doorkeeper 5.3.0 → 5.4.0.rc1

data/spec/requests/endpoints/token_spec.rb

@@ -5,7 +5,11 @@ require "spec_helper"
 describe "Token endpoint" do
   before do
     client_exists
-    authorization_code_exists application: @client, scopes: "public"
+    create_resource_owner
+    authorization_code_exists application: @client,
+                              scopes: "public",
+                              resource_owner_id: @resource_owner.id,
+                              resource_owner_type: @resource_owner.class.name
   end
 
   it "respond with correct headers" do

data/spec/requests/flows/authorization_code_errors_spec.rb

@@ -50,7 +50,10 @@ end
 describe "Authorization Code Flow Errors", "after authorization" do
   before do
     client_exists
-    authorization_code_exists application: @client
+    create_resource_owner
+    authorization_code_exists application: @client,
+                              resource_owner_id: @resource_owner.id,
+                              resource_owner_type: @resource_owner.class.name
   end
 
   it "returns :invalid_grant error when posting an already revoked grant code" do

data/spec/requests/flows/authorization_code_spec.rb

@@ -182,6 +182,7 @@ feature "Authorization Code Flow" do
     access_token_exists application: @client,
                         expires_in: -100, # even expired token
                         resource_owner_id: @resource_owner.id,
+                        resource_owner_type: @resource_owner.class.name,
                         scopes: "public write"
 
     visit authorization_endpoint_url(client: @client, scope: "public write")
@@ -506,8 +507,12 @@ describe "Authorization Code Flow" do
   end
 
   context "issuing a refresh token" do
+    let(:resource_owner) { FactoryBot.create(:resource_owner) }
+
     before do
-      authorization_code_exists application: @client
+      authorization_code_exists application: @client,
+                                resource_owner_id: resource_owner.id,
+                                resource_owner_type: resource_owner.class.name
     end
 
     it "second of simultaneous client requests get an error for revoked acccess token" do

data/spec/requests/flows/client_credentials_spec.rb

@@ -159,6 +159,47 @@ describe "Client Credentials Request" do
     end
   end
 
+  context "when revoke_previous_client_credentials_token is true" do
+    before do
+      allow(Doorkeeper.config).to receive(:reuse_access_token) { false }
+      allow(Doorkeeper.config).to receive(:revoke_previous_client_credentials_token) { true }
+    end
+
+    it "revokes the previous token" do
+      headers = authorization client.uid, client.secret
+      params  = { grant_type: "client_credentials" }
+
+      post "/oauth/token", params: params, headers: headers
+      should_have_json "access_token", Doorkeeper::AccessToken.first.token
+
+      token = Doorkeeper::AccessToken.first
+
+      post "/oauth/token", params: params, headers: headers
+      should_have_json "access_token", Doorkeeper::AccessToken.last.token
+
+      expect(token.reload.revoked?).to be_truthy
+      expect(Doorkeeper::AccessToken.last.revoked?).to be_falsey
+    end
+
+    context "with a simultaneous request" do
+      let!(:access_token) { FactoryBot.create :access_token, resource_owner_id: nil }
+
+      before do
+        allow(Doorkeeper.config.access_token_model).to receive(:matching_token_for) { access_token }
+        allow(access_token).to receive(:revoked?).and_return(true)
+      end
+
+      it "returns an error" do
+        headers = authorization client.uid, client.secret
+        params  = { grant_type: "client_credentials" }
+
+        post "/oauth/token", params: params, headers: headers
+        should_not_have_json "access_token"
+        should_have_json "error", "invalid_token_reuse"
+      end
+    end
+  end
+
   def authorization(username, password)
     credentials = ActionController::HttpAuthentication::Basic.encode_credentials username, password
     { "HTTP_AUTHORIZATION" => credentials }

