class Unrestful::JsonWebToken

Constants

LEEWAY

Public Class Methods

jwks_hash() click to toggle source
# File lib/unrestful/json_web_token.rb, line 21
def self.jwks_hash
  jwks_raw = Net::HTTP.get URI("#{Unrestful.configuration.issuer}.well-known/jwks.json")
  jwks_keys = Array(JSON.parse(jwks_raw)['keys'])
  Hash[
    jwks_keys.map do |k|
      [
        k['kid'],
        OpenSSL::X509::Certificate.new(Base64.decode64(k['x5c'].first)).public_key
      ]
    end
  ]
end
verify(token) click to toggle source
# File lib/unrestful/json_web_token.rb, line 9
def self.verify(token)
  JWT.decode(token, nil,
             true,
             algorithm: 'RS256',
             iss: Unrestful.configuration.issuer,
             verify_iss: true,
             aud: Unrestful.configuration.audience,
             verify_aud: true) do |header|
    jwks_hash[header['kid']]
  end
end