auth0 4.4.0 → 5.1.2

data/spec/fixtures/vcr_cassettes/Auth0_Api_AuthenticationEndpoints/_login_with_resource_owner/should_fail_with_an_incorrect_password.yml

@@ -0,0 +1,54 @@
+---
+http_interactions:
+- request:
+    method: post
+    uri: https://auth0-sdk-tests.auth0.com/oauth/token
+    body:
+      encoding: UTF-8
+      string: '{"username":"rubytest-username-1@auth0.com","password":"23kejn2jk3en2jke2jk3be2jk3ber_invalid","client_id":"2cnWuug6zaFX1j0ge1P99jAUn0F4XSuI","client_secret":"CLIENT_SECRET","scope":"openid","grant_type":"password"}'
+    headers:
+      Accept:
+      - "*/*"
+      Accept-Encoding:
+      - gzip, deflate
+      User-Agent:
+      - Ruby/2.5.1
+      Content-Type:
+      - application/json
+      Auth0-Client:
+      - eyJuYW1lIjoicnVieS1hdXRoMCIsInZlcnNpb24iOiI0LjUuMCJ9
+      Authorization:
+      - Bearer API_TOKEN
+      Content-Length:
+      - '266'
+      Host:
+      - auth0-sdk-tests.auth0.com
+  response:
+    status:
+      code: 403
+      message: Forbidden
+    headers:
+      Date:
+      - Wed, 17 Oct 2018 17:17:54 GMT
+      Content-Type:
+      - application/json
+      Content-Length:
+      - '72'
+      Connection:
+      - keep-alive
+      X-Auth0-Requestid:
+      - 5c2a84511dca461182fa
+      X-Ratelimit-Limit:
+      - '100'
+      X-Ratelimit-Remaining:
+      - '93'
+      X-Ratelimit-Reset:
+      - '1539802348'
+      Cache-Control:
+      - private, no-store, no-cache, must-revalidate, post-check=0, pre-check=0
+    body:
+      encoding: UTF-8
+      string: '{"error":"invalid_grant","error_description":"Wrong email or password."}'
+    http_version: 
+  recorded_at: Wed, 17 Oct 2018 17:17:54 GMT
+recorded_with: VCR 4.0.0

data/spec/fixtures/vcr_cassettes/Auth0_Api_AuthenticationEndpoints/_login_with_resource_owner/should_fail_with_an_invalid_audience.yml

@@ -0,0 +1,55 @@
+---
+http_interactions:
+- request:
+    method: post
+    uri: https://auth0-sdk-tests.auth0.com/oauth/token
+    body:
+      encoding: UTF-8
+      string: '{"username":"rubytest-username-1@auth0.com","password":"23kejn2jk3en2jke2jk3be2jk3ber","client_id":"2cnWuug6zaFX1j0ge1P99jAUn0F4XSuI","client_secret":"CLIENT_SECRET","scope":"test:scope","audience":"https://brucke.club/invalid/api/v1/","grant_type":"password"}'
+    headers:
+      Accept:
+      - "*/*"
+      Accept-Encoding:
+      - gzip, deflate
+      User-Agent:
+      - Ruby/2.5.1
+      Content-Type:
+      - application/json
+      Auth0-Client:
+      - eyJuYW1lIjoicnVieS1hdXRoMCIsInZlcnNpb24iOiI0LjUuMCJ9
+      Authorization:
+      - Bearer API_TOKEN
+      Content-Length:
+      - '311'
+      Host:
+      - auth0-sdk-tests.auth0.com
+  response:
+    status:
+      code: 400
+      message: Bad Request
+    headers:
+      Date:
+      - Wed, 17 Oct 2018 17:17:59 GMT
+      Content-Type:
+      - application/json
+      Content-Length:
+      - '104'
+      Connection:
+      - keep-alive
+      X-Auth0-Requestid:
+      - 4e25e371ed76da7184c9
+      X-Ratelimit-Limit:
+      - '100'
+      X-Ratelimit-Remaining:
+      - '92'
+      X-Ratelimit-Reset:
+      - '1539803212'
+      Cache-Control:
+      - private, no-store, no-cache, must-revalidate, post-check=0, pre-check=0
+    body:
+      encoding: UTF-8
+      string: '{"error":"invalid_request","error_description":"invalid audience specified
+        for password grant exchange"}'
+    http_version: 
+  recorded_at: Wed, 17 Oct 2018 17:17:59 GMT
+recorded_with: VCR 4.0.0

data/spec/fixtures/vcr_cassettes/Auth0_Api_AuthenticationEndpoints/_login_with_resource_owner/should_login_successfully_with_a_custom_audience.yml

@@ -0,0 +1,117 @@
+---
+http_interactions:
+- request:
+    method: post
+    uri: https://auth0-sdk-tests.auth0.com/oauth/token
+    body:
+      encoding: UTF-8
+      string: '{"username":"rubytest-username-1@auth0.com","password":"23kejn2jk3en2jke2jk3be2jk3ber","client_id":"2cnWuug6zaFX1j0ge1P99jAUn0F4XSuI","client_secret":"CLIENT_SECRET","scope":"test:scope","audience":"https://brucke.club/custom/api/v1/","grant_type":"password"}'
+    headers:
+      Accept:
+      - "*/*"
+      Accept-Encoding:
+      - gzip, deflate
+      User-Agent:
+      - Ruby/2.5.1
+      Content-Type:
+      - application/json
+      Auth0-Client:
+      - eyJuYW1lIjoicnVieS1hdXRoMCIsInZlcnNpb24iOiI0LjUuMCJ9
+      Authorization:
+      - Bearer API_TOKEN
+      Content-Length:
+      - '310'
+      Host:
+      - auth0-sdk-tests.auth0.com
+  response:
+    status:
+      code: 200
+      message: OK
+    headers:
+      Date:
+      - Wed, 17 Oct 2018 17:39:07 GMT
+      Content-Type:
+      - application/json
+      Content-Length:
+      - '843'
+      Connection:
+      - keep-alive
+      X-Auth0-Requestid:
+      - 808b8c17f0dfd9e6e23a
+      X-Ratelimit-Limit:
+      - '100'
+      X-Ratelimit-Remaining:
+      - '90'
+      X-Ratelimit-Reset:
+      - '1539805804'
+      Cache-Control:
+      - private, no-store, no-cache, must-revalidate, post-check=0, pre-check=0
+      Pragma:
+      - no-cache
+      Strict-Transport-Security:
+      - max-age=15724800
+      X-Robots-Tag:
+      - noindex, nofollow, nosnippet, noarchive
+    body:
+      encoding: UTF-8
+      string: '{"access_token":"eyJ0eXAiOiJKV1QiLCJhbGciOiJSUzI1NiIsImtpZCI6Ik56QkZRa0pGT1VKQk1rRTBOekF6TWtWQk1EUkZSVU5DUlRaQ01rTXhOVFV5UVRCR1EwUXpNUSJ9.eyJpc3MiOiJodHRwczovL2F1dGgwLXNkay10ZXN0cy5hdXRoMC5jb20vIiwic3ViIjoiYXV0aDB8NWJjNzczYjkzMDUzM2Y0N2Q0NzY0YjljIiwiYXVkIjoiaHR0cHM6Ly9icnVja2UuY2x1Yi9jdXN0b20vYXBpL3YxLyIsImlhdCI6MTUzOTc5Nzk0NywiZXhwIjoxNTM5ODg0MzQ3LCJhenAiOiIyY25XdXVnNnphRlgxajBnZTFQOTlqQVVuMEY0WFN1SSIsInNjb3BlIjoidGVzdDpzY29wZSIsImd0eSI6InBhc3N3b3JkIn0.XtI-34k_YzEGhBK225OkoDRLY5YtKA9G8bNnQpexXHYv0lT9zHayCC8CKhyjMijVWv0pHLlnGOoJodz0ZkjjBvgSaIR44OwrQxyaGbPySBq8kxZSKneM6CyHR22OwXfPWMJwG1AdcORJAiEDzZs4-KA4Odoo-DBY9UrZbzWySqs0xs7M32CkC62m66lqKTAlkTbF5woRntL56seIe0CawQIKKyB1EdJXaNCTh6vGGAnibwY7zGJ2UVJSmb4mJhKawyakkti-Oc3EfUb_fEoWOuRnwAwjB7gOla1nsAsVQ9F2nfPArBAti2distZJCR9086vtU0SjlvXE6BCwsOBFGQ","expires_in":86400,"token_type":"Bearer"}'
+    http_version: 
+  recorded_at: Wed, 17 Oct 2018 17:39:07 GMT
+- request:
+    method: post
+    uri: https://auth0-sdk-tests.auth0.com/oauth/token
+    body:
+      encoding: UTF-8
+      string: '{"username":"rubytest-username-1@auth0.com","password":"23kejn2jk3en2jke2jk3be2jk3ber","client_id":"2cnWuug6zaFX1j0ge1P99jAUn0F4XSuI","client_secret":"CLIENT_SECRET","scope":"test:scope","audience":"https://brucke.club/custom/api/v1/","grant_type":"password"}'
+    headers:
+      Accept:
+      - "*/*"
+      Accept-Encoding:
+      - gzip, deflate
+      User-Agent:
+      - Ruby/2.5.1
+      Content-Type:
+      - application/json
+      Auth0-Client:
+      - eyJuYW1lIjoicnVieS1hdXRoMCIsInZlcnNpb24iOiI0LjUuMCJ9
+      Authorization:
+      - Bearer API_TOKEN
+      Content-Length:
+      - '310'
+      Host:
+      - auth0-sdk-tests.auth0.com
+  response:
+    status:
+      code: 200
+      message: OK
+    headers:
+      Date:
+      - Wed, 17 Oct 2018 17:39:07 GMT
+      Content-Type:
+      - application/json
+      Content-Length:
+      - '843'
+      Connection:
+      - keep-alive
+      X-Auth0-Requestid:
+      - 3639dd9ae800ba6e2c68
+      X-Ratelimit-Limit:
+      - '100'
+      X-Ratelimit-Remaining:
+      - '90'
+      X-Ratelimit-Reset:
+      - '1539805804'
+      Cache-Control:
+      - private, no-store, no-cache, must-revalidate, post-check=0, pre-check=0
+      Pragma:
+      - no-cache
+      Strict-Transport-Security:
+      - max-age=15724800
+      X-Robots-Tag:
+      - noindex, nofollow, nosnippet, noarchive
+    body:
+      encoding: UTF-8
+      string: '{"access_token":"eyJ0eXAiOiJKV1QiLCJhbGciOiJSUzI1NiIsImtpZCI6Ik56QkZRa0pGT1VKQk1rRTBOekF6TWtWQk1EUkZSVU5DUlRaQ01rTXhOVFV5UVRCR1EwUXpNUSJ9.eyJpc3MiOiJodHRwczovL2F1dGgwLXNkay10ZXN0cy5hdXRoMC5jb20vIiwic3ViIjoiYXV0aDB8NWJjNzczYjkzMDUzM2Y0N2Q0NzY0YjljIiwiYXVkIjoiaHR0cHM6Ly9icnVja2UuY2x1Yi9jdXN0b20vYXBpL3YxLyIsImlhdCI6MTUzOTc5Nzk0NywiZXhwIjoxNTM5ODg0MzQ3LCJhenAiOiIyY25XdXVnNnphRlgxajBnZTFQOTlqQVVuMEY0WFN1SSIsInNjb3BlIjoidGVzdDpzY29wZSIsImd0eSI6InBhc3N3b3JkIn0.XtI-34k_YzEGhBK225OkoDRLY5YtKA9G8bNnQpexXHYv0lT9zHayCC8CKhyjMijVWv0pHLlnGOoJodz0ZkjjBvgSaIR44OwrQxyaGbPySBq8kxZSKneM6CyHR22OwXfPWMJwG1AdcORJAiEDzZs4-KA4Odoo-DBY9UrZbzWySqs0xs7M32CkC62m66lqKTAlkTbF5woRntL56seIe0CawQIKKyB1EdJXaNCTh6vGGAnibwY7zGJ2UVJSmb4mJhKawyakkti-Oc3EfUb_fEoWOuRnwAwjB7gOla1nsAsVQ9F2nfPArBAti2distZJCR9086vtU0SjlvXE6BCwsOBFGQ","expires_in":86400,"token_type":"Bearer"}'
+    http_version: 
+  recorded_at: Wed, 17 Oct 2018 17:39:07 GMT
+recorded_with: VCR 4.0.0

