jwt-auth 3.1.1 → 4.0.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
-SHA1:
-  metadata.gz: 859222f960cc7aa8d3dac73c42196f6a2614ce7e
-  data.tar.gz: e3945d68b8f1ccb52adec74c65831ad8f2037d50
+SHA256:
+  metadata.gz: 3c956f873db709997837bf27371d2dc5f6315d072004be257a99a554f59ad67e
+  data.tar.gz: f8066ab1085f05a481d59f937c279e3a8d88a572761d36b76daed80db72b512f
 SHA512:
-  metadata.gz: b46274a784cb489f73d6c7d942afe4415fff5f0d2cae577cc1d1c98db5910abfcb6b79f081f80bb1c2efb714bc127f108df7eb549f7b6bfaacb06b11f87b80fe
-  data.tar.gz: 8f946e01493e82a624e1b9c071c06fb3e5b3afbc374e574a1a9c45926928de2071d59c1457d96dddaa4009a3c10c2ded743856461c2b6290faa772db60e7d73a
+  metadata.gz: ae88929951aaae1affd6bb29b9c6ef8392ae582ecd81b2a59bd02777798d1d2830ab266f9900d3b9b4374b61d4be18e7f1b22dffc61e046fb99cba7cba2e8043
+  data.tar.gz: 3b93f3b8b80cffc983a2baed9b3bbc296736bb1faacf0823ad78ce608e21d34faf2dfcdf5271068e0bbec1f4ca543bd31ec96dbb96327875ff24bedb24f8e4d3

data/lib/jwt/auth/token.rb

@@ -1,6 +1,6 @@
 # frozen_string_literal: true
 
-require 'active_support/core_ext/numeric/time'
+# require 'active_support/core_ext/numeric/time'
 
 require 'jwt/auth/configuration'
 
@@ -10,14 +10,14 @@ module JWT
     # In-memory representation of JWT
     #
     class Token
-      attr_accessor :expiration, :subject, :token_version
+      attr_accessor :issued_at, :subject, :token_version
 
       def valid?
         # Reload subject to prevent caching the old token_version
         subject && subject.reload
 
-        return false if subject.nil? || expiration.nil? || token_version.nil?
-        return false if Time.at(expiration).past?
+        return false if subject.nil? || issued_at.nil? || token_version.nil?
+        return false if Time.at(issued_at + lifetime.to_i).past?
         return false if token_version != subject.token_version
 
         true
@@ -26,7 +26,7 @@ module JWT
       end
 
       def renew!
-        self.expiration = nil
+        self.issued_at = nil
         self.token_version = nil
       end
 
@@ -43,7 +43,7 @@ module JWT
 
       def payload
         {
-          :exp => expiration || lifetime.from_now.to_i,
+          :iat => issued_at || Time.now.to_i,
           :sub => subject.id,
           :ver => token_version || subject.token_version
         }
@@ -56,12 +56,12 @@ module JWT
       def self.from_token(token)
         begin
           @decoded_payload = JWT.decode(token, JWT::Auth.secret).first
-        rescue JWT::ExpiredSignature, JWT::DecodeError
+        rescue JWT::DecodeError
           @decoded_payload = {}
         end
 
         token = self.new
-        token.expiration = @decoded_payload['exp']
+        token.issued_at = @decoded_payload['iat']
         token.token_version = @decoded_payload['ver']
 
         if @decoded_payload['sub']

data/lib/jwt/auth/version.rb

@@ -2,6 +2,6 @@
 
 module JWT
   module Auth
-    VERSION = '3.1.1'
+    VERSION = '4.0.0'
   end
 end

data/spec/token_spec.rb

@@ -7,9 +7,9 @@ RSpec.describe JWT::Auth::Token do
   describe 'properties' do
     let(:token) { JWT::Auth::Token.from_user user }
 
-    it 'has an expiration' do
-      expect(token).to respond_to :expiration
-      expect(token.expiration).to be_nil
+    it 'has an issued at' do
+      expect(token).to respond_to :issued_at
+      expect(token.issued_at).to be_nil
     end
 
     it 'has a subject' do
@@ -54,7 +54,7 @@ RSpec.describe JWT::Auth::Token do
     end
 
     it 'is invalid on past date' do
-      token.expiration = 1.second.ago.to_i
+      token.issued_at = (JWT::Auth.token_lifetime + 1.second).ago.to_i
 
       t = JWT::Auth::Token.from_token token.to_jwt
 
@@ -62,7 +62,7 @@ RSpec.describe JWT::Auth::Token do
     end
 
     it 'is invalid after expiry date' do
-      token.expiration = Time.now.to_i
+      token.issued_at = JWT::Auth.token_lifetime.ago.to_i
       sleep 2
 
       t = JWT::Auth::Token.from_token token.to_jwt
@@ -87,14 +87,16 @@ RSpec.describe JWT::Auth::Token do
 
       expect(new_token).to be_valid
       expect(new_jwt).not_to eq old_jwt
-      expect(new_token.expiration).not_to eq old_token.expiration
+      expect(new_token.issued_at).not_to eq old_token.issued_at
     end
   end
 
   describe 'from token' do
+    let(:issued_at) { 1.second.ago.to_i }
+
     let(:jwt) do
       payload = {
-        :exp => JWT::Auth.token_lifetime.from_now.to_i,
+        :iat => issued_at,
         :sub => user.id,
         :ver => user.token_version
       }
@@ -103,8 +105,8 @@ RSpec.describe JWT::Auth::Token do
 
     let(:token) { JWT::Auth::Token.from_token jwt }
 
-    it 'matches expiration' do
-      expect(token.expiration).to eq JWT::Auth.token_lifetime.from_now.to_i
+    it 'matches issued at' do
+      expect(token.issued_at).to eq issued_at
     end
 
     it 'matches subject' do

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: jwt-auth
 version: !ruby/object:Gem::Version
-  version: 3.1.1
+  version: 4.0.0
 platform: ruby
 authors:
 - Florian Dejonckheere
 autorequire: 
 bindir: bin
 cert_chain: []
-date: 2017-07-31 00:00:00.000000000 Z
+date: 2018-07-25 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: jwt
@@ -279,7 +279,7 @@ required_rubygems_version: !ruby/object:Gem::Requirement
       version: '0'
 requirements: []
 rubyforge_project: 
-rubygems_version: 2.6.12
+rubygems_version: 2.7.3
 signing_key: 
 specification_version: 4
 summary: JWT-based authentication for Rails API