doorkeeper 5.1.0 → 5.5.0

data/Appraisals

@@ -1,40 +0,0 @@
-# frozen_string_literal: true
-
-appraise "rails-5-0" do
-  gem "rails", "~> 5.0.0"
-  gem "sqlite3", "~> 1.3", "< 1.4", platform: %i[ruby mswin mingw x64_mingw]
-end
-
-appraise "rails-5-1" do
-  gem "rails", "~> 5.1.0"
-  gem "sqlite3", "~> 1.3", "< 1.4", platform: %i[ruby mswin mingw x64_mingw]
-end
-
-appraise "rails-5-2" do
-  gem "rails", "~> 5.2.0"
-  gem "sqlite3", "~> 1.3", "< 1.4", platform: %i[ruby mswin mingw x64_mingw]
-end
-
-appraise "rails-6-0" do
-  gem "rails", "~> 6.0.0.beta3"
-  gem "sqlite3", "~> 1.4", platform: %i[ruby mswin mingw x64_mingw]
-
-  # TODO: Remove when rspec-rails 4.0 released
-  gem "rspec-core", github: "rspec/rspec-core"
-  gem "rspec-expectations", github: "rspec/rspec-expectations"
-  gem "rspec-mocks", github: "rspec/rspec-mocks"
-  gem "rspec-rails", github: "rspec/rspec-rails", branch: "4-0-dev"
-  gem "rspec-support", github: "rspec/rspec-support"
-end
-
-appraise "rails-master" do
-  gem "rails", git: "https://github.com/rails/rails"
-  gem "sqlite3", "~> 1.4", platform: %i[ruby mswin mingw x64_mingw]
-
-  # TODO: Remove when rspec-rails 4.0 released
-  gem "rspec-core", github: "rspec/rspec-core"
-  gem "rspec-expectations", github: "rspec/rspec-expectations"
-  gem "rspec-mocks", github: "rspec/rspec-mocks"
-  gem "rspec-rails", github: "rspec/rspec-rails", branch: "4-0-dev"
-  gem "rspec-support", github: "rspec/rspec-support"
-end

data/CODE_OF_CONDUCT.md

@@ -1,46 +0,0 @@
-# Contributor Covenant Code of Conduct
-
-## Our Pledge
-
-In the interest of fostering an open and welcoming environment, we as contributors and maintainers pledge to making participation in our project and our community a harassment-free experience for everyone, regardless of age, body size, disability, ethnicity, gender identity and expression, level of experience, nationality, personal appearance, race, religion, or sexual identity and orientation.
-
-## Our Standards
-
-Examples of behavior that contributes to creating a positive environment include:
-
-* Using welcoming and inclusive language
-* Being respectful of differing viewpoints and experiences
-* Gracefully accepting constructive criticism
-* Focusing on what is best for the community
-* Showing empathy towards other community members
-
-Examples of unacceptable behavior by participants include:
-
-* The use of sexualized language or imagery and unwelcome sexual attention or advances
-* Trolling, insulting/derogatory comments, and personal or political attacks
-* Public or private harassment
-* Publishing others' private information, such as a physical or electronic address, without explicit permission
-* Other conduct which could reasonably be considered inappropriate in a professional setting
-
-## Our Responsibilities
-
-Project maintainers are responsible for clarifying the standards of acceptable behavior and are expected to take appropriate and fair corrective action in response to any instances of unacceptable behavior.
-
-Project maintainers have the right and responsibility to remove, edit, or reject comments, commits, code, wiki edits, issues, and other contributions that are not aligned to this Code of Conduct, or to ban temporarily or permanently any contributor for other behaviors that they deem inappropriate, threatening, offensive, or harmful.
-
-## Scope
-
-This Code of Conduct applies both within project spaces and in public spaces when an individual is representing the project or its community. Examples of representing a project or community include using an official project e-mail address, posting via an official social media account, or acting as an appointed representative at an online or offline event. Representation of a project may be further defined and clarified by project maintainers.
-
-## Enforcement
-
-Instances of abusive, harassing, or otherwise unacceptable behavior may be reported by contacting the project team members or current maintainer email, specified in gemspec. The project team will review and investigate all complaints, and will respond in a way that it deems appropriate to the circumstances. The project team is obligated to maintain confidentiality with regard to the reporter of an incident. Further details of specific enforcement policies may be posted separately.
-
-Project maintainers who do not follow or enforce the Code of Conduct in good faith may face temporary or permanent repercussions as determined by other members of the project's leadership.
-
-## Attribution
-
-This Code of Conduct is adapted from the [Contributor Covenant][homepage], version 1.4, available at [http://contributor-covenant.org/version/1/4][version]
-
-[homepage]: http://contributor-covenant.org
-[version]: http://contributor-covenant.org/version/1/4/

