auth0 5.14.0 → 5.14.2

Sign up to get free protection for your applications and to get access to all the features.
checksums.yaml CHANGED
@@ -1,7 +1,7 @@
1
1
  ---
2
2
  SHA256:
3
- metadata.gz: b34c959171acbebc0ef4f851232de93af1d70318bb762243903d5269275843fa
4
- data.tar.gz: 2856980051e6dec9ede6569c185516ffd08d2dfa4918a96a5fc4d0f96e17d44c
3
+ metadata.gz: 97ee62870b22963b87275a7a9b6cb691f2353a3f10820d0b3a7f24300a538fec
4
+ data.tar.gz: dd9812af9eb9ab13724912ecec01497c9cdc204f462ef9c8a954abc0c54a2a97
5
5
  SHA512:
6
- metadata.gz: 9e551b02de8f4464e4c688259dc0840844aa3cc80111a78254a7082a67b76209e1a991cbe241d7fc3839fea0fac00bdaf0917863d306c54bd51def3db524cc79
7
- data.tar.gz: '092c26e20e6b6a850fde55c8beb8f4535a31e20db4144dd001feada3ca4256223580d56e82176ab4264d9146dd0de42610eb77a0ebf7fce9002e489681f9b7ae'
6
+ metadata.gz: aa6947cfb14277b47a255ca71b2ae7d560f6fe1e3f4d85007431024af96a38d880855a2e6a56b5807551838d9413ac90403c736601ff1e74531e64f92728c45c
7
+ data.tar.gz: cf0cee02c1fd5964d2a84e35de0264ec966e9b512f2dd613e94dafd349f5b062e8e4c5cf02396dffc969ad74e472b1d908803a2a586089d0d2ee7b7cdfde1481
data/.bundle/config CHANGED
@@ -1,5 +1,4 @@
1
1
  ---
2
2
  BUNDLE_JOBS: "3"
3
3
  BUNDLE_BIN: "bin"
4
- BUNDLE_RETRY: "3"
5
- BUNDLE_PATH: "vendor/bundle"
4
+ BUNDLE_RETRY: "3"
data/.circleci/config.yml CHANGED
@@ -31,7 +31,6 @@ jobs:
31
31
  steps:
32
32
  - checkout
33
33
  - run: gem install bundler:2.3.22
34
- - run: rm Gemfile.lock
35
34
  - restore_cache:
36
35
  key: gems-v2-{{ checksum "Gemfile.lock" }}
37
36
  - run: bundle check --path=vendor/bundle || bundle install --path=vendor/bundle
@@ -0,0 +1,32 @@
1
+ name: Build package
2
+ description: Build the SDK package
3
+
4
+ inputs:
5
+ ruby:
6
+ description: The Ruby version to use
7
+ required: false
8
+ default: 3.2
9
+ bundle-path:
10
+ description: The path to the bundle cache
11
+ required: false
12
+ default: vendor/bundle
13
+ bundler-cache:
14
+ description: Whether to use the bundler cache
15
+ required: false
16
+ default: true
17
+
18
+ runs:
19
+ using: composite
20
+
21
+ steps:
22
+ - name: Configure Ruby
23
+ uses: ruby/setup-ruby@v1
24
+ with:
25
+ ruby-version: ${{ inputs.ruby }}
26
+ bundler-cache: ${{ inputs.bundle-cache }}
27
+
28
+ - name: Install dependencies
29
+ run: bundle check || bundle install
30
+ shell: bash
31
+ env:
32
+ BUNDLE_PATH: ${{ inputs.bundle-path }}
@@ -1,10 +1,13 @@
1
1
  version: 2
2
2
  updates:
3
-
4
- - package-ecosystem: "bundler"
5
- directory: "/"
3
+ - package-ecosystem: "bundler"
4
+ directory: "/"
6
5
  schedule:
7
6
  interval: "daily"
8
7
  ignore:
9
8
  - dependency-name: "*"
10
9
  update-types: ["version-update:semver-major"]
10
+ - package-ecosystem: 'github-actions'
11
+ directory: '/'
12
+ schedule:
13
+ interval: 'daily'
@@ -0,0 +1,53 @@
1
+ name: CodeQL
2
+
3
+ on:
4
+ merge_group:
5
+ pull_request:
6
+ types:
7
+ - opened
8
+ - synchronize
9
+ push:
10
+ branches:
11
+ - master
12
+ schedule:
13
+ - cron: "37 10 * * 2"
14
+
15
+ permissions:
16
+ actions: read
17
+ contents: read
18
+ security-events: write
19
+
20
+ concurrency:
21
+ group: ${{ github.workflow }}-${{ github.event.pull_request.number || github.ref }}
22
+ cancel-in-progress: ${{ github.ref != 'refs/heads/master' }}
23
+
24
+ jobs:
25
+ analyze:
26
+ name: Check for Vulnerabilities
27
+ runs-on: ubuntu-latest
28
+
29
+ strategy:
30
+ fail-fast: false
31
+ matrix:
32
+ language: [ruby]
33
+
34
+ steps:
35
+ - if: github.actor == 'dependabot[bot]' || github.event_name == 'merge_group'
36
+ run: exit 0 # Skip unnecessary test runs for dependabot and merge queues. Artifically flag as successful, as this is a required check for branch protection.
37
+
38
+ - name: Checkout
39
+ uses: actions/checkout@v4
40
+
41
+ - name: Initialize CodeQL
42
+ uses: github/codeql-action/init@v2
43
+ with:
44
+ languages: ${{ matrix.language }}
45
+ queries: +security-and-quality
46
+
47
+ - name: Autobuild
48
+ uses: github/codeql-action/autobuild@v2
49
+
50
+ - name: Perform CodeQL Analysis
51
+ uses: github/codeql-action/analyze@v2
52
+ with:
53
+ category: "/language:${{ matrix.language }}"
@@ -0,0 +1,7 @@
1
+ {
2
+ "include": [
3
+ { "ruby": "3.0" },
4
+ { "ruby": "3.1" },
5
+ { "ruby": "3.2" }
6
+ ]
7
+ }
@@ -0,0 +1,37 @@
1
+ name: Publish Release
2
+
3
+ on:
4
+ workflow_dispatch:
5
+ inputs:
6
+ branch:
7
+ description: The branch to release from.
8
+ required: true
9
+ default: master
10
+
11
+ permissions:
12
+ contents: read
13
+
14
+ jobs:
15
+ publish:
16
+ name: Publish to RubyGems
17
+ runs-on: ubuntu-latest
18
+ environment: release
19
+
20
+ steps:
21
+ - name: Checkout code
22
+ uses: actions/checkout@v4
23
+ with:
24
+ fetch-depth: 0
25
+ ref: ${{ github.event.inputs.branch }}
26
+
27
+ - name: Configure Ruby
28
+ uses: ./.github/actions/setup
29
+ with:
30
+ ruby: 3.2
31
+
32
+ - name: Publish to RubyGems
33
+ run: |
34
+ gem build *.gemspec
35
+ gem push *.gem
36
+ env:
37
+ GEM_HOST_API_KEY: ${{secrets.RUBYGEMS_AUTH_TOKEN}}
@@ -1,28 +1,49 @@
1
1
  name: Semgrep
2
2
 
