auth0 5.10.0 → 5.11.0

data/spec/lib/auth0/mixins/initializer_spec.rb

@@ -13,6 +13,15 @@ describe Auth0::Mixins::Initializer do
   let(:params) { { namespace: 'samples.auth0.com' } }
   let(:instance) { DummyClassForProxy.send(:include, described_class).new(params) }
   let(:time_now) { Time.now }
+  
+  let(:client_assertion_signing_key_pair) do
+    rsa_private = OpenSSL::PKey::RSA.generate 2048
+
+    { 
+      public_key: rsa_private.public_key,
+      private_key: rsa_private
+    }
+  end
 
   context 'api v2' do
     it 'sets retry_count when passed' do
@@ -45,31 +54,76 @@ describe Auth0::Mixins::Initializer do
       expect(instance.instance_variable_get('@token')).to eq('123')
     end
 
-    it 'fetches a token if none was given' do
-      params[:client_id] = client_id = 'test_client_id'
-      params[:client_secret] = client_secret = 'test_client_secret'
-      params[:api_identifier] = api_identifier = 'test'
-
-      payload = {
-        grant_type: 'client_credentials',
-        client_id: client_id,
-        client_secret: client_secret,
-        audience: api_identifier
-      }  
-
-      expect(RestClient::Request).to receive(:execute).with(hash_including(
-        method: :post,
-        url: 'https://samples.auth0.com/oauth/token',
-        payload: payload.to_json
-      ))
-      .and_return(StubResponse.new({ 
-        "access_token" => "test", 
-        "expires_in" => 86400}, 
-        true, 
-        200))
-
-      expect(instance.instance_variable_get('@token')).to eq('test')
-      expect(instance.instance_variable_get('@token_expires_at')).to eq(time_now.to_i + 86400)
+    context 'with a client secret' do
+      it 'fetches a token if none was given' do
+        params[:client_id] = client_id = 'test_client_id'
+        params[:client_secret] = client_secret = 'test_client_secret'
+        params[:api_identifier] = api_identifier = 'test'
+
+        payload = {
+          grant_type: 'client_credentials',
+          client_id: client_id,
+          client_secret: client_secret,
+          audience: api_identifier
+        }  
+
+        expect(RestClient::Request).to receive(:execute) do |arg|
+          expect(arg).to(match(
+            include(
+              method: :post,
+              url: 'https://samples.auth0.com/oauth/token'
+            )
+          ))
+
+          expect(JSON.parse(arg[:payload], { symbolize_names: true })).to eq(payload)
+          
+          StubResponse.new({ 
+          "access_token" => "test", 
+          "expires_in" => 86400}, 
+          true, 
+          200)
+        end
+
+        expect(instance.instance_variable_get('@token')).to eq('test')
+        expect(instance.instance_variable_get('@token_expires_at')).to eq(time_now.to_i + 86400)
+      end
+    end
+
+    context 'with a client assertion signing key' do
+      it 'fetches a token if none was given' do
+        private_key = client_assertion_signing_key_pair[:private_key]
+
+        params[:client_id] = client_id = 'test_client_id'
+        params[:api_identifier] = api_identifier = 'test'
+        params[:client_assertion_signing_key] = private_key
+
+        expect(RestClient::Request).to receive(:execute) do |arg|
+          expect(arg).to(match(
+            include(
+              method: :post,
+              url: 'https://samples.auth0.com/oauth/token'
+            )
+          ))
+
+          payload = JSON.parse(arg[:payload], { symbolize_names: true })
+
+          expect(payload[:grant_type]).to eq 'client_credentials'
+          expect(payload[:client_id]).to eq client_id
+          expect(payload[:audience]).to eq api_identifier
+          expect(payload[:client_secret]).to be_nil
+          expect(payload[:client_assertion]).not_to be_nil
+          expect(payload[:client_assertion_type]).to eq Auth0::ClientAssertion::CLIENT_ASSERTION_TYPE
+          
+          StubResponse.new({ 
+          "access_token" => "test", 
+          "expires_in" => 86400}, 
+          true, 
+          200)
+        end
+
+        expect(instance.instance_variable_get('@token')).to eq('test')
+        expect(instance.instance_variable_get('@token_expires_at')).to eq(time_now.to_i + 86400)
+      end
     end
 
     it "doesn't get a new token if one was supplied using 'token'" do

data/spec/lib/auth0/mixins/token_management_spec.rb

@@ -34,16 +34,21 @@ describe Auth0::Mixins::TokenManagement do
 
   context 'get_token' do
     it 'renews the token if there is no token set' do
-      expect(RestClient::Request).to receive(:execute).with(hash_including(
-        method: :post,
-        url: 'https://samples.auth0.com/oauth/token',
-        payload: payload.to_json
-      ))
-      .and_return(StubResponse.new({ 
-        "access_token" => "test", 
-        "expires_in" => 86400}, 
-        true, 
-        200))
+      expect(RestClient::Request).to receive(:execute) do |arg|
+        expect(arg).to(match(
+          include(
+            method: :post,
+            url: 'https://samples.auth0.com/oauth/token'
+        )))
+
+        expect(JSON.parse(arg[:payload], { symbolize_names: true })).to eq(payload)
+      
+        StubResponse.new({ 
+          "access_token" => "test", 
+          "expires_in" => 86400}, 
+          true, 
+          200)
+      end
 
       instance.send(:get_token)
 
@@ -70,16 +75,21 @@ describe Auth0::Mixins::TokenManagement do
       params[:token] = 'test-token'
       params[:token_expires_at] = time_now.to_i + 5
 
-      expect(RestClient::Request).to receive(:execute).with(hash_including(
-        method: :post,
-        url: 'https://samples.auth0.com/oauth/token',
-        payload: payload.to_json
-      ))
-      .and_return(StubResponse.new({ 
-        "access_token" => "renewed_token", 
-        "expires_in" => 86400}, 
-        true, 
-        200))
+      expect(RestClient::Request).to receive(:execute) do |arg|
+        expect(arg).to(match(
+          include(
+            method: :post,
+            url: 'https://samples.auth0.com/oauth/token'
+        )))
+
+        expect(JSON.parse(arg[:payload], { symbolize_names: true })).to eq(payload)
+      
+        StubResponse.new({ 
+          "access_token" => "renewed_token", 
+          "expires_in" => 86400}, 
+          true, 
+          200)
+      end
 
       instance.send(:get_token)
 
@@ -91,16 +101,21 @@ describe Auth0::Mixins::TokenManagement do
       params[:token] = 'test-token'
       params[:token_expires_at] = time_now.to_i - 10
 
-      expect(RestClient::Request).to receive(:execute).with(hash_including(
-        method: :post,
-        url: 'https://samples.auth0.com/oauth/token',
-        payload: payload.to_json
-      ))
-      .and_return(StubResponse.new({ 
-        "access_token" => "renewed_token", 
-        "expires_in" => 86400}, 
-        true, 
-        200))
+      expect(RestClient::Request).to receive(:execute) do |arg|
+        expect(arg).to(match(
+          include(
+            method: :post,
+            url: 'https://samples.auth0.com/oauth/token'
+        )))
+
+        expect(JSON.parse(arg[:payload], { symbolize_names: true })).to eq(payload)
+      
+        StubResponse.new({ 
+          "access_token" => "renewed_token", 
+          "expires_in" => 86400}, 
+          true, 
+          200)
+      end
 
       instance.send(:get_token)
 

data/spec/spec_helper.rb

@@ -1,4 +1,3 @@
-require 'pry'
 require 'rack/test'
 require 'faker'
 require 'json'

data/spec/support/dummy_class_for_tokens.rb

@@ -13,5 +13,7 @@ class DummyClassForTokens
     @base_uri = "https://#{@domain}"
     @token = config[:token]
     @token_expires_at = config[:token_expires_at]
+    @client_assertion_signing_key = config[:client_assertion_signing_key]
+    @client_assertion_signing_alg = config[:client_assertion_signing_alg] || 'RS256'
   end
 end

