easy_meli 0.6.19 → 0.6.20

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 5a61030f52976ce550540b283c28a2d1bc6488a0ecd8a348e733f92659ec2c0c
-  data.tar.gz: f07b69ef620397713896b757ced9067731eccb675817b0efeb26851e99970c3d
+  metadata.gz: fb7843afd879cb4c1135bf405d1dea609070df4f2f85b91e6b39ea982779cff4
+  data.tar.gz: b4aecdd72175b04e4563ae1d92a056fb1a5b8738e4d533ad46741a5fb957cce9
 SHA512:
-  metadata.gz: e7d47984eabbe48987c5e1292671d52f51b6211153e5a9736e67b5665197d60a8416671af72946c88fa62428afbb6f0df4a749932fcbb79d903b6aaaa7410d06
-  data.tar.gz: b1bd76a72b1da3020f4148f6934204b97aa40b5856a344c1f04720d3f1bd9e8fb947b3bce3a191dfa67e1e08773671745733aeaa719aea5533f2427be0a706fa
+  metadata.gz: ec1655affa627fa376b9f7e6bb86efba207e0b1e9d78e227ea09bb935d85f353ed7b8a656d0267c6cfa02690b7e5b774bdd5b0336e613c0b43a340e6c97c7b15
+  data.tar.gz: eea9caf35705aa77ed6a88fa2438ed29d95cacf28deec1c20dae52c0ef8d43cb3a58a538c7a79d8ab3680729c137c78dd6b513a2b8f380af3cf2421444cab6b1

data/CHANGELOG.md

@@ -1,4 +1,7 @@
 # Changelog
+## V 0.6.20
+- Return the complete token payload when refreshing tokens so clients can persist Mercado Libre's rotated refresh token.
+
 ## V 0.6.19
 - Update addressable from 2.8.8 to 2.9.0 (security fix for ReDoS vulnerability in Addressable templates)
 

data/Gemfile.lock

@@ -1,7 +1,7 @@
 PATH
   remote: .
   specs:
-    easy_meli (0.6.19)
+    easy_meli (0.6.20)
       httparty (~> 0.24)
       multi_xml (~> 0.6.0)
       rexml (~> 3.4.2)

data/README.md

@@ -42,7 +42,17 @@ response = EasyMeli.create_token('the_code_in_the_redirect', 'the_same_redirect_
 ```
 This will return a response object with a json body that you can easily access via `response.to_h`.
 
-If you want to refresh the token call
+To refresh an access token and preserve Mercado Libre's rotated refresh token, call
+
+```ruby
+tokens = EasyMeli.refresh_tokens('a_refresh_token')
+access_token = tokens['access_token']
+refresh_token = tokens['refresh_token']
+```
+
+Store the returned refresh token after every successful refresh. Mercado Libre refresh tokens are single-use, so the token passed to `refresh_tokens` is no longer valid after the exchange succeeds.
+
+If you only need the new access token, call
 
 ```ruby
 access_token = EasyMeli.access_token('a_refresh_token')

data/lib/easy_meli/authorization_client.rb

@@ -50,9 +50,13 @@ class EasyMeli::AuthorizationClient
   end
 
   def self.access_token(refresh_token, logger: nil)
+    refresh_tokens(refresh_token, logger: logger)[EasyMeli::AuthorizationClient::ACCESS_TOKEN_KEY]
+  end
+
+  def self.refresh_tokens(refresh_token, logger: nil)
     response = self.new(logger: logger).access_token_with_response(refresh_token)
     if response.success?
-      response.to_h[EasyMeli::AuthorizationClient::ACCESS_TOKEN_KEY]
+      response.to_h
     else
       exception = EasyMeli::ErrorParser.error_class(response) || EasyMeli::InvalidTokenError
 

data/lib/easy_meli/version.rb

@@ -1,3 +1,3 @@
 module EasyMeli
-  VERSION = '0.6.19'
+  VERSION = '0.6.20'
 end

data/lib/easy_meli.rb

@@ -30,6 +30,10 @@ module EasyMeli
     EasyMeli::AuthorizationClient.access_token(refresh_token, logger: logger)
   end
 
+  def self.refresh_tokens(refresh_token, logger: nil)
+    EasyMeli::AuthorizationClient.refresh_tokens(refresh_token, logger: logger)
+  end
+
   def self.api_client(access_token: nil, refresh_token: nil, logger: nil)
     access_token ||= self.access_token(refresh_token, logger: logger) if refresh_token
     EasyMeli::ApiClient.new(access_token, logger: logger)

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: easy_meli
 version: !ruby/object:Gem::Version
-  version: 0.6.19
+  version: 0.6.20
 platform: ruby
 authors:
 - Eric Northam