oauth-tty 1.0.6 → 1.0.8

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 715ff09353a843901b1025d9161468934f75bebaf5ed1e9d99e87a7eabea05f0
-  data.tar.gz: c9753c42ab67afd478a5f1981bef15f9d3960efd8de7dd0a80094dcdf796d0a2
+  metadata.gz: 615326d7bdb365bf9529d93296704b468611cfde8340c92328184cde418932ca
+  data.tar.gz: 261203267bcec6401ae9ad0240a2ddf42a87ad9f65a747ae73e97aa1e4b43633
 SHA512:
-  metadata.gz: 854af08782e9f4ca1c22c9502f24f644c8890a98c597c557ce034fc5a0885ebbf771c427df5f88e5232b556452ae27d49e0e65104722cb745d79ee9798c873ef
-  data.tar.gz: 457e3960abe5d5f153dfd267b2a53a2376d84d430b0d9478e70b2a23c9fa8ac993e87eecb5e5df9444835de4fedb31bef181d2ef3cbb1f94c89cee4b2616e826
+  metadata.gz: 6c7f5871e5803d1c399143583f8ce5cba43b43808f92128cf977f5651070548b06214db4aafce22f533ee2fd450ca8cf41fc64d3bfce10e444db96242fef9e5e
+  data.tar.gz: bf82abc2f80a966fa094b10b10ce4a4fb91d61f5d072b2b4e10516739f5ab8b9b5909d3e9976561a7a7ad09964ab859cf79200d82f20be0d3096b50305f323bc

data/CHANGELOG.md

@@ -30,6 +30,37 @@ Please file a bug if you notice a violation of semantic versioning.
 
 ### Security
 
+## [1.0.8] - 2026-05-20
+
+- TAG: [v1.0.8][1.0.8t]
+- COVERAGE: 100.00% -- 315/315 lines in 11 files
+- BRANCH COVERAGE: 96.55% -- 28/29 branches in 11 files
+- 15.79% documented
+
+### Changed
+
+- auth-sanitizer v0.1.3
+
+### Fixed
+
+- Load `auth-sanitizer` through an internal isolated loader so requiring `oauth/tty` does not add top-level `Auth` or `AuthSanitizer` constants that may collide with downstream applications.
+
+## [1.0.7] - 2026-05-16
+
+- TAG: [v1.0.7][1.0.7t]
+- COVERAGE: 100.00% -- 305/305 lines in 10 files
+- BRANCH COVERAGE: 96.55% -- 28/29 branches in 10 files
+- 16.22% documented
+
+### Added
+
+- Add inspect-time secret redaction for command option state through `auth-sanitizer` integration.
+- Traditional OAuth::TTY::VERSION constant
+
+### Changed
+
+- Redact the command options hash from `OAuth::TTY::Command#inspect` because it may contain credential-bearing CLI arguments.
+
 ## [1.0.6] - 2025-09-21
 
 - TAG: [v1.0.6][1.0.6t]
@@ -124,7 +155,11 @@ Please file a bug if you notice a violation of semantic versioning.
 
 - Initial release (@pboling)
 
-[Unreleased]: https://github.com/ruby-oauth/oauth-tty/compare/v1.0.6...HEAD
+[Unreleased]: https://github.com/ruby-oauth/oauth-tty/compare/v1.0.8...HEAD
+[1.0.8]: https://github.com/ruby-oauth/oauth-tty/compare/v1.0.7...v1.0.8
+[1.0.8t]: https://github.com/ruby-oauth/oauth-tty/releases/tag/v1.0.8
+[1.0.7]: https://github.com/ruby-oauth/oauth-tty/compare/v1.0.6...v1.0.7
+[1.0.7t]: https://github.com/ruby-oauth/oauth-tty/releases/tag/v1.0.7
 [1.0.6]: https://github.com/ruby-oauth/oauth-tty/compare/v1.0.5...v1.0.6
 [1.0.6t]: https://github.com/ruby-oauth/oauth-tty/releases/tag/v1.0.6
 [1.0.5]: https://gitlab.com/ruby-oauth/oauth-tty/-/compare/v1.0.4...v1.0.5

data/LICENSE.txt

@@ -1,6 +1,6 @@
 The MIT License (MIT)
 
