jwt-authorizer 2.0.0 → 2.0.1

checksums.yaml

@@ -1,7 +1,7 @@
 ---
-SHA256:
-  metadata.gz: c254092f30d5fb5f9d152e33ae49e915eb102cb831258ba231312e9204d36f24
-  data.tar.gz: 4ac378bd9ece18fc5cfd4243415b0e820d2c82a48180da5b012120499c60346d
+SHA1:
+  metadata.gz: da278a5363a0e712c081dfd198e3c8d362a27517
+  data.tar.gz: 776cdc715d65c216e2a0e304b819100057eb23bc
 SHA512:
-  metadata.gz: '05694a5caddeef86498257f5768d4f57be2ccc6a41e638c93a5ec8ec7bc202a2d5ba7fa940e326ccaf360f9758f28bfa037d5ed402c820e6ec24c872cca71197'
-  data.tar.gz: f7689a3b2c287c79e2294eacbbd39a6dcb245272853065b0f3c3264b2d6105dc60cc4849005b7be488cce95cd5658683835d4126f8434131eee12f31a91d692b
+  metadata.gz: a6ece519741eae0ef0553e7bda0e893d29e06b88e719925273fc44e047346bb19ce2045d403e550ab21acc07cd24cc8a92d31932748b4181e368431813131490
+  data.tar.gz: a645a4f334fdf3d72b6e877af6660c818dc159b376859d712779cfec2dbf7e0f4c6da900d2d4a1f49140cd5d88ecbaea7db4e1355c3ab2bbc0bd6e606daf5610

data/CHANGELOG.md

@@ -1,5 +1,11 @@
+## 2.0.1
+
+- Improved error when token configuration is missing private key while signing
+- Allowed empty verifier during claim definition
+
 ## 2.0.0
-- Change the way public and private keys are configured, allowing checking JWT signatures against multiple public keys in RSA and ECDSA strategies
+
+- Changed the way public and private keys are configured, allowing checking JWT signatures against multiple public keys in RSA and ECDSA strategies
 
 ## 1.0.0
 

data/Gemfile.lock

@@ -1,7 +1,7 @@
 PATH
   remote: .
   specs:
-    jwt-authorizer (2.0.0)
+    jwt-authorizer (2.0.1)
       jwt (~> 2.1)
 
 GEM
@@ -14,39 +14,39 @@ GEM
     jaro_winkler (1.5.1)
     json (2.1.0)
     jwt (2.1.0)
-    method_source (0.9.0)
+    method_source (0.9.2)
     parallel (1.12.1)
-    parser (2.5.1.0)
+    parser (2.5.3.0)
       ast (~> 2.4.0)
     powerpack (0.1.2)
-    pry (0.11.3)
+    pry (0.12.0)
       coderay (~> 1.1.0)
       method_source (~> 0.9.0)
-    rack (2.0.5)
+    rack (2.0.6)
     rainbow (3.0.0)
     rake (12.3.1)
-    rspec (3.7.0)
-      rspec-core (~> 3.7.0)
-      rspec-expectations (~> 3.7.0)
-      rspec-mocks (~> 3.7.0)
-    rspec-core (3.7.1)
-      rspec-support (~> 3.7.0)
-    rspec-expectations (3.7.0)
+    rspec (3.8.0)
+      rspec-core (~> 3.8.0)
+      rspec-expectations (~> 3.8.0)
+      rspec-mocks (~> 3.8.0)
+    rspec-core (3.8.0)
+      rspec-support (~> 3.8.0)
+    rspec-expectations (3.8.2)
       diff-lcs (>= 1.2.0, < 2.0)
-      rspec-support (~> 3.7.0)
-    rspec-mocks (3.7.0)
+      rspec-support (~> 3.8.0)
+    rspec-mocks (3.8.0)
       diff-lcs (>= 1.2.0, < 2.0)
-      rspec-support (~> 3.7.0)
-    rspec-support (3.7.1)
-    rubocop (0.57.2)
+      rspec-support (~> 3.8.0)
+    rspec-support (3.8.0)
+    rubocop (0.60.0)
       jaro_winkler (~> 1.5.1)
       parallel (~> 1.10)
-      parser (>= 2.5)
+      parser (>= 2.5, != 2.5.1.1)
       powerpack (~> 0.1)
       rainbow (>= 2.2.2, < 4.0)
       ruby-progressbar (~> 1.7)
-      unicode-display_width (~> 1.0, >= 1.0.1)
-    ruby-progressbar (1.9.0)
+      unicode-display_width (~> 1.4.0)
+    ruby-progressbar (1.10.0)
     simplecov (0.16.1)
       docile (~> 1.1)
       json (>= 1.8, < 3)
@@ -70,4 +70,4 @@ DEPENDENCIES
   timecop (~> 0.9)
 
 BUNDLED WITH
-   1.16.1
+   1.17.1

data/bin/console

@@ -8,7 +8,7 @@ require "jwt/authorizer"
 # with your gem easier. You can also use a different console, if you like.
 
 JWT::Token.configure do |config|
-  config.secret = "hmac"
+  config.hmac.key = "hmac"
 end
 
 require "pry"

data/lib/jwt/authorizer/version.rb

@@ -2,6 +2,6 @@
 
 module JWT
   module Authorizer
-    VERSION = "2.0.0"
+    VERSION = "2.0.1"
   end
 end

data/lib/jwt/token/builder.rb

@@ -2,12 +2,20 @@
 
 module JWT
   class Token
+    class MissingPrivateKey < StandardError
+      def initialize
+        super("Private key required for signing tokens is missing!")
+      end
+    end
+
     module Builder
       def initialize(claims = {})
         claims.each { |claim, value| send("#{claim}=", value) }
       end
 
       def to_jwt
+        raise MissingPrivateKey unless private_key
+
         JWT.encode claims.compact, private_key, algorithm
       end; alias to_s to_jwt
     end

data/lib/jwt/token/claim.rb

@@ -24,8 +24,9 @@ module JWT
       def verify(token, context = nil)
         value = token.send(name)
 
-        raise(MissingClaim, key)      if required && value.nil?
-        verifier.call(value, context) if value
+        raise(MissingClaim, key) if required && value.nil?
+
+        verifier.call(value, context) if value && verifier
       end
     end
   end

data/lib/jwt/token/configuration.rb

@@ -73,6 +73,7 @@ module JWT
 
       def assert_algorithm_valid(algorithm)
         return if ALGORITHMS.key?(algorithm.to_s)
+
         raise ArgumentError, "Unknown algorithm: #{algorithm}. Should be one of: #{ALGORITHMS.keys.join(', ')}"
       end
     end

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: jwt-authorizer
 version: !ruby/object:Gem::Version
-  version: 2.0.0
+  version: 2.0.1
 platform: ruby
 authors:
 - Michał Begejowicz
 autorequire: 
 bindir: bin
 cert_chain: []
-date: 2018-06-28 00:00:00.000000000 Z
+date: 2018-11-17 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: jwt
@@ -191,7 +191,7 @@ required_rubygems_version: !ruby/object:Gem::Requirement
       version: '0'
 requirements: []
 rubyforge_project: 
-rubygems_version: 2.7.6
+rubygems_version: 2.6.14.1
 signing_key: 
 specification_version: 4
 summary: Authorization of requests for microservices based on JWT