Skip to content

4.0.0

Choose a tag to compare

View all tags
@fschuindt fschuindt released this 29 Jul 03:14
· 5 commits to master since this release
4.0.0
35a3c98
This commit was signed with the committer’s verified signature.
fschuindt Fernando Schuindt
GPG key ID: 5EB4053D18A73533
Verified
Learn about vigilant mode.

Added

  • Support for verifying Firebase Session Cookies with FirebaseIdToken::Signature.verify(cookie, type: :session_cookie). Session Cookie certificates are downloaded from their own Google API URL and cached apart from the ID Token ones. PR #46.
  • Support for any ActiveSupport::Cache store through the new config.cache_store configuration, with lazy certificate download on cache miss, removing the need for Redis and scheduled certificate requests. PR #43, closes issue #6. The legacy config.redis configuration keeps working as before.
  • A warning on README.md that FirebaseIdToken.test! must never be called outside of a test suite, as the fixture private key is public in this repository.
  • [Dev] ostruct as a development dependency, as it's no longer a default gem in Ruby >= 3.5 and Pry requires it when running the specs.

Fixed

  • Signature.verify raised NoMethodError when a correctly signed token had no sub claim, even with raise_error: false. It now returns nil as documented.

Changed

  • Loosened the HTTParty dependency constraint to >= 0.21, < 1.0, allowing newer releases. Issue #44.
  • CI now also runs on pull requests.

Removed

  • The Code Climate coverage publishing step and badges, as the service and its GitHub Action are defunct. SimpleCov still reports coverage on every test run.
Assets 3
Loading