-Copyright (c) 2021-2022, 2025 Peter H. Boling, of Galtzo.com, and oauth2 contributors
+Copyright (c) 2021-2022, 2025 Peter H. Boling, of Galtzo.com, and oauth-tty contributors
 Copyright (c) 2016-2017 Thiago Pinto
 
 Permission is hereby granted, free of charge, to any person obtaining a copy

data/README.md

@@ -9,7 +9,7 @@
 
 # 🖥️ OAuth::TTY
 
-[![Version][👽versioni]][👽version] [![GitHub tag (latest SemVer)][⛳️tag-img]][⛳️tag] [![License: MIT][📄license-img]][📄license-ref] [![Downloads Rank][👽dl-ranki]][👽dl-rank] [![Open Source Helpers][👽oss-helpi]][👽oss-help] [![CodeCov Test Coverage][🏀codecovi]][🏀codecov] [![Coveralls Test Coverage][🏀coveralls-img]][🏀coveralls] [![QLTY Test Coverage][🏀qlty-covi]][🏀qlty-cov] [![QLTY Maintainability][🏀qlty-mnti]][🏀qlty-mnt] [![CI Heads][🚎3-hd-wfi]][🚎3-hd-wf] [![CI Runtime Dependencies @ HEAD][🚎12-crh-wfi]][🚎12-crh-wf] [![CI Current][🚎11-c-wfi]][🚎11-c-wf] [![CI Truffle Ruby][🚎9-t-wfi]][🚎9-t-wf] [![CI JRuby][🚎10-j-wfi]][🚎10-j-wf] [![Deps Locked][🚎13-🔒️-wfi]][🚎13-🔒️-wf] [![Deps Unlocked][🚎14-🔓️-wfi]][🚎14-🔓️-wf] [![CI Supported][🚎6-s-wfi]][🚎6-s-wf] [![CI Legacy][🚎4-lg-wfi]][🚎4-lg-wf] [![CI Unsupported][🚎7-us-wfi]][🚎7-us-wf] [![CI Ancient][🚎1-an-wfi]][🚎1-an-wf] [![CI Test Coverage][🚎2-cov-wfi]][🚎2-cov-wf] [![CI Style][🚎5-st-wfi]][🚎5-st-wf] [![CodeQL][🖐codeQL-img]][🖐codeQL] [![Apache SkyWalking Eyes License Compatibility Check][🚎15-🪪-wfi]][🚎15-🪪-wf]
+[![Version][👽versioni]][👽version] [![GitHub tag (latest SemVer)][⛳️tag-img]][⛳️tag] [![License: MIT][📄license-img]][📄license-ref] [![Downloads Rank][👽dl-ranki]][👽dl-rank] [![CodeCov Test Coverage][🏀codecovi]][🏀codecov] [![Coveralls Test Coverage][🏀coveralls-img]][🏀coveralls] [![QLTY Test Coverage][🏀qlty-covi]][🏀qlty-cov] [![QLTY Maintainability][🏀qlty-mnti]][🏀qlty-mnt] [![CI Heads][🚎3-hd-wfi]][🚎3-hd-wf] [![CI Runtime Dependencies @ HEAD][🚎12-crh-wfi]][🚎12-crh-wf] [![CI Current][🚎11-c-wfi]][🚎11-c-wf] [![CI Truffle Ruby][🚎9-t-wfi]][🚎9-t-wf] [![CI JRuby][🚎10-j-wfi]][🚎10-j-wf] [![Deps Locked][🚎13-🔒️-wfi]][🚎13-🔒️-wf] [![Deps Unlocked][🚎14-🔓️-wfi]][🚎14-🔓️-wf] [![CI Supported][🚎6-s-wfi]][🚎6-s-wf] [![CI Legacy][🚎4-lg-wfi]][🚎4-lg-wf] [![CI Unsupported][🚎7-us-wfi]][🚎7-us-wf] [![CI Ancient][🚎1-an-wfi]][🚎1-an-wf] [![CI Test Coverage][🚎2-cov-wfi]][🚎2-cov-wf] [![CI Style][🚎5-st-wfi]][🚎5-st-wf] [![CodeQL][🖐codeQL-img]][🖐codeQL] [![Apache SkyWalking Eyes License Compatibility Check][🚎15-🪪-wfi]][🚎15-🪪-wf]
 
 `if ci_badges.map(&:color).detect { it != "green"}` ☝️ [let me know][🖼️galtzo-discord], as I may have missed the [discord notification][🖼️galtzo-discord].
 
@@ -572,8 +572,6 @@ Thanks for RTFM. ☺️
 [📜gh-wiki-img]: https://img.shields.io/badge/wiki-examples-943CD2.svg?style=for-the-badge&logo=github&logoColor=white
 [👽dl-rank]: https://rubygems.org/gems/oauth-tty
 [👽dl-ranki]: https://img.shields.io/gem/rd/oauth-tty.svg
-[👽oss-help]: https://www.codetriage.com/ruby-oauth/oauth-tty
-[👽oss-helpi]: https://www.codetriage.com/ruby-oauth/oauth-tty/badges/users.svg
 [👽version]: https://rubygems.org/gems/oauth-tty
 [👽versioni]: https://img.shields.io/gem/v/oauth-tty.svg
 [🏀qlty-mnt]: https://qlty.sh/gh/ruby-oauth/projects/oauth-tty
@@ -664,7 +662,7 @@ Thanks for RTFM. ☺️
 [📌gitmoji]:https://gitmoji.dev
 [📌gitmoji-img]:https://img.shields.io/badge/gitmoji_commits-%20%F0%9F%98%9C%20%F0%9F%98%8D-34495e.svg?style=flat-square
 [🧮kloc]: https://www.youtube.com/watch?v=dQw4w9WgXcQ
-[🧮kloc-img]: https://img.shields.io/badge/KLOC-0.296-FFDD67.svg?style=for-the-badge&logo=YouTube&logoColor=blue
+[🧮kloc-img]: https://img.shields.io/badge/KLOC-0.315-FFDD67.svg?style=for-the-badge&logo=YouTube&logoColor=blue
 [🔐security]: SECURITY.md
 [🔐security-img]: https://img.shields.io/badge/security-policy-259D6C.svg?style=flat
 [📄copyright-notice-explainer]: https://opensource.stackexchange.com/questions/5778/why-do-licenses-such-as-the-mit-license-specify-a-single-year

data/REEK

@@ -0,0 +1,2 @@
+./reek: 1: Error:: not found
+./reek: 2: Error:: not found

data/SECURITY.md

@@ -12,6 +12,8 @@ To report a security vulnerability, please use the
 [Tidelift security contact](https://tidelift.com/security).
 Tidelift will coordinate the fix and disclosure.
 
+More detailed explanation of the process is in [IRP.md][IRP].
+
 ## Additional Support
 
 If you are interested in support for versions older than the latest release,
@@ -19,3 +21,4 @@ please consider sponsoring the project / maintainer @ https://liberapay.com/pbol
 or find other sponsorship links in the [README].
 
 [README]: README.md
+[IRP]: IRP.md

data/lib/oauth/tty/auth_sanitizer.rb

@@ -0,0 +1,38 @@
+# frozen_string_literal: true
+
+module OAuth
+  module TTY
+    AUTH_SANITIZER = begin
+      auth_sanitizer_requirement = Gem::Requirement.new("~> 0.1", ">= 0.1.3")
+      auth_sanitizer_spec = Gem.loaded_specs["auth-sanitizer"]
+      unless auth_sanitizer_spec && auth_sanitizer_requirement.satisfied_by?(auth_sanitizer_spec.version)
+        # :nocov:
+        auth_sanitizer_spec = Gem::Specification.find_by_name("auth-sanitizer", auth_sanitizer_requirement)
+        # :nocov:
+      end
+
+      auth_sanitizer_loader_path = File.join(
+        auth_sanitizer_spec.full_gem_path,
+        "lib/auth_sanitizer/loader.rb",
+      )
+      unless File.file?(auth_sanitizer_loader_path)
+        # :nocov:
+        raise LoadError, "oauth-tty requires auth-sanitizer #{auth_sanitizer_requirement}; " \
+          "loader not found at #{auth_sanitizer_loader_path}"
+        # :nocov:
+      end
+
+      auth_sanitizer_loader_namespace = Module.new
+      auth_sanitizer_loader_namespace.module_eval(
+        File.read(auth_sanitizer_loader_path),
+        auth_sanitizer_loader_path,
+        1,
+      )
+
+      auth_sanitizer_loader_namespace
+        .const_get(:AuthSanitizer)
+        .const_get(:Loader)
+        .load_isolated
+    end
+  end
+end

data/lib/oauth/tty/cli.rb

@@ -3,8 +3,10 @@
 module OAuth
   module TTY
     class CLI
-      def self.puts_red(string)
-        puts "\033[0;91m#{string}\033[0m"
+      class << self
+        def puts_red(string)
+          puts "\033[0;91m#{string}\033[0m"
+        end
       end
 
       ALIASES = {

data/lib/oauth/tty/command.rb

@@ -2,7 +2,18 @@
 
 module OAuth
   module TTY
+    # Base class for oauth-tty commands.
+    #
+    # Includes {OAuth::TTY::AUTH_SANITIZER::FilteredAttributes} so inspect output redacts
+    # the accumulated command options hash, which may contain consumer or token
+    # secrets read from CLI flags or option files.
     class Command
+      include OAuth::TTY::AUTH_SANITIZER::FilteredAttributes
+
+      # Redact parser-related state from inspect output because it can include
+      # credential-bearing CLI arguments and parser internals that retain them.
+      filtered_attributes :options, :option_parser
+
       def initialize(stdout, stdin, stderr, arguments)
         @stdout = stdout
         @stdin = stdin
@@ -12,6 +23,17 @@ module OAuth
         option_parser.parse!(arguments)
       end
 
+      def inspect
+        format(
+          "#<%<klass>s:0x%<object_id>x @stdout=%<stdout>s, @stdin=%<stdin>s, @stderr=%<stderr>s, @options=[FILTERED], @option_parser=[FILTERED]>",
+          klass: self.class,
+          object_id: object_id,
+          stdout: @stdout.inspect,
+          stdin: @stdin.inspect,
+          stderr: @stderr.inspect,
+        )
+      end
+
       def run
         missing = required_options - options.keys
         if missing.empty?
@@ -26,10 +48,12 @@ module OAuth
         []
       end
 
-      protected
+      private
 
       attr_reader :options
 
+      protected
+
       def show_missing(array)
         array = array.map { |s| "--#{s}" }.join(" ")
         OAuth::TTY::CLI.puts_red("Options missing to OAuth CLI: #{array}")

data/lib/oauth/tty/version.rb

@@ -3,7 +3,8 @@
 module OAuth
   module TTY
     module Version
-      VERSION = "1.0.6"
+      VERSION = "1.0.8"
     end
+    VERSION = Version::VERSION # Traditional Constant Location
   end
 end

data/lib/oauth/tty.rb

@@ -1,6 +1,7 @@
 # frozen_string_literal: true
 
 # stdlib
+require "cgi"
 require "optparse"
 
 # external gems
@@ -13,6 +14,7 @@ require "oauth"
 
 # this gem's version
 require_relative "tty/version"
+require_relative "tty/auth_sanitizer"
 
 # Configure version before loading the rest of the library
 OAuth::TTY::Version.class_eval do

data/sig/oauth/tty/command.rbs

@@ -0,0 +1,15 @@
+module OAuth
+  module TTY
+    class Command
+      include OAuth::TTY::AUTH_SANITIZER::FilteredAttributes
+
+      def initialize: (untyped stdout, untyped stdin, untyped stderr, untyped arguments) -> void
+      def run: () -> untyped
+      def required_options: () -> Array[untyped]
+
+      private
+
+      attr_reader options: untyped
+    end
+  end
+end

data/sig/oauth/tty/version.rbs

@@ -4,5 +4,6 @@ module OAuth
       VERSION: String
       # See the writing guide of rbs: https://github.com/ruby/rbs#guides
     end
+    VERSION: String
   end
 end

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: oauth-tty
 version: !ruby/object:Gem::Version
-  version: 1.0.6
+  version: 1.0.8
 platform: ruby
 authors:
 - Thiago Pinto
@@ -38,6 +38,40 @@ cert_chain:
   -----END CERTIFICATE-----
 date: 1980-01-02 00:00:00.000000000 Z
 dependencies:
+- !ruby/object:Gem::Dependency
+  name: cgi
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: '0'
+  type: :runtime
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: '0'
+- !ruby/object:Gem::Dependency
+  name: auth-sanitizer
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '0.1'
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: 0.1.3
+  type: :runtime
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '0.1'
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: 0.1.3
 - !ruby/object:Gem::Dependency
   name: version_gem
   requirement: !ruby/object:Gem::Requirement
@@ -64,28 +98,28 @@ dependencies:
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: '1.1'
+        version: '2.0'
   type: :development
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: '1.1'
+        version: '2.0'
 - !ruby/object:Gem::Dependency
   name: bundler-audit
   requirement: !ruby/object:Gem::Requirement
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: 0.9.2
+        version: 0.9.3
   type: :development
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: 0.9.2
+        version: 0.9.3
 - !ruby/object:Gem::Dependency
   name: rake
   requirement: !ruby/object:Gem::Requirement
@@ -127,6 +161,9 @@ dependencies:
     - - "~>"
       - !ruby/object:Gem::Version
         version: '3.0'
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: 3.0.6
   type: :development
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
@@ -134,6 +171,9 @@ dependencies:
     - - "~>"
       - !ruby/object:Gem::Version
         version: '3.0'
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: 3.0.6
 - !ruby/object:Gem::Dependency
   name: kettle-test
   requirement: !ruby/object:Gem::Requirement
@@ -141,6 +181,9 @@ dependencies:
     - - "~>"
       - !ruby/object:Gem::Version
         version: '1.0'
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: 1.0.10
   type: :development
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
@@ -148,20 +191,23 @@ dependencies:
     - - "~>"
       - !ruby/object:Gem::Version
         version: '1.0'
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: 1.0.10
 - !ruby/object:Gem::Dependency
   name: mocha
   requirement: !ruby/object:Gem::Requirement
     requirements:
-    - - ">="
+    - - "~>"
       - !ruby/object:Gem::Version
-        version: '0'
+        version: '3.0'
   type: :development
