rails-vault-jwt 0.1.2 → 0.1.3

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 68362487c468f62427b11aad0beb4e9a18757bb05149c927fc252e7934ad0059
-  data.tar.gz: daf16e0954e57981ced7a033eb91351bc73b73faa94266704ed0e6f3ddfe652f
+  metadata.gz: a2cc4bd6c97d1029d671f49ee94a1f3b628ff385dc71386d621d4f24db299512
+  data.tar.gz: ef9184fbef5ee181d7d62105c67a937c66af6680fc498b8c1e8a9b92ff6117ae
 SHA512:
-  metadata.gz: fccd7bd58ec1bc80e396b1dcc38eb7ef831a214c7701b990f6edd8a57e4d04fb670071f60b50869ccf4dae737c2f4c835c50fe0b0eb411a06d048620898f2c5a
-  data.tar.gz: e4efe5ffb04361e32a7198ee34f4ea8660dfb69117afca991d586bf2c29379b9d3cf4a64847da6938a53618622cd74567cf0b142c345baaf2753ca418f57fa1c
+  metadata.gz: 0674d5bc92bbd3a963ba506a55084095e9279ac67be5ff9104abb59cf24474aa332cd80c1f9c0469b2dec3dfe96a73e3b4aaf9dba09116795a26e66b74b9b342
+  data.tar.gz: ffea10ab232b7dea73a123453c8dbe5350c112f60e09a7490ba2ebda0d60d2c8aaa488fd10e0474e37fae5f75c11193c171f48ddcc244fe98566e2934e068960

data/CHANGELOG.md

@@ -6,6 +6,10 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 
 ## [Unreleased]
 
+## [0.1.3] - 2021-01-18
+### Added
+- Added `valid_issuers` config item to allow restricting key lookups to specific issuers
+
 ## [0.1.2] - 2021-01-18
 ### Fixed
 - Fixed issuer key url

data/Gemfile.lock

@@ -1,7 +1,7 @@
 PATH
   remote: .
   specs:
-    rails-vault-jwt (0.1.2)
+    rails-vault-jwt (0.1.3)
       activesupport (~> 6.1)
       jwt (~> 2.2)
       vault (~> 0.15)

data/lib/rails/vault/jwt.rb

@@ -13,6 +13,8 @@ module Rails
     module JWT
       class Error < StandardError; end
 
+      class InvalidIssuer < StandardError; end
+
       class << self
         def configure
           @config = Config.new

data/lib/rails/vault/jwt/config.rb

@@ -7,11 +7,12 @@ module Rails
     module JWT
       class Config
         extend Forwardable
-        attr_accessor :cache, :logger
+        attr_accessor :cache, :logger, :valid_issuers
         attr_reader :token_provider
 
         def initialize
           @logger = defined?(Rails) && defined?(Rails.logger) ? Rails.logger : Logger.new($stdout)
+          @valid_issuers = []
         end
 
         def token_provider=(value)

data/lib/rails/vault/jwt/key_provider.rb

@@ -12,6 +12,8 @@ module Rails
         end
 
         def keys(issuer)
+          raise InvalidIssuer if JWT.config.valid_issuers.any? && !(JWT.config.valid_issuers.include? issuer)
+
           if @cache.respond_to?(:fetch)
             @cache.fetch("keys/#{issuer}", expires_in: 5.minutes) do
               fetch_keys issuer

data/lib/rails/vault/jwt/version.rb

@@ -3,7 +3,7 @@
 module Rails
   module Vault
     module JWT
-      VERSION = '0.1.2'
+      VERSION = '0.1.3'
     end
   end
 end

data/rails-vault-jwt.gemspec

@@ -22,8 +22,8 @@ Gem::Specification.new do |spec|
     spec.metadata['allowed_push_host'] = 'https://rubygems.org'
 
     spec.metadata['homepage_uri'] = spec.homepage
-    spec.metadata['source_code_uri'] = 'https://github.com/datanuggets/rails-vault-jwt'
-    spec.metadata['changelog_uri'] = 'https://github.com/datanuggets/rails-vault-jwt/blob/main/CHANGELOG.md'
+    spec.metadata['source_code_uri'] = 'https://github.com/twitch-data-nuggets/rails-vault-jwt'
+    spec.metadata['changelog_uri'] = 'https://github.com/twitch-data-nuggets/rails-vault-jwt/blob/main/CHANGELOG.md'
   else
     raise 'RubyGems 2.0 or newer is required to protect against ' \
       'public gem pushes.'

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: rails-vault-jwt
 version: !ruby/object:Gem::Version
-  version: 0.1.2
+  version: 0.1.3
 platform: ruby
 authors:
 - Nick King
@@ -148,8 +148,8 @@ licenses:
 metadata:
   allowed_push_host: https://rubygems.org
   homepage_uri: https://github.com/datanuggets/rails-vault-jwt
-  source_code_uri: https://github.com/datanuggets/rails-vault-jwt
-  changelog_uri: https://github.com/datanuggets/rails-vault-jwt/blob/main/CHANGELOG.md
+  source_code_uri: https://github.com/twitch-data-nuggets/rails-vault-jwt
+  changelog_uri: https://github.com/twitch-data-nuggets/rails-vault-jwt/blob/main/CHANGELOG.md
 post_install_message: 
 rdoc_options: []
 require_paths: