omniauth-aitu-passport 0.1.22 → 0.1.26

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: e92c64e77c4f3de63c2aff68dcbadfe6dda5156dc980ceffab4237a7724b59da
-  data.tar.gz: c6ad628463a5f8b94fd9d5aed018a8a0a7e2ffdcbf1e7a65be7ed7e8ae47c684
+  metadata.gz: ed9f43131e0356fa3011a05bb6c8928943718ffe2716426a04051f9ea2805cd9
+  data.tar.gz: 8dadf7133bc547aa229fe6e736825b79659f16bcbbdb892aa02ffd39b137f3d1
 SHA512:
-  metadata.gz: 476c648beb600866d42140573a23df270c6487b4088b86456f963a90b1b5443e923e3a5169c81d96d2deb9589e000df85be6123ed7bfd3f96a2e0b0c1373f3ac
-  data.tar.gz: 0e4a5f660903eab42f3392705737b1478c4e9a88572f8e3cc80e3635e9daacf48ce25b7d5d5150a1f483fd0e4eaa880e1a3e37ef79b3366b06a11e544dd14571
+  metadata.gz: 483dfd398af835545691c9efe60ffa11f45e6f6040fe047fd774f6a419707aeef7fb2c91a0506a70d837882fefad623e5efa262bf32239e378ab848f78bc4b65
+  data.tar.gz: b62d08dadc3a9537e51310f725b607ddd1fd7b30a80580bed692c90b27aa8b480255f7b1096a53861bf3154785594f05c6b585c681c1a73688dac65c94b27ef8

data/CHANGELOG.md

@@ -1,8 +1,20 @@
-# v 0.1.21
+# v 0.1.25
+
+Added: 
+- id_token: support with JWT verification
+
+
+# v 0.1.24
+
+Added:
+- [wallet_read, wallet] scope options, regarding to https://docs.passport.aitu.io/#operation/oauthAuth
+
+# v 0.1.22
 Added:
 - session_id added to auth link according to 
   https://docs.passport.aitu.io/#tag/Poluchenie-identifikatora-oauth-sessii
 - PASSPORT_STAGING env option
+- token_url moved to /api/v1
 
 Removed:
 - setup binaries 

data/Gemfile.lock

@@ -1,7 +1,7 @@
 PATH
   remote: .
   specs:
-    omniauth-aitu-passport (0.1.21)
+    omniauth-aitu-passport (0.1.25)
       oauth2 (~> 1.4.7)
       omniauth (~> 1)
       omniauth-oauth2 (~> 1)

data/lib/omniauth/aitu_passport/version.rb

@@ -2,6 +2,6 @@
 
 module OmniAuth
   module AituPassport
-    VERSION = '0.1.22'
+    VERSION = '0.1.26'
   end
 end

data/lib/omniauth/strategies/aitu_passport.rb

@@ -3,6 +3,7 @@
 require 'omniauth'
 require 'oauth2'
 require 'omniauth-oauth2'
+require 'jwt'
 
 module OmniAuth
   module Strategies
@@ -19,6 +20,7 @@ module OmniAuth
       }
 
       option :pkce, true
+      option :jwt_leeway, 60
 
       AVAILABLE_SCOPE_OPTIONS = %w[
         openid
@@ -40,10 +42,14 @@ module OmniAuth
         identification_document_ocr
         identification_document_mrz
         idpc_verification
+        wallet_read
+        wallet
       ].freeze
 
       DEFAULT_SCOPE = 'openid phone'
 
+      ALLOWED_ISS = %w[https://passport.stage.supreme-team.tech https://passport.aitu.io].freeze
+
       uid { raw_info['openid'] }
 
       info do
@@ -57,9 +63,31 @@ module OmniAuth
       end
 
       extra do
-        {
-          'raw_info' => raw_info
-        }
+        hash = {}
+        hash[:id_token] = access_token['id_token']
+        if !options[:skip_jwt] && !access_token['id_token'].nil?
+          decoded = ::JWT.decode(access_token['id_token'], nil, false).first
+
+          # We have to manually verify the claims because the third parameter to
+          # JWT.decode is false since no verification key is provided.
+          ::JWT::Verify.verify_claims(decoded,
+                                      verify_iss: true,
+                                      iss: ALLOWED_ISS,
+                                      verify_aud: true,
+                                      aud: options.client_id,
+                                      verify_sub: false,
+                                      verify_expiration: true,
+                                      verify_not_before: true,
+                                      verify_iat: false,
+                                      verify_jti: false,
+                                      leeway: options[:jwt_leeway])
+
+          hash[:id_info] = decoded
+        end
+        hash[:raw_info] = raw_info unless skip_info?
+
+        # returning resulting hash
+        hash
       end
 
       # Omniauth::Strategy

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: omniauth-aitu-passport
 version: !ruby/object:Gem::Version
-  version: 0.1.22
+  version: 0.1.26
 platform: ruby
 authors:
 - Yaroslav Shevchenko
 autorequire:
 bindir: bin
 cert_chain: []
-date: 2022-03-22 00:00:00.000000000 Z
+date: 2022-04-26 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: oauth2