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
-    - - ">="
+    - - "~>"
       - !ruby/object:Gem::Version
-        version: '0'
+        version: '3.0'
 - !ruby/object:Gem::Dependency
   name: rack
   requirement: !ruby/object:Gem::Requirement
@@ -180,50 +226,50 @@ dependencies:
   name: rack-test
   requirement: !ruby/object:Gem::Requirement
     requirements:
-    - - ">="
+    - - "~>"
       - !ruby/object:Gem::Version
-        version: '0'
+        version: '2.0'
   type: :development
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
-    - - ">="
+    - - "~>"
       - !ruby/object:Gem::Version
-        version: '0'
+        version: '2.0'
 - !ruby/object:Gem::Dependency
   name: rest-client
   requirement: !ruby/object:Gem::Requirement
     requirements:
-    - - ">="
+    - - "~>"
       - !ruby/object:Gem::Version
-        version: '0'
+        version: '2.1'
   type: :development
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
-    - - ">="
+    - - "~>"
       - !ruby/object:Gem::Version
-        version: '0'
+        version: '2.1'
 - !ruby/object:Gem::Dependency
   name: rspec-pending_for
   requirement: !ruby/object:Gem::Requirement
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: '0.0'
+        version: '0.1'
     - - ">="
       - !ruby/object:Gem::Version
-        version: 0.0.17
+        version: 0.1.20
   type: :development
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: '0.0'
+        version: '0.1'
     - - ">="
       - !ruby/object:Gem::Version
-        version: 0.0.17
+        version: 0.1.20
 - !ruby/object:Gem::Dependency
   name: typhoeus
   requirement: !ruby/object:Gem::Requirement
@@ -261,7 +307,7 @@ dependencies:
         version: '1.0'
     - - ">="
       - !ruby/object:Gem::Version
-        version: 1.0.2
+        version: 1.0.3
   type: :development
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
@@ -271,7 +317,7 @@ dependencies:
         version: '1.0'
     - - ">="
       - !ruby/object:Gem::Version
-        version: 1.0.2
+        version: 1.0.3
 - !ruby/object:Gem::Dependency
   name: gitmoji-regex
   requirement: !ruby/object:Gem::Requirement
@@ -372,6 +418,7 @@ files:
 - exe/oauth
 - lib/oauth/cli.rb
 - lib/oauth/tty.rb
+- lib/oauth/tty/auth_sanitizer.rb
 - lib/oauth/tty/cli.rb
 - lib/oauth/tty/command.rb
 - lib/oauth/tty/commands/authorize_command.rb
@@ -381,16 +428,17 @@ files:
 - lib/oauth/tty/commands/version_command.rb
 - lib/oauth/tty/version.rb
 - lib/oauth_tty.rb
+- sig/oauth/tty/command.rbs
 - sig/oauth/tty/version.rbs
 homepage: https://github.com/ruby-oauth/oauth-tty
 licenses:
 - MIT
 metadata:
   homepage_uri: https://oauth-tty.galtzo.com/
-  source_code_uri: https://github.com/ruby-oauth/oauth-tty/tree/v1.0.6
-  changelog_uri: https://github.com/ruby-oauth/oauth-tty/blob/v1.0.6/CHANGELOG.md
+  source_code_uri: https://github.com/ruby-oauth/oauth-tty/tree/v1.0.8
+  changelog_uri: https://github.com/ruby-oauth/oauth-tty/blob/v1.0.8/CHANGELOG.md
   bug_tracker_uri: https://github.com/ruby-oauth/oauth-tty/issues
-  documentation_uri: https://www.rubydoc.info/gems/oauth-tty/1.0.6
+  documentation_uri: https://www.rubydoc.info/gems/oauth-tty/1.0.8
   funding_uri: https://github.com/sponsors/pboling
   wiki_uri: https://github.com/ruby-oauth/oauth-tty/wiki
   news_uri: https://www.railsbling.com/tags/oauth-tty
@@ -420,7 +468,7 @@ required_rubygems_version: !ruby/object:Gem::Requirement
     - !ruby/object:Gem::Version
       version: '0'
 requirements: []
-rubygems_version: 3.7.2
+rubygems_version: 4.0.11
 specification_version: 4
 summary: "\U0001F5A5️ OAuth 1.0 / 1.0a TTY CLI"
 test_files: []