passageidentity 0.2.1 → 0.2.2

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 04e31805b3eb522f8677f9c249abc99f8daf02f807fbe8855702b97656e0371b
-  data.tar.gz: 1d3e7b0d52b180bf880c0e988e035e6d393aaa856a3ff01b8c04b76567266950
+  metadata.gz: 92327755aba79e3ce7da3431f3899de291606db6ff146f3a2690442fdf3c6146
+  data.tar.gz: 775acf7946238286a3f84f3b5611c7d0d2d34443f03d0e9250224a7a5f5f9d27
 SHA512:
-  metadata.gz: ea2498dd8f07d7a7f8bd5434635ef43e643611656bce4e71afa0a63d1eb4b29df1ed58b1bcd78e4dc348c8826b0ca16ba55f4ce37085b746685c0252be285195
-  data.tar.gz: f67a7631241795a30209c65caff48b624175bb5c181a0ac67b0c8cbba38e202c26d2c143d2d94a6e2436fcaae38cd0581a5d5323d4800aa613dddb3a75d33ce1
+  metadata.gz: 21c9e84843b859462b4dea7ee09dee93ec1604b5267e6e803f313ac574f45d244d79460fa9e5840af7c735eb5239cd86fc6642e224c3a0b59e69ec6d25b061a8
+  data.tar.gz: e81c39c83bd438a9ce58e34ed965490e75b4f1a51980fc0ea9f57ca5f1dede568a9ce051dd8cc2ab6fe5e983f2c0d3ebab6eed4281be7e4ee7d6f7d53684cf08

data/.github/workflows/on_pr.yml

@@ -3,7 +3,7 @@ name: PR Checks
 on:
   workflow_dispatch:
   pull_request:
-    branches: 
+    branches:
       - main
 
 env:
@@ -21,16 +21,13 @@ jobs:
     - uses: actions/checkout@v2
     - uses: ruby/setup-ruby@v1
       with:
-        ruby-version: '3.0'
+        ruby-version: '3.1'
 
     - name: Run Tests
       run: |
-        gem build passageidentity.gemspec -o test.gem
-        gem install test.gem
-        rm test.gem
+        bundle install
         ruby tests/all.rb
     - name: Run Linting
       run: |
         npm install -g prettier @prettier/plugin-ruby
-        gem install bundler prettier_print syntax_tree syntax_tree-haml syntax_tree-rbs
         prettier --check '**/*.rb'

data/.gitignore

@@ -55,3 +55,4 @@ build-iPhoneSimulator/
 
 # Used by RuboCop. Remote config files pulled in from inherit_from directive.
 # .rubocop-https?--*
+Gemfile.lock

data/Gemfile

@@ -0,0 +1,13 @@
+source 'https://rubygems.org'
+
+# Specify your gem's dependencies in auth0.gemspec
+gemspec
+
+group :development do
+  gem 'rack'
+  gem 'dotenv'
+  gem 'prettier_print'
+  gem 'syntax_tree'
+  gem 'syntax_tree-haml'
+  gem 'syntax_tree-rbs'
+end

data/lib/passageidentity/auth.rb

@@ -54,16 +54,16 @@ module Passage
     def authenticate_request(request)
       # Get the token based on the strategy
       if @auth_strategy === Passage::COOKIE_STRATEGY
-        unless request.cookies["psg_auth_token"].present?
+        unless request.cookies.key?("psg_auth_token")
           raise PassageError.new(
                   message:
-                    `missing authentication token: expected "psg_auth_token" cookie`
+                    "missing authentication token: expected \"psg_auth_token\" cookie"
                 )
         end
         @token = request.cookies["psg_auth_token"]
       else
         headers = request.headers
-        unless headers["Authorization"].present?
+        unless headers.key?("Authorization")
           raise PassageError.new(message: "no authentication token in header")
         end
         @token = headers["Authorization"].split(" ").last
@@ -79,16 +79,16 @@ module Passage
     end
 
