doorkeeper-openid_connect 1.6.0 → 1.6.1

Sign up to get free protection for your applications and to get access to all the features.
Files changed (7) hide show
  1. checksums.yaml +4 -4
  2. data/.ruby-version +1 -1
  3. data/CHANGELOG.md +11 -1
  4. data/app/controllers/doorkeeper/openid_connect/discovery_controller.rb +2 -0
  5. data/lib/doorkeeper/openid_connect/oauth/password_access_token_request.rb +1 -1
  6. data/lib/doorkeeper/openid_connect/version.rb +1 -1
  7. metadata +3 -3
checksums.yaml CHANGED
@@ -1,7 +1,7 @@
1
1
  ---
2
2
  SHA256:
3
- metadata.gz: d467023607fa5295674a557f197d8c40ffa87122705962abc889bfbcf3e2c59a
4
- data.tar.gz: 527da818de86aab93ecd047905b77caa271a3d80e6874dcc69b6718afc14ad21
3
+ metadata.gz: 8b125dc43aa1d61bb63f9e21847c283cab2c049061aab519c6a3c7075537d749
4
+ data.tar.gz: e77fd739cd18693a7ad91531ab198d46fa3577328fef7c8301c8e0611038ab41
5
5
  SHA512:
6
- metadata.gz: b9dada4d39d61d18a86be2fb1d086d270561138df2ca7237cca65c467d9954cf5a6f2bbbbc9f8a453db1aa003c97514990106eff2f3e44fb0994cf8c132a5999
7
- data.tar.gz: dc3c4639a13b56e1d6f76b2efa1367b716e296642deb17e37ef3659847f6a309b7f5c41d2ed63657865bf1f40edfeb3189a0491607513a8dcb0187e99f56484f
6
+ metadata.gz: a9bab8209fe8082dfda99b2055b5a7c60f1181077649ed671765f68596647646cb4462744f8d3e50f224f62ae42c4d3090036fef79e9994995f47af95cff1b39
7
+ data.tar.gz: 4b5bea2726c1f2147fdacfec185dbf93cecc4fb36aa9597faf49c57fe33ac40e474b061b4d69a16e49450b26443097ec0461300d2ae4d7d60cf5e87560cd79b8
data/.ruby-version CHANGED
@@ -1 +1 @@
1
- 2.6.1
1
+ 2.6.3
data/CHANGELOG.md CHANGED
@@ -2,6 +2,16 @@
2
2
 
3
3
  No changes yet.
4
4
 
5
+ ## v1.6.1 (2019-06-07)
6
+
7
+ ### Bugfixes
8
+
9
+ - [#75] Fix return value for `after_successful_response` (thanks to @daveed)
10
+
11
+ ### Changes
12
+
13
+ - [#72] Add `revocation_endpoint` and `introspection_endpoint` to discovery response (thanks to @scarfacedeb)
14
+
5
15
  ## v1.6.0 (2019-03-06)
6
16
 
7
17
  ### Changes
@@ -16,7 +26,7 @@ No changes yet.
16
26
 
17
27
  ### Bugfixes
18
28
 
19
- - [#66] Fix an open redirect vulnerability (thanks to @meagar)
29
+ - [#66] Fix an open redirect vulnerability ([CVE-2019-9837](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-9837), thanks to @meagar)
20
30
  - [#67] Don't delete existing tokens with `prompt=consent` (thanks to @nov)
21
31
 
22
32
  ### Changes
data/app/controllers/doorkeeper/openid_connect/discovery_controller.rb CHANGED
@@ -26,6 +26,8 @@ module Doorkeeper
26
26
  issuer: openid_connect.issuer,
27
27
  authorization_endpoint: oauth_authorization_url(protocol: protocol),
28
28
  token_endpoint: oauth_token_url(protocol: protocol),
29
+ revocation_endpoint: oauth_revoke_url(protocol: protocol),
30
+ introspection_endpoint: oauth_introspect_url(protocol: protocol),
29
31
  userinfo_endpoint: oauth_userinfo_url(protocol: protocol),
30
32
  jwks_uri: oauth_discovery_keys_url(protocol: protocol),
31
33
 
data/lib/doorkeeper/openid_connect/oauth/password_access_token_request.rb CHANGED
@@ -12,9 +12,9 @@ module Doorkeeper
12
12
  private
13
13
 
14
14
  def after_successful_response
15
- super
16
15
  id_token = Doorkeeper::OpenidConnect::IdToken.new(access_token, nonce)
17
16
  @response.id_token = id_token
17
+ super
18
18
  end
19
19
  end
20
20
  end
data/lib/doorkeeper/openid_connect/version.rb CHANGED
@@ -1,5 +1,5 @@
1
1
  module Doorkeeper
2
2
  module OpenidConnect
3
- VERSION = '1.6.0'.freeze
3
+ VERSION = '1.6.1'.freeze
4
4
  end
5
5
  end
metadata CHANGED
@@ -1,7 +1,7 @@
1
1
  --- !ruby/object:Gem::Specification
2
2
  name: doorkeeper-openid_connect
3
3
  version: !ruby/object:Gem::Version
4
- version: 1.6.0
4
+ version: 1.6.1
5
5
  platform: ruby
6
6
  authors:
7
7
  - Sam Dengler
@@ -9,7 +9,7 @@ authors:
9
9
  autorequire:
10
10
  bindir: bin
11
11
  cert_chain: []
12
- date: 2019-03-06 00:00:00.000000000 Z
12
+ date: 2019-06-07 00:00:00.000000000 Z
13
13
  dependencies:
14
14
  - !ruby/object:Gem::Dependency
15
15
  name: doorkeeper
@@ -187,7 +187,7 @@ required_rubygems_version: !ruby/object:Gem::Requirement
187
187
  - !ruby/object:Gem::Version
188
188
  version: '0'
189
189
  requirements: []
190
- rubygems_version: 3.0.1
190
+ rubygems_version: 3.0.3
191
191
  signing_key:
192
192
  specification_version: 4
193
193
  summary: OpenID Connect extension for Doorkeeper.