jwt_signed_request 1.0.1 → 1.0.2

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA1:
-  metadata.gz: 753794ac95f697ec022de56fe9d4db85265e4920
-  data.tar.gz: 16109643b05330e94cd586f246e57039892fa2ee
+  metadata.gz: 427fe8633c579541cd1e42bdf573b3e3d4017ad0
+  data.tar.gz: 393611e2bd664892a8485c9a012ed6640b4c2f04
 SHA512:
-  metadata.gz: 85f8a16181085937c113444c211d7e0eba0ecfe865d6e829576589713825df3263f392f44a4edb08ccf2ad3986bcf702964622ed9f8e69dc28f56d85a0f83283
-  data.tar.gz: dbbd9e2db0bfe7c0ca0c53f233af500f02aa878dfdf52edefe8408b7629b18d11da4a05016873e6361a96fb1626175e187410523e0954c9bcd558a3197bad9ff
+  metadata.gz: '0081e1187e16f6e38a8ef7dbe0acd95388c4111f0097acea9319b9b271e88d6ddcc882513b9945eb469d0ce3d5644829d12cbd7f49181fc67d5de1d6e5551c98'
+  data.tar.gz: c5020b652569207bfe5bd9f8c40cc28f04f646003c8bd57f5133202f17d99d9ac6fe7895da978c3ef3a774e48473d772aaa77d043184f795e8d130700e8c3269

data/README.md

@@ -1,4 +1,5 @@
 # JWT Signed Request
+[![travis ci build](https://api.travis-ci.org/envato/jwt_signed_request.svg)](https://travis-ci.org/envato/jwt_signed_request)
 
 Request signing and verification for Internal APIs using JWT.
 
@@ -85,7 +86,7 @@ AwEHoUQDQgAEuOC3ufTTnW0hVmCPNERb4LxaDE/OexDdlmXEjHYaixzYIduluGXd
 conn = Faraday.new(url: URI.parse('http://example.com')) do |faraday|
   faraday.use JWTSignedRequest::Middlewares::Faraday,
     secret_key: OpenSSL::PKey::EC.new(private_key),
-    algorithm: 'EC256',                     # optional (default: ES256)
+    algorithm: 'ES256',                     # optional (default: ES256)
     key_id: 'my-key-id',                    # optional
     issuer: 'my-issuer',                    # optional
     additional_headers_to_sign: ['X-AUTH']  # optional
@@ -169,7 +170,7 @@ We welcome contribution from everyone. Read more about it in
 
 For bug fixes, documentation changes, and small features:
 
-1. Fork it ( https://github.com/[my-github-username]/jwt_signed_request/fork )
+1. Fork it ( https://github.com/envato/jwt_signed_request/fork )
 2. Create your feature branch (git checkout -b my-new-feature)
 3. Commit your changes (git commit -am 'Add some feature')
 4. Push to the branch (git push origin my-new-feature)

data/lib/jwt_signed_request.rb

@@ -50,12 +50,20 @@ module JWTSignedRequest
   def self.verified_request?(request:, claims:)
     claims['method'].downcase == request.request_method.downcase &&
       claims['path'] == request.fullpath &&
-      claims['body_sha'] == Digest::SHA256.hexdigest(request.body.read || "") &&
+      claims['body_sha'] == Digest::SHA256.hexdigest(request_body(request: request)) &&
       verified_headers?(request: request, claims: claims)
   end
 
   private_class_method :verified_request?
 
+  def self.request_body(request:)
+    string = request.body.read
+    request.body.rewind
+    string
+  end
+
+  private_class_method :request_body
+
   def self.verified_headers?(request:, claims:)
     parsed_headers = JSON.parse(claims['headers'])
 

data/lib/jwt_signed_request/middlewares/rack.rb

@@ -4,7 +4,7 @@ require 'jwt_signed_request'
 module JWTSignedRequest
   module Middlewares
     class Rack
-      UNAUTHORIZED_STATUS_CODE = 401.freeze
+      UNAUTHORIZED_STATUS_CODE = 401
 
       def initialize(app, options = {})
         @app = app

data/lib/jwt_signed_request/version.rb

@@ -1,3 +1,3 @@
 module JWTSignedRequest
-  VERSION = "1.0.1".freeze
+  VERSION = "1.0.2".freeze
 end

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: jwt_signed_request
 version: !ruby/object:Gem::Version
-  version: 1.0.1
+  version: 1.0.2
 platform: ruby
 authors:
 - Toan Nguyen
 autorequire: 
 bindir: bin
 cert_chain: []
-date: 2016-09-20 00:00:00.000000000 Z
+date: 2017-01-04 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: jwt
@@ -141,9 +141,8 @@ required_rubygems_version: !ruby/object:Gem::Requirement
       version: '0'
 requirements: []
 rubyforge_project: 
-rubygems_version: 2.4.5.1
+rubygems_version: 2.5.2
 signing_key: 
 specification_version: 4
 summary: JWT request signing and verification for Internal APIs
 test_files: []
-has_rdoc: