next-auth-session-token-decoder 0.1.0

checksums.yaml

@@ -0,0 +1,7 @@
+---
+SHA256:
+  metadata.gz: ab938117f205be3d4b0c16dbec47c46631eff0e54a44a04e341b0b746382d743
+  data.tar.gz: c5d0269bcbdbef793528dd091a45289a888a56fffdf590f31f1ec3280d85d0a1
+SHA512:
+  metadata.gz: cdaa406032a808f88503be864ec17116d1820b2a53ab9017de7cf73d9db77134abff18c6df7dccd220e5ebb1b76847ed69bdbd0db2fb9cd7ee9e43d9dc971780
+  data.tar.gz: 80e424317d227be5db5d7cdb489c22045a63399be5fd342369f20653aac021f05e543bd5c9b9786607df31e2550ff2f89235f0f168a0021839bc3aa9f218234d

data/.rspec

@@ -0,0 +1,3 @@
+--format documentation
+--color
+--require spec_helper

data/Gemfile

@@ -0,0 +1,4 @@
+# frozen_string_literal: true
+
+source 'https://rubygems.org'
+gemspec

data/Gemfile.lock

@@ -0,0 +1,42 @@
+PATH
+  remote: .
+  specs:
+    next-auth-session-token-decoder (0.1.0)
+      hkdf (~> 1.0.0)
+      jose (~> 1.1.3)
+
+GEM
+  remote: https://rubygems.org/
+  specs:
+    concurrent-ruby (1.2.2)
+    diff-lcs (1.5.0)
+    hamster (3.0.0)
+      concurrent-ruby (~> 1.0)
+    hkdf (1.0.0)
+    jose (1.1.3)
+      hamster
+    rake (13.0.6)
+    rspec (3.12.0)
+      rspec-core (~> 3.12.0)
+      rspec-expectations (~> 3.12.0)
+      rspec-mocks (~> 3.12.0)
+    rspec-core (3.12.1)
+      rspec-support (~> 3.12.0)
+    rspec-expectations (3.12.2)
+      diff-lcs (>= 1.2.0, < 2.0)
+      rspec-support (~> 3.12.0)
+    rspec-mocks (3.12.4)
+      diff-lcs (>= 1.2.0, < 2.0)
+      rspec-support (~> 3.12.0)
+    rspec-support (3.12.0)
+
+PLATFORMS
+  x86_64-darwin-20
+
+DEPENDENCIES
+  next-auth-session-token-decoder!
+  rake (~> 13.0)
+  rspec (~> 3.12)
+
+BUNDLED WITH
+   2.4.8

data/LICENSE.txt

@@ -0,0 +1,21 @@
+The MIT License (MIT)
+
+Copyright (c) 2023 Andrey B.
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in
+all copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN
+THE SOFTWARE.

data/README.md

@@ -0,0 +1,53 @@
+# NextAuth.js Session Token Decoder
+
+If you ever find yourself in a situation where you need to decrypt the [NextAuth.js](https://next-auth.js.org/) session token on your Ruby backend, look no further than this gem. It’s specifically designed to make the decryption process easy and seamless. The source code for this library has been extracted from [Cooper Pet Care](https://cooperpetcare.com/)’s code base.
+
+## Installation
+
+```bash
+gem install next-auth-session-token-decoder
+```
+
+## Usage
+
+```ruby
+token = 'eyJhbGciOiJkaXIiLCJlbmMiOiJBMjU2R0NNIn0..VxVkx9tG5eLKexs-.GQ792tADkdL10q_EntQO6bu-QYgr2gIqx7RwfRzA7HkMMrQ8Bu5Bfgh5UjYnI6J9bnagd6C_eOoQTMypMkXynPX_ogEEwlxLZLTXgn2yFTIDZHFEyXlmV53_FRJ82BNoYLv76lVZuNJwYdID8R-2thjML2VE3AblcNn2KJNCreXMztPrN9-AwOlAHofK3Q.14-TZcu0Br4kS7IPWhlC8g'
+
+options = {
+  info: 'NextAuth.js Generated Encryption Key',
+  secret: 'super-secret-key',
+}
+
+NextAuthDecoder::Token.new(token, options).decode
+=>
+{
+  "email"=>"test@email.com",
+  "username"=>"Test username",
+  "iat"=>1678818018,
+  "exp"=>1681410018,
+  "sub"=>"2",
+  "jti"=>"ef109254-6cc0-4939-8cd3-faf172cd790f"
+}
+```
+
+## RSpec
+
+First install dependencies:
+
+```bash
+bundle install
+```
+
+Now you're ready to test it:
+
+```bash
+bundle exec rspec spec
+```
+
+## Contributing
+
+Bug reports and pull requests are welcome on GitHub at https://github.com/cooperpetcare/next-auth-session-token-decoder.
+
+## License
+
+The gem is available as open source under the terms of the [MIT License](https://opensource.org/licenses/MIT).

data/lib/next_auth_decoder/token.rb

@@ -0,0 +1,46 @@
+require 'openssl'
+require 'jose'
+require 'hkdf'
+
+module NextAuthDecoder
+  class InvalidDecryptionParams < StandardError; end
+  class Token
+    def initialize(token, info: '', secret: ENV['NEXT_AUTH_SECRET'], length: 32)
+      @token = token
+      @info = info
+      @length = length
+      @secret = secret
+    end
+
+    def decode
+      raise error if invalid?
+      JOSE::JWT
+        .decrypt(jwk_secret, @token)
+        .first
+        .fields
+        .to_h
+    rescue OpenSSL::Cipher::CipherError
+      puts 'Error: Decryption error.'
+      nil
+    end
+
+    private
+
+    def jwk_secret
+      @jwk_secret ||= JOSE::JWK.from_oct(encrypted_secret)
+    end
+
+    def encrypted_secret
+      @encrypted_secret ||=
+        HKDF.new(@secret, info: @info).read(@length)
+    end
+
+    def invalid?
+      @token.empty? || @info.nil? || @secret.nil?
+    end
+
+    def error
+      InvalidDecryptionParams.new('Error: Invalid decryption params')
+    end
+  end
+end

data/lib/next_auth_decoder/version.rb

@@ -0,0 +1,3 @@
+module NextAuthDecoder
+  VERSION = '0.1.0'
+end

data/lib/next_auth_decoder.rb

@@ -0,0 +1,3 @@
+module NextAuthDecoder
+  autoload :Token, 'next_auth_decoder/token'
+end

data/next_auth_decoder.gemspec

@@ -0,0 +1,40 @@
+# -*- encoding: utf-8 -*-
+
+$:.push File.expand_path('../lib', __FILE__)
+require 'next_auth_decoder/version'
+require 'next_auth_decoder/token'
+
+Gem::Specification.new do |spec|
+  spec.name = 'next-auth-session-token-decoder'
+  spec.version = NextAuthDecoder::VERSION
+  spec.platform = Gem::Platform::RUBY
+  spec.authors = ['Andrey Bayburin']
+  spec.email = ['hello@cooperpetcare.com']
+
+  spec.summary = 'NextAuth session token decoder'
+  spec.description = 'NextAuth session token decoder'
+  spec.homepage = 'https://cooperpetcare.com/engineering/next-auth-session-token-decoder/'
+  spec.license = 'MIT'
+
+  spec.metadata['allowed_push_host'] = 'https://rubygems.org/'
+  spec.metadata['homepage_uri'] = spec.homepage
+  spec.metadata['source_code_uri'] = 'https://github.com/cooperpetcare/next-auth-session-token-decoder'
+  # spec.metadata['changelog_uri'] = "TODO: Put your gem's CHANGELOG.md URL here."
+
+  # Specify which files should be added to the gem when it is released.
+  # The `git ls-files -z` loads the files in the RubyGem that have been added into git.
+  spec.files = Dir.chdir(__dir__) do
+    `git ls-files -z`.split("\x0").reject do |f|
+      (File.expand_path(f) == __FILE__) || f.start_with?(*%w[bin/ test/ spec/ features/ .git .github])
+    end
+  end
+  spec.bindir = 'bin'
+  spec.executables = spec.files.grep(%r{\Aexe/}) { |f| File.basename(f) }
+  spec.require_paths = ['lib']
+  spec.required_ruby_version = '>= 2.7.5'
+
+  spec.add_dependency('jose', '~> 1.1.3')
+  spec.add_dependency('hkdf', '~> 1.0.0')
+  spec.add_development_dependency('rake', '~> 13.0')
+  spec.add_development_dependency('rspec', '~> 3.12')
+end

data/sig/foogem.rbs

@@ -0,0 +1,4 @@
+module NextAuthDecoder
+  VERSION: String
+  # See the writing guide of rbs: https://github.com/ruby/rbs#guides
+end

metadata

@@ -0,0 +1,112 @@
+--- !ruby/object:Gem::Specification
+name: next-auth-session-token-decoder
+version: !ruby/object:Gem::Version
+  version: 0.1.0
+platform: ruby
+authors:
+- Andrey Bayburin
+autorequire:
+bindir: bin
+cert_chain: []
+date: 2023-03-14 00:00:00.000000000 Z
+dependencies:
+- !ruby/object:Gem::Dependency
+  name: jose
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: 1.1.3
+  type: :runtime
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: 1.1.3
+- !ruby/object:Gem::Dependency
+  name: hkdf
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: 1.0.0
+  type: :runtime
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: 1.0.0
+- !ruby/object:Gem::Dependency
+  name: rake
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '13.0'
+  type: :development
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '13.0'
+- !ruby/object:Gem::Dependency
+  name: rspec
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '3.12'
+  type: :development
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '3.12'
+description: NextAuth session token decoder
+email:
+- hello@cooperpetcare.com
+executables: []
+extensions: []
+extra_rdoc_files: []
+files:
+- ".rspec"
+- Gemfile
+- Gemfile.lock
+- LICENSE.txt
+- README.md
+- lib/next_auth_decoder.rb
+- lib/next_auth_decoder/token.rb
+- lib/next_auth_decoder/version.rb
+- next_auth_decoder.gemspec
+- sig/foogem.rbs
+homepage: https://cooperpetcare.com/engineering/next-auth-session-token-decoder/
+licenses:
+- MIT
+metadata:
+  allowed_push_host: https://rubygems.org/
+  homepage_uri: https://cooperpetcare.com/engineering/next-auth-session-token-decoder/
+  source_code_uri: https://github.com/cooperpetcare/next-auth-session-token-decoder
+post_install_message:
+rdoc_options: []
+require_paths:
+- lib
+required_ruby_version: !ruby/object:Gem::Requirement
+  requirements:
+  - - ">="
+    - !ruby/object:Gem::Version
+      version: 2.7.5
+required_rubygems_version: !ruby/object:Gem::Requirement
+  requirements:
+  - - ">="
+    - !ruby/object:Gem::Version
+      version: '0'
+requirements: []
+rubygems_version: 3.4.8
+signing_key:
+specification_version: 4
+summary: NextAuth session token decoder
+test_files: []