3
3
  on:
4
- pull_request: {}
5
-
4
+ merge_group:
5
+ pull_request_target:
6
+ types:
7
+ - opened
8
+ - synchronize
6
9
  push:
7
10
  branches:
8
11
  - master
9
- - main
10
-
11
12
  schedule:
12
- - cron: '0 * * * *'
13
+ - cron: '30 0 1,15 * *'
14
+
15
+ permissions:
16
+ contents: read
17
+
18
+ concurrency:
19
+ group: ${{ github.workflow }}-${{ github.event.pull_request.number || github.ref }}
20
+ cancel-in-progress: ${{ github.ref != 'refs/heads/master' }}
13
21
 
14
22
  jobs:
15
- semgrep:
16
- name: Scan
23
+ authorize:
24
+ name: Authorize
25
+ environment: ${{ github.actor != 'dependabot[bot]' && github.event_name == 'pull_request_target' && github.event.pull_request.head.repo.full_name != github.repository && 'external' || 'internal' }}
17
26
  runs-on: ubuntu-latest
27
+ steps:
28
+ - run: true
29
+
30
+ run:
31
+ needs: authorize # Require approval before running on forked pull requests
32
+
33
+ name: Check for Vulnerabilities
34
+ runs-on: ubuntu-latest
35
+
18
36
  container:
19
37
  image: returntocorp/semgrep
20
- if: (github.repository_owner == 'auth0')
21
-
38
+
22
39
  steps:
23
- - uses: actions/checkout@v3
40
+ - if: github.actor == 'dependabot[bot]' || github.event_name == 'merge_group'
41
+ run: exit 0 # Skip unnecessary test runs for dependabot and merge queues. Artifically flag as successful, as this is a required check for branch protection.
42
+
43
+ - uses: actions/checkout@v4
44
+ with:
45
+ ref: ${{ github.event.pull_request.head.sha || github.ref }}
24
46
 
25
- - if: github.event.pull_request.draft == false && github.actor != 'dependabot[bot]'
26
- run: semgrep ci
47
+ - run: semgrep ci
27
48
  env:
28
49
  SEMGREP_APP_TOKEN: ${{ secrets.SEMGREP_APP_TOKEN }}
@@ -0,0 +1,47 @@
1
+ name: Snyk
2
+
3
+ on:
4
+ merge_group:
5
+ workflow_dispatch:
6
+ pull_request_target:
7
+ types:
8
+ - opened
9
+ - synchronize
10
+ push:
11
+ branches:
12
+ - master
13
+ schedule:
14
+ - cron: '30 0 1,15 * *'
15
+
16
+ permissions:
17
+ contents: read
18
+
19
+ concurrency:
20
+ group: ${{ github.workflow }}-${{ github.event.pull_request.number || github.ref }}
21
+ cancel-in-progress: ${{ github.ref != 'refs/heads/master' }}
22
+
23
+ jobs:
24
+ authorize:
25
+ name: Authorize
26
+ environment: ${{ github.actor != 'dependabot[bot]' && github.event_name == 'pull_request_target' && github.event.pull_request.head.repo.full_name != github.repository && 'external' || 'internal' }}
27
+ runs-on: ubuntu-latest
28
+ steps:
29
+ - run: true
30
+
31
+ check:
32
+ needs: authorize
33
+
34
+ name: Check for Vulnerabilities
35
+ runs-on: ubuntu-latest
36
+
37
+ steps:
38
+ - if: github.actor == 'dependabot[bot]' || github.event_name == 'merge_group'
39
+ run: exit 0 # Skip unnecessary test runs for dependabot and merge queues. Artifically flag as successful, as this is a required check for branch protection.
40
+
41
+ - uses: actions/checkout@v4
42
+ with:
43
+ ref: ${{ github.event.pull_request.head.sha || github.ref }}
44
+
45
+ - uses: snyk/actions/php@b98d498629f1c368650224d6d212bf7dfa89e4bf # pin@0.4.0
46
+ env:
47
+ SNYK_TOKEN: ${{ secrets.SNYK_TOKEN }}
@@ -0,0 +1,69 @@
1
+ name: Build and Test
2
+
3
+ on:
4
+ merge_group:
5
+ workflow_dispatch:
6
+ pull_request:
7
+ branches:
8
+ - master
9
+ push:
10
+ branches:
11
+ - master
12
+
13
+ permissions:
14
+ contents: read
15
+
16
+ concurrency:
17
+ group: ${{ github.workflow }}-${{ github.ref }}
18
+ cancel-in-progress: ${{ github.ref != 'refs/heads/master' }}
19
+
20
+ env:
21
+ CACHE_KEY: "${{ github.ref }}-${{ github.run_id }}-${{ github.run_attempt }}"
22
+
23
+ jobs:
24
+ configure:
25
+ name: Configure Build Matrix
26
+ runs-on: ubuntu-latest
27
+
28
+ outputs:
29
+ matrix: ${{ steps.set-matrix.outputs.matrix }}
30
+
31
+ steps:
32
+ - uses: actions/checkout@v4
33
+ with:
34
+ ref: ${{ github.event.pull_request.head.sha || github.ref }}
35
+
36
+ - id: set-matrix
37
+ run: echo "matrix=$(jq -c . < ./.github/workflows/matrix.json)" >> $GITHUB_OUTPUT
38
+
39
+ unit:
40
+ needs: configure
41
+
42
+ name: Run Unit Tests
43
+ runs-on: ubuntu-latest
44
+
45
+ strategy:
46
+ matrix: ${{ fromJson(needs.configure.outputs.matrix) }}
47
+
48
+ env:
49
+ DOMAIN: example.auth0.dev
50
+ CLIENT_ID: example-client
51
+ CLIENT_SECRET: example-secret
52
+ MASTER_JWT: example-jwt
53
+ BUNDLE_PATH: vendor/bundle
54
+
55
+ steps:
56
+ - name: Checkout code
57
+ uses: actions/checkout@v4
58
+
59
+ - name: Configure Ruby
60
+ uses: ./.github/actions/setup
61
+ with:
62
+ ruby: ${{ matrix.ruby }}
63
+
64
+ - name: Run tests
65
+ run: bundle exec rake test
66
+
67
+ - name: Upload coverage
68
+ if: matrix.ruby == '3.2'
69
+ uses: codecov/codecov-action@eaaf4bedf32dbdc6b720b63067d99c4d77d6047d # pin@3.1.4
data/.snyk ADDED
@@ -0,0 +1,11 @@
1
+ ignore:
2
+ SNYK-RUBY-RACK-1061917:
3
+ - rubocop-rails > rack:
4
+ reason: No direct upgrade available
5
+ expires: "2023-11-02T12:00:00.000Z"
6
+ - dotenv-rails > railties > actionpack > rack:
7
+ reason: No direct upgrade available
8
+ expires: "2023-11-02T12:00:00.000Z"
9
+ - dotenv-rails > railties > actionpack > rack-test:
10
+ reason: No direct upgrade available
11
+ expires: "2023-11-02T12:00:00.000Z"
data/CHANGELOG.md CHANGED
@@ -1,61 +1,95 @@
1
1
  # Change Log
2
2
 
3
+ ## [v5.14.2](https://github.com/auth0/ruby-auth0/tree/v5.14.2) (2023-10-03)
4
+
5
+ [Full Changelog](https://github.com/auth0/ruby-auth0/compare/v5.14.1...v5.14.2)
6
+
7
+ **Fixed**
8
+
9
+ - [API] `trigger_id` and `action_name` parameters for `create_action` endpoint are now optional [\#478](https://github.com/auth0/ruby-auth0/pull/478) [rapito](https://github.com/rapito)
10
+
11
+ ## [v5.14.1](https://github.com/auth0/ruby-auth0/tree/v5.14.1) (2023-07-19)
12
+
13
+ [Full Changelog](https://github.com/auth0/ruby-auth0/compare/v5.14.0...v5.14.1)
14
+
15
+ **Fixed**
16
+
17
+ - chore: should not lowercase org_name claim [\#499](https://github.com/auth0/ruby-auth0/pull/499) ([stevehobbsdev](https://github.com/stevehobbsdev))
18
+
3
19
  ## [v5.14.0](https://github.com/auth0/ruby-auth0/tree/v5.14.0) (2023-07-13)
20
+
4
21
  [Full Changelog](https://github.com/auth0/ruby-auth0/compare/v5.13.0...v5.14.0)
5
22
 
6
23
  **Added**
24
+
7
25
  - [SDK-4386] Support Organization Name in Authorize [\#495](https://github.com/auth0/ruby-auth0/pull/495) ([stevehobbsdev](https://github.com/stevehobbsdev))
8
26
 
9
27
  ## [v5.13.0](https://github.com/auth0/ruby-auth0/tree/v5.13.0) (2023-04-24)
28
+
10
29
  [Full Changelog](https://github.com/auth0/ruby-auth0/compare/v5.12.0...v5.13.0)
11
30
 
12
31
  **Added**
32
+
13
33
  - [SDK-4142] Add support for /oauth/par [\#470](https://github.com/auth0/ruby-auth0/pull/470) ([stevehobbsdev](https://github.com/stevehobbsdev))
14
34
 
15
35
  **Deprecated**
36
+
16
37
  - Drop support for 2.7 in CI build [\#467](https://github.com/auth0/ruby-auth0/pull/467) ([stevehobbsdev](https://github.com/stevehobbsdev))
17
38
 
18
39
  ## [v5.12.0](https://github.com/auth0/ruby-auth0/tree/v5.12.0) (2023-03-13)
40
+
19
41
  [Full Changelog](https://github.com/auth0/ruby-auth0/compare/v5.11.0...v5.12.0)
20
42
 
21
43
  **Added**
44
+
22
45
  - [SDK-4014] User Authentication Method management API support [\#450](https://github.com/auth0/ruby-auth0/pull/450) ([stevehobbsdev](https://github.com/stevehobbsdev))
23
46
 
