authlete 1.22.0 → 1.25.0
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- checksums.yaml +4 -4
- data/lib/authlete/model/client.rb +13 -1
- data/lib/authlete/model/service.rb +30 -0
- data/lib/authlete/version.rb +1 -1
- data/test/authlete/model/test_client.rb +15 -5
- data/test/authlete/model/test_service.rb +26 -2
- metadata +2 -2
checksums.yaml
CHANGED
|
@@ -1,7 +1,7 @@
|
|
|
1
1
|
---
|
|
2
2
|
SHA256:
|
|
3
|
-
metadata.gz:
|
|
4
|
-
data.tar.gz:
|
|
3
|
+
metadata.gz: 79ece9b673c6fac13369ab9c416eb10bb32042187c6a715255aa4b57431a8e04
|
|
4
|
+
data.tar.gz: '079c970bf19094115267b90ec8bcb3bcba325344b1f5fbe1cd57dea9961f7ca9'
|
|
5
5
|
SHA512:
|
|
6
|
-
metadata.gz:
|
|
7
|
-
data.tar.gz:
|
|
6
|
+
metadata.gz: 1d5bf5c451530b58976fa7cacccd92bb3b5783789ad3dea8d20acc5b5efada2138a3bb7874eaffab2b82b22de9e859d6b10f25ae95b608ae0b5b7c71d0f528c0
|
|
7
|
+
data.tar.gz: d79415db8c6cdc3e2b595f7e7848af757f260658eef5329533bef8c6019921070ee3ab589534222fc6284ebb747e363d9b32f7e44fd77073ce3713761b0a0acd
|
|
@@ -312,6 +312,14 @@ module Authlete
|
|
|
312
312
|
attr_accessor :singleAccessTokenPerSubject
|
|
313
313
|
alias_method :single_access_token_per_subject, :singleAccessTokenPerSubject
|
|
314
314
|
alias_method :single_access_token_per_subject=, :singleAccessTokenPerSubject=
|
|
315
|
+
|
|
316
|
+
attr_accessor :pkceRequired
|
|
317
|
+
alias_method :pkce_required, :pkceRequired
|
|
318
|
+
alias_method :pkce_required=, :pkceRequired=
|
|
319
|
+
|
|
320
|
+
attr_accessor :pkceS256Required
|
|
321
|
+
alias_method :pkce_s256_required, :pkceS256Required
|
|
322
|
+
alias_method :pkce_s256_required=, :pkceS256Required=
|
|
315
323
|
private
|
|
316
324
|
|
|
317
325
|
def defaults
|
|
@@ -392,7 +400,9 @@ module Authlete
|
|
|
392
400
|
requestObjectEncryptionAlgMatchRequired: false,
|
|
393
401
|
requestObjectEncryptionEncMatchRequired: false,
|
|
394
402
|
digestAlgorithm: nil,
|
|
395
|
-
singleAccessTokenPerSubject: false
|
|
403
|
+
singleAccessTokenPerSubject: false,
|
|
404
|
+
pkceRequired: false,
|
|
405
|
+
pkceS256Required: false,
|
|
396
406
|
}
|
|
397
407
|
end
|
|
398
408
|
|
|
@@ -474,6 +484,8 @@ module Authlete
|
|
|
474
484
|
@requestObjectEncryptionEncMatchRequired = hash[:requestObjectEncryptionEncMatchRequired]
|
|
475
485
|
@digestAlgorithm = hash[:digestAlgorithm]
|
|
476
486
|
@singleAccessTokenPerSubject = hash[:singleAccessTokenPerSubject]
|
|
487
|
+
@pkceRequired = hash[:pkceRequired]
|
|
488
|
+
@pkceS256Required = hash[:pkceS256Required]
|
|
477
489
|
end
|
|
478
490
|
|
|
479
491
|
def to_hash_value(key, var)
|
|
@@ -583,6 +583,26 @@ module Authlete
|
|
|
583
583
|
alias_method :token_exchange_unsigned_jwt_rejected, :tokenExchangeUnsignedJwtRejected
|
|
584
584
|
alias_method :token_exchange_unsigned_jwt_rejected=, :tokenExchangeUnsignedJwtRejected=
|
|
585
585
|
|
|
586
|
+
attr_accessor :jwtGrantByIdentifiableClientsOnly
|
|
587
|
+
alias_method :jwt_grant_by_identifiable_clients_only, :jwtGrantByIdentifiableClientsOnly
|
|
588
|
+
alias_method :jwt_grant_by_identifiable_clients_only=, :jwtGrantByIdentifiableClientsOnly=
|
|
589
|
+
|
|
590
|
+
attr_accessor :jwtGrantEncryptedJwtRejected
|
|
591
|
+
alias_method :jwt_grant_encrypted_jwt_rejected, :jwtGrantEncryptedJwtRejected
|
|
592
|
+
alias_method :jwt_grant_encrypted_jwt_rejected=, :jwtGrantEncryptedJwtRejected=
|
|
593
|
+
|
|
594
|
+
attr_accessor :jwtGrantUnsignedJwtRejected
|
|
595
|
+
alias_method :jwt_grant_unsigned_jwt_rejected, :jwtGrantUnsignedJwtRejected
|
|
596
|
+
alias_method :jwt_grant_unsigned_jwt_rejected=, :jwtGrantUnsignedJwtRejected=
|
|
597
|
+
|
|
598
|
+
attr_accessor :federationSignatureKeyId
|
|
599
|
+
alias_method :federation_signature_key_id, :federationSignatureKeyId
|
|
600
|
+
alias_method :federation_signature_key_id=, :federationSignatureKeyId=
|
|
601
|
+
|
|
602
|
+
attr_accessor :federationConfigurationDuration
|
|
603
|
+
alias_method :federation_configuration_duration, :federationConfigurationDuration
|
|
604
|
+
alias_method :federation_configuration_duration=, :federationConfigurationDuration=
|
|
605
|
+
|
|
586
606
|
private
|
|
587
607
|
|
|
588
608
|
def defaults
|
|
@@ -731,6 +751,11 @@ module Authlete
|
|
|
731
751
|
tokenExchangeByPermittedClientsOnly: false,
|
|
732
752
|
tokenExchangeEncryptedJwtRejected: false,
|
|
733
753
|
tokenExchangeUnsignedJwtRejected: false,
|
|
754
|
+
jwtGrantByIdentifiableClientsOnly: false,
|
|
755
|
+
jwtGrantEncryptedJwtRejected: false,
|
|
756
|
+
jwtGrantUnsignedJwtRejected: false,
|
|
757
|
+
federationSignatureKeyId: nil,
|
|
758
|
+
federationConfigurationDuration: 0,
|
|
734
759
|
}
|
|
735
760
|
end
|
|
736
761
|
|
|
@@ -879,6 +904,11 @@ module Authlete
|
|
|
879
904
|
@tokenExchangeByPermittedClientsOnly = hash[:tokenExchangeByPermittedClientsOnly]
|
|
880
905
|
@tokenExchangeEncryptedJwtRejected = hash[:tokenExchangeEncryptedJwtRejected]
|
|
881
906
|
@tokenExchangeUnsignedJwtRejected = hash[:tokenExchangeUnsignedJwtRejected]
|
|
907
|
+
@jwtGrantByIdentifiableClientsOnly = hash[:jwtGrantByIdentifiableClientsOnly]
|
|
908
|
+
@jwtGrantEncryptedJwtRejected = hash[:jwtGrantEncryptedJwtRejected]
|
|
909
|
+
@jwtGrantUnsignedJwtRejected = hash[:jwtGrantUnsignedJwtRejected]
|
|
910
|
+
@federationSignatureKeyId = hash[:federationSignatureKeyId]
|
|
911
|
+
@federationConfigurationDuration = hash[:federationConfigurationDuration]
|
|
882
912
|
|
|
883
913
|
end
|
|
884
914
|
|
data/lib/authlete/version.rb
CHANGED
|
@@ -123,6 +123,8 @@ class ClientTest < Minitest::Test
|
|
|
123
123
|
REQUEST_OBJECT_ENCRYPTION_ENC_MATCH_REQUIRED = false
|
|
124
124
|
DIGEST_ALGORITHM = '<digest-algorithm>'
|
|
125
125
|
SINGLE_ACCESS_TOKEN_PER_SUBJECT = false
|
|
126
|
+
PKCE_REQUIRED = false
|
|
127
|
+
PKCE_S256_REQUIRED = false
|
|
126
128
|
|
|
127
129
|
def generate_json
|
|
128
130
|
return <<~JSON
|
|
@@ -209,11 +211,13 @@ class ClientTest < Minitest::Test
|
|
|
209
211
|
"requestObjectEncryptionAlgMatchRequired": false,
|
|
210
212
|
"requestObjectEncryptionEncMatchRequired": false,
|
|
211
213
|
"digestAlgorithm": "<digest-algorithm>",
|
|
212
|
-
"singleAccessTokenPerSubject": false
|
|
214
|
+
"singleAccessTokenPerSubject": false,
|
|
215
|
+
"pkceRequired": false,
|
|
216
|
+
"pkceS256Required": false
|
|
213
217
|
}
|
|
214
|
-
|
|
215
|
-
|
|
216
|
-
|
|
218
|
+
JSON
|
|
219
|
+
end
|
|
220
|
+
|
|
217
221
|
|
|
218
222
|
def generate_hash
|
|
219
223
|
{
|
|
@@ -299,7 +303,9 @@ class ClientTest < Minitest::Test
|
|
|
299
303
|
requestObjectEncryptionAlgMatchRequired: false,
|
|
300
304
|
requestObjectEncryptionEncMatchRequired: false,
|
|
301
305
|
digestAlgorithm: '<digest-algorithm>',
|
|
302
|
-
singleAccessTokenPerSubject: false
|
|
306
|
+
singleAccessTokenPerSubject: false,
|
|
307
|
+
pkceRequired: false,
|
|
308
|
+
pkceS256Required: false,
|
|
303
309
|
}
|
|
304
310
|
end
|
|
305
311
|
|
|
@@ -382,6 +388,8 @@ class ClientTest < Minitest::Test
|
|
|
382
388
|
obj.requestObjectEncryptionEncMatchRequired = REQUEST_OBJECT_ENCRYPTION_ENC_MATCH_REQUIRED
|
|
383
389
|
obj.digestAlgorithm = DIGEST_ALGORITHM
|
|
384
390
|
obj.singleAccessTokenPerSubject = SINGLE_ACCESS_TOKEN_PER_SUBJECT
|
|
391
|
+
obj.pkceRequired = PKCE_REQUIRED
|
|
392
|
+
obj.pkceS256Required = PKCE_S256_REQUIRED
|
|
385
393
|
end
|
|
386
394
|
|
|
387
395
|
|
|
@@ -472,6 +480,8 @@ class ClientTest < Minitest::Test
|
|
|
472
480
|
assert_equal REQUEST_OBJECT_ENCRYPTION_ENC_MATCH_REQUIRED, obj.requestObjectEncryptionEncMatchRequired
|
|
473
481
|
assert_equal DIGEST_ALGORITHM, obj.digestAlgorithm
|
|
474
482
|
assert_equal SINGLE_ACCESS_TOKEN_PER_SUBJECT, obj.singleAccessTokenPerSubject
|
|
483
|
+
assert_equal PKCE_REQUIRED, obj.pkceRequired
|
|
484
|
+
assert_equal PKCE_S256_REQUIRED, obj.pkceS256Required
|
|
475
485
|
end
|
|
476
486
|
|
|
477
487
|
|
|
@@ -188,6 +188,11 @@ class ServiceTest < Minitest::Test
|
|
|
188
188
|
TOKEN_EXCHANGE_BY_PERMITTED_CLIENTS_ONLY = false
|
|
189
189
|
TOKEN_EXCHANGE_ENCRYPTED_JWT_REJECTED = false
|
|
190
190
|
TOKEN_EXCHANGE_UNSIGNED_JWT_REJECTED = false
|
|
191
|
+
JWT_GRANT_BY_IDENTIFIABLE_CLIENTS_ONLY = false
|
|
192
|
+
JWT_GRANT_ENCRYPTED_JWT_REJECTED = false
|
|
193
|
+
JWT_GRANT_UNSIGNED_JWT_REJECTED = false
|
|
194
|
+
FEDERATION_SIGNATURE_KEY_ID = '<federation-signature-key-id>'
|
|
195
|
+
FEDERATION_CONFIGURATION_DURATION = 100
|
|
191
196
|
|
|
192
197
|
def generate_json
|
|
193
198
|
return <<~JSON
|
|
@@ -335,7 +340,12 @@ class ServiceTest < Minitest::Test
|
|
|
335
340
|
"tokenExchangeByConfidentialClientsOnly": false,
|
|
336
341
|
"tokenExchangeByPermittedClientsOnly": false,
|
|
337
342
|
"tokenExchangeEncryptedJwtRejected": false,
|
|
338
|
-
"tokenExchangeUnsignedJwtRejected": false
|
|
343
|
+
"tokenExchangeUnsignedJwtRejected": false,
|
|
344
|
+
"jwtGrantByIdentifiableClientsOnly": false,
|
|
345
|
+
"jwtGrantEncryptedJwtRejected": false,
|
|
346
|
+
"jwtGrantUnsignedJwtRejected": false,
|
|
347
|
+
"federationSignatureKeyId": "<federation-signature-key-id>",
|
|
348
|
+
"federationConfigurationDuration": 100
|
|
339
349
|
}
