strongmind-auth 1.1.114 → 1.1.118

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: b54499ae588ab3e6caa39b411255c9e528a89a425acc21b4d5416dcf1b884158
-  data.tar.gz: 1622da4c1965d63dbec5b02c5b1b5cf4991e14ffbd02d6fc77fd7f97f76d8ac7
+  metadata.gz: 54012245095295e150196fc80e2ad10c7a302b2ccf90481b0f9d29045891ad79
+  data.tar.gz: 9c960c366e9d77d1dd0f7bc1ec65bb7a5033a64708a9ee9bf20416289d7570c0
 SHA512:
-  metadata.gz: d336fb20cf9435f094a83be4a5b893e5aeee7200a97a36cf31f09d808710759ea990378df5211d81336ac11ffa4ce7208997e590951b8c1dcefe4be3ad888801
-  data.tar.gz: 53eea3b50215d27226a69157e34476895b14e2f6aaa3aab51b30d5d42a3cba134b3204fa0d226af40ff503291b676cc5646a3a0ecf9e9af7d30e7d201a4ca974
+  metadata.gz: 0a48379813bce8d02c83994b36cb3e3c797f23a40ccbf873b5a02f12de69b120ba895381c39694340a795093dae9e2d7fd4379bc12edc2a460227e34851b5028
+  data.tar.gz: '085d8271e0aac7b174bf8f97fca85bc6657bc05841d9e4da3811805d2400ce752e2365a98fb0c64275f32377faedaa6e45aaff9d6479c7e7af312a11fd9099e8'

data/app/controllers/concerns/jwt_utilities.rb

@@ -8,7 +8,7 @@ module JwtUtilities
     payload = decode_jwt(jwt)
     return false unless payload
 
-    scope_valid = scope_valid?(payload,scopes)
+    scope_valid = scope_valid?(payload, scopes)
     nonce_valid = nonce_valid?(payload)
     condition_key_valid = condition_key_valid?(payload, condition_key)
     attributes_valid = attributes_valid?(payload, attributes)
@@ -40,9 +40,9 @@ module JwtUtilities
     {
       verify_iat: true,
       verify_iss: true,
-      verify_aud: true,
       verify_sub: true,
       algorithm: 'RS256',
+      iss: ENV['IDENTITY_BASE_URL'],
       leeway: 60
     }
   end

data/app/controllers/users/sessions_controller.rb

@@ -23,9 +23,13 @@ module Users
         payload, _header = JWT.decode(params[:logout_token], nil, false)
         user_identity = payload['sub']
         user = User.find_by(uid: user_identity)
-        user.invalidate_all_sessions!
-        invalidate_navbar_cache(user)
-        render json: {}, status: :ok, headers:
+        if user
+          user.invalidate_all_sessions!
+          invalidate_navbar_cache(user)
+          render json: {}, status: :ok, headers:
+        else
+          render json: {}, status: :bad_request, headers:
+        end
       else
         render json: {}, status: :bad_request, headers:
       end

data/lib/strongmind/auth/version.rb

@@ -1,5 +1,5 @@
 module Strongmind
   module Auth
-    VERSION = "1.1.114"
+    VERSION = "1.1.118"
   end
 end

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: strongmind-auth
 version: !ruby/object:Gem::Version
-  version: 1.1.114
+  version: 1.1.118
 platform: ruby
 authors:
 - Team Belding
 autorequire: 
 bindir: bin
 cert_chain: []
-date: 2024-09-12 00:00:00.000000000 Z
+date: 2024-11-11 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: rails