jwt 2.9.0 → 2.9.1

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 0f3d3ea752a6b4dee8f1b020a3e0af95e003f74a8c40f730faab73b616fc9e98
-  data.tar.gz: 8dcdb470771f56931485824c32739bfcec1ce310b7096d6cd28c656d0f8c21fd
+  metadata.gz: 36a35f6010f641283fa3bd38a40b8446661861990aa2b9b9bc415100da4fd255
+  data.tar.gz: 56033dd532a0fbab8c737a753fb92bea4da4bcfac320d179a22ec48e366aa304
 SHA512:
-  metadata.gz: c68cccb66154a824751df6e7cd4d0b9d31372c0bada498097770feb8992ac3c7a462cd11eb759171d096e8d957b2a67b088fb35dc79fe7b4dd6eac6b25140d63
-  data.tar.gz: 03fe234584cce6458fb1a0f64cb399f81bc3c7aee40e25c011f0c27484ede3c6c6a6d950a9c5f3f13e4d66db5a76de98f2801942762df514097b2f663bf79247
+  metadata.gz: afc6d521e351e4e6224baa39bb0c31e5d6e15e53a64a62cfcf10d63d0012e9b3558307fd44eca9a95efe7fca63192736c4ed838cecc3867db90542aed7768055
+  data.tar.gz: 99b4fcd45418b931b4ed18f6275b5dc673f34a49bf45d92be734a452129a3b81c97c7966f4dda855ba646c8619b504db26b927b99feddd72a86dfdd75a0d2028

data/CHANGELOG.md

@@ -1,6 +1,14 @@
 # Changelog
 
-## [v2.9.0](https://github.com/jwt/ruby-jwt/tree/v2.9.0) (NEXT)
+## [v2.9.1](https://github.com/jwt/ruby-jwt/tree/v2.9.1) (2024-09-23)
+
+[Full Changelog](https://github.com/jwt/ruby-jwt/compare/v2.9.0...v2.9.1)
+
+**Fixes and enhancements:**
+
+- Fix regression in `iss` and `aud` claim validation [#619](https://github.com/jwt/ruby-jwt/pull/619) ([@anakinj](https://github.com/anakinj))
+
+## [v2.9.0](https://github.com/jwt/ruby-jwt/tree/v2.9.0) (2024-09-15)
 
 [Full Changelog](https://github.com/jwt/ruby-jwt/compare/v2.8.2...v2.9.0)
 

data/lib/jwt/claims.rb

@@ -17,10 +17,10 @@ module JWT
     VERIFIERS = {
       verify_expiration: ->(options) { Claims::Expiration.new(leeway: options[:exp_leeway] || options[:leeway]) },
       verify_not_before: ->(options) { Claims::NotBefore.new(leeway: options[:nbf_leeway] || options[:leeway]) },
-      verify_iss: ->(options) { Claims::Issuer.new(issuers: options[:iss]) },
+      verify_iss: ->(options) { options[:iss] && Claims::Issuer.new(issuers: options[:iss]) },
       verify_iat: ->(*) { Claims::IssuedAt.new },
       verify_jti: ->(options) { Claims::JwtId.new(validator: options[:verify_jti]) },
-      verify_aud: ->(options) { Claims::Audience.new(expected_audience: options[:aud]) },
+      verify_aud: ->(options) { options[:aud] && Claims::Audience.new(expected_audience: options[:aud]) },
       verify_sub: ->(options) { options[:sub] && Claims::Subject.new(expected_subject: options[:sub]) },
       required_claims: ->(options) { Claims::Required.new(required_claims: options[:required_claims]) }
     }.freeze

data/lib/jwt/version.rb

@@ -13,7 +13,7 @@ module JWT
     # minor version
     MINOR = 9
     # tiny version
-    TINY  = 0
+    TINY  = 1
     # alpha, beta, etc. tag
     PRE   = nil
 

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: jwt
 version: !ruby/object:Gem::Version
-  version: 2.9.0
+  version: 2.9.1
 platform: ruby
 authors:
 - Tim Rudat
 autorequire: 
 bindir: bin
 cert_chain: []
-date: 2024-09-15 00:00:00.000000000 Z
+date: 2024-09-23 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: base64
@@ -172,7 +172,7 @@ licenses:
 - MIT
 metadata:
   bug_tracker_uri: https://github.com/jwt/ruby-jwt/issues
-  changelog_uri: https://github.com/jwt/ruby-jwt/blob/v2.9.0/CHANGELOG.md
+  changelog_uri: https://github.com/jwt/ruby-jwt/blob/v2.9.1/CHANGELOG.md
   rubygems_mfa_required: 'true'
 post_install_message: 
 rdoc_options: []