descope 1.0.6 → 1.1.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: c34965cb6d8afe8eef75358f8a2bfe51a4c85732b7a6704352d67429be4ef2a1
-  data.tar.gz: d683b72349fe21ad68c8eb5ba3f5efc630f6d064d725200d874b0b1a07fda450
+  metadata.gz: beb56da5c28d3ae76435ec8ffd7641e39b08f89bc67a7f166f1f8278f191186a
+  data.tar.gz: e3abb55707b28c5678e09d0b0fcdfb9449b38b32b0d3f28d032ada03cd226acf
 SHA512:
-  metadata.gz: aed5e37a77c61eca6ee2e52cef996ebc5088b57dd78ed566cb2c4e21b7b939ddd5779712de35fdba59e13990872757dc8fb3a84a6c05b4bf8d169fefa281dcc9
-  data.tar.gz: 6cca87aa406e2eda34f7d38ad02178422c5b37262d0c4d5195f582ab7b4eabffe4c5508a06c10615f165de612e0a2b6caf5d14d7c19157b245354746f582810a
+  metadata.gz: fac54ea06b4b828bfc89a342c7acc0bb5ad50b0fea589d0d9860ef69923dc60919fcad3684f3317a51dfdcdc2e46392e0144d21f4f02440964f7155f8a5424fe
+  data.tar.gz: 62a41f8f2c5e4df22fbe259bc657608c66e86b9994fd803a4ba1ba7c4075cc376ceef49237256cb18acbb8915163bdf6bef03b66223318509c2fd30970abe2e1

data/.github/workflows/ci.yaml

@@ -1,4 +1,6 @@
 name: CI
+permissions:
+  contents: read
 
 on:
   push:
@@ -17,26 +19,63 @@ env:
   DESCOPE_LOG_LEVEL: ${{ github.event.inputs.DESCOPE_LOG_LEVEL || 'info' }}
 
 jobs:
-  ci:
-    name: Descope Ruby SDK CI
+  unit-tests:
+    name: Unit Tests
     runs-on: ubuntu-latest
+    permissions:
+      contents: read
+    strategy:
+      fail-fast: false
+      matrix:
+        # Run unit tests in parallel across 4 workers
+        # NOTE: ci_node_total and ci_node_index must be kept in sync
+        ci_node_total: [4]
+        ci_node_index: [0, 1, 2, 3]
     steps:
       - name: Checkout Code
-        uses: actions/checkout@v4
+        uses: actions/checkout@1af3b93b6815bc44a9784bd300feb67ff0d1eeb3 # v6.0.0
 
-      - uses: ruby/setup-ruby@v1
+      - uses: ruby/setup-ruby@8aeb6ff8030dd539317f8e1769a044873b56ea71 # v1.268.0
         with:
-          # We are not letting this step to run bundle install, we will do it later
-          bundler-cache: false
+          bundler-cache: true  # Cache bundle based on Gemfile.lock
 
-      - name: Install dependencies
-        run: bundle install
+      - name: Run RSpec Unit Tests (Parallel)
+        run: bundle exec parallel_rspec spec/lib.descope -n ${{ matrix.ci_node_total }} --only-group ${{ matrix.ci_node_index }}
 
-      - name: Run RSpec Test
-        run: bundle exec rspec spec/lib.descope
+  integration-tests:
+    name: Integration Tests
+    runs-on: ubuntu-latest
+    permissions:
+      contents: read
+    steps:
+      - name: Checkout Code
+        uses: actions/checkout@1af3b93b6815bc44a9784bd300feb67ff0d1eeb3 # v6.0.0
+
+      - uses: ruby/setup-ruby@8aeb6ff8030dd539317f8e1769a044873b56ea71 # v1.268.0
+        with:
+          bundler-cache: true  # Cache bundle based on Gemfile.lock
+
+      - name: Run Auth Integration Tests
+        env:
+          DESCOPE_MANAGEMENT_KEY: ${{ secrets.DESCOPE_MANAGEMENT_KEY }}
+          DESCOPE_PROJECT_ID: ${{ secrets.DESCOPE_PROJECT_ID }}
+        run: bundle exec rspec spec/integration/lib.descope/api/v1/auth
 
