authproto 0.3.0.beta2 → 0.3.0.beta3

data/sig/authproto/dpop/{key_manager.rbs → key_set.rbs}

@@ -1,25 +1,23 @@
 module AuthProto
   module DPoP
-    class KeyManager
+    class KeySet
       class KeyError < AuthProto::Error
       end
 
       CURVE: String
-      ALGORITHM: String
-      attr_reader keypair: JOSE::JWK
+      attr_reader key: JOSE::JWK
 
-      def initialize: (?JOSE::JWK? keypair) -> void
-      def generate_keypair: () -> JOSE::JWK
+      def initialize: (?JOSE::JWK? key) -> void
       def public_jwk: () -> json_object
-      def sign: (String data) -> JOSE::SignedBinary
       def sign_segments: (Hash[String | Symbol, untyped] header, Hash[String | Symbol, untyped] payload) -> JOSE::SignedBinary
-      def deep_stringify_keys: (untyped obj) -> untyped
-      def verify: (String signed_jws) -> bool
-      def to_jwk: (?include_private: bool) -> JOSE::Map
-      def self.from_jwk: (json_object | JOSE::Map jwk) -> KeyManager
+      def private_jwk: () -> json_object
+      def self.from_jwk: (json_object | JOSE::Map jwk) -> KeySet
 
       private
-      def generate_kid: (json_object | JOSE::Map jwk) -> String
+      def generate_keypair: () -> JOSE::JWK
+      def sign: (String data) -> JOSE::SignedBinary
+      def deep_stringify_keys: (untyped obj) -> untyped
+      def verify: (String signed_jws) -> bool
       def validate_keypair: () -> void
     end
   end

data/sig/authproto/dpop/nonce_manager.rbs

@@ -7,13 +7,13 @@ module AuthProto
       class NonceError < AuthProto::Error
       end
 
-      DEFAULT_TTL: Integer
       def initialize: (?ttl: Integer?) -> void
-      def update: (nonce: String, server_url: String) -> void
-      def get: (String server_url) -> String?
-      def clear: (String server_url) -> bool
+      def update: (nonce: String, server_url: String, session_id: String) -> void
+      def get: (server_url: String, session_id: String) -> String?
+      def clear: (server_url: String, session_id: String) -> bool
 
       private
+      def validate_session_id: (String session_id) -> void
       def normalize_server_url: (String url) -> String
       def validate_inputs: (String nonce, String server_url) -> void
       def validate_server_url: (String server_url) -> void

data/sig/authproto/dpop/proof_generator.rbs

@@ -1,35 +1,30 @@
 module AuthProto
   module DPoP
     class ProofGenerator
-      @key_manager: AuthProto::DPoP::KeyManager
-
       class ProofError < AuthProto::Error
       end
 
-      attr_reader key_manager: AuthProto::DPoP::KeyManager
-
-      def initialize: (AuthProto::DPoP::KeyManager key_manager) -> void
+      def initialize: () -> void
 
       def generate: (
+          key_set: KeySet,
           method: String,
           uri: String,
           ?nonce: String?,
-          ?access_token: String?,
-          ?ath: bool?
+          ?access_token: String?
         ) -> JOSE::SignedBinary
 
       private
 
       def validate_inputs: (String method, String uri) -> void
 
-      def build_header: () -> { typ: "dpop+jwt", alg: "ES256", jwk: Hash[String, untyped] }
+      def build_header: (KeySet key_set) -> { typ: "dpop+jwt", alg: "ES256", jwk: Hash[String, untyped] }
 
       def build_payload: (
           method: String,
           uri: String,
           ?nonce: String?,
-          ?access_token: String?,
-          ?include_ath: bool?
+          ?access_token: String?
         ) -> Hash[String, untyped]
 
       def normalize_uri: (String uri) -> String

data/sig/authproto/dpop.rbs

@@ -0,0 +1,6 @@
+module AuthProto
+  module DPoP
+    ALGORITHM: String
+    ERROR_USE_NONCE: String
+  end
+end

data/sig/authproto/http_helpers.rbs

@@ -0,0 +1,7 @@
+module AuthProto
+  module HTTPHelpers
+    private
+    def authentication_challenge: (String? header, scheme: String) -> Hash[String, String]?
+    def response_header: (http_response response, String name, ?strip_parameters: bool) -> String?
+  end
+end

data/sig/authproto/localhost_server.rbs

@@ -1,6 +1,6 @@
 module AuthProto
   class LocalhostServer
-    type metadata = Hash[String | Symbol, untyped]
+    type metadata = Hash[String | Symbol, untyped] | Metadata::ClientMetadata
     type callback_params = { code: String, state: String, iss: String }
 
