jwt_sessions 3.1.0 → 3.1.1

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 7740c76d1bba04e91c960b59d8dd248d09adbecbea3359e09e49b9ec82cd4a98
-  data.tar.gz: 43192bbcb08751f07216e84939a2b025239cb13b641c4563567b551626df79ae
+  metadata.gz: e1264eae87a9f5dc03028ee842e83da499f4d9d3f819d10b676f1bcde974cc2a
+  data.tar.gz: a29d5d6d8a07d24f275072536c7cd912e041aeec6d4c9392eeebf30b9c6337a1
 SHA512:
-  metadata.gz: c96b79c7ba0a8952766d3d5501a34e5877f0f8bcebb9a3210318b42e86eaf3370c15b0a534e980cbb699493633fe2b7652ec1797f8c467a1838e76fdb246530c
-  data.tar.gz: aa1d46b6890bf7d5907ad9a190598c91855db0f90e3f6f5522d4b0390ccc92a797d8977162980a072db8fc0fb9553961683eb59896c1cc7881111fe48413f1e6
+  metadata.gz: 4abc1c449bd2692b00797c42c235d52dd4f67e30176e77d04da79a29fd5828ee73696908745ce8432af2cc8514523b24d4128158822ce412f2e9d6092550ad91
+  data.tar.gz: 6b7006560ab05859b51c9add771f029b68c0f09a391fe576c47b6e97ba72b1bdbabb8c787262a07553962e24bdccb2148c2bf960f614af56e497f8c18e9a4c7a

data/CHANGELOG.md

@@ -1,4 +1,10 @@
-## 3.1.0 (February 18, 20222)
+## 3.1.1 (May 6, 2023)
+
+Bugfixes:
+
+- fix bug with flushing empty refresh tokens (Unsupported command argument type: NilClass (TypeError))
+
+## 3.1.0 (February 18, 2023)
 
 Features:
 

data/README.md

@@ -119,7 +119,7 @@ Available `JWTSessions::Session.new` options:
 
 - **payload**: a hash object with session data which will be included into an access token payload. Default is an empty hash.
 - **refresh_payload**: a hash object with session data which will be included into a refresh token payload. Default is the value of the access payload.
-- **access_claims**: a hash object with [JWT claims](https://github.com/jwt/ruby-jwt#support-for-reserved-claim-names) which will be validated within the access token payload. For example, `{ aud: ["admin"], verify_aud: true }` means that the token can be used only by "admin" audience. Also, the endpoint can automatically validate claims instead. See `token_claims` method.
+- **access_claims**: a hash object with [JWT claims](https://github.com/jwt/ruby-jwt#support-for-reserved-claim-names) which will be validated within the access token payload. For example, `{ "aud" => ["admin"], "verify_aud" => true }` means that the token can be used only by "admin" audience. Also, the endpoint can automatically validate claims instead. See `token_claims` method.
 - **refresh_claims**: a hash object with [JWT claims](https://github.com/jwt/ruby-jwt#support-for-reserved-claim-names) which will be validated within the refresh token payload.
 - **namespace**: a string object which helps to group sessions by a custom criteria. For example, sessions can be grouped by user ID, making it possible to logout the user from all devices. More info [Sessions Namespace](#sessions-namespace).
 - **refresh_by_access_allowed**: a boolean value. Default is false. It links access and refresh tokens (adds refresh token ID to access payload), making it possible to perform a session refresh by the last expired access token. See [Refresh with access token](#refresh-with-access-token).
@@ -426,9 +426,9 @@ class UsersController < ApplicationController
 
   def token_claims
     {
-      aud: ["admin", "staff"],
-      verify_aud: true, # can be used locally instead of a global setting
-      exp_leeway: 15 # will be used instead of default leeway only for exp claim
+      "aud" => ["admin", "staff"],
+      "verify_aud" => true, # can be used locally instead of a global setting
+      "exp_leeway" => 15 # will be used instead of default leeway only for exp claim
     }
   end
 end

data/lib/jwt_sessions/store_adapters/redis_store_adapter.rb

@@ -78,7 +78,8 @@ module JWTSessions
           # to be able to properly initialize namespaced tokens extract their namespaces
           # and pass down to fetch_refresh
           token_namespace = namespace.to_s.empty? ? namespace_from_key(key) : namespace
-          acc[uid] = fetch_refresh(uid, token_namespace)
+          token_attrs = fetch_refresh(uid, token_namespace)
+          acc[uid] = token_attrs unless token_attrs.empty?
         end
       end
 

data/lib/jwt_sessions/version.rb

@@ -1,5 +1,5 @@
 # frozen_string_literal: true
 
 module JWTSessions
-  VERSION = "3.1.0"
+  VERSION = "3.1.1"
 end

data/test/units/jwt_sessions/test_session.rb

@@ -326,6 +326,16 @@ class TestSession < Minitest::Test
     assert_equal access_token.expiration.to_s, refresh_token.access_expiration
   end
 
+  def test_flush_namespaced_access_tokens_after_flush_namespaced
+    namespace = "test_namespace"
+    session = JWTSessions::Session.new(payload: payload, namespace: namespace)
+    session.login
+
+    assert_equal 1, session.flush_namespaced
+    # it should not throw an error
+    assert_equal 0, session.flush_namespaced_access_tokens
+  end
+
   def test_flush_all
     refresh_token = @session.instance_variable_get(:"@_refresh")
     flushed_count = JWTSessions::Session.flush_all

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: jwt_sessions
 version: !ruby/object:Gem::Version
-  version: 3.1.0
+  version: 3.1.1
 platform: ruby
 authors:
 - Julija Alieckaja
 autorequire:
 bindir: bin
 cert_chain: []
-date: 2023-02-18 00:00:00.000000000 Z
+date: 2023-05-06 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: jwt
@@ -127,7 +127,7 @@ required_rubygems_version: !ruby/object:Gem::Requirement
     - !ruby/object:Gem::Version
       version: '0'
 requirements: []
-rubygems_version: 3.4.6
+rubygems_version: 3.4.12
 signing_key:
 specification_version: 4
 summary: JWT Sessions