microsoft_kiota_abstractions 0.25.0 → 0.25.2

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 513206169119988b7f24a1bf7e7dea92ecfb179111e71145b8e3dc4bcd38da81
-  data.tar.gz: a4fa14ef64cb4c64feb606852dd542d37eb7fb4650579de10f13263379b1763e
+  metadata.gz: 6ab594b471705d419a392d73fd99f80f2e5b0e2b80ff8fd4ae5fd25ba18aaa37
+  data.tar.gz: 6e2fb313b636b5ea1f8ccbec0c45f08cb8f5c74f2d9f8957164777d20f34c1bf
 SHA512:
-  metadata.gz: a76b0d9d11fa0d77d740de87eb29574e8ba070c06770472a590e2fa4d25f5588f0b6d502e86f06460117c4b373d9acd658581798a0a02bacad12161a4aa63b0d
-  data.tar.gz: daced43e53c41e8194540a9704da0d6be3f66c61429c2d7a8555c1c06ea8d6fe255e581476cc6732a2e16fb78a494edf04de17b42f5ce545dbd7f67474b2f0ae
+  metadata.gz: 87928b86bc8de81578ccbb7afac4d0c5f76afa2fa2625464a2981b7fc9bb62e918377cecb317faf6d6921c7407fc998bfe8b946e960876bca9c863daf04efd2e
+  data.tar.gz: ee398afe305ba8ad89b92eff176e55e9a5d96a16b2e52b21abddf5c3c02aa0c9212dad0cb843b734ed814a99178e88b227232a834e81aa07070c3278496a3ae8

data/lib/microsoft_kiota_abstractions/authentication/allowed_hosts_validator.rb

@@ -6,6 +6,8 @@ module MicrosoftKiotaAbstractions
   # Maintains a list of valid hosts and allows authentication providers to check whether
   # a host is valid before authenticating a request
   class AllowedHostsValidator
+    LOCALHOST_STRINGS = ['localhost', '::1', '[::1]', '127.0.0.1'].freeze
+
     # creates a new AllocatedHostsValidator with provided values
     def initialize(allowed_hosts)
       self.allowed_hosts = allowed_hosts
@@ -24,19 +26,45 @@ module MicrosoftKiotaAbstractions
 
     # checks whether the provided host is valid
     def url_host_valid?(url)
-      return true if @allowed_hosts.empty?
+      return false if url.nil?
+
+      begin
+        parsed_url = URI(url)
+      rescue URI::InvalidURIError, ArgumentError
+        return false
+      end
 
-      parsed_url = URI(url)
       return false if parsed_url.host.nil?
 
-      return false unless parsed_url.is_a?(URI::HTTPS)
+      is_https = parsed_url.is_a?(URI::HTTPS)
+      is_http_localhost = parsed_url.is_a?(URI::HTTP) && localhost?(parsed_url)
+      return false unless is_https || is_http_localhost
+
+      return true if @allowed_hosts.empty?
+
+      host = parsed_url.host.downcase
+      return true if @allowed_hosts.key?(host)
 
-      hostname = parsed_url.host.downcase
-      return true if @allowed_hosts.key? hostname
+      stripped_host = host.delete_prefix('[').delete_suffix(']')
+      return true if @allowed_hosts.key?(stripped_host)
+
+      hostname = (parsed_url.hostname || host).downcase
+      return true if @allowed_hosts.key?(hostname)
 
       @allowed_hosts.any? { |allowed_host, _| allowed_host.start_with?('.') && hostname.end_with?(allowed_host) }
-    rescue URI::InvalidURIError
-      false
+    end
+
+    # checks whether the host in the parsed url is a loopback/localhost address
+    def localhost?(parsed_url)
+      host = parsed_url.host
+      return false if host.nil?
+
+      return true if LOCALHOST_STRINGS.include?(host.downcase)
+
+      hostname = parsed_url.hostname
+      return false if hostname.nil?
+
+      LOCALHOST_STRINGS.include?(hostname.downcase)
     end
 
     # gets the list of valid hosts

data/lib/microsoft_kiota_abstractions/authentication/base_bearer_token_authentication_provider.rb

@@ -24,7 +24,8 @@ module MicrosoftKiotaAbstractions
         end
       else
         Fiber.new do
-          token = @access_token_provider.get_authorization_token(request.uri, additional_properties).resume
+          auth_fiber = @access_token_provider.get_authorization_token(request.uri, additional_properties)
+          token = auth_fiber.resume if auth_fiber
           request.headers.add(AUTHORIZATION_HEADER_KEY, "Bearer #{token}") unless token.nil? || token.empty?
         end
       end

data/lib/microsoft_kiota_abstractions/request_information.rb

@@ -127,8 +127,6 @@ module MicrosoftKiotaAbstractions
         writer.write_object_value(nil, values)
       end
       @content = writer.get_serialized_content
-    rescue StandardError
-      raise StandardError, 'could not serialize payload'
     end
 
     def add_headers_from_raw_object(h)

data/lib/microsoft_kiota_abstractions/version.rb

@@ -1,5 +1,5 @@
 # frozen_string_literal: true
 
 module MicrosoftKiotaAbstractions
-  VERSION = '0.25.0' # x-release-please-version
+  VERSION = '0.25.2' # x-release-please-version
 end

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: microsoft_kiota_abstractions
 version: !ruby/object:Gem::Version
-  version: 0.25.0
+  version: 0.25.2
 platform: ruby
 authors:
 - Microsoft Corporation