jwt 2.8.2 → 3.1.1
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- checksums.yaml +4 -4
- data/CHANGELOG.md +149 -31
- data/CODE_OF_CONDUCT.md +14 -14
- data/CONTRIBUTING.md +9 -10
- data/README.md +299 -234
- data/UPGRADING.md +47 -0
- data/lib/jwt/base64.rb +4 -10
- data/lib/jwt/claims/audience.rb +30 -0
- data/lib/jwt/claims/crit.rb +35 -0
- data/lib/jwt/claims/decode_verifier.rb +40 -0
- data/lib/jwt/claims/expiration.rb +32 -0
- data/lib/jwt/claims/issued_at.rb +22 -0
- data/lib/jwt/claims/issuer.rb +34 -0
- data/lib/jwt/claims/jwt_id.rb +35 -0
- data/lib/jwt/claims/not_before.rb +32 -0
- data/lib/jwt/claims/numeric.rb +45 -0
- data/lib/jwt/claims/required.rb +33 -0
- data/lib/jwt/claims/subject.rb +30 -0
- data/lib/jwt/claims/verifier.rb +61 -0
- data/lib/jwt/claims.rb +67 -0
- data/lib/jwt/configuration/container.rb +20 -1
- data/lib/jwt/configuration/decode_configuration.rb +24 -0
- data/lib/jwt/configuration/jwk_configuration.rb +1 -0
- data/lib/jwt/configuration.rb +8 -0
- data/lib/jwt/decode.rb +42 -81
- data/lib/jwt/encode.rb +17 -60
- data/lib/jwt/encoded_token.rb +236 -0
- data/lib/jwt/error.rb +32 -1
- data/lib/jwt/json.rb +1 -1
- data/lib/jwt/jwa/ecdsa.rb +59 -24
- data/lib/jwt/jwa/hmac.rb +22 -19
- data/lib/jwt/jwa/none.rb +8 -3
- data/lib/jwt/jwa/ps.rb +21 -15
- data/lib/jwt/jwa/rsa.rb +21 -10
- data/lib/jwt/jwa/signing_algorithm.rb +62 -0
- data/lib/jwt/jwa/unsupported.rb +9 -8
- data/lib/jwt/jwa.rb +76 -35
- data/lib/jwt/jwk/ec.rb +54 -65
- data/lib/jwt/jwk/hmac.rb +5 -6
- data/lib/jwt/jwk/key_base.rb +16 -1
- data/lib/jwt/jwk/key_finder.rb +35 -8
- data/lib/jwt/jwk/kid_as_key_digest.rb +1 -0
- data/lib/jwt/jwk/rsa.rb +7 -4
- data/lib/jwt/jwk/set.rb +2 -0
- data/lib/jwt/jwk.rb +1 -1
- data/lib/jwt/token.rb +131 -0
- data/lib/jwt/version.rb +24 -19
- data/lib/jwt.rb +18 -4
- data/ruby-jwt.gemspec +2 -0
- metadata +49 -15
- data/lib/jwt/claims_validator.rb +0 -37
- data/lib/jwt/deprecations.rb +0 -48
- data/lib/jwt/jwa/eddsa.rb +0 -42
- data/lib/jwt/jwa/hmac_rbnacl.rb +0 -50
- data/lib/jwt/jwa/hmac_rbnacl_fixed.rb +0 -46
- data/lib/jwt/jwa/wrapper.rb +0 -26
- data/lib/jwt/jwk/okp_rbnacl.rb +0 -110
- data/lib/jwt/verify.rb +0 -117
checksums.yaml
CHANGED
|
@@ -1,7 +1,7 @@
|
|
|
1
1
|
---
|
|
2
2
|
SHA256:
|
|
3
|
-
metadata.gz:
|
|
4
|
-
data.tar.gz:
|
|
3
|
+
metadata.gz: 3380efe421e4f603914588590fc533c17279e19e85c463b23966a3a8c8e7c663
|
|
4
|
+
data.tar.gz: 56c81c1ab9cbdd91b6b390ba01a27b4ec45d26956b8fba29e2af313de049f785
|
|
5
5
|
SHA512:
|
|
6
|
-
metadata.gz:
|
|
7
|
-
data.tar.gz:
|
|
6
|
+
metadata.gz: 044edf6b74d2f0c3efd3dd3280aa6aeeb8a8c6532b96b4def9745b0a1c3dca53940af68e3e5bf169aeef0be92583c279efd8f60af1156e5a7625d63d4bfade8e
|
|
7
|
+
data.tar.gz: 58beba33f077fd033cbcfb674bebae905360dd96dcd11520b5633b4be0579a4e7e8b9584c99f8dcc605481f7e67e003ca356e1b7d75368db3ae1abb0056611ac
|
data/CHANGELOG.md
CHANGED
|
@@ -1,5 +1,124 @@
|
|
|
1
1
|
# Changelog
|
|
2
2
|
|
|
3
|
+
## [v3.1.1](https://github.com/jwt/ruby-jwt/tree/v3.1.1) (2025-06-24)
|
|
4
|
+
|
|
5
|
+
[Full Changelog](https://github.com/jwt/ruby-jwt/compare/v3.1.0...v3.1.1)
|
|
6
|
+
|
|
7
|
+
**Fixes and enhancements:**
|
|
8
|
+
|
|
9
|
+
- Require the algorithm to be provided when signing and verifying tokens using JWKs [#695](https://github.com/jwt/ruby-jwt/pull/695) ([@anakinj](https://github.com/anakinj))
|
|
10
|
+
|
|
11
|
+
## [v3.1.0](https://github.com/jwt/ruby-jwt/tree/v3.1.0) (2025-06-23)
|
|
12
|
+
|
|
13
|
+
[Full Changelog](https://github.com/jwt/ruby-jwt/compare/v3.0.0...v3.1.0)
|
|
14
|
+
|
|
15
|
+
**Features:**
|
|
16
|
+
|
|
17
|
+
- Add support for x5t header parameter for X.509 certificate thumbprint verification [#669](https://github.com/jwt/ruby-jwt/pull/669) ([@hieuk09](https://github.com/hieuk09))
|
|
18
|
+
- Raise an error if the ECDSA signing or verification key is not an instance of `OpenSSL::PKey::EC` [#688](https://github.com/jwt/ruby-jwt/pull/688) ([@anakinj](https://github.com/anakinj))
|
|
19
|
+
- Allow `OpenSSL::PKey::EC::Point` to be used as the verification key in ECDSA [#689](https://github.com/jwt/ruby-jwt/pull/689) ([@anakinj](https://github.com/anakinj))
|
|
20
|
+
- Require claims to have been verified before accessing the `JWT::EncodedToken#payload` [#690](https://github.com/jwt/ruby-jwt/pull/690) ([@anakinj](https://github.com/anakinj))
|
|
21
|
+
- Support signing and verifying tokens using a JWK [#692](https://github.com/jwt/ruby-jwt/pull/692) ([@anakinj](https://github.com/anakinj))
|
|
22
|
+
|
|
23
|
+
## [v3.0.0](https://github.com/jwt/ruby-jwt/tree/v3.0.0) (2025-06-14)
|
|
24
|
+
|
|
25
|
+
[Full Changelog](https://github.com/jwt/ruby-jwt/compare/v2.10.1...v3.0.0)
|
|
26
|
+
|
|
27
|
+
**Breaking changes:**
|
|
28
|
+
|
|
29
|
+
- Require token signature to be verified before accessing payload [#648](https://github.com/jwt/ruby-jwt/pull/648) ([@anakinj](https://github.com/anakinj))
|
|
30
|
+
- Drop support for the HS512256 algorithm [#650](https://github.com/jwt/ruby-jwt/pull/650) ([@anakinj](https://github.com/anakinj))
|
|
31
|
+
- Remove deprecated claim verification methods [#654](https://github.com/jwt/ruby-jwt/pull/654) ([@anakinj](https://github.com/anakinj))
|
|
32
|
+
- Remove dependency to rbnacl [#655](https://github.com/jwt/ruby-jwt/pull/655) ([@anakinj](https://github.com/anakinj))
|
|
33
|
+
- Support only stricter base64 decoding (RFC 4648) [#658](https://github.com/jwt/ruby-jwt/pull/658) ([@anakinj](https://github.com/anakinj))
|
|
34
|
+
- Custom algorithms are required to include `JWT::JWA::SigningAlgorithm` [#660](https://github.com/jwt/ruby-jwt/pull/660) ([@anakinj](https://github.com/anakinj))
|
|
35
|
+
- Require RSA keys to be at least 2048 bits [#661](https://github.com/jwt/ruby-jwt/pull/661) ([@anakinj](https://github.com/anakinj))
|
|
36
|
+
- Base64 encode and decode the k value for HMAC JWKs [#662](https://github.com/jwt/ruby-jwt/pull/662) ([@anakinj](https://github.com/anakinj))
|
|
37
|
+
|
|
38
|
+
Take a look at the [upgrade guide](UPGRADING.md) for more details.
|
|
39
|
+
|
|
40
|
+
**Features:**
|
|
41
|
+
|
|
42
|
+
- JWT::EncodedToken#verify! method that bundles signature and claim validation [#647](https://github.com/jwt/ruby-jwt/pull/647) ([@anakinj](https://github.com/anakinj))
|
|
43
|
+
- Do not override the alg header if already given [#659](https://github.com/jwt/ruby-jwt/pull/659) ([@anakinj](https://github.com/anakinj))
|
|
44
|
+
- Make `JWK::KeyFinder` compatible with `JWT::EncodedToken` [#663](https://github.com/jwt/ruby-jwt/pull/663) ([@anakinj](https://github.com/anakinj))
|
|
45
|
+
|
|
46
|
+
**Fixes and enhancements:**
|
|
47
|
+
|
|
48
|
+
- Ruby 3.4 to CI matrix [#649](https://github.com/jwt/ruby-jwt/pull/649) ([@anakinj](https://github.com/anakinj))
|
|
49
|
+
- Add logger as development dependency [#670](https://github.com/jwt/ruby-jwt/pull/670) ([@hieuk09](https://github.com/hieuk09))
|
|
50
|
+
|
|
51
|
+
## [v2.10.1](https://github.com/jwt/ruby-jwt/tree/v2.10.1) (2024-12-26)
|
|
52
|
+
|
|
53
|
+
[Full Changelog](https://github.com/jwt/ruby-jwt/compare/v2.10.0...v2.10.1)
|
|
54
|
+
|
|
55
|
+
**Fixes and enhancements:**
|
|
56
|
+
|
|
57
|
+
- Make version constants public again [#646](https://github.com/jwt/ruby-jwt/pull/646) ([@anakinj](https://github.com/anakinj))
|
|
58
|
+
|
|
59
|
+
## [v2.10.0](https://github.com/jwt/ruby-jwt/tree/v2.10.0) (2024-12-25)
|
|
60
|
+
|
|
61
|
+
[Full Changelog](https://github.com/jwt/ruby-jwt/compare/v2.9.3...v2.10.0)
|
|
62
|
+
|
|
63
|
+
**Features:**
|
|
64
|
+
|
|
65
|
+
- JWT::Token and JWT::EncodedToken for signing and verifying tokens [#621](https://github.com/jwt/ruby-jwt/pull/621) ([@anakinj](https://github.com/anakinj))
|
|
66
|
+
- Detached payload support for JWT::Token and JWT::EncodedToken [#630](https://github.com/jwt/ruby-jwt/pull/630) ([@anakinj](https://github.com/anakinj))
|
|
67
|
+
- Skip decoding payload if b64 header is present and false [#631](https://github.com/jwt/ruby-jwt/pull/631) ([@anakinj](https://github.com/anakinj))
|
|
68
|
+
- Remove a few custom Rubocop configs [#638](https://github.com/jwt/ruby-jwt/pull/638) ([@anakinj](https://github.com/anakinj))
|
|
69
|
+
|
|
70
|
+
**Fixes and enhancements:**
|
|
71
|
+
|
|
72
|
+
- Deprecation warnings for deprecated methods and classes [#629](https://github.com/jwt/ruby-jwt/pull/629) ([@anakinj](https://github.com/anakinj))
|
|
73
|
+
- Improved documentation for public apis [#629](https://github.com/jwt/ruby-jwt/pull/629) ([@anakinj](https://github.com/anakinj))
|
|
74
|
+
- Use correct methods when raising error during signing/verification with EdDSA [#633](https://github.com/jwt/ruby-jwt/pull/633)