24
47
  **Fixed**
48
+
25
49
  - Remove broken FAQ link from README [\#441](https://github.com/auth0/ruby-auth0/pull/441) ([joxxoxo](https://github.com/joxxoxo))
26
50
 
27
51
  ## [v5.11.0](https://github.com/auth0/ruby-auth0/tree/v5.11.0) (2023-01-27)
52
+
28
53
  [Full Changelog](https://github.com/auth0/ruby-auth0/compare/v5.10.0...v5.11.0)
29
54
 
30
55
  **Added**
56
+
31
57
  - feat: support exchanging OTP codes for tokens [\#438](https://github.com/auth0/ruby-auth0/pull/438) ([stevehobbsdev](https://github.com/stevehobbsdev))
32
58
  - [SDK-3869] Support client credentials in management client [\#437](https://github.com/auth0/ruby-auth0/pull/437) ([stevehobbsdev](https://github.com/stevehobbsdev))
33
59
  - [SDK-3863] Add support for Client Assertion in authentication endpoints [\#434](https://github.com/auth0/ruby-auth0/pull/434) ([stevehobbsdev](https://github.com/stevehobbsdev))
34
60
 
35
61
  **Changed**
62
+
36
63
  - ci: include Ruby 3.2 in test matrix [\#436](https://github.com/auth0/ruby-auth0/pull/436) ([stevehobbsdev](https://github.com/stevehobbsdev))
37
64
 
38
65
  ## [v5.10.0](https://github.com/auth0/ruby-auth0/tree/v5.10.0) (2022-10-10)
66
+
39
67
  [Full Changelog](https://github.com/auth0/ruby-auth0/compare/v5.9.0...v5.10.0)
40
68
 
41
69
  **Changed**
70
+
42
71
  - Update jwt ~2.5 [\#384](https://github.com/auth0/ruby-auth0/pull/384) ([stevehobbsdev](https://github.com/stevehobbsdev))
43
72
 
44
73
  **Fixed**
74
+
45
75
  - Stop :get, :delete parameters from bleeding into subsequent requests [\#388](https://github.com/auth0/ruby-auth0/pull/388) ([stevehobbsdev](https://github.com/stevehobbsdev))
46
76
  - Support complex field names in export_users [\#387](https://github.com/auth0/ruby-auth0/pull/387) ([stevehobbsdev](https://github.com/stevehobbsdev))
47
77
  - Reconfigure rate limiting exponential backoff [\#386](https://github.com/auth0/ruby-auth0/pull/386) ([stevehobbsdev](https://github.com/stevehobbsdev))
48
78
 
49
79
  ## [v5.9.0](https://github.com/auth0/ruby-auth0/tree/v5.9.0) (2022-08-24)
80
+
50
81
  [Full Changelog](https://github.com/auth0/ruby-auth0/compare/v5.8.1...v5.9.0)
51
82
 
52
83
  **Added**
84
+
53
85
  - Add Delete All Authenticators API for Users [\#375](https://github.com/auth0/ruby-auth0/pull/375) ([phongnh](https://github.com/phongnh))
54
86
 
55
87
  **Changed**
88
+
56
89
  - Add include_totals to get connections options [\#357](https://github.com/auth0/ruby-auth0/pull/357) ([stevehobbsdev](https://github.com/stevehobbsdev))
57
90
 
58
91
  **Fixed**
92
+
59
93
  - Fix typo and remove param that is not used [\#365](https://github.com/auth0/ruby-auth0/pull/365) ([MatthewRDodds](https://github.com/MatthewRDodds))
60
94
  - correct remove_user_roles doc: roles param is ids, not names [\#359](https://github.com/auth0/ruby-auth0/pull/359) ([gbirchmeier](https://github.com/gbirchmeier))
61
95
 
data/EXAMPLES.md CHANGED
@@ -178,7 +178,7 @@ In particular:
178
178
 
179
179
  - The issuer (iss) claim should be checked to ensure the token was issued by Auth0
180
180
 
181
- - the `org_id` or `org_name` claim should be checked to ensure it is a value that is already known to the application. Which claim you check depends on the organization value being validated: if it starts with `org_`, validate against the `org_id` claim. Otherwise, validate against `org_name`. Further, `org_name` validation should be done using a **case-insensitive** check, whereas `org_id` should be an exact case-sensitive match.
181
+ - the `org_id` or `org_name` claim should be checked to ensure it is a value that is already known to the application. Which claim you check depends on the organization value being validated: if it starts with `org_`, validate against the `org_id` claim. Otherwise, validate against `org_name`. Further, the value of the `org_name` claim will always be lowercase. To aid the developer experience, you may also lowercase the input organization name when checking against the `org_name`, but do not modify the `org_name` claim value.
182
182
 
183
183
  This could be validated against a known list of organization IDs or names, or perhaps checked in conjunction with the current request URL. e.g. the sub-domain may hint at what organization should be used to validate the Access Token.
184
184
 
