json_web_token 0.2.1 → 0.2.2

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA1:
-  metadata.gz: 85fab1d0b61ff35a7c47e3411003750aea5ff5f0
-  data.tar.gz: b143541e7d1e7ce670862e3e5be132fef4dcc507
+  metadata.gz: 59b01a64cc639bdaeeac72c076ba017f0f587d96
+  data.tar.gz: 1d751ccca27d4693dedc63fb45c4ed7139a66abf
 SHA512:
-  metadata.gz: 3a7f1e6c56f7e8b8aefdf85888ba94680b6b4c6506d3e2309941ff61872fe6f4547028e30cac7f96a631397910609c29b85d48bd23c0c55960e357a391a02554
-  data.tar.gz: d483e04b29d45fbf7b84493df4b59e279f2f1b62ad5ae6bb16c8796bf6aa8aecd687de40159f4ea0b10cdbea7b7b05ccc9dfe20d966e7b688d96efbf23ecbbbd
+  metadata.gz: 85411ccec175d81fa600fcb85a67d4848e87b74f4a2b724550d39da8b0c48610709a75453ceee620de4bbeb109d48c06f996288cbe9fff937a92496fb38d1d11
+  data.tar.gz: f128850d5fd8d57a325778d0d21a5ae96ace9d198670d2ae01a905061becf8d7643e848ed2aa23b905193e18875ab5316cab56ba3db341f7b5a60f16cab27fd1

data/CHANGELOG.md

@@ -1,5 +1,15 @@
 ## Changelog
 
+### v0.2.2 (2015-08-06)
+
+* enhancements
+  * RsaUtil to read keys from pem files
+
+### v0.2.1 (2015-08-03)
+
+* enhancements
+  * Rsa#validate\_message\_size
+
 ### v0.2.0 (2015-08-02)
 
 * backward incompatible changes

data/lib/json_web_token/algorithm/hmac.rb

@@ -34,7 +34,6 @@ module JsonWebToken
       #   Hmac.verify?(< binary_string >, '256', shared_key, 'signing_input')
       #   # => true
       def verify?(mac, sha_bits, shared_key, signing_input)
-        validate_key(sha_bits, shared_key)
         Util.constant_time_compare?(mac, sign(sha_bits, shared_key, signing_input))
       end
 

data/lib/json_web_token/algorithm/rsa_util.rb

@@ -0,0 +1,30 @@
+module JsonWebToken
+  module Algorithm
+    # Load encryption keys
+    module RsaUtil
+
+      module_function
+
+      # Load an RSA private key from a pem file
+      def private_key(path_to_keys, filename = 'private_key.pem')
+        decoded_key(path_to_keys, filename)
+      end
+
+      # Load an RSA public key from a pem file
+      def public_key(path_to_keys, filename = 'public_key.pem')
+        decoded_key(path_to_keys, filename)
+      end
+
+      def decoded_key(path_to_keys, filename)
+        OpenSSL::PKey::RSA.new(pem_read(path_to_keys, filename))
+      end
+
+      def pem_read(path_to_keys, filename)
+        File.read(File.join(path_to_keys, filename))
+      end
+
+      private_class_method :decoded_key,
+        :pem_read
+    end
+  end
+end

data/lib/json_web_token/version.rb

@@ -1,3 +1,3 @@
 module JsonWebToken
-  VERSION = '0.2.1'
+  VERSION = '0.2.2'
 end

