oauth 1.1.0 → 1.1.1

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (39) hide show
  1. checksums.yaml +4 -4
  2. checksums.yaml.gz.sig +4 -0
  3. data/CHANGELOG.md +317 -41
  4. data/CITATION.cff +20 -0
  5. data/CODE_OF_CONDUCT.md +79 -29
  6. data/CONTRIBUTING.md +213 -24
  7. data/FUNDING.md +77 -0
  8. data/{LICENSE → LICENSE.txt} +1 -1
  9. data/README.md +543 -275
  10. data/REEK +0 -0
  11. data/RUBOCOP.md +71 -0
  12. data/SECURITY.md +27 -11
  13. data/lib/oauth/client/action_controller_request.rb +14 -9
  14. data/lib/oauth/client/em_http.rb +106 -99
  15. data/lib/oauth/client/helper.rb +15 -11
  16. data/lib/oauth/client/net_http.rb +39 -13
  17. data/lib/oauth/consumer.rb +105 -54
  18. data/lib/oauth/errors/problem.rb +1 -1
  19. data/lib/oauth/helper.rb +25 -3
  20. data/lib/oauth/oauth.rb +28 -6
  21. data/lib/oauth/optional.rb +20 -0
  22. data/lib/oauth/request_proxy/action_controller_request.rb +11 -7
  23. data/lib/oauth/request_proxy/action_dispatch_request.rb +41 -0
  24. data/lib/oauth/request_proxy/base.rb +15 -12
  25. data/lib/oauth/request_proxy/em_http_request.rb +53 -52
  26. data/lib/oauth/request_proxy/jabber_request.rb +9 -2
  27. data/lib/oauth/request_proxy/net_http.rb +1 -1
  28. data/lib/oauth/request_proxy/rest_client_request.rb +4 -3
  29. data/lib/oauth/server.rb +12 -8
  30. data/lib/oauth/signature/base.rb +1 -1
  31. data/lib/oauth/signature/rsa/sha1.rb +11 -4
  32. data/lib/oauth/tokens/access_token.rb +1 -1
  33. data/lib/oauth/tokens/consumer_token.rb +2 -2
  34. data/lib/oauth/tokens/request_token.rb +9 -4
  35. data/lib/oauth/version.rb +1 -1
  36. data.tar.gz.sig +0 -0
  37. metadata +246 -81
  38. metadata.gz.sig +3 -0
  39. data/TODO +0 -32
data/CHANGELOG.md CHANGED
@@ -1,21 +1,67 @@
1
1
  # Changelog
2
+
3
+ [![SemVer 2.0.0][📌semver-img]][📌semver] [![Keep-A-Changelog 1.0.0][📗keep-changelog-img]][📗keep-changelog]
4
+
2
5
  All notable changes to this project will be documented in this file.
3
6
 
4
- The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/),
5
- and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
7
+ The format is based on [Keep a Changelog][📗keep-changelog],
8
+ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html),
9
+ and [yes][📌major-versions-not-sacred], platform and engine support are part of the [public API][📌semver-breaking].
10
+ Please file a bug if you notice a violation of semantic versioning.
11
+
12
+ [📌semver]: https://semver.org/spec/v2.0.0.html
13
+ [📌semver-img]: https://img.shields.io/badge/semver-2.0.0-FFDD67.svg?style=flat
14
+ [📌semver-breaking]: https://github.com/semver/semver/issues/716#issuecomment-869336139
15
+ [📌major-versions-not-sacred]: https://tom.preston-werner.com/2022/05/23/major-version-numbers-are-not-sacred.html
16
+ [📗keep-changelog]: https://keepachangelog.com/en/1.0.0/
17
+ [📗keep-changelog-img]: https://img.shields.io/badge/keep--a--changelog-1.0.0-FFDD67.svg?style=flat
6
18
 
7
19
  ## [Unreleased]
20
+
8
21
  ### Added
9
22
 
10
23
  ### Changed
11
24
 
25
+ ### Deprecated
26
+
27
+ ### Removed
28
+
12
29
  ### Fixed
13
30
 
31
+ ### Security
32
+
33
+ ## [1.1.1] - 2025-09-21
34
+
35
+ - TAG: [v1.1.1][1.1.1t]
36
+ - COVERAGE: 81.70% -- 817/1000 lines in 36 files
37
+ - BRANCH COVERAGE: 50.54% -- 140/277 branches in 36 files
38
+ - 40.71% documented
39
+
40
+ ### Added
41
+
42
+ - kettle-dev v1.1.18
43
+ - Internal escape & unescape methods
44
+ - Stop relying on URI / CGI for escaping and unescaping
45
+ - They are both unstable across supported versions of Ruby (including 3.5 HEAD)
46
+ - Tests against Rails-specific code are now run in CI
47
+ - Documented OAuth 1.0, 1.0a differences
48
+
49
+ ### Changed
50
+
51
+ - converted minitest => rspec
52
+
14
53
  ### Removed
15
54
 
