authlete 1.21.0 → 1.24.0
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- checksums.yaml +4 -4
- data/lib/authlete/model/client.rb +13 -1
- data/lib/authlete/model/service.rb +30 -0
- data/lib/authlete/version.rb +1 -1
- data/test/authlete/model/test_client.rb +15 -5
- data/test/authlete/model/test_service.rb +24 -1
- metadata +2 -2
checksums.yaml
CHANGED
|
@@ -1,7 +1,7 @@
|
|
|
1
1
|
---
|
|
2
2
|
SHA256:
|
|
3
|
-
metadata.gz:
|
|
4
|
-
data.tar.gz:
|
|
3
|
+
metadata.gz: 26deda3ee39d63a3c94018735d82e3e2f49bb53e88e69650ac02e1944f461d10
|
|
4
|
+
data.tar.gz: da2ff9c8b30b51dd73f9247800980843b8416fce9130b69a8d8d1cd693e5c892
|
|
5
5
|
SHA512:
|
|
6
|
-
metadata.gz:
|
|
7
|
-
data.tar.gz:
|
|
6
|
+
metadata.gz: 4301023dc6242a227432e9d65a0769b915cb0d327b3b22627fa5023147085f9b301bf1f04a43c3093f0a011bed5be5fef29a4b47eda34428825451a797719476
|
|
7
|
+
data.tar.gz: ee39ea5c34a9095f9316dd7544d3e0697b495bbe02520129eef46a6c34b255b4a44936aaaa70b2382d5d3ea60f36d8bd9f8a401bbd6c13af48a918ef03e408b5
|
|
@@ -312,6 +312,14 @@ module Authlete
|
|
|
312
312
|
attr_accessor :singleAccessTokenPerSubject
|
|
313
313
|
alias_method :single_access_token_per_subject, :singleAccessTokenPerSubject
|
|
314
314
|
alias_method :single_access_token_per_subject=, :singleAccessTokenPerSubject=
|
|
315
|
+
|
|
316
|
+
attr_accessor :pkceRequired
|
|
317
|
+
alias_method :pkce_required, :pkceRequired
|
|
318
|
+
alias_method :pkce_required=, :pkceRequired=
|
|
319
|
+
|
|
320
|
+
attr_accessor :pkceS256Required
|
|
321
|
+
alias_method :pkce_s256_required, :pkceS256Required
|
|
322
|
+
alias_method :pkce_s256_required=, :pkceS256Required=
|
|
315
323
|
private
|
|
316
324
|
|
|
317
325
|
def defaults
|
|
@@ -392,7 +400,9 @@ module Authlete
|
|
|
392
400
|
requestObjectEncryptionAlgMatchRequired: false,
|
|
393
401
|
requestObjectEncryptionEncMatchRequired: false,
|
|
394
402
|
digestAlgorithm: nil,
|
|
395
|
-
singleAccessTokenPerSubject: false
|
|
403
|
+
singleAccessTokenPerSubject: false,
|
|
404
|
+
pkceRequired: false,
|
|
405
|
+
pkceS256Required: false,
|
|
396
406
|
}
|
|
397
407
|
end
|
|
398
408
|
|
|
@@ -474,6 +484,8 @@ module Authlete
|
|
|
474
484
|
@requestObjectEncryptionEncMatchRequired = hash[:requestObjectEncryptionEncMatchRequired]
|
|
475
485
|
@digestAlgorithm = hash[:digestAlgorithm]
|
|
476
486
|
@singleAccessTokenPerSubject = hash[:singleAccessTokenPerSubject]
|
|
487
|
+
@pkceRequired = hash[:pkceRequired]
|
|
488
|
+
@pkceS256Required = hash[:pkceS256Required]
|
|
477
489
|
end
|
|
478
490
|
|
|
479
491
|
def to_hash_value(key, var)
|
|
@@ -575,6 +575,26 @@ module Authlete
|
|
|
575
575
|
alias_method :token_exchange_by_permitted_clients_only, :tokenExchangeByPermittedClientsOnly
|
|
576
576
|
alias_method :token_exchange_by_permitted_clients_only=, :tokenExchangeByPermittedClientsOnly=
|
|
577
577
|
|
|
578
|
+
attr_accessor :tokenExchangeEncryptedJwtRejected
|
|
579
|
+
alias_method :token_exchange_encrypted_jwt_rejected, :tokenExchangeEncryptedJwtRejected
|
|
580
|
+
alias_method :token_exchange_encrypted_jwt_rejected=, :tokenExchangeEncryptedJwtRejected=
|
|
581
|
+
|
|
582
|
+
attr_accessor :tokenExchangeUnsignedJwtRejected
|
|
583
|
+
alias_method :token_exchange_unsigned_jwt_rejected, :tokenExchangeUnsignedJwtRejected
|
|
584
|
+
alias_method :token_exchange_unsigned_jwt_rejected=, :tokenExchangeUnsignedJwtRejected=
|
|
585
|
+
|
|
586
|
+
attr_accessor :jwtGrantByIdentifiableClientsOnly
|
|
587
|
+
alias_method :jwt_grant_by_identifiable_clients_only, :jwtGrantByIdentifiableClientsOnly
|
|
588
|
+
alias_method :jwt_grant_by_identifiable_clients_only=, :jwtGrantByIdentifiableClientsOnly=
|
|
589
|
+
|
|
590
|
+
attr_accessor :jwtGrantEncryptedJwtRejected
|
|
591
|
+
alias_method :jwt_grant_encrypted_jwt_rejected, :jwtGrantEncryptedJwtRejected
|
|
592
|
+
alias_method :jwt_grant_encrypted_jwt_rejected=, :jwtGrantEncryptedJwtRejected=
|
|
593
|
+
|
|
594
|
+
attr_accessor :jwtGrantUnsignedJwtRejected
|
|
595
|
+
alias_method :jwt_grant_unsigned_jwt_rejected, :jwtGrantUnsignedJwtRejected
|
|
596
|
+
alias_method :jwt_grant_unsigned_jwt_rejected=, :jwtGrantUnsignedJwtRejected=
|
|
597
|
+
|
|
578
598
|
private
|
|
579
599
|
|
|
580
600
|
def defaults
|
|
@@ -721,6 +741,11 @@ module Authlete
|
|
|
721
741
|
tokenExchangeByIdentifiableClientsOnly: false,
|
|
722
742
|
tokenExchangeByConfidentialClientsOnly: false,
|
|
723
743
|
tokenExchangeByPermittedClientsOnly: false,
|
|
744
|
+
tokenExchangeEncryptedJwtRejected: false,
|
|
745
|
+
tokenExchangeUnsignedJwtRejected: false,
|
|
746
|
+
jwtGrantByIdentifiableClientsOnly: false,
|
|
747
|
+
jwtGrantEncryptedJwtRejected: false,
|
|
748
|
+
jwtGrantUnsignedJwtRejected: false,
|
|
724
749
|
}
|
|
725
750
|
end
|
|
726
751
|
|
|
@@ -867,6 +892,11 @@ module Authlete
|
|
|
867
892
|
@tokenExchangeByIdentifiableClientsOnly = hash[:tokenExchangeByIdentifiableClientsOnly]
|
|
868
893
|
@tokenExchangeByConfidentialClientsOnly = hash[:tokenExchangeByConfidentialClientsOnly]
|
|
869
894
|
@tokenExchangeByPermittedClientsOnly = hash[:tokenExchangeByPermittedClientsOnly]
|
|
895
|
+
@tokenExchangeEncryptedJwtRejected = hash[:tokenExchangeEncryptedJwtRejected]
|
|
896
|
+
@tokenExchangeUnsignedJwtRejected = hash[:tokenExchangeUnsignedJwtRejected]
|
|
897
|
+
@jwtGrantByIdentifiableClientsOnly = hash[:jwtGrantByIdentifiableClientsOnly]
|
|
898
|
+
@jwtGrantEncryptedJwtRejected = hash[:jwtGrantEncryptedJwtRejected]
|
|
899
|
+
@jwtGrantUnsignedJwtRejected = hash[:jwtGrantUnsignedJwtRejected]
|
|
870
900
|
|
|
871
901
|
end
|
|
872
902
|
|
data/lib/authlete/version.rb
CHANGED
|
@@ -123,6 +123,8 @@ class ClientTest < Minitest::Test
|
|
|
123
123
|
REQUEST_OBJECT_ENCRYPTION_ENC_MATCH_REQUIRED = false
|
|
124
124
|
DIGEST_ALGORITHM = '<digest-algorithm>'
|
|
125
125
|
SINGLE_ACCESS_TOKEN_PER_SUBJECT = false
|
|
126
|
+
PKCE_REQUIRED = false
|
|
127
|
+
PKCE_S256_REQUIRED = false
|
|
126
128
|
|
|
127
129
|
def generate_json
|
|
128
130
|
return <<~JSON
|
|
