soar_authentication_token 6.0.1 → 6.0.2

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA1:
-  metadata.gz: 5c83cc1b233599c334a1e9da9f4af213192ccc79
-  data.tar.gz: 23b6b9afc6d39c3ba516228e09e404a4adefbabc
+  metadata.gz: c048ea8f50dfe96f02befadf1093f3208a27fb10
+  data.tar.gz: ced5e014bfe4f96000276cc6c6d39b68b83d0cb8
 SHA512:
-  metadata.gz: 931f6ccd6f377484db1c4af119f69837f40160bd62b4d0193d8577e7b4a2f792dba4b685e633a9e6c9dff24c478862bd879d0ddb927d39a58a473c0af2c68029
-  data.tar.gz: 0202c7e8ea9702ff868945f5749d831a9f5f19248a71e61e9ec7b6d6d12d899e436feea038c67b70fbd47781d4268ec63ee1fedff993dab8ec5672fb3582512e
+  metadata.gz: c93144f5d81b0b7149c0d17765a786999366a245a3b68f8b1fabc349f6cb501cbc5775b8d3dbea3cdafad0f3d90d9e362158ac39790cc24cb449812793bf488e
+  data.tar.gz: 2a861c19385dc97ad3eb6d8adda1baa368e06987d7a6fd514d6a69752835773f63f4abfaf4a5872a2be465d51b801538cacdca9476a35546c9264f339aca4585

data/lib/soar_authentication_token/providers/jwt_token_validator.rb

@@ -58,7 +58,7 @@ module SoarAuthenticationToken
     def attempt_decode_using_a_key(authentication_token,key_data)
       public_key = OpenSSL::PKey::EC.new(key_data['public_key'])
       public_key.private_key = nil
-      JWT.decode(authentication_token, public_key, true, { :algorithm => 'ES512' })
+      JWT.decode(authentication_token.to_s, public_key, true, { :algorithm => 'ES512' })
     rescue JWT::VerificationError, JWT::DecodeError
       nil
     end

data/lib/soar_authentication_token/version.rb

@@ -1,3 +1,3 @@
 module SoarAuthenticationToken
-  VERSION = '6.0.1'
+  VERSION = '6.0.2'
 end

data/spec/jwt_token_validator_spec.rb

@@ -207,7 +207,7 @@ describe SoarAuthenticationToken::JwtTokenValidator do
           expect(iut).to receive(:attempt_decode_using_a_key).once.ordered.with(token, @multiple_key_configuration['keys']['KEYPAIR_20160108T190001']).and_return(nil)
           expect(iut).to receive(:attempt_decode_using_a_key).once.ordered.with(token, @multiple_key_configuration['keys']['KEYPAIR_20160107T230001']).and_return(nil)
 
-          iut.validate(authentication_token: token, flow_identifier: nil, request_information: nil)
+          iut.validate(authentication_token: token, flow_identifier: nil, request_information: request_information_from_valid_source)
         end
 
         it 'attempts to use all the public keys' do
@@ -216,7 +216,7 @@ describe SoarAuthenticationToken::JwtTokenValidator do
 
           expect(iut).to receive(:attempt_decode_using_a_key).exactly(3).times
 
-          iut.validate(authentication_token: token, flow_identifier: nil, request_information: nil)
+          iut.validate(authentication_token: token, flow_identifier: nil, request_information: request_information_from_valid_source)
         end
       end
 
@@ -234,7 +234,7 @@ describe SoarAuthenticationToken::JwtTokenValidator do
         it 'responds indicating the token is valid' do
           iut = SoarAuthenticationToken::JwtTokenValidator.new(@multiple_key_configuration)
           iut.inject_store_provider(@test_store)
-          token_validity, token_meta, message = iut.validate(authentication_token: token, flow_identifier: nil, request_information: nil)
+          token_validity, token_meta, message = iut.validate(authentication_token: token, flow_identifier: nil, request_information: request_information_from_valid_source)
 
           expect(token_validity).to eq true
         end
@@ -250,7 +250,7 @@ describe SoarAuthenticationToken::JwtTokenValidator do
           iut.inject_store_provider(@test_store)
 
           expect(iut).to receive(:attempt_decode_using_a_key).once.with(token, @multiple_key_configuration['keys']['KEYPAIR_20160108T200001']).and_return([token_meta])
-          iut.validate(authentication_token: token, flow_identifier: nil, request_information: nil)
+          iut.validate(authentication_token: token, flow_identifier: nil, request_information: request_information_from_valid_source)
         end
       end
 
@@ -288,7 +288,7 @@ describe SoarAuthenticationToken::JwtTokenValidator do
           expect(iut).to receive(:attempt_decode_using_a_key).once.with(token, @multiple_key_configuration['keys']['KEYPAIR_20160108T200001']).and_return(nil)
           expect(iut).to receive(:attempt_decode_using_a_key).once.with(token, @multiple_key_configuration['keys']['KEYPAIR_20160108T190001']).and_return([token_meta])
           expect(iut).not_to receive(:attempt_decode_using_a_key).with(token, @multiple_key_configuration['keys']['KEYPAIR_20160107T230001'])
-          iut.validate(authentication_token: token, flow_identifier: nil, request_information: nil)
+          iut.validate(authentication_token: token, flow_identifier: nil, request_information: request_information_from_valid_source)
         end
       end
     end