     MAX_HEADER_BYTES: Integer

data/sig/authproto/metadata/authorization_server.rbs

@@ -1,6 +1,7 @@
 module AuthProto
   module Metadata
     class AuthorizationServer
+      extend HTTPHelpers
       @issuer: String
       @authorization_endpoint: String
       @token_endpoint: String

data/sig/authproto/metadata/client_metadata.rbs

@@ -2,6 +2,7 @@ module AuthProto
   module Metadata
     # Handles and validates AT Protocol OAuth client metadata.
     class ClientMetadata
+      extend HTTPHelpers
       AUTH_METHOD_PRIVATE_KEY_JWT: String
       AUTH_METHOD_NONE: String
       SCOPE_PATTERN: Regexp
@@ -55,7 +56,7 @@ module AuthProto
 
       def self.from_url: (String url) -> ClientMetadata
 
-      def self.from_localhost_url: (String url) -> ClientMetadata
+      private def self.from_localhost_url: (String url) -> ClientMetadata
 
       def confidential?: () -> bool
 

data/sig/authproto/metadata/resource_server.rbs

@@ -1,6 +1,7 @@
 module AuthProto
   module Metadata
     class ResourceServer
+      extend HTTPHelpers
       @authorization_server: String
 
       attr_reader authorization_server: String

data/sig/authproto/minisky_oauth.rbs

@@ -2,15 +2,18 @@
 # Additional methods mixed in from Minisky::Requests belong to the minisky gem.
 class Minisky
 class OAuthClient
+  include AuthProto::HTTPHelpers
   MAX_NONCE_RETRIES: Integer
   attr_reader host: String
   attr_reader oauth_client: AuthProto::Client
   attr_reader session_id: String?
 
-  def initialize: (String host, client_id: String, redirect_uri: String, ?metadata: AuthProto::json_object?, ?dpop_key: (AuthProto::json_object | JOSE::Map)?, ?signing_key: (AuthProto::json_object | JOSE::JWK)?, ?session_id: String?) -> void
+  def initialize: (String host, client_id: String, redirect_uri: String, ?metadata: AuthProto::json_object?, ?signing_key: (AuthProto::json_object | JOSE::JWK)?, ?session_id: String?) -> void
   def config: () -> nil
   def authorize: (?handle: String?, ?pds: String?, ?scope: String) -> AuthProto::authorization_result
-  def handle_callback: (code: String, state: String, iss: String) -> AuthProto::callback_result
+  def handle_callback: (
+    code: String, state: String, iss: String, expected_session_id: String
+  ) -> AuthProto::callback_result
   def get_request: (String | URI::HTTP method, ?Hash[untyped, untyped]? params, ?auth: bool, ?headers: Hash[String, String]?) -> untyped
   def post_request: (String | URI::HTTP method, ?untyped data, ?auth: bool, ?headers: Hash[String, String]?, ?params: Hash[untyped, untyped]?) -> untyped
   def log_in: (*untyped args) -> bot

data/sig/authproto/par/client.rbs

@@ -1,23 +1,19 @@
 module AuthProto
   module PAR
     class Client
+      include HTTPHelpers
       attr_reader authorization_server: Metadata::AuthorizationServer
       attr_reader par_endpoint: String
       attr_reader dpop_client: DPoP::Client
 
       def initialize: (authorization_server: Metadata::AuthorizationServer, dpop_client: DPoP::Client) -> void
-      def submit: (Request request) -> Response
-      def extract_nonce: (http_response response) -> String
+      def submit: (Request request, session: State::Session) -> Response
       def build_authorization_url: (request_uri: String, client_id: String) -> String
 
       private
-      def make_request: (Request request) -> http_response
-      def build_headers: (Request request, String dpop_proof) -> Hash[String, String]
-      def requires_nonce?: (http_response response) -> bool
-      def store_nonce: (String nonce) -> void
-      def server_origin: () -> String
+      def make_request: (Request request, session: State::Session) -> http_response
       def handle_error_response: (http_response response) -> bot
-      def process_response: (http_response response) -> Response
+      def handle_success_response: (http_response response) -> Response
     end
   end
 end

