Class: TokenUtil

Inherits:
Object
  • Object
show all
Defined in:
app/validators/token_util.rb

Class Method Summary collapse

Class Method Details

.error_klass(error_detail_string) ⇒ Object 



22
23
24
25
26
27
 
# File 'app/validators/token_util.rb', line 22

def self.error_klass(error_detail_string)
  # Errors from the jwt gem (and other dependencies) are reraised with
  # this class so we can exclude them from Sentry without needing to know
  # all the classes used by our dependencies.
  Common::Exceptions::TokenValidationError.new(detail: error_detail_string)
end

.valid_audience?(token) ⇒ Boolean

Validates the token audience against the service caller supplied ‘aud` payload. If none, it validates against the configured default.

Returns:

  • (Boolean) 


13
14
15
16
17
18
19
20
 
# File 'app/validators/token_util.rb', line 13

def self.valid_audience?(token)
  if token.aud.nil?
    token.payload['aud'] == Settings.oidc.isolated_audience.default
  else
    # Temporarily accept the default audience or the API specified audience
    [Settings.oidc.isolated_audience.default, *token.aud].include?(token.payload['aud'])
  end
end

.validate_token(token) ⇒ Object 



4
5
6
7
8
9
 
# File 'app/validators/token_util.rb', line 4

def self.validate_token(token)
  raise error_klass('Invalid audience') unless TokenUtil.valid_audience?(token)

  # Only static and ssoi tokens utilize this validator at this time
  token.static? || token.ssoi_token?
end