haveapi 0.18.1 → 0.18.2

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 7a503deac250571b471c672f113a2470e24ebf575ec19b09d44d1d48c210bf50
-  data.tar.gz: 300d414e67b3d2083c0c6d352e1817274e7ed729d099b6f814aa5fd03bd81ce8
+  metadata.gz: 16eef5420692ea73c7b4969ec61c7efc26c74692c7a9a403d8f664fdf2dafbf8
+  data.tar.gz: 26e5cf981901ca19dc5c0d60c5b567f2cd81e66df2cf70c5333c24b920136554
 SHA512:
-  metadata.gz: 3e7d0ecf8a43a49e8bf7dca76286f6dc43cb22c65794d080e2d74b7f5ba1e39ccb6d1d1800229f925b26df6dcbad8f8bb5eb74ac70c50741450c95a5ad9f893d
-  data.tar.gz: 10581d63837d9a8a2fb19625dc8b61b1217fe0c4fe55dac6376190e45e482d5786ca0b32cc7d5bcd6c100f16871a5f27c789bfcdd5ea4edc5c63cadec5ad03bb
+  metadata.gz: '0876a3b9b10ad452c89a62e06fc56e29cfb6aff188e4943274adf4e4180464b90daa420e4ab0953faba1f1ae9a5df0a8a19ae0362acd7290043efefd050f8b19'
+  data.tar.gz: cddc8f6c09dea69afc3a359ab18cd947a5a338ec9413d2f16eb600fa4893c88f0cbe3e3224b9ae58ac0d3de5707b96ec0e0891162d3d0ee9c97e906bff0c8e44

data/haveapi.gemspec

@@ -23,7 +23,7 @@ Gem::Specification.new do |s|
   s.add_runtime_dependency 'rake'
   s.add_runtime_dependency 'github-markdown'
   s.add_runtime_dependency 'nesty', '~> 1.0'
-  s.add_runtime_dependency 'haveapi-client', '~> 0.18.1'
+  s.add_runtime_dependency 'haveapi-client', '~> 0.18.2'
   s.add_runtime_dependency 'mail'
   s.add_runtime_dependency 'rack-oauth2', '~> 2.2.0'
 end

data/lib/haveapi/authentication/oauth2/config.rb

@@ -130,13 +130,22 @@ module HaveAPI::Authentication
       #
       # @return [Hash<String, String>]
       def oauth2_params(req)
-        {
+        ret = {
           client_id: req.client_id,
           response_type: req.response_type,
           redirect_uri: req.redirect_uri,
           scope: req.scope.join(' '),
           state: req.state,
         }
+
+        if req.code_challenge.present? && req.code_challenge_method.present?
+          ret.update(
+            code_challenge: req.code_challenge,
+            code_challenge_method: req.code_challenge_method,
+          )
+        end
+
+        ret
       end
     end
   end

data/lib/haveapi/authentication/oauth2/provider.rb

@@ -35,6 +35,12 @@ module HaveAPI::Authentication
 
     # Abstract class describing ongoing authorization and what methods it must respond to
     class Authorization
+      # @return [String, nil]
+      attr_reader :code_challenge
+
+      # @return [String, nil]
+      attr_reader :code_challenge_method
+
       # @return [String]
       attr_reader :redirect_uri
 
@@ -194,6 +200,13 @@ module HaveAPI::Authentication
                 req.invalid_grant!
               end
 
+              if authorization.code_challenge && authorization.code_challenge_method
+                req.verify_code_verifier!(
+                  authorization.code_challenge,
+                  authorization.code_challenge_method.to_sym,
+                )
+              end
+
               access_token, expires_at, refresh_token = config.get_tokens(authorization, handler.request)
 
               bearer_token = Rack::OAuth2::AccessToken::Bearer.new(

data/lib/haveapi/version.rb

@@ -1,4 +1,4 @@
 module HaveAPI
   PROTOCOL_VERSION = '2.0'
-  VERSION = '0.18.1'
+  VERSION = '0.18.2'
 end

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: haveapi
 version: !ruby/object:Gem::Version
-  version: 0.18.1
+  version: 0.18.2
 platform: ruby
 authors:
 - Jakub Skokan
@@ -142,14 +142,14 @@ dependencies:
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: 0.18.1
+        version: 0.18.2
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: 0.18.1
+        version: 0.18.2
 - !ruby/object:Gem::Dependency
   name: mail
   requirement: !ruby/object:Gem::Requirement