Class: Clowk::JwtVerifier

Inherits:
Object
  • Object
show all
Defined in:
lib/clowk/jwt_verifier.rb

Constant Summary collapse

LEGACY_ALGORITHM = 
"HS256"
ASYMMETRIC_ALGORITHM = 
"RS256"
ALGORITHM =

Kept because it is part of the gem's public surface. Prefer LEGACY_ALGORITHM — this no longer describes what the verifier accepts.

LEGACY_ALGORITHM

Instance Method Summary collapse

Constructor Details

#initialize(secret_key: Clowk.config.secret_key, issuer: Clowk.config.issuer, audience: Clowk.config.audience, jwks_url: Clowk.config.jwks_url) ⇒ JwtVerifier

Returns a new instance of JwtVerifier.



14
15
16
17
18
19
20
 
# File 'lib/clowk/jwt_verifier.rb', line 14

def initialize(secret_key: Clowk.config.secret_key, issuer: Clowk.config.issuer,
  audience: Clowk.config.audience, jwks_url: Clowk.config.jwks_url)
  @secret_key = secret_key
  @issuer = issuer
  @audience = audience
  @jwks_url = jwks_url
end

Instance Method Details

#verify(token) ⇒ Object 



22
23
24
25
26
27
28
 
# File 'lib/clowk/jwt_verifier.rb', line 22

def verify(token)
  payload, = asymmetric?(token) ? verify_asymmetric(token) : verify_legacy(token)
  payload.deep_symbolize_keys
rescue JWT::DecodeError, JWT::VerificationError, JWT::ExpiredSignature,
  JWT::InvalidIssuerError, JWT::InvalidAudError => e
  raise InvalidTokenError, e.message
end