|
|
75
|
+
- Fix JWT::EncodedToken behavior with empty string as token [#640](https://github.com/jwt/ruby-jwt/pull/640) ([@ragalie](https://github.com/ragalie))
|
|
76
|
+
- Deprecation warnings for rbnacl backed functionality [#641](https://github.com/jwt/ruby-jwt/pull/641) ([@anakinj](https://github.com/anakinj))
|
|
77
|
+
|
|
78
|
+
## [v2.9.3](https://github.com/jwt/ruby-jwt/tree/v2.9.3) (2024-10-03)
|
|
79
|
+
|
|
80
|
+
[Full Changelog](https://github.com/jwt/ruby-jwt/compare/v2.9.2...v2.9.3)
|
|
81
|
+
|
|
82
|
+
**Fixes and enhancements:**
|
|
83
|
+
|
|
84
|
+
- Return truthy value for `::JWT::ClaimsValidator#validate!` and `::JWT::Verify.verify_claims` [#628](https://github.com/jwt/ruby-jwt/pull/628) ([@anakinj](https://github.com/anakinj))
|
|
85
|
+
|
|
86
|
+
## [v2.9.2](https://github.com/jwt/ruby-jwt/tree/v2.9.2) (2024-10-03)
|
|
87
|
+
|
|
88
|
+
[Full Changelog](https://github.com/jwt/ruby-jwt/compare/v2.9.1...v2.9.2)
|
|
89
|
+
|
|
90
|
+
**Features:**
|
|
91
|
+
|
|
92
|
+
- Standalone claim verification interface [#626](https://github.com/jwt/ruby-jwt/pull/626) ([@anakinj](https://github.com/anakinj))
|
|
93
|
+
|
|
94
|
+
**Fixes and enhancements:**
|
|
95
|
+
|
|
96
|
+
- Updated README to correctly document `OpenSSL::HMAC` documentation [#617](https://github.com/jwt/ruby-jwt/pull/617) ([@aedryan](https://github.com/aedryan))
|
|
97
|
+
- Verify JWT header format [#622](https://github.com/jwt/ruby-jwt/pull/622) ([@304](https://github.com/304))
|
|
98
|
+
- Bring back `::JWT::ClaimsValidator`, `::JWT::Verify` and a few other removed interfaces for preserved backwards compatibility [#624](https://github.com/jwt/ruby-jwt/pull/624) ([@anakinj](https://github.com/anakinj))
|
|
99
|
+
|
|
100
|
+
## [v2.9.1](https://github.com/jwt/ruby-jwt/tree/v2.9.1) (2024-09-23)
|
|
101
|
+
|
|
102
|
+
[Full Changelog](https://github.com/jwt/ruby-jwt/compare/v2.9.0...v2.9.1)
|
|
103
|
+
|
|
104
|
+
**Fixes and enhancements:**
|
|
105
|
+
|
|
106
|
+
- Fix regression in `iss` and `aud` claim validation [#619](https://github.com/jwt/ruby-jwt/pull/619) ([@anakinj](https://github.com/anakinj))
|
|
107
|
+
|
|
108
|
+
## [v2.9.0](https://github.com/jwt/ruby-jwt/tree/v2.9.0) (2024-09-15)
|
|
109
|
+
|
|
110
|
+
[Full Changelog](https://github.com/jwt/ruby-jwt/compare/v2.8.2...v2.9.0)
|
|
111
|
+
|
|
112
|
+
**Features:**
|
|
113
|
+
|
|
114
|
+
- Build and push gem using a GH action [#612](https://github.com/jwt/ruby-jwt/pull/612) ([@anakinj](https://github.com/anakinj))
|
|
115
|
+
|
|
116
|
+
**Fixes and enhancements:**
|
|
117
|
+
|
|
118
|
+
- Refactor claim validators into their own classes [#605](https://github.com/jwt/ruby-jwt/pull/605) ([@anakinj](https://github.com/anakinj), [@MatteoPierro](https://github.com/MatteoPierro))
|
|
119
|
+
- Allow extending available algorithms [#607](https://github.com/jwt/ruby-jwt/pull/607) ([@anakinj](https://github.com/anakinj))
|
|
120
|
+
- Do not include the EdDSA algorithm if rbnacl not available [#613](https://github.com/jwt/ruby-jwt/pull/613) ([@anakinj](https://github.com/anakinj))
|
|
121
|
+
|
|
3
122
|
## [v2.8.2](https://github.com/jwt/ruby-jwt/tree/v2.8.2) (2024-06-18)
|
|
4
123
|
|
|
5
124
|
[Full Changelog](https://github.com/jwt/ruby-jwt/compare/v2.8.1...v2.8.2)
|
|
@@ -91,6 +210,7 @@
|
|
|
91
210
|
- Support OpenSSL >= 3.0 [#496](https://github.com/jwt/ruby-jwt/pull/496) ([@anakinj](https://github.com/anakinj))
|
|
92
211
|
|
|
93
212
|
**Fixes and enhancements:**
|
|
213
|
+
|
|
94
214
|
- Bring back the old Base64 (RFC2045) deocode mechanisms [#488](https://github.com/jwt/ruby-jwt/pull/488) ([@anakinj](https://github.com/anakinj))
|
|
95
215
|
- Rescue RbNaCl exception for EdDSA wrong key [#491](https://github.com/jwt/ruby-jwt/pull/491) ([@n-studio](https://github.com/n-studio))
|
|
96
216
|
- New parameter name for cases when kid is not found using JWK key loader proc [#501](https://github.com/jwt/ruby-jwt/pull/501) ([@anakinj](https://github.com/anakinj))
|
|
@@ -101,6 +221,7 @@
|
|
|
101
221
|
[Full Changelog](https://github.com/jwt/ruby-jwt/compare/v2.4.0...v2.4.1)
|
|
102
222
|
|
|
103
223
|
**Fixes and enhancements:**
|
|
224
|
+
|
|
104
225
|
- Raise JWT::DecodeError on invalid signature [\#484](https://github.com/jwt/ruby-jwt/pull/484) ([@freakyfelt!](https://github.com/freakyfelt!))
