jwt_api_auth 0.0.1.pre.6 → 0.0.1.pre.7

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 2d8037fc592eeb8985d15ec714a79a760a72070833fe199743305896af28c702
-  data.tar.gz: 03a845d6521ccecf8d91040ab1fcb7434efea54109d25b3c640c310bcd804574
+  metadata.gz: 28b2ffb88b8c174666626ded4fd860ae53e959f5ea7175fa8da868082760f48c
+  data.tar.gz: fdd742dd754b19af9b1049d03a1ee808f8c1b6948c13f1edaa49aa59e2f07f48
 SHA512:
-  metadata.gz: 4b1438eb75ae7ed255d706eaf4dadc15d4e1cc33776d810f876cdca6ccd4cfc5c41448381aec35b908bfe04fddf9959f720b147c5b30b4d7354fee49f67c2a79
-  data.tar.gz: d2fef5f4aee3a28517ba36ef5443594c0562bf7a77440fd5199324e4b26f08e259971081556d04381261fa81f073a895b6fe41b840ece729032ba7cfc77e74c3
+  metadata.gz: 1fa57315afa1679b7697d3f9b89c31ff0b78477c20d357b1ae13d407fdc2484998ec3bb75d80cbc49e439eef08d84dc3a69a581af8107f453040113efa663ac8
+  data.tar.gz: 58bc3d32d241422879b91eae44926b6d4225422698dce01e0483b7bda0b3967731aefc562e13589d9cc214cc5017e8c3c38da16ae1159284bfed4c76c1b8cf7f

data/lib/jwt_api_auth/authentication.rb

@@ -16,7 +16,14 @@ module JwtApiAuth
 
     def authenticate_user
       token = request.headers['Authorization']&.split('Bearer ')&.last
-      ::JWT.decode token, JwtApiAuth.token_secret.call, true, { algorithm: 'HS256' }
+      options = { algorithm: 'HS256' }
+
+      if JwtApiAuth.token_audience.present?
+        options[:aud] = JwtApiAuth.token_audience.map(&:to_s)
+        options[:verify_aud] = true
+      end
+
+      ::JWT.decode token, JwtApiAuth.token_secret.call, true, options
 
       head :unauthorized unless token
     end

data/lib/jwt_api_auth/version.rb

@@ -1,5 +1,5 @@
 # frozen_string_literal: true
 
 module JwtApiAuth
-  VERSION = '0.0.1.pre.6'
+  VERSION = '0.0.1.pre.7'
 end

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: jwt_api_auth
 version: !ruby/object:Gem::Version
-  version: 0.0.1.pre.6
+  version: 0.0.1.pre.7
 platform: ruby
 authors:
 - Cristian Stügelmayer