oauth 1.0.1 → 1.1.1

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (47) hide show
  1. checksums.yaml +4 -4
  2. checksums.yaml.gz.sig +4 -0
  3. data/CHANGELOG.md +325 -39
  4. data/CITATION.cff +20 -0
  5. data/CODE_OF_CONDUCT.md +79 -29
  6. data/CONTRIBUTING.md +221 -15
  7. data/FUNDING.md +77 -0
  8. data/{LICENSE → LICENSE.txt} +1 -1
  9. data/README.md +546 -274
  10. data/REEK +0 -0
  11. data/RUBOCOP.md +71 -0
  12. data/SECURITY.md +27 -10
  13. data/lib/oauth/client/action_controller_request.rb +14 -9
  14. data/lib/oauth/client/em_http.rb +106 -99
  15. data/lib/oauth/client/helper.rb +15 -11
  16. data/lib/oauth/client/net_http.rb +39 -13
  17. data/lib/oauth/consumer.rb +105 -54
  18. data/lib/oauth/errors/problem.rb +1 -1
  19. data/lib/oauth/helper.rb +25 -3
  20. data/lib/oauth/oauth.rb +28 -6
  21. data/lib/oauth/optional.rb +20 -0
  22. data/lib/oauth/request_proxy/action_controller_request.rb +11 -7
  23. data/lib/oauth/request_proxy/action_dispatch_request.rb +41 -0
  24. data/lib/oauth/request_proxy/base.rb +16 -13
  25. data/lib/oauth/request_proxy/em_http_request.rb +53 -52
  26. data/lib/oauth/request_proxy/jabber_request.rb +9 -2
  27. data/lib/oauth/request_proxy/net_http.rb +1 -1
  28. data/lib/oauth/request_proxy/rest_client_request.rb +4 -3
  29. data/lib/oauth/server.rb +12 -8
  30. data/lib/oauth/signature/base.rb +1 -1
  31. data/lib/oauth/signature/rsa/sha1.rb +11 -4
  32. data/lib/oauth/tokens/access_token.rb +1 -1
  33. data/lib/oauth/tokens/consumer_token.rb +2 -2
  34. data/lib/oauth/tokens/request_token.rb +9 -4
  35. data/lib/oauth/version.rb +1 -1
  36. data.tar.gz.sig +0 -0
  37. metadata +265 -89
  38. metadata.gz.sig +3 -0
  39. data/TODO +0 -32
  40. data/bin/oauth +0 -15
  41. data/lib/oauth/cli/authorize_command.rb +0 -73
  42. data/lib/oauth/cli/base_command.rb +0 -214
  43. data/lib/oauth/cli/help_command.rb +0 -26
  44. data/lib/oauth/cli/query_command.rb +0 -34
  45. data/lib/oauth/cli/sign_command.rb +0 -82
  46. data/lib/oauth/cli/version_command.rb +0 -11
  47. data/lib/oauth/cli.rb +0 -58
data/CHANGELOG.md CHANGED
@@ -1,92 +1,192 @@
1
1
  # Changelog
2
+
3
+ [![SemVer 2.0.0][📌semver-img]][📌semver] [![Keep-A-Changelog 1.0.0][📗keep-changelog-img]][📗keep-changelog]
4
+
2
5
  All notable changes to this project will be documented in this file.
3
6
 
4
- The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/),
5
- and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
7
+ The format is based on [Keep a Changelog][📗keep-changelog],
8
+ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html),
9
+ and [yes][📌major-versions-not-sacred], platform and engine support are part of the [public API][📌semver-breaking].
10
+ Please file a bug if you notice a violation of semantic versioning.
11
+
12
+ [📌semver]: https://semver.org/spec/v2.0.0.html
13
+ [📌semver-img]: https://img.shields.io/badge/semver-2.0.0-FFDD67.svg?style=flat
14
+ [📌semver-breaking]: https://github.com/semver/semver/issues/716#issuecomment-869336139
15
+ [📌major-versions-not-sacred]: https://tom.preston-werner.com/2022/05/23/major-version-numbers-are-not-sacred.html
16
+ [📗keep-changelog]: https://keepachangelog.com/en/1.0.0/
17
+ [📗keep-changelog-img]: https://img.shields.io/badge/keep--a--changelog-1.0.0-FFDD67.svg?style=flat
6
18
 
7
19
  ## [Unreleased]
20
+
8
21
  ### Added
9
22
 
10
23
  ### Changed
11
24
 
25
+ ### Deprecated
26
+
27
+ ### Removed
28
+
12
29
  ### Fixed
13
30
 
31
+ ### Security
32
+
33
+ ## [1.1.1] - 2025-09-21
34
+
35
+ - TAG: [v1.1.1][1.1.1t]
36
+ - COVERAGE: 81.70% -- 817/1000 lines in 36 files
37
+ - BRANCH COVERAGE: 50.54% -- 140/277 branches in 36 files
38
+ - 40.71% documented
39
+
40
+ ### Added
41
+
42
+ - kettle-dev v1.1.18
43
+ - Internal escape & unescape methods
44
+ - Stop relying on URI / CGI for escaping and unescaping
45
+ - They are both unstable across supported versions of Ruby (including 3.5 HEAD)
46
+ - Tests against Rails-specific code are now run in CI
47
+ - Documented OAuth 1.0, 1.0a differences
48
+
49
+ ### Changed
50
+
51
+ - converted minitest => rspec
52
+
14
53
  ### Removed
15
54
 