55
+ - dependency on em-http-request
56
+ - now lazy Loaded so it can be optional, since some systems fail to install it, and it doesn't seem maintained
57
+
16
58
  ## [1.1.0] 2022-08-29
59
+
60
+ - TAG: [v1.1.0][1.1.0t]
61
+
17
62
  ### Changed
18
- * `OAuth::CLI` has been extracted to a new gem, `oauth-tty`, hosted on [Gitlab](https://gitlab.com/oauth-xx/oauth-tty)
63
+
64
+ * `OAuth::CLI` has been extracted to a new gem, `oauth-tty`, hosted on [Gitlab](https://gitlab.com/ruby-oauth/oauth-tty)
19
65
  * The public API of `oauth-tty` is backwards compatible (meaning `OAuth::CLI`)
20
66
  * The change within the `oauth` gem is backwards compatible as `oauth-tty` has been added as a dependency
21
67
  * Minor version bump is cautionary, as many lines of code have changed.
@@ -23,79 +69,124 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
23
69
  * symbolized keys, dot-access and snake-case are now normalized
24
70
 
25
71
  ## [1.0.1] 2022-08-29
72
+
73
+ - TAG: [v1.0.1][1.0.1t]
74
+
26
75
  ### Changed
76
+
27
77
  * `OAuth::Comsumer#options` hash is now handled by `snaky_hash`, which was extracted from `oauth2`
28
78
  * symbolized keys, dot-access and snake-case are now normalized
29
79
 
30
80
  ## [1.0.0] 2022-08-23
81
+
82
+ - TAG: [v1.0.0][1.0.0t]
83
+
31
84
  ### Changed
85
+
32
86
  * Dropped support for Ruby < 2.7
33
87
  * Dropped support for Rails < 6
34
88
 
35
89
  ### Added
90
+
36
91
  * New EOL Policy
37
92
  * Non-commercial support for the oldest version of Ruby (which itself is going EOL) will be dropped each year in April
38
93
 
39
94
  ## [0.6.2] 2022-08-29
95
+
96
+ - TAG: [v0.6.2][0.6.2t]
97
+
40
98
  ### Changed
99
+
41
100
  * `OAuth::Comsumer#options` hash is now handled by `snaky_hash`, which was extracted from `oauth2`
42
101
  * symbolized keys, dot-access and snake-case are now normalized
43
102
 
44
103
  ## [0.6.1] 2022-08-23
104
+
105
+ - TAG: [v0.6.1][0.6.1t]
106
+
45
107
  ### Changed
108
+
46
109
  * Fixed documentation in SECURITY.md
47
110
  * Change references to master => main
48
111
 
49
112
  ### Added
113
+
50
114
  * Post install note about v0.6.x EOL approaching in April, 2024
51
115
 
52
116
  ## [0.6.0] 2022-08-23
117
+
118
+ - TAG: [v0.6.0][0.6.0t]
119
+
53
120
  ### Added
121
+
54
122
  * New option `body_hash_enabled` which defaults to true to maintain backward compatibility with prior releases. Setting to `false` disables generation of a `oauth_body_hash` component as part of the signature computation.
55
123
  * Improved documentation of support policy via Tidelift
56
124
  * Stop testing against active_support v2
57
125
 
58
126
  ### Changed
127
+
59
128
  * Utilize version_gem extracted from oauth2 gem for VERSION
60
129
  * Added new `OAuth::Version` namespace
61
130
  * VERSION constant now at `OAuth::Version::VERSION`
62
131
 
63
132
  ### Removed
133
+
64
134
  * Ruby 2.0, 2.1, 2.2, and 2.3 are no longer valid install targets
65
135
 
66
136
  ## [0.5.14] 2022-08-29
137
+
138
+ - TAG: [v0.5.14][0.5.14t]
139
+
67
140
  The "hopeful last 0.5.x" Release
68
141
 
69
142
  ### Fixed
143
+
70
144
  * More typos fixed
71
145
 
72
146
  ## [0.5.13] 2022-08-23
147
+
148
+ - TAG: [v0.5.13][0.5.13t]
149
+
73
150
  The "I think I caught 'em all!" Release
74
151
 
75
152
  ### Fixed
153
+
76
154
  * Typo oauth2 => oauth as gem name in one more place.
77
155
 
78
156
  ## [0.5.12] 2022-08-23
157
+
158
+ - TAG: [v0.5.12][0.5.12t]
159
+
79
160
  The "Typoes are just the worst!" Release
80
161
 
81
162
  ### Fixed
163
+
82
164
  * Typo oauth2 => oauth as gem name in a couple places.
83
165
 
84
166
  ## [0.5.11] 2022-08-23
167
+
168
+ - TAG: [v0.5.11][0.5.11t]
169
+
85
170
  The "Is this the last release with a silly name?" Release
86
171
 
87
172
  ### Added
173
+
88
174
  * Post install note about v0.5.x EOL approaching in April, 2023
89
175
 
90
176
  ### Changed
177
+
91
178
  * Improved documentation
92
179
  * Switched branch references from master to main
93
180
  * CI builds are now all green!
94
181
 
95
182
  ## [0.5.10] 2022-05-04
183
+
184
+ - TAG: [v0.5.10][0.5.10t]
185
+
96
186
  The "Can it be the end of the line for 0.5.x?" Release
97
187
 
98
188
  ### Added
189
+
99
190
  * Major updates to Documentation
100
191
  * More CI Hardening
101
192
  * Align CI builds with official Ruby Compatibility Matrix
@@ -103,7 +194,11 @@ The "Can it be the end of the line for 0.5.x?" Release
103
194
  - diffend
104
195
 
105
196
  ## [0.5.9] 2022-05-03
197
+
198
+ - TAG: [v0.5.9][0.5.9t]
199
+
106
200
  ### Added
201
+
107
202
  * Documentation related to Ruby compatibility
108
203
  * Updated CHANGELOG.md formatting
109
204
  * Corrected CHANGELOG.md typos
@@ -115,14 +210,23 @@ The "Can it be the end of the line for 0.5.x?" Release
115
210
  - overcommit
116
211
 
117
212
  ## [0.5.8] 2021-11-10
213
+
214
+ - TAG: [v0.5.8][0.5.8t]
215
+
118
216
  ### Added
217
+
119
218
  * Added more documentation files to packaged gem, e.g. SECURITY.md, CODE_OF_CONDUCT.md
120
219
 
121
220
  ### Fixed
221
+
122
222
  * Removed reference to RUBY_VERSION from gemspec, as it depends on rake release, which is problematic on some ruby engines. (by @pboling)
123
223
 
124
224
  ## [0.5.7] 2021-11-02
225
+
226
+ - TAG: [v0.5.7][0.5.7t]
227
+
125
228
  ### Added
229
+
126
230
  * Setup Rubocop (#205, #208 by @pboling)
127
231
  * Added CODE_OF_CONDUCT.md (#217, #218 by @pboling)
128
232
  * Added FUNDING.yml (#217, #218 by @pboling)
@@ -130,6 +234,7 @@ The "Can it be the end of the line for 0.5.x?" Release
130
234
  * Handle a nested array of hashes in OAuth::Helper.normalize (#80, #221 by @pboling)
131
235
 
132
236
  ### Changed
237
+
133
238
  * Switch from TravisCI to Github Actions (#202, #207, #176 by @pboling)
134
239
  * Upgrade webmock to v3.14.0 (#196 by @pboling)
135
240
  * Upgrade em-http-request to v1.1.7 (#173 by @pboling)
@@ -140,6 +245,7 @@ The "Can it be the end of the line for 0.5.x?" Release
140
245
  * Require plaintext signature method by default (#135 by @confiks & @pboling)
141
246
 
142
247
  ### Fixed
248
+
143
249
  * Fixed Infinite Redirect in v0.5.5, v0.5.6 (#186, #210 by @pboling)
144
250
  * Fixed NoMethodError on missing leading slash in path (#194, #211 by @pboling)
145
251
  * Fixed NoMethodError on nil request object (#165, #212 by @pboling)
@@ -149,49 +255,76 @@ The "Can it be the end of the line for 0.5.x?" Release
149
255
  * Fixed request proxy Class constant reference scopes - was missing `::` in many places (#225, #226 by @pboling)
150
256
 
151
257
  ### Removed
258
+
152
259
  * Remove direct development dependency on nokogiri (#299 by @pboling)
153
260
 
154
261
  ## [0.5.6] 2021-04-02
262
+
263
+ - TAG: [v0.5.6][0.5.6t]
264
+
155
265
  ### Added
266
+
156
267
  * Add metadata to Gemspec file
157
268
  * Add support for PUT requests with Action Controller (#181)
158
269
 
