{"repo":"waiting-for-dev/warden-jwt_auth","free":true,"listed":false,"github":"https://github.com/waiting-for-dev/warden-jwt_auth","clone":"git clone https://github.com/waiting-for-dev/warden-jwt_auth.git","description":"JWT token authentication with warden","language":"Ruby","stars":119,"topics":["ruby-gem","jwt","warden","authentication"],"license":"MIT","category":"auth-billing-email","readme_excerpt":"Warden::JWTAuth warden-jwt auth is a warden extension which uses JWT tokens for user authentication. It follows secure by default principle. This gem is just a replacement for cookies when these can't be used. As cookies, a token expired with warden-jwt auth will mandatorily have an expiration time. If you need that your users never sign out, you will be better off with a solution using refresh tokens, like some implementation of OAuth2. You can read about which security concerns this library takes into account and about JWT generic secure usage in the following series of posts: - Stand Up for JWT Revocation - JWT Revocation Strategies - JWT Secure Usage - A secure JWT authentication implementation for Rack and Rails If what you need is a JWT authentication library for devise, better look at devise-jwt, which is just a thin layer on top of this gem. Installation And then execute: $ bundle Or install it yourself as: $ gem install warden-jwt auth Usage You can look at this gem's wiki to see some example applications. Please, add yours if you think it can help somebody. At its core, this library consists of: - A Warden strategy that authenticates a user if a valid JWT token is present in the request headers. - A rack middleware which adds a JWT token to the response headers in configured requests. - A rack middleware which revokes JWT tokens in configured requests. As you see, JWT revocation is supported. I wrote why I think JWT tokens revocation is useful and needed. Secret key","default_branch":null,"files":null,"tree":[],"storefront":"/r/waiting-for-dev","claimed":false,"request_supported":{"post":"https://gitbuyer.com/r/waiting-for-dev/warden-jwt_auth/request-supported","requests":0},"note":"indexed from public GitHub; nothing is for sale on this page. Clone it from GitHub. Paid listings live at /search."}