okta-jwt 0.1.0 → 0.2.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 51baf643a26e73a82ac3bb0dffb9a5cd631d560920ba10c064b890d36da2c47a
-  data.tar.gz: 61d85c61b02cee7a38a75ee699a1acab0b2d77f87f3c890255344505570a72a9
+  metadata.gz: d86a02a18fafb45fcc0bb032360de8c925c084fb53e6d6cc1eba219befcc353a
+  data.tar.gz: 98c2c4cfd3e45288de02c616a97660135ec77e21223b071191d2e1f49847dc54
 SHA512:
-  metadata.gz: 799d0370eec69267493467ad8fe711a464f8b28c24fc7ef4621dca3596d238aac25a57ddcb8370d8cba68bd2634767c6db4fec64ad052e525536d1ce111704d9
-  data.tar.gz: 74426bb23cdf7ae60d17ddeab5b94c8dff53b88fa6ec6ac5193f077402fc1d7bc05238be44620128c3b0cbf1726a86da6d0cdf4521d6d3a92114717cbe8292d6
+  metadata.gz: 67f895b7796bfd0279c0225b806a36396bc53fadeee8f86ddad66de19f853e4727edda2027015182a987f2b478cabe22baf9cf77c23e1d9f1d424455a28d24d7
+  data.tar.gz: 4cb76774add99285f65827fb7d3ef7d9a64ad4a7753fbb84be25cad44860d28724cceca9652f20372d94d2c7a2105224a90f2de014188b4c54d1cadc68e06fd8

data/Gemfile.lock

@@ -1,7 +1,7 @@
 PATH
   remote: .
   specs:
-    okta-jwt (0.1.0)
+    okta-jwt (0.2.0)
       faraday
       json-jwt
 

data/README.md

@@ -25,7 +25,7 @@ Configure the client:
 ```ruby
 Okta::Jwt.configure! issuer_url:     'https://organization.oktapreview.com,
                      auth_server_id: 'auth_server_id,
-                     client_id:      'client_id,
+                     client_id:      'client_id,        # optional, used to sign in users
                      client_secret:  'client_secret,    # optional, used to sign in users
                      logger:         Logger.new(STDOUT) # optional
 ```

data/lib/okta/jwt.rb

@@ -16,11 +16,10 @@ module Okta
     end
   
     # configure the client
-    def configure!(issuer_url:, auth_server_id:, client_id:, public_key_ttl: 0, client_secret: nil, logger: Logger.new(IO::NULL))
+    def configure!(issuer_url:, auth_server_id:, client_id: nil, client_secret: nil, logger: Logger.new(IO::NULL))
       @issuer_url     = issuer_url
       @auth_server_id = auth_server_id
       @client_id      = client_id
-      @public_key_ttl = public_key_ttl
       @client_secret  = client_secret
       @logger         = logger
   
@@ -42,18 +41,18 @@ module Okta
   
     # validate the token
     def verify_token(token)
-      kid = JSON.parse(Base64.decode64(token.split('.').first))['kid']
-      jwk = JSON::JWK.new(get_jwk(kid))
+      jwk = JSON::JWK.new(get_jwk(token))
       JSON::JWT.decode(token, jwk.to_key)
     end
   
-    # extract public key from metadata's jwks_uri
-    def get_jwk(kid)
+    # extract public key from metadata's jwks_uri using kid
+    def get_jwk(token)
+      kid = JSON.parse(Base64.decode64(token.split('.').first))['kid']
       return JWKS_CACHE[kid] if JWKS_CACHE[kid] # cache hit
   
       logger.info("[Okta::Jwt] Fetching public key: kid => #{kid} ...")
       jwks_response = client.get do |req|
-        req.url get_metadata['jwks_uri']
+        req.url get_metadata(token)['jwks_uri']
       end
       jwk = JSON.parse(jwks_response.body)['keys'].find do |key|
         key.dig('kid') == kid
@@ -63,8 +62,10 @@ module Okta
       jwk.tap{JWKS_CACHE[kid] = jwk}
     end
   
-    # fetch metadata
-    def get_metadata
+    # fetch client metadata using cid/aud
+    def get_metadata(token)
+      payload = JSON.parse(Base64.decode64(token.split('.')[1]))
+      client_id = payload['cid'] || payload['aud'] # id_token has client_id value under aud key
       metadata_response = client.get do |req|
         req.url "/oauth2/#{auth_server_id}/.well-known/oauth-authorization-server?client_id=#{client_id}"
       end

data/lib/okta/jwt/version.rb

@@ -1,5 +1,5 @@
 module Okta
   module Jwt
-    VERSION = "0.1.0"
+    VERSION = "0.2.0"
   end
 end

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: okta-jwt
 version: !ruby/object:Gem::Version
-  version: 0.1.0
+  version: 0.2.0
 platform: ruby
 authors:
 - Damir Roso
 autorequire: 
 bindir: exe
 cert_chain: []
-date: 2018-12-04 00:00:00.000000000 Z
+date: 2018-12-05 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: bundler