data/CONTRIBUTING.md

@@ -1,47 +0,0 @@
-# Contributing
-
-We love pull requests from everyone. By participating in this project, you agree
-to abide by the thoughtbot [code of conduct].
-
-[code of conduct]: https://thoughtbot.com/open-source-code-of-conduct
-
-Fork, then clone the repo:
-
-    git clone git@github.com:your-username/doorkeeper.git
-
-Set up Ruby dependencies via Bundler
-
-    bundle install
-
-Make sure the tests pass:
-
-    rake
-
-Make your change.
-Write tests.
-Follow our [style guide][style].
-Make the tests pass:
-
-[style]: https://github.com/thoughtbot/guides/tree/master/style
-
-    rake
-
-Add notes on your change to the `NEWS.md` file.
-
-Write a [good commit message][commit].
-Push to your fork.
-[Submit a pull request][pr].
-
-[commit]: http://tbaggery.com/2008/04/19/a-note-about-git-commit-messages.html
-[pr]: https://github.com/doorkeeper-gem/doorkeeper/compare/
-
-If [Hound] catches style violations,
-fix them.
-
-[hound]: https://houndci.com
-
-Wait for us.
-We try to at least comment on pull requests within one business day.
-We may suggest changes.
-
-Thank you for your contribution!

data/Dangerfile

@@ -1,67 +0,0 @@
-CHANGELOG_FILE = 'NEWS.md'
-GITHUB_REPO = 'https://github.com/doorkeeper-gem/doorkeeper'
-
-def changelog_changed?
-  git.modified_files.include?(CHANGELOG_FILE) || git.added_files.include?(CHANGELOG_FILE)
-end
-
-def changelog_entry_example
-  pr_number = github.pr_json['number']
-  pr_title = github.pr_title
-                   .sub(/[?.!,;]?$/, '')
-                   .capitalize
-
-  "- [##{pr_number}]: #{pr_title}."
-end
-
-# --------------------------------------------------------------------------------------------------------------------
-# Has any changes happened inside the actual library code?
-# --------------------------------------------------------------------------------------------------------------------
-has_app_changes = !git.modified_files.grep(/lib|app/).empty?
-has_spec_changes = !git.modified_files.grep(/spec/).empty?
-
-# --------------------------------------------------------------------------------------------------------------------
-# You've made changes to lib, but didn't write any tests?
-# --------------------------------------------------------------------------------------------------------------------
-if has_app_changes && !has_spec_changes
-  warn("There're library changes, but not tests. That's OK as long as you're refactoring existing code.", sticky: false)
-end
-
-# --------------------------------------------------------------------------------------------------------------------
-# You've made changes to specs, but no library code has changed?
-# --------------------------------------------------------------------------------------------------------------------
-if !has_app_changes && has_spec_changes
-  message('We really appreciate pull requests that demonstrate issues, even without a fix. That said, the next step is to try and fix the failing tests!', sticky: false)
-end
-
-# Mainly to encourage writing up some reasoning about the PR, rather than
-# just leaving a title
-if github.pr_body.length < 10
-  fail "Please provide a summary in the Pull Request description"
-end
-
-# --------------------------------------------------------------------------------------------------------------------
-# Have you updated CHANGELOG.md?
-# --------------------------------------------------------------------------------------------------------------------
-# Add a CHANGELOG entry for app changes
-if has_app_changes && !changelog_changed?
-  markdown <<-MARKDOWN
-Here's an example of a #{CHANGELOG_FILE} entry:
-```markdown
-#{changelog_entry_example}
-```
-  MARKDOWN
-
-  warn(
-    "Please include a changelog entry. \nYou can find it at [#{CHANGELOG_FILE}](#{GITHUB_REPO}/blob/master/#{CHANGELOG_FILE})." +
-      "You can skip this warning only if you made some typo fix or other small changes that didn't affect the API."
-  )
-end
-
-if git.commits.any? { |commit| commit.message =~ /^Merge branch '#{github.branch_for_base}'/ }
-  warn('Please rebase to get rid of the merge commits in this PR')
-end
-
-if git.commits.length > 1
-  warn('Please squash all your commits to a single one')
-end

