secure_jwt 0.1.0 → 0.1.0.1

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 8c111f243ff01928e557b0d764c28bd31075df1d9822127188cc1a62453bffe3
-  data.tar.gz: 420a70833f9ddc621324ddc1bad9fd76ea3b0a682e9e288dc5e3865abc7dd747
+  metadata.gz: bdf389d943c937effdd17264e0893d81c57f87c23f6ab8a542c84f01cad0a4f9
+  data.tar.gz: 076c0e9a2ab9c99588d5748bcaed375f1e9e8d9de439e323ee003523dc631f86
 SHA512:
-  metadata.gz: dcf75b7289fb69a0375642f3f54465c37ab11a4d8aebe1e56ea87054d04f6d32be25a23aed52e5e683c6af634e4b220ff77c5c7059c8a540fda3023dcb4c4119
-  data.tar.gz: 27fb10bb12f352353c725881161486f5bd01a574d64fd9e3a4114201155510fd2f9456201802022fb92f8c01ee1b70e1ab027c3c316c6a3d5d908bf8a7834ab1
+  metadata.gz: '05538a81d2eaa04d17191e58afd3fe70da54b8ad536da00aafb3cc648be328e0174bfbf1d07ede69a89065973ffa8c7b77aab18ace67293420c7c5ef6dd5b1d9'
+  data.tar.gz: 9d5b0dc4da51191a6f84b27a0ca86d0e410f8df80d5918dbf08e3b89793ecb746ea35d0b3622bc0c67f9818977c07657c01abec90b09b6d4af205041f9e10710

data/CHANGELOG.md

@@ -0,0 +1 @@
+2021-03-25: (0.1.0.1)  - Added expiration

data/lib/secure_jwt.rb

@@ -53,7 +53,8 @@ module SecureJwt
       ret = encode_jwt encrypted_payload, {
         data_key: data_key[:encrypted],
         iv: iv,
-        auth_tag: auth_tag
+        auth_tag: auth_tag,
+        expires: options[:expires]&.to_i
       }
 
       first_error ? raise(first_error) : ret
@@ -98,24 +99,25 @@ module SecureJwt
       headers[:tag] = Base64.urlsafe_encode64(options[:auth_tag]) if options[:auth_tag]
 
       formatted_payload = { 
-        "payload" => Base64.urlsafe_encode64(encrypted_payload) 
-      }
+        "data" => Base64.urlsafe_encode64(encrypted_payload),
+        "exp" => options[:expires]
+      }.compact
 
       JWT.encode formatted_payload, signing_key, jwt_algorithm, headers 
     end
 
     def decode_jwt(jwt_token)
       begin
-        payload, header = JWT.decode jwt_token, signing_key, !!jwt_algorithm, algorithm: jwt_algorithm
+        payload, header = JWT.decode jwt_token, signing_key, !!jwt_algorithm, algorithm: jwt_algorithm, verify_expiration: true
 
         %w(data_key iv tag).each do |key| 
           header[key] = Base64.urlsafe_decode64 header[key] rescue ""
         end
 
-        return Base64.urlsafe_decode64(payload["payload"]), header.transform_keys(&:to_sym)
+        return Base64.urlsafe_decode64(payload["data"]), header.transform_keys(&:to_sym)
       rescue JWT::VerificationError, JWT::IncorrectAlgorithm => e
         self.first_error = e
-        return {"payload": nil}, { }
+        return {"data": nil}, { }
       end
     end
 

data/lib/secure_jwt/version.rb

@@ -1,3 +1,3 @@
 module SecureJwt
-  VERSION = "0.1.0"
+  VERSION = "0.1.0.1"
 end

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: secure_jwt
 version: !ruby/object:Gem::Version
-  version: 0.1.0
+  version: 0.1.0.1
 platform: ruby
 authors:
 - Jeremy Linder
@@ -61,6 +61,7 @@ extensions: []
 extra_rdoc_files: []
 files:
 - ".gitignore"
+- CHANGELOG.md
 - CODE_OF_CONDUCT.md
 - Gemfile
 - Gemfile.lock