-      - name: Run RSpec Integration Tests
+      - name: Run Management Integration Tests (excluding global state tests)
         env:
           DESCOPE_MANAGEMENT_KEY: ${{ secrets.DESCOPE_MANAGEMENT_KEY }}
           DESCOPE_PROJECT_ID: ${{ secrets.DESCOPE_PROJECT_ID }}
-        run: bundle exec rspec spec/integration
+        run: |
+          bundle exec rspec spec/integration/lib.descope/api/v1/management \
+            --exclude-pattern "spec/integration/lib.descope/api/v1/management/project_spec.rb" \
+            --exclude-pattern "spec/integration/lib.descope/api/v1/management/authz_spec.rb"
+
+      - name: Run Global State Integration Tests (project & authz)
+        env:
+          DESCOPE_MANAGEMENT_KEY: ${{ secrets.DESCOPE_MANAGEMENT_KEY }}
+          DESCOPE_PROJECT_ID: ${{ secrets.DESCOPE_PROJECT_ID }}
+          AUTHZ_FULL_TEST: "true"
+        run: |
+          bundle exec rspec spec/integration/lib.descope/api/v1/management/project_spec.rb \
+                            spec/integration/lib.descope/api/v1/management/authz_spec.rb
+

data/.github/workflows/publish-gem.yaml

@@ -10,12 +10,12 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout Code
-        uses: actions/checkout@v4
+        uses: actions/checkout@1af3b93b6815bc44a9784bd300feb67ff0d1eeb3 # v6.0.0
         with:
           ref: main
           fetch-depth: 0
 
-      - uses: ruby/setup-ruby@v1
+      - uses: ruby/setup-ruby@8aeb6ff8030dd539317f8e1769a044873b56ea71 # v1.268.0
         with:
           # We are not letting this step to run bundle install, we will do it later
           bundler-cache: false
@@ -23,31 +23,11 @@ jobs:
       - name: Install dependencies
         run: bundle install
 
-      - name: Bump version
+      - name: Verify version
         run: |
-          NEW_VERSION=$(echo ${{ github.event.release.tag_name }} | sed 's/^v//') # strip the 'v' from the tag if present
-          sed -i "s/^  VERSION = '.*'/  VERSION = '${NEW_VERSION}'/g" lib/descope/version.rb
-          echo -e "Updated version file:\n $(cat lib/descope/version.rb)"
-
-      - name: Commit changes
-        run: |
-          git config --global user.name 'github-actions'
-          git config --global user.email 'github-actions@github.com'
-          git checkout main
-          git add ./lib/descope/version.rb
-          git commit -m "Bump version to $NEW_VERSION"
-          git push origin main
-        env:
-          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
-
-      - name: Repoint the tag to latest commit
-        run: |
-          git tag -d ${{ github.event.release.tag_name }}
-          git tag ${{ github.event.release.tag_name }} -m "Release $NEW_VERSION"
-          git push origin :${{ github.event.release.tag_name }}
-          git push
-        env:
-          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+          echo "Version file contents:"
+          cat lib/descope/version.rb
+          echo "Release tag: ${{ github.event.release.tag_name }}"
 
       - name: Publish to RubyGems
         run: |

data/.github/workflows/release-please.yaml

@@ -0,0 +1,36 @@
+name: Release Please
+
+on:
+  push:
+    branches:
+      - main
+
+permissions:
+  contents: read
+
+jobs:
+  release-please:
+    runs-on: ubuntu-latest
+    steps:
+      - name: Get token
+        id: get_token
+        uses: tibdex/github-app-token@3beb63f4bd073e61482598c45c71c1019b59b73a # v2.1.0
+        with:
+          private_key: ${{ secrets.RELEASE_APP_PEM }}
+          app_id: ${{ secrets.RELEASE_APP_ID }}
+
+      - uses: googleapis/release-please-action@16a9c90856f42705d54a6fda1823352bdc62cf38 # v4.4.0
+        id: release
+        with:
+          # The release-please-config.json and .release-please-manifest.json files
+          # are automatically detected in the root of the repository
+          token: ${{ steps.get_token.outputs.token }}
+
+      - name: Show outputs
+        if: ${{ steps.release.outputs.release_created }}
+        run: |
+          echo "Release created: ${{ steps.release.outputs.release_created }}"
+          echo "Tag name: ${{ steps.release.outputs.tag_name }}"
+          echo "Major: ${{ steps.release.outputs.major }}"
+          echo "Minor: ${{ steps.release.outputs.minor }}"
+          echo "Patch: ${{ steps.release.outputs.patch }}"

data/.gitignore

@@ -13,8 +13,10 @@ bin/*
 *.idea/*
 *.iml
 .DS_Store
+.history
+.vscode
 # Used by dotenv library to load environment variables.
-# .env
+.env
 