data/spec/requests/flows/refresh_token_spec.rb

@@ -12,9 +12,13 @@ describe "Refresh Token Flow" do
     client_exists
   end
 
+  let(:resource_owner) { FactoryBot.create(:resource_owner) }
+
   context "issuing a refresh token" do
     before do
-      authorization_code_exists application: @client
+      authorization_code_exists application: @client,
+                                resource_owner_id: resource_owner.id,
+                                resource_owner_type: resource_owner.class.name
     end
 
     it "client gets the refresh token and refreshes it" do
@@ -43,7 +47,8 @@ describe "Refresh Token Flow" do
       @token = FactoryBot.create(
         :access_token,
         application: @client,
-        resource_owner_id: 1,
+        resource_owner_id: resource_owner.id,
+        resource_owner_type: resource_owner.class.name,
         use_refresh_token: true,
       )
     end
@@ -110,7 +115,8 @@ describe "Refresh Token Flow" do
         FactoryBot.create(
           :access_token,
           application: @client,
-          resource_owner_id: 1,
+          resource_owner_id: resource_owner.id,
+          resource_owner_type: resource_owner.class.name,
           use_refresh_token: true,
         )
       end
@@ -119,7 +125,8 @@ describe "Refresh Token Flow" do
         FactoryBot.create(
           :access_token,
           application: public_client,
-          resource_owner_id: 1,
+          resource_owner_id: resource_owner.id,
+          resource_owner_type: resource_owner.class.name,
           use_refresh_token: true,
         )
       end
@@ -185,14 +192,15 @@ describe "Refresh Token Flow" do
       end
       create_resource_owner
       _another_token = post password_token_endpoint_url(
-        client: @client, resource_owner: @resource_owner,
+        client: @client, resource_owner: resource_owner,
       )
-      last_token.update_attribute :created_at, 5.seconds.ago
+      last_token.update(created_at: 5.seconds.ago)
 
       @token = FactoryBot.create(
         :access_token,
         application: @client,
-        resource_owner_id: @resource_owner.id,
+        resource_owner_id: resource_owner.id,
+        resource_owner_type: resource_owner.class.name,
         use_refresh_token: true,
       )
       @token.update_attribute :expires_in, -100
@@ -226,7 +234,7 @@ describe "Refresh Token Flow" do
 
     def last_token
       Doorkeeper::AccessToken.last_authorized_token_for(
-        @client.id, @resource_owner.id,
+        @client.id, resource_owner,
       )
     end
   end

data/spec/requests/flows/revoke_token_spec.rb

@@ -7,151 +7,190 @@ describe "Revoke Token Flow" do
     Doorkeeper.configure { orm DOORKEEPER_ORM }
   end
 
-  context "with default parameters" do
-    let(:client_application) { FactoryBot.create :application }
-    let(:resource_owner) { User.create!(name: "John", password: "sekret") }
+  let(:private_client_application) { FactoryBot.create :application }
+  let(:public_client_application) { FactoryBot.create :application, confidential: false }
+  let(:resource_owner) { User.create!(name: "John", password: "sekret") }
+
+  context "with authenticated, confidential OAuth 2.0 client/application" do
     let(:access_token) do
       FactoryBot.create(
         :access_token,
-        application: client_application,
+        application: private_client_application,
         resource_owner_id: resource_owner.id,
+        resource_owner_type: resource_owner.class.name,
         use_refresh_token: true,
       )
     end
 
-    context "with authenticated, confidential OAuth 2.0 client/application" do
+    let(:headers) do
+      client_id = private_client_application.uid
+      client_secret = private_client_application.secret
+      credentials = Base64.encode64("#{client_id}:#{client_secret}")
+      { "HTTP_AUTHORIZATION" => "Basic #{credentials}" }
+    end
+
+    it "should revoke the access token provided" do
+      post revocation_token_endpoint_url, params: { token: access_token.token }, headers: headers
+
+      expect(response).to be_successful
+      expect(access_token.reload.revoked?).to be_truthy
+    end
+
+    it "should revoke the refresh token provided" do
+      post revocation_token_endpoint_url, params: { token: access_token.refresh_token }, headers: headers
+
+      expect(response).to be_successful
+      expect(access_token.reload.revoked?).to be_truthy
+    end
+
+    context "with invalid token to revoke" do
+      it "should not revoke any tokens and must respond with success" do
+        expect do
+          post revocation_token_endpoint_url,
+               params: { token: "I_AM_AN_INVALID_TOKEN" },
+               headers: headers
+        end.not_to(change { Doorkeeper::AccessToken.where(revoked_at: nil).count })
+
+        expect(response).to be_successful
+      end
+    end
+
+    context "with bad credentials and a valid token" do
       let(:headers) do
-        client_id = client_application.uid
-        client_secret = client_application.secret
-        credentials = Base64.encode64("#{client_id}:#{client_secret}")
+        client_id = private_client_application.uid
+        credentials = Base64.encode64("#{client_id}:poop")
         { "HTTP_AUTHORIZATION" => "Basic #{credentials}" }
       end
 
-      it "should revoke the access token provided" do
+      it "should not revoke any tokens and respond with forbidden" do
         post revocation_token_endpoint_url, params: { token: access_token.token }, headers: headers
 
-        expect(response).to be_successful
-        expect(access_token.reload.revoked?).to be_truthy
+        expect(response).to be_forbidden
+        expect(response.body).to include("unauthorized_client")
+        expect(response.body).to include(I18n.t("doorkeeper.errors.messages.revoke.unauthorized"))
+        expect(access_token.reload.revoked?).to be_falsey
       end
+    end
 
-      it "should revoke the refresh token provided" do
-        post revocation_token_endpoint_url, params: { token: access_token.refresh_token }, headers: headers
+    context "with no credentials and a valid token" do
+      it "should not revoke any tokens and respond with forbidden" do
+        post revocation_token_endpoint_url, params: { token: access_token.token }
 
-        expect(response).to be_successful
-        expect(access_token.reload.revoked?).to be_truthy
+        expect(response).to be_forbidden
+        expect(response.body).to include("unauthorized_client")
+        expect(response.body).to include(I18n.t("doorkeeper.errors.messages.revoke.unauthorized"))
+        expect(access_token.reload.revoked?).to be_falsey
       end
+    end
 
-      context "with invalid token to revoke" do
-        it "should not revoke any tokens and respond with forbidden" do
-          expect do
-            post revocation_token_endpoint_url,
-                 params: { token: "I_AM_AN_INVALID_TOKEN" },
-                 headers: headers
-          end.not_to(change { Doorkeeper::AccessToken.where(revoked_at: nil).count })
-
-          expect(response).to be_forbidden
-        end
+    context "with valid token for another client application" do
+      let(:other_client_application) { FactoryBot.create :application }
+      let(:headers) do
+        client_id = other_client_application.uid
+        client_secret = other_client_application.secret
+        credentials = Base64.encode64("#{client_id}:#{client_secret}")
+        { "HTTP_AUTHORIZATION" => "Basic #{credentials}" }
       end
 
-      context "with bad credentials and a valid token" do
-        let(:headers) do
-          client_id = client_application.uid
-          credentials = Base64.encode64("#{client_id}:poop")
-          { "HTTP_AUTHORIZATION" => "Basic #{credentials}" }
-        end
-        it "should not revoke any tokens and respond with forbidden" do
-          post revocation_token_endpoint_url, params: { token: access_token.token }, headers: headers
-
-          expect(response).to be_forbidden
-          expect(response.body).to include("unauthorized_client")
-          expect(response.body).to include(I18n.t("doorkeeper.errors.messages.revoke.unauthorized"))
-          expect(access_token.reload.revoked?).to be_falsey
-        end
+      it "should not revoke the token as it's unauthorized" do
+        post revocation_token_endpoint_url, params: { token: access_token.token }, headers: headers
+
+        expect(response).to be_forbidden
+        expect(response.body).to include("unauthorized_client")
+        expect(response.body).to include(I18n.t("doorkeeper.errors.messages.revoke.unauthorized"))
+        expect(access_token.reload.revoked?).to be_falsey
       end
+    end
+  end
+
+  context "with authenticated public OAuth 2.0 client/application" do
+    let(:access_token) do
+      FactoryBot.create(
+        :access_token,
+        application: nil,
+        resource_owner_id: resource_owner.id,
+        resource_owner_type: resource_owner.class.name,
+        use_refresh_token: true,
+      )
+    end
 
-      context "with no credentials and a valid token" do
-        it "should not revoke any tokens and respond with forbidden" do
-          post revocation_token_endpoint_url, params: { token: access_token.token }
+    it "should revoke the access token provided" do
+      post revocation_token_endpoint_url,
+           params: { client_id: public_client_application.uid, token: access_token.token },
+           headers: headers
 
-          expect(response).to be_forbidden
-          expect(response.body).to include("unauthorized_client")
-          expect(response.body).to include(I18n.t("doorkeeper.errors.messages.revoke.unauthorized"))
-          expect(access_token.reload.revoked?).to be_falsey
-        end
-      end
+      expect(response).to be_successful
+      expect(access_token.reload.revoked?).to be_truthy
+    end
 
-      context "with valid token for another client application" do
-        let(:other_client_application) { FactoryBot.create :application }
-        let(:headers) do
-          client_id = other_client_application.uid
-          client_secret = other_client_application.secret
-          credentials = Base64.encode64("#{client_id}:#{client_secret}")
-          { "HTTP_AUTHORIZATION" => "Basic #{credentials}" }
-        end
-
-        it "should not revoke the token as its unauthorized" do
-          post revocation_token_endpoint_url, params: { token: access_token.token }, headers: headers
-
-          expect(response).to be_forbidden
-          expect(response.body).to include("unauthorized_client")
-          expect(response.body).to include(I18n.t("doorkeeper.errors.messages.revoke.unauthorized"))
-          expect(access_token.reload.revoked?).to be_falsey
-        end
-      end
+    it "should revoke the refresh token provided" do
+      post revocation_token_endpoint_url,
+           params: { client_id: public_client_application.uid, token: access_token.refresh_token },
+           headers: headers
+
+      expect(response).to be_successful
+      expect(access_token.reload.revoked?).to be_truthy
     end
 
-    context "with public OAuth 2.0 client/application" do
+    it "should response with success even for invalid token" do
+      post revocation_token_endpoint_url,
+           params: { client_id: public_client_application.uid, token: "dont_exist" },
+           headers: headers
+
+      expect(response).to be_successful
+    end
+
+    context "with a valid token issued for a confidential client" do
       let(:access_token) do
         FactoryBot.create(
           :access_token,
-          application: nil,
+          application: private_client_application,
           resource_owner_id: resource_owner.id,
+          resource_owner_type: resource_owner.class.name,
           use_refresh_token: true,
         )
       end
 
-      it "should revoke the access token provided" do
-        post revocation_token_endpoint_url, params: { token: access_token.token }
+      it "should not revoke the access token provided" do
+        post revocation_token_endpoint_url,
+             params: { client_id: public_client_application.uid, token: access_token.token }
 
-        expect(response).to be_successful
-        expect(access_token.reload.revoked?).to be_truthy
+        expect(response).to be_forbidden
+        expect(response.body).to include("unauthorized_client")
+        expect(response.body).to include(I18n.t("doorkeeper.errors.messages.revoke.unauthorized"))
+        expect(access_token.reload.revoked?).to be_falsey
       end
 
-      it "should revoke the refresh token provided" do
-        post revocation_token_endpoint_url, params: { token: access_token.refresh_token }
+      it "should not revoke the refresh token provided" do
+        post revocation_token_endpoint_url,
+             params: { client_id: public_client_application.uid, token: access_token.token }
 
-        expect(response).to be_successful
-        expect(access_token.reload.revoked?).to be_truthy
+        expect(response).to be_forbidden
+        expect(response.body).to include("unauthorized_client")
+        expect(response.body).to include(I18n.t("doorkeeper.errors.messages.revoke.unauthorized"))
+        expect(access_token.reload.revoked?).to be_falsey
       end
+    end
+  end
 
-      context "with a valid token issued for a confidential client" do
-        let(:access_token) do
-          FactoryBot.create(
-            :access_token,
-            application: client_application,
-            resource_owner_id: resource_owner.id,
-            use_refresh_token: true,
-          )
-        end
-
-        it "should not revoke the access token provided" do
-          post revocation_token_endpoint_url, params: { token: access_token.token }
-
-          expect(response).to be_forbidden
-          expect(response.body).to include("unauthorized_client")
-          expect(response.body).to include(I18n.t("doorkeeper.errors.messages.revoke.unauthorized"))
-          expect(access_token.reload.revoked?).to be_falsey
-        end
-
-        it "should not revoke the refresh token provided" do
-          post revocation_token_endpoint_url, params: { token: access_token.token }
-
-          expect(response).to be_forbidden
-          expect(response.body).to include("unauthorized_client")
-          expect(response.body).to include(I18n.t("doorkeeper.errors.messages.revoke.unauthorized"))
-          expect(access_token.reload.revoked?).to be_falsey
-        end
-      end
+  context "without client authentication" do
+    let(:access_token) do
+      FactoryBot.create(
+        :access_token,
+        application: nil,
+        resource_owner_id: resource_owner.id,
+        resource_owner_type: resource_owner.class.name,
+        use_refresh_token: true,
+      )
+    end
+
+    it "shouldn't remove the token and must response with an error" do
+      post revocation_token_endpoint_url,
+           params: { token: access_token.token },
+           headers: headers
+
+      expect(response).not_to be_successful
+      expect(access_token.reload.revoked?).to be_falsey
     end
   end
 end

data/spec/support/helpers/access_token_request_helper.rb

@@ -5,6 +5,7 @@ module AccessTokenRequestHelper
     attributes = {
       application: client,
       resource_owner_id: resource_owner.id,
+      resource_owner_type: resource_owner.class.name,
     }.merge(access_token_attributes)
     FactoryBot.create(:access_token, attributes)
   end

data/spec/support/helpers/authorization_request_helper.rb

@@ -3,19 +3,19 @@
 module AuthorizationRequestHelper
   def resource_owner_is_authenticated(resource_owner = nil)
     resource_owner ||= User.create!(name: "Joe", password: "sekret")
-    Doorkeeper.configuration.instance_variable_set(:@authenticate_resource_owner, proc { resource_owner })
+    Doorkeeper.config.instance_variable_set(:@authenticate_resource_owner, proc { resource_owner })
   end
 
   def resource_owner_is_not_authenticated
-    Doorkeeper.configuration.instance_variable_set(:@authenticate_resource_owner, proc { redirect_to("/sign_in") })
+    Doorkeeper.config.instance_variable_set(:@authenticate_resource_owner, proc { redirect_to("/sign_in") })
   end
 
   def default_scopes_exist(*scopes)
-    Doorkeeper.configuration.instance_variable_set(:@default_scopes, Doorkeeper::OAuth::Scopes.from_array(scopes))
+    Doorkeeper.config.instance_variable_set(:@default_scopes, Doorkeeper::OAuth::Scopes.from_array(scopes))
   end
 
   def optional_scopes_exist(*scopes)
-    Doorkeeper.configuration.instance_variable_set(:@optional_scopes, Doorkeeper::OAuth::Scopes.from_array(scopes))
+    Doorkeeper.config.instance_variable_set(:@optional_scopes, Doorkeeper::OAuth::Scopes.from_array(scopes))
   end
 
   def client_should_be_authorized(client)

data/spec/support/helpers/config_helper.rb

@@ -4,7 +4,7 @@ module ConfigHelper
   def config_is_set(setting, value = nil, &block)
     setting_ivar = "@#{setting}"
     value = block_given? ? block : value
-    Doorkeeper.configuration.instance_variable_set(setting_ivar, value)
+    Doorkeeper.config.instance_variable_set(setting_ivar, value)
   end
 end
 

data/spec/support/shared/controllers_shared_context.rb

@@ -40,13 +40,13 @@ end
 shared_context "authenticated resource owner" do
   before do
     user = double(:resource, id: 1)
-    allow(Doorkeeper.configuration).to receive(:authenticate_resource_owner) { proc { user } }
+    allow(Doorkeeper.config).to receive(:authenticate_resource_owner) { proc { user } }
   end
 end
 
 shared_context "not authenticated resource owner" do
   before do
-    allow(Doorkeeper.configuration).to receive(:authenticate_resource_owner) { proc { redirect_to "/" } }
+    allow(Doorkeeper.config).to receive(:authenticate_resource_owner) { proc { redirect_to "/" } }
   end
 end
 

data/spec/support/shared/models_shared_examples.rb

@@ -31,20 +31,22 @@ end
 
 shared_examples "a unique token" do
   describe :token do
+    let(:owner) { FactoryBot.create(:resource_owner) }
+
     it "is generated before validation" do
       expect { subject.valid? }.to change { subject.token }.from(nil)
     end
 
     it "is not valid if token exists" do
-      token1 = FactoryBot.create factory_name
-      token2 = FactoryBot.create factory_name
+      token1 = FactoryBot.create factory_name, resource_owner_id: owner.id, resource_owner_type: owner.class.name
+      token2 = FactoryBot.create factory_name, resource_owner_id: owner.id, resource_owner_type: owner.class.name
       token2.token = token1.token
       expect(token2).not_to be_valid
     end
 
     it "expects database to throw an error when tokens are the same" do
-      token1 = FactoryBot.create factory_name
-      token2 = FactoryBot.create factory_name
+      token1 = FactoryBot.create factory_name, resource_owner_id: owner.id, resource_owner_type: owner.class.name
+      token2 = FactoryBot.create factory_name, resource_owner_id: owner.id, resource_owner_type: owner.class.name
       token2.token = token1.token
       expect do
         token2.save!(validate: false)

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: doorkeeper
 version: !ruby/object:Gem::Version
-  version: 5.3.0
+  version: 5.4.0.rc1
 platform: ruby
 authors:
 - Felipe Elias Philipp
@@ -11,7 +11,7 @@ authors:
 autorequire: 
 bindir: bin
 cert_chain: []
-date: 2020-01-29 00:00:00.000000000 Z
+date: 2020-04-08 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: railties
@@ -221,6 +221,7 @@ files:
 - gemfiles/rails_master.gemfile
 - lib/doorkeeper.rb
 - lib/doorkeeper/config.rb
+- lib/doorkeeper/config/abstract_builder.rb
 - lib/doorkeeper/config/option.rb
 - lib/doorkeeper/engine.rb
 - lib/doorkeeper/errors.rb
@@ -234,6 +235,7 @@ files:
 - lib/doorkeeper/models/concerns/expirable.rb
 - lib/doorkeeper/models/concerns/orderable.rb
 - lib/doorkeeper/models/concerns/ownership.rb
+- lib/doorkeeper/models/concerns/resource_ownerable.rb
 - lib/doorkeeper/models/concerns/reusable.rb
 - lib/doorkeeper/models/concerns/revocable.rb
 - lib/doorkeeper/models/concerns/scopes.rb
@@ -260,6 +262,7 @@ files:
 - lib/doorkeeper/oauth/helpers/scope_checker.rb
 - lib/doorkeeper/oauth/helpers/unique_token.rb
 - lib/doorkeeper/oauth/helpers/uri_checker.rb
+- lib/doorkeeper/oauth/hooks/context.rb
 - lib/doorkeeper/oauth/invalid_request_response.rb
 - lib/doorkeeper/oauth/invalid_token_response.rb
 - lib/doorkeeper/oauth/nonstandard.rb
@@ -282,8 +285,10 @@ files:
 - lib/doorkeeper/orm/active_record/stale_records_cleaner.rb
 - lib/doorkeeper/rails/helpers.rb
 - lib/doorkeeper/rails/routes.rb
+- lib/doorkeeper/rails/routes/abstract_router.rb
 - lib/doorkeeper/rails/routes/mapper.rb
 - lib/doorkeeper/rails/routes/mapping.rb
+- lib/doorkeeper/rails/routes/registry.rb
 - lib/doorkeeper/rake.rb
 - lib/doorkeeper/rake/db.rake
 - lib/doorkeeper/rake/setup.rake
@@ -305,6 +310,7 @@ files:
 - lib/doorkeeper/version.rb
 - lib/generators/doorkeeper/application_owner_generator.rb
 - lib/generators/doorkeeper/confidential_applications_generator.rb
+- lib/generators/doorkeeper/enable_polymorphic_resource_owner_generator.rb
 - lib/generators/doorkeeper/install_generator.rb
 - lib/generators/doorkeeper/migration_generator.rb
 - lib/generators/doorkeeper/pkce_generator.rb
@@ -314,6 +320,7 @@ files:
 - lib/generators/doorkeeper/templates/add_owner_to_application_migration.rb.erb
 - lib/generators/doorkeeper/templates/add_previous_refresh_token_to_access_tokens.rb.erb
 - lib/generators/doorkeeper/templates/enable_pkce_migration.rb.erb
+- lib/generators/doorkeeper/templates/enable_polymorphic_resource_owner_migration.rb.erb
 - lib/generators/doorkeeper/templates/initializer.rb
 - lib/generators/doorkeeper/templates/migration.rb.erb
 - lib/generators/doorkeeper/views_generator.rb
@@ -366,6 +373,7 @@ files:
 - spec/factories.rb
 - spec/generators/application_owner_generator_spec.rb
 - spec/generators/confidential_applications_generator_spec.rb
+- spec/generators/enable_polymorphic_resource_owner_generator_spec.rb
 - spec/generators/install_generator_spec.rb
 - spec/generators/migration_generator_spec.rb
 - spec/generators/pkce_generator_spec.rb
@@ -409,6 +417,7 @@ files:
 - spec/lib/oauth/token_request_spec.rb
 - spec/lib/oauth/token_response_spec.rb
 - spec/lib/oauth/token_spec.rb
+- spec/lib/option_spec.rb
 - spec/lib/request/strategy_spec.rb
 - spec/lib/secret_storing/base_spec.rb
 - spec/lib/secret_storing/bcrypt_spec.rb
@@ -474,9 +483,9 @@ required_ruby_version: !ruby/object:Gem::Requirement
       version: '2.4'
 required_rubygems_version: !ruby/object:Gem::Requirement
   requirements:
-  - - ">="
+  - - ">"
     - !ruby/object:Gem::Version
-      version: '0'
+      version: 1.3.1
 requirements: []
 rubygems_version: 3.0.2
 signing_key: 
@@ -532,6 +541,7 @@ test_files:
 - spec/factories.rb
 - spec/generators/application_owner_generator_spec.rb
 - spec/generators/confidential_applications_generator_spec.rb
+- spec/generators/enable_polymorphic_resource_owner_generator_spec.rb
 - spec/generators/install_generator_spec.rb
 - spec/generators/migration_generator_spec.rb
 - spec/generators/pkce_generator_spec.rb
@@ -575,6 +585,7 @@ test_files:
 - spec/lib/oauth/token_request_spec.rb
 - spec/lib/oauth/token_response_spec.rb
 - spec/lib/oauth/token_spec.rb
+- spec/lib/option_spec.rb
 - spec/lib/request/strategy_spec.rb
 - spec/lib/secret_storing/base_spec.rb
 - spec/lib/secret_storing/bcrypt_spec.rb