oauth 0.5.13 → 1.0.0
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- checksums.yaml +4 -4
- data/CHANGELOG.md +36 -3
- data/CONTRIBUTING.md +1 -1
- data/LICENSE +2 -1
- data/README.md +66 -53
- data/SECURITY.md +9 -6
- data/bin/oauth +8 -4
- data/lib/oauth/cli/authorize_command.rb +58 -54
- data/lib/oauth/cli/base_command.rb +163 -159
- data/lib/oauth/cli/help_command.rb +9 -5
- data/lib/oauth/cli/query_command.rb +26 -17
- data/lib/oauth/cli/sign_command.rb +56 -52
- data/lib/oauth/cli/version_command.rb +8 -4
- data/lib/oauth/cli.rb +2 -0
- data/lib/oauth/client/action_controller_request.rb +4 -1
- data/lib/oauth/client/em_http.rb +4 -4
- data/lib/oauth/client/helper.rb +76 -72
- data/lib/oauth/client/net_http.rb +111 -104
- data/lib/oauth/client.rb +2 -0
- data/lib/oauth/consumer.rb +38 -28
- data/lib/oauth/errors/error.rb +2 -0
- data/lib/oauth/errors/problem.rb +3 -0
- data/lib/oauth/errors/unauthorized.rb +4 -0
- data/lib/oauth/errors.rb +2 -0
- data/lib/oauth/helper.rb +9 -5
- data/lib/oauth/oauth.rb +4 -2
- data/lib/oauth/oauth_test_helper.rb +2 -0
- data/lib/oauth/request_proxy/action_controller_request.rb +3 -24
- data/lib/oauth/request_proxy/base.rb +3 -3
- data/lib/oauth/request_proxy/mock_request.rb +1 -1
- data/lib/oauth/request_proxy/net_http.rb +5 -7
- data/lib/oauth/request_proxy/rest_client_request.rb +4 -3
- data/lib/oauth/request_proxy.rb +4 -1
- data/lib/oauth/server.rb +8 -4
- data/lib/oauth/signature/base.rb +71 -65
- data/lib/oauth/signature/hmac/sha1.rb +15 -9
- data/lib/oauth/signature/hmac/sha256.rb +15 -9
- data/lib/oauth/signature/plaintext.rb +18 -20
- data/lib/oauth/signature/rsa/sha1.rb +46 -38
- data/lib/oauth/signature.rb +3 -0
- data/lib/oauth/token.rb +2 -0
- data/lib/oauth/tokens/access_token.rb +2 -0
- data/lib/oauth/tokens/consumer_token.rb +2 -0
- data/lib/oauth/tokens/request_token.rb +5 -2
- data/lib/oauth/tokens/server_token.rb +2 -0
- data/lib/oauth/tokens/token.rb +2 -0
- data/lib/oauth/version.rb +5 -1
- data/lib/oauth.rb +8 -2
- metadata +32 -34
checksums.yaml
CHANGED
|
@@ -1,7 +1,7 @@
|
|
|
1
1
|
---
|
|
2
2
|
SHA256:
|
|
3
|
-
metadata.gz:
|
|
4
|
-
data.tar.gz:
|
|
3
|
+
metadata.gz: a742c9fad7615c19f25dc2b780f8811029314827b05f91bf803b2a4b92805e10
|
|
4
|
+
data.tar.gz: dda3f9afdca321d3613bc6344d71a4cfffa43e19c380f3d86325aeaed09cc388
|
|
5
5
|
SHA512:
|
|
6
|
-
metadata.gz:
|
|
7
|
-
data.tar.gz:
|
|
6
|
+
metadata.gz: 4abeba00e6da594572d2e74c974ac8658c947aa43fd9ea06f6e600df9a0b7b73d31bd8051cddab35749b8ed37346482c00653f29b9882d3b88a10d0716108403
|
|
7
|
+
data.tar.gz: cdd3b2015294fef30bd722804486c50dc1b19f566b6ae5ddc65e4ceb83e284439ff7059d9a6d5c098bb945122663223b0e383a3732f298b46a5bef1946aa9a39
|
data/CHANGELOG.md
CHANGED
|
@@ -13,6 +13,36 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
|
|
|
13
13
|
|
|
14
14
|
### Removed
|
|
15
15
|
|
|
16
|
+
## [1.0.0] 2022-08-23
|
|
17
|
+
### Changed
|
|
18
|
+
* Dropped support for Ruby < 2.7
|
|
19
|
+
|
|
20
|
+
### Added
|
|
21
|
+
* New EOL Policy
|
|
22
|
+
* Non-commercial support for the oldest version of Ruby (which itself is going EOL) will be dropped each year in April
|
|
23
|
+
|
|
24
|
+
## [0.6.1] 2022-08-23
|
|
25
|
+
### Changed
|
|
26
|
+
* Fixed documentation in SECURITY.md
|
|
27
|
+
* Change references to master => main
|
|
28
|
+
|
|
29
|
+
### Added
|
|
30
|
+
* Post install note about v0.6.x EOL approaching in April, 2024
|
|
31
|
+
|
|
32
|
+
## [0.6.0] 2022-08-23
|
|
33
|
+
### Added
|
|
34
|
+
* New option `body_hash_enabled` which defaults to true to maintain backward compatibility with prior releases. Setting to `false` disables generation of a `oauth_body_hash` component as part of the signature computation.
|
|
35
|
+
* Improved documentation of support policy via Tidelift
|
|
36
|
+
* Stop testing against active_support v2
|
|
37
|
+
|
|
38
|
+
### Changed
|
|
39
|
+
* Utilize version_gem extracted from oauth2 gem for VERSION
|
|
40
|
+
* Added new `OAuth::Version` namespace
|
|
41
|
+
* VERSION constant now at `OAuth::Version::VERSION`
|
|
42
|
+
|
|
43
|
+
### Removed
|
|
44
|
+
* Ruby 2.0, 2.1, 2.2, and 2.3 are no longer valid install targets
|
|
45
|
+
|
|
16
46
|
## [0.5.13] 2022-08-23
|
|
17
47
|
The "I think I caught 'em all!" Release
|
|
18
48
|
|
|
@@ -29,7 +59,7 @@ The "Typoes are just the worst!" Release
|
|
|
29
59
|
The "Is this the last release with a silly name?" Release
|
|
30
60
|
|
|
31
61
|
### Added
|
|
32
|
-
* Post install note about EOL approaching in April, 2023
|
|
62
|
+
* Post install note about v0.5.x EOL approaching in April, 2023
|
|
33
63
|
|
|
34
64
|
### Changed
|
|
35
65
|
* Improved documentation
|
|
@@ -311,7 +341,7 @@ The "Can it be the end of the line for 0.5.x?" Release
|
|
|
311
341
|
|
|
312
342
|
## [0.3.4] 2009-05-06
|
|
313
343
|
### Changed
|
|
314
|
-
* OAuth::Client::Helper uses OAuth::VERSION (chadisfaction)
|
|
344
|
+
* OAuth::Client::Helper uses OAuth::Version::VERSION (chadisfaction)
|
|
315
345
|
|
|
316
346
|
### Fixed
|
|
317
347
|
* Fix OAuth::RequestProxy::ActionControllerRequest's handling of params (Tristan Groléat)
|
|
@@ -409,7 +439,10 @@ but please have a look at the unit tests.
|
|
|
409
439
|
* Moved all non-Rails functionality from the Rails plugin:
|
|
410
440
|
http://code.google.com/p/oauth-plugin/
|
|
411
441
|
|
|
412
|
-
[Unreleased]: https://github.com/oauth-xx/oauth-ruby/compare/
|
|
442
|
+
[Unreleased]: https://github.com/oauth-xx/oauth-ruby/compare/v1.0.0...main
|
|
443
|
+
[1.0.0]: https://github.com/oauth-xx/oauth-ruby/releases/tag/v1.0.0
|
|
444
|
+
[0.6.1]: https://github.com/oauth-xx/oauth-ruby/releases/tag/v0.6.1
|
|
445
|
+
[0.6.0]: https://github.com/oauth-xx/oauth-ruby/releases/tag/v0.6.0
|
|
413
446
|
[0.5.13]: https://github.com/oauth-xx/oauth-ruby/releases/tag/v0.5.13
|
|
414
447
|
[0.5.12]: https://github.com/oauth-xx/oauth-ruby/releases/tag/v0.5.12
|
|
415
448
|
[0.5.11]: https://github.com/oauth-xx/oauth-ruby/releases/tag/v0.5.11
|
data/CONTRIBUTING.md
CHANGED
|
@@ -17,7 +17,7 @@ Made with [contributors-img][contrib-rocks].
|
|
|
17
17
|
[comment]: <> (Following links are used by README, CONTRIBUTING, Homepage)
|
|
18
18
|
|
|
19
19
|
[conduct]: https://github.com/oauth-xx/oauth-ruby/blob/main/CODE_OF_CONDUCT.md
|
|
20
|
-
[contributing]: https://github.com/oauth-xx/oauth-ruby/blob/main/CONTRIBUTING.md
|
|
21
20
|
[contributors]: https://github.com/oauth-xx/oauth-ruby/graphs/contributors
|
|
22
21
|
[mailinglist]: http://groups.google.com/group/oauth-ruby
|
|
23
22
|
[source]: https://github.com/oauth-xx/oauth-ruby/
|
|
23
|
+
[contrib-rocks]: https://contrib.rocks
|
data/LICENSE
CHANGED
|
@@ -1,6 +1,7 @@
|
|
|
1
1
|
The MIT License (MIT)
|
|
2
2
|
|
|
3
|
-
Copyright (c) 2007-2012, 2016-2017
|
|
3
|
+
Copyright (c) 2007-2012, 2016-2017 Blaine Cook, Larry Halff, Pelle Braendgaard
|
|
4
|
+
Copyright (c) 2020-2022 Peter Boling
|
|
4
5
|
|
|
5
6
|
Permission is hereby granted, free of charge, to any person obtaining a copy
|
|
6
7
|
of this software and associated documentation files (the "Software"), to deal
|
data/README.md
CHANGED
|
@@ -20,11 +20,17 @@ See the sibling `oauth2` gem for OAuth 2.0 implementations in Ruby.
|
|
|
20
20
|
[oauth1-spec]: http://oauth.net/core/1.0/
|
|
21
21
|
[sibling-gem]: https://github.com/oauth-xx/oauth-ruby
|
|
22
22
|
|
|
23
|
-
**
|
|
23
|
+
**New EOL Policy**
|
|
24
24
|
|
|
25
|
-
|
|
26
|
-
|
|
27
|
-
|
|
25
|
+
Versions 1.0.x will be EOL no later than April, 2025.
|
|
26
|
+
Versions 0.6.x will be EOL no later than April, 2024.
|
|
27
|
+
Versions 0.5.x will be EOL no later than April, 2023.
|
|
28
|
+
|
|
29
|
+
This will facilitate dropping support for old, dead, and crusty versions of Ruby.
|
|
30
|
+
|
|
31
|
+
Non-commercial support for the oldest version of Ruby (which itself is going EOL) will be dropped each year in April.
|
|
32
|
+
|
|
33
|
+
Please upgrade to version 1.0. The only breaking change in 1.0 is dropping old Rubies.
|
|
28
34
|
|
|
29
35
|
## Status
|
|
30
36
|
|
|
@@ -55,15 +61,15 @@ appended indicators:
|
|
|
55
61
|
♻️ - URL needs to be updated from SASS integration. Find / Replace is insufficient.
|
|
56
62
|
-->
|
|
57
63
|
|
|
58
|
-
| | Project | bundle add oauth
|
|
59
|
-
|
|
60
|
-
| 1️⃣ | name, license, docs | [![RubyGems.org][⛳️name-img]][⛳️gem] [![License: MIT][🖇src-license-img]][🖇src-license] [![
|
|
61
|
-
| 2️⃣ | version & activity | [![Gem Version][⛳️version-img]][⛳️gem] [![Total Downloads][🖇DL-total-img]][⛳️gem] [![Download Rank][🏘DL-rank-img]][⛳️gem] [![Source Code][🚎src-home-img]][🚎src-home] [![Open PRs][🖐prs-o-img]][🖐prs-o] [![Closed PRs][🧮prs-c-img]][🧮prs-c] |
|
|
62
|
-
| 3️⃣ | maintenance & linting | [![Maintainability][⛳cclim-maint-img♻️]][⛳cclim-maint] [![Helpers][🖇triage-help-img]][🖇triage-help] [![Depfu][🏘depfu-img♻️]][🏘depfu♻️] [![Contributors][🚎contributors-img]][🚎contributors] [![Style][🖐style-wf-img]][🖐style-wf] [![Kloc Roll][🧮kloc-img]][🧮kloc]
|
|
63
|
-
| 4️⃣ | testing | [![Open Issues][⛳iss-o-img]][⛳iss-o] [![Closed Issues][🖇iss-c-img]][🖇iss-c] [![Supported][🏘sup-wf-img]][🏘sup-wf] [![Heads][🚎heads-wf-img]][🚎heads-wf] [![
|
|
64
|
-