55
+ - dependency on em-http-request
56
+ - now lazy Loaded so it can be optional, since some systems fail to install it, and it doesn't seem maintained
57
+
58
+ ## [1.1.0] 2022-08-29
59
+
60
+ - TAG: [v1.1.0][1.1.0t]
61
+
62
+ ### Changed
63
+
64
+ * `OAuth::CLI` has been extracted to a new gem, `oauth-tty`, hosted on [Gitlab](https://gitlab.com/ruby-oauth/oauth-tty)
65
+ * The public API of `oauth-tty` is backwards compatible (meaning `OAuth::CLI`)
66
+ * The change within the `oauth` gem is backwards compatible as `oauth-tty` has been added as a dependency
67
+ * Minor version bump is cautionary, as many lines of code have changed.
68
+ * `OAuth::Comsumer#options` hash is now handled by `snaky_hash`, which was extracted from `oauth2`
69
+ * symbolized keys, dot-access and snake-case are now normalized
70
+
16
71
  ## [1.0.1] 2022-08-29
72
+
73
+ - TAG: [v1.0.1][1.0.1t]
74
+
17
75
  ### Changed
76
+
18
77
  * `OAuth::Comsumer#options` hash is now handled by `snaky_hash`, which was extracted from `oauth2`
19
78
  * symbolized keys, dot-access and snake-case are now normalized
20
79
 
21
80
  ## [1.0.0] 2022-08-23
81
+
82
+ - TAG: [v1.0.0][1.0.0t]
83
+
22
84
  ### Changed
85
+
23
86
  * Dropped support for Ruby < 2.7
24
87
  * Dropped support for Rails < 6
25
88
 
26
89
  ### Added
90
+
27
91
  * New EOL Policy
28
92
  * Non-commercial support for the oldest version of Ruby (which itself is going EOL) will be dropped each year in April
29
93
 
30
94
  ## [0.6.2] 2022-08-29
95
+
96
+ - TAG: [v0.6.2][0.6.2t]
97
+
31
98
  ### Changed
99
+
32
100
  * `OAuth::Comsumer#options` hash is now handled by `snaky_hash`, which was extracted from `oauth2`
33
101
  * symbolized keys, dot-access and snake-case are now normalized
34
102
 
35
103
  ## [0.6.1] 2022-08-23
104
+
105
+ - TAG: [v0.6.1][0.6.1t]
106
+
36
107
  ### Changed
108
+
37
109
  * Fixed documentation in SECURITY.md
38
110
  * Change references to master => main
39
111
 
40
112
  ### Added
113
+
41
114
  * Post install note about v0.6.x EOL approaching in April, 2024
42
115
 
43
116
  ## [0.6.0] 2022-08-23
117
+
118
+ - TAG: [v0.6.0][0.6.0t]
119
+
44
120
  ### Added
121
+
45
122
  * New option `body_hash_enabled` which defaults to true to maintain backward compatibility with prior releases. Setting to `false` disables generation of a `oauth_body_hash` component as part of the signature computation.
46
123
  * Improved documentation of support policy via Tidelift
47
124
  * Stop testing against active_support v2
48
125
 
49
126
  ### Changed
127
+
50
128
  * Utilize version_gem extracted from oauth2 gem for VERSION
51
129
  * Added new `OAuth::Version` namespace
52
130
  * VERSION constant now at `OAuth::Version::VERSION`
53
131
 
54
132
  ### Removed
133
+
55
134
  * Ruby 2.0, 2.1, 2.2, and 2.3 are no longer valid install targets
56
135
 
57
136
  ## [0.5.14] 2022-08-29
137
+
138
+ - TAG: [v0.5.14][0.5.14t]
139
+
58
140
  The "hopeful last 0.5.x" Release
59
141
 
60
142
  ### Fixed
143
+
61
144
  * More typos fixed
62
145
 
63
146
  ## [0.5.13] 2022-08-23
147
+
148
+ - TAG: [v0.5.13][0.5.13t]
149
+
64
150
  The "I think I caught 'em all!" Release
65
151
 
66
152
  ### Fixed
153
+
67
154
  * Typo oauth2 => oauth as gem name in one more place.
68
155
 
69
156
  ## [0.5.12] 2022-08-23
157
+
158
+ - TAG: [v0.5.12][0.5.12t]
159
+
70
160
  The "Typoes are just the worst!" Release
71
161
 
72
162
  ### Fixed
163
+
73
164
  * Typo oauth2 => oauth as gem name in a couple places.
74
165
 
75
166
  ## [0.5.11] 2022-08-23
167
+
168
+ - TAG: [v0.5.11][0.5.11t]
169
+
76
170
  The "Is this the last release with a silly name?" Release
77
171
 
78
172
  ### Added
173
+
79
174
  * Post install note about v0.5.x EOL approaching in April, 2023
80
175
 
81
176
  ### Changed
177
+
82
178
  * Improved documentation
83
179
  * Switched branch references from master to main
84
180
  * CI builds are now all green!
85
181
 
86
182
  ## [0.5.10] 2022-05-04
183
+
184
+ - TAG: [v0.5.10][0.5.10t]
185
+
87
186
  The "Can it be the end of the line for 0.5.x?" Release
88
187
 
89
188
  ### Added
189
+
90
190
  * Major updates to Documentation
91
191
  * More CI Hardening
92
192
  * Align CI builds with official Ruby Compatibility Matrix
@@ -94,7 +194,11 @@ The "Can it be the end of the line for 0.5.x?" Release
94
194
  - diffend
95
195
 