data/Gemfile

@@ -1,24 +0,0 @@
-# frozen_string_literal: true
-
-source "https://rubygems.org"
-git_source(:github) { |repo| "https://github.com/#{repo}.git" }
-
-gemspec
-
-gem "rails", "~> 6.0.0.beta3"
-
-# TODO: Remove when rspec-rails 4.0 released
-gem "rspec-core", github: "rspec/rspec-core"
-gem "rspec-expectations", github: "rspec/rspec-expectations"
-gem "rspec-mocks", github: "rspec/rspec-mocks"
-gem "rspec-rails", github: "rspec/rspec-rails", branch: "4-0-dev"
-gem "rspec-support", github: "rspec/rspec-support"
-
-gem "rubocop", "~> 0.66"
-
-gem "bcrypt", "~> 3.1", require: false
-
-gem "activerecord-jdbcsqlite3-adapter", platform: :jruby
-gem "sqlite3", "~> 1.4", platform: %i[ruby mswin mingw x64_mingw]
-
-gem "tzinfo-data", platforms: %i[mingw mswin x64_mingw]

data/RELEASING.md

@@ -1,10 +0,0 @@
-# Releasing doorkeeper
-
-How to release doorkeeper in five easy steps!
-
-1. Update `lib/doorkeeper/version.rb` file accordingly.
-2. Update `NEWS.md` to reflect the changes since last release.
-3. Commit changes: `git commit -am 'Bump to vVERSION'`
-4. Run `rake release`
-5. Announce the new release, making sure to say “thank you” to the contributors
-   who helped shape this version!

data/Rakefile

@@ -1,28 +0,0 @@
-# frozen_string_literal: true
-
-require "bundler/setup"
-require "rspec/core/rake_task"
-
-desc "Default: run specs."
-task default: :spec
-
-desc "Run all specs"
-RSpec::Core::RakeTask.new(:spec) do |config|
-  config.verbose = false
-end
-
-namespace :doorkeeper do
-  desc "Install doorkeeper in dummy app"
-  task :install do
-    cd "spec/dummy"
-    system "bundle exec rails g doorkeeper:install --force"
-  end
-
-  desc "Runs local test server"
-  task :server do
-    cd "spec/dummy"
-    system "bundle exec rails server"
-  end
-end
-
-Bundler::GemHelper.install_tasks

data/SECURITY.md

@@ -1,15 +0,0 @@
-# Reporting security issues in Doorkeeper
-
-Hello! Thank you for wanting to disclose a possible security
-vulnerability within the Doorkeeper gem! Please follow our disclosure
-policy as outlined below:
-
-1. Do NOT open up a GitHub issue with your report. Security reports
-   should be kept private until a possible fix is determined.
-2. Send an email to Nikita Bulai at bulaj.nikita AT gmail.com or one of
-   the others Doorkeeper maintainers listed in gemspec. You should receive
-   a prompt response.
-3. Be patient. Since Doorkeeper is in a stable maintenance phase, we want to
-   do as little as possible to rock the boat of the project.
-
-Thank you very much for adhering for these policies!

data/UPGRADE.md

@@ -1,2 +0,0 @@
-See [Upgrade Guides](https://github.com/doorkeeper-gem/doorkeeper/wiki/Migration-from-old-versions)
-in the project Wiki.

data/app/validators/redirect_uri_validator.rb

@@ -1,50 +0,0 @@
-# frozen_string_literal: true
-
-require "uri"
-
-class RedirectUriValidator < ActiveModel::EachValidator
-  def self.native_redirect_uri
-    Doorkeeper.configuration.native_redirect_uri
-  end
-
-  def validate_each(record, attribute, value)
-    if value.blank?
-      return if Doorkeeper.configuration.allow_blank_redirect_uri?(record)
-
-      record.errors.add(attribute, :blank)
-    else
-      value.split.each do |val|
-        uri = ::URI.parse(val)
-        next if native_redirect_uri?(uri)
-
-        record.errors.add(attribute, :forbidden_uri) if forbidden_uri?(uri)
-        record.errors.add(attribute, :fragment_present) unless uri.fragment.nil?
-        record.errors.add(attribute, :relative_uri) if uri.scheme.nil? || uri.host.nil?
-        record.errors.add(attribute, :secured_uri) if invalid_ssl_uri?(uri)
-      end
-    end
-  rescue URI::InvalidURIError
-    record.errors.add(attribute, :invalid_uri)
-  end
-
-  private
-
-  def native_redirect_uri?(uri)
-    self.class.native_redirect_uri.present? && uri.to_s == self.class.native_redirect_uri.to_s
-  end
-
-  def forbidden_uri?(uri)
-    Doorkeeper.configuration.forbid_redirect_uri.call(uri)
-  end
-
-  def invalid_ssl_uri?(uri)
-    forces_ssl = Doorkeeper.configuration.force_ssl_in_redirect_uri
-    non_https = uri.try(:scheme) == "http"
-
-    if forces_ssl.respond_to?(:call)
-      forces_ssl.call(uri) && non_https
-    else
-      forces_ssl && non_https
-    end
-  end
-end

data/bin/console

@@ -1,16 +0,0 @@
-#!/usr/bin/env ruby
-# frozen_string_literal: true
-
-require "bundler/setup"
-require "rails/all"
-require "doorkeeper"
-
-# You can add fixtures and/or initialization code here to make experimenting
-# with your gem easier. You can also use a different console, if you like.
-
-# (If you use this, don't forget to add pry to your Gemfile!)
-# require "pry"
-# Pry.start
-
-require "irb"
-IRB.start(__FILE__)

data/doorkeeper.gemspec

@@ -1,34 +0,0 @@
-# frozen_string_literal: true
-
-$LOAD_PATH.push File.expand_path("lib", __dir__)
-
-require "doorkeeper/version"
-
-Gem::Specification.new do |gem|
-  gem.name        = "doorkeeper"
-  gem.version     = Doorkeeper.gem_version
-  gem.authors     = ["Felipe Elias Philipp", "Tute Costa", "Jon Moss", "Nikita Bulai"]
-  gem.email       = %w[bulaj.nikita@gmail.com]
-  gem.homepage    = "https://github.com/doorkeeper-gem/doorkeeper"
-  gem.summary     = "OAuth 2 provider for Rails and Grape"
-  gem.description = "Doorkeeper is an OAuth 2 provider for Rails and Grape."
-  gem.license     = "MIT"
-
-  gem.files         = `git ls-files`.split("\n")
-  gem.test_files    = `git ls-files -- spec/*`.split("\n")
-  gem.require_paths = ["lib"]
-
-  gem.add_dependency "railties", ">= 5"
-  gem.required_ruby_version = ">= 2.4"
-
-  gem.add_development_dependency "appraisal"
-  gem.add_development_dependency "capybara"
-  gem.add_development_dependency "coveralls"
-  gem.add_development_dependency "danger", "~> 6.0"
-  gem.add_development_dependency "database_cleaner", "~> 1.6"
-  gem.add_development_dependency "factory_bot", "~> 5.0"
-  gem.add_development_dependency "generator_spec", "~> 0.9.3"
-  gem.add_development_dependency "grape"
-  gem.add_development_dependency "rake", ">= 11.3.0"
-  gem.add_development_dependency "rspec-rails"
-end

