warden-auth0 0.5.1 → 1.0.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: d436b13b2f5bcd2e23c8c92a0ab77dff9a8f456f201c4dadeb519bd45eaaa3e0
-  data.tar.gz: 0fbfb06fed450decec2449ac708b3806cbf270eadb9ac0039f132911ad6e8497
+  metadata.gz: c0393f5a1b3774024bb3c8eecd94658c1b99e40b9305f0aca2d57419e739d366
+  data.tar.gz: 995ab21d0112fcb53ff6065f3d92b605e7436d0d3b7cfa94d6fbf409f7db8d30
 SHA512:
-  metadata.gz: 5b990bc54c906b61def45124b8ecc9c779d78db73d5bb5af0f3ceacfb47aa3bf34beee0bd6a25b266d001c5e6da4066c52cb4953fc5c562afde9a3efa905b6c3
-  data.tar.gz: 30b18151d82429d942c9cc27f685501beb2db713beb6dd5d24d874edd7c72f94bea30259623ad85c1c1b4d49a6d40e152a98f64754f2c4214ce083c4140efdfc
+  metadata.gz: a3c52ab6403319bc1b555b67670bc622c29946983f2d7cfdfc6f23b29e5530006caa043bc802aae282a1fba840c132d1dca7773db103588ed351b5ba5e8c10eb
+  data.tar.gz: 1cbe71324f0769f76ecbfbd7dc01c7658430e3eeab6d155e79bf26a15907c054858ebf8d733b4b56972a9c92e6edca3ee658ea15f7c4fca6fa70f7a9b416b80d

data/lib/warden/auth0/strategy.rb

@@ -1,12 +1,23 @@
 # frozen_string_literal: true
 
 require 'warden'
+require 'dry/configurable'
 
 module Warden
   module Auth0
     # Warden strategy to authenticate a user through a JWT token in the
-    # `Authorization` request header
+    # request header (see Warden::Auth0.config.token_header).
+    #
+    # Configure issuer, aud, algorithm, jwks_url on the strategy before adding to Warden.
     class Strategy < Warden::Strategies::Base
+      extend Dry::Configurable
+
+      setting :algorithm
+      setting :issuer
+      setting :aud
+      setting :jwks_url
+      setting :jwks, default: nil
+
       def valid?
         token_exists? && issuer_claim_valid? && aud_claim_valid?
       end
@@ -42,7 +53,8 @@ module Warden
       end
 
       def decoded_token
-        TokenDecoder.new.call(token)
+        cfg = self.class.config
+        TokenDecoder.new(algorithm: cfg.algorithm, jwks: jwks).call(token)
       end
 
       def issuer_claim_valid?
@@ -60,19 +72,24 @@ module Warden
       end
 
       def configured_aud
-        audience = Warden::Auth0.config.aud
+        audience = self.class.config.aud
         raise Errors::NoConfiguredAud if audience.nil?
 
         audience
       end
 
       def configured_issuer
-        configured_issuer = Warden::Auth0.config.issuer
+        configured_issuer = self.class.config.issuer
         raise Errors::NoConfiguredIssuer if configured_issuer.nil?
 
         configured_issuer
       end
 
+      def jwks
+        cfg = self.class.config
+        cfg.jwks || Warden::Auth0.fetch_jwks(cfg.jwks_url)
+      end
+
       def issuer_matches?(payload, issuer_config)
         token_issuer = payload['iss'].to_s
         return false unless token_issuer

data/lib/warden/auth0/token_decoder.rb

@@ -4,24 +4,22 @@ require 'jwt/error'
 
 module Warden
   module Auth0
-    # Decodes a JWT into a hash payload into a JWT token
+    # Decodes a JWT into a hash payload. Algorithm and JWKS are provided by the strategy config.
     class TokenDecoder
-      include Auth0::Import['algorithm', 'jwks']
+      attr_reader :algorithm, :jwks
+
+      # @param algorithm [String] algorithm (e.g. 'RS256')
+      # @param jwks [Object] JWKS used to verify (e.g. JWT::JWK::Set)
+      def initialize(algorithm:, jwks:)
+        @algorithm = algorithm
+        @jwks = jwks
+      end
 