data/sig/authproto/par/client_assertion.rbs

@@ -3,9 +3,13 @@ module AuthProto
     class ClientAssertion
       class Error < AuthProto::Error
       end
+      ALGORITHM: String
       attr_reader signing_key: JOSE::JWK
       def initialize: (client_id: String, signing_key: (json_object | JOSE::JWK)) -> void
       def generate_jwt: (audience: String, ?lifetime: Integer) -> String
+
+      private
+      def validate_signing_key: ((json_object | JOSE::JWK) signing_key) -> JOSE::JWK
     end
   end
 end

data/sig/authproto/par/request.rbs

@@ -8,7 +8,6 @@ module AuthProto
       @scope: String
       @login_hint: String?
       @nonce: String?
-      @dpop_proof: String?
       @client_assertion: ClientAssertion?
 
       class Configuration
@@ -19,7 +18,6 @@ module AuthProto
         attr_accessor scope: String?
         attr_accessor login_hint: String?
         attr_accessor nonce: String?
-        attr_accessor dpop_proof: String?
         attr_accessor client_assertion: ClientAssertion?
       end
 
@@ -30,7 +28,6 @@ module AuthProto
       attr_reader scope: String
       attr_reader login_hint: String?
       attr_reader nonce: String?
-      attr_reader dpop_proof: String?
       attr_reader client_assertion: ClientAssertion?
 
       def self.build: () { (Configuration) -> untyped } -> Request
@@ -43,16 +40,10 @@ module AuthProto
 
       def build_params: (audience: String?) -> Hash[String, String]
 
-      def add_optional_params: (Hash[String, String] params) -> void
-
-      def add_client_auth_params: (Hash[String, String] params) -> void
-
       def validate_request: () -> void
 
       def validate_required_params: () -> void
 
-      def validate_scope: () -> void
-
       def validate_client_auth: () -> void
     end
   end

data/sig/authproto/state/session.rbs

@@ -4,8 +4,12 @@ module AuthProto
       include MonitorMixin
 
       attr_reader session_id: String
-      attr_reader state_token: String
+      attr_reader state_token: String?
+      attr_reader authorization_expires_at: Time?
       attr_reader client_id: String
+      attr_reader dpop_key: DPoP::KeySet
+      attr_reader signing_key_id: String?
+      attr_reader signing_key_thumbprint: String?
       attr_reader scope: String
       attr_reader pkce_verifier: String
       attr_reader pkce_challenge: String
@@ -13,12 +17,15 @@ module AuthProto
       attr_reader did: String?
       attr_reader tokens: TokenSet?
 
-      def initialize: (client_id: String, scope: String, ?auth_server: Metadata::AuthorizationServer?, ?did: String?) -> void
+      def initialize: (client_id: String, scope: String, ?auth_server: Metadata::AuthorizationServer?, ?did: String?, ?signing_key_id: String?, ?signing_key_thumbprint: String?, ?dpop_key: DPoP::KeySet, ?authorization_expires_at: Time?) -> void
+      def clear_state_token: () -> nil
       def authorization_server=: (Metadata::AuthorizationServer server) -> Metadata::AuthorizationServer
       def did=: (String did) -> String
       def tokens=: (TokenSet tokens) -> String
       def session_data: () -> AuthProto::session_data?
-      def authorized?: () -> bool
+      def pending?: () -> bool
+      def tokens_valid?: () -> bool
+      alias authorized? tokens_valid?
       def renewable?: () -> bool
     end
   end

data/sig/authproto/state/session_manager.rbs

@@ -2,14 +2,19 @@ module AuthProto
   module State
     class SessionManager
       @serializer: Serialization::Session
+      @supported_signing_keys: Hash[String, String]
 
-      def initialize: () -> void
-      def create_session: (client_id: String, scope: String, ?auth_server: Metadata::AuthorizationServer?, ?did: String?) -> Session
+      def initialize: (?supported_signing_keys: Hash[String, String]) -> void
+      def create_session: (client_id: String, scope: String, ?auth_server: Metadata::AuthorizationServer?, ?did: String?, ?signing_key_id: String?) -> Session
       def update_session: (Session session) -> Session
+      def complete_authorization: (Session session) -> Session
       def get_session: (String session_id) -> Session?
-      def get_session_by_state: (String? state) -> Session?
+      def get_session_by_state_token: (String? state) -> Session?
       def delete_session: (String session_id) -> void
       def cleanup_expired: () -> void
+
+      private
+      def session_ttl: (Session session) -> Integer?
     end
   end
 end

