jwt-secure 0.1.3 → 0.1.5

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 4dbd8af8175209d5332f6084208ef0eb36d1a393be1d9950338e3b5e28b78b01
-  data.tar.gz: 51a095972461288b542a5d1170ce3bb5de5223760574ff5de9b39746e2423768
+  metadata.gz: 3125e1a0ebd6ab94b72eb50a397f2ed149d1782ad5597d4bcd4ffa6d9e32ef90
+  data.tar.gz: 30da8ba1e4be83030c96d68fb3036bddd380c777c35791357ab748a355c7fe3e
 SHA512:
-  metadata.gz: b27a26ac3119cfff25d55c04ddf7a4f5d6f3c5ed73d57ae64604741a03dfafeb7b226c0fa4d5f6774930d9b0d8f274065cb263fc3ef0a5ac1cfc3eb01dac0f01
-  data.tar.gz: 85c7ff975f3656246e1d21bcf6ac5559b6cefb48fb3f7970f843358fa85393be5d0b02745fa798a531a21240c34ac65277fada4d2ebd8ed3476c84b3b94a9b44
+  metadata.gz: ee130a9f8897bc02a0513dc963a6e862505e2c66a16681aa4d2408716b92c6d2165926fa05fb80e22f2dc6d19c4adeb866450bf998902a7787c9e72ac49dd688
+  data.tar.gz: 8c8a2e3d1c4e13b5fd58dd6e1112d655cb19a043e04df721683633bae77455a50c1c388f88eefec5a7a77c2f3b49617e30cb0ce809873835993bd87fd4906811

data/lib/jwt_secure/controllers.rb

@@ -0,0 +1,69 @@
+require "jwt"
+
+
+class JsonWebToken
+  def self.encode(payload, key)
+    JWT.encode(payload,key)
+  end
+
+  def self.decode(token, key)
+    puts key
+    JWT.decode(token,key).first
+  end
+
+end
+
+module JwtSecure
+  class ApiJwtController < ApplicationController
+    before_action(:authenticate_jwtsecure)
+
+  
+    def authenticate_jwtsecure()
+      begin 
+        payload = JsonWebToken.decode(get_auth_token, @jwtsecure_secret)
+        if payload.present?
+          @current_user = User.find(payload["user_id"])
+        else
+          render json: {errors: ["Invalid Token, user not found!"]}, status: :unauthorized
+        end
+      rescue
+        render json: {errors: ["token not found!"]}, status: :unauthorized
+      end
+    end
+  
+    def get_auth_token()
+      @auth_token ||= cookies.encrypted[@jwtsecure_cookiename]
+    end
+  end
+
+  class AuthController < ApplicationController
+    def login
+       # find user
+      user = @jwtsecure_usermodel.find_by(@jwtsecure_findby)
+
+      if user && user.authenticate(@jwtsecure_password)
+        # password is correct -> proced to login
+        # set toke inside httpOnly Cookie
+        jwt_token = JsonWebToken.encode({user_id: user.id},@jwtsecure_secret)
+        cookies.encrypted[@jwtsecure_cookiename] = {
+          value: jwt_token,
+          http_only: true,
+          same_site: :strict
+        }
+        render json: {message: "Successfull login!", success: true, user: user}, status: :ok
+      else
+        # password incorrect -> failed login
+        render json: {errors: ["Invalid email or password"], success: false}, status: :unauthorized
+      end
+    end
+
+    def logout
+      cookies.encrypted[@jwtsecure_cookiename] = {
+        value: "",
+        http_only: true,
+        same_site: :strict
+      }
+      render json: {message: "logged out, cookie removed", success: true}, status: :ok
+    end
+  end
+end

data/lib/{jwt-secure → jwt_secure}/engine.rb

@@ -1,5 +1,6 @@
 module JwtSecure
   class Engine < ::Rails::Engine
+    paths.add "lib", eager_load: true
     isolate_namespace JwtSecure
   end
 end

data/lib/jwt_secure.rb

@@ -0,0 +1,6 @@
+require_relative "jwt_secure/engine"
+require_relative "jwt_secure/controllers"
+
+module JwtSecure
+ 
+end

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: jwt-secure
 version: !ruby/object:Gem::Version
-  version: 0.1.3
+  version: 0.1.5
 platform: ruby
 authors:
 - M Alvee
@@ -45,10 +45,9 @@ executables: []
 extensions: []
 extra_rdoc_files: []
 files:
-- app/config/routes.rb
-- app/controller/jwt-secure/jwt-secure_controller.rb
-- lib/jwt-secure.rb
-- lib/jwt-secure/engine.rb
+- lib/jwt_secure.rb
+- lib/jwt_secure/controllers.rb
+- lib/jwt_secure/engine.rb
 homepage: https://github.com/0xMALVEE/jwt-secure
 licenses:
 - MIT

data/app/config/routes.rb

@@ -1,3 +0,0 @@
-JwtSecure::Engine.routes.draw do
-  get '/api/token', to: 'tokens#generate'
-end

data/app/controller/jwt-secure/jwt-secure_controller.rb

@@ -1,7 +0,0 @@
-module JwtSecure
-  class TokensController < ApplicationController
-    def generate
-      render json: { token: 'kasdfuower' }
-    end
-  end
-end

data/lib/jwt-secure.rb

@@ -1,4 +0,0 @@
-require 'jwt-secure/engine'
-
-module JwtSecure
-end