aptible-auth 1.2.4 → 1.2.6

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: e3882d6be5ba4b7d248e84a3e6eced0eba7cd6701108ccbc3bd609eddb4cb0bd
-  data.tar.gz: 733da04d17bb312b812988ed832426c72f784b6d97a7734f12f1f9cdd0872242
+  metadata.gz: 91eb4ee95916762970bae2c1ddc260b9f0e5ffccebc5ca6479875aad3ca66ca5
+  data.tar.gz: 45db7f42ff6ca821dee7fef025e28c22bdf87b8601d97d7d637646b976fd7f56
 SHA512:
-  metadata.gz: aa34d5cc0b4f99db2820f52d224b3092732dc93474bb85ec87798572662eefd4c8d4293cd21330a59d32eac560c15547799cce61f18011f0db78615172e8215f
-  data.tar.gz: 5bdbbe7bd497e426d9c7535354ed8aa0748e3d64309eb357aacff5d8ff96a9d814933f39ec3353127e8e47d943af7a51d3343e1854ecfa49f47ee3681780e458
+  metadata.gz: 3aa579e5df97ad873dbd566322f2e6d8d6dcd3fee8e06bfdcb7d54e5a8eedff793d667266e6be5cf35427c3510046164b5ec4e3a12cad86006f031bc66734dc6
+  data.tar.gz: f978a956c1037c31f920f33646ad247af9048038fef96fc858ffc928983451de5ccb3bdb707aade59d83ac10088a753f1258cb31ac6af788c966400879fccb0e

data/.github/workflows/ci.yml

@@ -0,0 +1,36 @@
+name: Tests
+
+on:
+  pull_request:
+    branches:
+      - master
+  push:
+    branches:
+      - master
+
+jobs:
+  test:
+    name: Run tests on Ruby ${{ matrix.RUBY_VERSION }}
+    runs-on: ubuntu-24.04
+    strategy:
+      fail-fast: false
+      matrix:
+        RUBY_VERSION: [2.6, 2.7]
+    steps:
+      - name: Check out code
+        uses: actions/checkout@v4
+
+      - name: Install Ruby
+        uses: ruby/setup-ruby@v1
+        with:
+          ruby-version: ${{ matrix.RUBY_VERSION }}
+          bundler: 1.17.3
+
+      - name: Bundle install
+        run: bundle install
+
+      - name: Rubocop
+        run: bundle exec rake rubocop
+
+      - name: Rspec
+        run: bundle exec rspec

data/SECURITY.md

@@ -0,0 +1,23 @@
+# Aptible Open Source Security Policies and Procedures
+
+This document outlines security procedures and general policies for the Aptible open source projects as found on https://github.com/aptible.
+
+  * [Reporting a Vulnerability](#reporting-a-vulnerability)
+  * [Responsible Disclosure Policy](#responsible-disclosure-policy)
+
+## Reporting a Vulnerability 
+
+The Aptible team and community take all security vulnerabilities
+seriously. Thank you for improving the security of our open source software. We appreciate your efforts and responsible disclosure and will make every effort to acknowledge your contributions.
+
+Report security vulnerabilities by emailing the Aptible security team at:
+    
+    security@aptible.com
+
+Security researchers can also privately report security vulnerabilities to repository maintainers using the GitHub "Report a Vulnerability" feature. [See how-to here](https://docs.github.com/en/code-security/security-advisories/guidance-on-reporting-and-writing/privately-reporting-a-security-vulnerability#privately-reporting-a-security-vulnerability).
+
+The Aptible team will acknowledge your email within 24 business hours and send a detailed response within 48 business hours indicating the next steps in handling your report. The Aptible security team will keep you informed of the progress and may ask for additional information or guidance.
+
+## Responsible Disclosure Policy
+
+Please see Aptible's Responsible Disclosure Policy here: https://www.aptible.com/legal/responsible-disclosure/

data/aptible-auth.gemspec

@@ -21,8 +21,10 @@ Gem::Specification.new do |spec|
   spec.require_paths = ['lib']
 
   spec.add_dependency 'aptible-resource', '~> 1.0'
+  spec.add_dependency 'concurrent-ruby', '1.3.4'
   spec.add_dependency 'gem_config'
-  spec.add_dependency 'oauth2', '1.4.7'
+  spec.add_dependency 'multipart-post', '2.1.1'
+  spec.add_dependency 'oauth2', '2.0.9'
 
   spec.add_development_dependency 'aptible-tasks', '>= 0.6.0'
   spec.add_development_dependency 'pry'

data/lib/aptible/auth/resource.rb

@@ -26,3 +26,4 @@ require 'aptible/auth/ssh_key'
 require 'aptible/auth/saml_configuration'
 require 'aptible/auth/whitelist_membership'
 require 'aptible/auth/reauthenticate_organization'
+require 'aptible/auth/ssh_key_pre_authorization'

data/lib/aptible/auth/ssh_key_pre_authorization.rb

@@ -0,0 +1,11 @@
+module Aptible
+  module Auth
+    class SshKeyPreAuthorization < Resource
+      belongs_to :ssh_key
+      belongs_to :owner
+
+      field :created_at, type: Time
+      field :updated_at, type: Time
+    end
+  end
+end

data/lib/aptible/auth/token.rb

@@ -106,6 +106,12 @@ module Aptible
           authenticate_impersonate(
             token_as_string(user_token), 'aptible:token', options
           )
+        elsif (href = options.delete(:ssh_key_pre_authorization_href))
+          authenticate_impersonate(
+            href,
+            'aptible:ssh_key_pre_authorization:href',
+            options
+          )
         else
           raise 'Unrecognized options'
         end

data/lib/aptible/auth/version.rb

@@ -1,5 +1,5 @@
 module Aptible
   module Auth
-    VERSION = '1.2.4'.freeze
+    VERSION = '1.2.6'.freeze
   end
 end

data/spec/aptible/auth/token_spec.rb

@@ -67,6 +67,16 @@ describe Aptible::Auth::Token do
         described_class.create(user_token: 'tok tok tok')
       end
 
