doorkeeper-openid_connect 1.6.0 → 1.6.1

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (7) hide show
  1. checksums.yaml +4 -4
  2. data/.ruby-version +1 -1
  3. data/CHANGELOG.md +11 -1
  4. data/app/controllers/doorkeeper/openid_connect/discovery_controller.rb +2 -0
  5. data/lib/doorkeeper/openid_connect/oauth/password_access_token_request.rb +1 -1
  6. data/lib/doorkeeper/openid_connect/version.rb +1 -1
  7. metadata +3 -3
checksums.yaml CHANGED
@@ -1,7 +1,7 @@
1
1
  ---
2
2
  SHA256:
3
- metadata.gz: d467023607fa5295674a557f197d8c40ffa87122705962abc889bfbcf3e2c59a
4
- data.tar.gz: 527da818de86aab93ecd047905b77caa271a3d80e6874dcc69b6718afc14ad21
3
+ metadata.gz: 8b125dc43aa1d61bb63f9e21847c283cab2c049061aab519c6a3c7075537d749
4
+ data.tar.gz: e77fd739cd18693a7ad91531ab198d46fa3577328fef7c8301c8e0611038ab41
5
5
  SHA512:
6
- metadata.gz: b9dada4d39d61d18a86be2fb1d086d270561138df2ca7237cca65c467d9954cf5a6f2bbbbc9f8a453db1aa003c97514990106eff2f3e44fb0994cf8c132a5999
7
- data.tar.gz: dc3c4639a13b56e1d6f76b2efa1367b716e296642deb17e37ef3659847f6a309b7f5c41d2ed63657865bf1f40edfeb3189a0491607513a8dcb0187e99f56484f
6
+ metadata.gz: a9bab8209fe8082dfda99b2055b5a7c60f1181077649ed671765f68596647646cb4462744f8d3e50f224f62ae42c4d3090036fef79e9994995f47af95cff1b39
7
+ data.tar.gz: 4b5bea2726c1f2147fdacfec185dbf93cecc4fb36aa9597faf49c57fe33ac40e474b061b4d69a16e49450b26443097ec0461300d2ae4d7d60cf5e87560cd79b8
data/.ruby-version CHANGED
@@ -1 +1 @@
1
- 2.6.1
1
+ 2.6.3
data/CHANGELOG.md CHANGED
@@ -2,6 +2,16 @@
2
2
 
3
3
  No changes yet.
4
4
 
5
+ ## v1.6.1 (2019-06-07)
6
+
7
+ ### Bugfixes
8
+
9
+ - [#75] Fix return value for `after_successful_response` (thanks to @daveed)
10
+
11
+ ### Changes
12
+
13
+ - [#72] Add `revocation_endpoint` and `introspection_endpoint` to discovery response (thanks to @scarfacedeb)
14
+
5
15
  ## v1.6.0 (2019-03-06)
6
16
 
7
17
  ### Changes
@@ -16,7 +26,7 @@ No changes yet.
16
26
 
17
27
  ### Bugfixes
18
28
 
19
- - [#66] Fix an open redirect vulnerability (thanks to @meagar)
29
+ - [#66] Fix an open redirect vulnerability ([CVE-2019-9837](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-9837), thanks to @meagar)
20
30
  - [#67] Don't delete existing tokens with `prompt=consent` (thanks to @nov)
21
31
 
22
32
  ### Changes
data/app/controllers/doorkeeper/openid_connect/discovery_controller.rb CHANGED
@@ -26,6 +26,8 @@ module Doorkeeper
26
26
  issuer: openid_connect.issuer,
27
27
  authorization_endpoint: oauth_authorization_url(protocol: protocol),
28
28
  token_endpoint: oauth_token_url(protocol: protocol),
29
+ revocation_endpoint: oauth_revoke_url(protocol: protocol),
30
+ introspection_endpoint: oauth_introspect_url(protocol: protocol),
29
31
  userinfo_endpoint: oauth_userinfo_url(protocol: protocol),
30
32
  jwks_uri: oauth_discovery_keys_url(protocol: protocol),
31
33
 
data/lib/doorkeeper/openid_connect/oauth/password_access_token_request.rb CHANGED
@@ -12,9 +12,9 @@ module Doorkeeper
12
12
  private
13
13
 
14
14
  def after_successful_response
15
- super
16
15
  id_token = Doorkeeper::OpenidConnect::IdToken.new(access_token, nonce)
17
16
  @response.id_token = id_token
17
+ super
18
18
  end
19
19
  end
20
20
  end
data/lib/doorkeeper/openid_connect/version.rb CHANGED
@@ -1,5 +1,5 @@
1
1
  module Doorkeeper
2
2
  module OpenidConnect
3
- VERSION = '1.6.0'.freeze
3
+ VERSION = '1.6.1'.freeze
4
4
  end
5
5
  end
metadata CHANGED
@@ -1,7 +1,7 @@
1
1
  --- !ruby/object:Gem::Specification
2
2
  name: doorkeeper-openid_connect
3
3
  version: !ruby/object:Gem::Version
4
- version: 1.6.0
4
+ version: 1.6.1
5
5
  platform: ruby
6
6
  authors:
7
7
  - Sam Dengler
@@ -9,7 +9,7 @@ authors:
9
9
  autorequire:
10
10
  bindir: bin
11
11
  cert_chain: []
12
- date: 2019-03-06 00:00:00.000000000 Z
12
+ date: 2019-06-07 00:00:00.000000000 Z
13
13
  dependencies:
14
14
  - !ruby/object:Gem::Dependency
15
15
  name: doorkeeper
@@ -187,7 +187,7 @@ required_rubygems_version: !ruby/object:Gem::Requirement
187
187
  - !ruby/object:Gem::Version
188
188
  version: '0'
189
189
  requirements: []
190
- rubygems_version: 3.0.1
190
+ rubygems_version: 3.0.3
191
191
  signing_key:
192
192
  specification_version: 4
193
193
  summary: OpenID Connect extension for Doorkeeper.