|
|
340
350
|
JSON
|
|
341
351
|
|
|
@@ -488,6 +498,11 @@ class ServiceTest < Minitest::Test
|
|
|
488
498
|
tokenExchangeByPermittedClientsOnly: false,
|
|
489
499
|
tokenExchangeEncryptedJwtRejected: false,
|
|
490
500
|
tokenExchangeUnsignedJwtRejected: false,
|
|
501
|
+
jwtGrantByIdentifiableClientsOnly: false,
|
|
502
|
+
jwtGrantEncryptedJwtRejected: false,
|
|
503
|
+
jwtGrantUnsignedJwtRejected: false,
|
|
504
|
+
federationSignatureKeyId: '<federation-signature-key-id>',
|
|
505
|
+
federationConfigurationDuration: 100
|
|
491
506
|
}
|
|
492
507
|
end
|
|
493
508
|
|
|
@@ -635,9 +650,13 @@ class ServiceTest < Minitest::Test
|
|
|
635
650
|
obj.token_exchange_by_identifiable_clients_only = TOKEN_EXCHANGE_BY_IDENTIFIABLE_CLIENTS_ONLY
|
|
636
651
|
obj.token_exchange_by_confidential_clients_only = TOKEN_EXCHANGE_BY_CONFIDENTIAL_CLIENTS_ONLY
|
|
637
652
|
obj.token_exchange_by_permitted_clients_only = TOKEN_EXCHANGE_BY_PERMITTED_CLIENTS_ONLY
|
|
653
|
+
obj.jwt_grant_by_identifiable_clients_only = JWT_GRANT_BY_IDENTIFIABLE_CLIENTS_ONLY
|
|
654
|
+
obj.jwt_grant_encrypted_jwt_rejected = JWT_GRANT_ENCRYPTED_JWT_REJECTED
|
|
655
|
+
obj.jwt_grant_unsigned_jwt_rejected = JWT_GRANT_UNSIGNED_JWT_REJECTED
|
|
656
|
+
obj.federation_signature_key_id = FEDERATION_SIGNATURE_KEY_ID
|
|
657
|
+
obj.federation_configuration_duration = FEDERATION_CONFIGURATION_DURATION
|
|
638
658
|
end
|
|
639
659
|
|
|
640
|
-
|
|
641
660
|
def match(obj)
|
|
642
661
|
assert_equal NUMBER, obj.number
|
|
643
662
|
assert_equal SERVICE_OWNER_NUMBER, obj.serviceOwnerNumber
|
|
@@ -798,6 +817,11 @@ class ServiceTest < Minitest::Test
|
|
|
798
817
|
assert_equal TOKEN_EXCHANGE_BY_PERMITTED_CLIENTS_ONLY, obj.token_exchange_by_permitted_clients_only
|
|
799
818
|
assert_equal TOKEN_EXCHANGE_ENCRYPTED_JWT_REJECTED, obj.token_exchange_encrypted_jwt_rejected
|
|
800
819
|
assert_equal TOKEN_EXCHANGE_UNSIGNED_JWT_REJECTED, obj.token_exchange_unsigned_jwt_rejected
|
|
820
|
+
assert_equal JWT_GRANT_BY_IDENTIFIABLE_CLIENTS_ONLY, obj.jwtGrantByIdentifiableClientsOnly
|
|
821
|
+
assert_equal JWT_GRANT_ENCRYPTED_JWT_REJECTED, obj.jwtGrantEncryptedJwtRejected
|
|
822
|
+
assert_equal JWT_GRANT_UNSIGNED_JWT_REJECTED, obj.jwtGrantUnsignedJwtRejected
|
|
823
|
+
assert_equal FEDERATION_SIGNATURE_KEY_ID, obj.federationSignatureKeyId
|
|
824
|
+
assert_equal FEDERATION_CONFIGURATION_DURATION, obj.federationConfigurationDuration
|
|
801
825
|
end
|
|
802
826
|
|
|
803
827
|
|
metadata
CHANGED
|
@@ -1,7 +1,7 @@
|
|
|
1
1
|
--- !ruby/object:Gem::Specification
|
|
2
2
|
name: authlete
|
|
3
3
|
version: !ruby/object:Gem::Version
|
|
4
|
-
version: 1.
|
|
4
|
+
version: 1.25.0
|
|
5
5
|
platform: ruby
|
|
6
6
|
authors:
|
|
7
7
|
- Takahiko Kawasaki
|
|
@@ -9,7 +9,7 @@ authors:
|
|
|
9
9
|
autorequire:
|
|
10
10
|
bindir: bin
|
|
11
11
|
cert_chain: []
|
|
12
|
-
date: 2022-
|
|
12
|
+
date: 2022-08-23 00:00:00.000000000 Z
|
|
13
13
|
dependencies:
|
|
14
14
|
- !ruby/object:Gem::Dependency
|
|
15
15
|
name: rest-client
|