96
196
  ## [0.5.9] 2022-05-03
197
+
198
+ - TAG: [v0.5.9][0.5.9t]
199
+
97
200
  ### Added
201
+
98
202
  * Documentation related to Ruby compatibility
99
203
  * Updated CHANGELOG.md formatting
100
204
  * Corrected CHANGELOG.md typos
@@ -106,14 +210,23 @@ The "Can it be the end of the line for 0.5.x?" Release
106
210
  - overcommit
107
211
 
108
212
  ## [0.5.8] 2021-11-10
213
+
214
+ - TAG: [v0.5.8][0.5.8t]
215
+
109
216
  ### Added
217
+
110
218
  * Added more documentation files to packaged gem, e.g. SECURITY.md, CODE_OF_CONDUCT.md
111
219
 
112
220
  ### Fixed
221
+
113
222
  * Removed reference to RUBY_VERSION from gemspec, as it depends on rake release, which is problematic on some ruby engines. (by @pboling)
114
223
 
115
224
  ## [0.5.7] 2021-11-02
225
+
226
+ - TAG: [v0.5.7][0.5.7t]
227
+
116
228
  ### Added
229
+
117
230
  * Setup Rubocop (#205, #208 by @pboling)
118
231
  * Added CODE_OF_CONDUCT.md (#217, #218 by @pboling)
119
232
  * Added FUNDING.yml (#217, #218 by @pboling)
@@ -121,6 +234,7 @@ The "Can it be the end of the line for 0.5.x?" Release
121
234
  * Handle a nested array of hashes in OAuth::Helper.normalize (#80, #221 by @pboling)
122
235
 
123
236
  ### Changed
237
+
124
238
  * Switch from TravisCI to Github Actions (#202, #207, #176 by @pboling)
125
239
  * Upgrade webmock to v3.14.0 (#196 by @pboling)
126
240
  * Upgrade em-http-request to v1.1.7 (#173 by @pboling)
@@ -131,6 +245,7 @@ The "Can it be the end of the line for 0.5.x?" Release
131
245
  * Require plaintext signature method by default (#135 by @confiks & @pboling)
132
246
 
133
247
  ### Fixed
248
+
134
249
  * Fixed Infinite Redirect in v0.5.5, v0.5.6 (#186, #210 by @pboling)
135
250
  * Fixed NoMethodError on missing leading slash in path (#194, #211 by @pboling)
136
251
  * Fixed NoMethodError on nil request object (#165, #212 by @pboling)
@@ -140,49 +255,76 @@ The "Can it be the end of the line for 0.5.x?" Release
140
255
  * Fixed request proxy Class constant reference scopes - was missing `::` in many places (#225, #226 by @pboling)
141
256
 
142
257
  ### Removed
258
+
143
259
  * Remove direct development dependency on nokogiri (#299 by @pboling)
144
260
 
145
261
  ## [0.5.6] 2021-04-02
262
+
263
+ - TAG: [v0.5.6][0.5.6t]
264
+
146
265
  ### Added
266
+
147
267
  * Add metadata to Gemspec file
148
268
  * Add support for PUT requests with Action Controller (#181)
149
269
 
150
270
  ### Changed
271
+
151
272
  * Change default timeout to be the same as Net::HTTP default, 60 seconds instead of 30 seconds.
152
273
 
153
274
  ## [0.5.5] 2020-01-19
275
+
276
+ - TAG: [v0.5.5][0.5.5t]
277
+
154
278
  ### Added
279
+
155
280
  * Add :allow_empty_params option (#155)
156
281
 
157
282
  ### Changed
283
+
158
284
  * Allow redirect to different host but same path
159
285
  * Various cleanups
160
286
 
161
287
  ### Fixed
288
+
162
289
  * Fixes ssl-noverify
163
290
  * Fixed README example (#158, #159, by @pboling)
164
291
 
165
292
  ## [0.5.4] 2017-12-08
293
+
294
+ - TAG: [v0.5.4][0.5.4t]
295
+
166
296
  ### Changed
297
+
167
298
  * Various cleanups (charliesome)
168
299
 
169
300
  ### Fixed
301
+
170
302
  * Fixes UnknownRequestType on Rails 5.1 for ActionDispatch::Request (xprazak2)
171
303
 
172
304
  ## [0.5.3] 2017-05-24
305
+
306
+ - TAG: [v0.5.3][0.5.3t]
307
+
173
308
  ### Fixed
309
+
174
310
  * Fix #145 - broken CLI required loading active_support (James Pinto)
175
311
 
176
312
  ### Changed
313
+
177
314
  * Removing legacy scripts (James Pinto)
178
315
 
179
316
  ## [0.5.2] 2017-05-17
317
+
318
+ - TAG: [v0.5.2][0.5.2t]
319
+
180
320
  ### Added
321
+
181
322
  * Adding a development dependency that had not been mentioned (James Pinto)
182
323
  * Adding CodeClimate (James Pinto)
183
324
  * Adding support to Ruby 2.4 and head (James Pinto)
184
325
 
185
326
  ### Changed
327
+
186
328
  * Use assert_nil so as to silence a Minitest 6 deprecation warning (James Pinto)
187
329
  * Stop bundling tests files in the gem (Michal Papis)
188
330
  * Minor cleanup on tests (James Pinto)
@@ -200,30 +342,42 @@ The "Can it be the end of the line for 0.5.x?" Release
200
342
  * Reimplementing #82 - Debug Output Option (James Pinto)
201
343
 
202
344
  ### Fixed
345
+
203
346
  * Fix #113 adding paths when a full URL has been specified (James Pinto)
204
347
  * Bug Fix, webmock 2.0 has introduced a new bug (James Pinto)
205
348
  * Making a test/support dir (James Pinto)
206
349
  * Fix #177 - Adjusting to webmock latest recommended implementation for minitest (James Pinto)
207
350
 
208
351
  ## [0.5.1] 2016-02-29
352
+
353
+ - TAG: [v0.5.1][0.5.1t]
354
+
209
355
  ### Added
356
+
210
357
  * Add license info to the gemspec (Robert Reiz)
211
358
 
212
359
  ### Fixed
360
+
213
361
  * Proper handling for empty query string in RequestToken#build_authorize_url (midchildan,
214
362
  Harald Sitter)
215
363
  * Replace calls to String#blank? with its implementation (Sergio Gil Pérez de la Manga)
216
364
 
217
365
  ### Changed
366
+
218
367
  * Loosen some development dependencies. Add libcurl-dev to travis
219
368
  * Fixes to travis config. Switch to rubygems for installation and loading
220
369
 
221
370
  ### Removed
371
+
222
372
  * Remove obsolete comment (Arthur Nogueira Neves)
223
373
  * Remove jeweler from gemspec
224
374
 
225
375
  ## [0.5.0] 2016-02-20
376
+
377
+ - TAG: [v0.5.0][0.5.0t]
378
+
226
379
  ### Added
380
+
227
381
  * Add support for HTTP PATCH method (Richard Huang)
228
382
  * Allow reading private key from a string (Khaja Minhajuddin)
229
383
  * Add rest-client proxy (Khem Veasna)
@@ -231,12 +385,14 @@ The "Can it be the end of the line for 0.5.x?" Release
231
385
  * Allow reading certificate file path from environment variable. Add CentOS cert file path (Danil Vlasov)
232
386
 
233
387
  ### Changed
388
+
234
389
  * Replace jeweler with real spec and bundler tasks
235
390
  * Extract version to separate file
236
391
  * Use OpenSSL for all digest and hashing. Remove signature methods not defined by OAuth spec. (Kevin Hughes)
237
392
  * Change token requests to exclude `oauth_body_hash`. Update doc links in comments. (John Remmen)
238
393
 
239
394
  ### Fixed
395
+
240
396
  * Fix ability to pass in an authorize url with a query string (Roger Smith)
241
397
  * Fix bug in signature verification (r-stu31)
242
398
  * Use standard key name (`oauth_token_secret`) in Token#to_query (Craig Walker)
@@ -251,69 +407,108 @@ The "Can it be the end of the line for 0.5.x?" Release
251
407
  * Various fixes/updates to README (Evan Arnold, Jonathan Camenisch, Brian John, Ankur Sethi)
252
408
 
253
409
  ## [0.4.7] 2012-09-03
410
+
411
+ - TAG: [v0.4.7][0.4.7t]
412
+
254
413
  ### Added
414
+
255
415
  * Set a configurable timeout for all requests (Rick Olson)
256
416
 
257
417
  ### Fixed
418
+
258
419
  * Fix merging paths if the path is not empty
259
420
  * Fix nested hash params in Consumer#request (Ernie Miller)
260
421
 
261
422
  ## [0.4.6] 2012-04-21
423
+
424
+ - TAG: [v0.4.6][0.4.6t]
425
+
262
426
  ### Changed
427
+
263
428
  * Make use the path component of the :site parameter (Jonathon M. Abbott)
264
429
 
265
430
  ### Fixed
431
+
266
432
  * Fixed nested attributes in #normalize (Shaliko Usubov)
267
433
  * Fixed post body's being dropped in 1.9 (Steven Hammond)
268
434
  * Fixed PUT request handling (Anton Panasenko)
269
435
 
270
436
  ## [0.4.5] 2011-06-25
437
+
438
+ - TAG: [v0.4.5][0.4.5t]
439
+
271
440
  ### Added
441
+
272
442
  * Add explicit require for rsa/sha1 (Juris Galang)
273
443
  * Add gemtest support (Adrian Feldman)
274
444
 
275
445
  ### Changed
446
+
276
447
  * Use webmock to mock all http-requests in tests (Adrian Feldman)
277
448
  * Mention Typhoeus require in the README (Kim Ahlström)
278
449
  * Use Net::HTTPGenericRequest (Jakub Kuźma)
279
450
 
280
451
  ### Fixed
452
+
281
453
  * Fix POST Requests with Typhoeus proxy (niedhui)
282
454
  * Fix incorrect hardcoded port (Ian Taylor)
283
455
 
284
456
  ## [0.4.4] 2010-10-31
457
+
458
+ - TAG: [v0.4.4][0.4.4t]
459
+
285
460
  ### Added
461
+
286
462
  * Added support for Rails 3 in client/action_controller_request (Pelle)
287
463
 
288
464
  ### Fixed
465
+
289
466
  * Fix LoadError rescue in tests: return can't be used in this context (Hans de Graaff)
290
467
  * HTTP headers should be strings. (seancribbs)
291
468
  * ensure consumer uri gets set back to original config even if an error occurs (Brian Finney)
292
469
  * Yahoo uses & to split records in OAuth headers (Brian Finney)
293
470
 
294
471
  ## [0.4.3] 2010-09-01
472
+
473
+ - TAG: [v0.4.3][0.4.3t]
474
+
295
475
  ### Fixed
476
+
296
477
  * Fix for em-http proxy (ichverstehe)
297
478
 
298
479
  ## [0.4.2] 2010-08-13
480
+
481
+ - TAG: [v0.4.2][0.4.2t]
482
+
299
483
  ### Added
484
+
300
485
  * Added Bundler (rc) Gemfile for easier dev/testing
301
486
 
302
487
  ### Fixed
488
+
303
489
  * Fixed compatibility with Ruby 1.9.2 (ecavazos)
304
490
  * Fixed the em-http request proxy (Joshua Hull)
305
491
  * Fix for oauth proxy string manipulation (Jakub Suder)
306
492
 
307
493
  ## [0.4.1] 2010-06-16
494
+
495
+ - TAG: [v0.4.1][0.4.1t]
496
+
308
497
  ### Added
498
+
309
499
  * Added support for using OAuth with proxies (Marsh Gardiner)
310
500
 
311
501
  ### Fixed
502
+
312
503
  * Rails 3 Compatibility fixes (Pelle Braendgaard)
313
504
  * Fixed load errors on tests for missing (non-required) libraries
314
505
 
315
506
  ## [0.4.0] 2010-04-22
507
+
508
+ - TAG: [v0.4.0][0.4.0t]
509
+
316
510
  ### Added
511
+
317
512
  * Added computation of oauth_body_hash as per OAuth Request Body Hash 1.0 Draft 4 (Michael Reinsch)
318
513
  * Added the optional `oauth_session_handle` parameter for the Yahoo implementation (Will Bailey)
319
514
  * Added optional block to OAuth::Consumer.get_*_token (Neill Pearman)
@@ -325,29 +520,41 @@ The "Can it be the end of the line for 0.5.x?" Release
325
520
  * New website (Aaron Quint)
326
521
 
327
522
  ### Changed
523
+
328
524
  * Better marshalling implementation (Yoan Blanc)
329
525
  * Replaced hoe with Jeweler (Aaron Quint)
330
526
 
331
527
  ### Fixed
528
+
332
529
  * Strip extraneous spaces and line breaks from access_token responses (observed in the wild with Yahoo!'s OAuth+OpenID hybrid) (Eric Hartmann)
333
530
  * Stop double-escaping PLAINTEXT signatures (Jimmy Zimmerman)
334
531
  * OAuth::Client::Helper won't override the specified `oauth_version` (Philip Kromer)
335
532
  * Fixed an encoding / multibyte issue (成田 一生)
336
533
 
337
534
  ## [0.3.6] 2009-09-14
535
+
536
+ - TAG: [v0.3.6][0.3.6t]
537
+
338
538
  ### Added
539
+
339
540
  * Added -B CLI option to use the :body authentication scheme (Seth)
340
541
  * Support POST and PUT with raw bodies (Yu-Shan Fung et al)
341
542
  * Added :ca_file consumer option to allow consumer specific certificate override. (Pelle)
342
543
 
343
544
  ### Changed
545
+
344
546
  * Test clean-up (Xavier Shay, Hannes Tydén)
345
547
 
346
548
  ### Fixed
549
+
347
550
  * Respect `--method` in `authorize` CLI command (Seth)
348
551
 
349
552
  ## [0.3.5] 2009-06-03
553
+
554
+ - TAG: [v0.3.5][0.3.5t]
555
+
350
556
  ### Added
557
+
351
558
  * `query` CLI command to access protected resources (Seth)
352
559
  * Added -H, -Q CLI options for specifying the authentication scheme (Seth)
353
560
  * Added -O CLI option for specifying a file containing options (Seth)
@@ -357,28 +564,43 @@ The "Can it be the end of the line for 0.5.x?" Release
357
564
  * Added --scope CLI option for Google's 'scope' parameter (Seth)
358
565
 
359
566
  ## [0.3.4] 2009-05-06
567
+
568
+ - TAG: [v0.3.4][0.3.4t]
569
+
360
570
  ### Changed
571
+
361
572
  * OAuth::Client::Helper uses OAuth::Version::VERSION (chadisfaction)
362
573
 
363
574
  ### Fixed
575
+
364
576
  * Fix OAuth::RequestProxy::ActionControllerRequest's handling of params (Tristan Groléat)
365
577
 
366
578
  ## [0.3.3] 2009-05-04
579
+
580
+ - TAG: [v0.3.3][0.3.3t]
581
+
367
582
  ### Added
583
+
368
584
  * Support for arguments in OAuth::Consumer#get_access_token (Matt Sanford)
369
585
  * Add gem version to user-agent header (Matt Sanford)
370
586
 
371
587
  ### Changed
588
+
372
589
  * Improved error handling for invalid Authorization headers (Matt Sanford)
373
590
  * Handle input from aggressive form encoding libraries (Matt Wood)
374
591
 
375
592
  ### Fixed
593
+
376
594
  * Corrected OAuth XMPP namespace (Seth)
377
595
  * Fixed signatures for non-ASCII under $KCODE other than 'u' (Matt Sanford)
378
596
  * Fixed edge cases in ActionControllerRequestProxy where params were being incorrectly signed (Marcos Wright Kuhns)
379
597
 
380
598
  ## [0.3.2] 2009-03-23
599
+
600
+ - TAG: [v0.3.2][0.3.2t]
601
+
381
602
  ### Added
603
+
382
604
  * Support applications using the MethodOverride Rack middleware (László Bácsi)
383
605
  * `authorize` command for `oauth` CLI (Seth)
384
606
  * Initial support for Problem Reporting extension (Seth)
@@ -386,109 +608,173 @@ The "Can it be the end of the line for 0.5.x?" Release
386
608
  * Added help to the 'oauth' CLI (Seth)
387
609
 
388
610
  ### Fixed
611
+
389
612
  * 2xx statuses should be treated as success (Anders Conbere)
390
613
  * Fixed ActionController parameter escaping behavior (Thiago Arrais, László Bácsi, Brett Gibson, et al)
391
614
  * Fixed signature calculation when both options and a block were provided to OAuth::Signature::Base#initialize (Seth)
392
615
  * Fixed a problem when attempting to normalize MockRequest URIs (Seth)
393
616
 
394
617
  ## [0.3.1] 2009-01-26
618
+
619
+ - TAG: [v0.3.1][0.3.1t]
620
+
395
621
  ### Fixed
622
+
396
623
  * Fixed a problem with relative and absolute token request paths. (Michael Wood)
397
624
 
398
625
  ## [0.3.0] 2009-01-25
626
+
627
+ - TAG: [v0.3.0][0.3.0t]
628
+
399
629
  ### Added
630
+
400
631
  * Support ActionController::Request from Edge Rails (László Bácsi)
401
632
  * Added #normalized_parameters to OAuth::RequestProxy::Base (Pelle)
402
633
  * Command-line app for generating signatures. (Seth)
403
634
 
404
635
  ### Changed
636
+
405
637
  * OAuth::Signature.sign and friends now yield the RequestProxy instead of the token when the passed block's arity is 1. (Seth)
406
638
  * Improved test-cases and compatibility for encoding issues. (Pelle)
407
639
 
408
640
  ### Fixed
641
+
409
642
  * Correctly handle multi-valued parameters (Seth)
410
643
  * Token requests are made to the configured URL rather than generating a potentially incorrect one. (Kellan Elliott-McCrea)
411
644
 
412
645
  ## 0.2.7 2008-09-10
646
+
413
647
  The lets fix the last release release
414
648
 
415
649
  ### Fixed
650
+
416
651
  * Fixed plain text signatures (Andrew Arrow)
417
652
  * Fixed RSA requests using OAuthTokens. (Philip Lipu Tsai)
418
653
 
419
654
  ## 0.2.6 2008-09-09
655
+
420
656
  The lets RSA release
421
657
 
422
658
  ### Added
659
+
423
660
  * Improved support for Ruby 1.8.7 (Bill Kocik)
424
661
  * Added support for 'private_key_file' option for RSA signatures (Chris Mear)
425
662
 
426
663
  ### Changed
664
+
427
665
  * Improved RSA testing
428
666
  * Omit token when signing with RSA
429
667
 
430
668
  ### Fixed
669
+
431
670
  * Fixed RSA verification to support RSA providers now using Ruby and RSA
432
671
  * Fixed several edge cases where params were being incorrectly signed (Scott Hill)
433
672
  * Fixed RSA signing (choonkeat)
434
673
 
435
674
  ## 0.2.2 2008-02-22
675
+
436
676
  Lets actually support SSL release
437
677
 
438
678
  ### Fixed
679
+
439
680
  * Use HTTPS when required.
440
681
 
441
682
  ## 0.2 2008-1-19
683
+
442
684
  All together now release
443
685
 
444
- This is a big release, where we have merged the efforts of various parties into one common library.
686
+ ### Changed
687
+
688
+ * This is a big release, where we have merged the efforts of various parties into one common library.
445
689
  This means there are definitely some API changes you should be aware of. They should be minimal
446
690
  but please have a look at the unit tests.
447
691
 
448
692
  ## 0.1.2 2007-12-1
693
+
449
694
  ### Fixed
695
+
450
696
  * Fixed checks for missing OAuth params to improve performance
451
697
  * Includes Pat's fix for getting the realm out.
452
698
 
453
699
  ## 0.1.1 2007-11-26
700
+
454
701
  ### Added
702
+
455
703
  * First release as a GEM
456
704
  * Moved all non-Rails functionality from the Rails plugin:
457
705
  http://code.google.com/p/oauth-plugin/
458
706
 
