Skip to content

Replace json-jwt with jwt - #25

Open
dmke wants to merge 5 commits into
ifad:masterfrom
dmke:reduce-dependencies
Open

dmke wants to merge 5 commits into
ifad:masterfrom
dmke:reduce-dependencies

Conversation

@dmke

@dmke dmke commented Apr 30, 2026 •

Copy link
Copy Markdown

This is an effort to reduce the number of gems consumers need to install in their application. Since omniauth-keycloak depends on omniauth-oauth2, and the latter includes the jwt gem, we don't need to depend on json-jwt.

This also includes integration specs to make sure the JWT is properly decoded.

I have added a few additional commits, feel free to pick and choose:

  • Run CI on push to any branch allows me to see GHA results on my fork (cf. https://github.com/dmke/omniauth-keycloak/actions)
  • Rubocop: reduce offenses mostly refactors #setup_phase and moves fetching of OIDC config and JWKS certificates into their own methods
  • Rubocop: regenerate TODOs was just the result of running rubocop --auto-gen-config --no-offense-counts --no-auto-gen-timestamp
  • GHA: Bump actions/checkout to v6 amends Improve CI #24 :) (Dropped after rebased onto master).

@dmke
dmke force-pushed the reduce-dependencies branch from 501fbd1 to db20b30 Compare April 30, 2026 22:34
@dmke
dmke force-pushed the reduce-dependencies branch 4 times, most recently from 365b031 to 6a57496 Compare April 30, 2026 23:35
dmke added 4 commits August 3, 2026 18:27
This is an effort to reduce the number of gems consumers need to
install in their application. Since `omniauth-keycloak` depends on
`omniauth-oauth2`, and the latter includes the `jwt` gem, we don't
need to depend on `json-jwt`.
Extracts fetching of configuration and certificates into seperate methods.
@dmke
dmke force-pushed the reduce-dependencies branch from 10ea2f9 to 79168ac Compare August 3, 2026 16:28
Using `OmniAuth.config.test_mode` masks a lot of code that is otherwise
not tested. This adds a full-stack integration spec (using Rack::Test as
mock Keycloak server).
@dmke
dmke force-pushed the reduce-dependencies branch from 79168ac to e176680 Compare August 3, 2026 16:32
@dmke

dmke commented Sep 6, 2026

Copy link
Copy Markdown
Author

Pinging @tagliala for review?

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant