auth0 5.6.1 → 5.8.1

data/spec/lib/auth0/api/v2/users_spec.rb

@@ -17,7 +17,7 @@ describe Auth0::Api::V2::Users do
 
     it 'is expected to get /api/v2/users' do
       expect(@instance).to receive(:get).with(
-        '/api/v2/users',
+        '/api/v2/users', {
         per_page: nil,
         page: nil,
         include_totals: nil,
@@ -27,13 +27,13 @@ describe Auth0::Api::V2::Users do
         include_fields: nil,
         q: nil,
         search_engine: nil
-      )
+      })
       expect { @instance.users }.not_to raise_error
     end
 
     it 'is expected to get /api/v2/users with custom parameters' do
       expect(@instance).to receive(:get).with(
-        '/api/v2/users',
+        '/api/v2/users', {
         per_page: 10,
         page: 1,
         include_totals: true,
@@ -43,7 +43,7 @@ describe Auth0::Api::V2::Users do
         include_fields: nil,
         q: nil,
         search_engine: 'v3'
-      )
+      })
       expect do
         @instance.users(
           search_engine: 'v3',
@@ -64,10 +64,10 @@ describe Auth0::Api::V2::Users do
 
     it 'is expected to call get request to /api/v2/users/USER_ID' do
       expect(@instance).to receive(:get).with(
-        '/api/v2/users/USER_ID',
+        '/api/v2/users/USER_ID', {
         fields: nil,
         include_fields: true
-      )
+      })
       expect { @instance.user('USER_ID') }.not_to raise_error
     end
 
@@ -83,11 +83,11 @@ describe Auth0::Api::V2::Users do
 
     it 'is expected to post to /api/v2/users' do
       expect(@instance).to receive(:post).with(
-        '/api/v2/users',
+        '/api/v2/users', {
         email: 'test@test.com',
         password: 'password',
         connection: 'conn'
-      )
+      })
       expect do
         @instance.create_user(
           'conn',
@@ -169,12 +169,12 @@ describe Auth0::Api::V2::Users do
 
     it 'is expected to patch /api/v2/users/USER_ID' do
       expect(@instance).to receive(:patch).with(
-        '/api/v2/users/USER_ID',
+        '/api/v2/users/USER_ID', {
         email: 'test@test.com',
         password: 'password',
         connection: 'conn',
         name: 'name'
-      )
+      })
       @instance.patch_user(
         'USER_ID',
         email: 'test@test.com',
@@ -199,7 +199,7 @@ describe Auth0::Api::V2::Users do
     end
 
     it 'is expected to post to /api/v2/users/UserId/identities' do
-      expect(@instance).to receive(:post).with('/api/v2/users/USER_ID/identities', body: 'json body')
+      expect(@instance).to receive(:post).with('/api/v2/users/USER_ID/identities', { body: 'json body' })
       @instance.link_user_account('USER_ID', body: 'json body')
     end
 
@@ -255,12 +255,12 @@ describe Auth0::Api::V2::Users do
 
     it 'is expected to get /api/v2/USER_ID/logs' do
       expect(@instance).to receive(:get).with(
-        '/api/v2/users/USER_ID/logs',
+        '/api/v2/users/USER_ID/logs', {
         per_page: nil,
         page: nil,
         include_totals: nil,
         sort: nil
-      )
+      })
       expect { @instance.user_logs('USER_ID') }.not_to raise_error
     end
 
@@ -292,21 +292,21 @@ describe Auth0::Api::V2::Users do
 
     it 'is expected to get roles with default parameters' do
       expect(@instance).to receive(:get).with(
-        '/api/v2/users/USER_ID/roles',
+        '/api/v2/users/USER_ID/roles', {
         per_page: nil,
         page: nil,
         include_totals: nil
-      )
+      })
       expect { @instance.get_user_roles('USER_ID') }.not_to raise_error
     end
 
     it 'is expected to get roles with custom parameters' do
       expect(@instance).to receive(:get).with(
-        '/api/v2/users/USER_ID/roles',
+        '/api/v2/users/USER_ID/roles', {
         per_page: 20,
         page: 2,
         include_totals: true
-      )
+      })
       expect do
         @instance.get_user_roles('USER_ID', per_page: 20, page: 2, include_totals: true)
       end.not_to raise_error
@@ -401,11 +401,11 @@ describe Auth0::Api::V2::Users do
 
     it 'is expected to get permissions' do
       expect(@instance).to receive(:get).with(
-        '/api/v2/users/USER_ID/permissions',
+        '/api/v2/users/USER_ID/permissions', {
         per_page: nil,
         page: nil,
         include_totals: nil,
-      )
+      })
       expect do
         @instance.get_user_permissions('USER_ID')
       end.not_to raise_error
@@ -413,11 +413,11 @@ describe Auth0::Api::V2::Users do
 
     it 'is expected to get permissions with custom parameters' do
       expect(@instance).to receive(:get).with(
-        '/api/v2/users/USER_ID/permissions',
+        '/api/v2/users/USER_ID/permissions', {
         per_page: 10,
         page: 3,
         include_totals: true
-      )
+      })
       expect do
         @instance.get_user_permissions('USER_ID', per_page: 10, page: 3, include_totals: true)
       end.not_to raise_error
@@ -445,7 +445,7 @@ describe Auth0::Api::V2::Users do
 
     it 'is expected to remove permissions' do
       expect(@instance).to receive(:delete_with_body).with(
-        '/api/v2/users/USER_ID/permissions',
+        '/api/v2/users/USER_ID/permissions', {
         permissions: [
           {
             permission_name: 'permission-name-1',
@@ -456,7 +456,7 @@ describe Auth0::Api::V2::Users do
             resource_server_identifier: 'server-id-2'
           }
         ]
-      )
+      })
       expect do
         @instance.remove_user_permissions(
           'USER_ID',

