keycloak-ruby-client 0.0.11 → 0.0.12

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA1:
-  metadata.gz: 13f981a3377badd726b4a4869b71450891a14948
-  data.tar.gz: 5d53ca4983508dc7f18961fd2fc453d8cf9ed32d
+  metadata.gz: 9878d43fb302d62853eb782fc3383754f91868b0
+  data.tar.gz: 35a0684508c797d32cdce9cab24a74d11f8a3520
 SHA512:
-  metadata.gz: 9056dde4936b9e36cd54b0a0c4c9ebe268020b6448f5fa5936740164cb3c278ec4717c64935c5324b80dcc77858970676357ecf17ce3b31a1a1ab7a66bbc8c2a
-  data.tar.gz: 5ff7a88bed82b600f215b323d06f7db2bf91e6bd61e7585192e7f4d38a3a83ae65f0a1b3a14843be56c8f5a09148fe302f2e55b6eaca9aad7ed78df899d6dc53
+  metadata.gz: daea33df421c05d31d11e4d6fe8ee778de4a3ee1b4d6390ddd76d50e7cc93b5cb75eae70b12e2e576edc1a7def3c0ab7391169f4f41e895b11ff1c9e1dd833f8
+  data.tar.gz: 49940f216bba9ec05d1ddfd42664f023c5bc03bf4c3802276b0ca40dc536c8fedc2ce259cd0786c2f83752b9e5f73a345c42ca861372cb51bc4bf8a74174ba67

data/lib/keycloak/client.rb

@@ -33,6 +33,7 @@ module Keycloak
         @authenticate_grant_type = grant_type
       end
 
+      now = DateTime.now
       url = "#{@auth_server_url}/realms/#{realm}/protocol/openid-connect/token"
       res = JSON.parse post(url, {
         username: username,
@@ -42,7 +43,6 @@ module Keycloak
       }, try_refresh_token: false).body
       @access_token = res["access_token"]
       @refresh_token = res["refresh_token"]
-      now = DateTime.now
       @refresh_expires_in = now + res["refresh_expires_in"].seconds
       @expires_in = now + res["expires_in"].seconds
       true

data/lib/keycloak/realm.rb

@@ -37,7 +37,8 @@ module Keycloak
     end
 
     def parse_access_token(access_token)
-      decoded_token = JWT.decode access_token, public_key, false, { :algorithm => 'RS256' }
+      alg = JWT.decode(access_token, nil, false)[1]["alg"]
+      decoded_token = JWT.decode access_token, public_keys[alg], true, algorithm: alg
       AccessToken.new self, access_token, decoded_token
     end
 
@@ -47,12 +48,16 @@ module Keycloak
 
     private
 
-    def public_key
-      return @public_key if @public_key
+    def public_keys
+      return @public_keys if @public_keys
 
       keys = JSON.parse(RestClient.get("#{auth_server_url}/realms/#{realm}/protocol/openid-connect/certs").body)['keys']
-      jwk = JSON::JWK.new(keys[0])
-      @public_key = jwk.to_key
+      @public_keys = {}
+      keys.each do |key|
+        jwk = JSON::JWK.new(key)
+        @public_keys[key["alg"]] = jwk.to_key
+      end
+      @public_keys
     end
   end
 end

data/lib/keycloak/version.rb

@@ -1,3 +1,3 @@
 module Keycloak
-  VERSION = "0.0.11"
+  VERSION = "0.0.12"
 end

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: keycloak-ruby-client
 version: !ruby/object:Gem::Version
-  version: 0.0.11
+  version: 0.0.12
 platform: ruby
 authors:
 - Fuxin Hao
 autorequire: 
 bindir: exe
 cert_chain: []
-date: 2019-08-30 00:00:00.000000000 Z
+date: 2019-09-05 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: rails