masks 0.9.1 → 0.9.2

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 62fc7998cf31199eaa81f63d82063e3e20ab995c74c782c675e91628df7dcee3
-  data.tar.gz: 6d83a9474d9289c375acfcacd6c5c4e45a66a92d22e1683abba9780de3c63d43
+  metadata.gz: a915522b23f370321d7eca71a6d4965804d6988e441f6f019b1b1817bab7f0c3
+  data.tar.gz: 05f68f68ed521f6d378393cadda81bec7b984802f10ab651a5eaa8c9b31d4a7c
 SHA512:
-  metadata.gz: 97164bf9ab0ee6820e353a9dad5d97141ddf0cd038dd3a6348e03e46eea46313643e13f8d49c17bd414c16420e4b25c5c29072bd4efea114f3483e4174c0e599
-  data.tar.gz: 505cca23a8b1b0f439365eea100780b64157700ab9995df53fa46df640a0efc1da9a64e95281925279233ea4e4036563e41aebd727d8b7f2795991dac3604931
+  metadata.gz: 13467dcc61e51edbb9a7493feb38ccb2cf0f1f42db9a127cb37ccb89c0bf3187de211f928bce1dd854d711f3418a0b504bb3a2b0e645ee8ac7d864b47fd8d4c5
+  data.tar.gz: 4b0b6abea05f55b54b9280de48c8096a8406fdd82e7dcb575584b56679ccb91fc3af11c2766cda26cee44ae8ace19f384a5714a0e3a81b029bcead957d8ba008

data/CHANGELOG.md

@@ -1,5 +1,12 @@
 # Changelog
 
+## [0.9.2](https://github.com/masksrb/masks/compare/gem/v0.9.1...gem/v0.9.2) (2026-10-10)
+
+
+### Documentation
+
+* the examples name xixo, the resource server once called uris ([ca80f20](https://github.com/masksrb/masks/commit/ca80f20c9aea4ee6a3e7cd6c76c69425e4c800e3))
+
 ## [0.9.1](https://github.com/masksrb/masks/compare/gem/v0.9.0...gem/v0.9.1) (2026-10-04)
 
 

data/README.md

@@ -91,7 +91,7 @@ An app that is also a resource server:
 class ApiController < ApplicationController
   include Masks::Rails::ProtectedResource
 
-  masks_protect! scope: "uris:catalog:read", except: :metadata
+  masks_protect! scope: "xixo:catalog:read", except: :metadata
 
   def metadata
     render json: masks_resource_metadata
@@ -144,7 +144,7 @@ in to none and `insufficient_role` when they hold another role. A resource serve
 token:
 
 ```ruby
-masks_protect! scope: "uris:catalog:write", role: "owner", organization: "acme"
+masks_protect! scope: "xixo:catalog:write", role: "owner", organization: "acme"
 ```
 
 Naming an organization without asking for the scope still holds the sign-in to its members and its
@@ -235,7 +235,7 @@ The flow that connects a first-party app:
 
 ```ruby
 handshake = Masks::Client::Handshake.new(
-  issuer, name: "uris", resource: "https://app.example.com/mcp",
+  issuer, name: "xixo", resource: "https://app.example.com/mcp",
   redirect_uris: [ "https://app.example.com/auth/callback" ],
   return_to: "https://app.example.com/"
 )
@@ -254,11 +254,11 @@ the issuer it asked.
 resource = Masks::Client::Resource.new(
   issuer: "https://demo.auth.example.com",
   url: "https://app.example.com/mcp",
-  scopes: { "uris:catalog:read" => "Search your catalog" }
+  scopes: { "xixo:catalog:read" => "Search your catalog" }
 )
 
 claims = resource.authenticate(
-  request.authorization, scope: "uris:catalog:read",
+  request.authorization, scope: "xixo:catalog:read",
   proof: request.get_header("HTTP_DPOP"), method: request.request_method, url: request.url
 )
 claims.subject
@@ -286,7 +286,7 @@ scope.
 A Rack middleware does the same below the framework, proof included:
 
 ```ruby
-use Masks::Client::Rack, resource: resource, scope: "uris:catalog:read"
+use Masks::Client::Rack, resource: resource, scope: "xixo:catalog:read"
 ```
 
 ### Introspection
@@ -296,7 +296,7 @@ asks the issuer:
 
 ```ruby
 found = session.introspect(token)
-found.active? && found.permits?("uris:catalog:read")
+found.active? && found.permits?("xixo:catalog:read")
 ```
 
 `Introspection` is a `Claims` whose `permit!` also raises when the token is not active.

data/lib/masks/version.rb

@@ -1,3 +1,3 @@
 module Masks
-  VERSION = "0.9.1".freeze
+  VERSION = "0.9.2".freeze
 end

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: masks
 version: !ruby/object:Gem::Version
-  version: 0.9.1
+  version: 0.9.2
 platform: ruby
 authors:
 - the masks authors