CODEWITHSUNDEEP
ruby-on-railsjwtrest-client
Diane Kaplan
Diane Kaplan

Reputation: 1708

Issue making JWT token for use with Rails and rest-client gem

I'm new to Rails and I'm using rest-client to make outbound requests. It's easy to get successful results for a simple call like this: 

@obj  = RestClient.get 'https://jsonplaceholder.typicode.com/posts/1'

I need to hit a real endpoint and send a header with a jwt token (using ruby-jwt). According to the JWT readme, the content of the header should look like this: 

Authorization: Bearer <token>

So I have some code to use a secret to make that token (and I confirmed the resulting token is valid) and put it into a headers variable, but I'm unsure about the syntax on that headers line, and whether it's right to use strings: 

def build_headers (secret)
  jwt_token = make_signed_JWT_token(secret)
  headers = ("Authorization: Bearer "+ jwt_token) 
  return headers
end

Running it produces a 'headers' value like this: 

Authorization: Bearer eyJhbGciOiJIUzI1NiJ9.eyJleHAiOjE1MzIxMTc3MjF9.dP2k1oPwjna5HdrnFeSqiVfR0Fz6J1ZlupfXMsPtFKw

I include that in my rest-client invocation like so: 

@obj = RestClient.get(path, headers)

I'm no longer get a 401 Unauthorized error, but no celebrating yet; we appear to jump out of the code block at that line, with this exception: 

undefined method `delete_if' for #<String:0x007f9e4de410b8>

Looking in the rest-client code, there is exactly one block that uses delete_if, whose purpose is to find and extract/remove "params" key if the value is a Hash/ParamsArray: 

  headers.delete_if do |key, value|
    if key.to_s.downcase == 'params' &&
        (value.is_a?(Hash) || value.is_a?(RestClient::ParamsArray))
      if url_params
        raise ArgumentError.new("Multiple 'params' options passed")
      end
      url_params = value
      true
    else
      false
    end

So my error suggests that it found something in this forbidden format and is trying to delete it, but that delete method isn't defined to act on a String. My best hunch is that there's something the matter with that headers item I created, but reading around I'm not finding more clues. Has anyone seen this before, or know if my jwt/header should be different?

Upvotes: 0

Views: 661

Answers (1)

vaibhavatul47
vaibhavatul47

Reputation: 2885

You are passing a string where a hash is expected. Try this:

def build_headers (secret)
  jwt_token = make_signed_JWT_token(secret)
  headers = { authorization: "Bearer "+ jwt_token }
  return headers
end

Upvotes: 1

Related Questions