|
|
105
226
|
|
|
106
227
|
## [v2.4.0](https://github.com/jwt/ruby-jwt/tree/v2.4.0) (2022-06-06)
|
|
@@ -118,11 +239,12 @@
|
|
|
118
239
|
- Add Support to be able to verify from multiple keys [\#425](https://github.com/jwt/ruby-jwt/pull/425) ([ritikesh](https://github.com/ritikesh))
|
|
119
240
|
|
|
120
241
|
**Fixes and enhancements:**
|
|
242
|
+
|
|
121
243
|
- Readme: Typo fix re MissingRequiredClaim [\#451](https://github.com/jwt/ruby-jwt/pull/451) ([antonmorant](https://github.com/antonmorant))
|
|
122
244
|
- Fix RuboCop TODOs [\#476](https://github.com/jwt/ruby-jwt/pull/476) ([typhoon2099](https://github.com/typhoon2099))
|
|
123
245
|
- Make specific algorithms in README linkable [\#472](https://github.com/jwt/ruby-jwt/pull/472) ([milieu](https://github.com/milieu))
|
|
124
246
|
- Update note about supported JWK types [\#475](https://github.com/jwt/ruby-jwt/pull/475) ([dpashkevich](https://github.com/dpashkevich))
|
|
125
|
-
- Create
|
|
247
|
+
- Create CODE_OF_CONDUCT.md [\#449](https://github.com/jwt/ruby-jwt/pull/449) ([loic5](https://github.com/loic5))
|
|
126
248
|
|
|
127
249
|
## [v2.3.0](https://github.com/jwt/ruby-jwt/tree/v2.3.0) (2021-10-03)
|
|
128
250
|
|
|
@@ -143,19 +265,19 @@
|
|
|
143
265
|
- Release 2.3.0 [\#448](https://github.com/jwt/ruby-jwt/pull/448) ([excpt](https://github.com/excpt))
|
|
144
266
|
- Fix Style/MultilineIfModifier issues [\#447](https://github.com/jwt/ruby-jwt/pull/447) ([anakinj](https://github.com/anakinj))
|
|
145
267
|
- feat\(EdDSA\): Accept EdDSA as algorithm header [\#446](https://github.com/jwt/ruby-jwt/pull/446) ([Pierre-Michard](https://github.com/Pierre-Michard))
|
|
146
|
-
- Pass kid param through JWT::JWK.
|
|
268
|
+
- Pass kid param through JWT::JWK.create_from [\#445](https://github.com/jwt/ruby-jwt/pull/445) ([shaun-guth-allscripts](https://github.com/shaun-guth-allscripts))
|
|
147
269
|
- fix document about passing JWKs as a simple Hash [\#443](https://github.com/jwt/ruby-jwt/pull/443) ([takayamaki](https://github.com/takayamaki))
|
|
148
270
|
- Tests for mixing JWK keys with mismatching algorithms [\#441](https://github.com/jwt/ruby-jwt/pull/441) ([anakinj](https://github.com/anakinj))
|
|
149
|
-
-
|
|
271
|
+
- verify_claims test shouldnt be within the verify_sub test [\#431](https://github.com/jwt/ruby-jwt/pull/431) ([andyjdavis](https://github.com/andyjdavis))
|
|
150
272
|
- Allow decode options to specify required claims [\#430](https://github.com/jwt/ruby-jwt/pull/430) ([andyjdavis](https://github.com/andyjdavis))
|
|
151
|
-
- Fix OpenSSL::PKey::EC
|
|
152
|
-
- Add documentation for
|
|
273
|
+
- Fix OpenSSL::PKey::EC public_key handing in tests [\#427](https://github.com/jwt/ruby-jwt/pull/427) ([anakinj](https://github.com/anakinj))
|
|
274
|
+
- Add documentation for find_key [\#426](https://github.com/jwt/ruby-jwt/pull/426) ([ritikesh](https://github.com/ritikesh))
|
|
153
275
|
- Give ruby 3.0 as a string to avoid number formatting issues [\#424](https://github.com/jwt/ruby-jwt/pull/424) ([anakinj](https://github.com/anakinj))
|
|
154
276
|
- Tests for iat verification behaviour [\#423](https://github.com/jwt/ruby-jwt/pull/423) ([anakinj](https://github.com/anakinj))
|
|
155
277
|
- Remove HMAC with nil secret from documentation [\#422](https://github.com/jwt/ruby-jwt/pull/422) ([boardfish](https://github.com/boardfish))
|
|
156
278
|
- Update broken link in README [\#420](https://github.com/jwt/ruby-jwt/pull/420) ([severin](https://github.com/severin))
|
|
157
279
|
- Add metadata for RubyGems [\#418](https://github.com/jwt/ruby-jwt/pull/418) ([nickhammond](https://github.com/nickhammond))
|
|
158
|
-
- Fixed a typo about class name
|
|
280
|
+
- Fixed a typo about class name [\#417](https://github.com/jwt/ruby-jwt/pull/417) ([mai-f](https://github.com/mai-f))
|
|
159
281
|
- Fix references for v2.2.3 on CHANGELOG [\#416](https://github.com/jwt/ruby-jwt/pull/416) ([vyper](https://github.com/vyper))
|
|
160
282
|
- Raise IncorrectAlgorithm if token has no alg header [\#411](https://github.com/jwt/ruby-jwt/pull/411) ([bouk](https://github.com/bouk))
|
|
161
283
|
|
|
@@ -165,9 +287,9 @@
|
|
|
165
287
|
|
|
166
288
|
**Implemented enhancements:**
|
|
167
289
|
|
|
168
|
-
- Verify algorithm before evaluating keyfinder
|
|
290
|
+
- Verify algorithm before evaluating keyfinder [\#343](https://github.com/jwt/ruby-jwt/issues/343)
|
|
169
291
|
- Why jwt depends on json \< 2.0 ? [\#179](https://github.com/jwt/ruby-jwt/issues/179)
|
|
170
|
-
- Support for JWK in-lieu of
|
|
292
|
+
- Support for JWK in-lieu of rsa_public [\#158](https://github.com/jwt/ruby-jwt/issues/158)
|
|
171
293
|
- Fix rspec `raise_error` warning [\#413](https://github.com/jwt/ruby-jwt/pull/413) ([excpt](https://github.com/excpt))
|
|
172
294
|
- Add support for JWKs with HMAC key type. [\#372](https://github.com/jwt/ruby-jwt/pull/372) ([phlegx](https://github.com/phlegx))
|
|
173
295
|
- Improve 'none' algorithm handling [\#365](https://github.com/jwt/ruby-jwt/pull/365) ([danleyden](https://github.com/danleyden))
|
|
@@ -195,7 +317,7 @@
|
|
|
195
317
|
- Add forwardable dependency [\#408](https://github.com/jwt/ruby-jwt/pull/408) ([anakinj](https://github.com/anakinj))
|
|
196
318
|
- Ignore casing of algorithm [\#405](https://github.com/jwt/ruby-jwt/pull/405) ([johnnyshields](https://github.com/johnnyshields))
|
|
197
319
|
- Document function and add tests for verify claims method [\#404](https://github.com/jwt/ruby-jwt/pull/404) ([yasonk](https://github.com/yasonk))
|
|
198
|
-
- documenting calling
|
|
320
|
+
- documenting calling verify_jti callback with 2 arguments in the readme [\#402](https://github.com/jwt/ruby-jwt/pull/402) ([HoneyryderChuck](https://github.com/HoneyryderChuck))
|
|
199
321
|
- Target the master branch on the build status badge [\#399](https://github.com/jwt/ruby-jwt/pull/399) ([anakinj](https://github.com/anakinj))
|
|
200
322
|
- Improving the local development experience [\#397](https://github.com/jwt/ruby-jwt/pull/397) ([anakinj](https://github.com/anakinj))
|
|
201
323
|
- Fix sourcelevel broken links [\#395](https://github.com/jwt/ruby-jwt/pull/395) ([anakinj](https://github.com/anakinj))
|
|
@@ -243,7 +365,7 @@
|
|
|
243
365
|
- Decode any token [\#360](https://github.com/jwt/ruby-jwt/issues/360)
|
|
244
366
|
- \[question\] example of using a pub/priv keys for signing? [\#351](https://github.com/jwt/ruby-jwt/issues/351)
|
|
245
367
|
- JWT::ExpiredSignature raised for non-JSON payloads [\#350](https://github.com/jwt/ruby-jwt/issues/350)
|
|
246
|
-
-
|
|
368
|
+
- verify_aud only verifies that at least one aud is expected [\#345](https://github.com/jwt/ruby-jwt/issues/345)
|
|
247
369
|
- Sinatra 4.90s TTFB [\#344](https://github.com/jwt/ruby-jwt/issues/344)
|
|
248
370
|
- How to Logout [\#342](https://github.com/jwt/ruby-jwt/issues/342)
|
|
249
371
|
- jwt token decoding even when wrong token is provided for some letters [\#337](https://github.com/jwt/ruby-jwt/issues/337)
|
|
@@ -295,9 +417,9 @@
|
|
|
295
417
|
|
|
296
418
|
**Implemented enhancements:**
|
|
297
419
|
|
|
298
|
-
- Use
|
|
420
|
+
- Use iat_leeway option [\#273](https://github.com/jwt/ruby-jwt/issues/273)
|
|
299
421
|
- Use of global state in latest version breaks thread safety of JWT.decode [\#268](https://github.com/jwt/ruby-jwt/issues/268)
|
|
300
|
-
- JSON support
|
|
422
|
+
- JSON support [\#246](https://github.com/jwt/ruby-jwt/issues/246)
|
|
301
423
|
- Change the Github homepage URL to https [\#301](https://github.com/jwt/ruby-jwt/pull/301) ([ekohl](https://github.com/ekohl))
|
|
302
424
|
- Fix Salt length for conformance with PS family specification. [\#300](https://github.com/jwt/ruby-jwt/pull/300) ([tobypinder](https://github.com/tobypinder))
|
|
303
425
|
- Add support for Ruby 2.6 [\#299](https://github.com/jwt/ruby-jwt/pull/299) ([bustikiller](https://github.com/bustikiller))
|
|
@@ -310,7 +432,7 @@
|
|
|
310
432
|
- Add note about using a hard coded algorithm in README [\#280](https://github.com/jwt/ruby-jwt/pull/280) ([revodoge](https://github.com/revodoge))
|
|
311
433
|
- Add Appraisal support [\#278](https://github.com/jwt/ruby-jwt/pull/278) ([olbrich](https://github.com/olbrich))
|
|
312
434
|
- Fix decode threading issue [\#269](https://github.com/jwt/ruby-jwt/pull/269) ([ab320012](https://github.com/ab320012))
|
|
313
|
-
- Removed leeway from
|
|
435
|
+
- Removed leeway from verify_iat [\#257](https://github.com/jwt/ruby-jwt/pull/257) ([ab320012](https://github.com/ab320012))
|
|
314
436
|
|
|
315
437
|
**Fixed bugs:**
|
|
316
438
|
|
|
@@ -340,7 +462,7 @@
|
|
|
340
462
|
- Infer algorithm from header [\#254](https://github.com/jwt/ruby-jwt/issues/254)
|
|
341
463
|
- Why is the result of decode is an array? [\#252](https://github.com/jwt/ruby-jwt/issues/252)
|
|
342
464
|
- Add support for headless token [\#251](https://github.com/jwt/ruby-jwt/issues/251)
|
|
343
|
-
- Leeway or
|
|
465
|
+
- Leeway or exp_leeway [\#215](https://github.com/jwt/ruby-jwt/issues/215)
|
|
344
466
|
- Could you describe purpose of cert fixtures and their cryptokey lengths. [\#185](https://github.com/jwt/ruby-jwt/issues/185)
|
|
345
467
|
|
|
346
468
|
**Merged pull requests:**
|
|
@@ -351,7 +473,7 @@
|
|
|
351
473
|
- Drop Ruby 2.2 from test matrix [\#290](https://github.com/jwt/ruby-jwt/pull/290) ([anakinj](https://github.com/anakinj))
|
|
352
474
|
- Remove broken reek config [\#283](https://github.com/jwt/ruby-jwt/pull/283) ([excpt](https://github.com/excpt))
|
|
353
475
|
- Add missing test, Update common files [\#275](https://github.com/jwt/ruby-jwt/pull/275) ([excpt](https://github.com/excpt))
