README.md in grape-jwt-authentication-2.0.4 vs README.md in grape-jwt-authentication-2.1.0
- old
+ new
@@ -6,11 +6,11 @@
[![Test Ratio](https://automate-api.hausgold.de/v1/coverage_reports/grape-jwt-authentication/ratio.svg)](https://knowledge.hausgold.de/coverage)
[![API docs](https://automate-api.hausgold.de/v1/coverage_reports/grape-jwt-authentication/documentation.svg)](https://www.rubydoc.info/gems/grape-jwt-authentication)
This gem is dedicated to easily integrate a JWT authentication to your
[Grape](https://github.com/ruby-grape/grape) API. The real authentication
-functionality must be provided by the user and this makes this gem highy
+functionality must be provided by the user and this makes this gem highly
flexible on the JWT verification level.
- [Installation](#installation)
- [Usage](#usage)
- [Grape API](#grape-api)
@@ -152,11 +152,11 @@
end
```
#### Failed authentication handling
-When the client sends a corrected formatted JSON Web Token with the Bearer
+When the client sends a correctly formatted JSON Web Token with the Bearer
authentication scheme within the `Authorization` header and your authenticator
fails for some reason (token claims, wrong audience, bad subject, expired
token, wrong cryptographic signing etc), this function is called to handle the
bad authentication. By default the Rack stack will be interrupted and a
response with the `401 Unauthorized` status code will be send to the client.
@@ -173,11 +173,11 @@
```
#### RSA public key helper
We provide a straightforward solution to deal with the provision of RSA public
-keys. Somethimes you want to distribute them by file to each machine and have
-a local access, and somethimes you provide an endpoint on your identity
+keys. Sometimes you want to distribute them by file to each machine and have
+a local access, and sometimes you provide an endpoint on your identity
provider to fetch the RSA public key via HTTP/HTTPS. The `RsaPublicKey` class
helps you to fulfill this task easily.
**Heads up!** You can skip this if you do not care about RSA verification or
have your own mechanism.