passageidentity 0.2.1 → 0.2.3

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 04e31805b3eb522f8677f9c249abc99f8daf02f807fbe8855702b97656e0371b
-  data.tar.gz: 1d3e7b0d52b180bf880c0e988e035e6d393aaa856a3ff01b8c04b76567266950
+  metadata.gz: 0f38ac4af6f724f0c6a1a627dc2b0f03cf6ab7bb444eedccf31f34088913e892
+  data.tar.gz: 671196153c6d5d8e91f9524e5e2766e81b9ba1fb34611949911d1b32852f276e
 SHA512:
-  metadata.gz: ea2498dd8f07d7a7f8bd5434635ef43e643611656bce4e71afa0a63d1eb4b29df1ed58b1bcd78e4dc348c8826b0ca16ba55f4ce37085b746685c0252be285195
-  data.tar.gz: f67a7631241795a30209c65caff48b624175bb5c181a0ac67b0c8cbba38e202c26d2c143d2d94a6e2436fcaae38cd0581a5d5323d4800aa613dddb3a75d33ce1
+  metadata.gz: 061e2fe45361d9b498ab76a3945ce88960fc78d1b465b6cc4a87e94ab954ec2e6abd8ad803941a38f62787e5cda9ff464d9b2b709455a846fa398942be728cef
+  data.tar.gz: 92ed644ed4a7eeea9eca3219e8121c2ebd2ff16376603cc0daf15475223093cf36eae4f349297a51a668a3606e275018d6de0f74bd01cf4e78e595a8b5631f57

data/.github/workflows/on_pr.yml

@@ -3,7 +3,7 @@ name: PR Checks
 on:
   workflow_dispatch:
   pull_request:
-    branches: 
+    branches:
       - main
 
 env:
@@ -21,16 +21,13 @@ jobs:
     - uses: actions/checkout@v2
     - uses: ruby/setup-ruby@v1
       with:
-        ruby-version: '3.0'
+        ruby-version: '3.1'
 
     - name: Run Tests
       run: |
-        gem build passageidentity.gemspec -o test.gem
-        gem install test.gem
-        rm test.gem
+        bundle install
         ruby tests/all.rb
     - name: Run Linting
       run: |
         npm install -g prettier @prettier/plugin-ruby
-        gem install bundler prettier_print syntax_tree syntax_tree-haml syntax_tree-rbs
         prettier --check '**/*.rb'

data/.gitignore

@@ -55,3 +55,4 @@ build-iPhoneSimulator/
 
 # Used by RuboCop. Remote config files pulled in from inherit_from directive.
 # .rubocop-https?--*
+Gemfile.lock

data/Gemfile

@@ -0,0 +1,13 @@
+source 'https://rubygems.org'
+
+# Specify your gem's dependencies in auth0.gemspec
+gemspec
+
+group :development do
+  gem 'rack'
+  gem 'dotenv'
+  gem 'prettier_print'
+  gem 'syntax_tree'
+  gem 'syntax_tree-haml'
+  gem 'syntax_tree-rbs'
+end

data/README.md

@@ -78,6 +78,8 @@ The information available in the Passage App struct returned by PassageClient.ge
                :session_timeout_length,
                :user_metadata_schema,
                :layouts,
+               :auth_fallback_method,
+               :auth_fallback_method_ttl
 ```
 
 ## Retrieve User Info

data/lib/passageidentity/auth.rb

@@ -54,16 +54,16 @@ module Passage
     def authenticate_request(request)
       # Get the token based on the strategy
       if @auth_strategy === Passage::COOKIE_STRATEGY
-        unless request.cookies["psg_auth_token"].present?
+        unless request.cookies.key?("psg_auth_token")
           raise PassageError.new(
                   message:
-                    `missing authentication token: expected "psg_auth_token" cookie`
+                    "missing authentication token: expected \"psg_auth_token\" cookie"
                 )
         end
         @token = request.cookies["psg_auth_token"]
       else
         headers = request.headers
-        unless headers["Authorization"].present?
+        unless headers.key?("Authorization")
           raise PassageError.new(message: "no authentication token in header")
         end
         @token = headers["Authorization"].split(" ").last
@@ -79,16 +79,16 @@ module Passage
     end
 
     def authenticate_token(token)
-      kid = JWT.decode(token, nil, false)[1]["kid"]
-      exists = false
-      for jwk in @jwks["keys"]
-        if jwk["kid"] == kid
-          exists = true
-          break
-        end
-      end
-      fetch_jwks unless exists
       begin
+        kid = JWT.decode(token, nil, false)[1]["kid"]
+        exists = false
+        for jwk in @jwks["keys"]
+          if jwk["kid"] == kid
+            exists = true
+            break
+          end
+        end
+        fetch_jwks unless exists
         claims =
           JWT.decode(
             token,
@@ -105,13 +105,13 @@ module Passage
       rescue JWT::InvalidIssuerError => e
         raise PassageError.new(message: e.message)
       rescue JWT::InvalidAudError => e
-        raise PassageError.new(e.message)
+        raise PassageError.new(message: e.message)
       rescue JWT::ExpiredSignature => e
-        raise PassageError.new(e.message)
+        raise PassageError.new(message: e.message)
       rescue JWT::IncorrectAlgorithm => e
-        raise PassageError.new(e.message)
+        raise PassageError.new(message: e.message)
       rescue JWT::DecodeError => e
-        raise PassageError.new(e.message)
+        raise PassageError.new(message: e.message)
       end
     end
   end

data/lib/passageidentity/client.rb

@@ -22,7 +22,10 @@ module Passage
                :user_metadata_schema,
                :layouts,
                :default_language,
+               :auth_fallback_method,
+               :auth_fallback_method_ttl,
                keyword_init: true
+
   User =
     Struct.new :id,
                :status,
@@ -129,7 +132,9 @@ module Passage
               app_info["refresh_inactivity_lifetime"],
             user_metadata_schema: app_info["user_metadata_schema"],
             layouts: app_info["layouts"],
-            default_language: app_info["default_language"]
+            default_language: app_info["default_language"],
+            auth_fallback_method: app_info["auth_fallback_method"],
+            auth_fallback_method_ttl: app_info["auth_fallback_method_ttl"]
           )
         )
       rescue => e
@@ -146,7 +151,8 @@ module Passage
       magic_link_path: "",
       redirect_url: "",
       language: "",
-      ttl: 60
+      ttl: 60,
+      type: "login"
     )
       magic_link_req = {}
       magic_link_req["user_id"] = user_id unless user_id.empty?
@@ -167,6 +173,7 @@ module Passage
       ] = magic_link_path unless magic_link_path.empty?
       magic_link_req["redirect_url"] = redirect_url unless redirect_url.empty?
       magic_link_req["ttl"] = ttl unless ttl == 0
+      magic_link_req["type"] = type
 
       begin
         response =

data/passageidentity.gemspec

@@ -1,6 +1,6 @@
 Gem::Specification.new do |s|
   s.name = 'passageidentity'
-  s.version = '0.2.1'
+  s.version = '0.2.3'
   s.summary = 'Passage SDK for biometric authentication'
   s.description =
     'Enables verification of server-side authentication and user management for applications using Passage'
@@ -11,7 +11,7 @@ Gem::Specification.new do |s|
   s.license = 'MIT'
 
   s.metadata['source_code_uri'] =
-    'https://github.com/passage-identity/passage-ruby'
+    'https://github.com/passageidentity/passage-ruby'
 
   # Specify which files should be added to the gem when it is released.
   # The `git ls-files -z` loads the files in the RubyGem that have been added into git.
@@ -25,7 +25,6 @@ Gem::Specification.new do |s|
     end
 
   s.add_dependency 'faraday', '>= 0.17.0', '< 2.0'
-  s.add_dependency 'jwt', '>= 2.3.0'
-  s.add_dependency 'openssl', '>= 3.0.0'
-  s.add_dependency 'dotenv', '>= 2.7.6'
+  s.add_dependency 'jwt', '~> 2.3', '>= 2.3.0'
+  s.add_dependency 'openssl', '~> 3.0', '>= 3.0.0'
 end

data/tests/auth_test.rb

@@ -1,15 +1,69 @@
 require_relative "../lib/passageidentity/client"
 require "dotenv"
 require "faraday"
+require "rack"
 require "test/unit"
 
 Dotenv.load(".env")
 class TestUserAPI < Test::Unit::TestCase
   PassageClient =
     Passage::Client.new(app_id: ENV["APP_ID"], api_key: ENV["API_KEY"])
+  PassageHeaderClient =
+    Passage::Client.new(
+      app_id: ENV["APP_ID"],
+      api_key: ENV["API_KEY"],
+      auth_strategy: Passage::HEADER_STRATEGY
+    )
 
-  def test_authenticate_token
+  def test_valid_authenticate_token
     user_id = PassageClient.auth.authenticate_token(ENV["PSG_JWT"])
     assert_equal ENV["TEST_USER_ID"], user_id
   end
+
+  def test_invalid_authenticate_token
+    assert_raises Passage::PassageError do
+      PassageClient.auth.authenticate_token("invalid_token")
+    end
+  end
+
+  def test_valid_authenticate_request_cookie
+    env = Rack::MockRequest.env_for("https://test.com")
+    env["HTTP_COOKIE"] = "psg_auth_token=#{ENV["PSG_JWT"]}"
+    cookie_request = Rack::Request.new(env)
+    user_id = PassageClient.auth.authenticate_request(cookie_request)
+    assert_equal ENV["TEST_USER_ID"], user_id
+  end
+
+  def test_invalid_authenticate_request_cookie
+    envBadCookie = Rack::MockRequest.env_for("https://test.com")
+    envBadCookie["HTTP_COOKIE"] = "psg_auth_token=invalid_token}"
+    bad_cookie_request = Rack::Request.new(envBadCookie)
+    assert_raises Passage::PassageError do
+      PassageClient.auth.authenticate_request(bad_cookie_request)
+    end
+    no_cookie_request = Rack::Request.new({})
+    assert_raises Passage::PassageError do
+      PassageClient.auth.authenticate_request(no_cookie_request)
+    end
+  end
+
+  def test_valid_authenticate_request_header
+    headers = { "Authorization" => "Bearer #{ENV["PSG_JWT"]}" }
+    header_request = Faraday.new(url: "https://test.com", headers: headers)
+    user_id = PassageHeaderClient.auth.authenticate_request(header_request)
+    assert_equal ENV["TEST_USER_ID"], user_id
+  end
+
+  def test_invalid_authenticate_request_header
+    invalid_headers = { "Authorization" => "Bearer invalid_token" }
+    no_header_request = Faraday.new(url: "https://test.com")
+    assert_raises Passage::PassageError do
+      PassageHeaderClient.auth.authenticate_request(no_header_request)
+    end
+    invalid_header_request =
+      Faraday.new(url: "https://test.com", headers: invalid_headers)
+    assert_raises Passage::PassageError do
+      PassageHeaderClient.auth.authenticate_request(no_header_request)
+    end
+  end
 end

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: passageidentity
 version: !ruby/object:Gem::Version
-  version: 0.2.1
+  version: 0.2.3
 platform: ruby
 authors:
 - Passage Identity
 autorequire: 
 bindir: bin
 cert_chain: []
-date: 2022-10-03 00:00:00.000000000 Z
+date: 2023-07-07 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: faraday
@@ -34,6 +34,9 @@ dependencies:
   name: jwt
   requirement: !ruby/object:Gem::Requirement
     requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '2.3'
     - - ">="
       - !ruby/object:Gem::Version
         version: 2.3.0
@@ -41,6 +44,9 @@ dependencies:
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '2.3'
     - - ">="
       - !ruby/object:Gem::Version
         version: 2.3.0
@@ -48,30 +54,22 @@ dependencies:
   name: openssl
   requirement: !ruby/object:Gem::Requirement
     requirements:
-    - - ">="
+    - - "~>"
       - !ruby/object:Gem::Version
-        version: 3.0.0
-  type: :runtime
-  prerelease: false
-  version_requirements: !ruby/object:Gem::Requirement
-    requirements:
+        version: '3.0'
     - - ">="
       - !ruby/object:Gem::Version
         version: 3.0.0
-- !ruby/object:Gem::Dependency
-  name: dotenv
-  requirement: !ruby/object:Gem::Requirement
-    requirements:
-    - - ">="
-      - !ruby/object:Gem::Version
-        version: 2.7.6
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '3.0'
     - - ">="
       - !ruby/object:Gem::Version
-        version: 2.7.6
+        version: 3.0.0
 description: Enables verification of server-side authentication and user management
   for applications using Passage
 email: support@passage.id
@@ -83,6 +81,7 @@ files:
 - ".github/workflows/on_pr.yml"
 - ".gitignore"
 - CONTRIBUTING.md
+- Gemfile
 - LICENSE
 - README.md
 - lib/passageidentity.rb
@@ -101,7 +100,7 @@ homepage: https://rubygems.org/gems/passageidentity
 licenses:
 - MIT
 metadata:
-  source_code_uri: https://github.com/passage-identity/passage-ruby
+  source_code_uri: https://github.com/passageidentity/passage-ruby
 post_install_message: 
 rdoc_options: []
 require_paths: