zaikio-jwt_auth 0.1.0 → 0.1.1

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 6de8bcc2c7ef22d052c626bc463789dec9dba4c6d4e977ee543973736994440b
-  data.tar.gz: c3c1b661b388fdef157831bccd203616913456f594762c4d0513967ebde8c468
+  metadata.gz: fc049533f5e0a82a2fa15f189514a997ae95b2a5cda50a8142d28d4776bacba3
+  data.tar.gz: 9e0cd0c5aee054152abc83dfa717711ae0f3b4aedd53a1eae321091c3c2b0a9f
 SHA512:
-  metadata.gz: 694d2a013c3a8e41dc8b03a11b0817fadd8e636cd80809a4d66c04285b2ecfe1e2dcaaf919f7735556a001d6d6feb93c4541a1f61bce16689e117fbabe6bf55f
-  data.tar.gz: 44c62f3c08102efb72e0ca8951562d02481bf5882742cd75ff4a27f722d80713f939c17cf05271cd870ef8b5fae3c00ad534b756aa981c32399e634a366b674d
+  metadata.gz: dd1cf4ac348ab2fba0d05a94e3accf3db35f3170043bf51953810ef3d19538e9be1ecd2a130f921f22bd1b4e5351b051b5c92f9c7f47b28b5bbb4cc4f04f036a
+  data.tar.gz: 9c0725178d406e5ce35c8af71b0c5f480739a65579b5c65d3fc8d0e79cba9714af14f64eb1e3e777f925f18d8314a8f61646dfac60d93eaf82d19c2cb5a9ac32

data/lib/zaikio/jwt_auth.rb

@@ -34,9 +34,7 @@ module Zaikio
 
     module InstanceMethods
       def authenticate_by_jwt
-        unless jwt_from_auth_header
-          render(status: :unauthorized, plain: "Please authenticate via Zaikio JWT") && return
-        end
+        render_error("no_jwt_passed", status: :unauthorized) && return unless jwt_from_auth_header
 
         token_data = TokenData.new(jwt_payload)
 
@@ -48,9 +46,9 @@ module Zaikio
 
         send(:after_jwt_auth, token_data) if respond_to?(:after_jwt_auth)
       rescue JWT::ExpiredSignature
-        render(status: :forbidden, plain: "JWT expired") && (return)
+        render_error("jwt_expired") && (return)
       rescue JWT::DecodeError
-        render(status: :forbidden, plain: "Invalid JWT") && (return)
+        render_error("invalid_jwt") && (return)
       end
 
       private
@@ -71,7 +69,7 @@ module Zaikio
           return
         end
 
-        render(status: :forbidden, plain: "Invalid scope")
+        render_error("unpermitted_scope")
       end
 
       def show_error_if_authorize_by_jwt_subject_type_fails(token_data)
@@ -80,13 +78,13 @@ module Zaikio
           return
         end
 
-        render(status: :forbidden, plain: "Unallowed subject type")
+        render_error("unpermitted_subject")
       end
 
       def show_error_if_token_is_blacklisted(token_data)
         return unless blacklisted_token_ids.include?(token_data.jti)
 
-        render(status: :forbidden, plain: "Invalid token")
+        render_error("invalid_jwt")
       end
 
       def blacklisted_token_ids
@@ -96,6 +94,10 @@ module Zaikio
 
         DirectoryCache.fetch("api/v1/blacklisted_token_ids.json", expires_after: 5.minutes)["blacklisted_token_ids"]
       end
+
+      def render_error(error, status: :forbidden)
+        render(status: status, json: { "errors" => [error] })
+      end
     end
   end
 end

data/lib/zaikio/jwt_auth/version.rb

@@ -1,5 +1,5 @@
 module Zaikio
   module JWTAuth
-    VERSION = "0.1.0".freeze
+    VERSION = "0.1.1".freeze
   end
 end

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: zaikio-jwt_auth
 version: !ruby/object:Gem::Version
-  version: 0.1.0
+  version: 0.1.1
 platform: ruby
 authors:
 - Crispy Mountain GmbH