wor-authentication 0.2.1 → 0.2.2

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA1:
-  metadata.gz: 543e92dae4b149469a024d4b4a9576816728687f
-  data.tar.gz: 49ec509fff4c4ce7556dca6a1cc86321be9f1e18
+  metadata.gz: da2c5de4a000be9110116463cde26134cacbb045
+  data.tar.gz: 10213d92f0bb546e0ffe9b6817225b11f38504bd
 SHA512:
-  metadata.gz: fcdc1a635bca880a7020523522887603ac27e05897fbd06f04338725bda76dde51c0b8b1b2b0ac1d1f695566bd488b0a19161d2e89e56540688165dee669f494
-  data.tar.gz: e28dfd0059431608c9c1c5cc78e68555ffee312175d49b2f9cf225eb9ed11e3568699d2dc5c78d59e97adb48b9d8657adf17d391c54d2ef11c4b81cc4087eb3a
+  metadata.gz: feabb5866d16333fae1266099e3fc1eb1adee1faf0e3801af563006a5d39d3f4539da6d500f01cc929fb25e6683465b5d73dbf30fbf7aed3308be562206d7307
+  data.tar.gz: 258fbf3a9e1a43e1cf75369eaf371ca1dd41046a922bcf0237718504d82385f1dc42cc7db5075ff50d61d4df7dcd8c6e8e899c9953055a33b535eee1930de317

data/README.md

@@ -63,13 +63,14 @@ class AuthenticationController < ApplicationController
 end
 ```
 > Note that our controller extends from ApplicationController.
+> It could also extend from your custom ApiController, for example.
 
-### <a name='custom-validations'> Entity tracking and custom validations
+### Entity tracking
 
-#### Validations before giving out a token? Override `authenticate_entity`:
+#### Override `authenticate_entity`. Add validations for your entity:
 
 ```ruby
-# application_controller.rb
+# authentication_controller.rb
 def authenticate_entity(params)
   entity = Entity.find_by(some_unique_id: params[:some_unique_id])
   return nil unless entity.present? && entity.valid_password?(params[:password])
@@ -78,7 +79,7 @@ end
 ```
 > Returning no value or false won't create the authentication token.
 
-#### Keeping track of entities? Override: `entity_payload`:
+#### Override `entity_payload`, `find_authenticable_entity` to have access to `current_entity`:
 
 ```ruby
 # application_controller.rb
@@ -93,6 +94,11 @@ def find_authenticable_entity(entity_payload_returned_object)
 end
 ```
 
+Overriding these methods will give you access to `current_entity` from any controller that extends `application_controller`.
+It will return the entity you used to authenticate.
+
+### Custom Validations
+
 #### Validations in every request? Override `entity_custom_validation_value` to get it verified as the following:
 
 ```ruby

data/lib/wor/authentication/controller.rb

@@ -22,8 +22,12 @@ module Wor
         Wor::Authentication.maximum_useful_days.days.from_now.to_i
       end
 
+      def current_entity
+        @current_entity ||= find_authenticable_entity(decoded_token)
+      end
+
       ##
-      # Helpers which may be overrided
+      # Helpers which may be overridden
       ##
 
       def token_renew_id

data/lib/wor/authentication/token_manager.rb

@@ -3,18 +3,20 @@ require 'jwt'
 module Wor
   module Authentication
     class TokenManager
+      ENCODING_ALGORITHM = 'HS256'.freeze
+
       def initialize(key)
         @key = key
       end
 
       def encode(payload)
-        JWT.encode(payload, @key)
+        JWT.encode(payload, @key, ENCODING_ALGORITHM)
       end
 
       def decode(token)
-        payload = JWT.decode(token, @key)[0]
+        payload = JWT.decode(token, @key, true, algorithm: ENCODING_ALGORITHM)[0]
         Wor::Authentication::DecodedToken.new(payload)
-      rescue
+      rescue StandardError
         raise Wor::Authentication::Exceptions::InvalidAuthorizationToken
       end
     end

data/lib/wor/authentication/version.rb

@@ -1,5 +1,5 @@
 module Wor
   module Authentication
-    VERSION = '0.2.1'.freeze
+    VERSION = '0.2.2'.freeze
   end
 end

data/wor-authentication.gemspec

@@ -23,7 +23,7 @@ Gem::Specification.new do |spec|
 
   spec.add_dependency 'railties', '>= 4.1.0', '< 5.2'
   spec.add_dependency 'devise', '>= 4.2.0'
-  spec.add_dependency 'jwt', '>= 1.5'
+  spec.add_dependency 'jwt', '~> 2.0'
   spec.add_dependency 'rails', '>= 4.0'
 
   spec.add_development_dependency 'byebug', '~> 9.0'

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: wor-authentication
 version: !ruby/object:Gem::Version
-  version: 0.2.1
+  version: 0.2.2
 platform: ruby
 authors:
 - alebian
@@ -9,7 +9,7 @@ authors:
 autorequire: 
 bindir: bin
 cert_chain: []
-date: 2017-08-01 00:00:00.000000000 Z
+date: 2017-09-21 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: railties
@@ -49,16 +49,16 @@ dependencies:
   name: jwt
   requirement: !ruby/object:Gem::Requirement
     requirements:
-    - - ">="
+    - - "~>"
       - !ruby/object:Gem::Version
-        version: '1.5'
+        version: '2.0'
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
-    - - ">="
+    - - "~>"
       - !ruby/object:Gem::Version
-        version: '1.5'
+        version: '2.0'
 - !ruby/object:Gem::Dependency
   name: rails
   requirement: !ruby/object:Gem::Requirement
@@ -274,7 +274,7 @@ required_rubygems_version: !ruby/object:Gem::Requirement
       version: '0'
 requirements: []
 rubyforge_project: 
-rubygems_version: 2.6.7
+rubygems_version: 2.6.13
 signing_key: 
 specification_version: 4
 summary: Easily add authentication to your application!.