data/spec/lib/auth0/mixins/validation_spec.rb

@@ -6,6 +6,7 @@ RSA_PUB_KEY_JWK_2 = { 'kty': "RSA", 'use': 'sig', 'n': "uGbXWiK3dQTyCbX5xdE4yCuY
 JWKS_RESPONSE_1 = { 'keys': [RSA_PUB_KEY_JWK_1] }.freeze
 JWKS_RESPONSE_2 = { 'keys': [RSA_PUB_KEY_JWK_2] }.freeze
 JWKS_URL = 'https://tokens-test.auth0.com/.well-known/jwks.json'.freeze
+JWKS_URL_2 = 'https://tokens-test2.auth0.com/.well-known/jwks.json'.freeze
 HMAC_SHARED_SECRET = 'secret'.freeze
 
 LEEWAY = 60
@@ -459,6 +460,19 @@ describe Auth0::Algorithm::RS256 do
       expect(a_request(:get, JWKS_URL)).to have_been_made.once
     end
 
+    it 'is expected to fetch the jwks from multiple urls' do
+      stub_jwks(JWKS_RESPONSE_2, JWKS_URL_2)
+
+      instance1 = Auth0::Algorithm::RS256.jwks_url(JWKS_URL)
+      instance2 = Auth0::Algorithm::RS256.jwks_url(JWKS_URL_2)
+      instance1.jwks
+      instance2.jwks
+      instance1.jwks
+
+      expect(a_request(:get, JWKS_URL)).to have_been_made.once
+      expect(a_request(:get, JWKS_URL_2)).to have_been_made.once
+    end
+
     it 'is expected to forcibly fetch the jwks from the url' do
       instance = Auth0::Algorithm::RS256.jwks_url(JWKS_URL)
       instance.jwks
@@ -493,6 +507,6 @@ describe Auth0::Algorithm::RS256 do
 end
 # rubocop:enable Metrics/BlockLength
 
-def stub_jwks(stub = JWKS_RESPONSE_1)
-  stub_request(:get, JWKS_URL).to_return(body: stub.to_json)
+def stub_jwks(stub = JWKS_RESPONSE_1, url = JWKS_URL)
+  stub_request(:get, url).to_return(body: stub.to_json)
 end

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: auth0
 version: !ruby/object:Gem::Version
-  version: 5.6.1
+  version: 5.8.1
 platform: ruby
 authors:
 - Auth0
@@ -11,7 +11,7 @@ authors:
 autorequire:
 bindir: bin
 cert_chain: []
-date: 2021-11-09 00:00:00.000000000 Z
+date: 2022-06-30 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: rest-client
@@ -33,14 +33,14 @@ dependencies:
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: '2.2'
+        version: 2.3.0
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: '2.2'
+        version: 2.3.0
 - !ruby/object:Gem::Dependency
   name: zache
   requirement: !ruby/object:Gem::Requirement
@@ -281,7 +281,9 @@ files:
 - ".github/ISSUE_TEMPLATE/feature_request.md"
 - ".github/ISSUE_TEMPLATE/report_a_bug.md"
 - ".github/PULL_REQUEST_TEMPLATE.md"
+- ".github/dependabot.yml"
 - ".github/stale.yml"
+- ".github/workflows/semgrep.yml"
 - ".gitignore"
 - ".rspec"
 - ".rubocop.yml"
@@ -292,6 +294,7 @@ files:
 - DEPLOYMENT.md
 - Dockerfile
 - Gemfile
+- Gemfile.lock
 - Guardfile
 - LICENSE
 - README.md
@@ -372,6 +375,7 @@ files:
 - lib/auth0/api/v2.rb
 - lib/auth0/api/v2/actions.rb
 - lib/auth0/api/v2/anomaly.rb
+- lib/auth0/api/v2/attack_protection.rb
 - lib/auth0/api/v2/blacklists.rb
 - lib/auth0/api/v2/branding.rb
 - lib/auth0/api/v2/client_grants.rb
@@ -588,6 +592,7 @@ files:
 - spec/integration/lib/auth0/auth0_client_spec.rb
 - spec/lib/auth0/api/v2/actions_spec.rb
 - spec/lib/auth0/api/v2/anomaly_spec.rb
+- spec/lib/auth0/api/v2/attack_protection_spec.rb
 - spec/lib/auth0/api/v2/blacklists_spec.rb
 - spec/lib/auth0/api/v2/branding_spec.rb
 - spec/lib/auth0/api/v2/client_grants_spec.rb
@@ -643,7 +648,7 @@ required_rubygems_version: !ruby/object:Gem::Requirement
     - !ruby/object:Gem::Version
       version: '0'
 requirements: []
-rubygems_version: 3.1.4
+rubygems_version: 3.2.22
 signing_key:
 specification_version: 4
 summary: Auth0 API Client
@@ -827,6 +832,7 @@ test_files:
 - spec/integration/lib/auth0/auth0_client_spec.rb
 - spec/lib/auth0/api/v2/actions_spec.rb
 - spec/lib/auth0/api/v2/anomaly_spec.rb
+- spec/lib/auth0/api/v2/attack_protection_spec.rb
 - spec/lib/auth0/api/v2/blacklists_spec.rb
 - spec/lib/auth0/api/v2/branding_spec.rb
 - spec/lib/auth0/api/v2/client_grants_spec.rb