Module: Verikloak

Defined in:: lib/verikloak/http.rb,
lib/verikloak/errors.rb,
lib/verikloak/version.rb,
lib/verikloak/discovery.rb,
lib/verikloak/jwks_cache.rb,
lib/verikloak/middleware.rb,
lib/verikloak/token_decoder.rb,
lib/verikloak/error_response.rb,
lib/verikloak/skip_path_matcher.rb

Defined Under Namespace

Modules: ErrorResponse, HTTP, MiddlewareAudienceResolution, MiddlewareConfiguration, MiddlewareDecoderCache, MiddlewareErrorMapping, MiddlewareTokenVerification, SkipPathMatcher Classes: Discovery, DiscoveryError, Error, JwksCache, JwksCacheError, Middleware, MiddlewareError, TokenDecoder, TokenDecoderError

Constant Summary collapse

VERSION = Defines the current version of the Verikloak gem.

'1.0.2'

PRIVATE_IP_RANGES =

This constant is part of a private API. You should avoid using this constant if possible, as it may be removed or be changed in the future.

Private IP ranges that must not be targets of redirects (SSRF protection). Includes RFC 1918, loopback, link-local, and IPv6 equivalents.

[
  IPAddr.new('10.0.0.0/8'),
  IPAddr.new('172.16.0.0/12'),
  IPAddr.new('192.168.0.0/16'),
  IPAddr.new('127.0.0.0/8'),
  IPAddr.new('169.254.0.0/16'),
  IPAddr.new('0.0.0.0/8'),
  IPAddr.new('::1/128'),
  IPAddr.new('fc00::/7'),
  IPAddr.new('fe80::/10')
].freeze