keyless 2.2.0 → 2.4.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 974bd00d2393477067c07dfb2f8a6ee59745df9ef4de0ccaa6e7388f1a0f24a8
-  data.tar.gz: 6f96ec9de89c6939b07094c127db3a7f2250c981be9c0b5f0e1bdf0b9dbf524b
+  metadata.gz: 4a1c1ff59e0ef496566e14afa53b74aadf81b4581f02853bf6bb78c0a3faaf36
+  data.tar.gz: 0a5ae6290337659356209b0f9a22281c2c8c2add1541dfd8b6c1d04e8637ba1b
 SHA512:
-  metadata.gz: e6faeb0a6f8e53dc18ec6f2dc87ec2109cb674ff35c3b681dde304cf1c84f7d82bb4f3d84951ac9f41b6711eaa22d196ed65f268eecea2b0f4e0027411e56b70
-  data.tar.gz: 893a2cb74c8db289a35b80861d1885ef4d37a6b662a3cf493aea6ad45bb56811b2b7c03be0ea1cc1eb5d774db48805ab194ec1d81de14667142bd7cb94850d8f
+  metadata.gz: 3b977633e74432ac6e0b5178c3041bfe8a00bcba5559e27c3d14626f167e09cb9d8f086a99b3f1724566115d72d6cbc8398ca5705d21f257286a4a4f0a28eab7
+  data.tar.gz: e8b8fa8df3d6c65263ec8dad91fc134c1782c2047ae99d654d71031968c2d98ee151757419d53489c6fbea2f20690efc91966bd2e43d6891e887acd83651a65a

data/.rubocop.yml

@@ -1,3 +1,7 @@
+inherit_from:
+  - https://potpourri.hausgold.de/config/rubocop.yml
+  - https://potpourri.hausgold.de/config/rubocop-gem.yml
+
 plugins:
   - rubocop-rspec
   - rubocop-rails
@@ -5,9 +9,6 @@ plugins:
 Rails:
   Enabled: true
 
-Style/Documentation:
-  Enabled: true
-
 AllCops:
   NewCops: enable
   SuggestExtensions: false
@@ -20,43 +21,12 @@ AllCops:
     - build/**/*
     - gemfiles/**/*
 
-Metrics/BlockLength:
-  Exclude:
-    - Rakefile
-    - '*.gemspec'
-    - spec/**/*.rb
-    - '**/*.rake'
-    - doc/**/*.rb
-
-# MFA is not yet enabled for our gems yet.
-Gemspec/RequireMFA:
-  Enabled: false
-
-# We stay with the original Ruby Style Guide recommendation.
-Layout/LineLength:
-  Max: 80
-
-# Document all the things.
-Style/DocumentationMethod:
-  Enabled: true
-  RequireForNonPublicMethods: true
-
 # It's a deliberate idiom in RSpec.
 # See: https://github.com/bbatsov/rubocop/issues/4222
 Lint/AmbiguousBlockAssociation:
   Exclude:
     - "spec/**/*"
 
-# Because +expect_any_instance_of().to have_received()+ is not
-# supported with the +with(hash_including)+ matchers
-RSpec/MessageSpies:
-  EnforcedStyle: receive
-
-# Because nesting makes sense here to group the feature tests
-# more effective. This increases maintainability.
-RSpec/NestedGroups:
-  Max: 4
-
 # Disable regular Rails spec paths.
 Rails/FilePath:
   Enabled: false
@@ -64,8 +34,3 @@ Rails/FilePath:
 # Because we just implemented the ActiveRecord API.
 Rails/SkipsModelValidations:
   Enabled: false
-
-# We use memoized helpers all over the place to construct inputs and output
-# which can be customized at nested contexts easily.
-RSpec/MultipleMemoizedHelpers:
-  Enabled: false

data/CHANGELOG.md

@@ -2,6 +2,15 @@
 
 * TODO: Replace this bullet point with an actual description of a change.
 
+### 2.4.0 (19 December 2025)
+
+* Migrated to a shared Rubocop configuration for HAUSGOLD gems ([#19](https://github.com/hausgold/keyless/pull/19))
+
+### 2.3.0 (16 December 2025)
+
+* Switched from `httparty` to the `http` gem and added support for retries on
+  the RSA remote fetching (5 times by default) ([#18](https://github.com/hausgold/keyless/pull/18))
+
 ### 2.2.0 (2 December 2025)
 
 * Loosend up the version requirement for the `jwt` gem to `>= 2.6`, so people

data/Envfile

@@ -1,3 +1,4 @@
 LANG=en_US.UTF-8
 LANGUAGE=en_US.UTF-8
 LC_ALL=en_US.UTF-8
+RUBOCOP_CACHE_ROOT=/app/tmp

data/LICENSE

@@ -1,6 +1,6 @@
 MIT License
 
-Copyright (c) 2023 HAUSGOLD | talocasa GmbH
+Copyright (c) 2025 HAUSGOLD | talocasa GmbH
 