data/gemfiles/rails_5_0.gemfile

@@ -1,17 +0,0 @@
-# This file was generated by Appraisal
-
-source "https://rubygems.org"
-
-gem "rails", "~> 5.0.0"
-gem "rspec-core", git: "https://github.com/rspec/rspec-core.git"
-gem "rspec-expectations", git: "https://github.com/rspec/rspec-expectations.git"
-gem "rspec-mocks", git: "https://github.com/rspec/rspec-mocks.git"
-gem "rspec-rails", branch: "4-0-dev", git: "https://github.com/rspec/rspec-rails.git"
-gem "rspec-support", git: "https://github.com/rspec/rspec-support.git"
-gem "rubocop", "~> 0.66"
-gem "bcrypt", "~> 3.1", require: false
-gem "activerecord-jdbcsqlite3-adapter", platform: :jruby
-gem "sqlite3", "~> 1.3", "< 1.4", platform: [:ruby, :mswin, :mingw, :x64_mingw]
-gem "tzinfo-data", platforms: [:mingw, :mswin, :x64_mingw]
-
-gemspec path: "../"

data/gemfiles/rails_5_1.gemfile

@@ -1,17 +0,0 @@
-# This file was generated by Appraisal
-
-source "https://rubygems.org"
-
-gem "rails", "~> 5.1.0"
-gem "rspec-core", git: "https://github.com/rspec/rspec-core.git"
-gem "rspec-expectations", git: "https://github.com/rspec/rspec-expectations.git"
-gem "rspec-mocks", git: "https://github.com/rspec/rspec-mocks.git"
-gem "rspec-rails", branch: "4-0-dev", git: "https://github.com/rspec/rspec-rails.git"
-gem "rspec-support", git: "https://github.com/rspec/rspec-support.git"
-gem "rubocop", "~> 0.66"
-gem "bcrypt", "~> 3.1", require: false
-gem "activerecord-jdbcsqlite3-adapter", platform: :jruby
-gem "sqlite3", "~> 1.3", "< 1.4", platform: [:ruby, :mswin, :mingw, :x64_mingw]
-gem "tzinfo-data", platforms: [:mingw, :mswin, :x64_mingw]
-
-gemspec path: "../"

data/gemfiles/rails_5_2.gemfile

@@ -1,17 +0,0 @@
-# This file was generated by Appraisal
-
-source "https://rubygems.org"
-
-gem "rails", "~> 5.2.0"
-gem "rspec-core", git: "https://github.com/rspec/rspec-core.git"
-gem "rspec-expectations", git: "https://github.com/rspec/rspec-expectations.git"
-gem "rspec-mocks", git: "https://github.com/rspec/rspec-mocks.git"
-gem "rspec-rails", branch: "4-0-dev", git: "https://github.com/rspec/rspec-rails.git"
-gem "rspec-support", git: "https://github.com/rspec/rspec-support.git"
-gem "rubocop", "~> 0.66"
-gem "bcrypt", "~> 3.1", require: false
-gem "activerecord-jdbcsqlite3-adapter", platform: :jruby
-gem "sqlite3", "~> 1.3", "< 1.4", platform: [:ruby, :mswin, :mingw, :x64_mingw]
-gem "tzinfo-data", platforms: [:mingw, :mswin, :x64_mingw]
-
-gemspec path: "../"

data/gemfiles/rails_6_0.gemfile

@@ -1,17 +0,0 @@
-# This file was generated by Appraisal
-
-source "https://rubygems.org"
-
-gem "rails", "~> 6.0.0.beta3"
-gem "rspec-core", git: "https://github.com/rspec/rspec-core.git"
-gem "rspec-expectations", git: "https://github.com/rspec/rspec-expectations.git"
-gem "rspec-mocks", git: "https://github.com/rspec/rspec-mocks.git"
-gem "rspec-rails", branch: "4-0-dev", git: "https://github.com/rspec/rspec-rails.git"
-gem "rspec-support", git: "https://github.com/rspec/rspec-support.git"
-gem "rubocop", "~> 0.66"
-gem "bcrypt", "~> 3.1", require: false
-gem "activerecord-jdbcsqlite3-adapter", platform: :jruby
-gem "sqlite3", "~> 1.4", platform: [:ruby, :mswin, :mingw, :x64_mingw]
-gem "tzinfo-data", platforms: [:mingw, :mswin, :x64_mingw]
-
-gemspec path: "../"

data/gemfiles/rails_master.gemfile

@@ -1,17 +0,0 @@
-# This file was generated by Appraisal
-
-source "https://rubygems.org"
-
-gem "rails", git: "https://github.com/rails/rails"
-gem "rspec-core", git: "https://github.com/rspec/rspec-core.git"
-gem "rspec-expectations", git: "https://github.com/rspec/rspec-expectations.git"
-gem "rspec-mocks", git: "https://github.com/rspec/rspec-mocks.git"
-gem "rspec-rails", branch: "4-0-dev", git: "https://github.com/rspec/rspec-rails.git"
-gem "rspec-support", git: "https://github.com/rspec/rspec-support.git"
-gem "rubocop", "~> 0.66"
-gem "bcrypt", "~> 3.1", require: false
-gem "activerecord-jdbcsqlite3-adapter", platform: :jruby
-gem "sqlite3", "~> 1.4", platform: [:ruby, :mswin, :mingw, :x64_mingw]
-gem "tzinfo-data", platforms: [:mingw, :mswin, :x64_mingw]
-
-gemspec path: "../"

data/spec/controllers/application_metal_controller_spec.rb

@@ -1,64 +0,0 @@
-# frozen_string_literal: true
-
-require "spec_helper_integration"
-
-describe Doorkeeper::ApplicationMetalController do
-  controller(Doorkeeper::ApplicationMetalController) do
-    def index
-      render json: {}, status: 200
-    end
-
-    def create
-      render json: {}, status: 200
-    end
-  end
-
-  it "lazy run hooks" do
-    i = 0
-    ActiveSupport.on_load(:doorkeeper_metal_controller) { i += 1 }
-
-    expect(i).to eq 1
-  end
-
-  describe "enforce_content_type" do
-    before { allow(Doorkeeper.configuration).to receive(:enforce_content_type).and_return(flag) }
-
-    context "enabled" do
-      let(:flag) { true }
-
-      it "returns a 200 for the requests without body" do
-        get :index, params: {}
-        expect(response).to have_http_status 200
-      end
-
-      it "returns a 200 for the requests with body and correct media type" do
-        post :create, params: {}, as: :url_encoded_form
-        expect(response).to have_http_status 200
-      end
-
-      it "returns a 415 for the requests with body and incorrect media type" do
-        post :create, params: {}, as: :json
-        expect(response).to have_http_status 415
-      end
-    end
-
-    context "disabled" do
-      let(:flag) { false }
-
-      it "returns a 200 for the correct media type" do
-        get :index, as: :url_encoded_form
-        expect(response).to have_http_status 200
-      end
-
-      it "returns a 200 for an incorrect media type" do
-        get :index, as: :json
-        expect(response).to have_http_status 200
-      end
-
-      it "returns a 200 for the requests with body and incorrect media type" do
-        post :create, params: {}, as: :json
-        expect(response).to have_http_status 200
-      end
-    end
-  end
-end