     def authenticate_token(token)
-      kid = JWT.decode(token, nil, false)[1]["kid"]
-      exists = false
-      for jwk in @jwks["keys"]
-        if jwk["kid"] == kid
-          exists = true
-          break
-        end
-      end
-      fetch_jwks unless exists
       begin
+        kid = JWT.decode(token, nil, false)[1]["kid"]
+        exists = false
+        for jwk in @jwks["keys"]
+          if jwk["kid"] == kid
+            exists = true
+            break
+          end
+        end
+        fetch_jwks unless exists
         claims =
           JWT.decode(
             token,
@@ -105,13 +105,13 @@ module Passage
       rescue JWT::InvalidIssuerError => e
         raise PassageError.new(message: e.message)
       rescue JWT::InvalidAudError => e
-        raise PassageError.new(e.message)
+        raise PassageError.new(message: e.message)
       rescue JWT::ExpiredSignature => e
-        raise PassageError.new(e.message)
+        raise PassageError.new(message: e.message)
       rescue JWT::IncorrectAlgorithm => e
-        raise PassageError.new(e.message)
+        raise PassageError.new(message: e.message)
       rescue JWT::DecodeError => e
-        raise PassageError.new(e.message)
+        raise PassageError.new(message: e.message)
       end
     end
   end

data/passageidentity.gemspec

@@ -1,6 +1,6 @@
 Gem::Specification.new do |s|
   s.name = 'passageidentity'
-  s.version = '0.2.1'
+  s.version = '0.2.2'
   s.summary = 'Passage SDK for biometric authentication'
   s.description =
     'Enables verification of server-side authentication and user management for applications using Passage'
@@ -11,7 +11,7 @@ Gem::Specification.new do |s|
   s.license = 'MIT'
 
   s.metadata['source_code_uri'] =
-    'https://github.com/passage-identity/passage-ruby'
+    'https://github.com/passageidentity/passage-ruby'
 
   # Specify which files should be added to the gem when it is released.
   # The `git ls-files -z` loads the files in the RubyGem that have been added into git.
@@ -25,7 +25,6 @@ Gem::Specification.new do |s|
     end
 
   s.add_dependency 'faraday', '>= 0.17.0', '< 2.0'
-  s.add_dependency 'jwt', '>= 2.3.0'
-  s.add_dependency 'openssl', '>= 3.0.0'
-  s.add_dependency 'dotenv', '>= 2.7.6'
+  s.add_dependency 'jwt', '~> 2.3', '>= 2.3.0'
+  s.add_dependency 'openssl', '~> 3.0', '>= 3.0.0'
 end

data/tests/auth_test.rb

@@ -1,15 +1,69 @@
 require_relative "../lib/passageidentity/client"
 require "dotenv"
 require "faraday"
+require "rack"
 require "test/unit"
 
 Dotenv.load(".env")
 class TestUserAPI < Test::Unit::TestCase
   PassageClient =
     Passage::Client.new(app_id: ENV["APP_ID"], api_key: ENV["API_KEY"])
+  PassageHeaderClient =
+    Passage::Client.new(
+      app_id: ENV["APP_ID"],
+      api_key: ENV["API_KEY"],
+      auth_strategy: Passage::HEADER_STRATEGY
+    )
 
