jwt_api_auth 0.0.1.pre.3 → 0.0.1

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: ed0ceb76ea7d4dddf1e1d38c5ffd79b40a1df043bf0c2e41e2fe22257d7f0121
-  data.tar.gz: a9d5bbee9fa0306909fc1f82df818429028c441caf12ecbf1d84298f90f463c9
+  metadata.gz: 7441f7b62410f35d8fc01fcafd27930b0dbc2fd3db708ca0e21ebea89e2c27b8
+  data.tar.gz: 7f936398e7b8d7e448817664c4e5ac4534bd6aa50029d5cd897bcc66281ffc20
 SHA512:
-  metadata.gz: 34360291d4cd06e99cd5bbf8024fef71e061f306b61c593503b03be7a422ca301765c01c8593eb9f2cf6f7f52bbd92822daca87f162c0fe659454fa9b5ae3396
-  data.tar.gz: 58c750eef7a477774a57b98e9a3ec221dbd28540aa7b0750e8a27456b97c314c108f20243e77c5f1bf2fe079921b13ea6ec1bc9cc59f1318f06146085f80fb63
+  metadata.gz: f67477f665a448748c2e043495208ce5d27c1ac9079504cf4818640fc2c00f99832c83537cb5a7eeba52d6dc0318d9b84f1f61bd244dc88cb4c7bf1e0fb41eb4
+  data.tar.gz: ad95ac8d77cc31a108647ad1a057f1c15f77112e25d57e91cbfc53b3f9504ebf484023ab9e4cac4f86a97c599698e62b56f50f37abb70c7178ca7943ad9763f5

data/app/controllers/jwt_api_auth/application_controller.rb

@@ -2,24 +2,12 @@
 
 module JwtApiAuth
   class ApplicationController < ActionController::Base
-    skip_before_action :verify_authenticity_token
-    before_action :authenticate_user
+    include JwtApiAuth::Authentication
 
-    rescue_from ::JWT::DecodeError do
-      head :unauthorized
-    end
+    skip_before_action :verify_authenticity_token
 
     rescue_from ActiveRecord::RecordNotFound do
       head :not_found
     end
-
-    private
-
-    def authenticate_user
-      token = request.headers['Authorization']&.split('Bearer ')&.last
-      ::JWT.decode token, JwtApiAuth.token_secret.call, true, { algorithm: 'HS256' }
-
-      head :unauthorized unless token
-    end
   end
 end

data/app/controllers/jwt_api_auth/authentication_controller.rb

@@ -54,7 +54,10 @@ module JwtApiAuth
     end
 
     def payload
-      { sub: resource.id }
+      {
+        sub: resource.id,
+        aud: JwtApiAuth.token_audience
+      }.delete_if { |_key, value| value.blank? }
     end
 
     def token

data/lib/jwt_api_auth.rb

@@ -3,6 +3,7 @@
 require 'jwt'
 require 'jwt_api_auth/engine'
 require 'jwt_api_auth/helpers'
+require 'jwt_api_auth/authentication'
 
 module JwtApiAuth
   ActiveSupport.on_load(:action_controller) do
@@ -23,4 +24,11 @@ module JwtApiAuth
 
   mattr_accessor :refresh_token_model
   self.refresh_token_model = :refresh_token
+
+  mattr_accessor :token_audience
+  self.token_audience = nil
+
+  def self.setup
+    yield self
+  end
 end

data/lib/jwt_api_auth/authentication.rb

@@ -0,0 +1,31 @@
+# frozen_string_literal: true
+
+module JwtApiAuth
+  module Authentication
+    extend ActiveSupport::Concern
+
+    included do
+      before_action :authenticate_user
+
+      rescue_from ::JWT::DecodeError do
+        head :unauthorized
+      end
+    end
+
+    private
+
+    def authenticate_user
+      token = request.headers['Authorization']&.split('Bearer ')&.last
+      options = { algorithm: 'HS256' }
+
+      if JwtApiAuth.token_audience.present?
+        options[:aud] = JwtApiAuth.token_audience.map(&:to_s)
+        options[:verify_aud] = true
+      end
+
+      ::JWT.decode token, JwtApiAuth.token_secret.call, true, options
+
+      head :unauthorized unless token
+    end
+  end
+end

data/lib/jwt_api_auth/version.rb

@@ -1,5 +1,5 @@
 # frozen_string_literal: true
 
 module JwtApiAuth
-  VERSION = '0.0.1.pre.3'
+  VERSION = '0.0.1'
 end

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: jwt_api_auth
 version: !ruby/object:Gem::Version
-  version: 0.0.1.pre.3
+  version: 0.0.1
 platform: ruby
 authors:
 - Cristian Stügelmayer
 autorequire: 
 bindir: bin
 cert_chain: []
-date: 2020-12-21 00:00:00.000000000 Z
+date: 2020-12-22 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: jwt
@@ -269,6 +269,7 @@ files:
 - app/views/layouts/jwt_api_auth/application.html.erb
 - config/routes.rb
 - lib/jwt_api_auth.rb
+- lib/jwt_api_auth/authentication.rb
 - lib/jwt_api_auth/engine.rb
 - lib/jwt_api_auth/helpers.rb
 - lib/jwt_api_auth/version.rb
@@ -289,9 +290,9 @@ required_ruby_version: !ruby/object:Gem::Requirement
       version: '0'
 required_rubygems_version: !ruby/object:Gem::Requirement
   requirements:
-  - - ">"
+  - - ">="
     - !ruby/object:Gem::Version
-      version: 1.3.1
+      version: '0'
 requirements: []
 rubygems_version: 3.0.8
 signing_key: