jbr 3.7.1 → 3.7.2

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 28dde29d20aa9063e6e24e2226d81bf69ec7593ba99efd8a6f335d9fd83c8a10
-  data.tar.gz: 106b0db3001c4aa10c6ef449d4204c6ad2e4574494b6033e7eadf1d13f3ccc59
+  metadata.gz: e017275cf5a3a41647f3817608327ddf8fa909c2fdf25e1f8c2a43ee1ad3b044
+  data.tar.gz: 1d01c835b75bd16cd21b8d4e658644520cc065c0659b1f394f105e02775b8f69
 SHA512:
-  metadata.gz: 49a59576a7951bc00a29f4ec861576be2e28e448e53c1be2911dd094ebea9a7715a5e98eb34a2d208538ee63a8bd83b402f71b461e390d38aeb7a8885b816bd1
-  data.tar.gz: d20c5ee0c9ddb0927649b884c45f84b7d7e97e315c54a2fd29c779a1b51c3f3691b5417d79e2dc4297d86f4795966703eb3462794ad0f867a0392cc9e9e4411d
+  metadata.gz: 89e55dd309b839918c67d79ee4c761d28cacb3f2c0dba30daa996354b0a22c4436aa52928dbfb7208df62609073157f77e42f7349943f4f58a2910dea1f43f00
+  data.tar.gz: 2cd3bf9d534e4fbb349debe3643aad4a62982e5780e27e558214594ffe9d536413bc5e8d837976d832422011b5da9be146bd9998492f6c33d99011274c213ef5

data/CHANGELOG.md

@@ -1,3 +1,10 @@
+## [3.7.2] - 2026-08-17
+
+- [Change] Jobber's token endpoint answers in prose, so that is all this reads. 3.7.1 kept a
+  branch for the OAuth 2 `invalid_grant` in a JSON body, guarded by a rescue for a body that
+  would not parse — and every failure body Jobber has ever been seen to send is prose, so the
+  rescue was the path and the branch it protected had never once been taken. Both are gone
+
 ## [3.7.1] - 2026-08-17
 
 - [Fix] A refresh token Jobber will not take gives the credentials up, as it always should

data/README.md

@@ -67,11 +67,11 @@ Revoke credentials:
 oauth.delete
 ```
 
-Credentials go bad only when Jobber says so of the grant itself: the `invalid_grant` it names,
-or the 401 it answers a refresh token it will not take. Either sets `invalid_at` and answers
-queries with nothing. Anything else that goes wrong raises `Jbr::Error` instead — a 500, a rate
-limit, and the 401 Jobber answers an app whose own client id and secret are wrong, which is
-every account's grant at once rather than this one's:
+Credentials go bad only when Jobber says so of the grant itself — `The provided refresh token
+is not valid.` — which sets `invalid_at` and answers queries with nothing. Anything else that
+goes wrong raises `Jbr::Error` instead: a 500, a rate limit, and the 401 Jobber answers an app
+whose own client id and secret are wrong, which is every account's grant at once rather than
+this one's:
 
 ```ruby
 oauth.invalid_at # => 2026-08-13 11:02:41, or nil while the credentials are good

data/lib/jbr/token.rb

@@ -4,12 +4,10 @@ module Jbr
     # Where a grant is exchanged.
     URL = 'https://api.getjobber.com/api/oauth/token'
 
-    # What Jobber calls a grant that is no good, in the OAuth 2 word for it.
-    REFUSAL = 'invalid_grant'
-
-    # And what it calls one in the prose it answers a refresh token with instead. Specific to
-    # the token rather than to the app, which is the whole reason for reading the body.
-    REFUSAL_TEXT = /refresh token is not valid/
+    # What Jobber says of a grant it will not take, in the prose it answers with. About the
+    # token rather than about the app, which is what tells it from the 401 a wrong client id and
+    # secret get — and that one is every account at once rather than this one.
+    REFUSAL = /refresh token is not valid/
 
     # Trade a grant for credentials.
     # @param params [Hash] the grant, and the app making the exchange.
@@ -18,7 +16,7 @@ module Jbr
     # @return [Hash] the tokens, and the moment the access one expires.
     def self.post(params = {})
       response = Net::HTTP.post_form URI(URL), params
-      raise Refused, response.body if refused? response
+      raise Refused, response.body if REFUSAL.match? response.body
       raise Error, response.body unless response.is_a? Net::HTTPSuccess
 
       output = JSON.parse response.body
@@ -26,22 +24,5 @@ module Jbr
         expires_at: (Time.now + output.fetch('expires_in', 3600).to_i),
       }
     end
-
-    # Refused where Jobber turns the grant down rather than failing to answer about it: it names
-    # the word, or it names the token. Never the status on its own — Jobber answers 401 to a
-    # refresh token it will not take and 401 to an app whose own credentials are wrong, and
-    # acting on the second as though it were the first would disconnect every account at once.
-    def self.refused?(response)
-      return false if response.is_a? Net::HTTPSuccess
-
-      coded_refusal?(response.body) || REFUSAL_TEXT.match?(response.body.to_s)
-    end
-
-    def self.coded_refusal?(body)
-      JSON.parse(body)['error'] == REFUSAL
-    rescue JSON::ParserError
-      false
-    end
-    private_class_method :refused?, :coded_refusal?
   end
 end

data/lib/jbr/version.rb

@@ -1,5 +1,5 @@
 # A Ruby client for the Jobber API.
 module Jbr
   # The version of this gem.
-  VERSION = '3.7.1'
+  VERSION = '3.7.2'
 end

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: jbr
 version: !ruby/object:Gem::Version
-  version: 3.7.1
+  version: 3.7.2
 platform: ruby
 authors:
 - Claudio Baccigalupo