zaikio-jwt_auth 2.6.0 → 2.7.1

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 6d5bebc720e60571c4c015cb4d3e54cd04cd50b797f85d3291950d244591782c
-  data.tar.gz: cd31b4e8189a012ea6d458e3b1d1afbaf031066fa303b77b339171e68ce98d47
+  metadata.gz: c6aca1e0e80a0c54812e20a453cc9dab23dcee7063a1930912cb80fc2c4f9954
+  data.tar.gz: 25ea09ed2b55152eaad0b128a6a77e45789726dfa40cb29c486fbca432cd158e
 SHA512:
-  metadata.gz: da5c78a82cc6550aed06d3815d16c51c0e982f7874bb2ac3cd82a6268ae7f368c0ec714a915ed2989b7028911f0bffb3729c7d815e2fd3ccfee5e9e49217e5aa
-  data.tar.gz: 911921aff82874c9ece8c94c288f9ce2fbef18759bf8f2ba4de317a1cc63d608eef04cb28e3c5ab8b73ff2d0bc81d7e86fb7fbc9c9dd6584e9a4690680d90e25
+  metadata.gz: 125f688a9367a99cb4c3435e2d847e4d72cf1f293a632371b264a196c055ff7a54faad82e47e92ca3ea186e401bb56704701f9baeb7d9228c3ab511c8c42bde9
+  data.tar.gz: 3e906f56c06db29e6170ccb166df86196c2dfaa1c798ebc01d58f5f1f575aaa90436ba63a78905fb4007cf92ea6ca74877fb01968c728bcbbcbe29c03ff2a207

data/lib/zaikio/jwt_auth/configuration.rb

@@ -11,7 +11,7 @@ module Zaikio
         production: "https://hub.zaikio.com"
       }.freeze
 
-      attr_accessor :app_name, :cache, :host
+      attr_accessor :app_name, :cache, :host, :test_mode
       attr_reader :environment
       attr_writer :logger, :revoked_token_ids, :keys
 
@@ -19,6 +19,7 @@ module Zaikio
         @environment = :sandbox
         @revoked_token_ids = nil
         @keys = nil
+        @test_mode = false
       end
 
       def logger

data/lib/zaikio/jwt_auth/directory_cache.rb

@@ -29,7 +29,14 @@ module Zaikio
         # @returns Hash (in the happy path)
         # @returns nil (if the cache is unavailable and the API is down)
         def fetch(directory_path, options = {})
-          cache = Zaikio::JWTAuth.configuration.cache.read("zaikio::jwt_auth::#{directory_path}")
+          cache = begin
+            Zaikio::JWTAuth.configuration.cache.read("zaikio::jwt_auth::#{directory_path}")
+          rescue StandardError => e
+            Zaikio::JWTAuth.configuration.logger
+                           .warn("Error reading DirectoryCache(#{directory_path}) from Cache, falling "\
+                                 "back to API: #{e.inspect}")
+            nil
+          end
 
           return reload_or_enqueue(directory_path) unless cache
 

data/lib/zaikio/jwt_auth/jwk.rb

@@ -10,7 +10,10 @@ module Zaikio
       class << self
         def loader
           lambda do |options|
+            return TestHelper.jwk_set if JWTAuth.configuration.test_mode
+
             reload_keys if options[:invalidate]
+
             {
               keys: keys.map do |key_data|
                 JWT::JWK.import(key_data.with_indifferent_access).export

data/lib/zaikio/jwt_auth/test_helper.rb

@@ -1,13 +1,36 @@
 module Zaikio
   module JWTAuth
     module TestHelper
+      def self.jwk
+        @jwk ||= JWT::JWK.new(OpenSSL::PKey::RSA.new(2048), { kid: "test-kid", use: "sig", alg: "RS256" })
+      end
+
+      def self.jwk_set
+        @jwk_set ||= JWT::JWK::Set.new(jwk).export
+      end
+
+
+
       def after_teardown
         Zaikio::JWTAuth.mocked_jwt_payload = nil
         super
       end
 
-      def mock_jwt(extra_payload)
-        Zaikio::JWTAuth.mocked_jwt_payload = {
+      def mock_jwt(params)
+        Zaikio::JWTAuth.mocked_jwt_payload = generate_token_payload(params)
+      end
+
+      def issue_mock_jwt_token(params)
+        JWT.encode(
+          generate_token_payload(params),
+          jwk.signing_key,
+          jwk[:alg],
+          kid: jwk[:kid]
+        )
+      end
+
+      def generate_token_payload(params)
+        {
           iss: "ZAI",
           sub: nil,
           aud: %w[test_app],
@@ -16,8 +39,10 @@ module Zaikio
           exp: 1.hour.from_now.to_i,
           jku: "http://hub.zaikio.test/api/v1/jwt_public_keys.json",
           scope: []
-        }.merge(extra_payload).stringify_keys
+        }.merge(params).stringify_keys
       end
+
+      def jwk = Zaikio::JWTAuth::TestHelper.jwk
     end
   end
 end

data/lib/zaikio/jwt_auth/version.rb

@@ -1,5 +1,5 @@
 module Zaikio
   module JWTAuth
-    VERSION = "2.6.0".freeze
+    VERSION = "2.7.1".freeze
   end
 end

data/lib/zaikio/jwt_auth.rb

@@ -75,6 +75,12 @@ module Zaikio
       TokenData.new(payload)
     end
 
+    def self.decode_jwt(token, **options)
+      options = options.reverse_merge(algorithms: ["RS256"], jwks: JWK.loader)
+      payload, = JWT.decode(token, nil, true, **options)
+      TokenData.new(payload)
+    end
+
     module ClassMethods
       def authorize_by_jwt_subject_type(type = :_not_given_)
         if type != :_not_given_

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: zaikio-jwt_auth
 version: !ruby/object:Gem::Version
-  version: 2.6.0
+  version: 2.7.1
 platform: ruby
 authors:
 - crispymtn
@@ -10,7 +10,7 @@ authors:
 autorequire: 
 bindir: bin
 cert_chain: []
-date: 2023-06-05 00:00:00.000000000 Z
+date: 2023-07-21 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: activejob
@@ -68,7 +68,7 @@ dependencies:
     - - ">="
       - !ruby/object:Gem::Version
         version: 2.2.1
-description: JWT-Based authentication and authorization with zaikio.
+description: JWT-Based authentication and authorization with Zaikio.
 email:
 - op@crispymtn.com
 - js@crispymtn.com
@@ -117,5 +117,5 @@ requirements: []
 rubygems_version: 3.3.11
 signing_key: 
 specification_version: 4
-summary: JWT-Based authentication and authorization with zaikio
+summary: JWT-Based authentication and authorization with Zaikio
 test_files: []