oauth 0.5.6 → 1.1.0

Sign up to get free protection for your applications and to get access to all the features.
Files changed (57) hide show
  1. checksums.yaml +4 -4
  2. data/CHANGELOG.md +504 -0
  3. data/CODE_OF_CONDUCT.md +84 -0
  4. data/CONTRIBUTING.md +40 -0
  5. data/LICENSE +19 -17
  6. data/README.md +390 -0
  7. data/SECURITY.md +26 -0
  8. data/lib/oauth/client/action_controller_request.rb +23 -21
  9. data/lib/oauth/client/em_http.rb +99 -99
  10. data/lib/oauth/client/helper.rb +83 -82
  11. data/lib/oauth/client/net_http.rb +112 -105
  12. data/lib/oauth/client.rb +2 -0
  13. data/lib/oauth/consumer.rb +147 -133
  14. data/lib/oauth/errors/error.rb +2 -0
  15. data/lib/oauth/errors/problem.rb +3 -0
  16. data/lib/oauth/errors/unauthorized.rb +7 -1
  17. data/lib/oauth/errors.rb +5 -3
  18. data/lib/oauth/helper.rb +26 -18
  19. data/lib/oauth/oauth.rb +6 -4
  20. data/lib/oauth/oauth_test_helper.rb +6 -4
  21. data/lib/oauth/request_proxy/action_controller_request.rb +49 -71
  22. data/lib/oauth/request_proxy/action_dispatch_request.rb +8 -4
  23. data/lib/oauth/request_proxy/base.rb +136 -132
  24. data/lib/oauth/request_proxy/curb_request.rb +49 -43
  25. data/lib/oauth/request_proxy/em_http_request.rb +59 -49
  26. data/lib/oauth/request_proxy/jabber_request.rb +12 -9
  27. data/lib/oauth/request_proxy/mock_request.rb +5 -3
  28. data/lib/oauth/request_proxy/net_http.rb +61 -54
  29. data/lib/oauth/request_proxy/rack_request.rb +35 -31
  30. data/lib/oauth/request_proxy/rest_client_request.rb +54 -50
  31. data/lib/oauth/request_proxy/typhoeus_request.rb +51 -45
  32. data/lib/oauth/request_proxy.rb +7 -4
  33. data/lib/oauth/server.rb +14 -12
  34. data/lib/oauth/signature/base.rb +78 -71
  35. data/lib/oauth/signature/hmac/sha1.rb +16 -10
  36. data/lib/oauth/signature/hmac/sha256.rb +16 -10
  37. data/lib/oauth/signature/plaintext.rb +18 -20
  38. data/lib/oauth/signature/rsa/sha1.rb +46 -38
  39. data/lib/oauth/signature.rb +8 -5
  40. data/lib/oauth/token.rb +7 -5
  41. data/lib/oauth/tokens/access_token.rb +5 -3
  42. data/lib/oauth/tokens/consumer_token.rb +4 -2
  43. data/lib/oauth/tokens/request_token.rb +12 -10
  44. data/lib/oauth/tokens/server_token.rb +2 -1
  45. data/lib/oauth/tokens/token.rb +2 -0
  46. data/lib/oauth/version.rb +5 -1
  47. data/lib/oauth.rb +17 -9
  48. metadata +105 -98
  49. data/README.rdoc +0 -88
  50. data/bin/oauth +0 -11
  51. data/lib/oauth/cli/authorize_command.rb +0 -71
  52. data/lib/oauth/cli/base_command.rb +0 -208
  53. data/lib/oauth/cli/help_command.rb +0 -22
  54. data/lib/oauth/cli/query_command.rb +0 -25
  55. data/lib/oauth/cli/sign_command.rb +0 -81
  56. data/lib/oauth/cli/version_command.rb +0 -7
  57. data/lib/oauth/cli.rb +0 -56
checksums.yaml CHANGED
@@ -1,7 +1,7 @@
1
1
  ---
2
2
  SHA256:
3
- metadata.gz: 9bd785e08f2a318da373f07b79fe6583ed3e8c26bcc92c5e1513ee615ea0f037
4
- data.tar.gz: 3e9f81feb37166f4fec398d20e8b4de882b6e1e2304f893c033b920ab737616a
3
+ metadata.gz: 5ed78104bc98c911e6a9cf2a9e5472eb70a883396346379bcf0ca5ad9a5a5a6a
4
+ data.tar.gz: 918ffe268ffdd0a3e8cb29dda997f07ecef3156c53ff4dde82a68dec5325c8ae
5
5
  SHA512:
6
- metadata.gz: 6bc060045ecb7ca1c47263f4bab7fde62c3a173ccf7ea6e1dacc5ac4e814ecea88e4b2f594f6bd2a7d80f9393e1295b1a5cbc85f3eb74c35cbb348da6f32cfe6
7
- data.tar.gz: c96c9abd68f71cca8d33db21e3d68f1c7fe98898dba924fd440bf882280d99d39beb7a0751be913bb0f18872875ca8098792733f1717ff8d127156a99a69f039
6
+ metadata.gz: 5ecad352056ded301c816243d846d7628929db7cf10c320ab63627dadc5eb8aa427120f3e74824eb280f8d25e159c639fe16e6405f70d7b02b1ebbf081f0488c
7
+ data.tar.gz: 8cef46c071d1c2bc8e8a3c766477fa90ac76d61661d3131496e20dade1a199a1d9e2248dd41b022383f956f76a987d6579c3960cd4d437f7a143a3043cd086e0
data/CHANGELOG.md ADDED
@@ -0,0 +1,504 @@
1
+ # Changelog
2
+ All notable changes to this project will be documented in this file.
