jwt_nacl 0.1.0

checksums.yaml

@@ -0,0 +1,7 @@
+---
+SHA1:
+  metadata.gz: ad2b78d24e6d521e31f3c32794553484c053fec8
+  data.tar.gz: 558da9dbdb8ff7503d69864e1d4e35c65a855ed4
+SHA512:
+  metadata.gz: c8de2dc24a3557ae69b88c97e57e34a6d9257a8e40a756f65beb678936c109edc4469ce469fb707a64abc119633811c5f7f413a69473e9245571fe59df983f3f
+  data.tar.gz: ade53f2ea0edf4f97e193b69f6c661bd53334fce46fd588730ffcfb5cabe0d729902a9d3c127024eba573a0353388a7fa8c63816640d58a762632f55da9dc019

data/.gitignore

@@ -0,0 +1,36 @@
+https://raw.githubusercontent.com/github/gitignore/master/Ruby.gitignore
+
+*.gem
+*.rbc
+/.config
+/coverage/
+/InstalledFiles
+/pkg/
+/spec/reports/
+/spec/examples.txt
+/test/tmp/
+/test/version_tmp/
+/tmp/
+
+# Used by dotenv library to load environment variables.
+# .env
+
+## Documentation cache and generated files:
+/.yardoc/
+/_yardoc/
+/doc/
+/rdoc/
+
+## Environment normalization:
+/.bundle/
+/vendor/bundle
+/lib/bundler/man/
+
+# for a library or gem, you might want to ignore these files since the code is
+# intended to run in multiple environments; otherwise, check them in:
+# Gemfile.lock
+# .ruby-version
+# .ruby-gemset
+
+# unless supporting rvm < 1.11.0 or doing something fancy, ignore this:
+.rvmrc

data/.travis.yml

@@ -0,0 +1,7 @@
+sudo: false
+language: ruby
+rvm:
+  - 2.2.6
+  - 2.3.3
+  - 2.4.0
+before_install: gem install bundler -v 1.13.7

data/CHANGELOG.md

@@ -0,0 +1,6 @@
+## Changelog
+
+### v0.1.0 (2017-01-29)
+
+* Initial
+  * support Edwards-curve Digital Signature Algorithm (EdDSA) using Curve25519

data/Gemfile

@@ -0,0 +1,4 @@
+source 'https://rubygems.org'
+
+# Specify your gem's dependencies in jwt_nacl.gemspec
+gemspec

data/Gemfile.lock

@@ -0,0 +1,50 @@
+PATH
+  remote: .
+  specs:
+    jwt_nacl (0.1.0)
+      rbnacl (~> 4.0)
+      rbnacl-libsodium (~> 1.0)
+
+GEM
+  remote: https://rubygems.org/
+  specs:
+    ansi (1.5.0)
+    builder (3.2.3)
+    docile (1.1.5)
+    ffi (1.9.17)
+    json (2.0.3)
+    minitest (5.10.1)
+    minitest-reporters (1.1.14)
+      ansi
+      builder
+      minitest (>= 5.0)
+      ruby-progressbar
+    rake (12.0.0)
+    rbnacl (4.0.1)
+      ffi
+    rbnacl-libsodium (1.0.11)
+      rbnacl (>= 3.0.1)
+    ruby-progressbar (1.8.1)
+    simplecov (0.13.0)
+      docile (~> 1.1.0)
+      json (>= 1.8, < 3)
+      simplecov-html (~> 0.10.0)
+    simplecov-html (0.10.0)
+    wwtd (1.3.0)
+    yard (0.9.8)
+
+PLATFORMS
+  ruby
+
+DEPENDENCIES
+  bundler (~> 1.13)
+  jwt_nacl!
+  minitest (~> 5.0)
+  minitest-reporters (~> 1.1)
+  rake (~> 12.0)
+  simplecov (~> 0.13)
+  wwtd (~> 1.3)
+  yard (~> 0.9)
+
+BUNDLED WITH
+   1.13.7

data/LICENSE.md

@@ -0,0 +1,9 @@
+The MIT License (MIT)
+
+Copyright (c) 2017 Gary Fleshman
+
+Permission is hereby granted, free of charge, to any person obtaining a copy of this software and associated documentation files (the "Software"), to deal in the Software without restriction, including without limitation the rights to use, copy, modify, merge, publish, distribute, sublicense, and/or sell copies of the Software, and to permit persons to whom the Software is furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.

data/README.md

@@ -0,0 +1,117 @@
+# JWT NaCl [![travis][ci_img]][travis] [![yard docs][yd_img]][yard_docs] [![code climate][cc_img]][code_climate]
+
+## A JSON Web Token (JWT) implementation using NaCl cryptography
+
+### Description
+A Ruby JSON Web Token implementation using Edwards-curve Digital Signature Algorithm ([EdDSA][eddsa]) [curve Ed25519 digital signatures][ed25519] from the state-of-the-art NaCl [Networking and Cryptography library][nacl] by [Daniel J. Bernstein][bernstein].
+
+## Installation
+
+Add this line to your application's Gemfile:
+
+```ruby
+gem 'jwt_nacl'
+```
+
+And then execute:
+
+    $ bundle
+
+Or install it directly as:
+
+    $ gem install jwt_nacl
+
+### Philosophy & Design Goals
+* Convention over configuration
+* Use of state-of-the-art cryptography, including EdDSA Curve25519 elliptic curves
+* Minimal API surface area
+* Thorough test coverage
+* Modularity for comprehension and extensibility
+
+### Why NaCl?
+Cryptography typically exposes a high degree of complexity, due to many possible configuration decisions. One poor choice could result in an insecure system.
+
+NaCl is different. NaCl provides an expertly-assembled, high-level cryptographic API with the correct configuration already built-in. See [RbNaCl][rbnacl] for more rationale.
+
+For a more conventional JWT implementation, please refer to the related [json_web_token](https://github.com/garyf/json_web_token) gem.
+
+## Usage
+
+### JWT.sign(claims, private_key)
+
+#### Returns a 3 element hash that includes:
+* a JSON Web Token
+* the private key
+* the public key
+
+`claims` (required) hash (non-empty)
+
+`private_key` (optional) string, 32 random byte signing key
+
+Example
+
+```ruby
+require 'jwt_nacl'
+
+claims = {iss: "mike", exp: 1300819380, :"http://example.com/is_root" => false}
+
+private_hex = "d2c5c54bc205266f12a8a21809aa2989536959f666a5d68710e6fab94674041a"
+private_key = [private_hex].pack("H*")
+
+public_hex = "1e10af4b79b8d005c8b4237161f1350844b2e6c1a8d6aa4817151c04a2751731"
+public_key = [public_hex].pack("H*")
+
+# Sign with an elliptical curve Ed25519 digital signature
+jwt = JWT.sign(claims, private_key)
+#=> {
+  jwt: "eyJhbGciOiJFZDI1NTE5IiwidHlwIjoiSldUIn0.eyJpc3MiOiJtaWtlIiwiZXhwIjoxMzAwODE5MzgwLCJodHRwOi8vZXhhbXBsZS5jb20vaXNfcm9vdCI6ZmFsc2V9.f2y6Sax9eK9M3JiFCt4ZfzzOL56SWNhydHpPPIoVkm21D3_bJq5DmFLgH8ee2OlzSlZMoq009jLSg6AC0mn4DA",
+  private_key: private_key,
+  public_key: public_key
+}
+```
+
+### JWT.verify(jwt, public_key)
+
+#### Returns a hash:
+* \{claims: < JWT claims set >\}, if the digital signature is verified
+* \{error: "invalid"\}, otherwise
+
+`jwt` (required) is a JSON web token string
+
+`public_key` (required) string, 32 byte verifying key
+
+Example
+
+```ruby
+require 'jwt_nacl'
+
+jwt = "eyJhbGciOiJFZDI1NTE5IiwidHlwIjoiSldUIn0.eyJpc3MiOiJtaWtlIiwiZXhwIjoxMzAwODE5MzgwLCJodHRwOi8vZXhhbXBsZS5jb20vaXNfcm9vdCI6ZmFsc2V9.f2y6Sax9eK9M3JiFCt4ZfzzOL56SWNhydHpPPIoVkm21D3_bJq5DmFLgH8ee2OlzSlZMoq009jLSg6AC0mn4DA"
+
+hex = "1e10af4b79b8d005c8b4237161f1350844b2e6c1a8d6aa4817151c04a2751731"
+public_key = [hex].pack("H*")
+
+# Verify with an elliptical curve Ed25519 public key
+JWT.verify(jwt, public_key)
+#=> {
+  claims: {iss: "mike", exp: 1300819380, :"http://example.com/is_root" => false}
+}
+```
+
+### Supported encryption algorithm
+Ed25519, Edwards-curve Digital Signature Algorithm (EdDSA) using Curve25519
+
+### Supported Ruby versions
+Ruby 2.2.6 and up
+
+[eddsa]: https://en.wikipedia.org/wiki/EdDSA
+[ed25519]: http://ed25519.cr.yp.to/
+[nacl]: http://nacl.cr.yp.to/
+[bernstein]: https://en.wikipedia.org/wiki/Daniel_J._Bernstein
+
+[rbnacl]: https://github.com/cryptosphere/rbnacl/blob/master/README.md
+[travis]: https://travis-ci.org/garyf/jwt_nacl
+[ci_img]: https://travis-ci.org/garyf/jwt_nacl.svg?branch=master
+[yard_docs]: http://www.rubydoc.info/github/garyf/jwt_nacl
+[yd_img]: http://img.shields.io/badge/yard-docs-blue.svg
+[code_climate]: https://codeclimate.com/github/garyf/jwt_nacl
+[cc_img]: https://codeclimate.com/github/garyf/jwt_nacl/badges/gpa.svg

