Merge pull request #140 from tuwukee/jwt-2.9-version-support

Add jwt 2.9 support

.github/workflows/main.yml

@@ -10,15 +10,11 @@ jobs:
     strategy:
       fail-fast: false
       matrix:
-        ruby: ['3.1', '3.2', '3.3']
-        rails: ['6.0', '6.1', '7.0']
-        exclude:
-          - ruby: '3.1'
-            rails: '6.0'
-          - ruby: '3.2'
-            rails: '6.0'
-          - ruby: '3.3'
-            rails: '6.0'
+        ruby: ['3.3']
+        rails: ['6.1', '7.0']
+        # exclude:
+        #  - ruby: '3.1'
+        #    rails: '6.0'
 
     name: Ruby ${{ matrix.ruby }} Rails ${{ matrix.rails }} run
 

CHANGELOG.md

@@ -1,3 +1,9 @@
+## 3.2.3 (Septemper 18, 2024)
+
+Support:
+
+ - add support for `jwt` to 2.9 version
+
 ## 3.2.2 (March 5, 2024)
 
 Support:

jwt_sessions.gemspec

@@ -7,7 +7,7 @@ require "jwt_sessions/version"
 Gem::Specification.new do |s|
   s.name        = "jwt_sessions"
   s.version     = JWTSessions::VERSION
-  s.date        = "2024-03-05"
+  s.date        = "2024-09-18"
   s.summary     = "JWT Sessions"
   s.description = "XSS/CSRF safe JWT auth designed for SPA"
   s.authors     = ["Julija Alieckaja"]
@@ -26,7 +26,7 @@ Gem::Specification.new do |s|
     "bug_tracker_uri" => "https://github.com/tuwukee/jwt_sessions/issues"
   }
 
-  s.add_dependency "jwt", ">= 2.8", "< 3"
+  s.add_dependency "jwt", ">= 2.9", "< 3"
 
   s.add_development_dependency "bundler", ">= 2"
   s.add_development_dependency "rake", "~> 13.1"

lib/jwt_sessions.rb

@@ -68,7 +68,8 @@ def jwt_options
   end
 
   def algorithm=(algo)
-    raise Errors::Malconfigured, "algorithm #{algo} is not supported" unless supported_algos.include?(algo)
+    raise Errors::Malconfigured, "algorithm #{algo} is not supported" unless JWT::JWA.resolve(algo)
+
     @algorithm = algo
   end
 
@@ -151,11 +152,4 @@ def header_by(token_type)
   def cookie_by(token_type)
     send("#{token_type}_cookie")
   end
-
-  private
-
-  def supported_algos
-    algos = JWT::JWA::ALGOS - [JWT::JWA::Unsupported]
-    algos.map { |algo| algo::SUPPORTED }.flatten + [NONE]
-  end
 end

lib/jwt_sessions/version.rb

@@ -1,5 +1,5 @@
 # frozen_string_literal: true
 
 module JWTSessions
-  VERSION = "3.2.2"
+  VERSION = "3.2.3"
 end

test/support/dummy_api/config/initializers/jwt_sessions.rb

@@ -1,3 +1,5 @@
-JWTSessions.algorithm = "HS256"
-JWTSessions.signing_key = Rails.application.secrets.secret_key_base
+# frozen_string_literal: true
+
+JWTSessions.algorithm = 'HS256'
+JWTSessions.signing_key = 'super-secret-key'
 JWTSessions.token_store = ENV['STORE_ADAPTER'] || 'redis'