clerk-sdk-ruby 2.0.0.alpha.1 → 2.0.3

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 1e7b69485de55997a4dac75759908e7709dcb7fdb83c92fe09d2c4748a0a74f7
-  data.tar.gz: a0afbe19f7d6a7a9a998e82b798a8a548f051505e14f3b1d50688d2aaa436d7f
+  metadata.gz: 692cc6e564176d884eb9697a0bfe4a02affda01032c73a9bf704700e45265e4f
+  data.tar.gz: 1f425dd5b92b2bb51e20661d2415c4c1d094c781c2b4a7c0b0199dce29897c74
 SHA512:
-  metadata.gz: 062e4297db4b8b20e1a6ed6bf6d69a2b0f2df0f5aecc5d716e6b883877fea484476c9d75bf7e7fda294b88774b707b60fd09a85604f7f9363b1161f622d4947a
-  data.tar.gz: 50ecd09031d4383b5d136840f8457841253c86122fb3a4a8769d8d86553fb3d2ff9323f0cb98bdde68f4990d2c4cc955b9996a3fca09a0c597e10a7bbb39d8eb
+  metadata.gz: f6497dff3fb8bc8f9a32747dd790a8481571d5b460ee83737c9ca6e43ef98db1dfa5fb8277d10f79b516c62fc58233088dcebd3aa3fd7770ba1f6311d7881b57
+  data.tar.gz: 8ed32ac76cdd9d9c3615375310808919b139bfc22480a2cdcd05cd8ec1a2b3ce68c62864576c91694888e2164856c341577dc89a2adede157996e68421b3fa1f

data/.gitignore

@@ -8,3 +8,4 @@
 /tmp/
 
 .byebug_history
+*.gem

data/CHANGELOG.md

@@ -1,13 +1,18 @@
 ## unreleased
 
-This release (v2) introduces the new networkless middleware which is compatible 
-with the new authentication scheme, dubbed *AuthV2*.
+## 2.0.0 - 2021-10-21
 
-It is backwards-incompatible with applications using AuthV1.
+This release introduces the new networkless middleware which works with the new 
+authentication scheme, [Auth v2](https://docs.clerk.dev/main-concepts/auth-v2).
+
+It is backwards-incompatible with applications using Auth v1.
 
 - [BREAKING]: In order to use this version, you must set the authVersion prop 
     accordingly in your frontend: `Clerk.load({authVersion: 2})`
 
+For more information on Auth v2, please refer to 
+https://docs.clerk.dev/main-concepts/auth-v2.
+
 ## 1.0.3 - 2021-07-21
 
 - fix: Proper endpoint for oauth_access_token method

data/README.md

@@ -1,21 +1,21 @@
 # Clerk Ruby SDK
 
-**NOTE**: This is the v2 branch of the SDK, which requires that you use AuthV2 
-in your frontend. This means that you have to set the `authVersion` prop 
-accordingly in your frontend:
-
-```javascript
-Clerk.load({authVersion: 2})
-```
-
-----------
-
 Thank you for choosing [Clerk](https://clerk.dev/) for your authentication,
 session & user management needs!
 
 This SDK allows you to call the Clerk Backend API from Ruby code without having
 to implement the calls yourself.
 
+---------
+
+**Note**: This is the v2 branch, which requires that you use [Auth 
+v2](https://docs.clerk.dev/main-concepts/auth-v2).
+
+If you're looking for the legacy authentication scheme (Auth v1), refer to the 
+[`main`](https://github.com/clerkinc/clerk-sdk-ruby/tree/main) branch.
+
+----------
+
 ## Installation
 
 Add this line to your application's Gemfile:

data/lib/clerk/rack_middleware_v2.rb

@@ -86,7 +86,7 @@ module Clerk
       end
 
       # in cross-origin XHRs the use of Authorization header is mandatory.
-      if cross_origin_request?(@req) && @header_token.nil?
+      if cross_origin_request?(@req)
         return signed_out
       end
 
@@ -147,8 +147,21 @@ module Clerk
     end
 
     def cross_origin_request?(req)
+      # origin contains scheme+host and optionally port (ommitted if 80 or 443)
+      # ref. https://www.rfc-editor.org/rfc/rfc6454#section-6.1
       origin = req.env["HTTP_ORIGIN"]
-      origin && origin != req.host
+      return false if origin.nil?
+
+      # strip scheme
+      origin = origin.strip.sub(/(^\w+:|^)\/\//, '')
+      return false if origin.empty?
+
+      # Rack's host and port helpers are reverse-proxy-aware; that
+      # is, they prefer the de-facto X-Forwarded-* headers if they're set
+      request_host = req.host
+      request_host << ":#{req.port}" if req.port != 80 && req.port != 443
+
+      origin != request_host
     end
 
     def verify_token(token)

data/lib/clerk/version.rb

@@ -1,5 +1,5 @@
 # frozen_string_literal: true
 
 module Clerk
-  VERSION = "2.0.0.alpha.1"
+  VERSION = "2.0.3"
 end

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: clerk-sdk-ruby
 version: !ruby/object:Gem::Version
-  version: 2.0.0.alpha.1
+  version: 2.0.3
 platform: ruby
 authors:
 - Clerk
 autorequire: 
 bindir: exe
 cert_chain: []
-date: 2021-10-11 00:00:00.000000000 Z
+date: 2021-10-22 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: faraday
@@ -123,9 +123,9 @@ required_ruby_version: !ruby/object:Gem::Requirement
       version: 2.4.0
 required_rubygems_version: !ruby/object:Gem::Requirement
   requirements:
-  - - ">"
+  - - ">="
     - !ruby/object:Gem::Version
-      version: 1.3.1
+      version: '0'
 requirements: []
 rubygems_version: 3.2.5
 signing_key: