flexirest 1.12.0 → 1.12.1

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 530331988751770dc906ba6b17ffafa88cc5213f8c99a67fb8e6335af2152082
-  data.tar.gz: a55ce84b1ac4e3b1e17df27abefd3e2d9c7250a22e4368c5806a318a29ac72cd
+  metadata.gz: b36abe5b5b35c85e8705681e6ec68792c20b1ec33e44cd94420e7a49a103fb50
+  data.tar.gz: fa2cf4caa5736b75f53b3bcf7ae61909e448ba75d58c41dfe826a92e616e42ec
 SHA512:
-  metadata.gz: ef1ac1a698388648711b665eccbb43f0f52d751a75abe156221081f84198cdd3c426d6643db563f9bd57af9813c3ede8049114f1859603572105bec20357bfff
-  data.tar.gz: 7f0ef624a7a958b33fcecd69f0d397e480ab98ffef1cbe3029cf87d2c290d02cb8be4b9f4c97903b6b495564dcb94607b64991ac530ec68851b13e7c474158b6
+  metadata.gz: 6a7b314f07d529deef241d32d750770e51fe2c4fdf32390f3cbbed814d3854d2f1229f6bc138d6b1a6688f7d152ccb330a778dd05298242bae20b9790da09e46
+  data.tar.gz: 3831f016b5b437374f2ba1a7fd9a9568077ffb71c9e1456359244055990dddb0aaf2a0fae0aa506d03bc8a8c5469ef1ae7809e3f6786e4d9b3a93d09937319a5

data/CHANGELOG.md

@@ -1,5 +1,11 @@
 # Changelog
 
+## 1.12.1
+
+Bugfix:
+
+- Usernames and passwords for simple authentication should be URL-encoded unless they're actually going in the URL (thanks to Scott Duke for the bug report)
+
 ## 1.12.0
 
 Bugfix:

data/lib/flexirest/configuration.rb

@@ -92,7 +92,6 @@ module Flexirest
           if value.respond_to?(:call)
             @username = value
           else
-            value = CGI::escape(value) if value.present? && !value.include?("%")
             @username = value
           end
         end
@@ -100,7 +99,6 @@ module Flexirest
 
       def username=(value)
         Flexirest::Logger.info "\033[1;4;32m#{name}\033[0m Username set to be #{value}"
-        value = CGI::escape(value) if value.present? && !value.include?("%")
         @@username = value
       end
 
@@ -123,7 +121,6 @@ module Flexirest
           if value.respond_to?(:call)
             @password = value
           else
-            value = CGI::escape(value) if value.present? && !value.include?("%")
             @password = value
           end
         end
@@ -131,7 +128,6 @@ module Flexirest
 
       def password=(value)
         Flexirest::Logger.info "\033[1;4;32m#{name}\033[0m Password set..."
-        value = CGI::escape(value) if value.present? && !value.include?("%")
         @@password = value
       end
 

data/lib/flexirest/request.rb

@@ -129,7 +129,11 @@ module Flexirest
     end
 
     def inject_basic_auth_in_url(url)
-      url.gsub!(%r{//(.)}, "//#{username}:#{password}@\\1") if !url[%r{//[^/]*:[^/]*@}]
+      u = username
+      u = CGI::escape(u) if u.present? && !u.include?("%")
+      p = password
+      p = CGI::escape(p) if p.present? && !p.include?("%")
+      url.gsub!(%r{//(.)}, "//#{u}:#{p}@\\1") if !url[%r{//[^/]*:[^/]*@}]
     end
 
     def using_basic_auth?

data/lib/flexirest/version.rb

@@ -1,3 +1,3 @@
 module Flexirest
-  VERSION = "1.12.0"
+  VERSION = "1.12.1"
 end

data/spec/lib/request_spec.rb

@@ -78,15 +78,15 @@ describe Flexirest::Request do
 
     class AuthenticatedExampleClient < Flexirest::Base
       base_url "http://www.example.com"
-      username "john"
-      password "smith"
+      username "john@example.com"
+      password "smith?$"
       get :all, "/"
     end
 
     class AuthenticatedBasicHeaderExampleClient < Flexirest::Base
       base_url "http://www.example.com"
-      username "john"
-      password "smith"
+      username "john@example.com"
+      password "smith?$"
       basic_auth_method :header
       get :all, "/"
     end
@@ -97,8 +97,8 @@ describe Flexirest::Request do
 
     class AuthenticatedBasicUrlExampleClient < Flexirest::Base
       base_url "http://www.example.com"
-      username "john"
-      password "smith"
+      username "john@example.com"
+      password "smith?$"
       basic_auth_method :url
       get :all, "/"
     end
@@ -357,14 +357,14 @@ describe Flexirest::Request do
     mocked_response = ::FaradayResponseMock.new(OpenStruct.new(body:'{"result":true}', response_headers:{}))
 
     connection = double(Flexirest::Connection).as_null_object
-    expect(Flexirest::ConnectionManager).to receive(:get_connection).with("http://john:smith@www.example.com").and_return(connection)
+    expect(Flexirest::ConnectionManager).to receive(:get_connection).with("http://john%40example.com:smith%3F%24@www.example.com").and_return(connection)
     expect(connection).to receive(:get).with("/", an_instance_of(Hash)).and_return(mocked_response)
     AuthenticatedExampleClient.all
   end
 
   it "should use the headers method for Basic auth when basic_auth_method is set to :header" do
     mocked_response = ::FaradayResponseMock.new(OpenStruct.new(body:'{"result":true}', response_headers:{}))
-    headers_including_auth = hash_including({ "Authorization" => "Basic am9objpzbWl0aA==" })
+    headers_including_auth = hash_including({ "Authorization" => "Basic am9obkBleGFtcGxlLmNvbTpzbWl0aD8k" })
 
     connection = double(Flexirest::Connection).as_null_object
     expect(Flexirest::ConnectionManager).to receive(:get_connection).with("http://www.example.com").and_return(connection)
@@ -382,7 +382,7 @@ describe Flexirest::Request do
 
   it "should use the setting set on the parent class" do
     mocked_response = ::FaradayResponseMock.new(OpenStruct.new(body:'{"result":true}', response_headers:{}))
-    headers_including_auth = hash_including({ "Authorization" => "Basic am9objpzbWl0aA==" })
+    headers_including_auth = hash_including({ "Authorization" => "Basic am9obkBleGFtcGxlLmNvbTpzbWl0aD8k" })
 
     connection = double(Flexirest::Connection).as_null_object
     expect(Flexirest::ConnectionManager).to receive(:get_connection).with("http://www.example.com").and_return(connection)
@@ -394,7 +394,7 @@ describe Flexirest::Request do
     mocked_response = ::FaradayResponseMock.new(OpenStruct.new(body:'{"result":true}', response_headers:{}))
 
     connection = double(Flexirest::Connection).as_null_object
-    expect(Flexirest::ConnectionManager).to receive(:get_connection).with("http://john:smith@www.example.com").and_return(connection)
+    expect(Flexirest::ConnectionManager).to receive(:get_connection).with("http://john%40example.com:smith%3F%24@www.example.com").and_return(connection)
     expect(connection).to receive(:get) do |path, options|
       expect(path).to eq("/")
       expect(options[:headers]).to eq({"Accept"=>"application/hal+json, application/json;q=0.5", "Content-Type"=>"application/x-www-form-urlencoded; charset=utf-8"})

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: flexirest
 version: !ruby/object:Gem::Version
-  version: 1.12.0
+  version: 1.12.1
 platform: ruby
 authors:
 - Andy Jeffries
 autorequire:
 bindir: bin
 cert_chain: []
-date: 2023-10-08 00:00:00.000000000 Z
+date: 2024-01-09 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: bundler
@@ -407,7 +407,7 @@ required_rubygems_version: !ruby/object:Gem::Requirement
     - !ruby/object:Gem::Version
       version: '0'
 requirements: []
-rubygems_version: 3.4.6
+rubygems_version: 3.4.10
 signing_key:
 specification_version: 4
 summary: This gem is for accessing REST services in a flexible way.  ActiveResource