data/Rakefile

@@ -0,0 +1,10 @@
+require "bundler/gem_tasks"
+require "rake/testtask"
+
+Rake::TestTask.new(:test) do |t|
+  t.libs << "test"
+  t.libs << "lib"
+  t.test_files = FileList['test/**/*_test.rb']
+end
+
+task :default => :test

data/bin/console

@@ -0,0 +1,14 @@
+#!/usr/bin/env ruby
+
+require "bundler/setup"
+require "jwt_nacl"
+
+# You can add fixtures and/or initialization code here to make experimenting
+# with your gem easier. You can also use a different console, if you like.
+
+# (If you use this, don't forget to add pry to your Gemfile!)
+# require "pry"
+# Pry.start
+
+require "irb"
+IRB.start

data/bin/setup

@@ -0,0 +1,8 @@
+#!/usr/bin/env bash
+set -euo pipefail
+IFS=$'\n\t'
+set -vx
+
+bundle install
+
+# Do any other automated setup that you need to do here

data/jwt_nacl.gemspec

@@ -0,0 +1,38 @@
+# coding: utf-8
+lib = File.expand_path('../lib', __FILE__)
+$LOAD_PATH.unshift(lib) unless $LOAD_PATH.include?(lib)
+require 'jwt_nacl/version'
+
+Gem::Specification.new do |spec|
+  spec.name          = "jwt_nacl"
+  spec.version       = JwtNacl::VERSION
+  spec.authors       = ["Gary Fleshman"]
+  spec.email         = ["gfleshman@newforge-tech.com"]
+
+  spec.summary       = "JSON Web Token (JWT) for Ruby using NaCl cryptography"
+  spec.description   = <<-HERE
+    A Ruby JSON Web Token implementation using NaCl Ed25519 digital signatures from the
+    state-of-the-art networking and cryptography library by Daniel J. Bernstein.
+  HERE
+  spec.homepage      = "https://github.com/garyf/jwt_nacl"
+  spec.license       = "MIT"
+
+  spec.files         = `git ls-files -z`.split("\x0").reject do |f|
+    f.match(%r{^(test|spec|features)/})
+  end
+  spec.bindir        = "exe"
+  spec.executables   = spec.files.grep(%r{^exe/}) { |f| File.basename(f) }
+  spec.require_paths = ["lib"]
+  spec.required_ruby_version = ">= 2.2.6"
+
+  spec.add_runtime_dependency "rbnacl", "~> 4.0"
+  spec.add_runtime_dependency "rbnacl-libsodium", "~> 1.0"
+
+  spec.add_development_dependency "bundler", "~> 1.13"
+  spec.add_development_dependency "minitest", "~> 5.0"
+  spec.add_development_dependency "minitest-reporters", "~> 1.1"
+  spec.add_development_dependency "rake", "~> 12.0"
+  spec.add_development_dependency "simplecov", "~> 0.13"
+  spec.add_development_dependency "yard", "~> 0.9"
+  spec.add_development_dependency "wwtd", "~> 1.3"
+end

data/lib/jwt_nacl.rb

@@ -0,0 +1,64 @@
+require "jwt_nacl/jws"
+require "jwt_nacl/util"
+
+# Encode claims for transmission as a JSON object that is used as the payload
+# of a JSON Web Signature (JWS) structure, enabling the claims
+# to be integrity protected with a signature for later verification
+# @see http://tools.ietf.org/html/rfc7519
+module JwtNacl
+  module_function
+
+  # @param claims [Hash] input for a digital signature computation
+  # @param private_key [String] 32 random bytes (optional)
+  # @return [Hash] a hash with a signed jwt, private_key, and public_key
+  # @example
+  #   claims = {iss: "mike", exp: 1300819380, :"http://example.com/is_root" => false}
+  #   private_hex = "d2c5c54bc205266f12a8a21809aa2989536959f666a5d68710e6fab94674041a"
+  #   private_key = [private_hex].pack("H*")
+  #   public_hex = "1e10af4b79b8d005c8b4237161f1350844b2e6c1a8d6aa4817151c04a2751731"
+  #   public_key = [public_hex].pack("H*")
+  #   JwtNacl.sign(claims, private_key)
+  #   # => {jwt: "eyJhbGciOiJFZDI1NTE5IiwidHlwIjoiSldUIn0.eyJpc3MiOiJtaWtlIiwiZXhwIjoxMzAwODE5MzgwLCJodHRwOi8vZXhhbXBsZS5jb20vaXNfcm9vdCI6ZmFsc2V9.f2y6Sax9eK9M3JiFCt4ZfzzOL56SWNhydHpPPIoVkm21D3_bJq5DmFLgH8ee2OlzSlZMoq009jLSg6AC0mn4DA", private_key: private_key, public_key: public_key}
+  def sign(claims, private_key = nil)
+    Jws.sign(validated_payload(claims), private_key)
+  end
+
+  # @param jwt [String] a JSON Web Token
+  # @param public_key [String] 32 byte verifying key
+  # @return [Hash] +{claims: < the jwt claims set hash >}+ if the jwt verifies,
+  #   or +{error: "invalid"}+ otherwise
+  # @example
+  #   jwt = "eyJhbGciOiJFZDI1NTE5IiwidHlwIjoiSldUIn0.eyJpc3MiOiJtaWtlIiwiZXhwIjoxMzAwODE5MzgwLCJodHRwOi8vZXhhbXBsZS5jb20vaXNfcm9vdCI6ZmFsc2V9.f2y6Sax9eK9M3JiFCt4ZfzzOL56SWNhydHpPPIoVkm21D3_bJq5DmFLgH8ee2OlzSlZMoq009jLSg6AC0mn4DA"
+  #   hex = "1e10af4b79b8d005c8b4237161f1350844b2e6c1a8d6aa4817151c04a2751731"
+  #   public_key = [hex].pack("H*")
+  #   JwtNacl.verify(jwt, public_key)
+  #   # => {claims: {iss: "mike", exp: 1300819380, :"http://example.com/is_root" => false}}
+  def verify(jwt, public_key)
+    verified_claims(Jws.verify(jwt, public_key))
+  end
+
+  def validated_payload(claims)
+    raise("invalid claims") if !claims || claims.empty? || !claims.is_a?(Hash)
+    claims.to_json
+  end
+
+  def verified_claims(hsh)
+    return {error: "invalid"} if hsh[:error]
+    {claims: decoded_claims(hsh[:jwt].split(".")[1])}
+  end
+
+  def decoded_claims(str)
+    Util.symbolize_keys(
+      JSON.parse(
+        Base64Url.decode(str)
+      )
+    )
+  end
+
+  private_class_method :validated_payload,
+    :verified_claims,
+    :decoded_claims
+end
+
+# alias
+JWT = JwtNacl

data/lib/jwt_nacl/base64_url.rb

@@ -0,0 +1,42 @@
+require "base64"
+
+module JwtNacl
+  # Provide base64url encoding and decoding functions without padding, based upon standard
+  # base64 encoding and decoding functions that do use padding
+  # @see http://tools.ietf.org/html/rfc7515#appendix-C
+  module Base64Url
+    module_function
+
+    # @param str [String]
+    # @return [String] a urlsafe_encode64 string with all trailing "=" padding removed
+    # @example
+    #   Base64Url.encode("foo")
+    #   # => "Zm9v"
+    def encode(str)
+      base64_padding_removed(Base64.urlsafe_encode64(str))
+    end
+
+    # @param str [String] encoded as url_encode64
+    # @return [String] with trailing "=" padding added before decoding
+    # @example
+    #   Base64Url.decode("YmFy")
+    #   # => "bar"
+    def decode(str)
+      Base64.urlsafe_decode64(base64_padding_added(str))
+    end
+
+    def base64_padding_removed(encoded)
+      encoded.gsub(/[=]/, "")
+    end
+
+    def base64_padding_added(str)
+      mod = str.length % 4
+      return str if mod == 0
+      raise("Invalid base64 string") if mod == 1
+      "#{str}#{"=" * (4 - mod)}"
+    end
+
+    private_class_method :base64_padding_removed,
+      :base64_padding_added
+  end
+end

data/lib/jwt_nacl/ed25519.rb

@@ -0,0 +1,45 @@
+require "rbnacl/libsodium"
+require "rbnacl"
+
+module JwtNacl
+  # Sign or verify JSON Web Signature (JWS) signing input using Edwards-curve
+  # Digital Signature Algorithm (EdDSA) curve Ed25519
+  # @see https://ed25519.cr.yp.to/
+  module Ed25519
+    module_function
+
+    # @param message [String] input payload for a digital signature computation
+    # @param seed [String] 32 random bytes (optional)
+    # @return [Hash] a hash with the private_key, public_key, and signature
+    # @example
+    #   Ed25519.sign(message, seed)
+    #   # => {private_key: private_key, public_key: public_key, signature: signature}
+    def sign(message, seed = nil)
+      signing_key = seed ? RbNaCl::SigningKey.new(seed) : RbNaCl::SigningKey.generate
+      {
+        private_key: signing_key.to_bytes,
+        public_key: signing_key.verify_key.to_bytes,
+        signature: signing_key.sign(message)
+      }
+    end
+
+    # @param public_key [String] 32 byte key used to authenticate a digital signature
+    # @param signature [String] alleged signature to be checked
+    # @param message [String] message to be authenticated
+    # @return [String, Boolean] verified message or false
+    # @example
+    #   Ed25519.verify(public_key, signature, message)
+    #   # => message
+    def verify(public_key, signature, message)
+      verify_key(public_key, signature, message)
+      message
+    rescue
+      false
+    end
+
+    def verify_key(public_key, signature, message)
+      RbNaCl::VerifyKey.new(public_key)
+        .verify(signature, message)
+    end
+  end
+end

data/lib/jwt_nacl/jws.rb

@@ -0,0 +1,58 @@
+require "jwt_nacl/base64_url"
+require "jwt_nacl/ed25519"
+
+module JwtNacl
+  # Represent content to be secured with digital signatures
+  # @see http://tools.ietf.org/html/rfc7515
+  module Jws
+    HEADER = {
+      alg: "Ed25519",
+      typ: "JWT"
+    }
+    JWS_PARTS = 3
+
+    module_function
+
+    # @param payload [String] input for a digital signature computation
+    # @param private_key [String] 32 random bytes (optional)
+    # @return [Hash] a hash with a signed jwt, private_key, and public_key
+    # @example
+    #   Jws.sign(payload, private_key)
+    #   # => {jwt: jwt, private_key: private_key, public_key: public_key}
+    def sign(payload, private_key = nil)
+      signing_input = encode_input(payload)
+      hsh = Ed25519.sign(signing_input, private_key)
+      {
+        jwt: "#{signing_input}.#{Base64Url.encode(hsh[:signature])}",
+        private_key: hsh[:private_key],
+        public_key: hsh[:public_key]
+      }
+    end
+
+    # @param jwt [String] input to be authenticated
+    # @param public_key [String] 32 byte key used to authenticate a digital signature
+    # @return [Hash] a hash with a verified jwt (e.g. jwt: jwt) or not verified (e.g. error: "invalid")
+    # @example
+    #   Jws.verify(jwt, public_key)
+    #   # => {jwt: jwt}
+    def verify(jwt, public_key)
+      verified?(jwt, public_key) ? {jwt: jwt} : {error: "invalid"}
+    end
+
+    def encode_input(payload)
+      "#{Base64Url.encode(HEADER.to_json)}.#{Base64Url.encode(payload)}"
+    end
+
+    def verified?(jwt, public_key)
+      ary = jwt.split(".")
+      return unless ary.length == JWS_PARTS
+      signature = Base64Url.decode(ary[2])
+      message = "#{ary[0]}.#{ary[1]}"
+
+      Ed25519.verify(public_key, signature, message)
+    end
+
+    private_class_method :encode_input,
+      :verified?
+  end
+end

data/lib/jwt_nacl/util.rb

@@ -0,0 +1,34 @@
+require "rbnacl/libsodium"
+require "rbnacl"
+
+module JwtNacl
+  # Utility methods
+  module Util
+    ED25519_SEEDBYTES = 32
+
+    module_function
+
+    def ed25519_random_seed
+      RbNaCl::Random.random_bytes(ED25519_SEEDBYTES)
+    end
+
+    # @param hsh [Hash]
+    # @return [Hash] a new hash with all keys converted to symbols,
+    #   provided that they respond to .to_sym
+    # @example
+    #   Util.symbolize_keys({"a" =>  0, "b" => "2", c: "3"})
+    #   # => {a: 0, b: "2", c: "3"}
+    # @see cf. rails activesupport/lib/active_support/core_ext/hash/keys.rb
+    def symbolize_keys(hsh)
+      transform_keys(hsh) { |key| key.to_sym rescue key }
+    end
+
+    def transform_keys(hsh)
+      result = Hash.new
+      hsh.keys.each { |k| result[yield(k)] = hsh[k] }
+      result
+    end
+
+    private_class_method :transform_keys
+  end
+end

data/lib/jwt_nacl/version.rb

@@ -0,0 +1,3 @@
+module JwtNacl
+  VERSION = "0.1.0"
+end

metadata

@@ -0,0 +1,189 @@
+--- !ruby/object:Gem::Specification
+name: jwt_nacl
+version: !ruby/object:Gem::Version
+  version: 0.1.0
+platform: ruby
+authors:
+- Gary Fleshman
+autorequire: 
+bindir: exe
+cert_chain: []
+date: 2017-01-29 00:00:00.000000000 Z
+dependencies:
+- !ruby/object:Gem::Dependency
+  name: rbnacl
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '4.0'
+  type: :runtime
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '4.0'
+- !ruby/object:Gem::Dependency
+  name: rbnacl-libsodium
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '1.0'
+  type: :runtime
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '1.0'
+- !ruby/object:Gem::Dependency
+  name: bundler
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '1.13'
+  type: :development
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '1.13'
+- !ruby/object:Gem::Dependency
+  name: minitest
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '5.0'
+  type: :development
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '5.0'
+- !ruby/object:Gem::Dependency
+  name: minitest-reporters
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '1.1'
+  type: :development
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '1.1'
+- !ruby/object:Gem::Dependency
+  name: rake
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '12.0'
+  type: :development
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '12.0'
+- !ruby/object:Gem::Dependency
+  name: simplecov
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '0.13'
+  type: :development
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '0.13'
+- !ruby/object:Gem::Dependency
+  name: yard
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '0.9'
+  type: :development
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '0.9'
+- !ruby/object:Gem::Dependency
+  name: wwtd
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '1.3'
+  type: :development
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '1.3'
+description: |2
+      A Ruby JSON Web Token implementation using NaCl Ed25519 digital signatures from the
+      state-of-the-art networking and cryptography library by Daniel J. Bernstein.
+email:
+- gfleshman@newforge-tech.com
+executables: []
+extensions: []
+extra_rdoc_files: []
+files:
+- ".gitignore"
+- ".travis.yml"
+- CHANGELOG.md
+- Gemfile
+- Gemfile.lock
+- LICENSE.md
+- README.md
+- Rakefile
+- bin/console
+- bin/setup
+- jwt_nacl.gemspec
+- lib/jwt_nacl.rb
+- lib/jwt_nacl/base64_url.rb
+- lib/jwt_nacl/ed25519.rb
+- lib/jwt_nacl/jws.rb
+- lib/jwt_nacl/util.rb
+- lib/jwt_nacl/version.rb
+homepage: https://github.com/garyf/jwt_nacl
+licenses:
+- MIT
+metadata: {}
+post_install_message: 
+rdoc_options: []
+require_paths:
+- lib
+required_ruby_version: !ruby/object:Gem::Requirement
+  requirements:
+  - - ">="
+    - !ruby/object:Gem::Version
+      version: 2.2.6
+required_rubygems_version: !ruby/object:Gem::Requirement
+  requirements:
+  - - ">="
+    - !ruby/object:Gem::Version
+      version: '0'
+requirements: []
+rubyforge_project: 
+rubygems_version: 2.6.8
+signing_key: 
+specification_version: 4
+summary: JSON Web Token (JWT) for Ruby using NaCl cryptography
+test_files: []