audiences 1.5.1 → 1.5.3

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: cc9cb9024b5cab607920dd047795f19189182930353a83858b1b79f6bb22504a
-  data.tar.gz: 7e80900217731f751536eb792272c44645aaf6bc35458ed705c4c39d7e0f3fc1
+  metadata.gz: b2128c153d299dd4a2fa4f94d5830dcf883cbf0b1b9300ca0905d0b5816fcc53
+  data.tar.gz: feb6f90c5e3cf41e4331fce62cca0b8fb42cb94f1570283f4b760beec23a1a36
 SHA512:
-  metadata.gz: f922b463a9edcf52d3d91492c753415185cd2813f87eb03def29c1b59c9ca7d1a63ac456b274550b974e7b5b62f9451a8848e0e74984cfa865ae869ac69ad67c
-  data.tar.gz: 11edb03700fc296188521adb6f3a77587b8491ed1786fe20ff1f3ad9a3e95b2fb2d6f1a8f5ef557096fec2acfa2d286edacba37c53de293298ebc60c5d743754
+  metadata.gz: 7831f938d1841653b4829f8726bcdd491888a048e633fc98fe45a7978e9fb5cb789f5d420ace6b18d66d75782c6a87da4437b046c5a54a0c772b153f2f718eaf
+  data.tar.gz: 258c57d51a40fa73560ac5c2a01dedbc567923956fa5f237de8bd714c97f8cdeac95b9aab13fdf7bfb4c60a5b21d23e2fa681072318565c127ab93a9ee36a409

data/app/controllers/audiences/contexts_controller.rb

@@ -17,7 +17,7 @@ module Audiences
                                limit: params[:limit],
                                offset: params[:offset])
 
-      render json: search
+      render json: search, only: Audiences.exposed_user_attributes
     end
 
   private
@@ -33,11 +33,14 @@ module Audiences
     end
 
     def render_context(context)
-      render json: context.as_json(
-        only: %i[match_all extra_users],
+      json_setting = {
+        only: %i[match_all],
         methods: %i[count],
-        include: { criteria: { only: %i[id groups], methods: %i[count] } }
-      )
+        include: { criteria: { only: %i[id groups], methods: %i[count] } },
+      }
+      extra_users = context.extra_users.as_json(only: Audiences.exposed_user_attributes)
+
+      render json: { extra_users: extra_users, **context.as_json(json_setting) }
     end
 
     def context_params

data/app/controllers/audiences/scim_proxy_controller.rb

@@ -5,12 +5,22 @@ module Audiences
     def get
       resources = Audiences::Scim.resource(params[:scim_path].to_sym)
                                  .query(
-                                   filter: "displayName co \"#{params[:filter]}\"",
+                                   filter: filter_param,
                                    startIndex: params[:startIndex], count: params[:count],
-                                   attributes: "id,externalId,displayName,photos"
+                                   attributes: Audiences.exposed_user_attributes.join(",")
                                  )
 
       render json: resources, except: %w[schemas meta]
     end
+
+  private
+
+    def filter_param
+      if params[:query]
+        "displayName co \"#{params[:query]}\""
+      else
+        params[:filter]
+      end
+    end
   end
 end

data/app/models/audiences/external_user.rb

@@ -28,8 +28,8 @@ module Audiences
       where(user_id: attrs.pluck(:user_id))
     end
 
-    def as_json(*)
-      data.as_json
+    def as_json(...)
+      data.as_json(...)
     end
   end
 end

data/app/models/audiences/users_search.rb

@@ -11,9 +11,9 @@ module Audiences
       @offset = offset
     end
 
-    def as_json(*)
+    def as_json(...)
       {
-        users: users,
+        users: users.as_json(...),
         count: count,
       }
     end

data/docs/CHANGELOG.md

@@ -1,5 +1,13 @@
 # Unreleased
 
+# Version 1.5.3 (2024-12-19)
+
+- Rollback breaking change introduced by 1.5.1 [#479](https://github.com/powerhome/audiences/pull/479)
+
+# Version 1.5.2 (2024-12-19)
+
+- Filter sensitive user data out of user list response [#473](https://github.com/powerhome/audiences/pull/473)
+
 # Version 1.5.1 (2024-12-12)
 
 - Fix SCIM proxy attributes format [#462](https://github.com/powerhome/audiences/pull/462)

data/lib/audiences/configuration.rb

@@ -5,6 +5,13 @@ module Audiences
 
   # Configuration options
 
+  # These are the user attributes that will be exposed in the audiences endpoints.
+  # They're required by the UI to display the user information.
+  #
+  config_accessor :exposed_user_attributes do
+    %w[id externalId displayName photos]
+  end
+
   #
   # Authentication configuration. This defaults to true, meaning that the audiences
   # endpoints are open to the public.

data/lib/audiences/version.rb

@@ -1,5 +1,5 @@
 # frozen_string_literal: true
 
 module Audiences
-  VERSION = "1.5.1"
+  VERSION = "1.5.3"
 end

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: audiences
 version: !ruby/object:Gem::Version
-  version: 1.5.1
+  version: 1.5.3
 platform: ruby
 authors:
 - Carlos Palhares
 autorequire:
 bindir: bin
 cert_chain: []
-date: 2024-12-12 00:00:00.000000000 Z
+date: 2024-12-31 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: rails
@@ -93,7 +93,7 @@ required_rubygems_version: !ruby/object:Gem::Requirement
     - !ruby/object:Gem::Version
       version: '0'
 requirements: []
-rubygems_version: 3.5.22
+rubygems_version: 3.5.23
 signing_key:
 specification_version: 4
 summary: Audiences system