459
- [Unreleased]: https://github.com/oauth-xx/oauth-ruby/compare/v1.0.1...main
460
- [1.0.1]: https://github.com/oauth-xx/oauth-ruby/releases/tag/v1.0.1
461
- [1.0.0]: https://github.com/oauth-xx/oauth-ruby/releases/tag/v1.0.0
462
- [0.6.2]: https://github.com/oauth-xx/oauth-ruby/releases/tag/v0.6.2
463
- [0.6.1]: https://github.com/oauth-xx/oauth-ruby/releases/tag/v0.6.1
464
- [0.6.0]: https://github.com/oauth-xx/oauth-ruby/releases/tag/v0.6.0
465
- [0.5.14]: https://github.com/oauth-xx/oauth-ruby/releases/tag/v0.5.14
466
- [0.5.13]: https://github.com/oauth-xx/oauth-ruby/releases/tag/v0.5.13
467
- [0.5.12]: https://github.com/oauth-xx/oauth-ruby/releases/tag/v0.5.12
468
- [0.5.11]: https://github.com/oauth-xx/oauth-ruby/releases/tag/v0.5.11
469
- [0.5.10]: https://github.com/oauth-xx/oauth-ruby/releases/tag/v0.5.10
470
- [0.5.9]: https://github.com/oauth-xx/oauth-ruby/releases/tag/v0.5.9
471
- [0.5.8]: https://github.com/oauth-xx/oauth-ruby/releases/tag/v0.5.8
472
- [0.5.7]: https://github.com/oauth-xx/oauth-ruby/releases/tag/v0.5.7
473
- [0.5.6]: https://github.com/oauth-xx/oauth-ruby/releases/tag/v0.5.6
474
- [0.5.5]: https://github.com/oauth-xx/oauth-ruby/releases/tag/v0.5.5
475
- [0.5.4]: https://github.com/oauth-xx/oauth-ruby/releases/tag/v0.5.4
476
- [0.5.3]: https://github.com/oauth-xx/oauth-ruby/releases/tag/v0.5.3
477
- [0.5.2]: https://github.com/oauth-xx/oauth-ruby/releases/tag/v0.5.2
478
- [0.5.1]: https://github.com/oauth-xx/oauth-ruby/releases/tag/v0.5.1
479
- [0.5.0]: https://github.com/oauth-xx/oauth-ruby/releases/tag/v0.5.0
480
- [0.4.7]: https://github.com/oauth-xx/oauth-ruby/releases/tag/v0.4.7
481
- [0.4.6]: https://github.com/oauth-xx/oauth-ruby/releases/tag/v0.4.6
482
- [0.4.5]: https://github.com/oauth-xx/oauth-ruby/releases/tag/v0.4.5
483
- [0.4.4]: https://github.com/oauth-xx/oauth-ruby/releases/tag/v0.4.4
484
- [0.4.3]: https://github.com/oauth-xx/oauth-ruby/releases/tag/v0.4.3
485
- [0.4.2]: https://github.com/oauth-xx/oauth-ruby/releases/tag/v0.4.2
486
- [0.4.1]: https://github.com/oauth-xx/oauth-ruby/releases/tag/v0.4.1
487
- [0.4.0]: https://github.com/oauth-xx/oauth-ruby/releases/tag/v0.4.0
488
- [0.3.6]: https://github.com/oauth-xx/oauth-ruby/releases/tag/v0.3.6
489
- [0.3.5]: https://github.com/oauth-xx/oauth-ruby/releases/tag/v0.3.5
490
- [0.3.4]: https://github.com/oauth-xx/oauth-ruby/releases/tag/v0.3.4
491
- [0.3.3]: https://github.com/oauth-xx/oauth-ruby/releases/tag/v0.3.3
492
- [0.3.2]: https://github.com/oauth-xx/oauth-ruby/releases/tag/v0.3.2
493
- [0.3.1]: https://github.com/oauth-xx/oauth-ruby/releases/tag/v0.3.1
494
- [0.3.0]: https://github.com/oauth-xx/oauth-ruby/releases/tag/v0.3.0
707
+ [Unreleased]: https://github.com/ruby-oauth/oauth/compare/v1.1.1...HEAD
708
+ [1.1.1]: https://github.com/ruby-oauth/oauth/compare/v1.1.0...v1.1.1
709
+ [1.1.1t]: https://github.com/ruby-oauth/oauth/releases/tag/v1.1.1
710
+ [1.1.0]: https://gitlab.com/ruby-oauth/oauth/-/compare/v1.0.1...v1.1.0
711
+ [1.1.0t]: https://github.com/ruby-oauth/oauth/releases/tag/v1.1.0
712
+ [1.0.1]: https://gitlab.com/ruby-oauth/oauth/-/compare/v1.0.0...v1.0.1
713
+ [1.0.1t]: https://github.com/ruby-oauth/oauth/releases/tag/v1.0.1
714
+ [1.0.0]: https://gitlab.com/ruby-oauth/oauth/-/compare/v0.6.2...v1.0.0
715
+ [1.0.0t]: https://github.com/ruby-oauth/oauth/releases/tag/v1.0.0
716
+ [0.6.2]: https://gitlab.com/ruby-oauth/oauth/-/compare/v0.6.1...v0.6.2
717
+ [0.6.2t]: https://github.com/ruby-oauth/oauth/releases/tag/v0.6.2
718
+ [0.6.1]: https://gitlab.com/ruby-oauth/oauth/-/compare/v0.6.0...v0.6.1
719
+ [0.6.1t]: https://github.com/ruby-oauth/oauth/releases/tag/v0.6.1
720
+ [0.6.0]: https://gitlab.com/ruby-oauth/oauth/-/compare/v0.5.14...v0.6.0
721
+ [0.6.0t]: https://github.com/ruby-oauth/oauth/releases/tag/v0.6.0
722
+ [0.5.14]: https://gitlab.com/ruby-oauth/oauth/-/compare/v0.5.13...v0.5.14
723
+ [0.5.14t]: https://github.com/ruby-oauth/oauth/releases/tag/v0.5.14
724
+ [0.5.13]: https://gitlab.com/ruby-oauth/oauth/-/compare/v0.5.12...v0.5.13
725
+ [0.5.13t]: https://github.com/ruby-oauth/oauth/releases/tag/v0.5.13