159
270
  ### Changed
271
+
160
272
  * Change default timeout to be the same as Net::HTTP default, 60 seconds instead of 30 seconds.
161
273
 
162
274
  ## [0.5.5] 2020-01-19
275
+
276
+ - TAG: [v0.5.5][0.5.5t]
277
+
163
278
  ### Added
279
+
164
280
  * Add :allow_empty_params option (#155)
165
281
 
166
282
  ### Changed
283
+
167
284
  * Allow redirect to different host but same path
168
285
  * Various cleanups
169
286
 
170
287
  ### Fixed
288
+
171
289
  * Fixes ssl-noverify
172
290
  * Fixed README example (#158, #159, by @pboling)
173
291
 
174
292
  ## [0.5.4] 2017-12-08
293
+
294
+ - TAG: [v0.5.4][0.5.4t]
295
+
175
296
  ### Changed
297
+
176
298
  * Various cleanups (charliesome)
177
299
 
178
300
  ### Fixed
301
+
179
302
  * Fixes UnknownRequestType on Rails 5.1 for ActionDispatch::Request (xprazak2)
180
303
 
181
304
  ## [0.5.3] 2017-05-24
305
+
306
+ - TAG: [v0.5.3][0.5.3t]
307
+
182
308
  ### Fixed
309
+
183
310
  * Fix #145 - broken CLI required loading active_support (James Pinto)
184
311
 
185
312
  ### Changed
313
+
186
314
  * Removing legacy scripts (James Pinto)
187
315
 
188
316
  ## [0.5.2] 2017-05-17
317
+
318
+ - TAG: [v0.5.2][0.5.2t]
319
+
189
320
  ### Added
321
+
190
322
  * Adding a development dependency that had not been mentioned (James Pinto)
191
323
  * Adding CodeClimate (James Pinto)
192
324
  * Adding support to Ruby 2.4 and head (James Pinto)
193
325
 
194
326
  ### Changed
327
+
195
328
  * Use assert_nil so as to silence a Minitest 6 deprecation warning (James Pinto)
196
329
  * Stop bundling tests files in the gem (Michal Papis)
197
330
  * Minor cleanup on tests (James Pinto)
@@ -209,30 +342,42 @@ The "Can it be the end of the line for 0.5.x?" Release
209
342
  * Reimplementing #82 - Debug Output Option (James Pinto)
210
343
 
211
344
  ### Fixed
345
+
212
346
  * Fix #113 adding paths when a full URL has been specified (James Pinto)
213
347
  * Bug Fix, webmock 2.0 has introduced a new bug (James Pinto)
214
348
  * Making a test/support dir (James Pinto)
215
349
  * Fix #177 - Adjusting to webmock latest recommended implementation for minitest (James Pinto)
216
350
 
217
351
  ## [0.5.1] 2016-02-29
352
+
353
+ - TAG: [v0.5.1][0.5.1t]
354
+
218
355
  ### Added
356
+
219
357
  * Add license info to the gemspec (Robert Reiz)
220
358
 
221
359
  ### Fixed
360
+
222
361
  * Proper handling for empty query string in RequestToken#build_authorize_url (midchildan,
223
362
  Harald Sitter)
224
363
  * Replace calls to String#blank? with its implementation (Sergio Gil Pérez de la Manga)
225
364
 
226
365
  ### Changed
366
+
227
367
  * Loosen some development dependencies. Add libcurl-dev to travis
228
368
  * Fixes to travis config. Switch to rubygems for installation and loading
229
369
 
230
370
  ### Removed
371
+
231
372
  * Remove obsolete comment (Arthur Nogueira Neves)
232
373
  * Remove jeweler from gemspec
233
374
 
234
375
  ## [0.5.0] 2016-02-20
376
+
377
+ - TAG: [v0.5.0][0.5.0t]
378
+
235
379
  ### Added
380
+
236
381
  * Add support for HTTP PATCH method (Richard Huang)
237
382
  * Allow reading private key from a string (Khaja Minhajuddin)
238
383
  * Add rest-client proxy (Khem Veasna)
@@ -240,12 +385,14 @@ The "Can it be the end of the line for 0.5.x?" Release
240
385
  * Allow reading certificate file path from environment variable. Add CentOS cert file path (Danil Vlasov)
241
386
 
242
387
  ### Changed
388
+
243
389
  * Replace jeweler with real spec and bundler tasks
244
390
  * Extract version to separate file
245
391
  * Use OpenSSL for all digest and hashing. Remove signature methods not defined by OAuth spec. (Kevin Hughes)
246
392
  * Change token requests to exclude `oauth_body_hash`. Update doc links in comments. (John Remmen)
247
393
 
248
394
  ### Fixed
395
+
249
396
  * Fix ability to pass in an authorize url with a query string (Roger Smith)
250
397
  * Fix bug in signature verification (r-stu31)
251
398
  * Use standard key name (`oauth_token_secret`) in Token#to_query (Craig Walker)
@@ -260,69 +407,108 @@ The "Can it be the end of the line for 0.5.x?" Release
260
407
  * Various fixes/updates to README (Evan Arnold, Jonathan Camenisch, Brian John, Ankur Sethi)
261
408
 
262
409
  ## [0.4.7] 2012-09-03
410
+
411
+ - TAG: [v0.4.7][0.4.7t]
412
+
263
413
  ### Added
414
+
264
415
  * Set a configurable timeout for all requests (Rick Olson)
265
416
 
266
417
  ### Fixed
418
+
267
419
  * Fix merging paths if the path is not empty
268
420
  * Fix nested hash params in Consumer#request (Ernie Miller)
269
421
 
270
422
  ## [0.4.6] 2012-04-21
423
+
424
+ - TAG: [v0.4.6][0.4.6t]
425
+
271
426
  ### Changed
427
+
272
428
  * Make use the path component of the :site parameter (Jonathon M. Abbott)
273
429
 
274
430
  ### Fixed
431
+
275
432
  * Fixed nested attributes in #normalize (Shaliko Usubov)
276
433
  * Fixed post body's being dropped in 1.9 (Steven Hammond)
277
434
  * Fixed PUT request handling (Anton Panasenko)
278
435
 
279
436
  ## [0.4.5] 2011-06-25
437
+
438
+ - TAG: [v0.4.5][0.4.5t]
439
+
280
440
  ### Added
441
+
281
442
  * Add explicit require for rsa/sha1 (Juris Galang)
282
443
  * Add gemtest support (Adrian Feldman)
283
444
 
284
445
  ### Changed
446
+
285
447
  * Use webmock to mock all http-requests in tests (Adrian Feldman)
286
448
  * Mention Typhoeus require in the README (Kim Ahlström)
287
449
  * Use Net::HTTPGenericRequest (Jakub Kuźma)
288
450
 
289
451
  ### Fixed
452
+
290
453
  * Fix POST Requests with Typhoeus proxy (niedhui)
291
454
  * Fix incorrect hardcoded port (Ian Taylor)
292
455
 
293
456
  ## [0.4.4] 2010-10-31
457
+
458
+ - TAG: [v0.4.4][0.4.4t]
459
+
294
460
  ### Added
461
+
295
462
  * Added support for Rails 3 in client/action_controller_request (Pelle)
296
463
 
297
464
  ### Fixed
465
+
298
466
  * Fix LoadError rescue in tests: return can't be used in this context (Hans de Graaff)
299
467
  * HTTP headers should be strings. (seancribbs)
300
468
  * ensure consumer uri gets set back to original config even if an error occurs (Brian Finney)
301
469
  * Yahoo uses & to split records in OAuth headers (Brian Finney)
302
470
 
303
471
  ## [0.4.3] 2010-09-01
472
+
473
+ - TAG: [v0.4.3][0.4.3t]
474
+
304
475
  ### Fixed
476
+
305
477
  * Fix for em-http proxy (ichverstehe)
306
478
 
307
479
  ## [0.4.2] 2010-08-13
480
+
481
+ - TAG: [v0.4.2][0.4.2t]
482
+
308
483
  ### Added
484
+
309
485
  * Added Bundler (rc) Gemfile for easier dev/testing
310
486
 
311
487
  ### Fixed
488
+
312
489
  * Fixed compatibility with Ruby 1.9.2 (ecavazos)
313
490
  * Fixed the em-http request proxy (Joshua Hull)
314
491
  * Fix for oauth proxy string manipulation (Jakub Suder)
315
492
 
316
493
  ## [0.4.1] 2010-06-16
494
+
495
+ - TAG: [v0.4.1][0.4.1t]
496
+
317
497
  ### Added
498
+
318
499
  * Added support for using OAuth with proxies (Marsh Gardiner)
319
500
 
320
501
  ### Fixed
502
+
321
503
  * Rails 3 Compatibility fixes (Pelle Braendgaard)
322
504
  * Fixed load errors on tests for missing (non-required) libraries
323
505
 