@@ -209,11 +211,13 @@ class ClientTest < Minitest::Test
|
|
|
209
211
|
"requestObjectEncryptionAlgMatchRequired": false,
|
|
210
212
|
"requestObjectEncryptionEncMatchRequired": false,
|
|
211
213
|
"digestAlgorithm": "<digest-algorithm>",
|
|
212
|
-
"singleAccessTokenPerSubject": false
|
|
214
|
+
"singleAccessTokenPerSubject": false,
|
|
215
|
+
"pkceRequired": false,
|
|
216
|
+
"pkceS256Required": false
|
|
213
217
|
}
|
|
214
|
-
|
|
215
|
-
|
|
216
|
-
|
|
218
|
+
JSON
|
|
219
|
+
end
|
|
220
|
+
|
|
217
221
|
|
|
218
222
|
def generate_hash
|
|
219
223
|
{
|
|
@@ -299,7 +303,9 @@ class ClientTest < Minitest::Test
|
|
|
299
303
|
requestObjectEncryptionAlgMatchRequired: false,
|
|
300
304
|
requestObjectEncryptionEncMatchRequired: false,
|
|
301
305
|
digestAlgorithm: '<digest-algorithm>',
|
|
302
|
-
singleAccessTokenPerSubject: false
|
|
306
|
+
singleAccessTokenPerSubject: false,
|
|
307
|
+
pkceRequired: false,
|
|
308
|
+
pkceS256Required: false,
|
|
303
309
|
}
|
|
304
310
|
end
|
|
305
311
|
|
|
@@ -382,6 +388,8 @@ class ClientTest < Minitest::Test
|
|
|
382
388
|
obj.requestObjectEncryptionEncMatchRequired = REQUEST_OBJECT_ENCRYPTION_ENC_MATCH_REQUIRED
|
|
383
389
|
obj.digestAlgorithm = DIGEST_ALGORITHM
|
|
384
390
|
obj.singleAccessTokenPerSubject = SINGLE_ACCESS_TOKEN_PER_SUBJECT
|
|
391
|
+
obj.pkceRequired = PKCE_REQUIRED
|
|
392
|
+
obj.pkceS256Required = PKCE_S256_REQUIRED
|
|
385
393
|
end
|
|
386
394
|
|
|
387
395
|
|
|
@@ -472,6 +480,8 @@ class ClientTest < Minitest::Test
|
|
|
472
480
|
assert_equal REQUEST_OBJECT_ENCRYPTION_ENC_MATCH_REQUIRED, obj.requestObjectEncryptionEncMatchRequired
|
|
473
481
|
assert_equal DIGEST_ALGORITHM, obj.digestAlgorithm
|
|
474
482
|
assert_equal SINGLE_ACCESS_TOKEN_PER_SUBJECT, obj.singleAccessTokenPerSubject
|
|
483
|
+
assert_equal PKCE_REQUIRED, obj.pkceRequired
|
|
484
|
+
assert_equal PKCE_S256_REQUIRED, obj.pkceS256Required
|
|
475
485
|
end
|
|
476
486
|
|
|
477
487
|
|
|
@@ -186,6 +186,11 @@ class ServiceTest < Minitest::Test
|
|
|
186
186
|
TOKEN_EXCHANGE_BY_IDENTIFIABLE_CLIENTS_ONLY = false
|
|
187
187
|
TOKEN_EXCHANGE_BY_CONFIDENTIAL_CLIENTS_ONLY = false
|
|
188
188
|
TOKEN_EXCHANGE_BY_PERMITTED_CLIENTS_ONLY = false
|
|
189
|
+
TOKEN_EXCHANGE_ENCRYPTED_JWT_REJECTED = false
|
|
190
|
+
TOKEN_EXCHANGE_UNSIGNED_JWT_REJECTED = false
|
|
191
|
+
JWT_GRANT_BY_IDENTIFIABLE_CLIENTS_ONLY = false
|
|
192
|
+
JWT_GRANT_ENCRYPTED_JWT_REJECTED = false
|
|
193
|
+
JWT_GRANT_UNSIGNED_JWT_REJECTED = false
|
|
189
194
|
|
|
190
195
|
def generate_json
|
|
191
196
|
return <<~JSON
|
|
@@ -331,7 +336,12 @@ class ServiceTest < Minitest::Test
|
|
|
331
336
|
"trustAnchors": [{ "entityId": "<entity-id>", "jwks": "<jwks>" }],
|
|
332
337
|
"tokenExchangeByIdentifiableClientsOnly": false,
|
|
333
338
|
"tokenExchangeByConfidentialClientsOnly": false,
|
|
334
|
-
"tokenExchangeByPermittedClientsOnly": false
|
|
339
|
+
"tokenExchangeByPermittedClientsOnly": false,
|
|
340
|
+
"tokenExchangeEncryptedJwtRejected": false,
|
|
341
|
+
"tokenExchangeUnsignedJwtRejected": false,
|
|
342
|
+
"jwtGrantByIdentifiableClientsOnly": false,
|
|
343
|
+
"jwtGrantEncryptedJwtRejected": false,
|
|
344
|
+
"jwtGrantUnsignedJwtRejected": false
|
|
335
345
|
}
|
|
336
346
|
JSON
|
|
337
347
|
|
|
@@ -482,6 +492,11 @@ class ServiceTest < Minitest::Test
|
|
|
482
492
|
tokenExchangeByIdentifiableClientsOnly: false,
|
|
483
493
|
tokenExchangeByConfidentialClientsOnly: false,
|
|
484
494
|
tokenExchangeByPermittedClientsOnly: false,
|
|
495
|
+
tokenExchangeEncryptedJwtRejected: false,
|
|
496
|
+
tokenExchangeUnsignedJwtRejected: false,
|
|
497
|
+
jwtGrantByIdentifiableClientsOnly: false,
|
|
498
|
+
jwtGrantEncryptedJwtRejected: false,
|
|
499
|
+
jwtGrantUnsignedJwtRejected: false
|
|
485
500
|
}
|
|
486
501
|
end
|
|
487
502
|
|
|
@@ -629,6 +644,9 @@ class ServiceTest < Minitest::Test
|
|
|
629
644
|
obj.token_exchange_by_identifiable_clients_only = TOKEN_EXCHANGE_BY_IDENTIFIABLE_CLIENTS_ONLY
|
|
630
645
|
obj.token_exchange_by_confidential_clients_only = TOKEN_EXCHANGE_BY_CONFIDENTIAL_CLIENTS_ONLY
|
|
631
646
|
obj.token_exchange_by_permitted_clients_only = TOKEN_EXCHANGE_BY_PERMITTED_CLIENTS_ONLY
|
|
647
|
+
obj.jwtGrantByIdentifiableClientsOnly = JWT_GRANT_BY_IDENTIFIABLE_CLIENTS_ONLY
|
|
648
|
+
obj.jwtGrantEncryptedJwtRejected = JWT_GRANT_ENCRYPTED_JWT_REJECTED
|
|
649
|
+
obj.jwtGrantUnsignedJwtRejected = JWT_GRANT_UNSIGNED_JWT_REJECTED
|
|
632
650
|
end
|
|
633
651
|
|
|
634
652
|
|
|
@@ -790,6 +808,11 @@ class ServiceTest < Minitest::Test
|
|
|
790
808
|
assert_equal TOKEN_EXCHANGE_BY_IDENTIFIABLE_CLIENTS_ONLY, obj.token_exchange_by_identifiable_clients_only
|
|
791
809
|
assert_equal TOKEN_EXCHANGE_BY_CONFIDENTIAL_CLIENTS_ONLY, obj.token_exchange_by_confidential_clients_only
|
|
792
810
|
assert_equal TOKEN_EXCHANGE_BY_PERMITTED_CLIENTS_ONLY, obj.token_exchange_by_permitted_clients_only
|
|
811
|
+
assert_equal TOKEN_EXCHANGE_ENCRYPTED_JWT_REJECTED, obj.token_exchange_encrypted_jwt_rejected
|
|
812
|
+
assert_equal TOKEN_EXCHANGE_UNSIGNED_JWT_REJECTED, obj.token_exchange_unsigned_jwt_rejected
|
|
813
|
+
assert_equal JWT_GRANT_BY_IDENTIFIABLE_CLIENTS_ONLY, obj.jwtGrantByIdentifiableClientsOnly
|
|
814
|
+
assert_equal JWT_GRANT_ENCRYPTED_JWT_REJECTED, obj.jwtGrantEncryptedJwtRejected
|
|
815
|
+
assert_equal JWT_GRANT_UNSIGNED_JWT_REJECTED, obj.jwtGrantUnsignedJwtRejected
|
|
793
816
|
end
|
|
794
817
|
|
|
795
818
|
|
metadata
CHANGED
|
@@ -1,7 +1,7 @@
|
|
|
1
1
|
--- !ruby/object:Gem::Specification
|
|
2
2
|
name: authlete
|
|
3
3
|
version: !ruby/object:Gem::Version
|
|
4
|
-
version: 1.
|
|
4
|
+
version: 1.24.0
|
|
5
5
|
platform: ruby
|
|
6
6
|
authors:
|
|
7
7
|
- Takahiko Kawasaki
|
|
@@ -9,7 +9,7 @@ authors:
|
|
|
9
9
|
autorequire:
|
|
10
10
|
bindir: bin
|
|
11
11
|
cert_chain: []
|
|
12
|
-
date: 2022-
|
|
12
|
+
date: 2022-08-10 00:00:00.000000000 Z
|
|
13
13
|
dependencies:
|
|
14
14
|
- !ruby/object:Gem::Dependency
|
|
15
15
|
name: rest-client
|