jwt_signed_request 2.4.1 → 2.5.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
-SHA256:
-  metadata.gz: 223bee2fbebac240f4545a6743a8142caa85e53368888efcd15b122d879fb0aa
-  data.tar.gz: eda9041c02891f02c67f88b0b5d5877a8540c89bc619212ebb06507d5c1a44f5
+SHA1:
+  metadata.gz: 6a4b6d9d7869c58d436404dc533c1918dc21a8fb
+  data.tar.gz: 4e87bacd334d5cafe414f6d350eb6b6c556fb2c1
 SHA512:
-  metadata.gz: 2f6b10faac1fb80562ed2f9240cf32f96b96c81b2ee04b2bd097cc53714a45f420411a94bfa8bf541fe81e5103a23aad185ba88dfa0aec679f4ad03d493be626
-  data.tar.gz: 1dabc24f6f7476b4fddeebd6662d81e63f93ff9fa5caad5ff93f8214c82586b1a83e8070c054dc4df381d13d2218b551a6e0ab303cab78f8f26588aea14c7535
+  metadata.gz: ebea05eab2c08b118fa7fd01b329e8e48ad1385806a3d97ed7cb6c3642b4d58a7f19bbcf4234b5ad7c6aa87fd71abce1cec8f582144deaeff7f24edb8bcfa61e
+  data.tar.gz: 4b23e201723c6066820df703c7bdf4c8fa281c281beef379f3ffb4c13fa333f95d54c348fae53224ae44222258858c1431fb94a94d9f8925c2d36930ec2cfb03

data/README.md

@@ -79,8 +79,7 @@ require 'jwt_signed_request'
 
 uri = URI('http://example.com')
 req = Net::HTTP::Get.new(uri)
-
-req['Authorization'] = JWTSignedRequest.sign(
+jwt_token = JWTSignedRequest.sign(
   method: req.method,
   path: req.path,
   headers: {"Content-Type" => "application/json"},
@@ -91,6 +90,8 @@ req['Authorization'] = JWTSignedRequest.sign(
   additional_headers_to_sign: ['X-AUTH']  # optional
 )
 
+req['Authorization'] = "Bearer #{jwt_token}"
+
 res = Net::HTTP.start(uri.hostname, uri.port) {|http|
   http.request(req)
 }

data/lib/jwt_signed_request/middlewares/faraday.rb

@@ -20,7 +20,7 @@ module JWTSignedRequest
           **optional_settings
         )
 
-        env[:request_headers].store("Authorization", jwt_token)
+        env[:request_headers].store("Authorization", "Bearer #{jwt_token}")
         app.call(env)
       end
 

data/lib/jwt_signed_request/verify.rb

@@ -50,8 +50,11 @@ module JWTSignedRequest
       @secret_key ||= stored_key.fetch(:key) { raise MissingKeyIdError }
     end
 
+    JWT_BEARER_REGEX = /\A(Bearer\s+)?([^*]+)\z/
+
     def jwt_token
-      @jwt_token ||= Headers.fetch('Authorization', request)
+      @jwt_token ||= Headers.fetch('Authorization', request) &&
+        Headers.fetch('Authorization', request).match(JWT_BEARER_REGEX)[2]
     end
 
     def claims

data/lib/jwt_signed_request/version.rb

@@ -1,5 +1,5 @@
 # frozen_string_literal: true
 
 module JWTSignedRequest
-  VERSION = '2.4.1'.freeze
+  VERSION = '2.5.0'.freeze
 end

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: jwt_signed_request
 version: !ruby/object:Gem::Version
-  version: 2.4.1
+  version: 2.5.0
 platform: ruby
 authors:
 - Envato
 autorequire: 
 bindir: bin
 cert_chain: []
-date: 2019-01-08 00:00:00.000000000 Z
+date: 2019-01-22 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: jwt
@@ -154,7 +154,7 @@ required_rubygems_version: !ruby/object:Gem::Requirement
       version: '0'
 requirements: []
 rubyforge_project: 
-rubygems_version: 2.7.6
+rubygems_version: 2.6.13
 signing_key: 
 specification_version: 4
 summary: JWT request signing and verification for Internal APIs