audiences 1.3.1 → 1.5.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 319c6d5a55900512c509f3e27ac9e03489734e0a618c31414cb7cd57981fc916
-  data.tar.gz: 2a117b18cd56209481ead18fafccb7ba9b57b673b5cdfa5c0f03152184704e25
+  metadata.gz: 0ad8b73e8fd9085a26bf9c1ce06d86baf2b689077aab8d33c6962ea800eb2f31
+  data.tar.gz: 2f27b364f3cadf67c4e17280e059319119c016c10ebe73a033d9cee93d812ef5
 SHA512:
-  metadata.gz: d08f9b199ae6ca61caeaff91606bb4a9cf21a171f17486a2919631a7b791ad37995a9645527199704d6ec8eb24ca4a1fba8543829dbd97f47c73174c9ba766f5
-  data.tar.gz: b1d6cc6305467c94bddb4abab023e451de05e2d9177f19c0a358da81429c6930c8381a6066afa6703f1826f4f6e0cb2bd5afed94a0cbba97c3816325b540e29b
+  metadata.gz: 198228dfcd7a392a1594fb0d7940fea900e21b67f061c80035faee586e16eab6b25b2fe715beaf8483964cce0a5280151c2fe494e1da4ee7be310458a0259030
+  data.tar.gz: 20096d2c12c819d26677d345d7560fda479f312807b0be9130c31396e7cb7d55d5d86304668b017604671ed23c4f9cc2837727e7239c4823d83c4e463f2d6e70

data/app/controllers/audiences/application_controller.rb

@@ -2,5 +2,14 @@
 
 module Audiences
   class ApplicationController < ActionController::API
+    before_action unless: :authenticate! do
+      render json: { error: "Unauthorized" }, status: :unauthorized
+    end
+
+  private
+
+    def authenticate!
+      instance_exec(request, &Audiences.config.authenticate)
+    end
   end
 end

data/app/controllers/audiences/scim_proxy_controller.rb

@@ -4,7 +4,11 @@ module Audiences
   class ScimProxyController < ApplicationController
     def get
       resources = Audiences::Scim.resource(params[:scim_path].to_sym)
-                                 .query(filter: params[:filter], startIndex: params[:startIndex], count: params[:count])
+                                 .query(
+                                   filter: "displayName co \"#{params[:filter]}\"",
+                                   startIndex: params[:startIndex], count: params[:count],
+                                   attributes: %w[id externalId displayName photos]
+                                 )
 
       render json: resources, except: %w[schemas meta]
     end

data/docs/CHANGELOG.md

@@ -1,5 +1,13 @@
 # Unreleased
 
+# Version 1.5.0 (2024-12-12)
+
+- SCIM proxy will only return data used by the UI [#451](https://github.com/powerhome/audiences/pull/451)
+
+# Version 1.4.0 (2024-11-01)
+
+- Add authentication hooks for Audiences controllers [#438](https://github.com/powerhome/audiences/pull/438)
+
 # Version 1.3.1 (2024-10-11)
 
 - Forward pagination parameters to SCIM on proxy [#397](https://github.com/powerhome/audiences/pull/397)

data/lib/audiences/configuration.rb

@@ -5,6 +5,34 @@ module Audiences
 
   # Configuration options
 
+  #
+  # Authentication configuration. This defaults to true, meaning that the audiences
+  # endpoints are open to the public.
+  #
+  # To authenticate requests, set this configuration to a lambda that will receive
+  # the request and return true if the request is authenticated.
+  #
+  # Raising an exception will also prevent the execution of the request, but the
+  # exception will not be caught and should be handled by the application middlewares.
+  #
+  # I.e.:
+  #
+  #   Audiences.configure do |config|
+  #     config.authentication = ->(*) { authenticate_request }
+  #   end
+  #
+  # I.e:
+  #
+  #   Audiences.configure do |config|
+  #     config.authentication = ->(request) do
+  #       request.env["warden"].authenticate!
+  #     end
+  #   end
+  #
+  config_accessor :authentication do
+    ->(*) { true }
+  end
+
   #
   # Identity model representing a SCIM User in the current application. I.e.: "User"
   #

data/lib/audiences/version.rb

@@ -1,5 +1,5 @@
 # frozen_string_literal: true
 
 module Audiences
-  VERSION = "1.3.1"
+  VERSION = "1.5.0"
 end

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: audiences
 version: !ruby/object:Gem::Version
-  version: 1.3.1
+  version: 1.5.0
 platform: ruby
 authors:
 - Carlos Palhares
 autorequire:
 bindir: bin
 cert_chain: []
-date: 2024-10-14 00:00:00.000000000 Z
+date: 2024-12-12 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: rails
@@ -93,7 +93,7 @@ required_rubygems_version: !ruby/object:Gem::Requirement
     - !ruby/object:Gem::Version
       version: '0'
 requirements: []
-rubygems_version: 3.5.16
+rubygems_version: 3.5.22
 signing_key:
 specification_version: 4
 summary: Audiences system