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: auth0
 version: !ruby/object:Gem::Version
-  version: 5.10.0
+  version: 5.11.0
 platform: ruby
 authors:
 - Auth0
@@ -11,7 +11,7 @@ authors:
 autorequire: 
 bindir: bin
 cert_chain: []
-date: 2022-10-10 00:00:00.000000000 Z
+date: 2023-01-27 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: rest-client
@@ -139,34 +139,6 @@ dependencies:
     - - "~>"
       - !ruby/object:Gem::Version
         version: '2.0'
-- !ruby/object:Gem::Dependency
-  name: pry
-  requirement: !ruby/object:Gem::Requirement
-    requirements:
-    - - "~>"
-      - !ruby/object:Gem::Version
-        version: '0.10'
-  type: :development
-  prerelease: false
-  version_requirements: !ruby/object:Gem::Requirement
-    requirements:
-    - - "~>"
-      - !ruby/object:Gem::Version
-        version: '0.10'
-- !ruby/object:Gem::Dependency
-  name: pry-nav
-  requirement: !ruby/object:Gem::Requirement
-    requirements:
-    - - "~>"
-      - !ruby/object:Gem::Version
-        version: '0.2'
-  type: :development
-  prerelease: false
-  version_requirements: !ruby/object:Gem::Requirement
-    requirements:
-    - - "~>"
-      - !ruby/object:Gem::Version
-        version: '0.2'
 - !ruby/object:Gem::Dependency
   name: rspec
   requirement: !ruby/object:Gem::Requirement
@@ -280,7 +252,9 @@ files:
 - CHANGELOG.md
 - CODE_OF_CONDUCT.md
 - DEPLOYMENT.md
+- DEVELOPMENT.md
 - Dockerfile
+- EXAMPLES.md
 - Gemfile
 - Gemfile.lock
 - Guardfile
@@ -389,6 +363,7 @@ files:
 - lib/auth0/api/v2/users.rb
 - lib/auth0/api/v2/users_by_email.rb
 - lib/auth0/client.rb
+- lib/auth0/client_assertion.rb
 - lib/auth0/exception.rb
 - lib/auth0/mixins.rb
 - lib/auth0/mixins/access_token_struct.rb
@@ -401,6 +376,7 @@ files:
 - lib/auth0/mixins/validation.rb
 - lib/auth0/version.rb
 - lib/auth0_client.rb
+- opslevel.yml
 - publish_rubygem.sh
 - spec/fixtures/vcr_cassettes/Auth0_Api_AuthenticationEndpoints/_change_password/should_trigger_a_password_reset.yml
 - spec/fixtures/vcr_cassettes/Auth0_Api_AuthenticationEndpoints/_login_with_resource_owner/should_fail_with_an_incorrect_email.yml
@@ -579,6 +555,7 @@ files:
 - spec/integration/lib/auth0/api/v2/api_user_blocks_spec.rb
 - spec/integration/lib/auth0/api/v2/api_users_spec.rb
 - spec/integration/lib/auth0/auth0_client_spec.rb
+- spec/lib/auth0/api/authentication_endpoints_spec.rb
 - spec/lib/auth0/api/v2/actions_spec.rb
 - spec/lib/auth0/api/v2/anomaly_spec.rb
 - spec/lib/auth0/api/v2/attack_protection_spec.rb
@@ -637,7 +614,7 @@ required_rubygems_version: !ruby/object:Gem::Requirement
     - !ruby/object:Gem::Version
       version: '0'
 requirements: []
-rubygems_version: 3.3.11
+rubygems_version: 3.3.26
 signing_key: 
 specification_version: 4
 summary: Auth0 API Client