|
|
354
|
-
- Remove
|
|
476
|
+
- Remove iat_leeway option [\#274](https://github.com/jwt/ruby-jwt/pull/274) ([wohlgejm](https://github.com/wohlgejm))
|
|
355
477
|
- improving code quality of jwt module [\#266](https://github.com/jwt/ruby-jwt/pull/266) ([ab320012](https://github.com/ab320012))
|
|
356
478
|
- fixed ECDSA supported versions const [\#263](https://github.com/jwt/ruby-jwt/pull/263) ([starbeast](https://github.com/starbeast))
|
|
357
479
|
- Added my name to contributor list [\#262](https://github.com/jwt/ruby-jwt/pull/262) ([ab320012](https://github.com/ab320012))
|
|
@@ -441,14 +563,14 @@
|
|
|
441
563
|
- Move signature logic to its own module [\#195](https://github.com/jwt/ruby-jwt/pull/195) ([EmilioCristalli](https://github.com/EmilioCristalli))
|
|
442
564
|
- Add options for claim-specific leeway [\#187](https://github.com/jwt/ruby-jwt/pull/187) ([EmilioCristalli](https://github.com/EmilioCristalli))
|
|
443
565
|
- Add user friendly encode error if private key is a String, \#171 [\#176](https://github.com/jwt/ruby-jwt/pull/176) ([ogonki-vetochki](https://github.com/ogonki-vetochki))
|
|
444
|
-
- Return empty string if signature less than
|
|
566
|
+
- Return empty string if signature less than byte_size \#155 [\#175](https://github.com/jwt/ruby-jwt/pull/175) ([ogonki-vetochki](https://github.com/ogonki-vetochki))
|
|
445
567
|
- Remove 'typ' optional parameter [\#174](https://github.com/jwt/ruby-jwt/pull/174) ([ogonki-vetochki](https://github.com/ogonki-vetochki))
|
|
446
568
|
- Pass payload to keyfinder [\#172](https://github.com/jwt/ruby-jwt/pull/172) ([CodeMonkeySteve](https://github.com/CodeMonkeySteve))
|
|
447
569
|
- Use RbNaCl for HMAC if available with fallback to OpenSSL [\#149](https://github.com/jwt/ruby-jwt/pull/149) ([mwpastore](https://github.com/mwpastore))
|
|
448
570
|
|
|
449
571
|
**Fixed bugs:**
|
|
450
572
|
|
|
451
|
-
- ruby-jwt::
|
|
573
|
+
- ruby-jwt::raw_to_asn1: Fails for signatures less than byte_size [\#155](https://github.com/jwt/ruby-jwt/issues/155)
|
|
452
574
|
- The leeway parameter is applies to all time based verifications [\#129](https://github.com/jwt/ruby-jwt/issues/129)
|
|
453
575
|
- Make algorithm option required to verify signature [\#184](https://github.com/jwt/ruby-jwt/pull/184) ([EmilioCristalli](https://github.com/EmilioCristalli))
|
|
454
576
|
- Validate audience when payload is a scalar and options is an array [\#183](https://github.com/jwt/ruby-jwt/pull/183) ([steti](https://github.com/steti))
|
|
@@ -460,7 +582,7 @@
|
|
|
460
582
|
- Include custom headers with password [\#189](https://github.com/jwt/ruby-jwt/issues/189)
|
|
461
583
|
- can't create token - 'NotImplementedError: Unsupported signing method' [\#186](https://github.com/jwt/ruby-jwt/issues/186)
|
|
462
584
|
- Cannot verify JWT at all?? [\#177](https://github.com/jwt/ruby-jwt/issues/177)
|
|
463
|
-
-
|
|
585
|
+
- verify_iss: true is raising JWT::DecodeError instead of JWT::InvalidIssuerError [\#170](https://github.com/jwt/ruby-jwt/issues/170)
|
|
464
586
|
|
|
465
587
|
**Merged pull requests:**
|
|
466
588
|
|
|
@@ -531,7 +653,7 @@
|
|
|
531
653
|
- Added test execution to Rakefile [\#147](https://github.com/jwt/ruby-jwt/pull/147) ([jabbrwcky](https://github.com/jabbrwcky))
|
|
532
654
|
- Bump version [\#145](https://github.com/jwt/ruby-jwt/pull/145) ([excpt](https://github.com/excpt))
|
|
533
655
|
- Add a changelog file [\#142](https://github.com/jwt/ruby-jwt/pull/142) ([excpt](https://github.com/excpt))
|
|
534
|
-
- Return
|
|
656
|
+
- Return decoded_segments [\#139](https://github.com/jwt/ruby-jwt/pull/139) ([akostrikov](https://github.com/akostrikov))
|
|
535
657
|
|
|
536
658
|
## [v1.5.4](https://github.com/jwt/ruby-jwt/tree/v1.5.4) (2016-03-24)
|
|
537
659
|
|
|
@@ -539,12 +661,12 @@
|
|
|
539
661
|
|
|
540
662
|
**Closed issues:**
|
|
541
663
|
|
|
542
|
-
- 404 at https://rubygems.global.ssl.fastly.net/gems/jwt-1.5.3.gem [\#137](https://github.com/jwt/ruby-jwt/issues/137)
|
|
664
|
+
- 404 at [https://rubygems.global.ssl.fastly.net/gems/jwt-1.5.3.gem](https://rubygems.global.ssl.fastly.net/gems/jwt-1.5.3.gem) [\#137](https://github.com/jwt/ruby-jwt/issues/137)
|
|
543
665
|
|
|
544
666
|
**Merged pull requests:**
|
|
545
667
|
|
|
546
668
|
- Update README.md [\#138](https://github.com/jwt/ruby-jwt/pull/138) ([excpt](https://github.com/excpt))
|
|
547
|
-
- Fix
|
|
669
|
+
- Fix base64url_decode [\#136](https://github.com/jwt/ruby-jwt/pull/136) ([excpt](https://github.com/excpt))
|
|
548
670
|
- Fix ruby 1.9.3 compatibility [\#135](https://github.com/jwt/ruby-jwt/pull/135) ([excpt](https://github.com/excpt))
|
|
549
671
|
- iat can be a float value [\#134](https://github.com/jwt/ruby-jwt/pull/134) ([llimllib](https://github.com/llimllib))
|
|
550
672
|
|
|
@@ -565,7 +687,7 @@
|
|
|
565
687
|
- Verifications not functioning in latest release [\#128](https://github.com/jwt/ruby-jwt/issues/128)
|
|
566
688
|
- Base64 is generating invalid length base64 strings - cross language interop [\#127](https://github.com/jwt/ruby-jwt/issues/127)
|
|
567
689
|
- Digest::Digest is deprecated; use Digest [\#119](https://github.com/jwt/ruby-jwt/issues/119)
|
|
568
|
-
-
|
|
690
|
+
- verify_rsa no method 'verify' for class String [\#115](https://github.com/jwt/ruby-jwt/issues/115)
|
|
569
691
|
- Add a changelog [\#111](https://github.com/jwt/ruby-jwt/issues/111)
|
|
570
692
|
|
|
571
693
|
**Merged pull requests:**
|
|
@@ -683,14 +805,14 @@
|
|
|
683
805
|
|
|
684
806
|
**Closed issues:**
|
|
685
807
|
|
|
686
|
-
- The behavior using 'json' differs from '
|
|
808
|
+
- The behavior using 'json' differs from 'multi_json' [\#41](https://github.com/jwt/ruby-jwt/issues/41)
|
|
687
809
|
|
|
688
810
|
**Merged pull requests:**
|
|
689
811
|
|
|
690
812
|
- Release 1.4.0 [\#64](https://github.com/jwt/ruby-jwt/pull/64) ([excpt](https://github.com/excpt))
|
|
691
813
|
- Update README.md and remove dead code [\#63](https://github.com/jwt/ruby-jwt/pull/63) ([excpt](https://github.com/excpt))
|
|
692
|
-
- Add
|
|
693
|
-
- Add
|
|
814
|
+
- Add 'iat/ aud/ sub/ jti' support for ruby-jwt [\#62](https://github.com/jwt/ruby-jwt/pull/62) ([ZhangHanDong](https://github.com/ZhangHanDong))
|
|
815
|
+
- Add 'iss' support for ruby-jwt [\#61](https://github.com/jwt/ruby-jwt/pull/61) ([ZhangHanDong](https://github.com/ZhangHanDong))
|
|
694
816
|
- Clarify .encode API in README [\#60](https://github.com/jwt/ruby-jwt/pull/60) ([jbodah](https://github.com/jbodah))
|
|
695
817
|
|
|
696
818
|
## [jwt-1.3.0](https://github.com/jwt/ruby-jwt/tree/jwt-1.3.0) (2015-02-24)
|
|
@@ -753,7 +875,7 @@
|
|
|
753
875
|
|
|
754
876
|
**Closed issues:**
|
|
755
877
|
|
|
756
|
-
- API request - JWT::
|
|
878
|
+
- API request - JWT::decoded_header\(\) [\#26](https://github.com/jwt/ruby-jwt/issues/26)
|
|
757
879
|
|
|
758
880
|
**Merged pull requests:**
|
|
759
881
|
|
|
@@ -856,9 +978,5 @@
|
|
|
856
978
|
|
|
857
979
|
**Merged pull requests:**
|
|
858
980
|
|
|
859
|
-
- Bumped a version and added a .gemspec using rake
|
|
981
|
+
- Bumped a version and added a .gemspec using rake build_gemspec [\#3](https://github.com/jwt/ruby-jwt/pull/3) ([zhitomirskiyi](https://github.com/zhitomirskiyi))
|
|
860
982
|
- Added RSA support [\#2](https://github.com/jwt/ruby-jwt/pull/2) ([zhitomirskiyi](https://github.com/zhitomirskiyi))
|
|
861
|
-
|
|
862
|
-
|
|
863
|
-
|
|
864
|
-
\* *This Changelog was automatically generated by [github_changelog_generator](https://github.com/github-changelog-generator/github-changelog-generator)*
|
data/CODE_OF_CONDUCT.md
CHANGED
|
@@ -10,21 +10,21 @@ We pledge to act and interact in ways that contribute to an open, welcoming, div
|
|
|
10
10
|
|
|
11
11
|
Examples of behavior that contributes to a positive environment for our community include:
|
|
12
12
|
|
|
13
|
-
|
|
14
|
-
|
|
15
|
-
|
|
16
|
-
|
|
17
|
-
|
|
13
|
+
- Demonstrating empathy and kindness toward other people
|
|
14
|
+
- Being respectful of differing opinions, viewpoints, and experiences
|
|
15
|
+
- Giving and gracefully accepting constructive feedback
|
|
16
|
+
- Accepting responsibility and apologizing to those affected by our mistakes, and learning from the experience
|
|
17
|
+
- Focusing on what is best not just for us as individuals, but for the overall community
|
|
18
18
|
|
|
19
19
|
Examples of unacceptable behavior include:
|
|
20
20
|
|
|
21
|
-
|
|
21
|
+
- The use of sexualized language or imagery, and sexual attention or
|
|
22
22
|
advances of any kind
|
|
23
|
-
|
|
24
|
-
|
|
25
|
-
|
|
23
|
+
- Trolling, insulting or derogatory comments, and personal or political attacks
|
|
24
|
+
- Public or private harassment
|
|
25
|
+
- Publishing others' private information, such as a physical or email
|
|
26
26
|
address, without their explicit permission
|
|
27
|
-
|
|
27
|
+
- Other conduct which could reasonably be considered inappropriate in a
|
|
28
28
|
professional setting
|
|
29
29
|
|
|
30
30
|
## Enforcement Responsibilities
|
|
@@ -39,7 +39,7 @@ This Code of Conduct applies within all community spaces, and also applies when
|
|
|
39
39
|
|
|
40
40
|
## Enforcement
|
|
41
41
|
|
|
42
|
-
Instances of abusive, harassing, or otherwise unacceptable behavior may be reported to the community leaders responsible for enforcement at antmanj@gmail.com
|
|
42
|
+
Instances of abusive, harassing, or otherwise unacceptable behavior may be reported to the community leaders responsible for enforcement at <antmanj@gmail.com>. All complaints will be reviewed and investigated promptly and fairly.