 Permission is hereby granted, free of charge, to any person obtaining a copy
 of this software and associated documentation files (the "Software"), to deal

data/README.md

@@ -75,8 +75,8 @@ end
 ### RSA public key helper
 
 We provide a straightforward solution to deal with the provision of RSA public
-keys.  Somethimes you want to distribute them by file to each machine and have
-a local access, and somethimes you provide an endpoint on your identity
+keys.  Sometimes you want to distribute them by file to each machine and have
+a local access, and sometimes you provide an endpoint on your identity
 provider to fetch the RSA public key via HTTP/HTTPS.  The `RsaPublicKey` class
 helps you to fulfill this task easily.
 

data/keyless.gemspec

@@ -36,9 +36,10 @@ Gem::Specification.new do |spec|
   spec.required_ruby_version = '>= 3.2'
 
   spec.add_dependency 'activesupport', '>= 7.1'
-  spec.add_dependency 'httparty', '>= 0.21'
+  spec.add_dependency 'http', '~> 5.3'
   spec.add_dependency 'jwt', '>= 2.6'
   spec.add_dependency 'mutex_m', '>= 0.3'
   spec.add_dependency 'recursive-open-struct', '~> 2.0'
+  spec.add_dependency 'retries', '>= 0.0.5'
   spec.add_dependency 'zeitwerk', '~> 2.6'
 end

data/lib/keyless/configuration.rb

@@ -64,6 +64,10 @@ module Keyless
     # here.
     config_accessor(:rsa_public_key_url) { nil }
 
+    # When the remote (HTTP/HTTPS) fetching failed, how many times to retry the
+    # operation.
+    config_accessor(:rsa_public_key_fetch_retries) { 5 }
+
     # You can preconfigure the {RsaPublickey} class to enable/disable
     # caching. For a remote public key location it is handy to cache the
     # result for some time to keep the traffic low to this resource server.

data/lib/keyless/jwt.rb

@@ -51,7 +51,7 @@ module Keyless
       payload.typ == 'refresh'
     end
 
-    # Retrives the expiration date from the payload when set.
+    # Retrieves the expiration date from the payload when set.
     #
     # @return [nil|ActiveSupport::TimeWithZone] The expiration date
     def expires_at

data/lib/keyless/rsa_public_key.rb

@@ -59,13 +59,20 @@ module Keyless
     def fetch_encoded_key
       raise ArgumentError, 'No URL for RsaPublicKey configured' unless url
 
-      if remote?
-        res = HTTParty.get(url)
-        raise FetchError, res.inspect unless (200..299).cover? res.code
+      remote? ? fetch_encoded_key_via_http : File.read(url)
+    end
+
+    # Fetch the encoded (DER, or PEM) public key from a remote location via
+    # HTTP/HTTPS.
+    #
+    # @return [String] The encoded public key
+    def fetch_encoded_key_via_http
+      conf = ::Keyless.configuration
+      with_retries(max_tries: conf.rsa_public_key_fetch_retries) do
+        res = HTTP.get(url)
+        raise FetchError, res.inspect unless res.status.success?
 
-        res.body
-      else
-        File.read(url)
+        res.to_s
       end
     end
 

data/lib/keyless/version.rb

@@ -3,7 +3,7 @@
 # The gem version details.
 module Keyless
   # The version of the +keyless+ gem
-  VERSION = '2.2.0'
+  VERSION = '2.4.0'
 
   class << self
     # Returns the version of gem as a string.

data/lib/keyless.rb

@@ -14,7 +14,8 @@ require 'jwt'
 require 'recursive-open-struct'
 require 'singleton'
 require 'openssl'
-require 'httparty'
+require 'http'
+require 'retries'
 
 # The JWT authentication concern.
 module Keyless

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: keyless
 version: !ruby/object:Gem::Version
-  version: 2.2.0
+  version: 2.4.0
 platform: ruby
 authors:
 - Hermann Mayer
@@ -26,19 +26,19 @@ dependencies:
       - !ruby/object:Gem::Version
         version: '7.1'
 - !ruby/object:Gem::Dependency
-  name: httparty
+  name: http
   requirement: !ruby/object:Gem::Requirement
     requirements:
-    - - ">="
+    - - "~>"
       - !ruby/object:Gem::Version
-        version: '0.21'
+        version: '5.3'
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
-    - - ">="
+    - - "~>"
       - !ruby/object:Gem::Version
-        version: '0.21'
+        version: '5.3'
 - !ruby/object:Gem::Dependency
   name: jwt
   requirement: !ruby/object:Gem::Requirement
@@ -81,6 +81,20 @@ dependencies:
     - - "~>"
       - !ruby/object:Gem::Version
         version: '2.0'
+- !ruby/object:Gem::Dependency
+  name: retries
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: 0.0.5
+  type: :runtime
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: 0.0.5
 - !ruby/object:Gem::Dependency
   name: zeitwerk
   requirement: !ruby/object:Gem::Requirement