324
506
  ## [0.4.0] 2010-04-22
507
+
508
+ - TAG: [v0.4.0][0.4.0t]
509
+
325
510
  ### Added
511
+
326
512
  * Added computation of oauth_body_hash as per OAuth Request Body Hash 1.0 Draft 4 (Michael Reinsch)
327
513
  * Added the optional `oauth_session_handle` parameter for the Yahoo implementation (Will Bailey)
328
514
  * Added optional block to OAuth::Consumer.get_*_token (Neill Pearman)
@@ -334,29 +520,41 @@ The "Can it be the end of the line for 0.5.x?" Release
334
520
  * New website (Aaron Quint)
335
521
 
336
522
  ### Changed
523
+
337
524
  * Better marshalling implementation (Yoan Blanc)
338
525
  * Replaced hoe with Jeweler (Aaron Quint)
339
526
 
340
527
  ### Fixed
528
+
341
529
  * Strip extraneous spaces and line breaks from access_token responses (observed in the wild with Yahoo!'s OAuth+OpenID hybrid) (Eric Hartmann)
342
530
  * Stop double-escaping PLAINTEXT signatures (Jimmy Zimmerman)
343
531
  * OAuth::Client::Helper won't override the specified `oauth_version` (Philip Kromer)
344
532
  * Fixed an encoding / multibyte issue (成田 一生)
345
533
 
346
534
  ## [0.3.6] 2009-09-14
535
+
536
+ - TAG: [v0.3.6][0.3.6t]
537
+
347
538
  ### Added
539
+
348
540
  * Added -B CLI option to use the :body authentication scheme (Seth)
349
541
  * Support POST and PUT with raw bodies (Yu-Shan Fung et al)
350
542
  * Added :ca_file consumer option to allow consumer specific certificate override. (Pelle)
351
543
 
352
544
  ### Changed
545
+
353
546
  * Test clean-up (Xavier Shay, Hannes Tydén)
354
547
 
355
548
  ### Fixed
549
+
356
550
  * Respect `--method` in `authorize` CLI command (Seth)
357
551
 
358
552
  ## [0.3.5] 2009-06-03
553
+
554
+ - TAG: [v0.3.5][0.3.5t]
555
+
359
556
  ### Added
557
+
360
558
  * `query` CLI command to access protected resources (Seth)
361
559
  * Added -H, -Q CLI options for specifying the authentication scheme (Seth)
362
560
  * Added -O CLI option for specifying a file containing options (Seth)
@@ -366,28 +564,43 @@ The "Can it be the end of the line for 0.5.x?" Release
366
564
  * Added --scope CLI option for Google's 'scope' parameter (Seth)
367
565
 
368
566
  ## [0.3.4] 2009-05-06
567
+
568
+ - TAG: [v0.3.4][0.3.4t]
569
+
369
570
  ### Changed
571
+
370
572
  * OAuth::Client::Helper uses OAuth::Version::VERSION (chadisfaction)
371
573
 
372
574
  ### Fixed
575
+
373
576
  * Fix OAuth::RequestProxy::ActionControllerRequest's handling of params (Tristan Groléat)
374
577
 
375
578
  ## [0.3.3] 2009-05-04
579
+
580
+ - TAG: [v0.3.3][0.3.3t]
581
+
376
582
  ### Added
583
+
377
584
  * Support for arguments in OAuth::Consumer#get_access_token (Matt Sanford)
378
585
  * Add gem version to user-agent header (Matt Sanford)
379
586
 
380
587
  ### Changed
588
+
381
589
  * Improved error handling for invalid Authorization headers (Matt Sanford)
382
590
  * Handle input from aggressive form encoding libraries (Matt Wood)
383
591
 
384
592
  ### Fixed
593
+
385
594
  * Corrected OAuth XMPP namespace (Seth)
386
595
  * Fixed signatures for non-ASCII under $KCODE other than 'u' (Matt Sanford)
387
596
  * Fixed edge cases in ActionControllerRequestProxy where params were being incorrectly signed (Marcos Wright Kuhns)
388
597
 
389
598
  ## [0.3.2] 2009-03-23
599
+
600
+ - TAG: [v0.3.2][0.3.2t]
601
+
390
602
  ### Added
603
+
391
604
  * Support applications using the MethodOverride Rack middleware (László Bácsi)
392
605
  * `authorize` command for `oauth` CLI (Seth)
393
606
  * Initial support for Problem Reporting extension (Seth)
@@ -395,110 +608,173 @@ The "Can it be the end of the line for 0.5.x?" Release
395
608
  * Added help to the 'oauth' CLI (Seth)
396
609
 
