dodopayments 2.36.0 → 2.37.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 92bc6483e15b2acb4336b40dc7b0506cfcf6459c1df9534b5f2298f5c914578f
-  data.tar.gz: 031e012d15a53b9e54b167ecd3c294c82eec15c36f6553791b9831e53cdb5355
+  metadata.gz: c880e2fe0384012ad81cbc198006a6ee65af759203c8bbce66e8030039bb18d5
+  data.tar.gz: 5ab427e23feeba04ec23161257c215986f89ffea690e95cf45508d9eab3f174b
 SHA512:
-  metadata.gz: 9a58eba2a64ac73d40c74e345aca8a06e15ecea1bbaa9e64e4812431ade3778748fe4fcdf543bba82fe8031fba96f9b25ab3cfd7059fc375dd27de5d348a28a5
-  data.tar.gz: 365c61a379aab7d5500c558a76d7153dda3486a4fabdd4af7e90185752aeeb18f2fa45f38116e714e58d5394315decff720996ed7c8ff31c6c111e6e9b35510a
+  metadata.gz: 515ea4d5db9220dd321658f0f88c662e26203336402af529e1ea158bbad6ec30cef9e29f6225f7fac3235682e46a9b2aefb175c0de8f8f286f7e9ea310503303
+  data.tar.gz: cab907a551a55c24c492e28287b20e8f13e336ddc1fe2333e3357ed1229b0505e69d003c0b4802c1b0a1e58ad046fb54f410dceea6718b06d10c0ed9061e30f2

data/CHANGELOG.md

@@ -1,5 +1,13 @@
 # Changelog
 
+## [2.37.0](https://github.com/dodopayments/dodopayments-ruby/compare/v2.36.0...v2.37.0) (2026-10-28)
+
+
+### Features
+
+* **api:** regenerate SDK from latest OpenAPI spec ([085b68e](https://github.com/dodopayments/dodopayments-ruby/commit/085b68ebf669f2e35556f322b309cc985172789c))
+* **api:** regenerate SDK from latest OpenAPI spec ([f9d6fe6](https://github.com/dodopayments/dodopayments-ruby/commit/f9d6fe6886183baafb6256b064e50b70bc294fe0))
+
 ## [2.36.0](https://github.com/dodopayments/dodopayments-ruby/compare/v2.35.0...v2.36.0) (2026-10-28)
 
 

data/README.md

@@ -23,7 +23,7 @@ To use this gem, install via Bundler by adding the following to your application
 <!-- x-release-please-start-version -->
 
 ```ruby
-gem "dodopayments", "~> 2.36.0"
+gem "dodopayments", "~> 2.37.0"
 ```
 
 <!-- x-release-please-end -->
@@ -88,7 +88,7 @@ dodo_payments = Dodopayments::Client.new(
 dodo_payments.workload_identity.revoke
 ```
 
-The `Dodopayments::WorkloadIdentity` module has these token sources: `github_actions`, `gitlab`, `terraform_cloud`, `gcp`, `vercel`, `kubernetes`, `file`, `aws` (wraps your function), `static`, and `auto`. A `provider` can also be any object that responds to `call` and returns the JWT.
+The `Dodopayments::WorkloadIdentity` module has these token sources: `github_actions`, `gitlab`, `terraform_cloud`, `gcp`, `vercel`, `kubernetes`, `file`, `aws` (wraps your function), `static`, and `auto`. A `provider` can also be any object that responds to `call` and returns the JWT. `vercel` gets a Vercel OIDC token with the Dodo Payments audience from the Vercel token endpoint.
 
 Do not set `bearer_token` together with `workload_identity`. If you set neither, and `ENV["DODO_PAYMENTS_API_KEY"]` is not set, the client reads `ENV["DODO_PAYMENTS_IDENTITY_PROVIDER_ID"]` and uses the token source that `auto` finds.
 

data/lib/dodopayments/version.rb

@@ -1,5 +1,5 @@
 # frozen_string_literal: true
 
 module Dodopayments
-  VERSION = "2.36.0"
+  VERSION = "2.37.0"
 end

data/lib/dodopayments/workload_identity.rb

@@ -31,6 +31,9 @@ module Dodopayments
     GCP_METADATA_URL =
       "http://metadata.google.internal/computeMetadata/v1/instance/service-accounts/default/identity"
 
+    # @api private
+    VERCEL_TOKEN_URL = "https://oidc.vercel.com/~token"
+
     # The values that a subject token provider gets on each token exchange.
     class Context
       # The base URL of the client.
@@ -259,10 +262,32 @@ module Dodopayments
         end
       end
 
-      # Vercel OIDC federation.
+      # Vercel: gets a Vercel OIDC token for the Dodo Payments audience on each exchange.
+      # The base token comes from `ENV["VERCEL_OIDC_TOKEN_FILE"]` or `ENV["VERCEL_OIDC_TOKEN"]`.
+      # Vercel exchanges the base token for a token with the audience.
+      #
+      # @param audience [String, nil] Defaults to the origin of the client base URL.
       #
       # @return [Proc]
-      def vercel = ->(_context = nil) { env!("VERCEL_OIDC_TOKEN") }
+      def vercel(audience: nil)
+        lambda do |context|
+          body = {token: vercel_base_token, aud: audience || context.audience}
+          response = http_post_json(URI(VERCEL_TOKEN_URL), body)
+          unless response.is_a?(Net::HTTPSuccess)
+            raise Dodopayments::Errors::Error.new(
+              "The Vercel OIDC token request failed with status #{response.code}: #{response.body.to_s[0,
+                                                                                                       200]}"
+            )
+          end
+          token = vercel_token(response.body.to_s)
+          if token.nil?
+            raise Dodopayments::Errors::Error.new(
+              "The Vercel OIDC token response has no token (status #{response.code})"
+            )
+          end
+          token
+        end
+      end
 
       # Kubernetes: a projected service account token. The file is read on each exchange.
       #
@@ -329,6 +354,41 @@ module Dodopayments
         value
       end
 
+      private def vercel_base_token
+        path = ENV["VERCEL_OIDC_TOKEN_FILE"]
+        token = path.nil? || path.empty? ? ENV["VERCEL_OIDC_TOKEN"].to_s.strip : File.read(path).strip
+        if token.empty?
+          raise Dodopayments::Errors::Error.new(
+            "Cannot find a Vercel OIDC token. Set VERCEL_OIDC_TOKEN_FILE or VERCEL_OIDC_TOKEN."
+          )
+        end
+        token
+      end
+
+      private def vercel_token(body)
+        data = JSON.parse(body)
+        token = data.is_a?(Hash) ? data["token"] : nil
+        token.is_a?(String) && !token.empty? ? token : nil
+      rescue JSON::ParserError
+        nil
+      end
+
+      private def http_post_json(uri, body)
+        Net::HTTP.start(
+          uri.host,
+          uri.port,
+          use_ssl: uri.scheme == "https",
+          open_timeout: PROVIDER_TIMEOUT_IN_SECONDS,
+          read_timeout: PROVIDER_TIMEOUT_IN_SECONDS
+        ) do |http|
+          http.post(
+            uri.request_uri,
+            JSON.generate(body),
+            {"content-type" => "application/json", "accept" => "application/json"}
+          )
+        end
+      end
+
       private def http_get(uri, headers)
         response = Net::HTTP.start(
           uri.host,

data/rbi/dodopayments/workload_identity.rbi

@@ -19,6 +19,8 @@ module Dodopayments
 
     GCP_METADATA_URL = T.let(T.unsafe(nil), String)
 
+    VERCEL_TOKEN_URL = T.let(T.unsafe(nil), String)
+
     # The values that a subject token provider gets on each token exchange.
     class Context
       # The base URL of the client.
@@ -165,9 +167,17 @@ module Dodopayments
       )
       end
 
-      # Vercel OIDC federation.
-      sig { returns(Dodopayments::WorkloadIdentity::Provider) }
-      def vercel
+      # Vercel: gets a Vercel OIDC token for the Dodo Payments audience on each
+      # exchange.
+      sig do
+        params(audience: T.nilable(String)).returns(
+          Dodopayments::WorkloadIdentity::Provider
+        )
+      end
+      def vercel(
+        # Defaults to the origin of the client base URL.
+        audience: nil
+      )
       end
 
       # Kubernetes: a projected service account token. The file is read on each

data/sig/dodopayments/workload_identity.rbs

@@ -12,6 +12,8 @@ module Dodopayments
 
     GCP_METADATA_URL: String
 
+    VERCEL_TOKEN_URL: String
+
     type provider = ^(Dodopayments::WorkloadIdentity::Context context) -> String
 
     class Context
@@ -68,7 +70,9 @@ module Dodopayments
       ?audience: String?
     ) -> Dodopayments::WorkloadIdentity::provider
 
-    def self.vercel: -> Dodopayments::WorkloadIdentity::provider
+    def self.vercel: (
+      ?audience: String?
+    ) -> Dodopayments::WorkloadIdentity::provider
 
     def self.kubernetes: (
       ?path: String

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: dodopayments
 version: !ruby/object:Gem::Version
-  version: 2.36.0
+  version: 2.37.0
 platform: ruby
 authors:
 - Dodo Payments