jwt_auth_cognito 1.0.0.pre.beta.6 → 1.0.0.pre.beta.8

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 896962515046c707f948d1a236b851b9700629e49adaa9bff35bf91e4a058e56
-  data.tar.gz: 565a5a688657a4d6e9cb850ae941907f862c854e08cbb3ae115e54249dab2dc1
+  metadata.gz: 890178b5dabf5d60fd718020edb4b3a53c7beb031edcbfe4530b2075643235d1
+  data.tar.gz: 0561a4d505653838b1a876ac2c09b96e149302b562c8ea7b0838a295770ad302
 SHA512:
-  metadata.gz: 2eff19ca17051c17c660c3dcaa5249cae886af7c65d930158cc5b8d421ebc02840f972c6e01d19be265a5d8a702de9c1cb03cd8f6ada920e86cdaa6a5d021b03
-  data.tar.gz: 667468c0c4904c63993a66a7b2ccb42165afd22d56bf35fb8be3e9b92ae4c46681a5f0646715f374787a946359532289ce16e2e923ea1730b37d279f4cdc43da
+  metadata.gz: fd88dbfd8f4bba8480b7f9bc0fd8e277dc2c01c21ba4ada2a1011fc6080c2886cd78ebd00040382f04d9b80cc40e01754a24d0779417cdf94ec0c824cc7e8ceb
+  data.tar.gz: 6f96b767c1281c5be52be7a9c7911fc05e692b1fb48107ee96cbc2c3c659e819d5aaad4e1dded17e5f9d0c9aae201839cd3f7005ee43d1cff8fe7af0cd7ee37c

data/lib/jwt_auth_cognito/configuration.rb

@@ -6,7 +6,6 @@ module JwtAuthCognito
                   :redis_host, :redis_port, :redis_password, :redis_db,
                   :redis_ssl, :redis_timeout, :redis_connect_timeout, :redis_read_timeout,
                   :redis_ca_cert_path, :redis_ca_cert_name, :redis_verify_mode,
-                  :redis_tls_min_version, :redis_tls_max_version,
                   :jwks_cache_ttl, :validation_mode, :environment,
                   :enable_api_key_validation, :enable_user_data_retrieval
 
@@ -30,8 +29,6 @@ module JwtAuthCognito
       @redis_ca_cert_path = ENV.fetch('REDIS_CA_CERT_PATH', nil)
       @redis_ca_cert_name = ENV.fetch('REDIS_CA_CERT_NAME', nil)
       @redis_verify_mode = ENV['REDIS_VERIFY_MODE'] || 'peer'
-      @redis_tls_min_version = ENV['REDIS_TLS_MIN_VERSION'] || 'TLSv1_2'
-      @redis_tls_max_version = ENV['REDIS_TLS_MAX_VERSION'] || 'TLSv1_3'
 
       @jwks_cache_ttl = (ENV['JWKS_CACHE_TTL'] || 3600).to_i # 1 hour
       @environment = ENV['RAILS_ENV'] || ENV['RACK_ENV'] || ENV['NODE_ENV'] || 'development'

data/lib/jwt_auth_cognito/jwks_service.rb

@@ -98,9 +98,21 @@ module JwtAuthCognito
       n = base64url_decode(key_data['n'])
       e = base64url_decode(key_data['e'])
 
+      # Create RSA key using method compatible with OpenSSL 3.0+
+      n_bn = OpenSSL::BN.new(n, 2)
+      e_bn = OpenSSL::BN.new(e, 2)
+
+      # Use the new constructor that accepts modulus and exponent
       key = OpenSSL::PKey::RSA.new
-      key.n = OpenSSL::BN.new(n, 2)
-      key.e = OpenSSL::BN.new(e, 2)
+
+      # For OpenSSL 3.0+ compatibility, use set_key method if available
+      if key.respond_to?(:set_key)
+        key.set_key(n_bn, e_bn, nil)
+      else
+        # Fallback for older OpenSSL versions
+        key.n = n_bn
+        key.e = e_bn
+      end
 
       key
     end

data/lib/jwt_auth_cognito/redis_service.rb

@@ -163,11 +163,6 @@ module JwtAuthCognito
     def build_ssl_params
       ssl_params = {}
 
-      # Set TLS version constraints
-      ssl_params[:min_version] = parse_tls_version(@config.redis_tls_min_version) if @config.redis_tls_min_version
-
-      ssl_params[:max_version] = parse_tls_version(@config.redis_tls_max_version) if @config.redis_tls_max_version
-
       # CA certificate configuration with multiple sources
       ca_cert_data = load_ca_certificate
       if ca_cert_data
@@ -235,20 +230,5 @@ module JwtAuthCognito
       puts '⚠️  No CA certificate found, proceeding without certificate validation'
       nil
     end
-
-    def parse_tls_version(version_string)
-      case version_string.upcase
-      when 'TLSV1.2', 'TLSV1_2'
-        :TLSv1_2
-      when 'TLSV1.3', 'TLSV1_3'
-        :TLSv1_3
-      when 'TLSV1.1', 'TLSV1_1'
-        :TLSv1_1
-      when 'TLSV1', 'TLSV1_0'
-        :TLSv1
-      else
-        :TLSv1_2 # Default to TLS 1.2
-      end
-    end
   end
 end

data/lib/jwt_auth_cognito/version.rb

@@ -1,5 +1,5 @@
 # frozen_string_literal: true
 
 module JwtAuthCognito
-  VERSION = '1.0.0-beta.6'
+  VERSION = '1.0.0-beta.8'
 end

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: jwt_auth_cognito
 version: !ruby/object:Gem::Version
-  version: 1.0.0.pre.beta.6
+  version: 1.0.0.pre.beta.8
 platform: ruby
 authors:
 - The Optimal