logstash-filter-auth0jwt 0.1.1 → 0.1.2

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA1:
-  metadata.gz: 13944d2420bbbf12cde034a9f5f1cf67c40a4a31
-  data.tar.gz: e57da54c0362bf6e663b3b77f7f18218f37fcdb3
+  metadata.gz: 735eca9fd8ea461d5e1d82d217417d3ea6baa07a
+  data.tar.gz: 1d9ef06731bcf034c69f8eee6c94f43832948c9b
 SHA512:
-  metadata.gz: 2fa8568c1cd99b6808ecb756c2962574fb463d952e8548f0c25c1c589b48d62ebd08e6cd24043406290c5ccf8bf43be4470a7215b8c3e9e51dda1e68d867670a
-  data.tar.gz: f348aeb62befac8ac28c32a0005bf621514724e9d74b92d3f75f2395fcd3825ec386ec570274dfe675682bf318c9258f5c5597409f893290f3f5d851252ffce3
+  metadata.gz: a152000687c1e73e9e04fb979da8b51f9840ef1a8fbd8a6b58d81e32ea808913ea28573d9acf5e7bd1ecb70d2e7724b3aa1ec8f8027343e25eeb7f83edd12779
+  data.tar.gz: 92199db6ac084638b6a75045431bfaf0187e6f72c5b9296b1efe8fe25d7898e39baaa019ca7414317fcde5162b47a001edd92165548d71787bb2b2fb18496028

data/lib/logstash/filters/auth0jwt.rb

@@ -37,13 +37,14 @@ class LogStash::Filters::Auth0Jwt < LogStash::Filters::Base
   public
   def filter(event)
 
+    jwt = event['jwt']
     if @last_purge - Time.now > @purge_seconds
       @cache.clear
     end
 
-    if !@cache[event['jwt']]
+    if !@cache[jwt]
       data = {
-        id_token: event['jwt']
+        id_token: jwt
       }
       uri = URI.parse("https://#{@domain}/tokeninfo")
       headers = {'Content-Type' => "application/json"}
@@ -53,20 +54,25 @@ class LogStash::Filters::Auth0Jwt < LogStash::Filters::Base
       request.body = data.to_json
       response = https.request(request)
 
-      userHash = JSON.parse(response.body)
-
-      include_user_properties.each { |user_property|
-
-        if userHash[user_property]
-          event.set(user_property, userHash[user_property])
-        end
-      }
-
-      @cache[event['jwt']] = response.code == "200"
+      if response.code == "200"
+        userHash = JSON.parse(response.body)
+        @cache[jwt] = userHash
+      else
+        @cache[jwt] = nil
+      end
     end
 
-    if @cache[event['jwt']] != true
+    include_user_properties.each { |user_property|
+      if !@cache[jwt].nil? && @cache[jwt][user_property]
+        event.set(user_property, @cache[jwt][user_property])
+      end
+    }
+
+    if @cache[jwt].nil?
+      @logger.debug("JWT not authorised, event dropped")
       event.cancel
+    else
+      @logger.debug("JWT authorised")
     end
 
     # filter_matched should go in the last line of our successful code

data/logstash-filter-auth0jwt.gemspec

@@ -1,6 +1,6 @@
 Gem::Specification.new do |s|
   s.name          = 'logstash-filter-auth0jwt'
-  s.version       = '0.1.1'
+  s.version       = '0.1.2'
   s.licenses      = ['Apache License (2.0)']
   s.summary       = 'Logstash filter plugin for Auth0 JWT validation.'
   s.description   = 'Logstash filter plugin for Auth0 JWT validation.'

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: logstash-filter-auth0jwt
 version: !ruby/object:Gem::Version
-  version: 0.1.1
+  version: 0.1.2
 platform: ruby
 authors:
 - Peter Price