data/spec/fixtures/vcr_cassettes/Auth0_Api_AuthenticationEndpoints/_login_with_resource_owner/should_login_successfully_with_a_default_scope.yml

@@ -0,0 +1,119 @@
+---
+http_interactions:
+- request:
+    method: post
+    uri: https://auth0-sdk-tests.auth0.com/oauth/token
+    body:
+      encoding: UTF-8
+      string: '{"username":"rubytest-username-1@auth0.com","password":"23kejn2jk3en2jke2jk3be2jk3ber","client_id":"2cnWuug6zaFX1j0ge1P99jAUn0F4XSuI","client_secret":"CLIENT_SECRET","scope":"openid","grant_type":"password"}'
+    headers:
+      Accept:
+      - "*/*"
+      Accept-Encoding:
+      - gzip, deflate
+      User-Agent:
+      - Ruby/2.5.1
+      Content-Type:
+      - application/json
+      Auth0-Client:
+      - eyJuYW1lIjoicnVieS1hdXRoMCIsInZlcnNpb24iOiI0LjUuMCJ9
+      Authorization:
+      - Bearer API_TOKEN
+      Content-Length:
+      - '258'
+      Host:
+      - auth0-sdk-tests.auth0.com
+  response:
+    status:
+      code: 200
+      message: OK
+    headers:
+      Date:
+      - Wed, 17 Oct 2018 17:39:06 GMT
+      Content-Type:
+      - application/json
+      Content-Length:
+      - '1239'
+      Connection:
+      - keep-alive
+      X-Auth0-Requestid:
+      - 031373fa2e586ea674d3
+      X-Ratelimit-Limit:
+      - '100'
+      X-Ratelimit-Remaining:
+      - '90'
+      X-Ratelimit-Reset:
+      - '1539805804'
+      Cache-Control:
+      - private, no-store, no-cache, must-revalidate, post-check=0, pre-check=0
+      Pragma:
+      - no-cache
+      Strict-Transport-Security:
+      - max-age=15724800
+      X-Robots-Tag:
+      - noindex, nofollow, nosnippet, noarchive
+    body:
+      encoding: UTF-8
+      string: '{"access_token":"dCndEvcBHl5aZwRIFzsMS5PMexVm8B7b","id_token":"eyJ0eXAiOiJKV1QiLCJhbGciOiJSUzI1NiIsImtpZCI6Ik56QkZRa0pGT1VKQk1rRTBOekF6TWtWQk1EUkZSVU5DUlRaQ01rTXhOVFV5UVRCR1EwUXpNUSJ9.eyJuaWNrbmFtZSI6InJ1Ynl0ZXN0LXVzZXJuYW1lLTEiLCJuYW1lIjoicnVieXRlc3QtdXNlcm5hbWUtMUBhdXRoMC5jb20iLCJwaWN0dXJlIjoiaHR0cHM6Ly9zLmdyYXZhdGFyLmNvbS9hdmF0YXIvNjk0NmFlZDk2MGZhMTRjY2I4NjY1N2VkNWM0ZTdmMDE_cz00ODAmcj1wZyZkPWh0dHBzJTNBJTJGJTJGY2RuLmF1dGgwLmNvbSUyRmF2YXRhcnMlMkZydS5wbmciLCJ1cGRhdGVkX2F0IjoiMjAxOC0xMC0xN1QxNzozOTowNi4wMDNaIiwiZW1haWwiOiJydWJ5dGVzdC11c2VybmFtZS0xQGF1dGgwLmNvbSIsImVtYWlsX3ZlcmlmaWVkIjpmYWxzZSwiaXNzIjoiaHR0cHM6Ly9hdXRoMC1zZGstdGVzdHMuYXV0aDAuY29tLyIsInN1YiI6ImF1dGgwfDViYzc3M2I5MzA1MzNmNDdkNDc2NGI5YyIsImF1ZCI6IjJjbld1dWc2emFGWDFqMGdlMVA5OWpBVW4wRjRYU3VJIiwiaWF0IjoxNTM5Nzk3OTQ2LCJleHAiOjE1Mzk4MzM5NDZ9.n3yNRcpsGS4BtfE842udTbjURdyaZe9PNizLOFt5uYgVlxXds4aWkkBWlLbw128I6vznzAtqVHt3xLPG-PWR10Ce2yZp3WvdL8_K-yNcRjZYZCidD0tQ1f1F86BqiUzmiyap9Xmz19CjdHTIDrm9UUIuaHRF_IaJW1XizYMYjQwc40w-ZYzZGSpUTGAdTc4o3G5PJVEg3wWzz0ESxcBnYCFDs-bK8A1DOWzcOgK_W0xVx50JK7QoASsSz3YEgDFlSgM2FFHyDEkaZOeSpvnrrFBYT1HoJ7PdMRn4E44MElDW2impGCe-AJIYPXVnvWOSsg-23CVp9bqy0Am0j9Zeaw","scope":"openid
+        profile email address phone","expires_in":86400,"token_type":"Bearer"}'
+    http_version: 
+  recorded_at: Wed, 17 Oct 2018 17:39:06 GMT
+- request:
+    method: post
+    uri: https://auth0-sdk-tests.auth0.com/oauth/token
+    body:
+      encoding: UTF-8
+      string: '{"username":"rubytest-username-1@auth0.com","password":"23kejn2jk3en2jke2jk3be2jk3ber","client_id":"2cnWuug6zaFX1j0ge1P99jAUn0F4XSuI","client_secret":"CLIENT_SECRET","scope":"openid","grant_type":"password"}'
+    headers:
+      Accept:
+      - "*/*"
+      Accept-Encoding:
+      - gzip, deflate
+      User-Agent:
+      - Ruby/2.5.1
+      Content-Type:
+      - application/json
+      Auth0-Client:
+      - eyJuYW1lIjoicnVieS1hdXRoMCIsInZlcnNpb24iOiI0LjUuMCJ9
+      Authorization:
+      - Bearer API_TOKEN
+      Content-Length:
+      - '258'
+      Host:
+      - auth0-sdk-tests.auth0.com
+  response:
+    status:
+      code: 200
+      message: OK
+    headers:
+      Date:
+      - Wed, 17 Oct 2018 17:39:06 GMT
+      Content-Type:
+      - application/json
+      Content-Length:
+      - '1239'
+      Connection:
+      - keep-alive
+      X-Auth0-Requestid:
+      - 5cec4399e09d986f0e8f
+      X-Ratelimit-Limit:
+      - '100'
+      X-Ratelimit-Remaining:
+      - '90'
+      X-Ratelimit-Reset:
+      - '1539805804'
+      Cache-Control:
+      - private, no-store, no-cache, must-revalidate, post-check=0, pre-check=0
+      Pragma:
+      - no-cache
+      Strict-Transport-Security:
+      - max-age=15724800
+      X-Robots-Tag:
+      - noindex, nofollow, nosnippet, noarchive
+    body:
+      encoding: UTF-8
+      string: '{"access_token":"ZJsovrcsn2NtbpdY6Qgvy79zQjrkE59d","id_token":"eyJ0eXAiOiJKV1QiLCJhbGciOiJSUzI1NiIsImtpZCI6Ik56QkZRa0pGT1VKQk1rRTBOekF6TWtWQk1EUkZSVU5DUlRaQ01rTXhOVFV5UVRCR1EwUXpNUSJ9.eyJuaWNrbmFtZSI6InJ1Ynl0ZXN0LXVzZXJuYW1lLTEiLCJuYW1lIjoicnVieXRlc3QtdXNlcm5hbWUtMUBhdXRoMC5jb20iLCJwaWN0dXJlIjoiaHR0cHM6Ly9zLmdyYXZhdGFyLmNvbS9hdmF0YXIvNjk0NmFlZDk2MGZhMTRjY2I4NjY1N2VkNWM0ZTdmMDE_cz00ODAmcj1wZyZkPWh0dHBzJTNBJTJGJTJGY2RuLmF1dGgwLmNvbSUyRmF2YXRhcnMlMkZydS5wbmciLCJ1cGRhdGVkX2F0IjoiMjAxOC0xMC0xN1QxNzozOTowNi40ODdaIiwiZW1haWwiOiJydWJ5dGVzdC11c2VybmFtZS0xQGF1dGgwLmNvbSIsImVtYWlsX3ZlcmlmaWVkIjpmYWxzZSwiaXNzIjoiaHR0cHM6Ly9hdXRoMC1zZGstdGVzdHMuYXV0aDAuY29tLyIsInN1YiI6ImF1dGgwfDViYzc3M2I5MzA1MzNmNDdkNDc2NGI5YyIsImF1ZCI6IjJjbld1dWc2emFGWDFqMGdlMVA5OWpBVW4wRjRYU3VJIiwiaWF0IjoxNTM5Nzk3OTQ2LCJleHAiOjE1Mzk4MzM5NDZ9.L9rz15foepN6PBq8tcs2ccV7Ct1vdPK2Pa09R0tQU2S8DsgV3KSuWrV3K3pKvztjKfXICSRdSwt240SVnVPHsyxTcrsfEV4dI3lJE-6TtimhctCBfhQEMMgfxMX0CE3N8wp_0gJjvUkPMi3TiWkBFxZlNJyfTft3IMhlbl0JyeZWssurjCBFNxgbVPGxOlLe3gmsLAb4zr44GUEyqkMixtJmAwWer3D9WckCXwKJzJc6rfWZVi_ZJ4PJSySL7uWvob-wPh6dUuV4LMKAEa0mMlhcSosyxf_e6lYvJkW0Trmj3G7R_c7F9yYROYrDsHdPea2wFAgPImyoGqs_adAWtw","scope":"openid
+        profile email address phone","expires_in":86400,"token_type":"Bearer"}'
+    http_version: 
+  recorded_at: Wed, 17 Oct 2018 17:39:06 GMT
+recorded_with: VCR 4.0.0

data/spec/fixtures/vcr_cassettes/Auth0_Api_AuthenticationEndpoints/_saml_metadata/should_retrieve_SAML_metadata.yml

@@ -0,0 +1,57 @@
+---
+http_interactions:
+- request:
+    method: get
+    uri: https://auth0-sdk-tests.auth0.com/samlp/metadata/2cnWuug6zaFX1j0ge1P99jAUn0F4XSuI
+    body:
+      encoding: US-ASCII
+      string: ''
+    headers:
+      Accept:
+      - "*/*"
+      Accept-Encoding:
+      - gzip, deflate
+      User-Agent:
+      - Ruby/2.5.1
+      Content-Type:
+      - application/json
+      Auth0-Client:
+      - eyJuYW1lIjoicnVieS1hdXRoMCIsInZlcnNpb24iOiI0LjUuMCJ9
+      Authorization:
+      - Bearer API_TOKEN
+      Host:
+      - auth0-sdk-tests.auth0.com
+  response:
+    status:
+      code: 200
+      message: OK
+    headers:
+      Date:
+      - Wed, 10 Oct 2018 23:19:59 GMT
+      Content-Type:
+      - application/xml; charset=utf-8
+      Transfer-Encoding:
+      - chunked
+      Connection:
+      - keep-alive
+      Vary:
+      - Accept-Encoding
+      X-Auth0-Requestid:
+      - 261a63e06dbf0b769d6f
+      Content-Disposition:
+      - attachment; filename="auth0-sdk-tests_auth0_com-metadata.xml"
+      Cache-Control:
+      - private, no-store, no-cache, must-revalidate, post-check=0, pre-check=0
+      Strict-Transport-Security:
+      - max-age=15724800
+      X-Robots-Tag:
+      - noindex, nofollow, nosnippet, noarchive
+      Content-Encoding:
+      - gzip
+    body:
+      encoding: ASCII-8BIT
+      string: !binary |-
+        H4sIAAAAAAAAA81X25KiSBB9368weh+NbgoVb9HTEcVNkXuDiryVgFCKoFQB6tcvavfsTkfMxF56dzbCBzxknspDZhySZymjmJ7FiAQFPtC8aEU3QBG/PJRFNkYlTcAjCXePNCKUPN3+PwX5/qF12qcZuUfliGAyztA+ImMajB2oa+POExjvI4pCRNHDyy+t1rMiWo5j/uGoQ5HTPMhTpzwc8oJKWbmPCkRxnv2Y9j3vRtsQq9EfBZQk+vJAcJzhLH6LuMco2SZ/rzqh9DBmmLqun+ruU17ETAcAwIAR0wSETfavX1ObZI8DI7HR8Tv0BgpRQfEGB4hGL7qiiKIrCHCzjGGt8DBWZmtuHR6BqIUGHegQTATnOHGUdVe0JV6o51AX7JOyhTEfGwse6u5kKbPhJK41z9ihMwt8zwDBmUtC7zXXBW677oB6mgSG7gYnfQtZ3bVrU1TA8opdpOZaAl+xLdzpjlIrcCUubFuUTukbD3vxJ4SGk8UlnOrlylsAJMJy1RnRRgPf1GPw8e6Y7PBkVAMe2pIMoSlAewiv94VYba4lWBz5dCQla6poTIzOKZtAA2nzmepMS/0Aqmp1sgcT0kU5L3QWm4Qh8ll6BcJUU9LUx/7aXUsgCg77/vSc28ap0xEjlG7kU5897b2B8Lrz4618KLrd/ZIlO67cdVHNYHa55JP1frFPEHMuA6dOZH7braDcI4rgZIvpRgq9EbsUqBae83IR9nZAMaxDTakVyqzIzPv89NKHldIJB2DpMMOOyiFWcq2SrXze7/kjqnH7bTXlVXaYzPaBHaSGFaB1ZHMDgsvjydJ2WtVOj5ZZkkvHDvCMr2t56liYcQ5r4QIEly6x56zOuyB2MBW4rjc7v5JpNlczv9MrTX/U9uBKL7aC4a4C0/I9aet6eLS0FRHakM+BUtsitK5zMX3VebgZSrwLm3tTRufBBLLzUIztJc+7fHIJdNq3/HUvsRYM4AeVms2yGcYiNG/59vCe30wbzO1atFczNfeVpAqMpo8ab0MxjpvbsjTwM1nAbSRbakmqjW/FXHtYeQtW1Ez9lO7EkBkAnjPmyOsfBkbptQGi82wF2/bI6nMSnJvnwq6XkeR0gAZLXNnDQdBj28ax55nqYLNTUy81TZ+llwoTuNUihSfaiFI3X1Vuu7c+sKxaZyPRlT2+PTgDuPcMwXEV3h2IJyZP0NBzluj1MExX5FKgwfKkFubsuJW4PpJcJ511qH48gwocha0iVYrV3g7VnB2p1oqd4WqeVqXanTE8Tww2Ro5mjgyzD6rMGZQod0KcFlx1mXdzZ6B7l8zqZheukvpuJpXtgsGJMMHCwpg7ar6eKqJQ9LmLFtZ6BRientJoR0xXlAHp0Da00wjP/Gz15Zn56BS/Gwvz0VmemTejerM25htvewOdxtnSSMvjvKROVFQ4iFo8zsIG/rFxru9BZDx1XevxNQpxEQX0oaXlwZvtXn2RNMb4Xd9nCNqnB6YTZMuyjPsXJHvsFsQRa41GWzjPgNzznFJh0lt1D8znlmyZjvtflGs0dSiinBd7RF++Vx77xN4QHD5ubpHjaI9wCsOwiAh5Zr4h+Qu8V9nf8h6iogmjzav5M1lpgTKCv0d675jTvEfN7H86ZB+m6x/X+m9N19c6IaUFXpc0al0f+NcthARJMznkqVk9SI4Ot3WkJteNhGOaHw7vOxkTpAjvCXObMnSfsocb071xP5aKmrOv6Hv3ywI/tOSi6X+Ynu/lSI96w9yC79R/YsNDhFyNLc8+WWOMqyi7HvepAidX1hvhTxX36bp+uiJSFp8uynnn/MmdumMbHBWf3rOWIv4dec/Mx0+pl1+emY9fci+/AbajGxzcDQAA
+    http_version: 
+  recorded_at: Wed, 10 Oct 2018 23:19:59 GMT
+recorded_with: VCR 4.0.0

data/spec/fixtures/vcr_cassettes/Auth0_Api_AuthenticationEndpoints/_userinfo/should_fail_as_not_authorized.yml

@@ -0,0 +1,55 @@
+---
+http_interactions:
+- request:
+    method: get
+    uri: https://auth0-sdk-tests.auth0.com/userinfo
+    body:
+      encoding: US-ASCII
+      string: ''
+    headers:
+      Accept:
+      - "*/*"
+      Accept-Encoding:
+      - gzip, deflate
+      User-Agent:
+      - Ruby/2.5.1
+      Content-Type:
+      - application/json
+      Auth0-Client:
+      - eyJuYW1lIjoicnVieS1hdXRoMCIsInZlcnNpb24iOiI0LjUuMCJ9
+      Authorization:
+      - Bearer invalid_token
+      Host:
+      - auth0-sdk-tests.auth0.com
+  response:
+    status:
+      code: 401
+      message: Unauthorized
+    headers:
+      Date:
+      - Wed, 10 Oct 2018 23:19:59 GMT
+      Content-Length:
+      - '12'
+      Connection:
+      - keep-alive
+      X-Auth0-Requestid:
+      - 19fb7bb180e9dfbd2b6e
+      Access-Control-Allow-Origin:
+      - "*"
+      Access-Control-Allow-Credentials:
+      - 'false'
+      Www-Authenticate:
+      - Bearer realm="Users", error="invalid_token", error_description="The access
+        token signature could not be validated. A common cause of this is requesting
+        multiple audiences for an access token signed with HS256, as that signature
+        scheme requires only a single recipient for its security. Please change your
+        API to employ RS256 if you wish to have multiple audiences for your access
+        tokens"
+      Cache-Control:
+      - private, no-store, no-cache, must-revalidate, post-check=0, pre-check=0
+    body:
+      encoding: UTF-8
+      string: Unauthorized
+    http_version: 
+  recorded_at: Wed, 10 Oct 2018 23:19:59 GMT
+recorded_with: VCR 4.0.0