data/Gemfile.lock CHANGED
@@ -1,7 +1,7 @@
1
1
  PATH
2
2
  remote: .
3
3
  specs:
4
- auth0 (5.14.0)
4
+ auth0 (5.14.2)
5
5
  addressable (~> 2.8)
6
6
  jwt (~> 2.7)
7
7
  rest-client (~> 2.1)
@@ -11,28 +11,30 @@ PATH
11
11
  GEM
12
12
  remote: https://rubygems.org/
13
13
  specs:
14
- actionpack (7.0.6)
15
- actionview (= 7.0.6)
16
- activesupport (= 7.0.6)
14
+ actionpack (7.0.8)
15
+ actionview (= 7.0.8)
16
+ activesupport (= 7.0.8)
17
17
  rack (~> 2.0, >= 2.2.4)
18
18
  rack-test (>= 0.6.3)
19
19
  rails-dom-testing (~> 2.0)
20
20
  rails-html-sanitizer (~> 1.0, >= 1.2.0)
21
- actionview (7.0.6)
22
- activesupport (= 7.0.6)
21
+ actionview (7.0.8)
22
+ activesupport (= 7.0.8)
23
23
  builder (~> 3.1)
24
24
  erubi (~> 1.4)
25
25
  rails-dom-testing (~> 2.0)
26
26
  rails-html-sanitizer (~> 1.1, >= 1.2.0)
27
- activesupport (7.0.6)
27
+ activesupport (7.0.8)
28
28
  concurrent-ruby (~> 1.0, >= 1.0.2)
29
29
  i18n (>= 1.6, < 2)
30
30
  minitest (>= 5.1)
31
31
  tzinfo (~> 2.0)
32
- addressable (2.8.4)
32
+ addressable (2.8.5)
33
33
  public_suffix (>= 2.0.2, < 6.0)
34
34
  ast (2.4.2)
35
+ base64 (0.1.1)
35
36
  builder (3.2.4)
37
+ coderay (1.1.3)
36
38
  concurrent-ruby (1.2.2)
37
39
  coveralls (0.7.1)
38
40
  multi_json (~> 1.3)
@@ -54,10 +56,25 @@ GEM
54
56
  erubi (1.12.0)
55
57
  faker (2.23.0)
56
58
  i18n (>= 1.8.11, < 2)
59
+ ffi (1.16.2)
60
+ formatador (1.1.0)
57
61
  fuubar (2.5.1)
58
62
  rspec-core (~> 3.0)
59
63
  ruby-progressbar (~> 1.4)
60
- gem-release (0.7.4)
64
+ guard (2.18.1)
65
+ formatador (>= 0.2.4)
66
+ listen (>= 2.7, < 4.0)
67
+ lumberjack (>= 1.0.12, < 2.0)
68
+ nenv (~> 0.1)
69
+ notiffany (~> 0.0)
70
+ pry (>= 0.13.0)
71
+ shellany (~> 0.0)
72
+ thor (>= 0.18.1)
73
+ guard-compat (1.2.1)
74
+ guard-rspec (4.7.3)
75
+ guard (~> 2.1)
76
+ guard-compat (~> 1.1)
77
+ rspec (>= 2.99.0, < 4.0)
61
78
  hashdiff (1.0.1)
62
79
  http-accept (1.7.0)
63
80
  http-cookie (1.0.5)
@@ -65,23 +82,38 @@ GEM
65
82
  i18n (1.14.1)
66
83
  concurrent-ruby (~> 1.0)
67
84
  io-console (0.6.0)
68
- irb (1.7.3)
69
- reline (>= 0.3.6)
85
+ irb (1.8.1)
86
+ rdoc
87
+ reline (>= 0.3.8)
70
88
  json (2.6.3)
71
89
  jwt (2.7.1)
72
90
  language_server-protocol (3.17.0.3)
91
+ listen (3.8.0)
92
+ rb-fsevent (~> 0.10, >= 0.10.3)
93
+ rb-inotify (~> 0.9, >= 0.9.10)
73
94
  loofah (2.21.3)
74
95
  crass (~> 1.0.2)
75
96
  nokogiri (>= 1.12.0)
97
+ lumberjack (1.2.9)
76
98
  method_source (1.0.0)
77
- mime-types (3.4.1)
99
+ mime-types (3.5.1)
78
100
  mime-types-data (~> 3.2015)
79
- mime-types-data (3.2023.0218.1)
80
- minitest (5.18.1)
101
+ mime-types-data (3.2023.0808)
102
+ minitest (5.20.0)
81
103
  multi_json (1.15.0)
104
+ nenv (0.3.0)
82
105
  netrc (0.11.0)
83
- nokogiri (1.15.3-x86_64-linux)
106
+ nokogiri (1.15.4-aarch64-linux)
84
107
  racc (~> 1.4)
108
+ nokogiri (1.15.4-arm64-darwin)
109
+ racc (~> 1.4)
110
+ nokogiri (1.15.4-x86_64-darwin)
111
+ racc (~> 1.4)
112
+ nokogiri (1.15.4-x86_64-linux)
113
+ racc (~> 1.4)
114
+ notiffany (0.1.3)
115
+ nenv (~> 0.1)
116
+ shellany (~> 0.0)
85
117
  parallel (1.23.0)
86
118
  parser (3.2.2.3)
87
119
  ast (~> 2.4.1)
@@ -89,29 +121,39 @@ GEM
89
121
  pp (0.4.0)
90
122
  prettyprint
91
123
  prettyprint (0.1.1)
124
+ pry (0.14.2)
125
+ coderay (~> 1.1)
126
+ method_source (~> 1.0)
127
+ psych (5.1.0)
128
+ stringio
92
129
  public_suffix (5.0.3)
93
130
  racc (1.7.1)
94
- rack (2.2.7)
95
- rack-test (0.8.3)
96
- rack (>= 1.0, < 3)
97
- rails-dom-testing (2.1.1)
131
+ rack (2.2.8)
132
+ rack-test (2.1.0)
133
+ rack (>= 1.3)
134
+ rails-dom-testing (2.2.0)
98
135
  activesupport (>= 5.0.0)
99
136
  minitest
100
137
  nokogiri (>= 1.6)
101
138
  rails-html-sanitizer (1.6.0)
102
139
  loofah (~> 2.21)
103
140
  nokogiri (~> 1.14)
104
- railties (7.0.6)
105
- actionpack (= 7.0.6)
106
- activesupport (= 7.0.6)
141
+ railties (7.0.8)
142
+ actionpack (= 7.0.8)
143
+ activesupport (= 7.0.8)
107
144
  method_source
108
145
  rake (>= 12.2)
109
146
  thor (~> 1.0)
110
147
  zeitwerk (~> 2.5)
111
148
  rainbow (3.1.1)
112
149
  rake (13.0.6)
150
+ rb-fsevent (0.11.2)
151
+ rb-inotify (0.10.1)
152
+ ffi (~> 1.0)
153
+ rdoc (6.5.0)
154
+ psych (>= 4.0.0)
113
155
  regexp_parser (2.8.1)
114
- reline (0.3.6)
156
+ reline (0.3.8)
115
157
  io-console (~> 0.5)
116
158
  rest-client (2.1.0)
117
159
  http-accept (>= 1.7.0, < 2.0)
@@ -119,7 +161,7 @@ GEM
119
161
  mime-types (>= 1.16, < 4.0)
120
162
  netrc (~> 0.8)
121
163
  retryable (3.0.5)
122
- rexml (3.2.5)
164
+ rexml (3.2.6)
123
165
  rspec (3.12.0)
124
166
  rspec-core (~> 3.12.0)
125
167
  rspec-expectations (~> 3.12.0)
@@ -133,7 +175,8 @@ GEM
133
175
  diff-lcs (>= 1.2.0, < 2.0)
134
176
  rspec-support (~> 3.12.0)
135
177
  rspec-support (3.12.1)
136
- rubocop (1.54.1)
178
+ rubocop (1.56.4)
179
+ base64 (~> 0.1.1)
137
180
  json (~> 2.3)
138
181
  language_server-protocol (>= 3.17.0)
139
182
  parallel (~> 1.10)
@@ -141,16 +184,17 @@ GEM
141
184
  rainbow (>= 2.2.2, < 4.0)
142
185
  regexp_parser (>= 1.8, < 3.0)
143
186
  rexml (>= 3.2.5, < 4.0)
144
- rubocop-ast (>= 1.28.0, < 2.0)
187
+ rubocop-ast (>= 1.28.1, < 2.0)
145
188
  ruby-progressbar (~> 1.7)
146
189
  unicode-display_width (>= 2.4.0, < 3.0)
147
190
  rubocop-ast (1.29.0)
148
191
  parser (>= 3.2.1.0)
149
- rubocop-rails (2.20.2)
192
+ rubocop-rails (2.21.2)
150
193
  activesupport (>= 4.2.0)
151
194
  rack (>= 1.1)
152
195
  rubocop (>= 1.33.0, < 2.0)
153
196
  ruby-progressbar (1.13.0)
197
+ shellany (0.0.1)
154
198
  simplecov (0.22.0)
155
199
  docile (~> 1.1)
156
200
  simplecov-html (~> 0.11)
@@ -160,11 +204,13 @@ GEM
160
204
  simplecov (~> 0.19)
161
205
  simplecov-html (0.12.3)
162
206
  simplecov_json_formatter (0.1.4)
207
+ stringio (3.0.8)
163
208
  sync (0.5.0)
164
209
  term-ansicolor (1.7.1)
165
210
  tins (~> 1.0)
211
+ terminal-notifier-guard (1.7.0)
166
212
  thor (1.2.2)
167
- timecop (0.9.6)
213
+ timecop (0.9.8)
168
214
  tins (1.32.1)
169
215
  sync
170
216
  tzinfo (2.0.6)
@@ -172,16 +218,20 @@ GEM
172
218
  unf (0.1.4)
173
219
  unf_ext
174
220
  unf_ext (0.0.8.2)
175
- unicode-display_width (2.4.2)
221
+ unicode-display_width (2.5.0)
176
222
  vcr (6.2.0)
177
- webmock (3.18.1)
223
+ webmock (3.19.1)
178
224
  addressable (>= 2.8.0)
179
225
  crack (>= 0.3.2)
180
226
  hashdiff (>= 0.4.0, < 2.0.0)
181
- zache (0.13.0)
182
- zeitwerk (2.6.8)
227
+ zache (0.13.1)
228
+ zeitwerk (2.6.12)
183
229
 
184
230
  PLATFORMS
231
+ aarch64-linux
232
+ arm64-darwin-21
233
+ arm64-darwin-22
234
+ x86_64-darwin-21
185
235
  x86_64-linux
186
236
 
187
237
  DEPENDENCIES
@@ -191,20 +241,19 @@ DEPENDENCIES
191
241
  dotenv-rails (~> 2.0)
192
242
  faker (~> 2.0)
193
243
  fuubar (~> 2.0)
194
- gem-release (~> 0.7)
244
+ guard-rspec (~> 4.5)
195
245
  irb
196
246
  pp
197
- rack (~> 2.1)
198
- rack-test (~> 0.6)
199
247
  rake (~> 13.0)
200
248
  rspec (~> 3.11)
201
249
  rubocop
202
250
  rubocop-rails
203
251
  simplecov (~> 0.9)
204
252
  simplecov-cobertura
253
+ terminal-notifier-guard
205
254
  timecop
206
255
  vcr
207
256
  webmock
208
257
 
209
258
  BUNDLED WITH
210
- 2.4.10
259
+ 2.3.7
data/auth0.gemspec CHANGED
@@ -28,10 +28,7 @@ Gem::Specification.new do |s|
28
28
  s.add_development_dependency 'guard-rspec', '~> 4.5' unless ENV['CIRCLECI']
29
29
  s.add_development_dependency 'dotenv-rails', '~> 2.0'
30
30
  s.add_development_dependency 'rspec', '~> 3.11'
31
- s.add_development_dependency 'rack-test', '~> 0.6'
32
- s.add_development_dependency 'rack', '~> 2.1'
33
31
  s.add_development_dependency 'simplecov', '~> 0.9'
34
32
  s.add_development_dependency 'faker', '~> 2.0'
35
- s.add_development_dependency 'gem-release', '~> 0.7'
36
33
  s.license = 'MIT'
37
34
  end
@@ -5,8 +5,8 @@ GEM
5
5
  jwt (2.5.0)
6
6
  mustermann (2.0.2)
7
7
  ruby2_keywords (~> 0.0.1)
8
- nio4r (2.5.8)
9
- puma (5.6.5)
8
+ nio4r (2.5.9)
9
+ puma (5.6.7)
10
10
  nio4r (~> 2.0)
11
11
  rack (2.2.6.4)
12
12
  rack-protection (2.2.3)
@@ -16,18 +16,16 @@ module Auth0
16
16
  # @param page [integer] The page number. Zero based.
17
17
  # @param installed [boolean] When true, return only installed actions. When false, return only custom actions. Returns all actions by default.
18
18
  # @return [json] Actions and pagination info
19
- def actions(trigger_id, action_name, deployed: nil, per_page: nil, page: nil, installed: nil)
20
- raise Auth0::MissingTriggerId, 'Must supply a valid trigger_id' if trigger_id.to_s.empty?
21
- raise Auth0::MissingActionName, 'Must supply a valid action_name' if action_name.to_s.empty?
22
-
19
+ def actions(trigger_id = nil, action_name = nil, deployed: nil, per_page: nil, page: nil, installed: nil)
23
20
  request_params = {
24
- trigger_id: trigger_id,
25
- action_name: action_name,
21
+ triggerId: trigger_id,
22
+ actionName: action_name,
26
23
  deployed: deployed,
27
24
  per_page: per_page,
28
25
  page: page,
29
26
  installed: installed
30
27
  }
28
+
31
29
  path = "#{actions_path}/actions"
32
30
  get(path, request_params)
33
31
  end
@@ -38,7 +36,8 @@ module Auth0
38
36
  # @param body [hash] See https://auth0.com/docs/api/management/v2/#!/actions/post_action for available options
39
37
  # @return [json] Returns the created action.
40
38
  def create_action(body = {})
41
- post(actions_path, body)
39
+ path = "#{actions_path}/actions"
40
+ post(path, body)
42
41
  end
43
42
 
44
43
  # Retrieve the set of triggers currently available within actions. A trigger is an extensibility point to which actions can be bound.
@@ -204,7 +204,7 @@ module Auth0
204
204
  raise Auth0::InvalidIdToken, 'Organization Name (org_name) claim must be a string present in the ID token'
205
205
  end
206
206
 
207
- unless expected.downcase == claims['org_name'].downcase
207
+ unless expected.downcase == claims['org_name']
208
208
  raise Auth0::InvalidIdToken, "Organization Name (org_name) claim value mismatch in the ID token; expected \"#{expected}\","\
209
209
  " found \"#{claims['org_name']}\""
210
210
  end
data/lib/auth0/version.rb CHANGED
@@ -1,4 +1,4 @@
1
1
  # current version of gem
2
2
  module Auth0
3
- VERSION = '5.14.0'.freeze
3
+ VERSION = '5.14.2'.freeze
4
4
  end
@@ -15,11 +15,28 @@ describe Auth0::Api::V2::Actions do
15
15
  expect(@instance).to respond_to(:get_actions)
16
16
  end
17
17
 
18
+ it 'is expected to support all optional arguments' do
19
+ expect(@instance).to receive(:get).with(
20
+ '/api/v2/actions/actions', {
21
+ triggerId: nil,
22
+ actionName: nil,
23
+ deployed: nil,
24
+ per_page: nil,
25
+ page: nil,
26
+ installed: nil
27
+ }
28
+ )
29
+
30
+ expect do
31
+ @instance.actions()
32
+ end.not_to raise_error
33
+ end
34
+
18
35
  it 'is expected to get /api/v2/actions with custom parameters' do
19
36
  expect(@instance).to receive(:get).with(
20
37
  '/api/v2/actions/actions', {
21
- trigger_id: 'post-login',
22
- action_name: 'loginHandler',
38
+ triggerId: 'post-login',
39
+ actionName: 'loginHandler',
23
40
  deployed: true,
24
41
  per_page: 10,
25
42
  page: 1,
@@ -37,13 +54,6 @@ describe Auth0::Api::V2::Actions do
37
54
  end.not_to raise_error
38
55
  end
39
56
 
40
- it 'is expected to raise an exception when the trigger id is empty' do
41
- expect { @instance.actions(nil, nil) }.to raise_exception(Auth0::MissingTriggerId)
42
- end
43
-
44
- it 'is expected to raise an exception when the action name is empty' do
45
- expect { @instance.actions(1, nil) }.to raise_exception(Auth0::MissingActionName)
46
- end
47
57
  end
48
58
 
49
59
  context '.action' do
@@ -71,7 +81,7 @@ describe Auth0::Api::V2::Actions do
71
81
 
72
82
  it 'is expected to post to /api/v2/actions' do
73
83
  expect(@instance).to receive(:post).with(
74
- '/api/v2/actions', {
84
+ '/api/v2/actions/actions', {
75
85
  name: 'test_org'
76
86
  })
77
87
  expect do
@@ -342,8 +342,8 @@ describe Auth0::Mixins::Validation::IdTokenValidator do
342
342
  end
343
343
 
344
344
  it 'is expected to NOT raise an error with organization name in different casing' do
345
- token = build_id_token org_name: 'MY-ORGANIZATION'
346
- instance = Auth0::Mixins::Validation::IdTokenValidator.new(CONTEXT.merge({ organization: 'my-organization' }))
345
+ token = build_id_token org_name: 'my-organization'
346
+ instance = Auth0::Mixins::Validation::IdTokenValidator.new(CONTEXT.merge({ organization: 'MY-ORGANIZATION' }))
347
347
 
348
348
  expect { instance.validate(token) }.not_to raise_exception
349
349
  end
metadata CHANGED
@@ -1,7 +1,7 @@
1
1
  --- !ruby/object:Gem::Specification
2
2
  name: auth0
3
3
  version: !ruby/object:Gem::Version
4
- version: 5.14.0
4
+ version: 5.14.2
5
5
  platform: ruby
6
6
  authors:
7
7
  - Auth0
@@ -11,7 +11,7 @@ authors:
11
11
  autorequire:
12
12
  bindir: bin
13
13
  cert_chain: []
14
- date: 2023-07-13 00:00:00.000000000 Z
14
+ date: 2023-10-03 00:00:00.000000000 Z
15
15
  dependencies:
16
16
  - !ruby/object:Gem::Dependency
17
17
  name: rest-client
@@ -126,61 +126,47 @@ dependencies:
126
126
  - !ruby/object:Gem::Version
127
127
  version: '2.0'
128
128
  - !ruby/object:Gem::Dependency
129
- name: dotenv-rails
130
- requirement: !ruby/object:Gem::Requirement
131
- requirements:
132
- - - "~>"
133
- - !ruby/object:Gem::Version
134
- version: '2.0'
135
- type: :development
136
- prerelease: false
137
- version_requirements: !ruby/object:Gem::Requirement
138
- requirements:
139
- - - "~>"
140
- - !ruby/object:Gem::Version
141
- version: '2.0'
142
- - !ruby/object:Gem::Dependency
143
- name: rspec
129
+ name: guard-rspec
144
130
  requirement: !ruby/object:Gem::Requirement
145
131
  requirements:
146
132
  - - "~>"
147
133
  - !ruby/object:Gem::Version
148
- version: '3.11'
134
+ version: '4.5'
149
135
  type: :development
150
136
  prerelease: false
151
137
  version_requirements: !ruby/object:Gem::Requirement
152
138
  requirements:
153
139
  - - "~>"
154
140
  - !ruby/object:Gem::Version
155
- version: '3.11'
141
+ version: '4.5'
156
142
  - !ruby/object:Gem::Dependency
157
- name: rack-test
143
+ name: dotenv-rails
158
144
  requirement: !ruby/object:Gem::Requirement
159
145
  requirements:
160
146
  - - "~>"
161
147
  - !ruby/object:Gem::Version
162
- version: '0.6'
148
+ version: '2.0'
163
149
  type: :development
164
150
  prerelease: false
165
151
  version_requirements: !ruby/object:Gem::Requirement
166
152
  requirements:
167
153
  - - "~>"
168
154
  - !ruby/object:Gem::Version
169
- version: '0.6'
155
+ version: '2.0'
170
156
  - !ruby/object:Gem::Dependency
171
- name: rack
157
+ name: rspec
172
158
  requirement: !ruby/object:Gem::Requirement
173
159
  requirements:
174
160
  - - "~>"
175
161
  - !ruby/object:Gem::Version
176
- version: '2.1'
162
+ version: '3.11'
177
163
  type: :development
178
164
  prerelease: false
179
165
  version_requirements: !ruby/object:Gem::Requirement
180
166
  requirements:
181
167
  - - "~>"
182
168
  - !ruby/object:Gem::Version
183
- version: '2.1'
169
+ version: '3.11'
184
170
  - !ruby/object:Gem::Dependency
185
171
  name: simplecov
186
172
  requirement: !ruby/object:Gem::Requirement
@@ -209,20 +195,6 @@ dependencies:
209
195
  - - "~>"
210
196
  - !ruby/object:Gem::Version
211
197
  version: '2.0'
212
- - !ruby/object:Gem::Dependency
213
- name: gem-release
214
- requirement: !ruby/object:Gem::Requirement
215
- requirements:
216
- - - "~>"
217
- - !ruby/object:Gem::Version
218
- version: '0.7'
219
- type: :development
220
- prerelease: false
221
- version_requirements: !ruby/object:Gem::Requirement
222
- requirements:
223
- - - "~>"
224
- - !ruby/object:Gem::Version
225
- version: '0.7'
226
198
  description: Ruby toolkit for Auth0 API https://auth0.com.
227
199
  email:
228
200
  - support@auth0.com
@@ -235,21 +207,27 @@ files:
235
207
  - ".devcontainer/Dockerfile"
236
208
  - ".devcontainer/devcontainer.json"
237
209
  - ".env.example"
238
- - ".gemrelease"
239
210
  - ".github/CODEOWNERS"
240
211
  - ".github/ISSUE_TEMPLATE/Bug Report.yml"
241
212
  - ".github/ISSUE_TEMPLATE/Feature Request.yml"
242
213
  - ".github/ISSUE_TEMPLATE/config.yml"
243
214
  - ".github/PULL_REQUEST_TEMPLATE.md"
215
+ - ".github/actions/setup/action.yml"
244
216
  - ".github/dependabot.yml"
245
217
  - ".github/stale.yml"
218
+ - ".github/workflows/codeql.yml"
219
+ - ".github/workflows/matrix.json"
220
+ - ".github/workflows/publish.yml"
246
221
  - ".github/workflows/semgrep.yml"
222
+ - ".github/workflows/snyk.yml"
223
+ - ".github/workflows/test.yml"
247
224
  - ".gitignore"
248
225
  - ".rspec"
249
226
  - ".rubocop.yml"
250
227
  - ".rubocop_todo.yml"
251
228
  - ".semgrepignore"
252
229
  - ".shiprc"
230
+ - ".snyk"
253
231
  - CHANGELOG.md
254
232
  - CODE_OF_CONDUCT.md
255
233
  - DEPLOYMENT.md
data/.gemrelease DELETED
@@ -1,2 +0,0 @@
1
- bump:
2
- tag: true