stytch 3.1.1 → 3.3.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: e91043619b43a9897c4df68cdfbdcff3153d21c09dcb0ba2fa0c7f7c2d8d2135
-  data.tar.gz: 5f925cecd213b77e7e5991b95016849d81cb9a017bc3f0bebbc62d53e8d6f562
+  metadata.gz: c8df42027eb062c7be0ddfbe1f1ee11eece832c7ca442391421f7355a072c77e
+  data.tar.gz: 8df5887ad55b4f1c32efdcccf1873ffd371c4d2df3278ffbf290b1868cc56dad
 SHA512:
-  metadata.gz: 1066e9ee807780bbe7d1a5f255b844553615ed93889ca129320ec499e494acc98321bdc48c6ae47c7eaf2ddc9a9410bb9e2e81e4dd92a5e72a87a3178384fd25
-  data.tar.gz: d765dcf96b92bb7bdd65b0b710b27f94069635f61c3d74bdb376b7c8a086c7888f794c273bcb84617d1f2df2a737cbf2eedc5c50c3455b502c0a9371478df5d2
+  metadata.gz: fec2e73072c90bfc9d5d8c0ff7c29ccbb41e9979d117b1f5a91f2492a83a1f576390debf250a4e17d767a65d708799f48a4222ec79d4bddf27b79d3788f5670a
+  data.tar.gz: 77e7d520386a75d66b9aefc5052a93094d297d0764c5d7dc0c08757e9234c63ed0ead8cc17d9dd9160b404ea11c62ace810896e9b8c7dc98fa1a965bf0b7e6b6

data/lib/stytch/magic_links.rb

@@ -37,7 +37,8 @@ module Stytch
       options: {},
       session_token: nil,
       session_jwt: nil,
-      session_duration_minutes: nil
+      session_duration_minutes: nil,
+      code_verifier: nil
     )
       request = {
         token: token
@@ -48,6 +49,7 @@ module Stytch
       request[:session_token] = session_token unless session_token.nil?
       request[:session_jwt] = session_jwt unless session_jwt.nil?
       request[:session_duration_minutes] = session_duration_minutes unless session_duration_minutes.nil?
+      request[:code_verifier] = code_verifier unless code_verifier.nil?
 
       post_request("#{PATH}/authenticate", request)
     end
@@ -67,7 +69,8 @@ module Stytch
         signup_magic_link_url: nil,
         login_expiration_minutes: nil,
         signup_expiration_minutes: nil,
-        attributes: {}
+        attributes: {},
+        code_challenge: nil
       )
         request = {
           email: email
@@ -78,6 +81,7 @@ module Stytch
         request[:login_expiration_minutes] = login_expiration_minutes unless login_expiration_minutes.nil?
         request[:signup_expiration_minutes] = signup_expiration_minutes unless signup_expiration_minutes.nil?
         request[:attributes] = attributes if attributes != {}
+        request[:code_challenge] = code_challenge unless code_challenge.nil?
 
         post_request("#{PATH}/send", request)
       end
@@ -89,7 +93,8 @@ module Stytch
         login_expiration_minutes: nil,
         signup_expiration_minutes: nil,
         attributes: {},
-        create_user_as_pending: false
+        create_user_as_pending: false,
+        code_challenge: nil
       )
         request = {
           email: email,
@@ -101,6 +106,7 @@ module Stytch
         request[:login_expiration_minutes] = login_expiration_minutes unless login_expiration_minutes.nil?
         request[:signup_expiration_minutes] = signup_expiration_minutes unless signup_expiration_minutes.nil?
         request[:attributes] = attributes if attributes != {}
+        request[:code_challenge] = code_challenge unless code_challenge.nil?
 
         post_request("#{PATH}/login_or_create", request)
       end

data/lib/stytch/oauth.rb

@@ -16,7 +16,8 @@ module Stytch
       token:,
       session_token: nil,
       session_jwt: nil,
-      session_duration_minutes: nil
+      session_duration_minutes: nil,
+      code_verifier: nil
     )
       request = {
         token: token
@@ -24,6 +25,7 @@ module Stytch
       request[:session_token] = session_token unless session_token.nil?
       request[:session_jwt] = session_jwt unless session_jwt.nil?
       request[:session_duration_minutes] = session_duration_minutes unless session_duration_minutes.nil?
+      request[:code_verifier] = code_verifier unless code_verifier.nil?
 