data/spec/fixtures/vcr_cassettes/Auth0_Api_AuthenticationEndpoints/_userinfo/should_return_the_userinfo.yml

@@ -0,0 +1,118 @@
+---
+http_interactions:
+- request:
+    method: post
+    uri: https://auth0-sdk-tests.auth0.com/oauth/token
+    body:
+      encoding: UTF-8
+      string: '{"client_id":"2cnWuug6zaFX1j0ge1P99jAUn0F4XSuI","client_secret":"CLIENT_SECRET","username":"rubytest-username-1@auth0.com","password":"23kejn2jk3en2jke2jk3be2jk3ber","scope":"openid","grant_type":"password"}'
+    headers:
+      Accept:
+      - "*/*"
+      Accept-Encoding:
+      - gzip, deflate
+      User-Agent:
+      - Ruby/2.5.1
+      Content-Type:
+      - application/json
+      Auth0-Client:
+      - eyJuYW1lIjoicnVieS1hdXRoMCIsInZlcnNpb24iOiI0LjUuMCJ9
+      Authorization:
+      - Bearer API_TOKEN
+      Content-Length:
+      - '258'
+      Host:
+      - auth0-sdk-tests.auth0.com
+  response:
+    status:
+      code: 200
+      message: OK
+    headers:
+      Date:
+      - Wed, 10 Oct 2018 23:20:00 GMT
+      Content-Type:
+      - application/json
+      Content-Length:
+      - '1239'
+      Connection:
+      - keep-alive
+      X-Auth0-Requestid:
+      - f9b9289a6ea6335d05ab
+      X-Ratelimit-Limit:
+      - '100'
+      X-Ratelimit-Remaining:
+      - '98'
+      X-Ratelimit-Reset:
+      - '1539215300'
+      Cache-Control:
+      - private, no-store, no-cache, must-revalidate, post-check=0, pre-check=0
+      Pragma:
+      - no-cache
+      Strict-Transport-Security:
+      - max-age=15724800
+      X-Robots-Tag:
+      - noindex, nofollow, nosnippet, noarchive
+    body:
+      encoding: UTF-8
+      string: '{"access_token":"ACCESS_TOKEN","id_token":"eyJ0eXAiOiJKV1QiLCJhbGciOiJSUzI1NiIsImtpZCI6Ik56QkZRa0pGT1VKQk1rRTBOekF6TWtWQk1EUkZSVU5DUlRaQ01rTXhOVFV5UVRCR1EwUXpNUSJ9.eyJuaWNrbmFtZSI6InJ1Ynl0ZXN0LXVzZXJuYW1lLTEiLCJuYW1lIjoicnVieXRlc3QtdXNlcm5hbWUtMUBhdXRoMC5jb20iLCJwaWN0dXJlIjoiaHR0cHM6Ly9zLmdyYXZhdGFyLmNvbS9hdmF0YXIvNjk0NmFlZDk2MGZhMTRjY2I4NjY1N2VkNWM0ZTdmMDE_cz00ODAmcj1wZyZkPWh0dHBzJTNBJTJGJTJGY2RuLmF1dGgwLmNvbSUyRmF2YXRhcnMlMkZydS5wbmciLCJ1cGRhdGVkX2F0IjoiMjAxOC0xMC0xMFQyMzoxOTo1OS45OTFaIiwiZW1haWwiOiJydWJ5dGVzdC11c2VybmFtZS0xQGF1dGgwLmNvbSIsImVtYWlsX3ZlcmlmaWVkIjpmYWxzZSwiaXNzIjoiaHR0cHM6Ly9hdXRoMC1zZGstdGVzdHMuYXV0aDAuY29tLyIsInN1YiI6ImF1dGgwfDViYmU4OTFlOTAyNTNhMDIzNzdjMWMwYiIsImF1ZCI6IjJjbld1dWc2emFGWDFqMGdlMVA5OWpBVW4wRjRYU3VJIiwiaWF0IjoxNTM5MjEzNTk5LCJleHAiOjE1MzkyNDk1OTl9.FzU-3QvviQkUyYxVWl2O2y6dOyN82gtu2sKnV1kbhUUAhbOgsHF-OAHdrcD5072b8t0rDBE5Iato2jk51w-b3dlu90TLqHFQOY0m0HrCCvASRTWQHyhI7AGuoC-f3EIzbb8DdQiYh8GjE7oKLoKbDICeEK12JOAfiRt8e7piCdbwcFUQYyFaxV667EzWRSRO4EOQTD10JZSQ6oEphXt4D7GvMElg8-yQ8yCsGu-JKYUFgM89yR37QKv8jpBdEZA76GmSRZ8oOIBoVGBGYV_7ywqaknIjxl7Ol0f5WHE33Ll9VQCaR3IU3KCi8ezhW06CKgVLqmzNSJm5ZV9qMfGcxA","scope":"openid
+        profile email address phone","expires_in":86400,"token_type":"Bearer"}'
+    http_version: 
+  recorded_at: Wed, 10 Oct 2018 23:20:00 GMT
+- request:
+    method: get
+    uri: https://auth0-sdk-tests.auth0.com/userinfo
+    body:
+      encoding: US-ASCII
+      string: ''
+    headers:
+      Accept:
+      - "*/*"
+      Accept-Encoding:
+      - gzip, deflate
+      User-Agent:
+      - Ruby/2.5.1
+      Content-Type:
+      - application/json
+      Auth0-Client:
+      - eyJuYW1lIjoicnVieS1hdXRoMCIsInZlcnNpb24iOiI0LjUuMCJ9
+      Authorization:
+      - Bearer ACCESS_TOKEN
+      Host:
+      - auth0-sdk-tests.auth0.com
+  response:
+    status:
+      code: 200
+      message: OK
+    headers:
+      Date:
+      - Wed, 10 Oct 2018 23:20:00 GMT
+      Content-Type:
+      - application/json; charset=utf-8
+      Content-Length:
+      - '350'
+      Connection:
+      - keep-alive
+      X-Auth0-Requestid:
+      - c00c09543bbc331d3444
+      Access-Control-Allow-Origin:
+      - "*"
+      Access-Control-Allow-Credentials:
+      - 'false'
+      X-Ratelimit-Limit:
+      - '20'
+      X-Ratelimit-Remaining:
+      - '19'
+      X-Ratelimit-Reset:
+      - '1539213607'
+      Cache-Control:
+      - private, no-store, no-cache, must-revalidate, post-check=0, pre-check=0
+      Strict-Transport-Security:
+      - max-age=15724800
+      X-Robots-Tag:
+      - noindex, nofollow, nosnippet, noarchive
+    body:
+      encoding: UTF-8
+      string: '{"sub":"auth0|5bbe891e90253a02377c1c0b","nickname":"rubytest-username-1","name":"rubytest-username-1@auth0.com","picture":"https://s.gravatar.com/avatar/6946aed960fa14ccb86657ed5c4e7f01?s=480&r=pg&d=https%3A%2F%2Fcdn.auth0.com%2Favatars%2Fru.png","updated_at":"2018-10-10T23:19:59.991Z","email":"rubytest-username-1@auth0.com","email_verified":false}'
+    http_version: 
+  recorded_at: Wed, 10 Oct 2018 23:20:00 GMT
+recorded_with: VCR 4.0.0

data/spec/fixtures/vcr_cassettes/Auth0_Api_AuthenticationEndpoints/_wsfed_metadata/should_retrieve_WSFED_metadata.yml

@@ -0,0 +1,55 @@
+---
+http_interactions:
+- request:
+    method: get
+    uri: https://auth0-sdk-tests.auth0.com/wsfed/FederationMetadata/2007-06/FederationMetadata.xml
+    body:
+      encoding: US-ASCII
+      string: ''
+    headers:
+      Accept:
+      - "*/*"
+      Accept-Encoding:
+      - gzip, deflate
+      User-Agent:
+      - Ruby/2.5.1
+      Content-Type:
+      - application/json
+      Auth0-Client:
+      - eyJuYW1lIjoicnVieS1hdXRoMCIsInZlcnNpb24iOiI0LjUuMCJ9
+      Authorization:
+      - Bearer API_TOKEN
+      Host:
+      - auth0-sdk-tests.auth0.com
+  response:
+    status:
+      code: 200
+      message: OK
+    headers:
+      Date:
+      - Wed, 10 Oct 2018 23:19:59 GMT
+      Content-Type:
+      - application/xml; charset=utf-8
+      Transfer-Encoding:
+      - chunked
+      Connection:
+      - keep-alive
+      Vary:
+      - Accept-Encoding
+      X-Auth0-Requestid:
+      - 50d2231fa16d59aa1376
+      Cache-Control:
+      - private, no-store, no-cache, must-revalidate, post-check=0, pre-check=0
+      Strict-Transport-Security:
+      - max-age=15724800
+      X-Robots-Tag:
+      - noindex, nofollow, nosnippet, noarchive
+      Content-Encoding:
+      - gzip
+    body:
+      encoding: ASCII-8BIT
+      string: !binary |-
+        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
+    http_version: 
+  recorded_at: Wed, 10 Oct 2018 23:19:59 GMT
+recorded_with: VCR 4.0.0