data/spec/fixtures/rsa/private_key.pem

@@ -0,0 +1,27 @@
+-----BEGIN RSA PRIVATE KEY-----
+MIIEpAIBAAKCAQEAruE38DIgPqG4sJeFfXDS80BZdCoQRakRmKfkoOq26BaCerNK
+IsMV1zMCnFWh/c3ax7iWXMbIrUIixDxAjOe/smzRCaT9rL6Jz235dbYX81mdGPUA
+/PqzgwbfYnoKf9tDrUWDG0oU9WN/HJDY+1lKFW3sG29ENsLn7ezJOP8d7y1mIocg
+l94dfKKaPlM3NECPObXGbJWyPsIlYrgCBKwdH6zHfKFeDDawsagtK7MZfzVfh/bI
+JzL+84oCOUn75pXwl5JKOLaudYuHFNNGe4XCma+l0BEyfIAykIm2V5tL2zUaEPm6
+Mh8r70nEeLtEDUgbVXk6OoEVfbEksvRfEaxPUQIDAQABAoIBAE2n+R0SRTtKuSbB
+widX6HTYSGDLJPqp/wRY2a+TSrF4/WvbHbqeAp7TKf+eDxcTSGmT0EFWjFpTmfim
+AMwRRRDIPXMY7wS8f5m67iGVQMFxM8+XTF8KPJicfqnOI8du6HiS+4sstG3bRuC6
+eX/zwHAPpd7w48uldTQ0B47lyrcgJ8ZaKdA7BZRzxSojSrCmosajoOoAqRUKj9Bw
+CcDVmZOrgd0z2spNsP/h1u8tyKNc55QtY7AbhiuJ7Eo99Fob78xH7pKgZk10MqLX
+xWB0x5yKAptJ5O/cGkHwJ0CNP+/bWN4tRPJLd7q+lTDvBf40ix3UJ8xq2MItJoIo
+4ysKplkCgYEA22tUs30r8qtQwzkTnwKnnNtHQbCVNx79PbQiSVeg1OFULBJ9Q5JB
+tScgTeINvjeYvFk5yguy25dUZfpLy8tR2mziGy023LTfnPM7ldsFsoXgW+TimQhd
+xn4aizgLk4F+jmX+Ga/YJllSUBmzgHtrJxFyFgfprlCWY8Oy6ayQvLMCgYEAzAj4
+nPjf0tIU+HLVQNxzq+6EaJIdsaF4VNtuc5RUyIpN7ptnm+Qp1sZgMTFuZY/NGUJd
+JUHF2598P7izf8k1U55CzHt9WR3gXADiDgubWXKJC9aO67RXQPfUX0f8g0MBpRyr
+aMb1P3vEeEN6Mz2+rpxRQ+VMZHm03WgXfKTeDesCgYBw13nv9OetHT2jqK7Wj97z
+ZDH5Ln8OoflKymD3pwEnedp37+pL3eO87ipG44J92MnL03dM2UdadzEIYPiqDh5C
+XszJfS9BwiNd7BkwsDr13LPNjqCaYxsXAbNU9bW+XlJfmURcoXpf/n++gfk2kkJB
+DU/G1Lrw0rEFDZftZLnq0QKBgQC4vsLF939K+Bgu4mN/6F0AZ+cSfINQjKFVTJ8V
+HlEqiDiKfcJx4EWWCGefA2Avq+aNIY8Pph+OfjlVxVsasMiNXzaiyoo0QB4fkFkf
+WJkgg9ndkzgz6kY7OGvenmLhQ7HgnDYEmGoGQn4iWw7yCM14c2gN7zidnaoL9C2Y
+GfxKYwKBgQCvOp4mlfL176dKrCjOxVFqnpXMCS3WqTWk5e+uR6GKcs6SvEfue0X0
+B/SVRn6tyKqLp9pvM+0fEaXrspZmgoedmiPY3V7Am5bdMOltW5DMvxAAdnqjok1i
+q2O8Of/DTt2bn3nu8IZDeHrKebx8z/CG9rQK4x5fT1HcwAgroYG0bQ==
+-----END RSA PRIVATE KEY-----

data/spec/fixtures/rsa/private_key_weak.pem

@@ -0,0 +1,27 @@
+-----BEGIN RSA PRIVATE KEY-----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+-----END RSA PRIVATE KEY-----

data/spec/fixtures/rsa/public_key.pem

@@ -0,0 +1,9 @@
+-----BEGIN PUBLIC KEY-----
+MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAruE38DIgPqG4sJeFfXDS
+80BZdCoQRakRmKfkoOq26BaCerNKIsMV1zMCnFWh/c3ax7iWXMbIrUIixDxAjOe/
+smzRCaT9rL6Jz235dbYX81mdGPUA/PqzgwbfYnoKf9tDrUWDG0oU9WN/HJDY+1lK
+FW3sG29ENsLn7ezJOP8d7y1mIocgl94dfKKaPlM3NECPObXGbJWyPsIlYrgCBKwd
+H6zHfKFeDDawsagtK7MZfzVfh/bIJzL+84oCOUn75pXwl5JKOLaudYuHFNNGe4XC
+ma+l0BEyfIAykIm2V5tL2zUaEPm6Mh8r70nEeLtEDUgbVXk6OoEVfbEksvRfEaxP
+UQIDAQAB
+-----END PUBLIC KEY-----