| 5️⃣ | coverage & security | [![CodeClimate][⛳cclim-cov-img♻️]][⛳cclim-cov] [![CodeCov][🖇codecov-img♻️]][🖇codecov] [![Coveralls][🏘coveralls-img]][🏘coveralls] [![Security Policy][🚎sec-pol-img]][🚎sec-pol] [![CodeQL][🖐codeQL-img]][🖐codeQL] [![Code Coverage][🧮cov-wf-img]][🧮cov-wf]
|
|
65
|
-
| 6️⃣ | resources | [![Discussion][⛳gh-discussions-img]][⛳gh-discussions] [![Get help on Codementor][🖇codementor-img]][🖇codementor] [![Chat][🏘chat-img]][🏘chat] [![Blog][🚎blog-img]][🚎blog] [![Blog][🖐wiki-img]][🖐wiki]
|
|
66
|
-
| 7️⃣ | spread 💖 | [![Liberapay Patrons][⛳liberapay-img]][⛳liberapay] [![Sponsor Me][🖇sponsor-img]][🖇sponsor] [![Tweet @ Peter][🏘tweet-img]][🏘tweet] [🌏][aboutme] [👼][angelme] [💻][coderme]
|
|
64
|
+
| | Project | bundle add oauth |
|
|
65
|
+
|:----|-----------------------|-------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------|
|
|
66
|
+
| 1️⃣ | name, license, docs | [![RubyGems.org][⛳️name-img]][⛳️gem] [![License: MIT][🖇src-license-img]][🖇src-license] [![RubyDoc.info][🚎yard-img]][🚎yard] |
|
|
67
|
+
| 2️⃣ | version & activity | [![Gem Version][⛳️version-img]][⛳️gem] [![Total Downloads][🖇DL-total-img]][⛳️gem] [![Download Rank][🏘DL-rank-img]][⛳️gem] [![Source Code][🚎src-home-img]][🚎src-home] [![Open PRs][🖐prs-o-img]][🖐prs-o] [![Closed PRs][🧮prs-c-img]][🧮prs-c] <!--[![Next Version][📗next-img]][📗next]--> |
|
|
68
|
+
| 3️⃣ | maintenance & linting | [![Maintainability][⛳cclim-maint-img♻️]][⛳cclim-maint] [![Helpers][🖇triage-help-img]][🖇triage-help] [![Depfu][🏘depfu-img♻️]][🏘depfu♻️] [![Contributors][🚎contributors-img]][🚎contributors] [![Style][🖐style-wf-img]][🖐style-wf] [![Kloc Roll][🧮kloc-img]][🧮kloc] |
|
|
69
|
+
| 4️⃣ | testing | [![Open Issues][⛳iss-o-img]][⛳iss-o] [![Closed Issues][🖇iss-c-img]][🖇iss-c] [![Supported][🏘sup-wf-img]][🏘sup-wf] [![Heads][🚎heads-wf-img]][🚎heads-wf] [![MacOS][🧮mac-wf-img]][🧮mac-wf] [![Windows][📗win-wf-img]][📗win-wf] |
|
|
70
|
+
| 5️⃣ | coverage & security | [![CodeClimate][⛳cclim-cov-img♻️]][⛳cclim-cov] [![CodeCov][🖇codecov-img♻️]][🖇codecov] [![Coveralls][🏘coveralls-img]][🏘coveralls] [![Security Policy][🚎sec-pol-img]][🚎sec-pol] [![CodeQL][🖐codeQL-img]][🖐codeQL] [![Code Coverage][🧮cov-wf-img]][🧮cov-wf] |
|
|
71
|
+
| 6️⃣ | resources | [![Discussion][⛳gh-discussions-img]][⛳gh-discussions] [![Get help on Codementor][🖇codementor-img]][🖇codementor] [![Chat][🏘chat-img]][🏘chat] [![Blog][🚎blog-img]][🚎blog] [![Blog][🖐wiki-img]][🖐wiki] |
|
|
72
|
+
| 7️⃣ | spread 💖 | [![Liberapay Patrons][⛳liberapay-img]][⛳liberapay] [![Sponsor Me][🖇sponsor-img]][🖇sponsor] [![Tweet @ Peter][🏘tweet-img]][🏘tweet] [🌏][aboutme] [👼][angelme] [💻][coderme] |
|
|
67
73
|
|
|
68
74
|
<!--
|
|
69
75
|
The link tokens in the following sections should be kept ordered by the row and badge numbering scheme
|
|
@@ -74,11 +80,8 @@ The link tokens in the following sections should be kept ordered by the row and
|
|
|
74
80
|
[⛳️name-img]: https://img.shields.io/badge/name-oauth-brightgreen.svg?style=flat
|
|
75
81
|
[🖇src-license]: https://opensource.org/licenses/MIT
|
|
76
82
|
[🖇src-license-img]: https://img.shields.io/badge/License-MIT-green.svg
|
|
77
|
-
[🏘fossa]: https://app.fossa.io/projects/git%2Bgithub.com%2Foauth-xx%2Foauth-ruby?ref=badge_shield
|
|
78
|
-
[🏘fossa-img]: https://app.fossa.io/api/projects/git%2Bgithub.com%2Foauth-xx%2Foauth-ruby.svg?type=shield
|
|
79
83
|
[🚎yard]: https://www.rubydoc.info/github/oauth-xx/oauth-ruby
|
|
80
84
|
[🚎yard-img]: https://img.shields.io/badge/documentation-rubydoc-brightgreen.svg?style=flat
|
|
81
|
-
[🖐inch-ci-img]: http://inch-ci.org/github/oauth-xx/oauth-ruby.png
|
|
82
85
|
|
|
83
86
|
<!-- 2️⃣ version & activity -->
|
|
84
87
|
[⛳️version-img]: http://img.shields.io/gem/v/oauth.svg
|
|
@@ -116,8 +119,6 @@ The link tokens in the following sections should be kept ordered by the row and
|
|
|
116
119
|
[🏘sup-wf-img]: https://github.com/oauth-xx/oauth-ruby/actions/workflows/supported.yml/badge.svg
|
|
117
120
|
[🚎heads-wf]: https://github.com/oauth-xx/oauth-ruby/actions/workflows/heads.yml
|
|
118
121
|
[🚎heads-wf-img]: https://github.com/oauth-xx/oauth-ruby/actions/workflows/heads.yml/badge.svg
|
|
119
|
-
[🖐uns-wf]: https://github.com/oauth-xx/oauth-ruby/actions/workflows/unsupported.yml
|
|
120
|
-
[🖐uns-wf-img]: https://github.com/oauth-xx/oauth-ruby/actions/workflows/unsupported.yml/badge.svg
|
|
121
122
|
[🧮mac-wf]: https://github.com/oauth-xx/oauth-ruby/actions/workflows/macos.yml
|
|
122
123
|
[🧮mac-wf-img]: https://github.com/oauth-xx/oauth-ruby/actions/workflows/macos.yml/badge.svg
|
|
123
124
|
[📗win-wf]: https://github.com/oauth-xx/oauth-ruby/actions/workflows/windows.yml
|
|
@@ -187,12 +188,14 @@ For more see [SECURITY.md][🚎sec-pol].
|
|
|
187
188
|
## Compatibility
|
|
188
189
|
|
|
189
190
|
Targeted ruby compatibility is non-EOL versions of Ruby, currently 2.7, 3.0, and
|
|
190
|
-
3.1. Ruby is limited to 2.
|
|
191
|
+
3.1. Ruby is limited to 2.7+ in the gemspec, and this will change with minor version bumps,
|
|
192
|
+
while the gem is still in 0.x, in accordance with the SemVer spec.
|
|
191
193
|
|
|
192
|
-
The `
|
|
193
|
-
See `v0.
|
|
194
|
+
The `main` branch now targets 1.0.x releases, for Ruby >= 2.7.
|
|
195
|
+
See `v0.6-maintenance` (EOL April, 2024) branch for Ruby >= 2.4.
|
|
196
|
+
See `v0.5-maintenance` (EOL April, 2023) branch for Ruby >= 2.0.
|
|
194
197
|
|
|
195
|
-
NOTE: No further releases of
|
|
198
|
+
NOTE: No further releases of version < 1.0.x are anticipated.
|
|
196
199
|
|
|
197
200
|
<details>
|
|
198
201
|
<summary>Ruby Engine Compatibility Policy</summary>
|
|
@@ -222,17 +225,18 @@ fashion. If critical issues for a particular implementation exist at the time
|
|
|
222
225
|
of a major release, support for that Ruby version may be dropped.
|
|
223
226
|
</details>
|
|
224
227
|
|
|
225
|
-
| | Ruby OAuth Version | Maintenance Branch | 🚂 Compatibility | Official 💎 | Unofficial 💎
|
|
226
|
-
|
|
227
|
-
| 1️⃣ | 1.0.x | `main` | Rails 6, 7 | 2.7, 3.0, 3.1 | sorry, not sorry
|
|
228
|
-
| 2️⃣ | 0.6.x | `v0.6-maintenance` | Rails 5, 6, 7 | 2.7, 3.0, 3.1 | 2.5, 2.6
|
|
229
|
-
| 3️⃣ | 0.5.x | `v0.5-maintenance` | Rails 2, 3, 4, 5, 6, 7 | 2.7, 3.0, 3.1 | 2.2, 2.3, 2.4, 2.5, 2.6 | 2.0
|
|
230
|
-
| 4️⃣ | older | N/A | | Best of luck to you! | Please upgrade!