data/sig/authproto/state/token_set.rbs

@@ -3,14 +3,13 @@ module AuthProto
     class TokenSet
       @access_token: String
       @refresh_token: String?
-      @token_type: String
       @scope: String
       @sub: String
       @expires_at: Time
 
       attr_reader access_token: String
       attr_reader refresh_token: String?
-      attr_reader token_type: String
+      def token_type: () -> "DPoP"
       attr_reader scope: String
       attr_reader expires_at: Time
       attr_reader sub: String

data/sig/authproto/storage/key_builder.rbs

@@ -5,8 +5,7 @@ module AuthProto
       NAMESPACE_PREFIX: String
       def self.session_key: (String id) -> String
       def self.state_key: (String token) -> String
-      def self.nonce_key: (String server_url) -> String
-      def self.dpop_key: (String client_id) -> String
+      def self.nonce_key: (String session_id, String server_url) -> String
       def self.lock_key: (String namespace, String id) -> String
 
       private

data/sig/authproto/token/refresh.rbs

@@ -17,6 +17,7 @@ module AuthProto
     end
 
     class Refresh
+      include HTTPHelpers
       include MonitorMixin
       MAX_RETRIES: Integer
       BASE_DELAY: Integer
@@ -26,7 +27,7 @@ module AuthProto
       attr_reader auth_server: Metadata::AuthorizationServer
       attr_reader client_metadata: Metadata::ClientMetadata
 
-      def initialize: (session: State::Session, dpop_client: DPoP::Client, auth_server: Metadata::AuthorizationServer, client_metadata: Metadata::ClientMetadata, ?signing_key: (json_object | JOSE::JWK)?) -> void
+      def initialize: (session: State::Session, dpop_client: DPoP::Client, auth_server: Metadata::AuthorizationServer, client_metadata: Metadata::ClientMetadata, ?client_assertion: PAR::ClientAssertion?) -> void
       def perform_refresh: () -> State::TokenSet
 
       private
@@ -34,12 +35,10 @@ module AuthProto
       def calculate_delay: () -> Float
       def request_token_refresh: () -> State::TokenSet
       def make_token_request: (State::Session session) -> http_response
-      def requires_dpop_nonce?: (http_response response) -> bool
-      def extract_dpop_nonce: (http_response response) -> String
       def add_client_authentication: (Hash[Symbol, untyped] body) -> void
       def handle_refresh_response: (http_response response) -> State::TokenSet
       def process_successful_response: (http_response response) -> State::TokenSet
-      def handle_400_response: (http_response response) -> bot
+      def handle_error_response: (http_response response) -> bot
       def handle_rate_limit_response: (http_response response) -> bot
       def validate_refresh_response: (json_object data) -> void
     end

data/sig/authproto.rbs

@@ -34,16 +34,19 @@ module AuthProto
   end
 
   class Configuration
-    attr_accessor default_token_lifetime: Integer
+    attr_accessor client_assertion_lifetime: Integer
     attr_accessor dpop_nonce_lifetime: Integer
-    attr_accessor encryption: untyped
     attr_accessor http_client: _HTTPClient?
     attr_accessor logger: Logger
+    attr_accessor pending_session_ttl: Integer
     attr_accessor storage: Storage::Interface
     def initialize: () -> void
     def validate: () -> true
 
     private
+    def validate_client_assertion_lifetime: () -> void
+    def validate_dpop_nonce_lifetime: () -> void
+    def validate_pending_session_ttl: () -> void
     def validate_storage: () -> void
     def validate_http_client: () -> void
   end

metadata

@@ -1,12 +1,12 @@
 --- !ruby/object:Gem::Specification
 name: authproto
 version: !ruby/object:Gem::Version
-  version: 0.3.0.beta2
+  version: 0.3.0.beta3
 platform: ruby
 authors:
 - Josh Huckabee
 - Kuba Suder
-bindir: exe
+bindir: bin
 cert_chain: []
 date: 1980-01-02 00:00:00.000000000 Z
 dependencies:
@@ -55,21 +55,16 @@ dependencies:
 description: A Ruby library for implementing AT Protocol OAuth flows, including DPoP,
   PAR, and dynamic client registration. Supports both client and server-side implementations
   with comprehensive security features.
+email:
+- jakub.suder@gmail.com
 executables: []
 extensions: []
 extra_rdoc_files: []
 files:
-- ".rspec"
-- ".rubocop.yml"
-- ".tm_properties"
-- ".yardopts"
-- AGENTS.md
 - CHANGELOG.md
 - MIT-LICENSE.txt
 - README.md
-- Rakefile
 - SECURITY.md
-- examples/confidential_client/.gitignore
 - examples/confidential_client/Gemfile
 - examples/confidential_client/Gemfile.lock
 - examples/confidential_client/README.md
@@ -83,7 +78,6 @@ files:
 - examples/confidential_client/views/authorized.erb
 - examples/confidential_client/views/index.erb
 - examples/confidential_client/views/layout.erb
-- examples/minisky_console/.gitignore
 - examples/minisky_console/Gemfile
 - examples/minisky_console/Gemfile.lock
 - examples/minisky_console/README.md
@@ -95,14 +89,16 @@ files:
 - lib/authproto.rb
 - lib/authproto/client.rb
 - lib/authproto/configuration.rb
+- lib/authproto/dpop.rb
 - lib/authproto/dpop/client.rb
-- lib/authproto/dpop/key_manager.rb
+- lib/authproto/dpop/key_set.rb
 - lib/authproto/dpop/nonce_manager.rb
 - lib/authproto/dpop/proof_generator.rb
 - lib/authproto/dpop/stored_nonce.rb
 - lib/authproto/encryption.rb
 - lib/authproto/errors.rb
 - lib/authproto/http_client.rb
+- lib/authproto/http_helpers.rb
 - lib/authproto/insecure_http_client.rb
 - lib/authproto/localhost_server.rb
 - lib/authproto/metadata.rb
@@ -117,7 +113,6 @@ files:
 - lib/authproto/par/response.rb
 - lib/authproto/pkce.rb
 - lib/authproto/serialization/base.rb
-- lib/authproto/serialization/dpop_key.rb
 - lib/authproto/serialization/session.rb
 - lib/authproto/serialization/stored_nonce.rb
 - lib/authproto/serialization/token_set.rb
@@ -133,17 +128,18 @@ files:
 - lib/authproto/token/refresh.rb
 - lib/authproto/validated_uri.rb
 - lib/authproto/version.rb
-- misc/yard_attributes.rb
 - sig/authproto.rbs
 - sig/authproto/client.rbs
 - sig/authproto/dependencies.rbs
+- sig/authproto/dpop.rbs
 - sig/authproto/dpop/client.rbs
-- sig/authproto/dpop/key_manager.rbs
+- sig/authproto/dpop/key_set.rbs
 - sig/authproto/dpop/nonce_manager.rbs
 - sig/authproto/dpop/proof_generator.rbs
 - sig/authproto/dpop/stored_nonce.rbs
 - sig/authproto/encryption.rbs
 - sig/authproto/http_client.rbs
+- sig/authproto/http_helpers.rbs
 - sig/authproto/insecure_http_client.rbs
 - sig/authproto/localhost_server.rbs
 - sig/authproto/metadata/authorization_server.rbs
@@ -157,7 +153,6 @@ files:
 - sig/authproto/par/response.rbs
 - sig/authproto/pkce.rbs
 - sig/authproto/serialization/base.rbs
-- sig/authproto/serialization/dpop_key.rbs
 - sig/authproto/serialization/session.rbs
 - sig/authproto/serialization/stored_nonce.rbs
 - sig/authproto/serialization/token_set.rbs
@@ -174,13 +169,13 @@ files:
 - sig/authproto/token/refresh.rbs
 - sig/authproto/validated_uri.rbs
 - sig/authproto/version.rbs
-homepage: https://github.com/mackuba/authproto
+homepage: https://tangled.org/mackuba.eu/authproto
 licenses:
 - MIT
 metadata:
-  homepage_uri: https://github.com/mackuba/authproto
-  source_code_uri: https://github.com/mackuba/authproto
-  changelog_uri: https://github.com/mackuba/authproto/blob/main/CHANGELOG.md
+  bug_tracker_uri: https://tangled.org/mackuba.eu/authproto/issues
+  changelog_uri: https://tangled.org/mackuba.eu/authproto/blob/master/CHANGELOG.md
+  source_code_uri: https://tangled.org/mackuba.eu/authproto
   rubygems_mfa_required: 'true'
 rdoc_options: []
 require_paths:

data/.rspec

@@ -1 +0,0 @@
---require spec_helper

data/.rubocop.yml

@@ -1,31 +0,0 @@
-AllCops:
-  NewCops: enable
-  SuggestExtensions: false
-  TargetRubyVersion: 3.2
-
-Metrics/BlockLength:
-  Enabled: false
-
-Metrics/ClassLength:
-  Enabled: false
-
-Metrics/ModuleLength:
-  Enabled: false
-
-Metrics/MethodLength:
-  Enabled: false
-
-Metrics/AbcSize:
-  Enabled: false
-
-Metrics/PerceivedComplexity:
-  Enabled: false
-
-Metrics/CyclomaticComplexity:
-  Enabled: false
-
-Style/StringLiterals:
-  EnforcedStyle: double_quotes
-
-Style/StringLiteralsInInterpolation:
-  EnforcedStyle: double_quotes

data/.tm_properties

@@ -1 +0,0 @@
-excludeInFolderSearch = "{$excludeInFolderSearch,coverage,doc}"

data/.yardopts

@@ -1,5 +0,0 @@
---protected
---no-private
---markup markdown
---load misc/yard_attributes.rb
-lib/**/*.rb

data/AGENTS.md

@@ -1,80 +0,0 @@
-### Ruby code:
-
-- always add `# frozen_string_literal: true` at the beginning of Ruby files (both library and tests)
-- keep `require`s and `require_relative`s organized in separate blocks, ordered alphabetically in each:
-
-```
-require 'ipaddr'
-require 'socket'
-require 'timeout'
-require 'uri'
-
-require_relative 'client_metadata'
-require_relative 'validated_uri'
-```
-
-- wrap lines longer than 120 characters
-- for multi-line `if ... end` / `unless ... end` blocks, keep one empty line above/below separating them from the rest of the code in the method, unless it's at the beginning/end of the method, e.g.:
-
-```
-  def validate_grant_types(grant_types)
-    unless grant_types.include?('authorization_code')
-      raise InvalidClientMetadata, "grant_types must include authorization_code"
-    end
-
-    valid_types = %w[authorization_code refresh_token]
-```
-
-- prefer single-quote strings for strings containing identifiers without spaces, like `'code'`, `'access_token'`, and for `require`s
-- prefer double-quote strings for strings containing messages with spaces meant to be shown to the user, e.g. `puts "grant_types must include authorization_code"`
-
-### Unit tests:
-
-- use the classic RSpec `foo.should be_...` matcher style instead of `expect()`
-  - except for calling matchers on blocks as in `expect { ... }.to(not) raise_error...`
-- use the classic `it "should do this"` naming for test cases instead of `it "does this"`
-- use raw `describe` instead of `RSpec.describe` at the top level
-
-### Documentation:
-
-- use YARD with Markdown formatting
-- for class comments, keep one empty # line at the beginning and end, and one empty line above and below that, like:
-
-```
-
-  #
-  # OAuth client implementation class.
-  #
-
-  class ...
-```
-
-- for method comments, leave one empty line above, no empty # starting line, and one empty # trailing line that is immediately followed by the method definition, like:
-
-```
-
-  # Reads tokens for a session with a currently valid access token.
-  #
-  # @param session_id [String] session identifier
-  # @return [Hash{Symbol => String, Integer, nil}, nil] token details, or `nil` for missing/unauthorized sessions
-  #
-  def get_tokens(session_id)
-```
-
-- for properties, and also for one-liner classes like error types, use a compact style like:
-
-```
-
-  # Identifier of the session associated with the failure, if known.
-  # @return [String, nil]
-  attr_reader :session_id
-
-  # Error raised when token operations fail
-  class TokenError < Error; end
-
-```
-
-
-### Running code:
-
-- make sure you don't use the ancient system Ruby 2.6, but a version supported by the library (my installation uses `asdf`)

data/Rakefile

@@ -1,8 +0,0 @@
-# frozen_string_literal: true
-
-require 'bundler/gem_tasks'
-require 'rspec/core/rake_task'
-
-RSpec::Core::RakeTask.new(:spec)
-
-task default: %i[spec]

data/examples/confidential_client/.gitignore

@@ -1,6 +0,0 @@
-.env
-/config/client-metadata.json
-/config/oauth-client-metadata.json
-/config/keys.json
-/config/public-keys.json
-/db/