+      it(
+        'should #authenticate_impersonate if passed ' \
+        'ssh_key_pre_authorization_href'
+      ) do
+        Aptible::Auth::Token.any_instance.should_receive(
+          :authenticate_impersonate
+        ).with('foo.href', 'aptible:ssh_key_pre_authorization:href', {})
+        described_class.create(ssh_key_pre_authorization_href: 'foo.href')
+      end
+
       it 'should not alter the hash it receives' do
         options = { email: 'some email' }
         options_before = options.dup

data/spec/oauth2/lib/token_exchange_spec.rb

@@ -4,14 +4,14 @@ require 'oauth2/strategy/token_exchange'
 RSpec.describe OAuth2::Strategy::TokenExchange do
   let(:client) do
     cli = OAuth2::Client.new('abc', 'def', :site => 'http://api.example.com')
-    cli.connection.build do |b|
+    cli.connection.builder.build do |b|
       b.adapter :test do |stub|
         stub.post('/oauth/token') do |env|
           case @mode
           when 'formencoded'
             [200, {'Content-Type' => 'application/x-www-form-urlencoded'}, 'expires_in=600&access_token=salmon&refresh_token=trout']
           when 'json'
-            [200, {'Content-Type' => 'application/json'}, '{"expires_in":600,"access_token":"salmon","refresh_token":"trout"}']
+            [200, {'Content-Type' => 'application/json'}, {"expires_in" => 600, "access_token" => "salmon", "refresh_token" => "trout"}]
           end
         end
       end

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: aptible-auth
 version: !ruby/object:Gem::Version
-  version: 1.2.4
+  version: 1.2.6
 platform: ruby
 authors:
 - Frank Macreery
 autorequire:
 bindir: bin
 cert_chain: []
-date: 2022-02-18 00:00:00.000000000 Z
+date: 2025-04-23 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: aptible-resource
@@ -24,6 +24,20 @@ dependencies:
     - - "~>"
       - !ruby/object:Gem::Version
         version: '1.0'
+- !ruby/object:Gem::Dependency
+  name: concurrent-ruby
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - '='
+      - !ruby/object:Gem::Version
+        version: 1.3.4
+  type: :runtime
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - '='
+      - !ruby/object:Gem::Version
+        version: 1.3.4
 - !ruby/object:Gem::Dependency
   name: gem_config
   requirement: !ruby/object:Gem::Requirement
@@ -38,20 +52,34 @@ dependencies:
     - - ">="
       - !ruby/object:Gem::Version
         version: '0'
+- !ruby/object:Gem::Dependency
+  name: multipart-post
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - '='
+      - !ruby/object:Gem::Version
+        version: 2.1.1
+  type: :runtime
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - '='
+      - !ruby/object:Gem::Version
+        version: 2.1.1
 - !ruby/object:Gem::Dependency
   name: oauth2
   requirement: !ruby/object:Gem::Requirement
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 1.4.7
+        version: 2.0.9
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 1.4.7
+        version: 2.0.9
 - !ruby/object:Gem::Dependency
   name: aptible-tasks
   requirement: !ruby/object:Gem::Requirement
@@ -144,14 +172,15 @@ extensions: []
 extra_rdoc_files: []
 files:
 - ".github/CODEOWNERS"
+- ".github/workflows/ci.yml"
 - ".gitignore"
 - ".rspec"
-- ".travis.yml"
 - Gemfile
 - LICENSE.md
 - Procfile
 - README.md
 - Rakefile
+- SECURITY.md
 - aptible-auth.gemspec
 - lib/aptible/auth.rb
 - lib/aptible/auth/agent.rb
@@ -165,6 +194,7 @@ files:
 - lib/aptible/auth/saml_configuration.rb
 - lib/aptible/auth/session.rb
 - lib/aptible/auth/ssh_key.rb
+- lib/aptible/auth/ssh_key_pre_authorization.rb
 - lib/aptible/auth/token.rb
 - lib/aptible/auth/user.rb
 - lib/aptible/auth/version.rb
@@ -199,7 +229,7 @@ required_rubygems_version: !ruby/object:Gem::Requirement
     - !ruby/object:Gem::Version
       version: '0'
 requirements: []
-rubygems_version: 3.0.3
+rubygems_version: 3.3.27
 signing_key:
 specification_version: 4
 summary: Ruby client for auth.aptible.com

data/.travis.yml

@@ -1,7 +0,0 @@
-sudo: false
-language: ruby
-rvm:
-  - "2.2"
-  - "2.3"
-  - "2.5"
-  - "2.6"