supabase-auth 0.1.0 → 0.1.1

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 4f59194c543746f17fee64c695a67376d979b29d84cef81927f2e0ee28b2c3c0
-  data.tar.gz: 0645f3fa4daca0abd64124e61735f2b95e04fca4b2a9395e519882fd15b50150
+  metadata.gz: 5b4f7cdcf0814c8ebe968554adfc4d142691b864b3813d58d0ad78c07d100bda
+  data.tar.gz: 4051b6ea710ac669ed1c0a94c45c31d29e0e9469c3d580e8496d6f4144af3a06
 SHA512:
-  metadata.gz: 95dec921b37d44b44a94f36dcc9ab5e6466a2f9fc774657f2b526c003cba2acf867ed2103093ff5b2bd4b01064f8db271b5298f07b6dab5621cc83e511679d67
-  data.tar.gz: 10a3996b51836f65cbabc33514ae57c1a11f997b35885144bd818a208f8625e65138231fe335b9b5cf65c89cf7872702927600b4abd779c571ed9bb30dd392a5
+  metadata.gz: cebe4dde4a57246f1b5d05541aca98286b118f6f56a161776b1d433cb97818bf45307ed629b902ef497cc4f8c78412784b7a289b94654df8bdc58babea7cec7b
+  data.tar.gz: bfdd074a5f2a876308ea01240dc32a152e9955da9eae370b1c8d1cb4ddbaa07bd70814d58c88513f1edb3f48a3049b1be509b9d0d8810d97728344d5913b2e8d

data/lib/supabase/auth/client.rb

@@ -681,15 +681,17 @@ module Supabase
           return Types::ClaimsResponse.new(claims: payload, headers: header, signature: signature)
         end
 
-        # Asymmetric JWT - verify via JWKS
+        # Asymmetric JWT - verify via JWKS using the jwt gem's decode
         jwk_data = _fetch_jwks(header["kid"], jwks || { "keys" => [] })
-        signing_key = JWT::JWK.new(jwk_data).verify_key
+        jwk_set = JWT::JWK::Set.new({ "keys" => [jwk_data] })
 
-        digest = ALG_TO_DIGEST[header["alg"]]
-        raise Errors::AuthInvalidJwtError, "Unsupported algorithm: #{header["alg"]}" unless digest
+        raise Errors::AuthInvalidJwtError, "Unsupported algorithm: #{header["alg"]}" unless ALG_TO_DIGEST[header["alg"]]
 
-        is_valid = signing_key.verify(digest, signature, "#{raw_header}.#{raw_payload}")
-        raise Errors::AuthInvalidJwtError, "Invalid JWT signature" unless is_valid
+        begin
+          JWT.decode(token, nil, true, { algorithms: [header["alg"]], jwks: jwk_set })
+        rescue JWT::DecodeError => e
+          raise Errors::AuthInvalidJwtError, "Invalid JWT signature: #{e.message}"
+        end
 
         Types::ClaimsResponse.new(claims: payload, headers: header, signature: signature)
       end

data/lib/supabase/auth/version.rb

@@ -2,6 +2,6 @@
 
 module Supabase
   module Auth
-    VERSION = "0.1.0"
+    VERSION = "0.1.1"
   end
 end

metadata

@@ -1,14 +1,13 @@
 --- !ruby/object:Gem::Specification
 name: supabase-auth
 version: !ruby/object:Gem::Version
-  version: 0.1.0
+  version: 0.1.1
 platform: ruby
 authors:
 - Bogdan Tarasenko
-autorequire: 
 bindir: bin
 cert_chain: []
-date: 2026-03-19 00:00:00.000000000 Z
+date: 1980-01-02 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: faraday
@@ -137,7 +136,6 @@ metadata:
   homepage_uri: https://github.com/bogdantarasenko/supabase-rb
   source_code_uri: https://github.com/bogdantarasenko/supabase-rb
   changelog_uri: https://github.com/bogdantarasenko/supabase-rb/blob/main/CHANGELOG.md
-post_install_message: 
 rdoc_options: []
 require_paths:
 - lib
@@ -152,8 +150,7 @@ required_rubygems_version: !ruby/object:Gem::Requirement
     - !ruby/object:Gem::Version
       version: '0'
 requirements: []
-rubygems_version: 3.0.3.1
-signing_key: 
+rubygems_version: 3.6.9
 specification_version: 4
 summary: Ruby client for Supabase Auth (GoTrue API)
 test_files: []