 # Ignore Byebug command history file.
 .byebug_history
@@ -56,4 +58,5 @@ build-iPhoneSimulator/
 .rvmrc
 
 # Used by RuboCop. Remote config files pulled in from inherit_from directive.
-# .rubocop-https?--*
+# .rubocop-https?--*
+.secrets

data/.release-please-manifest.json

@@ -1,3 +1,3 @@
 {
-  ".": "1.0.4"
+  ".": "1.1.0"
 }

data/.ruby-version

@@ -1 +1 @@
-3.3.0
+3.4.7

data/CHANGELOG.md

@@ -1,5 +1,26 @@
 # Change Log
 
+## [1.1.0](https://github.com/descope/descope-ruby-sdk/compare/descope-v1.0.7...descope/v1.1.0) (2025-12-13)
+
+
+### Features
+
+* add release-please workflow for automated releases ([#157](https://github.com/descope/descope-ruby-sdk/issues/157)) ([5bbfb9b](https://github.com/descope/descope-ruby-sdk/commit/5bbfb9be77c753bd1c99060c92d3d1204ce6e803))
+
+
+### Bug Fixes
+
+* examples/ruby-on-rails-api/descope/Gemfile to reduce vulnerabilities ([#122](https://github.com/descope/descope-ruby-sdk/issues/122)) ([85e77ea](https://github.com/descope/descope-ruby-sdk/commit/85e77ea9a511f208e4818e7231c50416b58f9437))
+* examples/ruby-on-rails-api/descope/Gemfile to reduce vulnerabilities ([#124](https://github.com/descope/descope-ruby-sdk/issues/124)) ([7fcd9f5](https://github.com/descope/descope-ruby-sdk/commit/7fcd9f5ed9e1af7c3adceca403da5585f0768eb9))
+* Parse Set-Cookie headers directly to handle custom domain cookies when RestClient filtering fails ([#150](https://github.com/descope/descope-ruby-sdk/issues/150)) ([bb94536](https://github.com/descope/descope-ruby-sdk/commit/bb945368b76199df3bfa0dbd635756cd28dc2709))
+* resolve integration test failures ([#162](https://github.com/descope/descope-ruby-sdk/issues/162)) ([ea880ea](https://github.com/descope/descope-ruby-sdk/commit/ea880ea91860ef67b97083a8e23c1580df95205b))
+* unparallel tests ([#165](https://github.com/descope/descope-ruby-sdk/issues/165)) ([9a08c74](https://github.com/descope/descope-ruby-sdk/commit/9a08c74a7b8e5e02dc3816aa14b61a533d1c5962))
+
+
+### Performance Improvements
+
+* optimize test suite for parallel execution with 3-5x speedup ([#159](https://github.com/descope/descope-ruby-sdk/issues/159)) ([da42969](https://github.com/descope/descope-ruby-sdk/commit/da4296952c936d028d6655bf503fc6dca0e568bb))
+
 ## [1.0.4](https://github.com/descope/descope-ruby-sdk/compare/descope/v1.0.0...descope/v1.0.4) (2024-02-13)
 
 

data/Gemfile

@@ -4,17 +4,18 @@ source 'https://rubygems.org'
 gemspec
 
 group :development do
-  gem 'rubocop', '1.63.2', require: false
-  gem 'rubocop-rails', '2.24.1', require: false
+  gem 'rubocop', '1.81.7', require: false
+  gem 'rubocop-rails', '2.34.0', require: false
 end
 
 group :test do
-  gem 'factory_bot', '6.4.6', require: false
+  gem 'factory_bot', '6.5.6', require: false
   gem 'faker', require: false
-  gem 'rack-test', '2.1.0', require: false
+  gem 'parallel_tests', require: false
+  gem 'rack-test', '2.2.0', require: false
   gem 'rotp', '6.3.0', require: false
-  gem 'rspec', '3.13.0', require: false
-  gem 'selenium-webdriver', '4.19.0', require: false
+  gem 'rspec', '3.13.2', require: false
+  gem 'selenium-webdriver', '4.38.0', require: false
   gem 'simplecov', '0.22.0', require: false
-  gem 'super_diff', '0.11.0', require: false
+  gem 'super_diff', '0.18.0', require: false
 end