       post_request("#{PATH}/authenticate", request)
     end

data/lib/stytch/sessions.rb

@@ -88,6 +88,12 @@ module Stytch
           session_duration_minutes: session_duration_minutes,
         )
       end
+    rescue StandardError
+      # JWT could not be verified locally. Check with the Stytch API.
+      return authenticate(
+        session_jwt: session_jwt,
+        session_duration_minutes: session_duration_minutes,
+      )
     end
 
     # Parse a JWT and verify the signature locally (without calling /authenticate in the API)
@@ -97,7 +103,7 @@ module Stytch
     def authenticate_jwt_local(session_jwt)
       issuer = "stytch.com/" + @project_id
       begin
-        decoded_token = JWT.decode session_jwt, nil, true, 
+        decoded_token = JWT.decode session_jwt, nil, true,
         { jwks: @jwks_loader, iss: issuer, verify_iss: true, aud: @project_id, verify_aud: true, algorithms: ["RS256"]}
         return decoded_token[0]
       rescue JWT::InvalidIssuerError
@@ -113,12 +119,14 @@ module Stytch
 
     def marshal_jwt_into_session(jwt)
       stytch_claim = "https://stytch.com/session"
+      expires_at = jwt[stytch_claim]["expires_at"] || Time.at(jwt["exp"]).to_datetime.utc.strftime('%Y-%m-%dT%H:%M:%SZ')
       return {
         "session_id" => jwt[stytch_claim]["id"],
         "user_id" => jwt["sub"],
         "started_at" => jwt[stytch_claim]["started_at"],
         "last_accessed_at" => jwt[stytch_claim]["last_accessed_at"],
-        "expires_at" => Time.at(jwt["exp"]).to_datetime.iso8601,
+        # For JWTs that include it, prefer the inner expires_at claim.
+        "expires_at" => expires_at,
         "attributes" => jwt[stytch_claim]["attributes"],
         "authentication_factors" => jwt[stytch_claim]["authentication_factors"],
       }

data/lib/stytch/version.rb

@@ -1,5 +1,5 @@
 # frozen_string_literal: true
 
 module Stytch
-  VERSION = '3.1.1'
+  VERSION = '3.3.0'
 end

data/stytch.gemspec

@@ -27,6 +27,8 @@ Gem::Specification.new do |spec|
 
   spec.add_dependency 'faraday', '>= 0.17.0', '< 2.0'
   spec.add_dependency 'faraday_middleware', '>= 0.14.0', '< 2.0'
-  spec.add_dependency 'jwt', '>= 2.3.0'
   spec.add_dependency 'json-jwt', '>=1.13.0'
+  spec.add_dependency 'jwt', '>= 2.3.0'
+
+  spec.add_development_dependency 'test-unit', '>=3.5.3'
 end

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: stytch
 version: !ruby/object:Gem::Version
-  version: 3.1.1
+  version: 3.3.0
 platform: ruby
 authors:
 - stytch
-autorequire:
+autorequire: 
 bindir: exe
 cert_chain: []
-date: 2022-04-27 00:00:00.000000000 Z
+date: 2022-06-01 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: faraday
@@ -50,6 +50,20 @@ dependencies:
     - - "<"
       - !ruby/object:Gem::Version
         version: '2.0'
+- !ruby/object:Gem::Dependency
+  name: json-jwt
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: 1.13.0
+  type: :runtime
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: 1.13.0
 - !ruby/object:Gem::Dependency
   name: jwt
   requirement: !ruby/object:Gem::Requirement
@@ -65,20 +79,20 @@ dependencies:
       - !ruby/object:Gem::Version
         version: 2.3.0
 - !ruby/object:Gem::Dependency
-  name: json-jwt
+  name: test-unit
   requirement: !ruby/object:Gem::Requirement
     requirements:
     - - ">="
       - !ruby/object:Gem::Version
-        version: 1.13.0
-  type: :runtime
+        version: 3.5.3
+  type: :development
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - ">="
       - !ruby/object:Gem::Version
-        version: 1.13.0
-description:
+        version: 3.5.3
+description: 
 email:
 - support@stytch.com
 executables: []
@@ -118,7 +132,7 @@ licenses:
 metadata:
   homepage_uri: https://stytch.com
   source_code_uri: https://github.com/stytchauth/stytch-ruby
-post_install_message:
+post_install_message: 
 rdoc_options: []
 require_paths:
 - lib
@@ -133,8 +147,8 @@ required_rubygems_version: !ruby/object:Gem::Requirement
     - !ruby/object:Gem::Version
       version: '0'
 requirements: []
-rubygems_version: 3.1.6
-signing_key:
+rubygems_version: 3.0.3.1
+signing_key: 
 specification_version: 4
 summary: Stytch Ruby Gem
 test_files: []