spd_jwt_authorizor 1.0.0

checksums.yaml

@@ -0,0 +1,7 @@
+---
+SHA256:
+  metadata.gz: b78365aef0c3f642e17e5085ed9629989484bace2855a123760dbd3c092e40db
+  data.tar.gz: ba44e6ce12898c2b62ff212b0e73ea9e3bb5439c488bb9ced2cb6845a60eab68
+SHA512:
+  metadata.gz: a66c6d3b59b3d7d9f9a2247c0842c084d00ea6ea18041dde16d17e622e8076ea6b265a330e8f5a7682f71ceff3d33f11f93fa70e21d0c5112929b0840bd49053
+  data.tar.gz: 1c497416f0118570e132e19e41374ffd04cde6c776d502cb71f257d8f7a1369f81c2f03bb49eeb888885c3f613359a18de9cd88d803dbbea534447235ca96595

data/lib/errors/blank_secret_key.rb

@@ -0,0 +1,3 @@
+module SapaadJwtAuthorizor
+  class BlankSecretKey < StandardError; end
+end

data/lib/spd_jwt_authorizor.rb

@@ -0,0 +1,69 @@
+require 'jwt'
+require 'errors/blank_secret_key'
+
+# :nodoc:
+module SpdJwtAuthorizor
+  class Engine
+    def initialize(jwt:)
+      @jwt = jwt
+      check_if_env_set!
+    end
+
+    def authorized?(required_permissions:, match: :all)
+      return false unless ok?
+
+      if match == :all
+        # JWT should contain all mentioned permissions
+        (required_permissions & payload['aud']).count ==
+          required_permissions.count
+      elsif match == :any
+        # JWT should contain AT LEAST ONE of the mentioned permissions
+        (required_permissions & payload['aud']).count.positive?
+      end
+    end
+
+    def ok?
+      decodable? && verified? && !expired?
+    end
+
+    def expired?
+      JWT.decode(@jwt, ENV['JWT_SECRET_KEY'], true)
+      false
+    rescue JWT::ExpiredSignature
+      puts 'SapaadJwtAuthorizor: JWT is Expired!'
+      true
+    end
+
+    def verified?
+      JWT.decode(@jwt, ENV['JWT_SECRET_KEY'], true)
+      true
+    rescue JWT::ExpiredSignature
+      true
+    rescue JWT::VerificationError
+      puts 'SapaadJwtAuthorizor: JWT is not Verified!'
+      false
+    end
+
+    def decodable?
+      JWT.decode(@jwt, ENV['JWT_SECRET_KEY'], false)
+      true
+    rescue JWT::DecodeError
+      puts 'SapaadJwtAuthorizor: JWT is not decodable!'
+      false
+    end
+
+    def payload
+      JWT.decode(@jwt, ENV['JWT_SECRET_KEY'], false).first
+    rescue JWT::DecodeError
+      puts 'SapaadJwtAuthorizor: JWT is not decodable!'
+      nil
+    end
+
+    private
+
+    def check_if_env_set!
+      raise BlankSecretKey, 'Cannot find the env JWT_SECRET_KEY' if
+        ENV['JWT_SECRET_KEY'].to_s.empty?
+    end
+  end
+end

metadata

@@ -0,0 +1,57 @@
+--- !ruby/object:Gem::Specification
+name: spd_jwt_authorizor
+version: !ruby/object:Gem::Version
+  version: 1.0.0
+platform: ruby
+authors:
+- Alan
+autorequire: 
+bindir: bin
+cert_chain: []
+date: 2020-04-22 00:00:00.000000000 Z
+dependencies:
+- !ruby/object:Gem::Dependency
+  name: jwt
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '2.2'
+  type: :runtime
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '2.2'
+description: Checks for JWT validity, expiry, and User roles
+email: 
+executables: []
+extensions: []
+extra_rdoc_files: []
+files:
+- lib/errors/blank_secret_key.rb
+- lib/spd_jwt_authorizor.rb
+homepage: 
+licenses: []
+metadata: {}
+post_install_message: 
+rdoc_options: []
+require_paths:
+- lib
+required_ruby_version: !ruby/object:Gem::Requirement
+  requirements:
+  - - ">="
+    - !ruby/object:Gem::Version
+      version: 2.3.0
+required_rubygems_version: !ruby/object:Gem::Requirement
+  requirements:
+  - - ">="
+    - !ruby/object:Gem::Version
+      version: '0'
+requirements: []
+rubygems_version: 3.0.0
+signing_key: 
+specification_version: 4
+summary: Authorizes requests based on the user roles and provided roles
+test_files: []