jwt-multisig 1.0.3 → 1.0.4

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: d095a89f20add1e866e57faf102eec33c1beb507dd32c50072e48ef604b7c78f
-  data.tar.gz: 80f08cd47a66bef4c3b452a4f55a0268219b34c728bb4de831e0d965e915801f
+  metadata.gz: 5edf239b75b41453236a1d170ab81b6233ab334df41805c916ebc0c89a28a1e6
+  data.tar.gz: 3d634939c51b36d78feab51e9d71275feca0386e7f31a8927dac6085ff3c461c
 SHA512:
-  metadata.gz: 5ed78b1f8e01ca55a9f469890e76016c2752ffd298058c831f7c23eab6fd67a98f64d17bdeb110c047420cc9ed895bb61360740ef34918aaa0d90f7233e6c3ca
-  data.tar.gz: 37ded3cf1e4d2231a32a2e4dfb01531895856df5cd541bfc28a8bd409d750a5009739951f466f5145d27e04ebc0b9738561a087e0397f0605200cfdfa9696baf
+  metadata.gz: 91988aafe86882352b806addea59a6390140d2e258817507783bbf5c2addda3cdb028d821a771179568b9bbb461ac04432d1e384472f0894a45b97dc396477c2
+  data.tar.gz: 99c553c60a72d97233de4012e06a7a1a12ffb8e5f7eef1cd5fab16c801781f31d606954d84ee27440fbe1b4c61020b9f1e3d92472120c5403818dc6d36cca069

data/Gemfile.lock

@@ -1,7 +1,7 @@
 PATH
   remote: .
   specs:
-    jwt-multisig (1.0.3)
+    jwt-multisig (1.0.4)
       activesupport (>= 4.0)
       jwt (~> 2.2)
 

data/lib/jwt-multisig.rb

@@ -123,6 +123,7 @@ module JWT
       def verify_jwt(jwt, public_keychain, options = {})
         proxy_exception JWT::DecodeError do
           keychain           = public_keychain.with_indifferent_access
+          encoded_payload    = jwt.fetch("payload")
           serialized_payload = base64_decode(jwt.fetch("payload"))
           payload            = JSON.parse(serialized_payload)
           verified           = []
@@ -131,7 +132,7 @@ module JWT
           jwt.fetch("signatures").each do |jws|
             key_id = jws.fetch("header").fetch("kid")
             if keychain.key?(key_id)
-              verify_jws(jws, payload, public_keychain, options)
+              verify_jws(jws, encoded_payload, public_keychain, options)
               verified << key_id
             else
               unverified << key_id
@@ -193,12 +194,10 @@ module JWT
       # @return [Hash]
       #   Returns payload if signature is valid.
       # @raise [JWT::DecodeError]
-      def verify_jws(jws, payload, public_keychain, options = {})
+      def verify_jws(jws, encoded_payload, public_keychain, options = {})
         proxy_exception JWT::DecodeError do
           encoded_header     = jws.fetch("protected")
           serialized_header  = base64_decode(encoded_header)
-          serialized_payload = payload.to_json
-          encoded_payload    = base64_encode(serialized_payload)
           signature          = jws.fetch("signature")
           public_key         = public_keychain.with_indifferent_access.fetch(jws.fetch("header").fetch("kid"))
           jwt                = [encoded_header, encoded_payload, signature].join(".")

data/lib/jwt-multisig/version.rb

@@ -3,6 +3,6 @@
 
 module JWT
   module Multisig
-    VERSION = "1.0.3"
+    VERSION = "1.0.4"
   end
 end

data/test/test-jws-verificator.rb

@@ -74,12 +74,13 @@ class JWSVerificatorTest < Test::Unit::TestCase
 private
 
   def example(jws, payload, options, expected)
+    encoded_payload = JWT::Base64.url_encode(JSON.dump(payload))
     # Pass instance of OpenSSL::PKey::PKey.
-    returned = JWT::Multisig.verify_jws(JSON.parse(jws), payload, public_keychain, options)
+    returned = JWT::Multisig.verify_jws(JSON.parse(jws), encoded_payload, public_keychain, options)
     assert_equal expected, JSON.dump(returned)
 
     # Pass key in PEM format.
-    returned = JWT::Multisig.verify_jws(JSON.parse(jws), payload, public_keychain, options)
+    returned = JWT::Multisig.verify_jws(JSON.parse(jws), encoded_payload, public_keychain, options)
     assert_equal expected, JSON.dump(returned)
   end
 end

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: jwt-multisig
 version: !ruby/object:Gem::Version
-  version: 1.0.3
+  version: 1.0.4
 platform: ruby
 authors:
 - RubyKube
 autorequire: 
 bindir: bin
 cert_chain: []
-date: 2020-10-08 00:00:00.000000000 Z
+date: 2020-10-09 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: jwt