3
+
4
+ The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/),
5
+ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
6
+
7
+ ## [Unreleased]
8
+ ### Added
9
+
10
+ ### Changed
11
+
12
+ ### Fixed
13
+
14
+ ### Removed
15
+
16
+ ## [1.1.0] 2022-08-29
17
+ ### Changed
18
+ * `OAuth::CLI` has been extracted to a new gem, `oauth-tty`, hosted on [Gitlab](https://gitlab.com/oauth-xx/oauth-tty)
19
+ * The public API of `oauth-tty` is backwards compatible (meaning `OAuth::CLI`)
20
+ * The change within the `oauth` gem is backwards compatible as `oauth-tty` has been added as a dependency
21
+ * Minor version bump is cautionary, as many lines of code have changed.
22
+ * `OAuth::Comsumer#options` hash is now handled by `snaky_hash`, which was extracted from `oauth2`
23
+ * symbolized keys, dot-access and snake-case are now normalized
24
+
25
+ ## [1.0.1] 2022-08-29
26
+ ### Changed
27
+ * `OAuth::Comsumer#options` hash is now handled by `snaky_hash`, which was extracted from `oauth2`
28
+ * symbolized keys, dot-access and snake-case are now normalized
29
+
30
+ ## [1.0.0] 2022-08-23
31
+ ### Changed
32
+ * Dropped support for Ruby < 2.7
33
+ * Dropped support for Rails < 6
34
+
35
+ ### Added
36
+ * New EOL Policy
37
+ * Non-commercial support for the oldest version of Ruby (which itself is going EOL) will be dropped each year in April
38
+
39
+ ## [0.6.2] 2022-08-29
40
+ ### Changed
41
+ * `OAuth::Comsumer#options` hash is now handled by `snaky_hash`, which was extracted from `oauth2`
42
+ * symbolized keys, dot-access and snake-case are now normalized
43
+
44
+ ## [0.6.1] 2022-08-23
45
+ ### Changed
46
+ * Fixed documentation in SECURITY.md
47
+ * Change references to master => main
48
+
49
+ ### Added
50
+ * Post install note about v0.6.x EOL approaching in April, 2024
51
+
52
+ ## [0.6.0] 2022-08-23
53
+ ### Added
54
+ * New option `body_hash_enabled` which defaults to true to maintain backward compatibility with prior releases. Setting to `false` disables generation of a `oauth_body_hash` component as part of the signature computation.
55
+ * Improved documentation of support policy via Tidelift
56
+ * Stop testing against active_support v2
57
+
58
+ ### Changed
59
+ * Utilize version_gem extracted from oauth2 gem for VERSION
60
+ * Added new `OAuth::Version` namespace
61
+ * VERSION constant now at `OAuth::Version::VERSION`
62
+
63
+ ### Removed
64
+ * Ruby 2.0, 2.1, 2.2, and 2.3 are no longer valid install targets
65
+
66
+ ## [0.5.14] 2022-08-29
67
+ The "hopeful last 0.5.x" Release
68
+
69
+ ### Fixed
70
+ * More typos fixed
71
+
72
+ ## [0.5.13] 2022-08-23
73
+ The "I think I caught 'em all!" Release
74
+
75
+ ### Fixed
76
+ * Typo oauth2 => oauth as gem name in one more place.
77
+
78
+ ## [0.5.12] 2022-08-23
79
+ The "Typoes are just the worst!" Release
80
+
81
+ ### Fixed
82
+ * Typo oauth2 => oauth as gem name in a couple places.
83
+
84
+ ## [0.5.11] 2022-08-23
85
+ The "Is this the last release with a silly name?" Release
86
+
87
+ ### Added
88
+ * Post install note about v0.5.x EOL approaching in April, 2023
89
+
90
+ ### Changed
91
+ * Improved documentation
92
+ * Switched branch references from master to main
93
+ * CI builds are now all green!
94
+
95
+ ## [0.5.10] 2022-05-04
96
+ The "Can it be the end of the line for 0.5.x?" Release
97
+
98
+ ### Added
99
+ * Major updates to Documentation
100
+ * More CI Hardening
101
+ * Align CI builds with official Ruby Compatibility Matrix
102
+ * Project tooling in preparation for final release of 0.5.x series
103
+ - diffend
104
+
105
+ ## [0.5.9] 2022-05-03
106
+ ### Added
107
+ * Documentation related to Ruby compatibility
108
+ * Updated CHANGELOG.md formatting
109
+ * Corrected CHANGELOG.md typos
110
+ * Hardened the CI build for the next few years(?!)
111
+ * Require MFA to push new version to Rubygems
112
+ * Replace Hash Rocket syntax with JSON-style symbols where possible
113
+ * Project tooling in preparation for final release of 0.5.x series
114
+ - rubocop-ruby2_0
115
+ - overcommit
116
+
117
+ ## [0.5.8] 2021-11-10
118
+ ### Added
119
+ * Added more documentation files to packaged gem, e.g. SECURITY.md, CODE_OF_CONDUCT.md
120
+
121
+ ### Fixed
122
+ * Removed reference to RUBY_VERSION from gemspec, as it depends on rake release, which is problematic on some ruby engines. (by @pboling)
123
+
124
+ ## [0.5.7] 2021-11-02
125
+ ### Added
126
+ * Setup Rubocop (#205, #208 by @pboling)
127
+ * Added CODE_OF_CONDUCT.md (#217, #218 by @pboling)
128
+ * Added FUNDING.yml (#217, #218 by @pboling)
129
+ * Added Client Certificate Options: :ssl_client_cert and :ssl_client_key (#136, #220 by @pboling)
130
+ * Handle a nested array of hashes in OAuth::Helper.normalize (#80, #221 by @pboling)
131
+
132
+ ### Changed
133
+ * Switch from TravisCI to Github Actions (#202, #207, #176 by @pboling)
134
+ * Upgrade webmock to v3.14.0 (#196 by @pboling)
135
+ * Upgrade em-http-request to v1.1.7 (#173 by @pboling)
136
+ * Upgrade mocha to v1.13.0 (#193 by @pboling)
137
+ * HISTORY renamed to CHANGELOG.md, and follows Keep a Changelog (#214, #215 by @pboling)
138
+ * CHANGELOG, LICENSE, and README now ship with packaged gem (#214, #215 by @pboling)
139
+ * README.rdoc renamed to README.md (#217, #218 by @pboling)
140
+ * Require plaintext signature method by default (#135 by @confiks & @pboling)
141
+
142
+ ### Fixed
143
+ * Fixed Infinite Redirect in v0.5.5, v0.5.6 (#186, #210 by @pboling)
144
+ * Fixed NoMethodError on missing leading slash in path (#194, #211 by @pboling)
145
+ * Fixed NoMethodError on nil request object (#165, #212 by @pboling)
146
+ * Fixed Unsafe String Comparison (#156, #209 by @pboling and @drosseau)
147
+ * Fixed typos in Gemspec (#204, #203, #208 by @pboling)
148
+ * Copyright Notice in LICENSE - added correct years (#217, #218 by @pboling)
149
+ * Fixed request proxy Class constant reference scopes - was missing `::` in many places (#225, #226 by @pboling)
150
+
151
+ ### Removed
152
+ * Remove direct development dependency on nokogiri (#299 by @pboling)
153
+
154
+ ## [0.5.6] 2021-04-02
155
+ ### Added
156
+ * Add metadata to Gemspec file
157
+ * Add support for PUT requests with Action Controller (#181)
158
+
159
+ ### Changed
160
+ * Change default timeout to be the same as Net::HTTP default, 60 seconds instead of 30 seconds.
161
+
162
+ ## [0.5.5] 2020-01-19
163
+ ### Added
164
+ * Add :allow_empty_params option (#155)
165
+
166
+ ### Changed
167
+ * Allow redirect to different host but same path
168
+ * Various cleanups
169
+
170
+ ### Fixed
171
+ * Fixes ssl-noverify
172
+ * Fixed README example (#158, #159, by @pboling)
173
+
174
+ ## [0.5.4] 2017-12-08
175
+ ### Changed
176
+ * Various cleanups (charliesome)
177
+
178
+ ### Fixed
179
+ * Fixes UnknownRequestType on Rails 5.1 for ActionDispatch::Request (xprazak2)
180
+
181
+ ## [0.5.3] 2017-05-24
182
+ ### Fixed
183
+ * Fix #145 - broken CLI required loading active_support (James Pinto)
184
+
185
+ ### Changed
186
+ * Removing legacy scripts (James Pinto)
187
+
188
+ ## [0.5.2] 2017-05-17
189
+ ### Added
190
+ * Adding a development dependency that had not been mentioned (James Pinto)
191
+ * Adding CodeClimate (James Pinto)
192
+ * Adding support to Ruby 2.4 and head (James Pinto)
193
+
194
+ ### Changed
195
+ * Use assert_nil so as to silence a Minitest 6 deprecation warning (James Pinto)
196
+ * Stop bundling tests files in the gem (Michal Papis)
197
+ * Minor cleanup on tests (James Pinto)
198
+ * TravisCI no longer needs libcurl-dev (James Pinto)
199
+ * Nokogiri 1.7 does not accept Ruby 2.0 (James Pinto)
200
+ * Upgrading to CodeClimate 1.0 (James Pinto)
201
+ * Locking gemspec to Rails 4 so as to allow our next version for Rails 5 (James Pinto)
202
+ * moving development dependency to gemspec (James Pinto)
203
+ * Silencing 'Net::HTTPResponse#header is obsolete' (James Pinto)
204
+ * Silencing some test warnings (James Pinto)
205
+ * Silencing 'loading in progress, circular require considered harmful' (James Pinto)
206
+ * Silence 'URI.escape obsolete' (James Pinto)
207
+ * Refactored CLI (James Pinto)
208
+ * Moving test files into test/units/ (James Pinto)
