jwt_signed_request 1.2.0 → 1.2.1

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA1:
-  metadata.gz: 63ee8746247f0608359ddce429288ffdc221c557
-  data.tar.gz: 287faa1a7791c0dbe34594b18f64107ac55b52d0
+  metadata.gz: 12f82e6c9a8cf8a78430870a13956801c8d41c52
+  data.tar.gz: '09eaae125e6f453acff68839cb7c17e817871bb5'
 SHA512:
-  metadata.gz: 585079a4bde041f67d87d0209d18bdc3912b9d282947b3d258c02ae152beabc85bd7da6306b5ddb657e7f9f0f7432f833aa455f3817d1737eac67648798e6290
-  data.tar.gz: 6e08fcfcb59f449c7745c0d4b17ad16b316edfb0db78e1fea73bb0ff7abaea047ca9e2fe66b6a7637601655ca8faae34d472e1a7fe2a7c6ba3d3fdd2eef1086a
+  metadata.gz: d1e00ca21e83575c1f8690d7000c35ec0da86b7f481708928d1045d53d50fb5594afb4240a04f44bd8c17132cf94dbabf4f38e98635c97b05216548d6d0b2a71
+  data.tar.gz: b73cf2457388eac51c97d492ac0533a10b754190a842b524155b28326fa0a96def9403665fbefc330e4422065ce2c36c3e34445a547507de7b875106eab30fbe

data/README.md

@@ -155,8 +155,9 @@ exDdlmXEjHYaixzYIduluGXd3cjg4H2gjqsY/NCpJ9nM8/AAINSrq+qPuA==
 """
 
 class Server < Sinatra::Base
-  use JWTSignedRequest::Middlewares::Rack
-     secret_key: OpenSSL::PKey::EC.new(PUBLIC_KEY)
+  use JWTSignedRequest::Middlewares::Rack,
+     secret_key: OpenSSL::PKey::EC.new(PUBLIC_KEY),
+     exclude_paths: /public|health/              # optional regex
  end
 ```
 

data/lib/jwt_signed_request/middlewares/rack.rb

@@ -10,15 +10,18 @@ module JWTSignedRequest
         @app = app
         @secret_key = options.fetch(:secret_key)
         @algorithm = options[:algorithm]
+        @exclude_paths = options[:exclude_paths]
       end
 
       def call(env)
         begin
-          ::JWTSignedRequest.verify(
-            request: ::Rack::Request.new(env),
-            secret_key: secret_key,
-            algorithm: algorithm
-          )
+          unless excluded_path?(env)
+            ::JWTSignedRequest.verify(
+              request: ::Rack::Request.new(env),
+              secret_key: secret_key,
+              algorithm: algorithm
+            )
+          end
 
           app.call(env)
         rescue ::JWTSignedRequest::UnauthorizedRequestError => e
@@ -28,7 +31,12 @@ module JWTSignedRequest
 
       private
 
-      attr_reader :app, :secret_key, :algorithm
+      attr_reader :app, :secret_key, :algorithm, :exclude_paths
+
+      def excluded_path?(env)
+        !exclude_paths.nil? &&
+          env['REQUEST_PATH'].match(exclude_paths)
+      end
     end
   end
 end

data/lib/jwt_signed_request/version.rb

@@ -1,3 +1,3 @@
 module JWTSignedRequest
-  VERSION = "1.2.0".freeze
+  VERSION = "1.2.1".freeze
 end

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: jwt_signed_request
 version: !ruby/object:Gem::Version
-  version: 1.2.0
+  version: 1.2.1
 platform: ruby
 authors:
 - Toan Nguyen
 autorequire: 
 bindir: bin
 cert_chain: []
-date: 2017-03-28 00:00:00.000000000 Z
+date: 2017-05-08 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: jwt
@@ -141,7 +141,7 @@ required_rubygems_version: !ruby/object:Gem::Requirement
       version: '0'
 requirements: []
 rubyforge_project: 
-rubygems_version: 2.4.5.1
+rubygems_version: 2.6.11
 signing_key: 
 specification_version: 4
 summary: JWT request signing and verification for Internal APIs