safety_net_attestation 0.4.0 → 0.5.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 5116645ce8afe8172658cd294571bb6cef9921579f86ca8b8b8e9cb9d44620d4
-  data.tar.gz: 9cbf7c06202bc80ffa7e2f151c354f3a89ab75048cec8b064096840ece5a68e7
+  metadata.gz: ccf5294078755bdf3271d763b534a8c6b30254ded3ef8ce5f775eedbec2d2f37
+  data.tar.gz: 9d395fda856e5e9c313195f9eaadf5fd2b79e77be7be0ba05bf0f15656ad46e7
 SHA512:
-  metadata.gz: 359e37de75eebdf4198e79996f15ab7cc5d24e34cd664e34136b8a0d6f385729b696f541c40ca4dce14f2f2848082ef4ad4779d0a3c97386b91e291c1913339a
-  data.tar.gz: d2467423824192b293507131a2957e512a9c412ed762c6444359d1605edfe3f3cb837ed167245994d367ba2b37774cfac112018e1a998c39298d06ef279e51bb
+  metadata.gz: 2a992753ec960cce99a8ae7d3715791f20da84673f69513a10d900fd96c1c01b22157ff93cc81c6c03d7539f0077a0aa283d17e5e1d82882a8de7be5e9268f1a
+  data.tar.gz: 3f461de22cd21aa7acb89ce70594e46da8ab9ef892555921924a3f0c30b69d07942bd557b240dd79366a397d21706991f1367c28aff4d22ed9d25f9af7d80eb4

data/.github/workflows/ci.yml

@@ -0,0 +1,55 @@
+# This workflow uses actions that are not certified by GitHub.
+# They are provided by a third-party and are governed by
+# separate terms of service, privacy policy, and support
+# documentation.
+# This workflow will download a prebuilt Ruby version, install dependencies and run tests with Rake
+# For more information see: https://github.com/marketplace/actions/setup-ruby-jruby-and-truffleruby
+
+name: build
+
+on: push
+
+jobs:
+  test:
+    runs-on: ubuntu-24.04
+    strategy:
+      fail-fast: false
+      matrix:
+        ruby:
+          - '3.4'
+          - '3.3'
+          - '3.2'
+          - '3.1'
+          - '3.0'
+          - '2.7'
+          - '2.6'
+          - '2.5'
+          - '2.4'
+        gemfile:
+          - jwt_2
+          - jwt_3
+        exclude:
+          - ruby: '2.4'
+            gemfile: jwt_3
+    env:
+      BUNDLE_GEMFILE: gemfiles/${{ matrix.gemfile }}.gemfile
+    steps:
+    - uses: actions/checkout@v5
+    - run: rm Gemfile.lock
+
+    - uses: ruby/setup-ruby@v1
+      with:
+        ruby-version: ${{ matrix.ruby }}
+        bundler-cache: true
+
+    - run: bundle exec rake
+
+  lint:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v5
+      - uses: ruby/setup-ruby@v1
+        with:
+          ruby-version: '3.4'
+          bundler-cache: true
+      - run: bundle exec rubocop

data/.gitignore

@@ -9,3 +9,5 @@
 
 # rspec failure tracking
 .rspec_status
+
+gemfiles/*.lock

data/.rubocop.yml

@@ -21,7 +21,7 @@ Layout:
 Lint:
   Enabled: true
 
-Metrics/LineLength:
+Layout/LineLength:
   Max: 120
 
 Naming:
@@ -33,9 +33,6 @@ Security:
 Style/BlockComments:
   Enabled: true
 
-Style/BracesAroundHashParameters:
-  Enabled: true
-
 Style/CaseEquality:
   Enabled: true
 
@@ -181,10 +178,10 @@ Style/TrailingMethodEndStatement:
 Style/TrivialAccessors:
   Enabled: true
 
-Style/UnneededInterpolation:
+Style/RedundantInterpolation:
   Enabled: true
 
-Style/UnneededPercentQ:
+Style/RedundantPercentQ:
   Enabled: true
 
 Style/UnpackFirst:
@@ -195,3 +192,6 @@ Style/YodaCondition:
 
 Style/ZeroLengthPredicate:
   Enabled: true
+
+Layout/BlockAlignment:
+  Enabled: false

data/Appraisals

@@ -0,0 +1,9 @@
+# frozen_string_literal: true
+
+appraise "jwt_2" do
+  gem "jwt", "~> 2.0", "< 3.0"
+end
+
+appraise "jwt_3" do
+  gem "jwt", "~> 3.0", "< 4.0"
+end

data/CHANGELOG.md

@@ -6,6 +6,10 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 
 ## [Unreleased]
 
+## [0.5.0] - 2025-09-22
+### Changed
+- Update `jwt` dependency to support both v2 and v3. ([#23](https://github.com/cedarcode/safety_net_attestation/pull/7))
+
 ## [0.4.0] - 2019-12-29
 ### Fixed
 - Root certificate loading when this gem is used as a dependency
@@ -27,8 +31,9 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 ### Added
 - Extracted from [webauthn-ruby](https://github.com/cedarcode/webauthn-ruby) after discussion with the maintainers. Thanks for the feedback @grzuy and @brauliomartinezlm!
 
