conversant 1.0.17 → 1.0.18

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 964bc9a41a8eaf896bf334a98a80c10abd83ca529fe080c335f293d5ebe94ccc
-  data.tar.gz: 5b073e3f44dd178f7ac95eca6f0cce42fe6b38e837e32058774c192d561b7374
+  metadata.gz: b40e1ec2641cec2c860a7de9bb7a5bb9ff8a85bde847cf9520139f288c9883c3
+  data.tar.gz: 9c15c4e3153aad9d60782fe748e3e4324ba573307b6ba91f357be9d78cfab3d1
 SHA512:
-  metadata.gz: c46571c45a041450c1f6e002086eead91811b580f9914ad47d81fc9e39fcb8283152090625b5d0c63f1cc96ffa8b85f51ab3b72385ec99052dcd645e9bc30f6f
-  data.tar.gz: 25d9221a514ba50bdfe29c6abf456b146837adf8d9eb4bc7e1641cc8d90f27db0e276c499b6ecb7fcb6f2220c6c4f785619cc73d7b430b272760e42ead137510
+  metadata.gz: ea35d31fc8722f9955e620fb285fe8376fa57a72d18da0a1de12f44de82cff8ad71f76a0c0ce30b50a63faab4cccccdf095867df19ecf4f841762d7f64da07bc
+  data.tar.gz: 04f3fed5093b6388c9e66b7991542fe459cbd2b59dec0d50ad21b7de5e358f7f25445cd9617c748236d1b2ced8cc71aea03a7083b05ea4fccf4a75bf6cc87223

data/CHANGELOG.md

@@ -5,6 +5,26 @@ All notable changes to this project will be documented in this file.
 The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/),
 and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
 
+## [1.0.18] - 2025-10-08
+
+### Fixed
+- **Portal Service Authentication**: Fixed SESSION cookie handling to use root sessions directly
+  - Portal service now uses root SESSION + SSO_GW_SESSION2 cookies directly instead of attempting to exchange them
+  - Removed incorrect cookie extraction from response (Portal doesn't return a new SESSION cookie)
+  - Changed from extracting `response.cookies['SESSION']` to using `sessions[:session]` from SSO login
+  - Resolves "NO_SESSION_IN_RESPONSE" error when calling `portal.appliances`
+  - Matches original implementation behavior where root sessions are used for all Portal API calls
+
+### Changed
+- Updated `Portal#fetch_new_session` method to return root SESSION cookie directly after verification
+- Test call to `#{portal_endpoint}/?cId=#{customer_id}` now only validates session instead of extracting cookies
+- Log message changed from "REQUESTING_SESSION" to "USING_ROOT_SESSIONS" for clarity
+
+### Impact
+- Portal service now works correctly without "Missing SESSION for Portal" errors
+- `portal.appliances` and other Portal API methods now authenticate properly
+- Consistent with other services (CDN, LMS, VMS) that also exchange sessions but Portal uses root sessions directly
+
 ## [1.0.17] - 2025-10-01
 
 ### Fixed

data/lib/conversant/v3/services/portal.rb

@@ -146,17 +146,18 @@ module Conversant
         # Fetches a new SESSION cookie for Portal API access
         #
         # Authenticates with root portal sessions (SESSION + SSO_GW_SESSION2) and
-        # exchanges them for a customer-specific SESSION cookie. The new session
-        # is cached in Redis with the configured TTL.
+        # uses them directly for Portal API calls. Makes a test call to verify
+        # the sessions are valid.
         #
         # @return [String, nil] The SESSION cookie value, or nil if authentication fails
         def fetch_new_session
           sessions = authenticate
           return nil unless sessions && sessions[:session] && sessions[:sso_gw_session2]
 
-          logger.debug "#{identifier}.METHOD:authorize.REQUESTING_SESSION"
+          logger.debug "#{identifier}.METHOD:authorize.USING_ROOT_SESSIONS"
 
-          response = RestClient.get(
+          # Make a test call to verify sessions are valid
+          RestClient.get(
             "#{portal_endpoint}/?cId=#{customer_id}",
             {
               authority: URI.parse(portal_endpoint).hostname,
@@ -171,15 +172,11 @@ module Conversant
             }
           )
 
-          if response.cookies['SESSION']
-            session_cookie = response.cookies['SESSION']
-            redis.set(session_cache_key, session_cookie, ex: configuration.cache_ttl)
-            logger.debug "#{identifier}.METHOD:authorize.SESSION_OBTAINED"
-            session_cookie
-          else
-            logger.error "#{identifier}.METHOD:authorize.NO_SESSION_IN_RESPONSE"
-            nil
-          end
+          # Cache and return the root SESSION cookie
+          session_cookie = sessions[:session]
+          redis.set(session_cache_key, session_cookie, ex: configuration.cache_ttl)
+          logger.debug "#{identifier}.METHOD:authorize.SESSION_OBTAINED"
+          session_cookie
         rescue RestClient::Unauthorized, RestClient::Forbidden => e
           logger.error "#{identifier}.METHOD:authorize.AUTH_ERROR:#{e.message}"
           nil

data/lib/conversant/version.rb

@@ -1,5 +1,5 @@
 # frozen_string_literal: true
 
 module Conversant
-  VERSION = '1.0.17'
+  VERSION = '1.0.18'
 end

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: conversant
 version: !ruby/object:Gem::Version
-  version: 1.0.17
+  version: 1.0.18
 platform: ruby
 authors:
 - Tho Nguyen
 autorequire:
 bindir: exe
 cert_chain: []
-date: 2025-10-01 00:00:00.000000000 Z
+date: 2025-10-08 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: json