keratin-authn 0.1.1 → 0.1.2

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA1:
-  metadata.gz: 42fc6f727891054b77a0e1b4e456d3f436206de8
-  data.tar.gz: d890d883753d1a44ddaaf868c9ca0f6a1445cfcf
+  metadata.gz: 847208e3ba358b73e2d6cee499b41646493527b2
+  data.tar.gz: f1c1b9b89095596627089c2a2daa603c0b951195
 SHA512:
-  metadata.gz: ec8ecab45a116040c1163032d8b5bd01e2815e6391fcddfb9ad0b3463025f17c1820eee498d3f6a4a5c00f9aacc6218dd209768272f692c1e28791eb865cdc73
-  data.tar.gz: 8bf4b09aa819d05f7cdf42aa124c09fa94f1825b55803d334d8abd673ed3318563f96d7c2990e98870be0315696519c14bba39459835ed60e9d2e76a3ba98635
+  metadata.gz: a7c25eb47b0d5ae1b0a9cde426c9472c8731a8ede1a8bfb02ab8689f409e0f37ff7267d9fad88e9d91d5e53a05ac0d1ba705861403bd8ee8d77643aec4317674
+  data.tar.gz: 7ca65c1c66b67ce50e785b6e06b0c61fb7a47b2d8b9cdc0c52e95d617e982dfa0f5483b2a014c539cca3e6254b6c28977935283d20055af3560f870aac60a0ff

data/lib/keratin/authn/id_token_verifier.rb

@@ -12,11 +12,16 @@ module Keratin::AuthN
 
     def verified?
       jwt.present? &&
+        token_from_us? &&
         token_for_us? &&
         !token_expired? &&
         token_intact?
     end
 
+    def token_from_us?
+      jwt[:iss] == Keratin::AuthN.config.issuer
+    end
+
     def token_for_us?
       jwt[:aud] == Keratin::AuthN.config.audience
     end

data/lib/keratin/authn/test/helpers.rb

@@ -24,17 +24,17 @@ module Keratin::AuthN
       end
 
       # stubs the endpoints necessary to validate a signed JWT
-      private def stub_auth_server
+      private def stub_auth_server(issuer: Keratin::AuthN.config.issuer, keypair: jws_keypair)
         Keratin::AuthN.keychain.clear
-        stub_request(:get, "#{Keratin::AuthN.config.issuer}#{Keratin::AuthN.config.configuration_path}").to_return(
+        stub_request(:get, "#{issuer}#{Keratin::AuthN.config.configuration_path}").to_return(
           status: 200,
-          body: {'jwks_uri' => "#{Keratin::AuthN.config.issuer}/jwks"}.to_json
+          body: {'jwks_uri' => "#{issuer}/jwks"}.to_json
         )
-        stub_request(:get, "#{Keratin::AuthN.config.issuer}/jwks").to_return(
+        stub_request(:get, "#{issuer}/jwks").to_return(
           status: 200,
           body: {
             keys: [
-              jws_keypair.public_key.to_jwk.slice(:kty, :kid, :e, :n).merge(
+              keypair.public_key.to_jwk.slice(:kty, :kid, :e, :n).merge(
                 use: 'sig',
                 alg: JWS_ALGORITHM
               )

data/lib/keratin/authn/version.rb

@@ -1,5 +1,5 @@
 module Keratin
   module AuthN
-    VERSION = "0.1.1"
+    VERSION = "0.1.2"
   end
 end

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: keratin-authn
 version: !ruby/object:Gem::Version
-  version: 0.1.1
+  version: 0.1.2
 platform: ruby
 authors:
 - Lance Ivy
 autorequire: 
 bindir: exe
 cert_chain: []
-date: 2016-11-18 00:00:00.000000000 Z
+date: 2016-11-28 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: json-jwt