-[Unreleased]: https://github.com/bdewater/safety_net_attestation/compare/v0.1.0...HEAD
-[0.4.0]: https://github.com/bdewater/safety_net_attestation/compare/v0.3.0...v0.4.0
-[0.3.0]: https://github.com/bdewater/safety_net_attestation/compare/v0.2.0...v0.3.0
-[0.2.0]: https://github.com/bdewater/safety_net_attestation/compare/v0.1.0...v0.2.0
-[0.1.0]: https://github.com/bdewater/safety_net_attestation/releases/tag/v0.1.0
+[Unreleased]: https://github.com/cedarcode/safety_net_attestation/compare/v0.5.0...HEAD
+[0.5.0]: https://github.com/cedarcode/safety_net_attestation/compare/v0.4.0...v0.5.0
+[0.4.0]: https://github.com/cedarcode/safety_net_attestation/compare/v0.3.0...v0.4.0
+[0.3.0]: https://github.com/cedarcode/safety_net_attestation/compare/v0.2.0...v0.3.0
+[0.2.0]: https://github.com/cedarcode/safety_net_attestation/compare/v0.1.0...v0.2.0
+[0.1.0]: https://github.com/cedarcode/safety_net_attestation/releases/tag/v0.1.0

data/Gemfile

@@ -4,3 +4,7 @@ source "https://rubygems.org"
 
 # Specify your gem's dependencies in safety_net_attestation.gemspec
 gemspec
+
+if Gem::Version.new(RUBY_VERSION) >= Gem::Version.new("3.4.0")
+  gem "rubocop", "~> 1.80", require: false
+end

data/Gemfile.lock

@@ -1,61 +1,105 @@
 PATH
   remote: .
   specs:
-    safety_net_attestation (0.4.0)
-      jwt (~> 2.0)
+    safety_net_attestation (0.5.0)
+      jwt (>= 2.0, < 4.0)
 
 GEM
   remote: https://rubygems.org/
   specs:
-    ast (2.4.0)
-    byebug (11.0.1)
-    coderay (1.1.2)
-    diff-lcs (1.3)
-    jaro_winkler (1.5.4)
-    jwt (2.2.1)
-    method_source (0.9.2)
-    parallel (1.19.1)
-    parser (2.7.0.0)
-      ast (~> 2.4.0)
-    pry (0.12.2)
-      coderay (~> 1.1.0)
-      method_source (~> 0.9.0)
-    pry-byebug (3.7.0)
-      byebug (~> 11.0)
-      pry (~> 0.10)
-    rainbow (3.0.0)
-    rspec (3.9.0)
-      rspec-core (~> 3.9.0)
-      rspec-expectations (~> 3.9.0)
-      rspec-mocks (~> 3.9.0)
-    rspec-core (3.9.0)
-      rspec-support (~> 3.9.0)
-    rspec-expectations (3.9.0)
+    appraisal (2.5.0)
+      bundler
+      rake
+      thor (>= 0.14.0)
+    ast (2.4.3)
+    base64 (0.3.0)
+    byebug (12.0.0)
+    coderay (1.1.3)
+    date (3.4.1)
+    diff-lcs (1.6.2)
+    erb (5.0.2)
+    io-console (0.8.1)
+    irb (1.15.2)
+      pp (>= 0.6.0)
+      rdoc (>= 4.0.0)
+      reline (>= 0.4.2)
+    json (2.14.1)
+    jwt (3.1.2)
+      base64
+    language_server-protocol (3.17.0.5)
+    lint_roller (1.1.0)
+    method_source (1.1.0)
+    parallel (1.27.0)
+    parser (3.3.9.0)
+      ast (~> 2.4.1)
+      racc
+    pp (0.6.2)
+      prettyprint
+    prettyprint (0.2.0)
+    prism (1.5.1)
+    pry (0.15.2)
+      coderay (~> 1.1)
+      method_source (~> 1.0)
+    pry-byebug (3.11.0)
+      byebug (~> 12.0)
+      pry (>= 0.13, < 0.16)
+    psych (5.2.6)
+      date
+      stringio
+    racc (1.8.1)
+    rainbow (3.1.1)
+    rake (13.3.0)
+    rdoc (6.14.2)
+      erb
+      psych (>= 4.0.0)
+    regexp_parser (2.11.3)
+    reline (0.6.2)
+      io-console (~> 0.5)
+    rspec (3.13.1)
+      rspec-core (~> 3.13.0)
+      rspec-expectations (~> 3.13.0)
+      rspec-mocks (~> 3.13.0)
+    rspec-core (3.13.5)
+      rspec-support (~> 3.13.0)
+    rspec-expectations (3.13.5)
       diff-lcs (>= 1.2.0, < 2.0)
-      rspec-support (~> 3.9.0)
-    rspec-mocks (3.9.0)
+      rspec-support (~> 3.13.0)
+    rspec-mocks (3.13.5)
       diff-lcs (>= 1.2.0, < 2.0)
-      rspec-support (~> 3.9.0)
-    rspec-support (3.9.0)
-    rubocop (0.75.0)
-      jaro_winkler (~> 1.5.1)
+      rspec-support (~> 3.13.0)
+    rspec-support (3.13.6)
+    rubocop (1.80.2)
+      json (~> 2.3)
+      language_server-protocol (~> 3.17.0.2)
+      lint_roller (~> 1.1.0)
       parallel (~> 1.10)
-      parser (>= 2.6)
+      parser (>= 3.3.0.2)
       rainbow (>= 2.2.2, < 4.0)
+      regexp_parser (>= 2.9.3, < 3.0)
+      rubocop-ast (>= 1.46.0, < 2.0)
       ruby-progressbar (~> 1.7)
-      unicode-display_width (>= 1.4.0, < 1.7)
-    ruby-progressbar (1.10.1)
-    unicode-display_width (1.6.0)
+      unicode-display_width (>= 2.4.0, < 4.0)
+    rubocop-ast (1.46.0)
+      parser (>= 3.3.7.2)
+      prism (~> 1.4)
+    ruby-progressbar (1.13.0)
+    stringio (3.1.7)
+    thor (1.4.0)
+    unicode-display_width (3.2.0)
+      unicode-emoji (~> 4.1)
+    unicode-emoji (4.1.0)
 
 PLATFORMS
   ruby
 
 DEPENDENCIES
+  appraisal
   bundler
+  irb
   pry-byebug
   rspec (~> 3.8)
-  rubocop (= 0.75.0)
+  rubocop (~> 1.80)
   safety_net_attestation!
 
 BUNDLED WITH
-   2.1.2
+   2.7.1

data/android_safety_net.gemspec

@@ -28,9 +28,10 @@ Gem::Specification.new do |spec|
 
   spec.required_ruby_version = ">= 2.3"
 
-  spec.add_dependency "jwt", "~> 2.0"
+  spec.add_dependency "jwt", ">= 2.0", "< 4.0"
+  spec.add_development_dependency "appraisal"
   spec.add_development_dependency "bundler"
+  spec.add_development_dependency "irb"
   spec.add_development_dependency "pry-byebug"
   spec.add_development_dependency "rspec", "~> 3.8"
-  spec.add_development_dependency "rubocop", "0.75.0"
 end

data/gemfiles/jwt_2.gemfile

@@ -0,0 +1,7 @@
+# This file was generated by Appraisal
+
+source "https://rubygems.org"
+
+gem "jwt", "~> 2.0", "< 3.0"
+
+gemspec path: "../"

data/gemfiles/jwt_3.gemfile

@@ -0,0 +1,7 @@
+# This file was generated by Appraisal
+
+source "https://rubygems.org"
+
+gem "jwt", "~> 3.0", "< 4.0"
+
+gemspec path: "../"

data/lib/safety_net_attestation/fixed_length_secure_compare.rb

@@ -6,7 +6,7 @@ module SafetyNetAttestation
   module FixedLengthSecureCompare
     unless OpenSSL.singleton_class.method_defined?(:fixed_length_secure_compare)
       refine OpenSSL.singleton_class do
-        def fixed_length_secure_compare(a, b) # rubocop:disable Naming/UncommunicativeMethodParamName
+        def fixed_length_secure_compare(a, b) # rubocop:disable Naming/MethodParameterName
           raise ArgumentError, "inputs must be of equal length" unless a.bytesize == b.bytesize
 