726
+ [0.5.12]: https://gitlab.com/ruby-oauth/oauth/-/compare/v0.5.11...v0.5.12
727
+ [0.5.12t]: https://github.com/ruby-oauth/oauth/releases/tag/v0.5.12
728
+ [0.5.11]: https://gitlab.com/ruby-oauth/oauth/-/compare/v0.5.10...v0.5.11
729
+ [0.5.11t]: https://github.com/ruby-oauth/oauth/releases/tag/v0.5.11
730
+ [0.5.10t]: https://github.com/ruby-oauth/oauth/releases/tag/v0.5.10
731
+ [0.5.9]: https://gitlab.com/ruby-oauth/oauth/-/compare/v0.5.8...v0.5.9
732
+ [0.5.9t]: https://github.com/ruby-oauth/oauth/releases/tag/v0.5.9
733
+ [0.5.8]: https://gitlab.com/ruby-oauth/oauth/-/compare/v0.5.7...v0.5.8
734
+ [0.5.8t]: https://github.com/ruby-oauth/oauth/releases/tag/v0.5.8
735
+ [0.5.7]: https://gitlab.com/ruby-oauth/oauth/-/compare/v0.5.6...v0.5.7
736
+ [0.5.7t]: https://github.com/ruby-oauth/oauth/releases/tag/v0.5.7
737
+ [0.5.6]: https://gitlab.com/ruby-oauth/oauth/-/compare/v0.5.5...v0.5.6
738
+ [0.5.6t]: https://github.com/ruby-oauth/oauth/releases/tag/v0.5.6
739
+ [0.5.5]: https://gitlab.com/ruby-oauth/oauth/-/compare/v0.5.4...v0.5.5
740
+ [0.5.5t]: https://github.com/ruby-oauth/oauth/releases/tag/v0.5.5
741
+ [0.5.4]: https://gitlab.com/ruby-oauth/oauth/-/compare/v0.5.3...v0.5.4
742
+ [0.5.4t]: https://github.com/ruby-oauth/oauth/releases/tag/v0.5.4
743
+ [0.5.3]: https://gitlab.com/ruby-oauth/oauth/-/compare/v0.5.2...v0.5.3
744
+ [0.5.3t]: https://github.com/ruby-oauth/oauth/releases/tag/v0.5.3
745
+ [0.5.2]: https://gitlab.com/ruby-oauth/oauth/-/compare/v0.5.1...v0.5.2
746
+ [0.5.2t]: https://github.com/ruby-oauth/oauth/releases/tag/v0.5.2
747
+ [0.5.1]: https://gitlab.com/ruby-oauth/oauth/-/compare/v0.5.0...v0.5.1
748
+ [0.5.1t]: https://github.com/ruby-oauth/oauth/releases/tag/v0.5.1
749
+ [0.5.0]: https://gitlab.com/ruby-oauth/oauth/-/compare/v0.4.7...v0.5.0
750
+ [0.5.0t]: https://github.com/ruby-oauth/oauth/releases/tag/v0.5.0
751
+ [0.4.7]: https://gitlab.com/ruby-oauth/oauth/-/compare/v0.4.6...v0.4.7
752
+ [0.4.7t]: https://github.com/ruby-oauth/oauth/releases/tag/v0.4.7
753
+ [0.4.6]: https://gitlab.com/ruby-oauth/oauth/-/compare/v0.4.5...v0.4.6
754
+ [0.4.6t]: https://github.com/ruby-oauth/oauth/releases/tag/v0.4.6
755
+ [0.4.5]: https://gitlab.com/ruby-oauth/oauth/-/compare/v0.4.4...v0.4.5
756
+ [0.4.5t]: https://github.com/ruby-oauth/oauth/releases/tag/v0.4.5
757
+ [0.4.4]: https://gitlab.com/ruby-oauth/oauth/-/compare/v0.4.3...v0.4.4
758
+ [0.4.4t]: https://github.com/ruby-oauth/oauth/releases/tag/v0.4.4
759
+ [0.4.3]: https://gitlab.com/ruby-oauth/oauth/-/compare/v0.4.2...v0.4.3
760
+ [0.4.3t]: https://github.com/ruby-oauth/oauth/releases/tag/v0.4.3
761
+ [0.4.2]: https://gitlab.com/ruby-oauth/oauth/-/compare/v0.4.1...v0.4.2
762
+ [0.4.2t]: https://github.com/ruby-oauth/oauth/releases/tag/v0.4.2
763
+ [0.4.1]: https://gitlab.com/ruby-oauth/oauth/-/compare/v0.4.0...v0.4.1
764
+ [0.4.1t]: https://github.com/ruby-oauth/oauth/releases/tag/v0.4.1
765
+ [0.4.0]: https://gitlab.com/ruby-oauth/oauth/-/compare/v0.3.6...v0.4.0
766
+ [0.4.0t]: https://github.com/ruby-oauth/oauth/releases/tag/v0.4.0
767
+ [0.3.6]: https://gitlab.com/ruby-oauth/oauth/-/compare/v0.3.5...v0.3.6
768
+ [0.3.6t]: https://github.com/ruby-oauth/oauth/releases/tag/v0.3.6
769
+ [0.3.5]: https://gitlab.com/ruby-oauth/oauth/-/compare/v0.3.4...v0.3.5
770
+ [0.3.5t]: https://github.com/ruby-oauth/oauth/releases/tag/v0.3.5
771
+ [0.3.4]: https://gitlab.com/ruby-oauth/oauth/-/compare/v0.3.3...v0.3.4
772
+ [0.3.4t]: https://github.com/ruby-oauth/oauth/releases/tag/v0.3.4
773
+ [0.3.3]: https://gitlab.com/ruby-oauth/oauth/-/compare/v0.3.2...v0.3.3
774
+ [0.3.3t]: https://github.com/ruby-oauth/oauth/releases/tag/v0.3.3
775
+ [0.3.2]: https://gitlab.com/ruby-oauth/oauth/-/compare/v0.3.1...v0.3.2
776
+ [0.3.2t]: https://github.com/ruby-oauth/oauth/releases/tag/v0.3.2
777
+ [0.3.1]: https://gitlab.com/ruby-oauth/oauth/-/compare/v0.3.0...v0.3.1
778
+ [0.3.1t]: https://github.com/ruby-oauth/oauth/releases/tag/v0.3.1
779
+ [0.3.0]: https://github.com/ruby-oauth/oauth/releases/tag/v0.3.0
780
+ [0.3.0t]: https://github.com/ruby-oauth/oauth/releases/tag/v0.3.0