397
610
  ### Fixed
611
+
398
612
  * 2xx statuses should be treated as success (Anders Conbere)
399
613
  * Fixed ActionController parameter escaping behavior (Thiago Arrais, László Bácsi, Brett Gibson, et al)
400
614
  * Fixed signature calculation when both options and a block were provided to OAuth::Signature::Base#initialize (Seth)
401
615
  * Fixed a problem when attempting to normalize MockRequest URIs (Seth)
402
616
 
403
617
  ## [0.3.1] 2009-01-26
618
+
619
+ - TAG: [v0.3.1][0.3.1t]
620
+
404
621
  ### Fixed
622
+
405
623
  * Fixed a problem with relative and absolute token request paths. (Michael Wood)
406
624
 
407
625
  ## [0.3.0] 2009-01-25
626
+
627
+ - TAG: [v0.3.0][0.3.0t]
628
+
408
629
  ### Added
630
+
409
631
  * Support ActionController::Request from Edge Rails (László Bácsi)
410
632
  * Added #normalized_parameters to OAuth::RequestProxy::Base (Pelle)
411
633
  * Command-line app for generating signatures. (Seth)
412
634
 
413
635
  ### Changed
636
+
414
637
  * OAuth::Signature.sign and friends now yield the RequestProxy instead of the token when the passed block's arity is 1. (Seth)
415
638
  * Improved test-cases and compatibility for encoding issues. (Pelle)
416
639
 
417
640
  ### Fixed
641
+
418
642
  * Correctly handle multi-valued parameters (Seth)
419
643
  * Token requests are made to the configured URL rather than generating a potentially incorrect one. (Kellan Elliott-McCrea)
420
644
 
421
645
  ## 0.2.7 2008-09-10
646
+
422
647
  The lets fix the last release release
423
648
 
424
649
  ### Fixed
650
+
425
651
  * Fixed plain text signatures (Andrew Arrow)
426
652
  * Fixed RSA requests using OAuthTokens. (Philip Lipu Tsai)
427
653
 
428
654
  ## 0.2.6 2008-09-09
655
+
429
656
  The lets RSA release
430
657
 
431
658
  ### Added
659
+
432
660
  * Improved support for Ruby 1.8.7 (Bill Kocik)
433
661
  * Added support for 'private_key_file' option for RSA signatures (Chris Mear)
434
662
 
435
663
  ### Changed
664
+
436
665
  * Improved RSA testing
437
666
  * Omit token when signing with RSA
438
667
 
439
668
  ### Fixed
669
+
440
670
  * Fixed RSA verification to support RSA providers now using Ruby and RSA
441
671
  * Fixed several edge cases where params were being incorrectly signed (Scott Hill)
442
672
  * Fixed RSA signing (choonkeat)
443
673
 
444
674
  ## 0.2.2 2008-02-22
675
+
445
676
  Lets actually support SSL release
446
677
 
447
678
  ### Fixed
679
+
448
680
  * Use HTTPS when required.
449
681
 
450
682
  ## 0.2 2008-1-19
683
+
451
684
  All together now release
452
685
 
453
- This is a big release, where we have merged the efforts of various parties into one common library.
686
+ ### Changed
687
+
688
+ * This is a big release, where we have merged the efforts of various parties into one common library.
454
689
  This means there are definitely some API changes you should be aware of. They should be minimal
455
690
  but please have a look at the unit tests.
456
691
 
457
692
  ## 0.1.2 2007-12-1
693
+
458
694
  ### Fixed
695
+
459
696
  * Fixed checks for missing OAuth params to improve performance
460
697
  * Includes Pat's fix for getting the realm out.
461
698
 
462
699
  ## 0.1.1 2007-11-26
700
+
463
701
  ### Added
702
+
464
703
  * First release as a GEM
465
704
  * Moved all non-Rails functionality from the Rails plugin:
466
705
  http://code.google.com/p/oauth-plugin/
467
706
 