data/spec/fixtures/rsa/public_key_alt.pem

@@ -0,0 +1,9 @@
+-----BEGIN PUBLIC KEY-----
+MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApcDymjKwuWwyq9Zyt7EF
+epTHzyvO875ioqDoMtCNhADrjLU25vaAaCyyf035VoXl/HYaUj0tBiEvQreso98O
+eGO6cnfnu/QBvd1veyKtA8EjHFeo7NeA/RdXj6sEWtdM+QVHy6yI8YS/WAu8Ubrb
+MNeDk4dEmfvvgL9TxNAYuVlWcLuR1fEyNN4NsansHZtoBCf6lRhd6l9uvu1HZJJ/
+UrOostwH5jgnI3rWS2fB9SU7G5l9+YS7NbNGxa4kE6x72ko5WPg1U+wch94rZhxT
+XBJDipRIox83wEQEP0qH8IWC905CmnYqfZ7HMdGt7KWvg/svO/q4oRtCb5NDEDGL
+6QIDAQAB
+-----END PUBLIC KEY-----

data/spec/json_web_token/algorithm/rsa_spec.rb

@@ -1,13 +1,15 @@
 require 'json_web_token/algorithm/rsa'
+require 'json_web_token/algorithm/rsa_util'
 
 module JsonWebToken
   module Algorithm
     describe Rsa do
       let(:signing_input_0) { '{"iss":"joe","exp":1300819380,"http://example.com/is_root":true}' }
       let(:signing_input_1) { '{"iss":"mike","exp":1300819380,"http://example.com/is_root":false}' }
+      let(:path_to_keys) { 'spec/fixtures/rsa' }
       context 'detect changed signing_input or MAC' do
-        let(:private_key) { OpenSSL::PKey::RSA.generate(Rsa::KEY_BITS_MIN) }
-        let(:public_key) { private_key.public_key }
+        let(:private_key) { RsaUtil.private_key(path_to_keys) }
+        let(:public_key) { RsaUtil.public_key(path_to_keys) }
         shared_examples_for '#sign' do
           it 'does #verify?' do
             mac = Rsa.sign(sha_bits, private_key, signing_input_0)
@@ -24,7 +26,7 @@ module JsonWebToken
           it_behaves_like '#sign'
 
           describe 'changed key' do
-            let(:changed_public_key) { OpenSSL::PKey::RSA.generate(Rsa::KEY_BITS_MIN).public_key }
+            let(:changed_public_key) { RsaUtil.public_key(path_to_keys, 'public_key_alt.pem') }
             it 'fails to #verify?' do
               mac = Rsa.sign(sha_bits, private_key, signing_input_0)
               expect(Rsa.verify? mac, sha_bits, public_key, signing_input_0).to be true
@@ -52,8 +54,8 @@ module JsonWebToken
           end
         end
 
-        context 'private_key bit size (2047) < KEY_BITS_MIN (2048)' do
-          let(:private_key) { OpenSSL::PKey::RSA.generate(Rsa::KEY_BITS_MIN - 1) }
+        context 'private_key bit size < KEY_BITS_MIN (2048)' do
+          let(:private_key) { RsaUtil.private_key(path_to_keys, 'private_key_weak.pem') }
           describe 'w 256 sha_bits' do
             let(:sha_bits) { '256' }
             it_behaves_like 'invalid private_key'
@@ -78,7 +80,7 @@ module JsonWebToken
         end
 
         context 'private_key bits (2048) == KEY_BITS_MIN (2048)' do
-          let(:private_key) { OpenSSL::PKey::RSA.generate(Rsa::KEY_BITS_MIN) }
+          let(:private_key) { RsaUtil.private_key(path_to_keys) }
           describe 'w 256 sha_bits' do
             let(:sha_bits) { '256' }
             it_behaves_like '2048 bit private_key'

data/spec/json_web_token/jwa_spec.rb

@@ -1,7 +1,11 @@
+require 'json_web_token/algorithm/rsa_util'
 require 'json_web_token/jwa'
 require 'support/ecdsa_key'
 
 module JsonWebToken
+
+  RsaUtil = JsonWebToken::Algorithm::RsaUtil
+
   describe Jwa do
     let(:signing_input) { '{"iss":"joe","exp":1300819380,"http://example.com/is_root":true}' }
     shared_examples_for 'w #verify?' do
@@ -24,8 +28,9 @@ module JsonWebToken
 
       describe 'RS256' do
         let(:algorithm) { 'RS256' }
-        let(:signing_key) { OpenSSL::PKey::RSA.generate(2048) }
-        let(:verifying_key) { signing_key.public_key }
+        let(:path_to_keys) { 'spec/fixtures/rsa' }
+        let(:signing_key) { RsaUtil.private_key(path_to_keys) }
+        let(:verifying_key) { RsaUtil.public_key(path_to_keys) }
         it_behaves_like 'w #verify?'
 
         it 'returns a 256-byte MAC' do

data/spec/json_web_token/jws_spec.rb

@@ -49,18 +49,6 @@ module JsonWebToken
           end
         end
 
-        context 'w RS256 keys' do
-          let(:signing_key) { OpenSSL::PKey::RSA.generate(2048) }
-          let(:verifying_key) { signing_key.public_key }
-          context "w RS256 'alg' header parameter" do
-            let(:header) { {alg: 'RS256'} }
-            describe 'w passing a matching algorithm to #verify' do
-              let(:algorithm) { 'RS256' }
-              it_behaves_like 'does #verify'
-            end
-          end
-        end
-
         context "w ES256 'alg' header parameter" do
           let(:header) { {alg: 'ES256'} }
           describe 'w passing a matching algorithm to #verify' do

data/spec/json_web_token/jwt_spec.rb

@@ -76,21 +76,6 @@ module JsonWebToken
           end
         end
 
-        context 'w RS256 keys' do
-          let(:signing_key) { OpenSSL::PKey::RSA.generate(2048) }
-          let(:verifying_key) { signing_key.public_key }
-          let(:verify_options) { {alg: 'RS256', key: verifying_key} }
-          describe 'passing matching options' do
-            let(:sign_options) { {alg: 'RS256', key: signing_key} }
-            it_behaves_like 'does #verify'
-
-            it 'plausible' do
-              jwt = Jwt.sign(claims, sign_options)
-              expect(plausible_message_signature? jwt, 256).to be true
-            end
-          end
-        end
-
         context "w ES256 'alg' header parameter" do
           let(:algorithm) { 'ES256' }
           describe 'w passing a matching algorithm to #verify' do

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: json_web_token
 version: !ruby/object:Gem::Version
-  version: 0.2.1
+  version: 0.2.2
 platform: ruby
 authors:
 - Gary Fleshman
 autorequire: 
 bindir: bin
 cert_chain: []
-date: 2015-08-03 00:00:00.000000000 Z
+date: 2015-08-06 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: json
@@ -63,6 +63,7 @@ files:
 - lib/json_web_token/algorithm/ecdsa.rb
 - lib/json_web_token/algorithm/hmac.rb
 - lib/json_web_token/algorithm/rsa.rb
+- lib/json_web_token/algorithm/rsa_util.rb
 - lib/json_web_token/format/asn1.rb
 - lib/json_web_token/format/base64_url.rb
 - lib/json_web_token/jwa.rb
@@ -70,6 +71,10 @@ files:
 - lib/json_web_token/jwt.rb
 - lib/json_web_token/util.rb
 - lib/json_web_token/version.rb
+- spec/fixtures/rsa/private_key.pem
+- spec/fixtures/rsa/private_key_weak.pem
+- spec/fixtures/rsa/public_key.pem
+- spec/fixtures/rsa/public_key_alt.pem
 - spec/json_web_token/algorithm/ecdsa_spec.rb
 - spec/json_web_token/algorithm/hmac_spec.rb
 - spec/json_web_token/algorithm/rsa_spec.rb