data/spec/rack_middleware_spec.rb

@@ -80,7 +80,7 @@ describe SoarAuthenticationToken::RackMiddleware do
   context "when called with a request environment" do
     context 'with no authentication token' do
       it "return with 401" do
-        opts = { }
+        opts = { 'REMOTE_ADDR' => '1.1.1.1' }
         code, env, body = @iut.call Rack::MockRequest.env_for('http://service', opts)
         expect([code, env, body]).to eq([401, {"Content-Type" => "application/json"}, @failure_response_json])
       end
@@ -88,7 +88,7 @@ describe SoarAuthenticationToken::RackMiddleware do
 
     context 'with an invalid authentication token' do
       it "return with 401" do
-        opts = { 'HTTP_AUTHORIZATION' => @local_invalid_generator.generate(authenticated_identifier: 'a@b.com') }
+        opts = { 'REMOTE_ADDR' => '1.1.1.1', 'HTTP_AUTHORIZATION' => @local_invalid_generator.generate(authenticated_identifier: 'a@b.com') }
         code, env, body = @iut.call Rack::MockRequest.env_for('http://service', opts)
         expect([code, env, body]).to eq([401, {"Content-Type" => "application/json"}, @failure_response_json])
       end
@@ -96,19 +96,19 @@ describe SoarAuthenticationToken::RackMiddleware do
 
     context 'with a valid authentiation token' do
       it "pass requests to the application" do
-        opts = { 'HTTP_AUTHORIZATION' => @local_valid_generator.generate(authenticated_identifier: 'a@b.com') }
+        opts = { 'REMOTE_ADDR' => '1.1.1.1',  'HTTP_AUTHORIZATION' => @local_valid_generator.generate(authenticated_identifier: 'a@b.com') }
         code, env, body = @iut.call Rack::MockRequest.env_for('http://service', opts)
         expect([code, env, body['message']]).to eq([200, {"Content-Type"=>"application/json"}, "tested with authenticated user a@b.com" ])
       end
 
       it "populate the 'user' key in the rack session with the authenticated user" do
-        opts = { 'HTTP_AUTHORIZATION' => @local_valid_generator.generate(authenticated_identifier: 'a@b.com') }
+        opts = { 'REMOTE_ADDR' => '1.1.1.1',  'HTTP_AUTHORIZATION' => @local_valid_generator.generate(authenticated_identifier: 'a@b.com') }
         code, env, body = @iut.call Rack::MockRequest.env_for('http://service', opts)
         expect(body['user']).to eq('a@b.com')
       end
 
       it "populate the 'auth_token_meta' key in the rack session with the hash containing the token meta" do
-        opts = { 'HTTP_AUTHORIZATION' => @local_valid_generator.generate(authenticated_identifier: 'a@b.com') }
+        opts = { 'REMOTE_ADDR' => '1.1.1.1',  'HTTP_AUTHORIZATION' => @local_valid_generator.generate(authenticated_identifier: 'a@b.com') }
         code, env, body = @iut.call Rack::MockRequest.env_for('http://service', opts)
         expect(body['auth_token_meta']['authenticated_identifier']).to eq('a@b.com')
       end

data/spec/remote_token_validator_spec.rb

@@ -38,7 +38,7 @@ describe SoarAuthenticationToken::RemoteTokenValidator do
     context 'given valid token' do
       let!(:token_validation_result) {
         token, token_generator_meta = @remote_generator.generate(authenticated_identifier: @test_identifier)
-        iut.validate(authentication_token: token, request_information: nil, flow_identifier: nil)
+        iut.validate(authentication_token: token, request_information: request_information_from_valid_source, flow_identifier: nil)
       }
       let!(:token_validity) { token_validation_result[0] }
       let!(:token_meta)     { token_validation_result[1] }
@@ -56,7 +56,7 @@ describe SoarAuthenticationToken::RemoteTokenValidator do
     context 'given invalid (generalized) token' do
       let!(:token_validation_result) {
         token, token_generator_meta = @local_invalid_generator.generate(authenticated_identifier: @test_identifier)
-        iut.validate(authentication_token: token, request_information: nil, flow_identifier: nil)
+        iut.validate(authentication_token: token, request_information: request_information_from_valid_source, flow_identifier: nil)
       }
       let!(:token_validity) { token_validation_result[0] }
       let!(:token_meta)     { token_validation_result[1] }
@@ -88,13 +88,13 @@ describe SoarAuthenticationToken::RemoteTokenValidator do
       }
       it 'raise error after attempt that timeout has occured' do
         expect{
-          iut.validate(authentication_token: valid_token, request_information: nil, flow_identifier: nil)
+          iut.validate(authentication_token: valid_token, request_information: request_information_from_valid_source, flow_identifier: nil)
         }.to raise_error Timeout::Error
       end
       it 'by default attempts 2 times with 3 second timeout' do
         start_time = Time.now
         expect{
-          iut.validate(authentication_token: valid_token, request_information: nil, flow_identifier: nil)
+          iut.validate(authentication_token: valid_token, request_information: request_information_from_valid_source, flow_identifier: nil)
         }.to raise_error Timeout::Error
         expect(Time.now - start_time).to be_within(1).of 6
       end

data/spec/spec_helper.rb

@@ -17,6 +17,13 @@ def one_year_in_seconds
   31536000
 end
 
+def request_information_from_valid_source
+  { 'source_address'    => '1.1.1.1',
+    'user_agent'        => 'some shiny browser',
+    'service'           => 'test-service',
+    'resource'          => '/'
+  }
+end
 
 module AuthTokenStoreProvider
   class LocalStubClient

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: soar_authentication_token
 version: !ruby/object:Gem::Version
-  version: 6.0.1
+  version: 6.0.2
 platform: ruby
 authors:
 - Barney de Villiers
 autorequire: 
 bindir: bin
 cert_chain: []
-date: 2017-04-03 00:00:00.000000000 Z
+date: 2017-04-04 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: soar_xt