|
|
228
|
+
| | Ruby OAuth Version | Maintenance Branch | EOL | 🚂 Compatibility | Official 💎 | Unofficial 💎 | Incidental 💎 |
|
|
229
|
+
|:----|--------------------|--------------------|-----------|------------------------|----------------------|------------------------------|---------------|
|
|
230
|
+
| 1️⃣ | 1.0.x | `main` | | Rails 6, 7 | 2.7, 3.0, 3.1 | sorry, not sorry | nope |
|
|
231
|
+
| 2️⃣ | 0.6.x | `v0.6-maintenance` | 04/2024 | Rails 5, 6, 7 | 2.7, 3.0, 3.1 | 2.5, 2.6 | 2.4 |
|
|
232
|
+
| 3️⃣ | 0.5.x | `v0.5-maintenance` | 04/2023 | Rails 2, 3, 4, 5, 6, 7 | 2.7, 3.0, 3.1 | 2.1, 2.2, 2.3, 2.4, 2.5, 2.6 | 2.0 |
|
|
233
|
+
| 4️⃣ | older | N/A | yesterday | | Best of luck to you! | Please upgrade! | noop |
|
|
231
234
|
|
|
232
|
-
NOTE: Support for version 0.5.x will end in April, 2023
|
|
233
235
|
NOTE: Once 1.0 is released, the 0.x series will only receive critical bug and security updates.
|
|
234
236
|
See [SECURITY.md][🚎sec-pol]
|
|
235
237
|
|
|
238
|
+
🚂 NOTE: See notes on Rails in next section.
|
|
239
|
+
|
|
236
240
|
## Basics
|
|
237
241
|
|
|
238
242
|
This is a ruby library which is intended to be used in creating Ruby Consumer
|
|
@@ -257,38 +261,46 @@ callback_url = "http://127.0.0.1:3000/oauth/callback"
|
|
|
257
261
|
|
|
258
262
|
Create a new `OAuth::Consumer` instance by passing it a configuration hash:
|
|
259
263
|
|
|
260
|
-
|
|
264
|
+
```ruby
|
|
265
|
+
oauth_consumer = OAuth::Consumer.new("key", "secret", site: "https://agree2")
|
|
266
|
+
```
|
|
261
267
|
|
|
262
268
|
Start the process by requesting a token
|
|
263
269
|
|
|
264
|
-
|
|
270
|
+
```ruby
|
|
271
|
+
request_token = oauth_consumer.get_request_token(oauth_callback: callback_url)
|
|
265
272
|
|
|
266
|
-
|
|
267
|
-
|
|
268
|
-
|
|
273
|
+
session[:token] = request_token.token
|
|
274
|
+
session[:token_secret] = request_token.secret
|
|
275
|
+
redirect_to request_token.authorize_url(oauth_callback: callback_url)
|
|
276
|
+
```
|
|
269
277
|
|
|
270
278
|
When user returns create an access_token
|
|
271
279
|
|
|
272
|
-
|
|
273
|
-
|
|
274
|
-
|
|
275
|
-
|
|
276
|
-
|
|
277
|
-
|
|
280
|
+
```ruby
|
|
281
|
+
hash = { oauth_token: session[:token], oauth_token_secret: session[:token_secret] }
|
|
282
|
+
request_token = OAuth::RequestToken.from_hash(oauth_consumer, hash)
|
|
283
|
+
access_token = request_token.get_access_token
|
|
284
|
+
# For 3-legged authorization, flow oauth_verifier is passed as param in callback
|
|
285
|
+
# access_token = request_token.get_access_token(oauth_verifier: params[:oauth_verifier])
|
|
286
|
+
@photos = access_token.get("/photos.xml")
|
|
287
|
+
```
|
|
278
288
|
|
|
279
289
|
Now that you have an access token, you can use Typhoeus to interact with the
|
|
280
290
|
OAuth provider if you choose.
|
|
281
291
|
|
|
282
|
-
|
|
283
|
-
|
|
284
|
-
|
|
285
|
-
|
|
286
|
-
|
|
287
|
-
|
|
288
|
-
|
|
289
|
-
|
|
290
|
-
|
|
291
|
-
|
|
292
|
+
```ruby
|
|
293
|
+
require "typhoeus"
|
|
294
|
+
require "oauth/request_proxy/typhoeus_request"
|
|
295
|
+
oauth_params = { consumer: oauth_consumer, token: access_token }
|
|
296
|
+
hydra = Typhoeus::Hydra.new
|
|
297
|
+
req = Typhoeus::Request.new(uri, options) # :method needs to be specified in options
|
|
298
|
+
oauth_helper = OAuth::Client::Helper.new(req, oauth_params.merge(request_uri: uri))
|
|
299
|
+
req.options[:headers]["Authorization"] = oauth_helper.header # Signs the request
|
|
300
|
+
hydra.queue(req)
|
|
301
|
+
hydra.run
|
|
302
|
+
@response = req.response
|
|
303
|
+
```
|
|
292
304
|
|
|
293
305
|
## More Information
|
|
294
306
|
|
|
@@ -308,6 +320,8 @@ See [CONTRIBUTING.md][contributing]
|
|
|
308
320
|
|
|
309
321
|
Made with [contributors-img][contrib-rocks].
|
|
310
322
|
|
|
323
|
+
[contrib-rocks]: https://contrib.rocks
|
|
324
|
+
|
|
311
325
|
## Versioning
|
|
312
326
|
|
|
313
327
|
This library aims to adhere to [Semantic Versioning 2.0.0][semver]. Violations of this scheme should be reported as
|
|
@@ -316,13 +330,12 @@ immediately released that restores compatibility. Breaking changes to the public
|
|
|
316
330
|
major versions. Compatibility with a major and minor versions of Ruby will only be changed with a major version bump.
|
|
317
331
|
|
|
318
332
|
As a result of this policy, you can (and should) specify a dependency on this gem using
|
|
319
|
-
the [Pessimistic Version Constraint][pvc] with two digits of precision
|
|
320
|
-
While on 0.x releases three digits of precision should be used.
|
|
333
|
+
the [Pessimistic Version Constraint][pvc] with two digits of precision.
|
|
321
334
|
|
|
322
335
|
For example:
|
|
323
336
|
|
|
324
337
|
```ruby
|
|
325
|
-
spec.add_dependency "oauth", "~> 0
|
|
338
|
+
spec.add_dependency "oauth", "~> 1.0"
|
|
326
339
|
```
|
|
327
340
|
|
|
328
341
|
## License
|
data/SECURITY.md
CHANGED
|
@@ -2,13 +2,16 @@
|
|
|
2
2
|
|
|
3
3
|
## Supported Versions
|
|
4
4
|
|
|
5
|
-
| Version | Supported |
|
|
6
|
-
|
|
7
|
-
| 0.
|
|
8
|
-
| 0.
|
|
9
|
-
|
|
|
5
|
+
| Version | Supported | EOL |
|
|
6
|
+
|---------|--------------------|---------|
|
|
7
|
+
| 1.0.x | :white_check_mark: | 04/2025 |
|
|
8
|
+
| 0.6.x | :white_check_mark: | 04/2024 |
|
|
9
|
+
| 0.5.x | :white_check_mark: | 04/2023 |
|
|
10
|
+
| <= 0.5 | :x: | :x: |
|
|
10
11
|
|
|
11
|
-
|
|
12
|
+
### EOL Policy
|
|
13
|
+
|
|
14
|
+
Non-commercial support for the oldest version of Ruby (which itself is going EOL) will be dropped each year in April.
|
|
12
15
|
|
|
13
16
|
## Reporting a Vulnerability
|
|
14
17
|
|
data/bin/oauth
CHANGED
|
@@ -1,11 +1,15 @@
|
|
|
1
1
|
#!/usr/bin/env ruby
|
|
2
|
+
# frozen_string_literal: true
|
|
2
3
|
|
|
3
|
-
|
|
4
|
+
require "oauth"
|
|
4
5
|
require "oauth/cli"
|
|
5
6
|
|
|
6
|
-
|
|
7
|
-
|
|
7
|
+
# don't dump a backtrace on a ^C
|
|
8
|
+
Signal.trap("INT") do
|
|
9
|
+
puts
|
|
10
|
+
exit(1)
|
|
11
|
+
end
|
|
8
12
|
ARGV << "help" if ARGV.empty?
|
|
9
13
|
command = ARGV.shift
|
|
10
14
|
|
|
11
|
-
OAuth::CLI.new(
|
|
15
|
+
OAuth::CLI.new($stdout, $stdin, $stderr, command, ARGV).run
|
|
@@ -1,69 +1,73 @@
|
|
|
1
|
-
|
|
2
|
-
class AuthorizeCommand < BaseCommand
|
|
3
|
-
def required_options
|
|
4
|
-
[:uri]
|
|
5
|
-
end
|
|
6
|
-
|
|
7
|
-
def _run
|
|
8
|
-
request_token = get_request_token
|
|
1
|
+
# frozen_string_literal: true
|
|
9
2
|
|
|
10
|
-
|
|
11
|
-
|
|
12
|
-
|
|
3
|
+
module OAuth
|
|
4
|
+
class CLI
|
|
5
|
+
class AuthorizeCommand < BaseCommand
|
|
6
|
+
def required_options
|
|
7
|
+
[:uri]
|
|
13
8
|
end
|
|
14
9
|
|
|
15
|
-
|
|
16
|
-
|
|
10
|
+
def _run
|
|
11
|
+
request_token = get_request_token
|
|
17
12
|
|
|
18
|
-
|
|
19
|
-
|
|
13
|
+
if request_token.callback_confirmed?
|
|
14
|
+
puts "Server appears to support OAuth 1.0a; enabling support."
|
|
15
|
+
options[:version] = "1.0a"
|
|
16
|
+
end
|
|
20
17
|
|
|
21
|
-
|
|
22
|
-
|
|
18
|
+
puts "Please visit this url to authorize:"
|
|
19
|
+
puts request_token.authorize_url
|
|
23
20
|
|
|
24
|
-
|
|
25
|
-
|
|
26
|
-
scope_options = options[:scope] ? { "scope" => options[:scope] } : {}
|
|
27
|
-
consumer.get_request_token({ oauth_callback: options[:oauth_callback] }, scope_options)
|
|
28
|
-
rescue OAuth::Unauthorized => e
|
|
29
|
-
alert "A problem occurred while attempting to authorize:"
|
|
30
|
-
alert e
|
|
31
|
-
alert e.request.body
|
|
32
|
-
end
|
|
21
|
+
# parameters for OAuth 1.0a
|
|
22
|
+
oauth_verifier = ask_user_for_verifier
|
|
33
23
|
|
|
34
|
-
|
|
35
|
-
|
|
36
|
-
options[:oauth_consumer_key],
|
|
37
|
-
options[:oauth_consumer_secret],
|
|
38
|
-
access_token_url: options[:access_token_url],
|
|
39
|
-
authorize_url: options[:authorize_url],
|
|
40
|
-
request_token_url: options[:request_token_url],
|
|
41
|
-
scheme: options[:scheme],
|
|
42
|
-
http_method: options[:method].to_s.downcase.to_sym
|
|
43
|
-
end
|
|
24
|
+
verbosely_get_access_token(request_token, oauth_verifier)
|
|
25
|
+
end
|
|
44
26
|
|
|
45
|
-
|
|
46
|
-
|
|
47
|
-
|
|
48
|
-
|
|
49
|
-
|
|
50
|
-
|
|
51
|
-
|
|
52
|
-
|
|
27
|
+
def get_request_token
|
|
28
|
+
consumer = get_consumer
|
|
29
|
+
scope_options = options[:scope] ? { "scope" => options[:scope] } : {}
|
|
30
|
+
consumer.get_request_token({ oauth_callback: options[:oauth_callback] }, scope_options)
|
|
31
|
+
rescue OAuth::Unauthorized => e
|
|
32
|
+
alert "A problem occurred while attempting to authorize:"
|
|
33
|
+
alert e
|
|
34
|
+
alert e.request.body
|
|
35
|
+
end
|
|
36
|
+
|
|
37
|
+
def get_consumer
|
|
38
|
+
OAuth::Consumer.new \
|
|
39
|
+
options[:oauth_consumer_key],
|
|
40
|
+
options[:oauth_consumer_secret],
|
|
41
|
+
access_token_url: options[:access_token_url],
|
|
42
|
+
authorize_url: options[:authorize_url],
|
|
43
|
+
request_token_url: options[:request_token_url],
|
|
44
|
+
scheme: options[:scheme],
|
|
45
|
+
http_method: options[:method].to_s.downcase.to_sym
|
|
46
|
+
end
|
|
47
|
+
|
|
48
|
+
def ask_user_for_verifier
|
|
49
|
+
if options[:version] == "1.0a"
|
|
50
|
+
puts "Please enter the verification code provided by the SP (oauth_verifier):"
|
|
51
|
+
@stdin.gets.chomp
|
|
52
|
+
else
|
|
53
|
+
puts "Press return to continue..."
|
|
54
|
+
@stdin.gets
|
|
55
|
+
nil
|
|
56
|
+
end
|
|
53
57
|
end
|
|
54
|
-
end
|
|
55
58
|
|
|
56
|
-
|
|
57
|
-
|
|
59
|
+
def verbosely_get_access_token(request_token, oauth_verifier)
|
|
60
|
+
access_token = request_token.get_access_token(oauth_verifier: oauth_verifier)
|
|
58
61
|
|
|
59
|
-
|
|
60
|
-
|
|
61
|
-
|
|
62
|
+
puts "Response:"
|
|
63
|
+
access_token.params.each do |k, v|
|
|
64
|
+
puts " #{k}: #{v}" unless k.is_a?(Symbol)
|
|
65
|
+
end
|
|
66
|
+
rescue OAuth::Unauthorized => e
|
|
67
|
+
alert "A problem occurred while attempting to obtain an access token:"
|
|
68
|
+
alert e
|
|
69
|
+
alert e.request.body
|
|
62
70
|
end
|
|
63
|
-
rescue OAuth::Unauthorized => e
|
|
64
|
-
alert "A problem occurred while attempting to obtain an access token:"
|
|
65
|
-
alert e
|
|
66
|
-
alert e.request.body
|
|
67
71
|
end
|
|
68
72
|
end
|
|
69
73
|
end
|