           # borrowed from Rack::Utils

data/lib/safety_net_attestation/version.rb

@@ -1,5 +1,5 @@
 # frozen_string_literal: true
 
 module SafetyNetAttestation
-  VERSION = "0.4.0"
+  VERSION = "0.5.0"
 end

metadata

@@ -1,29 +1,49 @@
 --- !ruby/object:Gem::Specification
 name: safety_net_attestation
 version: !ruby/object:Gem::Version
-  version: 0.4.0
+  version: 0.5.0
 platform: ruby
 authors:
 - Bart de Water
-autorequire: 
+autorequire:
 bindir: exe
 cert_chain: []
-date: 2019-12-31 00:00:00.000000000 Z
+date: 2025-09-22 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: jwt
   requirement: !ruby/object:Gem::Requirement
     requirements:
-    - - "~>"
+    - - ">="
       - !ruby/object:Gem::Version
         version: '2.0'
+    - - "<"
+      - !ruby/object:Gem::Version
+        version: '4.0'
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
-    - - "~>"
+    - - ">="
       - !ruby/object:Gem::Version
         version: '2.0'
+    - - "<"
+      - !ruby/object:Gem::Version
+        version: '4.0'
+- !ruby/object:Gem::Dependency
+  name: appraisal
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: '0'
+  type: :development
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: '0'
 - !ruby/object:Gem::Dependency
   name: bundler
   requirement: !ruby/object:Gem::Requirement
@@ -39,7 +59,7 @@ dependencies:
       - !ruby/object:Gem::Version
         version: '0'
 - !ruby/object:Gem::Dependency
-  name: pry-byebug
+  name: irb
   requirement: !ruby/object:Gem::Requirement
     requirements:
     - - ">="
@@ -53,43 +73,44 @@ dependencies:
       - !ruby/object:Gem::Version
         version: '0'
 - !ruby/object:Gem::Dependency
-  name: rspec
+  name: pry-byebug
   requirement: !ruby/object:Gem::Requirement
     requirements:
-    - - "~>"
+    - - ">="
       - !ruby/object:Gem::Version
-        version: '3.8'
+        version: '0'
   type: :development
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
-    - - "~>"
+    - - ">="
       - !ruby/object:Gem::Version
-        version: '3.8'
+        version: '0'
 - !ruby/object:Gem::Dependency
-  name: rubocop
+  name: rspec
   requirement: !ruby/object:Gem::Requirement
     requirements:
-    - - '='
+    - - "~>"
       - !ruby/object:Gem::Version
-        version: 0.75.0
+        version: '3.8'
   type: :development
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
-    - - '='
+    - - "~>"
       - !ruby/object:Gem::Version
-        version: 0.75.0
-description: 
-email: 
+        version: '3.8'
+description:
+email:
 executables: []
 extensions: []
 extra_rdoc_files: []
 files:
+- ".github/workflows/ci.yml"
 - ".gitignore"
 - ".rspec"
 - ".rubocop.yml"
-- ".travis.yml"
+- Appraisals
 - CHANGELOG.md
 - CODE_OF_CONDUCT.md
 - Gemfile
@@ -101,6 +122,8 @@ files:
 - bin/rspec
 - bin/rubocop
 - bin/setup
+- gemfiles/jwt_2.gemfile
+- gemfiles/jwt_3.gemfile
 - lib/safety_net_attestation.rb
 - lib/safety_net_attestation/certificates/GSR2.crt
 - lib/safety_net_attestation/certificates/GSR4.crt
@@ -120,7 +143,7 @@ metadata:
   homepage_uri: https://github.com/bdewater/safety_net_attestation
   source_code_uri: https://github.com/bdewater/safety_net_attestation
   changelog_uri: https://github.com/bdewater/safety_net_attestation/blob/master/CHANGELOG.md
-post_install_message: 
+post_install_message:
 rdoc_options: []
 require_paths:
 - lib
@@ -135,8 +158,8 @@ required_rubygems_version: !ruby/object:Gem::Requirement
     - !ruby/object:Gem::Version
       version: '0'
 requirements: []
-rubygems_version: 3.1.2
-signing_key: 
+rubygems_version: 3.2.1
+signing_key:
 specification_version: 4
 summary: SafetyNet attestation response verification
 test_files: []

data/.travis.yml

@@ -1,20 +0,0 @@
----
-language: ruby
-cache: bundler
-rvm:
-  - 2.6.5
-  - 2.5.7
-  - 2.4.9
-  - 2.3.8
-before_install:
-  - gem install bundler
-script:
-  - bin/rspec
-jobs:
-  fast_finish: true
-  include:
-    - rvm: 2.6.5
-      name: Rubocop
-      script:
-        - bundle info rubocop
-        - bin/rubocop