jwt-auth 4.1.0 → 4.2.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 1e47915c8619339d0e1250b38f8479515222cbf5e66b7528244c30959de854db
-  data.tar.gz: 60cff593393734473602826ee53b6ce3ff654bd74d1488f6a32fb2344429d330
+  metadata.gz: cb9d83836fe9d226380f942eaa215d51fb3ad36d05ea5ead0aaae1fbb270931a
+  data.tar.gz: ec4fcf71b3bea2a226e806ad26c979695fd2eaec8ee506fc078147b2145659d6
 SHA512:
-  metadata.gz: c48ba9b85c080ebe882e88f7e2b768da6bd40ad239b390d55c88de07cdfd7a6ff835c25d7fcca5b71086879c4f83427db81b5f9a32ccb9925a532b63c24dc0c2
-  data.tar.gz: 15ec6923bf0dfdf46e65f2f88435d8ceb43c99d04fca97ede1813e8033008a4f456d2ba9fd918825a3dfe9c43ca8ec522066feb8e3b7b5882c0d3e9bac536add
+  metadata.gz: d881ce27f177aa441846d4d7cd8aa9d5518e1c543caa7a5df06f31f5a6b95d4daf13d29a2e2321e767e5ed9574908859cd055fd2458c4bb9c2bd5f44576e1334
+  data.tar.gz: 5c94d698a8d3797416b8bb7a357fbccd203fca8fa82b92bf340fafd03e17783467b4ccdc646f66bf0aeef74153f384464c68ae667d440af37b7ad648adc3b9ce

data/README.md

@@ -84,7 +84,13 @@ Set callbacks on routes:
 ```ruby
 class MyController < ApplicationController
   # Authenticates user from request header
-  before_action :authenticate_user
+  # The callback raises an UnauthorizedError on missing or invalid token 
+  before_action :authenticate_user, :except => %i[create]
+  
+  # Validate token if there is a token present
+  # The callback raises an UnauthorizedError only if there is a token present, and it is invalid
+  # This prevents users from using an expired token on an unauthenticated route and getting a HTTP 2xx
+  before_action :validate_token 
   
   # Renew token and set response header
   after_action :renew_token

data/lib/jwt/auth/authentication.rb

@@ -22,6 +22,13 @@ module JWT
         raise JWT::Auth::UnauthorizedError unless jwt && jwt.valid?
       end
 
+      ##
+      # Validate a token (authenticate a request iff there is a token)
+      #
+      def validate_token
+        authenticate_user if jwt
+      end
+
       ##
       # Add JWT header to response
       #

data/lib/jwt/auth/version.rb

@@ -2,6 +2,6 @@
 
 module JWT
   module Auth
-    VERSION = '4.1.0'
+    VERSION = '4.2.0'
   end
 end

data/spec/authentication_spec.rb

@@ -92,4 +92,45 @@ RSpec.describe AuthenticationController, :type => :request do
       end
     end
   end
+
+  describe 'GET /validate' do
+    context 'activated user' do
+      it 'is accessible without token' do
+        get '/validate'
+
+        expect(response.status).to eq 204
+      end
+
+      it 'is accessible with token' do
+        get '/validate', :headers => headers
+
+        expect(response.status).to eq 204
+      end
+
+      it 'renews the token' do
+        get '/validate', :headers => headers
+
+        jwt = response.headers['Authorization'].scan(/Bearer (.*)$/).flatten.last
+        token = JWT::Auth::Token.from_token jwt
+
+        expect(token).to be_valid
+      end
+    end
+
+    context 'disabled user' do
+      let(:user) { User.new }
+
+      it 'is accessible without token' do
+        get '/validate'
+
+        expect(response.status).to eq 204
+      end
+
+      it 'is not accessible with token' do
+        get '/validate', :headers => headers
+
+        expect(response.status).to eq 401
+      end
+    end
+  end
 end

data/spec/dummy/app/controllers/authentication_controller.rb

@@ -2,14 +2,21 @@ class AuthenticationController < ApplicationController
   # Authenticates user from request header
   before_action :authenticate_user, :only => :private
 
+  # Validate token
+  before_action :validate_token, :only => :validate
+
   # Renew token and set response header
   after_action :renew_token
 
+  def public
+    head :no_content
+  end
+
   def private
     head :no_content
   end
 
-  def public
+  def validate
     head :no_content
   end
 end

data/spec/dummy/config/routes.rb

@@ -3,4 +3,5 @@ Rails.application.routes.draw do
 
   get '/public' => 'authentication#public'
   get '/private' => 'authentication#private'
+  get '/validate' => 'authentication#validate'
 end

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: jwt-auth
 version: !ruby/object:Gem::Version
-  version: 4.1.0
+  version: 4.2.0
 platform: ruby
 authors:
 - Florian Dejonckheere
 autorequire: 
 bindir: bin
 cert_chain: []
-date: 2019-01-28 00:00:00.000000000 Z
+date: 2019-02-06 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: jwt