jwt-multisig 1.0.0.beta.2 → 1.0.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 159da66d2cc0b3e57856fbe1e5f268f81bbbdc5e3fc687fa1506c0e463761c1e
-  data.tar.gz: 9b4d51b4d4d2ece805222318607414cf71083b5a88ab841f449a58b664801a07
+  metadata.gz: 196758ff74f27b332271c1265497dd698b50d78316fa4b12d85d091c9867876f
+  data.tar.gz: df16be95f6fcb777019ac810b851ccd4a2e904478e5a5e6a83f9a2bfd857c5e1
 SHA512:
-  metadata.gz: 4356ca2080f40bea7a82eef1147a2d5f98fdd1858536f3c42bce1c462400ec399a4572f26a1594dca2620277a8ccf6be1de4ef970d314aabc5a8e0ee3341ca00
-  data.tar.gz: 859426ff00622cc17b7a8e6f7d2004278768abc700905b931c44fa12b9746dd40baa92caa3bf245a60670bc494598cf661f56e4985947bdb87786ed479a0da77
+  metadata.gz: 9e2d773f5b81e57fd3ea73b1f76654ff6ccbbb1c3bda2e09562e43d235567af3d257f1e75dbf6d21388064bf06cca68bc5473c3e75b19294e61cb5e77196a9ff
+  data.tar.gz: c265d82ff2dc690a3f9652364af564fd5184d898a483c1e02a55c29d72e3c344d954d515b0f3aaa0c6462e40a06b0a08047785774edc734f10d4629f5e3847ed

data/Gemfile.lock

@@ -1,20 +1,20 @@
 PATH
   remote: .
   specs:
-    jwt-multisig (1.0.0.beta.2)
+    jwt-multisig (1.0.0)
       activesupport (>= 4.0, < 6.0)
       jwt (~> 2.1)
 
 GEM
   remote: https://rubygems.org/
   specs:
-    activesupport (5.1.5)
+    activesupport (5.1.6)
       concurrent-ruby (~> 1.0, >= 1.0.2)
-      i18n (~> 0.7)
+      i18n (>= 0.7, < 2)
       minitest (~> 5.1)
       tzinfo (~> 1.1)
     concurrent-ruby (1.0.5)
-    i18n (0.9.5)
+    i18n (1.0.0)
       concurrent-ruby (~> 1.0)
     jwt (2.1.0)
     memoist (0.16.0)

data/Rakefile

@@ -4,3 +4,5 @@
 require "rake/testtask"
 
 Rake::TestTask.new { |t| t.libs << "test" }
+
+task(:release) { Kernel.system "gem build *.gemspec && gem push *.gem && rm *.gem" }

data/lib/jwt-multisig/version.rb

@@ -3,6 +3,6 @@
 
 module JWT
   module Multisig
-    VERSION = "1.0.0.beta.2"
+    VERSION = "1.0.0"
   end
 end

data/lib/jwt-multisig.rb

@@ -5,6 +5,7 @@ require "jwt"
 require "openssl"
 require "active_support/core_ext/hash/keys"
 require "active_support/core_ext/hash/slice"
+require "active_support/core_ext/hash/indifferent_access"
 
 module JWT
   #
@@ -39,8 +40,11 @@ module JWT
       # @raise [JWT::EncodeError]
       def generate_jwt(payload, private_keychain, algorithms)
         proxy_exception JWT::EncodeError do
+          algorithms_mapping = algorithms.with_indifferent_access
           { payload:    base64_encode(payload.to_json),
-            signatures: private_keychain.map { |id, value| generate_jws(payload, id, value, algorithms.fetch(id)) } }
+            signatures: private_keychain.map do |id, value|
+              generate_jws(payload, id, value, algorithms_mapping.fetch(id))
+            end }
         end
       end
 
@@ -112,12 +116,13 @@ module JWT
       #   The returning value contains payload, list of verified, and unverified signatures (key ID).
       #   Example:
       #     { payload:    { sub: "session", profile: { email: "username@mailbox.example" },
-      #       verified:   ["backend-1.mycompany.example", "backend-3.mycompany.example"],
-      #       unverified: ["backend-2.mycompany.example"] }
+      #       verified:   [:"backend-1.mycompany.example", :"backend-3.mycompany.example"],
+      #       unverified: [:"backend-2.mycompany.example"] }
       #     }
       # @raise [JWT::DecodeError]
       def verify_jwt(jwt, public_keychain, options = {})
         proxy_exception JWT::DecodeError do
+          keychain           = public_keychain.with_indifferent_access
           serialized_payload = base64_decode(jwt.fetch("payload"))
           payload            = JSON.parse(serialized_payload)
           verified           = []
@@ -125,7 +130,7 @@ module JWT
 
           jwt.fetch("signatures").each do |jws|
             key_id = jws.fetch("header").fetch("kid")
-            if public_keychain.key?(key_id)
+            if keychain.key?(key_id)
               verify_jws(jws, payload, public_keychain, options)
               verified << key_id
             else
@@ -133,8 +138,8 @@ module JWT
             end
           end
           { payload:    payload.deep_symbolize_keys,
-            verified:   verified.uniq,
-            unverified: unverified.uniq }
+            verified:   verified.uniq.map(&:to_sym),
+            unverified: unverified.uniq.map(&:to_sym) }
         end
       end
 
@@ -195,7 +200,7 @@ module JWT
           serialized_payload = payload.to_json
           encoded_payload    = base64_encode(serialized_payload)
           signature          = jws.fetch("signature")
-          public_key         = public_keychain.fetch(jws.fetch("header").fetch("kid"))
+          public_key         = public_keychain.with_indifferent_access.fetch(jws.fetch("header").fetch("kid"))
           jwt                = [encoded_header, encoded_payload, signature].join(".")
           algorithm          = JSON.parse(serialized_header).fetch("alg")
           JWT.decode(jwt, to_pem_or_key(public_key, algorithm), true, options.merge(algorithms: [algorithm])).first

data/test/test-jwt-verificator.rb

@@ -31,6 +31,15 @@ class JWTVerificatorTest < Test::Unit::TestCase
     example jwt, {}, {}, %({"payload":{"xxx":"zzz"},"verified":[],"unverified":["hoegerrenner.info","powlowski.info"]})
   end
 
+  def test_both_symbols_and_strings_are_supported
+    jwt      = %({"payload":"eyJpc3MiOiJmb28iLCJiYXIiOnsiYmF6IjoicXV4In19","signatures":[{"protected":"eyJhbGciOiJIUzUxMiJ9","header":{"kid":"ebert.biz"},"signature":"1koPnSwejNF5aCRsqlySX9Td7_gc-dfUkko5G0Svccw-WkBYrwoJJwRJ2Op_-OxjoqSe3ViBGGCbgVUz0khuJQ"},{"protected":"eyJhbGciOiJIUzI1NiJ9","header":{"kid":"wisoky.co"},"signature":"AqtFKTlaVDqg2dOfLBODMhcBlg1gm9ejn6hYQynTyto"},{"protected":"eyJhbGciOiJSUzM4NCJ9","header":{"kid":"hoegerrenner.info"},"signature":"LR9TpJTLwgducdCkN1KmfwXXxd3pp7Xe5fJXJZZM8FVrFrVOEAGQcPnMPIgfPA1UckIXnzih46j4qPOQdotVHEvYvUuvLLT8QQi8y6-vBMlsP-cQehKGpI1T4N5qPzvJqPmhVzZYedWzlvr-VV9wd0BYeBgr65m9BSpFjLFhWVH4NJZuHFPxeYuDEpYoM-lPHdTzdf1E8xd_xwbpz9WpNh0MQib387-wakGWz-UGt9BmJLU8KV01FTAoR0EO9rQfIm5HQ3wGQ7t8U4N4HsOmsXkWF_fRgxjhMHeChDES2awwB4G4KCNw-6ezSBCD7FZcxzbCL2657OEPHNuHA36M91j54jjm1tweYhYJxuUOk5c8j_wSxtieeaORCxOrPp3mshHS_FE0sI_TNNBsIDI_sQwiS08y3d6tv7H4a_MZj_Pe7JWJ3TXlcsaSHy3xuSLYxCZQeLBwJtyz2ERCZOA9ew0BY34tpRwDKxbgF51X7t7uilYxnBn2rBdQeWQKb9q2"}]})
+    keychain = {
+      "hoegerrenner.info": public_keychain["hoegerrenner.info"],
+      "wisoky.co": public_keychain["wisoky.co"],
+      "ebert.biz" => public_keychain["ebert.biz"] }
+    example jwt, keychain, { iss: "foo" }, %({"payload":{"iss":"foo","bar":{"baz":"qux"}},"verified":["ebert.biz","wisoky.co","hoegerrenner.info"],"unverified":[]})
+  end
+
 private
 
   def example(jwt, keychain, options, expected)

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: jwt-multisig
 version: !ruby/object:Gem::Version
-  version: 1.0.0.beta.2
+  version: 1.0.0
 platform: ruby
 authors:
 - RubyKube
 autorequire: 
 bindir: bin
 cert_chain: []
-date: 2018-03-28 00:00:00.000000000 Z
+date: 2018-04-03 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: jwt
@@ -98,9 +98,9 @@ required_ruby_version: !ruby/object:Gem::Requirement
       version: '0'
 required_rubygems_version: !ruby/object:Gem::Requirement
   requirements:
-  - - ">"
+  - - ">="
     - !ruby/object:Gem::Version
-      version: 1.3.1
+      version: '0'
 requirements: []
 rubyforge_project: 
 rubygems_version: 2.7.3