209
+ * Reimplementing #82 - Debug Output Option (James Pinto)
210
+
211
+ ### Fixed
212
+ * Fix #113 adding paths when a full URL has been specified (James Pinto)
213
+ * Bug Fix, webmock 2.0 has introduced a new bug (James Pinto)
214
+ * Making a test/support dir (James Pinto)
215
+ * Fix #177 - Adjusting to webmock latest recommended implementation for minitest (James Pinto)
216
+
217
+ ## [0.5.1] 2016-02-29
218
+ ### Added
219
+ * Add license info to the gemspec (Robert Reiz)
220
+
221
+ ### Fixed
222
+ * Proper handling for empty query string in RequestToken#build_authorize_url (midchildan,
223
+ Harald Sitter)
224
+ * Replace calls to String#blank? with its implementation (Sergio Gil Pérez de la Manga)
225
+
226
+ ### Changed
227
+ * Loosen some development dependencies. Add libcurl-dev to travis
228
+ * Fixes to travis config. Switch to rubygems for installation and loading
229
+
230
+ ### Removed
231
+ * Remove obsolete comment (Arthur Nogueira Neves)
232
+ * Remove jeweler from gemspec
233
+
234
+ ## [0.5.0] 2016-02-20
235
+ ### Added
236
+ * Add support for HTTP PATCH method (Richard Huang)
237
+ * Allow reading private key from a string (Khaja Minhajuddin)
238
+ * Add rest-client proxy (Khem Veasna)
239
+ * Add byebug. (Kevin Hughes)
240
+ * Allow reading certificate file path from environment variable. Add CentOS cert file path (Danil Vlasov)
241
+
242
+ ### Changed
243
+ * Replace jeweler with real spec and bundler tasks
244
+ * Extract version to separate file
245
+ * Use OpenSSL for all digest and hashing. Remove signature methods not defined by OAuth spec. (Kevin Hughes)
246
+ * Change token requests to exclude `oauth_body_hash`. Update doc links in comments. (John Remmen)
247
+
248
+ ### Fixed
249
+ * Fix ability to pass in an authorize url with a query string (Roger Smith)
250
+ * Fix bug in signature verification (r-stu31)
251
+ * Use standard key name (`oauth_token_secret`) in Token#to_query (Craig Walker)
252
+ * Fix error in CLI when using `query` without supplying a method (grafikchaos)
253
+ * Compatibility fix for Typhoeus >= 0.5.0 (Chad Feller)
254
+ * Rails 3+ / ActiveSupport::SafeBuffer patch (Clif Reeder)
255
+ * Handle `nil` token gracefully for RequestToken#authorize_url (Brian John)
256
+ * Fix typhoeus compatibility (Vladimir Mikhailov)
257
+ * Fix oauth cli option parser on Ruby 2.2 (Felix Bünemann)
258
+ * Update gemspec for security fixes. Convert to Minitest. Add .travis.yml. (Kevin Hughes)
259
+ * Fix some warnings (amatsuda)
260
+ * Various fixes/updates to README (Evan Arnold, Jonathan Camenisch, Brian John, Ankur Sethi)
261
+
262
+ ## [0.4.7] 2012-09-03
263
+ ### Added
264
+ * Set a configurable timeout for all requests (Rick Olson)
265
+
266
+ ### Fixed
267
+ * Fix merging paths if the path is not empty
268
+ * Fix nested hash params in Consumer#request (Ernie Miller)
269
+
270
+ ## [0.4.6] 2012-04-21
271
+ ### Changed
272
+ * Make use the path component of the :site parameter (Jonathon M. Abbott)
273
+
274
+ ### Fixed
275
+ * Fixed nested attributes in #normalize (Shaliko Usubov)
276
+ * Fixed post body's being dropped in 1.9 (Steven Hammond)
277
+ * Fixed PUT request handling (Anton Panasenko)
278
+
279
+ ## [0.4.5] 2011-06-25
280
+ ### Added
281
+ * Add explicit require for rsa/sha1 (Juris Galang)
282
+ * Add gemtest support (Adrian Feldman)
283
+
284
+ ### Changed
285
+ * Use webmock to mock all http-requests in tests (Adrian Feldman)
286
+ * Mention Typhoeus require in the README (Kim Ahlström)
287
+ * Use Net::HTTPGenericRequest (Jakub Kuźma)
288
+
289
+ ### Fixed
290
+ * Fix POST Requests with Typhoeus proxy (niedhui)
291
+ * Fix incorrect hardcoded port (Ian Taylor)
292
+
293
+ ## [0.4.4] 2010-10-31
294
+ ### Added
295
+ * Added support for Rails 3 in client/action_controller_request (Pelle)
296
+
297
+ ### Fixed
298
+ * Fix LoadError rescue in tests: return can't be used in this context (Hans de Graaff)
299
+ * HTTP headers should be strings. (seancribbs)
300
+ * ensure consumer uri gets set back to original config even if an error occurs (Brian Finney)
301
+ * Yahoo uses & to split records in OAuth headers (Brian Finney)
302
+
303
+ ## [0.4.3] 2010-09-01
304
+ ### Fixed
305
+ * Fix for em-http proxy (ichverstehe)
306
+
307
+ ## [0.4.2] 2010-08-13
308
+ ### Added
309
+ * Added Bundler (rc) Gemfile for easier dev/testing
310
+
311
+ ### Fixed
312
+ * Fixed compatibility with Ruby 1.9.2 (ecavazos)
313
+ * Fixed the em-http request proxy (Joshua Hull)
314
+ * Fix for oauth proxy string manipulation (Jakub Suder)
315
+
316
+ ## [0.4.1] 2010-06-16
317
+ ### Added
318
+ * Added support for using OAuth with proxies (Marsh Gardiner)
319
+
320
+ ### Fixed
321
+ * Rails 3 Compatibility fixes (Pelle Braendgaard)
322
+ * Fixed load errors on tests for missing (non-required) libraries
323
+
324
+ ## [0.4.0] 2010-04-22
325
+ ### Added
326
+ * Added computation of oauth_body_hash as per OAuth Request Body Hash 1.0 Draft 4 (Michael Reinsch)
327
+ * Added the optional `oauth_session_handle` parameter for the Yahoo implementation (Will Bailey)
328
+ * Added optional block to OAuth::Consumer.get_*_token (Neill Pearman)
329
+ * Exclude `oauth_callback` with :exclude_callback (Neill Pearman)
330
+ * Support for Ruby 1.9 (Aaron Quint, Corey Donahoe, et al)
331
+ * Support for Typhoeus (Bill Kocik)
332
+ * Support for em-http (EventMachine) (Darcy Laycock)
333
+ * Support for curb (André Luis Leal Cardoso Junior)
334
+ * New website (Aaron Quint)
335
+
336
+ ### Changed
337
+ * Better marshalling implementation (Yoan Blanc)
338
+ * Replaced hoe with Jeweler (Aaron Quint)
339
+
340
+ ### Fixed
341
+ * Strip extraneous spaces and line breaks from access_token responses (observed in the wild with Yahoo!'s OAuth+OpenID hybrid) (Eric Hartmann)
342
+ * Stop double-escaping PLAINTEXT signatures (Jimmy Zimmerman)
343
+ * OAuth::Client::Helper won't override the specified `oauth_version` (Philip Kromer)
344
+ * Fixed an encoding / multibyte issue (成田 一生)
345
+
346
+ ## [0.3.6] 2009-09-14
347
+ ### Added
348
+ * Added -B CLI option to use the :body authentication scheme (Seth)
349
+ * Support POST and PUT with raw bodies (Yu-Shan Fung et al)
350
+ * Added :ca_file consumer option to allow consumer specific certificate override. (Pelle)
351
+
352
+ ### Changed
353
+ * Test clean-up (Xavier Shay, Hannes Tydén)
354
+
355
+ ### Fixed
356
+ * Respect `--method` in `authorize` CLI command (Seth)
357
+
358
+ ## [0.3.5] 2009-06-03
359
+ ### Added
360
+ * `query` CLI command to access protected resources (Seth)
361
+ * Added -H, -Q CLI options for specifying the authentication scheme (Seth)
362
+ * Added -O CLI option for specifying a file containing options (Seth)
363
+ * Support streamable body contents for large request bodies (Seth Cousins)
364
+ * Support for OAuth 1.0a (Seth)
365
+ * Added proxy support to OAuth::Consumer (Marshall Huss)
366
+ * Added --scope CLI option for Google's 'scope' parameter (Seth)
367
+
368
+ ## [0.3.4] 2009-05-06
369
+ ### Changed
370
+ * OAuth::Client::Helper uses OAuth::Version::VERSION (chadisfaction)
371
+
372
+ ### Fixed
373
+ * Fix OAuth::RequestProxy::ActionControllerRequest's handling of params (Tristan Groléat)
374
+
375
+ ## [0.3.3] 2009-05-04
376
+ ### Added
377
+ * Support for arguments in OAuth::Consumer#get_access_token (Matt Sanford)
378
+ * Add gem version to user-agent header (Matt Sanford)
379
+
380
+ ### Changed
381
+ * Improved error handling for invalid Authorization headers (Matt Sanford)
382
+ * Handle input from aggressive form encoding libraries (Matt Wood)
383
+
384
+ ### Fixed
385
+ * Corrected OAuth XMPP namespace (Seth)
386
+ * Fixed signatures for non-ASCII under $KCODE other than 'u' (Matt Sanford)
387
+ * Fixed edge cases in ActionControllerRequestProxy where params were being incorrectly signed (Marcos Wright Kuhns)
388
+
389
+ ## [0.3.2] 2009-03-23
390
+ ### Added
391
+ * Support applications using the MethodOverride Rack middleware (László Bácsi)
392
+ * `authorize` command for `oauth` CLI (Seth)
393
+ * Initial support for Problem Reporting extension (Seth)
394
+ * Verify SSL certificates if CA certificates are available (Seth)
395
+ * Added help to the 'oauth' CLI (Seth)
396
+
397
+ ### Fixed
398
+ * 2xx statuses should be treated as success (Anders Conbere)
399
+ * Fixed ActionController parameter escaping behavior (Thiago Arrais, László Bácsi, Brett Gibson, et al)
400
+ * Fixed signature calculation when both options and a block were provided to OAuth::Signature::Base#initialize (Seth)
401
+ * Fixed a problem when attempting to normalize MockRequest URIs (Seth)
402
+
403
+ ## [0.3.1] 2009-01-26
404
+ ### Fixed
405
+ * Fixed a problem with relative and absolute token request paths. (Michael Wood)
406
+
407
+ ## [0.3.0] 2009-01-25
408
+ ### Added
409
+ * Support ActionController::Request from Edge Rails (László Bácsi)
410
+ * Added #normalized_parameters to OAuth::RequestProxy::Base (Pelle)
411
+ * Command-line app for generating signatures. (Seth)
412
+
413
+ ### Changed
414
+ * OAuth::Signature.sign and friends now yield the RequestProxy instead of the token when the passed block's arity is 1. (Seth)
415
+ * Improved test-cases and compatibility for encoding issues. (Pelle)
416
+
417
+ ### Fixed
418
+ * Correctly handle multi-valued parameters (Seth)
419
+ * Token requests are made to the configured URL rather than generating a potentially incorrect one. (Kellan Elliott-McCrea)
420
+
421
+ ## 0.2.7 2008-09-10
422
+ The lets fix the last release release
423
+
424
+ ### Fixed
425
+ * Fixed plain text signatures (Andrew Arrow)
426
+ * Fixed RSA requests using OAuthTokens. (Philip Lipu Tsai)
427
+
428
+ ## 0.2.6 2008-09-09
429
+ The lets RSA release
430
+
431
+ ### Added
432
+ * Improved support for Ruby 1.8.7 (Bill Kocik)
433
+ * Added support for 'private_key_file' option for RSA signatures (Chris Mear)
434
+
435
+ ### Changed
436
+ * Improved RSA testing
437
+ * Omit token when signing with RSA
438
+
439
+ ### Fixed
440
+ * Fixed RSA verification to support RSA providers now using Ruby and RSA
441
+ * Fixed several edge cases where params were being incorrectly signed (Scott Hill)
442
+ * Fixed RSA signing (choonkeat)
443
+
444
+ ## 0.2.2 2008-02-22
445
+ Lets actually support SSL release
446
+
447
+ ### Fixed
448
+ * Use HTTPS when required.
449
+
450
+ ## 0.2 2008-1-19
451
+ All together now release
452
+
453
+ This is a big release, where we have merged the efforts of various parties into one common library.
454
+ This means there are definitely some API changes you should be aware of. They should be minimal
455
+ but please have a look at the unit tests.
456
+
457
+ ## 0.1.2 2007-12-1
458
+ ### Fixed
459
+ * Fixed checks for missing OAuth params to improve performance
460
+ * Includes Pat's fix for getting the realm out.
461
+
462
+ ## 0.1.1 2007-11-26
463
+ ### Added
464
+ * First release as a GEM
465
+ * Moved all non-Rails functionality from the Rails plugin:
466
+ http://code.google.com/p/oauth-plugin/
467
+
468
+ [Unreleased]: https://github.com/oauth-xx/oauth-ruby/compare/v1.1.0...main
469
+ [1.1.0]: https://github.com/oauth-xx/oauth-ruby/releases/tag/v1.1.0
470
+ [1.0.1]: https://github.com/oauth-xx/oauth-ruby/releases/tag/v1.0.1
471
+ [1.0.0]: https://github.com/oauth-xx/oauth-ruby/releases/tag/v1.0.0
472
+ [0.6.2]: https://github.com/oauth-xx/oauth-ruby/releases/tag/v0.6.2
473
+ [0.6.1]: https://github.com/oauth-xx/oauth-ruby/releases/tag/v0.6.1
474
+ [0.6.0]: https://github.com/oauth-xx/oauth-ruby/releases/tag/v0.6.0
475
+ [0.5.14]: https://github.com/oauth-xx/oauth-ruby/releases/tag/v0.5.14
476
+ [0.5.13]: https://github.com/oauth-xx/oauth-ruby/releases/tag/v0.5.13
477
+ [0.5.12]: https://github.com/oauth-xx/oauth-ruby/releases/tag/v0.5.12
478
+ [0.5.11]: https://github.com/oauth-xx/oauth-ruby/releases/tag/v0.5.11
479
+ [0.5.10]: https://github.com/oauth-xx/oauth-ruby/releases/tag/v0.5.10
480
+ [0.5.9]: https://github.com/oauth-xx/oauth-ruby/releases/tag/v0.5.9
481
+ [0.5.8]: https://github.com/oauth-xx/oauth-ruby/releases/tag/v0.5.8
482
+ [0.5.7]: https://github.com/oauth-xx/oauth-ruby/releases/tag/v0.5.7
483
+ [0.5.6]: https://github.com/oauth-xx/oauth-ruby/releases/tag/v0.5.6
484
+ [0.5.5]: https://github.com/oauth-xx/oauth-ruby/releases/tag/v0.5.5
485
+ [0.5.4]: https://github.com/oauth-xx/oauth-ruby/releases/tag/v0.5.4
486
+ [0.5.3]: https://github.com/oauth-xx/oauth-ruby/releases/tag/v0.5.3
487
+ [0.5.2]: https://github.com/oauth-xx/oauth-ruby/releases/tag/v0.5.2
488
+ [0.5.1]: https://github.com/oauth-xx/oauth-ruby/releases/tag/v0.5.1
489
+ [0.5.0]: https://github.com/oauth-xx/oauth-ruby/releases/tag/v0.5.0
490
+ [0.4.7]: https://github.com/oauth-xx/oauth-ruby/releases/tag/v0.4.7
491
+ [0.4.6]: https://github.com/oauth-xx/oauth-ruby/releases/tag/v0.4.6
492
+ [0.4.5]: https://github.com/oauth-xx/oauth-ruby/releases/tag/v0.4.5
493
+ [0.4.4]: https://github.com/oauth-xx/oauth-ruby/releases/tag/v0.4.4
494
+ [0.4.3]: https://github.com/oauth-xx/oauth-ruby/releases/tag/v0.4.3
495
+ [0.4.2]: https://github.com/oauth-xx/oauth-ruby/releases/tag/v0.4.2
496
+ [0.4.1]: https://github.com/oauth-xx/oauth-ruby/releases/tag/v0.4.1
497
+ [0.4.0]: https://github.com/oauth-xx/oauth-ruby/releases/tag/v0.4.0
498
+ [0.3.6]: https://github.com/oauth-xx/oauth-ruby/releases/tag/v0.3.6
499
+ [0.3.5]: https://github.com/oauth-xx/oauth-ruby/releases/tag/v0.3.5
500
+ [0.3.4]: https://github.com/oauth-xx/oauth-ruby/releases/tag/v0.3.4
501
+ [0.3.3]: https://github.com/oauth-xx/oauth-ruby/releases/tag/v0.3.3
502
+ [0.3.2]: https://github.com/oauth-xx/oauth-ruby/releases/tag/v0.3.2
503
+ [0.3.1]: https://github.com/oauth-xx/oauth-ruby/releases/tag/v0.3.1
504
+ [0.3.0]: https://github.com/oauth-xx/oauth-ruby/releases/tag/v0.3.0
@@ -0,0 +1,84 @@
1
+ # Contributor Covenant Code of Conduct
2
+
3
+ ## Our Pledge
4
+
5
+ We as members, contributors, and leaders pledge to make participation in our community a harassment-free experience for everyone, regardless of age, body size, visible or invisible disability, ethnicity, sex characteristics, gender identity and expression, level of experience, education, socio-economic status, nationality, personal appearance, race, religion, or sexual identity and orientation.
6
+
7
+ We pledge to act and interact in ways that contribute to an open, welcoming, diverse, inclusive, and healthy community.
8
+
9
+ ## Our Standards
10
+
11
+ Examples of behavior that contributes to a positive environment for our community include:
12
+
13
+ * Demonstrating empathy and kindness toward other people
14
+ * Being respectful of differing opinions, viewpoints, and experiences
15
+ * Giving and gracefully accepting constructive feedback
16
+ * Accepting responsibility and apologizing to those affected by our mistakes, and learning from the experience
17
+ * Focusing on what is best not just for us as individuals, but for the overall community
18
+
19
+ Examples of unacceptable behavior include:
20
+
21
+ * The use of sexualized language or imagery, and sexual attention or
22
+ advances of any kind
23
+ * Trolling, insulting or derogatory comments, and personal or political attacks
24
+ * Public or private harassment
25
+ * Publishing others' private information, such as a physical or email
26
+ address, without their explicit permission
27
+ * Other conduct which could reasonably be considered inappropriate in a
28
+ professional setting
29
+
30
+ ## Enforcement Responsibilities
31
+
32
+ Community leaders are responsible for clarifying and enforcing our standards of acceptable behavior and will take appropriate and fair corrective action in response to any behavior that they deem inappropriate, threatening, offensive, or harmful.
33
+
34
+ Community leaders have the right and responsibility to remove, edit, or reject comments, commits, code, wiki edits, issues, and other contributions that are not aligned to this Code of Conduct, and will communicate reasons for moderation decisions when appropriate.
35
+
36
+ ## Scope
37
+
38
+ This Code of Conduct applies within all community spaces, and also applies when an individual is officially representing the community in public spaces. Examples of representing our community include using an official e-mail address, posting via an official social media account, or acting as an appointed representative at an online or offline event.
39
+
40
+ ## Enforcement
41
+
42
+ Instances of abusive, harassing, or otherwise unacceptable behavior may be reported to the community leaders responsible for enforcement at peter.boling@gmail.com. All complaints will be reviewed and investigated promptly and fairly.
43
+
44
+ All community leaders are obligated to respect the privacy and security of the reporter of any incident.
45
+
46
+ ## Enforcement Guidelines
47
+
48
+ Community leaders will follow these Community Impact Guidelines in determining the consequences for any action they deem in violation of this Code of Conduct:
49
+
50
+ ### 1. Correction
51
+
52
+ **Community Impact**: Use of inappropriate language or other behavior deemed unprofessional or unwelcome in the community.
53
+
54
+ **Consequence**: A private, written warning from community leaders, providing clarity around the nature of the violation and an explanation of why the behavior was inappropriate. A public apology may be requested.
55
+
56
+ ### 2. Warning
57
+
58
+ **Community Impact**: A violation through a single incident or series of actions.
59
+
60
+ **Consequence**: A warning with consequences for continued behavior. No interaction with the people involved, including unsolicited interaction with those enforcing the Code of Conduct, for a specified period of time. This includes avoiding interactions in community spaces as well as external channels like social media. Violating these terms may lead to a temporary or permanent ban.
61
+
62
+ ### 3. Temporary Ban
63
+
64
+ **Community Impact**: A serious violation of community standards, including sustained inappropriate behavior.
65
+
66
+ **Consequence**: A temporary ban from any sort of interaction or public communication with the community for a specified period of time. No public or private interaction with the people involved, including unsolicited interaction with those enforcing the Code of Conduct, is allowed during this period. Violating these terms may lead to a permanent ban.
67
+
68
+ ### 4. Permanent Ban
69
+
70
+ **Community Impact**: Demonstrating a pattern of violation of community standards, including sustained inappropriate behavior, harassment of an individual, or aggression toward or disparagement of classes of individuals.
71
+
72
+ **Consequence**: A permanent ban from any sort of public interaction within the community.
73
+
74
+ ## Attribution
75
+
76
+ This Code of Conduct is adapted from the [Contributor Covenant][homepage], version 2.0,
77
+ available at https://www.contributor-covenant.org/version/2/0/code_of_conduct.html.
78
+
79
+ Community Impact Guidelines were inspired by [Mozilla's code of conduct enforcement ladder](https://github.com/mozilla/diversity).
80
+
81
+ [homepage]: https://www.contributor-covenant.org
82
+
83
+ For answers to common questions about this code of conduct, see the FAQ at
84
+ https://www.contributor-covenant.org/faq. Translations are available at https://www.contributor-covenant.org/translations.
data/CONTRIBUTING.md ADDED
@@ -0,0 +1,40 @@
1
+ ## Contributing
2
+
3
+ Bug reports and pull requests are welcome on GitHub at [https://github.com/oauth-xx/oauth-ruby][source]. This project is
4
+ intended to be a safe, welcoming space for collaboration, and contributors are expected to adhere to
5
+ the [code of conduct][conduct].
6
+
7
+ To submit a patch, please fork the project and create a patch with
8
+ tests. Once you're happy with it send a pull request and post a message to the
9
+ [google group][mailinglist].
10
+
11
+ ## Run tests
12
+
13
+ ### Against Rails 6
14
+
15
+ ```bash
16
+ BUNDLE_GEMFILE=gemfiles/a6.gemfile bundle install
17
+ BUNDLE_GEMFILE=gemfiles/a6.gemfile bundle exec rake
18
+ ```
19
+
20
+
21
+ ### Against Rails 7
22
+
23
+ ```bash
24
+ BUNDLE_GEMFILE=gemfiles/a7.gemfile bundle install
25
+ BUNDLE_GEMFILE=gemfiles/a7.gemfile bundle exec rake
26
+ ```
27
+
28
+ ## Contributors
29
+
30
+ [![Contributors](https://contrib.rocks/image?repo=oauth-xx/oauth-ruby)][contributors]
31
+
32
+ Made with [contributors-img][contrib-rocks].
33
+
34
+ [comment]: <> (Following links are used by README, CONTRIBUTING, Homepage)
35
+
36
+ [conduct]: https://github.com/oauth-xx/oauth-ruby/blob/main/CODE_OF_CONDUCT.md
37
+ [contributors]: https://github.com/oauth-xx/oauth-ruby/graphs/contributors
38
+ [mailinglist]: http://groups.google.com/group/oauth-ruby
39
+ [source]: https://github.com/oauth-xx/oauth-ruby/
40
+ [contrib-rocks]: https://contrib.rocks
data/LICENSE CHANGED
@@ -1,20 +1,22 @@
1
- Copyright (c) 2007 Blaine Cook, Larry Halff, Pelle Braendgaard
1
+ The MIT License (MIT)
2
2
 
3
- Permission is hereby granted, free of charge, to any person obtaining
4
- a copy of this software and associated documentation files (the
5
- "Software"), to deal in the Software without restriction, including
6
- without limitation the rights to use, copy, modify, merge, publish,
7
- distribute, sublicense, and/or sell copies of the Software, and to
8
- permit persons to whom the Software is furnished to do so, subject to
9
- the following conditions:
3
+ Copyright (c) 2007-2012, 2016-2017 Blaine Cook, Larry Halff, Pelle Braendgaard
4
+ Copyright (c) 2020-2022 Peter Boling
10
5
 
11
- The above copyright notice and this permission notice shall be
12
- included in all copies or substantial portions of the Software.
6
+ Permission is hereby granted, free of charge, to any person obtaining a copy
7
+ of this software and associated documentation files (the "Software"), to deal
8
+ in the Software without restriction, including without limitation the rights
9
+ to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
10
+ copies of the Software, and to permit persons to whom the Software is
11
+ furnished to do so, subject to the following conditions:
13
12
 
14
- THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND,
15
- EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF
16
- MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND
17
- NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE
18
- LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION
19
- OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION
20
- WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.
13
+ The above copyright notice and this permission notice shall be included in
14
+ all copies or substantial portions of the Software.
15
+
16
+ THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
17
+ IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
18
+ FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
19
+ AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
20
+ LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
21
+ OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN
22
+ THE SOFTWARE.