       # Decodes the payload from a JWT as a hash
       #
-      # @see JWT.decode for all the exceptions than can be raised when given
-      # token is invalid
-      #
       # @param token [String] a JWT
       # @return [Hash] payload decoded from the JWT
       def call(token)
-        decode(token)
-      end
-
-      private
-
-      def decode(token)
         JWT.decode(token, nil, true, algorithms: algorithm, jwks: jwks)[0]
       end
     end

data/lib/warden/auth0/version.rb

@@ -2,6 +2,6 @@
 
 module Warden
   module Auth0
-    VERSION = '0.5.1'
+    VERSION = '1.0.0'
   end
 end

data/lib/warden/auth0.rb

@@ -1,7 +1,6 @@
 # frozen_string_literal: true
 
 require 'dry/configurable'
-require 'dry/auto_inject'
 require 'jwt'
 require 'warden'
 require 'faraday'
@@ -10,38 +9,17 @@ module Warden
   # Auth0 authentication plugin for warden.
   #
   # It consists of a strategy which tries to authenticate an user decoding a
-  # token present in the `Authentication` header (as `Bearer %token%`).
+  # token present in the request header (as `Bearer %token%`). The header name
+  # is configured via +token_header+.
   module Auth0
     extend Dry::Configurable
-    # Request header that will be used for receiving and returning the token.
-    setting :token_header, default: 'Authorization'
-
-    # The algorithm used to encode the token
-    setting :algorithm
-
-    # The issuer claims associated with the tokens
-    #
-    # Will be used to only apply the warden strategy when the issuer matches.
-    # This allows for multiple token issuers being used.
-    # @see https://datatracker.ietf.org/doc/html/rfc7519#section-4.1.1
-    setting :issuer, default: nil
-
-    # The aud claims associated with the tokens
-    #
-    # Will be used to only apply the warden strategy when the audience matches.
-    setting :aud, default: nil
 
-    # The url to fetch jwks from
-    setting :jwks_url
+    # Request header used for receiving and returning the token.
+    setting :token_header, default: 'Authorization'
 
     setting :verify_ssl, default: true
 
-    # Store the JWKS after fetching it
-    setting :jwks, constructor: ->(jwks) { jwks || fetch_jwks(config.jwks_url) }
-
-    Import = Dry::AutoInject(config)
-
-    # Method to fetch JWKS from the specified URL
+    # Fetches JWKS from the given URL. Used by the strategy when jwks_url is configured.
     def self.fetch_jwks(jwks_url)
       raise 'No url provided for fetching jwks' if jwks_url.nil?
 

data/warden-auth0.gemspec

@@ -21,7 +21,6 @@ Gem::Specification.new do |spec|
 
   spec.metadata['rubygems_mfa_required'] = 'true'
 
-  spec.add_dependency 'dry-auto_inject', '>= 0.8', '< 2'
   spec.add_dependency 'dry-configurable', '>= 0.13', '< 2'
   spec.add_dependency 'faraday', '2.9.0'
   spec.add_dependency 'jwt', '~> 2.1'

metadata

@@ -1,35 +1,15 @@
 --- !ruby/object:Gem::Specification
 name: warden-auth0
 version: !ruby/object:Gem::Version
-  version: 0.5.1
+  version: 1.0.0
 platform: ruby
 authors:
 - 1KOMMA5º
 autorequire:
 bindir: exe
 cert_chain: []
-date: 2025-07-16 00:00:00.000000000 Z
+date: 2026-03-12 00:00:00.000000000 Z
 dependencies:
-- !ruby/object:Gem::Dependency
-  name: dry-auto_inject
-  requirement: !ruby/object:Gem::Requirement
-    requirements:
-    - - ">="
-      - !ruby/object:Gem::Version
-        version: '0.8'
-    - - "<"
-      - !ruby/object:Gem::Version
-        version: '2'
-  type: :runtime
-  prerelease: false
-  version_requirements: !ruby/object:Gem::Requirement
-    requirements:
-    - - ">="
-      - !ruby/object:Gem::Version
-        version: '0.8'
-    - - "<"
-      - !ruby/object:Gem::Version
-        version: '2'
 - !ruby/object:Gem::Dependency
   name: dry-configurable
   requirement: !ruby/object:Gem::Requirement