researchable_jwt-authenticable 1.0.1 → 1.1.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 4e4b4d435b56dec20b1d25bb55500516d5e2087159b7645bdba55eaa7208a7fb
-  data.tar.gz: c8456c71943a94ab2d7d1539ea187f1ececfdb90e23394134e4c1a1ad1667221
+  metadata.gz: abeaaf5f3a590567cc0e31b701204f3fea0ef6598fddfa03eb97dcb34beb4436
+  data.tar.gz: e72942114fc0c82482d01d8a6e9b8c4083fc2223466290de06e2b6ffb4c4397e
 SHA512:
-  metadata.gz: 469c94c6b1b18896508d2b4657e81780c252eb226eecb82416bae2eb8bed7b1e6beadc19daf98d9490bd057b537d590cd1503781f2564d08761a5e6dd11c0e43
-  data.tar.gz: 5955c0be8af0285233e47f060962266edd047e4481f53e96ae3ecc144ce32461377cde35becba9e897300aeeac3e1b7c6bc07726b56d8bbe3f2e000cff13d4dc
+  metadata.gz: '00519275b196a8d5b2dd2d75c1a1951ed8b91076e937ed34285f768eec98365468aaa4881c9a7084c03b5d0d495b0ce70bc7ffc6ebd19148f8335a3def579ef9'
+  data.tar.gz: ba644ed5e3a31da8d29ca334d393857ae3abf97e9d694613b850d9ee98ddb4d27e16be5113450d9859dda256fafbb582594a9af78c07275a50d33cb4305ab63f

data/CHANGELOG.md

@@ -1,3 +1,10 @@
+# [1.1.0](https://gitlab.com/researchable/general/gems/jwt-authenticable/compare/v1.0.1...v1.1.0) (2023-06-30)
+
+
+### Features
+
+* enforce 2fa ([a65aed5](https://gitlab.com/researchable/general/gems/jwt-authenticable/commit/a65aed5e2ae0ad180239e51aa20dd9d2aa588e81))
+
 ## [1.0.1](https://gitlab.com/researchable/general/gems/jwt-authenticable/compare/v1.0.0...v1.0.1) (2023-06-14)
 
 

data/lib/jwt_authenticable/auth.rb

@@ -13,7 +13,8 @@ module JwtAuthenticable
     # @raise MissingAuthScope if the jwt does not have the right scope
     def authenticate_user!
       validate_jwt_token! token: authorization_token!
-    rescue MissingAuth, MissingAuthScope, InvalidAuthScheme, JWT::VerificationError, JWT::ExpiredSignature => e
+    rescue MissingAuth, MissingAuthScope, InvalidAuthScheme, TwoFANotEnabledError, JWT::VerificationError,
+           JWT::ExpiredSignature => e
       unauthorized(e.message)
     end
 
@@ -28,8 +29,12 @@ module JwtAuthenticable
     # @return [Hash] the JWT payload
     def validate_jwt_token!(token:)
       # NOTE: it is still safe if JWT_SECRET_KEY is not set. The method will trigger a JWT exception
-      JWT.decode(token, JwtAuthenticable.config.jwt_secret_key, true,
-                 { algorithm: algorithm }).first
+      payload = JWT.decode(token, JwtAuthenticable.config.jwt_secret_key, true,
+                           { algorithm: algorithm }).first
+
+      raise TwoFANotEnabledError if JwtAuthenticable.config.enforce_2fa && !payload['2fa']
+
+      payload
     end
 
     # Extracts the authorization token from the Authorization header

data/lib/jwt_authenticable/exceptions.rb

@@ -47,5 +47,12 @@ module JwtAuthenticable
         "Authorization error: #{@msg}"
       end
     end
+
+    # Exception to raise when 2fa enforce is enabled but user has not enabled 2fa
+    class TwoFANotEnabledError < StandardError
+      def message
+        '2FA must be enabled'
+      end
+    end
   end
 end

data/lib/jwt_authenticable/version.rb

@@ -1,5 +1,5 @@
 # frozen_string_literal: true
 
 module JwtAuthenticable
-  VERSION = '1.0.1'
+  VERSION = '1.1.0'
 end

data/lib/jwt_authenticable.rb

@@ -11,6 +11,9 @@ module JwtAuthenticable
   # Note that for RSA algorithms this will actually be the public key
   setting :jwt_secret_key, default: nil
 
+  # If set to true, a jwt will only be considered valid if 2fa has been enabled
+  setting :enforce_2fa, default: false
+
   SUPPORTED_ALGOS = [JWT::Algos::Hmac, JWT::Algos::Rsa].freeze
 
   class Error < StandardError; end

data/node_modules/semantic-release-rubygem/src/__tests__/fixtures/valid/lib/test-gem/version.rb

@@ -1,5 +1,5 @@
 # frozen_string_literal: true
 
 module TestGem
-  VERSION = '1.0.1'
+  VERSION = '1.1.0'
 end

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: researchable_jwt-authenticable
 version: !ruby/object:Gem::Version
-  version: 1.0.1
+  version: 1.1.0
 platform: ruby
 authors:
 - Researchable
 autorequire:
 bindir: exe
 cert_chain: []
-date: 2023-06-14 00:00:00.000000000 Z
+date: 2023-06-30 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: dry-configurable
@@ -67,7 +67,7 @@ files:
 - node_modules/semantic-release-rubygem/src/__tests__/fixtures/prerelease/lib/test-gem/version.rb
 - node_modules/semantic-release-rubygem/src/__tests__/fixtures/valid/lib/test-gem/version.rb
 - sig/jwt_authenticable.rbs
-homepage: https://gitlab.com/researchable/general/gems/jwt-authenticable/-/blob/v1.0.1/README.md
+homepage: https://gitlab.com/researchable/general/gems/jwt-authenticable/-/blob/v1.1.0/README.md
 licenses:
 - MIT
 metadata: