jira-ruby 3.1.0 → 3.2.1

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 8d81df9752f33a1c48332b6793d3b6596359b77b1a79575b57382553c1e04400
-  data.tar.gz: 5d6d16a50ccd3293b893068c303405a67450006197bd1d5aec85d75a9d3179e4
+  metadata.gz: 4f0687ac3651feaafae6addd37de84cf36bc0b39b25bb9e476ae20cc58c88c83
+  data.tar.gz: 0dcfa1a76303b6502a9ce22eb74d62c80070b3a859fd0f61a88cfdff91e6cc16
 SHA512:
-  metadata.gz: e4dc469b98fac2378bf647cd33e433a33ddc17ddf83d2e6fe835d21eda2239c6e3899fe9a838ebb4b1130356fa011302dd7f463ce9f4a0f660d4f66c5258e547
-  data.tar.gz: 2a09541af9b0028a16338dd13d31014e1e919e730e86ff370150536f1a2e4a8911532283dea8f7d57571010fffa5c2986097fda8d4da7034b35a3afbc806fcfa
+  metadata.gz: 3a41e5b87a3f9854a8bdebef3fcf5127d25ba00afe7a7c35e223c9de311004d50351eafd0437f3e8901a792b5cfbfc7a318cf55ec1c8faa32dd4e8180c286700
+  data.tar.gz: 953c1f03222337d49f0c5868c25ab226a1bbdef70f5b09063cfec6f90a0eb9d01b1f96de5f606b02d58d88f33c648738d2d640c77550f85ad4f705e9c929db14

data/.github/workflows/codeql.yml

@@ -60,11 +60,11 @@ jobs:
         # your codebase is analyzed, see https://docs.github.com/en/code-security/code-scanning/creating-an-advanced-setup-for-code-scanning/codeql-code-scanning-for-compiled-languages
     steps:
     - name: Checkout repository
-      uses: actions/checkout@v4
+      uses: actions/checkout@v7
 
     # Initializes the CodeQL tools for scanning.
     - name: Initialize CodeQL
-      uses: github/codeql-action/init@v3
+      uses: github/codeql-action/init@v4
       with:
         languages: ${{ matrix.language }}
         build-mode: ${{ matrix.build-mode }}
@@ -91,6 +91,6 @@ jobs:
         exit 1
 
     - name: Perform CodeQL Analysis
-      uses: github/codeql-action/analyze@v3
+      uses: github/codeql-action/analyze@v4
       with:
         category: "/language:${{matrix.language}}"

data/.github/workflows/{rubocop.yml → lint.yml}

@@ -1,13 +1,14 @@
-name: Rubocop
+name: Lint
 
 on: [push, pull_request]
 
 jobs:
   rubocop:
+    name: Lint
     runs-on: ubuntu-latest
 
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v7
       - name: Set up Ruby
         uses: ruby/setup-ruby@v1
         with:

data/.github/workflows/{CI.yml → test.yml}

@@ -1,4 +1,4 @@
-name: Ruby
+name: Test
 
 on: [push, pull_request]
 
@@ -16,7 +16,7 @@ jobs:
           - '3.2'
           - '3.1'
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v7
 
       - name: Set up Ruby
         uses: ruby/setup-ruby@v1

data/README.md

@@ -1,6 +1,7 @@
 # JIRA API Gem
 
-[![Build Status](https://github.com/sumoheavy/jira-ruby/actions/workflows/CI.yml/badge.svg)](https://github.com/sumoheavy/jira-ruby/actions/workflows/CI.yml)
+[![Build Status](https://github.com/sumoheavy/jira-ruby/actions/workflows/test.yml/badge.svg)](https://github.com/sumoheavy/jira-ruby/actions/workflows/test.yml)
+[![CodeQL](https://github.com/sumoheavy/jira-ruby/actions/workflows/codeql.yml/badge.svg)](https://github.com/sumoheavy/jira-ruby/actions/workflows/codeql.yml)
 
 This gem provides access to the Atlassian JIRA REST API.
 

data/jira-ruby.gemspec

@@ -23,8 +23,8 @@ Gem::Specification.new do |s|
   s.require_paths = ['lib']
 
   s.add_dependency 'activesupport'
-  s.add_dependency 'atlassian-jwt'
   s.add_dependency 'cgi'
+  s.add_dependency 'jwt', '>= 2.1'
   s.add_dependency 'multipart-post'
   s.add_dependency 'oauth', '~> 1.0'
 end

data/lib/jira/atlassian/jwt.rb

@@ -0,0 +1,76 @@
+# frozen_string_literal: true
+
+# Copyright 2013 Atlassian Pty Ltd.
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+#     http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+
+require 'jwt'
+require 'uri'
+require 'cgi'
+
+module JIRA
+  module Atlassian
+    module Jwt
+      class << self
+        CANONICAL_QUERY_SEPARATOR = '&'
+        ESCAPED_CANONICAL_QUERY_SEPARATOR = '%26'
+
+        def create_canonical_request(uri, http_method, base_uri)
+          uri = URI.parse(uri) unless uri.is_a? URI
+          base_uri = URI.parse(base_uri) unless base_uri.is_a? URI
+
+          [
+            http_method.upcase,
+            canonicalize_uri(uri, base_uri),
+            canonicalize_query_string(uri.query)
+          ].join(CANONICAL_QUERY_SEPARATOR)
+        end
+
+        def build_claims(issuer, url, http_method, base_url = '', issued_at = nil, expires = nil, attributes = {}) # rubocop:disable Metrics/ParameterLists
+          issued_at ||= Time.now.to_i
+          expires ||= issued_at + 60
+          qsh = Digest::SHA256.hexdigest(create_canonical_request(url, http_method, base_url))
+
+          {
+            iss: issuer,
+            iat: issued_at,
+            exp: expires,
+            qsh: qsh
+          }.merge(attributes)
+        end
+
+        def canonicalize_uri(uri, base_uri)
+          path = uri.path.sub(/^#{base_uri.path}/, '')
+          path = '/' if path.nil? || path.empty?
+          path = "/#{path}" unless path.start_with? '/'
+          path.chomp!('/') if path.length > 1
+          path.gsub(CANONICAL_QUERY_SEPARATOR, ESCAPED_CANONICAL_QUERY_SEPARATOR)
+        end
+
+        def canonicalize_query_string(query)
+          return '' if query.nil? || query.empty?
+
+          query = CGI.parse(query)
+          query.delete('jwt')
+          query.each do |k, v|
+            query[k] = v.map { |a| CGI.escape a }.join(',') if v.is_a? Array
+            query[k].gsub!('+', '%20')  # Use %20, not CGI.escape default of "+"
+            query[k].gsub!('%7E', '~')  # Unescape "~" per JS tests
+          end
+          query = query.sort.to_h
+          query.map { |k, v| "#{CGI.escape k}=#{v}" }.join(CANONICAL_QUERY_SEPARATOR)
+        end
+      end
+    end
+  end
+end

data/lib/jira/base.rb

@@ -396,6 +396,7 @@ module JIRA
       else
         hash.each do |k, v|
           if v.is_a?(Hash)
+            target[k] = {} unless target[k].is_a?(Hash)
             set_attrs(v, clobber, target[k])
           else
             target[k] = v

data/lib/jira/client.rb

@@ -302,6 +302,10 @@ module JIRA
       JIRA::Resource::AgileFactory.new(self)
     end
 
+    def Properties
+      JIRA::Resource::PropertiesFactory.new(self)
+    end
+
     # HTTP methods without a body
 
     # Make an HTTP DELETE request
@@ -351,7 +355,9 @@ module JIRA
     # @raise [JIRA::HTTPError] If the response is not an HTTP success code
     def post_multipart(path, file, headers = {})
       puts "post multipart: #{path} - [#{file}]" if @http_debug
-      @request_client.request_multipart(path, file, merge_default_headers(headers))
+      res = @request_client.request_multipart(path, file, merge_default_headers(headers))
+      puts "response: #{res}" if @http_debug
+      res
     end
 
     # Make an HTTP PUT request
@@ -375,7 +381,9 @@ module JIRA
     # @raise [JIRA::HTTPError] If the response is not an HTTP success code
     def request(http_method, path, body = '', headers = {})
       puts "#{http_method}: #{path} - [#{body}]" if @http_debug
-      @request_client.request(http_method, path, body, headers)
+      res = @request_client.request(http_method, path, body, headers)
+      puts "response: #{res}" if @http_debug
+      res
     end
 
     # @private

data/lib/jira/jwt_client.rb

@@ -1,6 +1,6 @@
 # frozen_string_literal: true
 
-require 'atlassian/jwt'
+require 'jira/atlassian/jwt'
 
 module JIRA
   class JwtClient < HttpClient
@@ -29,7 +29,7 @@ module JIRA
     end
 
     def build_jwt(url)
-      claim = Atlassian::Jwt.build_claims \
+      claim = JIRA::Atlassian::Jwt.build_claims \
         @options[:issuer],
         url,
         http_method.to_s,

data/lib/jira/resource/attachment.rb

@@ -146,10 +146,14 @@ module JIRA
       # @raise [JIRA::HTTPError] if failed
       def save!(attrs, path = url)
         file = attrs['file'] || attrs[:file] # Keep supporting 'file' parameter as a string for backward compatibility
-        mime_type = attrs[:mimeType] || 'application/binary'
+        # If :filename does not exist or is nil, that is fine as it will force
+        # Upload to determine the filename automatically from file.
+        # Breaking the filename out allows this to support any IO-based file parameter.
+        fname = attrs['filename'] || attrs[:filename]
+        mime_type = attrs['mimeType'] || attrs[:mimeType] || 'application/binary'
 
         headers = { 'X-Atlassian-Token' => 'nocheck' }
-        data = { 'file' => Multipart::Post::UploadIO.new(file, mime_type, file) }
+        data = { 'file' => Multipart::Post::UploadIO.new(file, mime_type, fname) }
 
         response = client.post_multipart(path, data, headers)
 
@@ -159,6 +163,17 @@ module JIRA
         true
       end
 
+      def http_download
+        # Actually fetch the attachment
+        # Note: Jira handles attachment's weird!
+        # Typically, they respond with a redirect location that should not have the same authentication
+        client.get(attrs['content'])
+      rescue JIRA::HTTPError => e
+        raise e unless e.response.code =~ /\A3\d\d\z/ && e.response['location'].present?
+
+        Net::HTTP.get_response(URI(e.response['location']))
+      end
+
       private
 
       def set_attributes(attributes, response)

data/lib/jira/resource/comment.rb

@@ -9,6 +9,18 @@ module JIRA
       belongs_to :issue
 
       nested_collections true
+
+      def self.all(client, options = {})
+        issue = options[:issue]
+        raise ArgumentError, 'parent issue is required' unless issue
+
+        response = client.get("#{issue.url}/#{endpoint_name}")
+        json = parse_json(response.body)
+        json = json[endpoint_name.pluralize]
+        json.map do |attrs|
+          new(client, { attrs: }.merge(options))
+        end
+      end
     end
   end
 end

data/lib/jira/resource/createmeta.rb

@@ -12,22 +12,22 @@ module JIRA
 
       def self.all(client, params = {})
         if params.key?(:projectKeys)
-          values = Array(params[:projectKeys]).map { |i| (i.is_a?(JIRA::Resource::Project) ? i.key : i) }
+          values = Array(params[:projectKeys]).map { |i| i.is_a?(JIRA::Resource::Project) ? i.key : i }
           params[:projectKeys] = values.join(',')
         end
 
         if params.key?(:projectIds)
-          values = Array(params[:projectIds]).map { |i| (i.is_a?(JIRA::Resource::Project) ? i.id : i) }
+          values = Array(params[:projectIds]).map { |i| i.is_a?(JIRA::Resource::Project) ? i.id : i }
           params[:projectIds] = values.join(',')
         end
 
         if params.key?(:issuetypeNames)
-          values = Array(params[:issuetypeNames]).map { |i| (i.is_a?(JIRA::Resource::Issuetype) ? i.name : i) }
+          values = Array(params[:issuetypeNames]).map { |i| i.is_a?(JIRA::Resource::Issuetype) ? i.name : i }
           params[:issuetypeNames] = values.join(',')
         end
 
         if params.key?(:issuetypeIds)
-          values = Array(params[:issuetypeIds]).map { |i| (i.is_a?(JIRA::Resource::Issuetype) ? i.id : i) }
+          values = Array(params[:issuetypeIds]).map { |i| i.is_a?(JIRA::Resource::Issuetype) ? i.id : i }
           params[:issuetypeIds] = values.join(',')
         end
 

data/lib/jira/resource/issue.rb

@@ -57,6 +57,7 @@ module JIRA
       has_many :issuelinks, nested_under: 'fields'
       has_many :remotelink, class: JIRA::Resource::Remotelink
       has_many :watchers, attribute_key: 'watches', nested_under: %w[fields watches]
+      has_many :properties, class: JIRA::Resource::Properties
 
       # Get collection of issues.
       # @param client [JIRA::Client]

data/lib/jira/resource/properties.rb

@@ -0,0 +1,56 @@
+# frozen_string_literal: true
+
+require 'active_support/inflector'
+
+module JIRA
+  module Resource
+    class PropertiesFactory < JIRA::BaseFactory # :nodoc:
+    end
+
+    class Properties < JIRA::Base
+      belongs_to :issue
+
+      def self.key_attribute
+        :key
+      end
+
+      def self.all(client, options = {})
+        issue = options[:issue]
+        raise ArgumentError, 'parent issue is required' unless issue
+
+        response = client.get("#{issue.url}/#{endpoint_name}")
+        json = parse_json(response.body)
+        json[key_attribute.to_s.pluralize].map do |attrs|
+          ## Net get the individual property
+          self_response = client.get(attrs['self'])
+          property = parse_json(self_response.body)
+          ## Make sure to build the new resource via the issue.properties in order to support the has_many proxy
+          issue.properties.build(property)
+        end
+      end
+
+      ## Override save so we can handle the required attrs (and default 'value' when appropriate)
+      def save!(attrs = {}, path = nil)
+        if attrs.is_a?(Hash) && attrs.key?(self.class.key_attribute.to_s)
+          raise ArgumentError, "Use of 'value' is required when '#{self.class.key_attribute}' is provided" \
+            unless attrs.key?('value')
+
+          set_attrs(self.class.key_attribute.to_s => attrs[self.class.key_attribute.to_s])
+        end
+
+        raise ArgumentError, "'key' is required on a new record" if new_record?
+
+        path ||= patched_url
+        ## We can take either the 'value' element from the hash, OR use the entire attrs as the value
+        value = attrs.is_a?(Hash) && attrs.key?('value') ? attrs['value'] : attrs
+        value = '' if value.nil?
+        ## Note: this API endpoint requires a non-empty JSON body for the value of the property
+        ## Note2: this API endpoint does not return a body, so no need to call set_attrs_from_response
+        client.send(:put, path, value.to_json)
+        set_attrs({ 'value' => value }, false)
+        @expanded = false
+        true
+      end
+    end
+  end
+end

data/lib/jira/resource/worklog.rb

@@ -10,6 +10,18 @@ module JIRA
       has_one :update_author, class: JIRA::Resource::User, attribute_key: 'updateAuthor'
       belongs_to :issue
       nested_collections true
+
+      def self.all(client, options = {})
+        issue = options[:issue]
+        raise ArgumentError, 'parent issue is required' unless issue
+
+        response = client.get("#{issue.url}/#{endpoint_name}")
+        json = parse_json(response.body)
+        json = json[endpoint_name.pluralize]
+        json.map do |attrs|
+          new(client, { attrs: }.merge(options))
+        end
+      end
     end
   end
 end

data/lib/jira/version.rb

@@ -1,5 +1,5 @@
 # frozen_string_literal: true
 
 module JIRA
-  VERSION = '3.1.0'
+  VERSION = '3.2.1'
 end

data/lib/jira-ruby.rb

@@ -23,6 +23,7 @@ require 'jira/resource/status'
 require 'jira/resource/status_category'
 require 'jira/resource/transition'
 require 'jira/resource/project'
+require 'jira/resource/properties'
 require 'jira/resource/priority'
 require 'jira/resource/comment'
 require 'jira/resource/worklog'