jwt-auth 4.0.0 → 4.0.1

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 3c956f873db709997837bf27371d2dc5f6315d072004be257a99a554f59ad67e
-  data.tar.gz: f8066ab1085f05a481d59f937c279e3a8d88a572761d36b76daed80db72b512f
+  metadata.gz: 350e77e8646205ed02b1db78d49c026fb117559d0a9a6678ab32d72ec2149b7c
+  data.tar.gz: 1b2083fc8e144347d541a5255422e1e3322784d3b57292f6fe2d9c064d91da62
 SHA512:
-  metadata.gz: ae88929951aaae1affd6bb29b9c6ef8392ae582ecd81b2a59bd02777798d1d2830ab266f9900d3b9b4374b61d4be18e7f1b22dffc61e046fb99cba7cba2e8043
-  data.tar.gz: 3b93f3b8b80cffc983a2baed9b3bbc296736bb1faacf0823ad78ce608e21d34faf2dfcdf5271068e0bbec1f4ca543bd31ec96dbb96327875ff24bedb24f8e4d3
+  metadata.gz: 9e3fbe6dffa6da9dbb3df74b23a2375606313ad9c6e572e8cd1a21f74f9999098e0db2a66d7b6d56984359d317dbdc6c644ff3ac3e32a8534368acb0b1f4b50b
+  data.tar.gz: 5ae2ac9c28f0a43fb3f4d14d2711a0e95821197b9397c92079e7ac6c62ce6d01600fb538b247e7f1824a38e5cee4ccfed5edf80626403779a19665495aaa157f

data/lib/jwt/auth/token.rb

@@ -18,6 +18,7 @@ module JWT
 
         return false if subject.nil? || issued_at.nil? || token_version.nil?
         return false if Time.at(issued_at + lifetime.to_i).past?
+        return false if Time.at(issued_at).future?
         return false if token_version != subject.token_version
 
         true

data/lib/jwt/auth/version.rb

@@ -2,6 +2,6 @@
 
 module JWT
   module Auth
-    VERSION = '4.0.0'
+    VERSION = '4.0.1'
   end
 end

data/spec/token_spec.rb

@@ -69,6 +69,14 @@ RSpec.describe JWT::Auth::Token do
 
       expect(t).not_to be_valid
     end
+
+    it 'is invalid on future tokens' do
+      token.issued_at = 1.year.from_now.to_i
+
+      t = JWT::Auth::Token.from_token token.to_jwt
+
+      expect(t).not_to be_valid
+    end
   end
 
   describe 'renew!' do

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: jwt-auth
 version: !ruby/object:Gem::Version
-  version: 4.0.0
+  version: 4.0.1
 platform: ruby
 authors:
 - Florian Dejonckheere
 autorequire: 
 bindir: bin
 cert_chain: []
-date: 2018-07-25 00:00:00.000000000 Z
+date: 2018-08-02 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: jwt