data/Gemfile.lock

@@ -1,7 +1,7 @@
 PATH
   remote: .
   specs:
-    descope (1.0.5)
+    descope (1.1.0)
       addressable (~> 2.8)
       jwt (~> 2.7)
       rest-client (~> 2.1)
@@ -11,106 +11,117 @@ PATH
 GEM
   remote: https://rubygems.org/
   specs:
-    activesupport (7.1.3.2)
+    activesupport (7.2.3)
       base64
+      benchmark (>= 0.3)
       bigdecimal
-      concurrent-ruby (~> 1.0, >= 1.0.2)
+      concurrent-ruby (~> 1.0, >= 1.3.1)
       connection_pool (>= 2.2.5)
       drb
       i18n (>= 1.6, < 2)
+      logger (>= 1.4.2)
       minitest (>= 5.1)
-      mutex_m
-      tzinfo (~> 2.0)
+      securerandom (>= 0.3)
+      tzinfo (~> 2.0, >= 2.0.5)
     addressable (2.8.6)
       public_suffix (>= 2.0.2, < 6.0)
-    ast (2.4.2)
+    ast (2.4.3)
     attr_extras (7.1.0)
-    base64 (0.2.0)
-    bigdecimal (3.1.7)
-    concurrent-ruby (1.2.3)
-    connection_pool (2.4.1)
-    diff-lcs (1.5.1)
+    base64 (0.3.0)
+    benchmark (0.5.0)
+    bigdecimal (3.3.1)
+    concurrent-ruby (1.3.5)
+    connection_pool (2.5.5)
+    diff-lcs (1.6.2)
     docile (1.4.0)
     domain_name (0.6.20240107)
-    drb (2.2.1)
-    factory_bot (6.4.6)
-      activesupport (>= 5.0.0)
+    drb (2.2.3)
+    factory_bot (6.5.6)
+      activesupport (>= 6.1.0)
     faker (3.3.1)
       i18n (>= 1.8.11, < 2)
     http-accept (1.7.0)
     http-cookie (1.0.5)
       domain_name (~> 0.5)
-    i18n (1.14.4)
+    i18n (1.14.7)
       concurrent-ruby (~> 1.0)
-    json (2.7.2)
+    json (2.18.0)
     jwt (2.8.1)
       base64
-    language_server-protocol (3.17.0.3)
+    language_server-protocol (3.17.0.5)
+    lint_roller (1.1.0)
+    logger (1.7.0)
     mime-types (3.5.2)
       mime-types-data (~> 3.2015)
     mime-types-data (3.2024.0305)
-    minitest (5.22.3)
-    mutex_m (0.2.0)
+    minitest (5.27.0)
     netrc (0.11.0)
-    optimist (3.1.0)
-    parallel (1.24.0)
-    parser (3.3.0.5)
+    optimist (3.2.1)
+    parallel (1.27.0)
+    parallel_tests (5.5.0)
+      parallel
+    parser (3.3.10.0)
       ast (~> 2.4.1)
       racc
     patience_diff (1.2.0)
       optimist (~> 3.0)
+    prism (1.6.0)
     public_suffix (5.0.5)
-    racc (1.7.3)
-    rack (3.0.10)
-    rack-test (2.1.0)
+    racc (1.8.1)
+    rack (3.2.4)
+    rack-test (2.2.0)
       rack (>= 1.3)
     rainbow (3.1.1)
-    regexp_parser (2.9.0)
+    regexp_parser (2.11.3)
     rest-client (2.1.0)
       http-accept (>= 1.7.0, < 2.0)
       http-cookie (>= 1.0.2, < 2.0)
       mime-types (>= 1.16, < 4.0)
       netrc (~> 0.8)
     retryable (3.0.5)
-    rexml (3.2.6)
+    rexml (3.4.4)
     rotp (6.3.0)
-    rspec (3.13.0)
+    rspec (3.13.2)
       rspec-core (~> 3.13.0)
       rspec-expectations (~> 3.13.0)
       rspec-mocks (~> 3.13.0)