-  def test_authenticate_token
+  def test_valid_authenticate_token
     user_id = PassageClient.auth.authenticate_token(ENV["PSG_JWT"])
     assert_equal ENV["TEST_USER_ID"], user_id
   end
+
+  def test_invalid_authenticate_token
+    assert_raises Passage::PassageError do
+      PassageClient.auth.authenticate_token("invalid_token")
+    end
+  end
+
+  def test_valid_authenticate_request_cookie
+    env = Rack::MockRequest.env_for("https://test.com")
+    env["HTTP_COOKIE"] = "psg_auth_token=#{ENV["PSG_JWT"]}"
+    cookie_request = Rack::Request.new(env)
+    user_id = PassageClient.auth.authenticate_request(cookie_request)
+    assert_equal ENV["TEST_USER_ID"], user_id
+  end
+
+  def test_invalid_authenticate_request_cookie
+    envBadCookie = Rack::MockRequest.env_for("https://test.com")
+    envBadCookie["HTTP_COOKIE"] = "psg_auth_token=invalid_token}"
+    bad_cookie_request = Rack::Request.new(envBadCookie)
+    assert_raises Passage::PassageError do
+      PassageClient.auth.authenticate_request(bad_cookie_request)
+    end
+    no_cookie_request = Rack::Request.new({})
+    assert_raises Passage::PassageError do
+      PassageClient.auth.authenticate_request(no_cookie_request)
+    end
+  end
+
+  def test_valid_authenticate_request_header
+    headers = { "Authorization" => "Bearer #{ENV["PSG_JWT"]}" }
+    header_request = Faraday.new(url: "https://test.com", headers: headers)
+    user_id = PassageHeaderClient.auth.authenticate_request(header_request)
+    assert_equal ENV["TEST_USER_ID"], user_id
+  end
+
+  def test_invalid_authenticate_request_header
+    invalid_headers = { "Authorization" => "Bearer invalid_token" }
+    no_header_request = Faraday.new(url: "https://test.com")
+    assert_raises Passage::PassageError do
+      PassageHeaderClient.auth.authenticate_request(no_header_request)
+    end
+    invalid_header_request =
+      Faraday.new(url: "https://test.com", headers: invalid_headers)
+    assert_raises Passage::PassageError do
+      PassageHeaderClient.auth.authenticate_request(no_header_request)
+    end
+  end
 end

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: passageidentity
 version: !ruby/object:Gem::Version
-  version: 0.2.1
+  version: 0.2.2
 platform: ruby
 authors:
 - Passage Identity
 autorequire: 
 bindir: bin
 cert_chain: []
-date: 2022-10-03 00:00:00.000000000 Z
+date: 2023-02-03 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: faraday
@@ -34,6 +34,9 @@ dependencies:
   name: jwt
   requirement: !ruby/object:Gem::Requirement
     requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '2.3'
     - - ">="
       - !ruby/object:Gem::Version
         version: 2.3.0
@@ -41,6 +44,9 @@ dependencies:
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '2.3'
     - - ">="
       - !ruby/object:Gem::Version
         version: 2.3.0
@@ -48,30 +54,22 @@ dependencies:
   name: openssl
   requirement: !ruby/object:Gem::Requirement
     requirements:
-    - - ">="
+    - - "~>"
       - !ruby/object:Gem::Version
-        version: 3.0.0
-  type: :runtime
-  prerelease: false
-  version_requirements: !ruby/object:Gem::Requirement
-    requirements:
+        version: '3.0'
     - - ">="
       - !ruby/object:Gem::Version
         version: 3.0.0
-- !ruby/object:Gem::Dependency
-  name: dotenv
-  requirement: !ruby/object:Gem::Requirement
-    requirements:
-    - - ">="
-      - !ruby/object:Gem::Version
-        version: 2.7.6
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '3.0'
     - - ">="
       - !ruby/object:Gem::Version
-        version: 2.7.6
+        version: 3.0.0
 description: Enables verification of server-side authentication and user management
   for applications using Passage
 email: support@passage.id
@@ -83,6 +81,7 @@ files:
 - ".github/workflows/on_pr.yml"
 - ".gitignore"
 - CONTRIBUTING.md
+- Gemfile
 - LICENSE
 - README.md
 - lib/passageidentity.rb
@@ -101,7 +100,7 @@ homepage: https://rubygems.org/gems/passageidentity
 licenses:
 - MIT
 metadata:
-  source_code_uri: https://github.com/passage-identity/passage-ruby
+  source_code_uri: https://github.com/passageidentity/passage-ruby
 post_install_message: 
 rdoc_options: []
 require_paths: