omniauth-aitu-passport 0.1.24 → 0.1.27

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 7a58e50932132dada555e296ab35d8164105768c7aed6f411315705cb13a6183
-  data.tar.gz: 63e2743ae7099c59911bd5518e023fabda97982ab8d680285e2395aa2f755b56
+  metadata.gz: d936a68f0486388f148e3c1469f38e0344ca984232cb67bd7de7eadd34f43dba
+  data.tar.gz: 1fd811ae00e4e0eeb234c8e2960f75537b2a300fdb5fda4304b81198cac47b6d
 SHA512:
-  metadata.gz: 1772e65d6e68a2a25c6bbae50491b0a77d5696a04f4895e4ba16a4748b0ec0e1ede16fe14a4169503f054c6b1aeefcfa622b29b8332f1e5fbec7b771c9b2f28a
-  data.tar.gz: 4aba6961aa2168b0d80812b80b8d31b0e9a85923b09c786c904f13668af7dea2f2c358ad0eda013fb86147bf69d94f3f6d1d448f0c127da8fe27012d88eda11e
+  metadata.gz: 548f2d47c40d2f152e41b89cd20f4244ce70c5f27b0af1b7034218ac5797b4611e3db925115879b341d9f086ee1c99ef4e93e3141af6f880813b63ac7fc04e1f
+  data.tar.gz: 98e9ef21a97881eed7202c60a3c70f195ba28ef33ecf56559d034d03dcf961ad15195995588d920061c8b20a369e221fc41a6ff3ab45b25cdb947db80be1c6d0

data/CHANGELOG.md

@@ -1,7 +1,7 @@
-# v 0.1.24
+# v 0.1.27
+Changed:
+- staging environment replaced with test environment
 
-Added:
-- [wallet_read, wallet] scope options, regarding to https://docs.passport.aitu.io/#operation/oauthAuth
 
 # v 0.1.22
 Added:

data/Gemfile.lock

@@ -1,7 +1,7 @@
 PATH
   remote: .
   specs:
-    omniauth-aitu-passport (0.1.23)
+    omniauth-aitu-passport (0.1.27)
       oauth2 (~> 1.4.7)
       omniauth (~> 1)
       omniauth-oauth2 (~> 1)

data/lib/omniauth/aitu_passport/version.rb

@@ -2,6 +2,6 @@
 
 module OmniAuth
   module AituPassport
-    VERSION = '0.1.24'
+    VERSION = '0.1.27'
   end
 end

data/lib/omniauth/strategies/aitu_passport.rb

@@ -3,6 +3,7 @@
 require 'omniauth'
 require 'oauth2'
 require 'omniauth-oauth2'
+require 'jwt'
 
 module OmniAuth
   module Strategies
@@ -19,6 +20,7 @@ module OmniAuth
       }
 
       option :pkce, true
+      option :jwt_leeway, 60
 
       AVAILABLE_SCOPE_OPTIONS = %w[
         openid
@@ -46,6 +48,8 @@ module OmniAuth
 
       DEFAULT_SCOPE = 'openid phone'
 
+      ALLOWED_ISS = %w[https://passport.test.supreme-team.tech https://passport.aitu.io].freeze
+
       uid { raw_info['openid'] }
 
       info do
@@ -59,9 +63,31 @@ module OmniAuth
       end
 
       extra do
-        {
-          'raw_info' => raw_info
-        }
+        hash = {}
+        hash[:id_token] = access_token['id_token']
+        if !options[:skip_jwt] && !access_token['id_token'].nil?
+          decoded = ::JWT.decode(access_token['id_token'], nil, false).first
+
+          # We have to manually verify the claims because the third parameter to
+          # JWT.decode is false since no verification key is provided.
+          ::JWT::Verify.verify_claims(decoded,
+                                      verify_iss: true,
+                                      iss: ALLOWED_ISS,
+                                      verify_aud: true,
+                                      aud: options.client_id,
+                                      verify_sub: false,
+                                      verify_expiration: true,
+                                      verify_not_before: true,
+                                      verify_iat: false,
+                                      verify_jti: false,
+                                      leeway: options[:jwt_leeway])
+
+          hash[:id_info] = decoded
+        end
+        hash[:raw_info] = raw_info unless skip_info?
+
+        # returning resulting hash
+        hash
       end
 
       # Omniauth::Strategy
@@ -71,7 +97,7 @@ module OmniAuth
           # Raising up an error if redirect_uri is missing
           raise ArgumentError, 'Wrong options: redirect_uri option is missing.' unless options[:redirect_uri]
 
-          options[:client_options][:site] = 'https://passport.stage.supreme-team.tech' if ENV['PASSPORT_STAGING']
+          options[:client_options][:site] = 'https://passport.test.supreme-team.tech' if ENV['PASSPORT_STAGING']
         end
       end
 

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: omniauth-aitu-passport
 version: !ruby/object:Gem::Version
-  version: 0.1.24
+  version: 0.1.27
 platform: ruby
 authors:
 - Yaroslav Shevchenko
 autorequire:
 bindir: bin
 cert_chain: []
-date: 2022-03-30 00:00:00.000000000 Z
+date: 2022-10-10 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: oauth2