-    rspec-core (3.13.0)
+    rspec-core (3.13.6)
       rspec-support (~> 3.13.0)
-    rspec-expectations (3.13.0)
+    rspec-expectations (3.13.5)
       diff-lcs (>= 1.2.0, < 2.0)
       rspec-support (~> 3.13.0)
-    rspec-mocks (3.13.0)
+    rspec-mocks (3.13.7)
       diff-lcs (>= 1.2.0, < 2.0)
       rspec-support (~> 3.13.0)
-    rspec-support (3.13.1)
-    rubocop (1.63.2)
+    rspec-support (3.13.6)
+    rubocop (1.81.7)
       json (~> 2.3)
-      language_server-protocol (>= 3.17.0)
+      language_server-protocol (~> 3.17.0.2)
+      lint_roller (~> 1.1.0)
       parallel (~> 1.10)
       parser (>= 3.3.0.2)
       rainbow (>= 2.2.2, < 4.0)
-      regexp_parser (>= 1.8, < 3.0)
-      rexml (>= 3.2.5, < 4.0)
-      rubocop-ast (>= 1.31.1, < 2.0)
+      regexp_parser (>= 2.9.3, < 3.0)
+      rubocop-ast (>= 1.47.1, < 2.0)
       ruby-progressbar (~> 1.7)
-      unicode-display_width (>= 2.4.0, < 3.0)
-    rubocop-ast (1.31.2)
-      parser (>= 3.3.0.4)
-    rubocop-rails (2.24.1)
+      unicode-display_width (>= 2.4.0, < 4.0)
+    rubocop-ast (1.48.0)
+      parser (>= 3.3.7.2)
+      prism (~> 1.4)
+    rubocop-rails (2.34.0)
       activesupport (>= 4.2.0)
+      lint_roller (~> 1.1)
       rack (>= 1.1)
-      rubocop (>= 1.33.0, < 2.0)
-      rubocop-ast (>= 1.31.1, < 2.0)
+      rubocop (>= 1.75.0, < 2.0)
+      rubocop-ast (>= 1.44.0, < 2.0)
     ruby-progressbar (1.13.0)
-    rubyzip (2.3.2)
-    selenium-webdriver (4.19.0)
+    rubyzip (2.4.1)
+    securerandom (0.4.1)
+    selenium-webdriver (4.38.0)
       base64 (~> 0.2)
+      logger (~> 1.4)
       rexml (~> 3.2, >= 3.2.5)
-      rubyzip (>= 1.2.2, < 3.0)
+      rubyzip (>= 1.2.2, < 4.0)
       websocket (~> 1.0)
     simplecov (0.22.0)
       docile (~> 1.1)
@@ -118,32 +129,35 @@ GEM
       simplecov_json_formatter (~> 0.1)
     simplecov-html (0.12.3)
     simplecov_json_formatter (0.1.4)
-    super_diff (0.11.0)
+    super_diff (0.18.0)
       attr_extras (>= 6.2.4)
       diff-lcs
       patience_diff
     tzinfo (2.0.6)
       concurrent-ruby (~> 1.0)
-    unicode-display_width (2.5.0)
-    websocket (1.2.10)
+    unicode-display_width (2.6.0)
+    websocket (1.2.11)
     zache (0.13.1)
 
 PLATFORMS
   arm64-darwin-23
+  arm64-darwin-24
+  arm64-darwin-25
   x86_64-linux
 
 DEPENDENCIES
   descope!
-  factory_bot (= 6.4.6)
+  factory_bot (= 6.5.6)
   faker
-  rack-test (= 2.1.0)
+  parallel_tests
+  rack-test (= 2.2.0)
   rotp (= 6.3.0)
-  rspec (= 3.13.0)
-  rubocop (= 1.63.2)
-  rubocop-rails (= 2.24.1)
-  selenium-webdriver (= 4.19.0)
+  rspec (= 3.13.2)
+  rubocop (= 1.81.7)
+  rubocop-rails (= 2.34.0)
+  selenium-webdriver (= 4.38.0)
   simplecov (= 0.22.0)
-  super_diff (= 0.11.0)
+  super_diff (= 0.18.0)
 
 BUNDLED WITH
    2.5.6