|
|
43
43
|
|
|
44
44
|
All community leaders are obligated to respect the privacy and security of the reporter of any incident.
|
|
45
45
|
|
|
@@ -67,18 +67,18 @@ Community leaders will follow these Community Impact Guidelines in determining t
|
|
|
67
67
|
|
|
68
68
|
### 4. Permanent Ban
|
|
69
69
|
|
|
70
|
-
**Community Impact**: Demonstrating a pattern of violation of community standards, including sustained inappropriate behavior,
|
|
70
|
+
**Community Impact**: Demonstrating a pattern of violation of community standards, including sustained inappropriate behavior, harassment of an individual, or aggression toward or disparagement of classes of individuals.
|
|
71
71
|
|
|
72
72
|
**Consequence**: A permanent ban from any sort of public interaction within the community.
|
|
73
73
|
|
|
74
74
|
## Attribution
|
|
75
75
|
|
|
76
76
|
This Code of Conduct is adapted from the [Contributor Covenant][homepage], version 2.0,
|
|
77
|
-
available at https://www.contributor-covenant.org/version/2/0/code_of_conduct.html.
|
|
77
|
+
available at [https://www.contributor-covenant.org/version/2/0/code_of_conduct.html](https://www.contributor-covenant.org/version/2/0/code_of_conduct.html).
|
|
78
78
|
|
|
79
79
|
Community Impact Guidelines were inspired by [Mozilla's code of conduct enforcement ladder](https://github.com/mozilla/diversity).
|
|
80
80
|
|
|
81
81
|
[homepage]: https://www.contributor-covenant.org
|
|
82
82
|
|
|
83
83
|
For answers to common questions about this code of conduct, see the FAQ at
|
|
84
|
-
https://www.contributor-covenant.org/faq. Translations are available at https://www.contributor-covenant.org/translations.
|
|
84
|
+
[https://www.contributor-covenant.org/faq](https://www.contributor-covenant.org/faq). Translations are available at [https://www.contributor-covenant.org/translations](https://www.contributor-covenant.org/translations).
|
data/CONTRIBUTING.md
CHANGED
|
@@ -4,7 +4,7 @@
|
|
|
4
4
|
|
|
5
5
|
Fork the project on GitHub and clone your own fork. Instuctions on forking can be found from the [GitHub Docs](https://docs.github.com/en/get-started/quickstart/fork-a-repo)
|
|
6
6
|
|
|
7
|
-
```
|
|
7
|
+
```bash
|
|
8
8
|
git clone git@github.com:you/ruby-jwt.git
|
|
9
9
|
cd ruby-jwt
|
|
10
10
|
git remote add upstream https://github.com/jwt/ruby-jwt
|
|
@@ -14,7 +14,7 @@ git remote add upstream https://github.com/jwt/ruby-jwt
|
|
|
14
14
|
|
|
15
15
|
Make sure you have the latest upstream main branch of the project.
|
|
16
16
|
|
|
17
|
-
```
|
|
17
|
+
```bash
|
|
18
18
|
git fetch --all
|
|
19
19
|
git checkout main
|
|
20
20
|
git rebase upstream/main
|
|
@@ -44,7 +44,8 @@ Implement tests and your change. Don't be shy adding a little something in the [
|
|
|
44
44
|
Add a short description of the change in either the `Features` or `Fixes` section in the [CHANGELOG](CHANGELOG.md) file.
|
|
45
45
|
|
|
46
46
|
The form of the row (You need to return to the row when you know the pull request id)
|
|
47
|
-
|
|
47
|
+
|
|
48
|
+
```markdown
|
|
48
49
|
- Fix a little problem [#123](https://github.com/jwt/ruby-jwt/pull/123) - [@you](https://github.com/you).
|
|
49
50
|
```
|
|
50
51
|
|
|
@@ -52,7 +53,7 @@ The form of the row (You need to return to the row when you know the pull reques
|
|
|
52
53
|
|
|
53
54
|
Before pushing make sure the tests pass and RuboCop is happy.
|
|
54
55
|
|
|
55
|
-
```
|
|
56
|
+
```bash
|
|
56
57
|
bundle exec appraisal rake test
|
|
57
58
|
bundle exec rubocop
|
|
58
59
|
git push origin fix-a-little-problem
|
|
@@ -64,9 +65,9 @@ Make a new pull request on the [ruby-jwt project](https://github.com/jwt/ruby-jw
|
|
|
64
65
|
|
|
65
66
|
Update the [CHANGELOG](CHANGELOG.md) with the pull request id from the previous step.
|
|
66
67
|
|
|
67
|
-
You can
|
|
68
|
+
You can amend the previous commit with the updated changelog change and force push your branch. The PR will get automatically updated.
|
|
68
69
|
|
|
69
|
-
```
|
|
70
|
+
```bash
|
|
70
71
|
git add CHANGELOG.md
|
|
71
72
|
git commit --amend --no-edit
|
|
72
73
|
git push origin fix-a-little-problem -f
|
|
@@ -80,14 +81,14 @@ A maintainer will review and probably merge you changes when time allows, be pat
|
|
|
80
81
|
|
|
81
82
|
It's recommended that you keep your branch up-to-date by rebasing to the upstream main.
|
|
82
83
|
|
|
83
|
-
```
|
|
84
|
+
```bash
|
|
84
85
|
git fetch upstream
|
|
85
86
|
git checkout fix-a-little-problem
|
|
86
87
|
git rebase upstream/main
|
|
87
88
|
git push origin fix-a-little-problem -f
|
|
88
89
|
```
|
|
89
90
|
|
|
90
|
-
|
|
91
|
+
## Releasing a new version
|
|
91
92
|
|
|
92
93
|
The version is using the [Semantic Versioning](http://semver.org/) and the version is located in the [version.rb](lib/jwt/version.rb) file.
|
|
93
94
|
Also update the [CHANGELOG](CHANGELOG.md) to reflect the upcoming version release.
|
|
@@ -95,5 +96,3 @@ Also update the [CHANGELOG](CHANGELOG.md) to reflect the upcoming version releas
|
|
|
95
96
|
```bash
|
|
96
97
|
rake release
|
|
97
98
|
```
|
|
98
|
-
|
|
99
|
-
**If you want a release cut with your PR, please include a version bump according to **
|