openid_connect 0.7.1 → 0.7.2

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA1:
-  metadata.gz: 88c703cefb05f22805de58c90e8b42dadec6c587
-  data.tar.gz: a91b4363b0f9a3e832f0d334fc4b85339ec6117c
+  metadata.gz: 9a9b42e118d43b1f35fce93a90c49bd1eb61304d
+  data.tar.gz: 538bdd1e964b384dbea3856b064960f58e321c3b
 SHA512:
-  metadata.gz: ad852c826c99c99758b21aa906374752debfcdf0a606cc149de0fd0041d11c0ac9e91d9f80297540e4e33ed3a4f600bcfe8df8fc2806dc71cbcb505fddcabe93
-  data.tar.gz: 211e23dd120d46520a2c8ce6a7d11282f01b791e482ee04157258eddcf502b53e23091af4fc6818e982a399a28484de5b6dc973ffa9eb3dd6c820063105bf396
+  metadata.gz: 216aca60ea5765778ffa3e35c76331ad6f54ef0de2d8f904c7e6a55824634e3b0223d69a1ce4f98172d1610fcf8ac346883bcecb46e458495bdc23cbe56a490c
+  data.tar.gz: 9bd00a662f0cdd45c6bfc7a87d9c0bde98bf9931894c9e998b4b59a04196db102d5c3de1584d220fba4f48f24af38a335fb3edbac6293802a395296acdc84721

data/TODOs

@@ -0,0 +1,12 @@
+## Discovery
+
+* WebFinger User Input Normalization
+
+## Dynamic Client Registration
+
+* Update Registration Response Format
+* Client Metadata "Read" Call Support
+
+## Message
+
+* Update UserInfo OpenID Schema

data/VERSION

@@ -1 +1 @@
-0.7.1
+0.7.2

data/lib/openid_connect/response_object/id_token.rb

@@ -13,7 +13,7 @@ module OpenIDConnect
 
       def initialize(attributes = {})
         super
-        (all_attributes - [:exp, :iat, :auth_time, :sub_jwk]).each do |key|
+        (all_attributes - [:aud, :exp, :iat, :auth_time, :sub_jwk]).each do |key|
           self.send "#{key}=", self.send(key).try(:to_s)
         end
       end
@@ -21,7 +21,7 @@ module OpenIDConnect
       def verify!(expected = {})
         exp.to_i > Time.now.to_i &&
         iss == expected[:issuer] &&
-        aud == expected[:client_id] &&
+        Array(aud).include?(expected[:client_id]) && # aud(ience) can be a string or an array of strings
         nonce == expected[:nonce] or
         raise InvalidToken.new('Invalid ID Token')
       end

data/spec/openid_connect/response_object/id_token_spec.rb

@@ -31,6 +31,17 @@ describe OpenIDConnect::ResponseObject::IdToken do
         ).should be_true
       end
 
+      context 'when aud(ience) is an array of identifiers' do
+        let(:client_id) { 'client_id' }
+        let(:attributes) { required_attributes.merge(aud: ['some_other_identifier', client_id]) }
+        it do
+          id_token.verify!(
+            issuer: attributes[:iss],
+            client_id: client_id
+          ).should be_true
+        end
+      end
+
       context 'when expired' do
         let(:ext) { 10.minutes.ago }
         it do

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: openid_connect
 version: !ruby/object:Gem::Version
-  version: 0.7.1
+  version: 0.7.2
 platform: ruby
 authors:
 - nov matake
 autorequire: 
 bindir: bin
 cert_chain: []
-date: 2013-06-29 00:00:00.000000000 Z
+date: 2013-08-07 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: json
@@ -220,6 +220,7 @@ files:
 - LICENSE
 - README.rdoc
 - Rakefile
+- TODOs
 - VERSION
 - lib/openid_connect.rb
 - lib/openid_connect/access_token.rb