e5a720c705ec1bb82d0c334dc15f78b2346c91932eb3ff67a454dd17b17cbcbaecebe3a3f5f4b0254dfdad9ef89df3c0e567f9efdda1c638daaf86fc25ecd
7
+ data.tar.gz: 29f755168b6be56c8d32d8ef4c9339129d6ad8ce5710a3b1e76e2f3da87714031660370f8728a044ca760f1a4ad23425d94c0fe2f6a671b837ea1d636fa14f82
@@ -13,12 +13,11 @@ jobs:
13
13
  spec:
14
14
  strategy:
15
15
  matrix:
16
- os: ['ubuntu-20.04']
17
- ruby-version: ['2.6', '2.7', '3.0', '3.1']
18
- # ubuntu 22.04 only supports ssl 3 and thus only ruby 3.1
16
+ os: ['ubuntu-20.04', 'ubuntu-22.04']
17
+ ruby-version: ['3.1', '3.2']
19
18
  include:
20
- - os: 'ubuntu-22.04'
21
- ruby-version: '3.1'
19
+ - os: 'ubuntu-20.04'
20
+ ruby-version: '3.0'
22
21
  runs-on: ${{ matrix.os }}
23
22
 
24
23
  steps:
data/CHANGELOG.md CHANGED
@@ -2,6 +2,12 @@
2
2
 
3
3
  ## [1.16.0] - 2022-10-08
4
4
 
5
+ ### Fixed
6
+
7
+ - Remove padding oracle by @btoews in https://github.com/nov/json-jwt/pull/109
8
+
9
+ ## [1.16.0] - 2022-10-08
10
+
5
11
  ### Added
6
12
 
7
13
  - start recording CHANGELOG
data/VERSION CHANGED
@@ -1 +1 @@
1
- 1.16.1
1
+ 1.16.2
@@ -6,6 +6,8 @@ module JSON
6
6
  def fetch(cache_key, options = {})
7
7
  yield
8
8
  end
9
+
10
+ def delete(cache_key, options = {}); end
9
11
  end
10
12
 
11
13
  def self.logger
@@ -72,7 +74,12 @@ module JSON
72
74
  )
73
75
 
74
76
  if auto_detect
75
- jwks[kid] or raise KidNotFound
77
+ if jwks[kid]
78
+ jwks[kid]
79
+ else
80
+ cache.delete(cache_key)
81
+ raise KidNotFound
82
+ end
76
83
  else
77
84
  jwks
78
85
  end
metadata CHANGED
@@ -1,14 +1,14 @@
1
1
  --- !ruby/object:Gem::Specification
2
2
  name: json-jwt
3
3
  version: !ruby/object:Gem::Version
4
- version: 1.16.1
4
+ version: 1.16.2
5
5
  platform: ruby
6
6
  authors:
7
7
  - nov matake
8
8
  autorequire:
9
9
  bindir: bin
10
10
  cert_chain: []
11
- date: 2022-10-20 00:00:00.000000000 Z
11
+ date: 2023-01-23 00:00:00.000000000 Z
12
12
  dependencies:
13
13
  - !ruby/object:Gem::Dependency
14
14
  name: activesupport
@@ -197,7 +197,7 @@ required_rubygems_version: !ruby/object:Gem::Requirement
197
197
  - !ruby/object:Gem::Version
198
198
  version: '0'
199
199
  requirements: []
200
- rubygems_version: 3.3.7
200
+ rubygems_version: 3.3.26
201
201
  signing_key:
202
202
  specification_version: 4
203
203
  summary: JSON Web Token and its family (JSON Web Signature, JSON Web Encryption and