rack-jwt-verifier 0.2.0 → 0.3.0
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- checksums.yaml +4 -4
- data/CHANGELOG.md +87 -1
- data/README.md +151 -17
- data/lib/rack_jwt_verifier/errors.rb +33 -1
- data/lib/rack_jwt_verifier/in_process_cache.rb +51 -13
- data/lib/rack_jwt_verifier/jwt_helper.rb +36 -3
- data/lib/rack_jwt_verifier/key_source.rb +51 -6
- data/lib/rack_jwt_verifier/middleware.rb +74 -11
- data/lib/rack_jwt_verifier/replay_guard.rb +78 -0
- data/lib/rack_jwt_verifier/scopes.rb +43 -0
- data/lib/rack_jwt_verifier/verifier.rb +141 -28
- data/lib/rack_jwt_verifier/version.rb +1 -1
- data/lib/rack_jwt_verifier.rb +4 -1
- metadata +18 -8
metadata
CHANGED
|
@@ -1,29 +1,35 @@
|
|
|
1
1
|
--- !ruby/object:Gem::Specification
|
|
2
2
|
name: rack-jwt-verifier
|
|
3
3
|
version: !ruby/object:Gem::Version
|
|
4
|
-
version: 0.
|
|
4
|
+
version: 0.3.0
|
|
5
5
|
platform: ruby
|
|
6
6
|
authors:
|
|
7
7
|
- Daniele Frisanco
|
|
8
8
|
autorequire:
|
|
9
9
|
bindir: bin
|
|
10
10
|
cert_chain: []
|
|
11
|
-
date: 2026-09-
|
|
11
|
+
date: 2026-09-13 00:00:00.000000000 Z
|
|
12
12
|
dependencies:
|
|
13
13
|
- !ruby/object:Gem::Dependency
|
|
14
14
|
name: jwt
|
|
15
15
|
requirement: !ruby/object:Gem::Requirement
|
|
16
16
|
requirements:
|
|
17
|
-
- - "
|
|
17
|
+
- - ">="
|
|
18
18
|
- !ruby/object:Gem::Version
|
|
19
19
|
version: '2.8'
|
|
20
|
+
- - "<"
|
|
21
|
+
- !ruby/object:Gem::Version
|
|
22
|
+
version: '4'
|
|
20
23
|
type: :runtime
|
|
21
24
|
prerelease: false
|
|
22
25
|
version_requirements: !ruby/object:Gem::Requirement
|
|
23
26
|
requirements:
|
|
24
|
-
- - "
|
|
27
|
+
- - ">="
|
|
25
28
|
- !ruby/object:Gem::Version
|
|
26
29
|
version: '2.8'
|
|
30
|
+
- - "<"
|
|
31
|
+
- !ruby/object:Gem::Version
|
|
32
|
+
version: '4'
|
|
27
33
|
- !ruby/object:Gem::Dependency
|
|
28
34
|
name: logger
|
|
29
35
|
requirement: !ruby/object:Gem::Requirement
|
|
@@ -58,9 +64,11 @@ dependencies:
|
|
|
58
64
|
- - "<"
|
|
59
65
|
- !ruby/object:Gem::Version
|
|
60
66
|
version: '4'
|
|
61
|
-
description: Verifies JWT signatures against a JWKS endpoint, a PEM URL
|
|
62
|
-
key
|
|
63
|
-
|
|
67
|
+
description: Verifies JWT signatures against a JWKS endpoint, a PEM URL, a static
|
|
68
|
+
key or (opt-in) a shared HMAC secret; enforces exp/nbf/iss/aud, scopes and optional
|
|
69
|
+
jti replay protection; caches key material, handles key rotation, and exposes the
|
|
70
|
+
verified claims to the application through the Rack environment. Pairs with the
|
|
71
|
+
jwt_auth_client gem.
|
|
64
72
|
email:
|
|
65
73
|
- daniele.frisanco@gmail.com
|
|
66
74
|
executables: []
|
|
@@ -77,6 +85,8 @@ files:
|
|
|
77
85
|
- lib/rack_jwt_verifier/jwt_helper.rb
|
|
78
86
|
- lib/rack_jwt_verifier/key_source.rb
|
|
79
87
|
- lib/rack_jwt_verifier/middleware.rb
|
|
88
|
+
- lib/rack_jwt_verifier/replay_guard.rb
|
|
89
|
+
- lib/rack_jwt_verifier/scopes.rb
|
|
80
90
|
- lib/rack_jwt_verifier/verifier.rb
|
|
81
91
|
- lib/rack_jwt_verifier/version.rb
|
|
82
92
|
homepage: https://github.com/danielefrisanco/rack_jwt_verifier
|
|
@@ -96,7 +106,7 @@ required_ruby_version: !ruby/object:Gem::Requirement
|
|
|
96
106
|
requirements:
|
|
97
107
|
- - ">="
|
|
98
108
|
- !ruby/object:Gem::Version
|
|
99
|
-
version: '3.
|
|
109
|
+
version: '3.1'
|
|
100
110
|
required_rubygems_version: !ruby/object:Gem::Requirement
|
|
101
111
|
requirements:
|
|
102
112
|
- - ">="
|