panda_pal 5.12.4 → 5.12.7

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 8157be2e37c1de2f7deb7f53b16b36cdbe4df73a5b5a1f2f7adb7355574b6235
-  data.tar.gz: 5f337073007f5d9976c4bef8809fb7dbecabdbb462cc5bb12654e73d58ed30f8
+  metadata.gz: 11384f7b7e5a2e3421c2e467f780d30bc6ba5cefd37eb9ca6cbed4c9b0fecd77
+  data.tar.gz: ff120eb68167ac47123cf13803c652bfed0e58dffe6914f1637f4d28ba5567c1
 SHA512:
-  metadata.gz: baf430d94c85a7cf78afb5fb1a23bb9518f4170e848b2e02027e276bb07d34a7621e7609d9fc903113e123a6c80e1f40ef5222331326eeb4cc59ed02e51efc01
-  data.tar.gz: 800ee80531331226a487ec86b2b2aa01a77a44f69ee3b34999bae0e21b58f94a56f7727ed29c24e5994b959125ac2e1fd31c554d5fe50a89d77f309d746cb59d
+  metadata.gz: 3e62cb29c2b532f19bd23468cc8c9a3a84706f55758e7c73a674ea3efb970147f32989761bcbbfa23d337beae895c070ba99a1de747c952bff20bbce35b69b4b
+  data.tar.gz: d5472fdca2d586b14aebf5aedb575407a5711cddc5c2d6d340f7a4e4cfe7a1fa001adf5d95d8775d3ec0572ddf12318e4aa2ffc31871107397cbc08308127e02

data/app/controllers/panda_pal/lti_v1_p3_controller.rb

@@ -145,7 +145,7 @@ module PandaPal
 
       org_canvas_url = current_organization.canvas_url
 
-      if (canvas_env == 'beta' || canvas_env == 'test') && org_canvas_url.present && !org_canvas_url.include?(".#{canvas_env}.")
+      if (canvas_env == 'beta' || canvas_env == 'test') && org_canvas_url.present? && !org_canvas_url.include?(".#{canvas_env}.")
         render plain: "This tool is not properly configured for use in #{canvas_env}", status: 400
       end
     end

data/app/models/panda_pal/platform.rb

@@ -5,10 +5,10 @@ module PandaPal
   class Platform
     require_relative "platform/canvas"
 
-    def public_jwks
+    def public_jwks(force: false)
       require "json/jwt"
 
-      jwk_json = Rails.cache.fetch("panda_pal/jwks/#{jwks_url}")
+      jwk_json = Rails.cache.fetch("panda_pal/jwks/#{jwks_url}").presence unless force
       jwk_json ||= begin
         response = HTTParty.get(jwks_url)
         response.success? ? response.body : nil

data/lib/panda_pal/helpers/controller_helper.rb

@@ -75,7 +75,11 @@ module PandaPal::Helpers
       raise JSON::JWT::VerificationFailed, 'Unrecognized Organization' unless @organization.present?
       raise JSON::JWT::VerificationFailed, 'Organization does not trust platform' unless @organization.trusted_platform?(current_lti_platform)
 
-      decoded_jwt.verify!(current_lti_platform.public_jwks)
+      begin
+        decoded_jwt.verify!(current_lti_platform.public_jwks)
+      rescue JSON::JWK::Set::KidNotFound
+        decoded_jwt.verify!(current_lti_platform.public_jwks(force: true))
+      end
 
       raise JSON::JWT::VerificationFailed, 'State is invalid' unless current_session_data[:lti_oauth_nonce] == decoded_jwt['nonce']
 

data/lib/panda_pal/version.rb

@@ -1,3 +1,3 @@
 module PandaPal
-  VERSION = "5.12.4"
+  VERSION = "5.12.7"
 end

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: panda_pal
 version: !ruby/object:Gem::Version
-  version: 5.12.4
+  version: 5.12.7
 platform: ruby
 authors:
 - Instructure CustomDev
 autorequire:
 bindir: bin
 cert_chain: []
-date: 2024-12-10 00:00:00.000000000 Z
+date: 2025-01-02 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: rails