warden-jwt_auth 0.1.4 → 0.2.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA1:
-  metadata.gz: 4082fce67deba19f7d0b8b1adf411676b7b30c4f
-  data.tar.gz: 8b48402434ee8634dd7c06e359a4b4a9621df9b8
+  metadata.gz: 4a2ccfa065ae0684252e27bb7ec7e96ecf0d707d
+  data.tar.gz: c0a21d42ab4f41891f7a9cadd6edb273c2821dc0
 SHA512:
-  metadata.gz: 274bf114481da6a87e527e51a3721053c3f094432fc59b4761a031d4972cf9dcf2eedbb657ab2ea490065cd2d218f10326ab7ca897d65d08249352688afe1113
-  data.tar.gz: b0815f82470d23d7d06e6a3921196e907c2b6655bc1e9cc9303dbdf4e38c0d11e613cbccd1231ba4091cfecd1a7ab8d6820cc2f48282bd784b9cc46e3425d602
+  metadata.gz: 5ce27233145e6481666a408fc2d92066364a04601a127b3b92fc7100aec4318afb077c7909ed3b6a7b5cf66983d82b5111aa67b234c0e7baa32791f10c11dfdd
+  data.tar.gz: 9b423f5b1f7304f91bc88385fbf451cab180c2cb7673071dcf98d594dada87a68398d5876a639a2e38baccc2bc89e02a88c47aa0427d414a83ec01b5a4039d07

data/.rubocop.yml

@@ -11,3 +11,5 @@ RSpec/ContextWording:
 Metrics/BlockLength:
   Exclude:
     - "spec/**/*.rb"
+Metrics/LineLength:
+  Max: 100

data/CHANGELOG.md

@@ -4,6 +4,13 @@ All notable changes to this project will be documented in this file.
 The format is based on [Keep a Changelog](http://keepachangelog.com/) 
 and this project adheres to [Semantic Versioning](http://semver.org/).
 
+## [0.2.0] - 2017-11-23
+### Added
+- `fail!` with message
+
+### Fixed
+- Unauthorize when fetched user is nil
+
 ## [0.1.4] - 2017-11-21
 ### Fixed
 - Update `jwt` dependency

data/README.md

@@ -24,7 +24,7 @@ If what you need is a JWT authentication library for [devise](https://github.com
 ## Installation
 
 ```ruby
-gem 'warden-jwt_auth', '~> 0.1.4'
+gem 'warden-jwt_auth', '~> 0.2.0'
 ```
 
 And then execute:

data/lib/warden/jwt_auth/errors.rb

@@ -8,6 +8,10 @@ module Warden
       class RevokedToken < JWT::DecodeError
       end
 
+      # Error raised when the user decoded from a token is nil
+      class NilUser < JWT::DecodeError
+      end
+
       # Error raised when trying to decode a token for an scope that doesn't
       # match the one encoded in the payload
       class WrongScope < JWT::DecodeError

data/lib/warden/jwt_auth/strategy.rb

@@ -20,8 +20,8 @@ module Warden
       def authenticate!
         user = UserDecoder.new.call(token, scope)
         success!(user)
-      rescue JWT::DecodeError
-        fail!
+      rescue JWT::DecodeError => e
+        fail!(e.message)
       end
 
       private

data/lib/warden/jwt_auth/user_decoder.rb

@@ -24,13 +24,14 @@ module Warden
       # @return [Interfaces::User] an user, whatever it is
       # @raise [Errors::RevokedToken] when token has been revoked for the
       # encoded user
+      # @raise [Errors::NilUser] when decoded user is nil
       # @raise [Errors::WrongScope] when encoded scope does not match with scope
       # argument
       def call(token, scope)
         payload = TokenDecoder.new.call(token)
-        raise Errors::WrongScope unless helper.scope_matches?(payload, scope)
+        raise Errors::WrongScope, 'wrong scope' unless helper.scope_matches?(payload, scope)
         user = helper.find_user(payload)
-        raise Errors::RevokedToken if revoked?(payload, user, scope)
+        check_valid_user(payload, user, scope)
         user
       end
 
@@ -40,6 +41,11 @@ module Warden
         strategy = revocation_strategies[scope]
         strategy.jwt_revoked?(payload, user)
       end
+
+      def check_valid_user(payload, user, scope)
+        raise Errors::NilUser, 'nil user' unless user
+        raise Errors::RevokedToken, 'revoked token' if revoked?(payload, user, scope)
+      end
     end
   end
 end

data/lib/warden/jwt_auth/version.rb

@@ -2,6 +2,6 @@
 
 module Warden
   module JWTAuth
-    VERSION = '0.1.4'
+    VERSION = '0.2.0'
   end
 end

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: warden-jwt_auth
 version: !ruby/object:Gem::Version
-  version: 0.1.4
+  version: 0.2.0
 platform: ruby
 authors:
 - Marc Busqué
 autorequire: 
 bindir: exe
 cert_chain: []
-date: 2017-11-21 00:00:00.000000000 Z
+date: 2017-11-23 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: dry-configurable