warden-jwt_auth 0.1.3 → 0.1.4

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA1:
-  metadata.gz: b8ed9c8f6cace7db893ccf8e11bd7833cf5262a2
-  data.tar.gz: 738ae98ee84748294cb7bb63ac484a89e4edaac8
+  metadata.gz: 4082fce67deba19f7d0b8b1adf411676b7b30c4f
+  data.tar.gz: 8b48402434ee8634dd7c06e359a4b4a9621df9b8
 SHA512:
-  metadata.gz: 0bf76be42a53095676c37beb08a73a060cddfe088fb5f71bc7485291485c20f6c04d156a9a60d6acaaffde833e2c87726a24216ebc4e50d269b577b231bf6241
-  data.tar.gz: ded8bc87a384b3ace04c38506c1ec71cc79a8b816c353f13ff4d904e90183b80a59c87c9aec85bbda2b08baf0c33ffda4f8d150e6d1f437d76f37e5a82cc8e81
+  metadata.gz: 274bf114481da6a87e527e51a3721053c3f094432fc59b4761a031d4972cf9dcf2eedbb657ab2ea490065cd2d218f10326ab7ca897d65d08249352688afe1113
+  data.tar.gz: b0815f82470d23d7d06e6a3921196e907c2b6655bc1e9cc9303dbdf4e38c0d11e613cbccd1231ba4091cfecd1a7ab8d6820cc2f48282bd784b9cc46e3425d602

data/.rubocop.yml

@@ -5,6 +5,9 @@ RSpec/NestedGroups:
   Max: 3
 RSpec/MessageSpies:
   EnforcedStyle: 'receive'
+RSpec/ContextWording:
+  Exclude:
+    - "spec/support/shared_contexts/*rb"
 Metrics/BlockLength:
   Exclude:
     - "spec/**/*.rb"

data/CHANGELOG.md

@@ -4,6 +4,10 @@ All notable changes to this project will be documented in this file.
 The format is based on [Keep a Changelog](http://keepachangelog.com/) 
 and this project adheres to [Semantic Versioning](http://semver.org/).
 
+## [0.1.4] - 2017-11-21
+### Fixed
+- Update `jwt` dependency
+
 ## [0.1.3] - 2017-04-15
 ### Fixed
 - Coerce `sub` to string to conform with JWT specification

data/README.md

@@ -7,10 +7,15 @@
 
 `warden-jwt_auth` is a [warden](https://github.com/hassox/warden) extension which uses [JWT](https://jwt.io/) tokens for user authentication. It follows [secure by default](https://en.wikipedia.org/wiki/Secure_by_default) principle.
 
+This gem is just a replacement for cookies when these can't be used. As
+cookies, a token expired with `warden-jwt_auth` will mandatorily have an
+expiration time. If you need that your users never sign out, you will be better
+off with a solution using refresh tokens, like some implementation of OAuth2.
+
 You can read about which security concerns this library takes into account and about JWT generic secure usage in the following series of posts:
 
 - [Stand Up for JWT Revocation](http://waiting-for-dev.github.io/blog/2017/01/23/stand_up_for_jwt_revocation/)
-- [JWT Recovation Strategies](http://waiting-for-dev.github.io/blog/2017/01/24/jwt_revocation_strategies/)
+- [JWT Revocation Strategies](http://waiting-for-dev.github.io/blog/2017/01/24/jwt_revocation_strategies/)
 - [JWT Secure Usage](http://waiting-for-dev.github.io/blog/2017/01/25/jwt_secure_usage/)
 - [A secure JWT authentication implementation for Rack and Rails](http://waiting-for-dev.github.io/blog/2017/01/26/a_secure_jwt_authentication_implementation_for_rack_and_rails/)
 
@@ -19,7 +24,7 @@ If what you need is a JWT authentication library for [devise](https://github.com
 ## Installation
 
 ```ruby
-gem 'warden-jwt_auth', '~> 0.1.0'
+gem 'warden-jwt_auth', '~> 0.1.4'
 ```
 
 And then execute:

data/lib/warden/jwt_auth/strategy.rb

@@ -6,10 +6,9 @@ module Warden
   module JWTAuth
     # Warden strategy to authenticate an user through a JWT token in the
     # `Authorization` request header
-    # :reek:PrimmaDonnaMethod
+    # :reek:PrimaDonnaMethod
     class Strategy < Warden::Strategies::Base
-      attr_reader :token
-
+      # :reek:NeelCheck
       def valid?
         !token.nil?
       end

data/lib/warden/jwt_auth/token_decoder.rb

@@ -8,6 +8,9 @@ module Warden
 
       # Decodes the payload from a JWT as a hash
       #
+      # @see JWT.decode for all the exceptions than can be raised when given
+      # token is invalid
+      #
       # @param token [String] a JWT
       # @return [Hash] payload decoded from the JWT
       def call(token)

data/lib/warden/jwt_auth/version.rb

@@ -2,6 +2,6 @@
 
 module Warden
   module JWTAuth
-    VERSION = '0.1.3'
+    VERSION = '0.1.4'
   end
 end

data/warden-jwt_auth.gemspec

@@ -21,7 +21,7 @@ Gem::Specification.new do |spec|
 
   spec.add_dependency 'dry-configurable', '~> 0.5'
   spec.add_dependency 'dry-auto_inject', '~> 0.4'
-  spec.add_dependency 'jwt', '~> 1.5'
+  spec.add_dependency 'jwt', '~> 2.1'
   spec.add_dependency 'warden', '~> 1.2'
 
   spec.add_development_dependency "bundler", "~> 1.12"

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: warden-jwt_auth
 version: !ruby/object:Gem::Version
-  version: 0.1.3
+  version: 0.1.4
 platform: ruby
 authors:
 - Marc Busqué
 autorequire: 
 bindir: exe
 cert_chain: []
-date: 2017-04-15 00:00:00.000000000 Z
+date: 2017-11-21 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: dry-configurable
@@ -44,14 +44,14 @@ dependencies:
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: '1.5'
+        version: '2.1'
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: '1.5'
+        version: '2.1'
 - !ruby/object:Gem::Dependency
   name: warden
   requirement: !ruby/object:Gem::Requirement