468
- [Unreleased]: https://github.com/oauth-xx/oauth-ruby/compare/v1.1.0...main
469
- [1.1.0]: https://github.com/oauth-xx/oauth-ruby/releases/tag/v1.1.0
470
- [1.0.1]: https://github.com/oauth-xx/oauth-ruby/releases/tag/v1.0.1
471
- [1.0.0]: https://github.com/oauth-xx/oauth-ruby/releases/tag/v1.0.0
472
- [0.6.2]: https://github.com/oauth-xx/oauth-ruby/releases/tag/v0.6.2
473
- [0.6.1]: https://github.com/oauth-xx/oauth-ruby/releases/tag/v0.6.1
474
- [0.6.0]: https://github.com/oauth-xx/oauth-ruby/releases/tag/v0.6.0
475
- [0.5.14]: https://github.com/oauth-xx/oauth-ruby/releases/tag/v0.5.14
476
- [0.5.13]: https://github.com/oauth-xx/oauth-ruby/releases/tag/v0.5.13
477
- [0.5.12]: https://github.com/oauth-xx/oauth-ruby/releases/tag/v0.5.12
478
- [0.5.11]: https://github.com/oauth-xx/oauth-ruby/releases/tag/v0.5.11
479
- [0.5.10]: https://github.com/oauth-xx/oauth-ruby/releases/tag/v0.5.10
480
- [0.5.9]: https://github.com/oauth-xx/oauth-ruby/releases/tag/v0.5.9
481
- [0.5.8]: https://github.com/oauth-xx/oauth-ruby/releases/tag/v0.5.8
482
- [0.5.7]: https://github.com/oauth-xx/oauth-ruby/releases/tag/v0.5.7
483
- [0.5.6]: https://github.com/oauth-xx/oauth-ruby/releases/tag/v0.5.6
484
- [0.5.5]: https://github.com/oauth-xx/oauth-ruby/releases/tag/v0.5.5
485
- [0.5.4]: https://github.com/oauth-xx/oauth-ruby/releases/tag/v0.5.4
486
- [0.5.3]: https://github.com/oauth-xx/oauth-ruby/releases/tag/v0.5.3
487
- [0.5.2]: https://github.com/oauth-xx/oauth-ruby/releases/tag/v0.5.2
488
- [0.5.1]: https://github.com/oauth-xx/oauth-ruby/releases/tag/v0.5.1
489
- [0.5.0]: https://github.com/oauth-xx/oauth-ruby/releases/tag/v0.5.0
490
- [0.4.7]: https://github.com/oauth-xx/oauth-ruby/releases/tag/v0.4.7
491
- [0.4.6]: https://github.com/oauth-xx/oauth-ruby/releases/tag/v0.4.6
492
- [0.4.5]: https://github.com/oauth-xx/oauth-ruby/releases/tag/v0.4.5
493
- [0.4.4]: https://github.com/oauth-xx/oauth-ruby/releases/tag/v0.4.4
494
- [0.4.3]: https://github.com/oauth-xx/oauth-ruby/releases/tag/v0.4.3
495
- [0.4.2]: https://github.com/oauth-xx/oauth-ruby/releases/tag/v0.4.2
496
- [0.4.1]: https://github.com/oauth-xx/oauth-ruby/releases/tag/v0.4.1
497
- [0.4.0]: https://github.com/oauth-xx/oauth-ruby/releases/tag/v0.4.0
498
- [0.3.6]: https://github.com/oauth-xx/oauth-ruby/releases/tag/v0.3.6
499
- [0.3.5]: https://github.com/oauth-xx/oauth-ruby/releases/tag/v0.3.5
500
- [0.3.4]: https://github.com/oauth-xx/oauth-ruby/releases/tag/v0.3.4
501
- [0.3.3]: https://github.com/oauth-xx/oauth-ruby/releases/tag/v0.3.3
502
- [0.3.2]: https://github.com/oauth-xx/oauth-ruby/releases/tag/v0.3.2
503
- [0.3.1]: https://github.com/oauth-xx/oauth-ruby/releases/tag/v0.3.1
504
- [0.3.0]: https://github.com/oauth-xx/oauth-ruby/releases/tag/v0.3.0
707
+ [Unreleased]: https://github.com/ruby-oauth/oauth/compare/v1.1.1...HEAD
708
+ [1.1.1]: https://github.com/ruby-oauth/oauth/compare/v1.1.0...v1.1.1
709
+ [1.1.1t]: https://github.com/ruby-oauth/oauth/releases/tag/v1.1.1
710
+ [1.1.0]: https://gitlab.com/ruby-oauth/oauth/-/compare/v1.0.1...v1.1.0
711
+ [1.1.0t]: https://github.com/ruby-oauth/oauth/releases/tag/v1.1.0
712
+ [1.0.1]: https://gitlab.com/ruby-oauth/oauth/-/compare/v1.0.0...v1.0.1
713
+ [1.0.1t]: https://github.com/ruby-oauth/oauth/releases/tag/v1.0.1
714
+ [1.0.0]: https://gitlab.com/ruby-oauth/oauth/-/compare/v0.6.2...v1.0.0
715
+ [1.0.0t]: https://github.com/ruby-oauth/oauth/releases/tag/v1.0.0
716
+ [0.6.2]: https://gitlab.com/ruby-oauth/oauth/-/compare/v0.6.1...v0.6.2
717
+ [0.6.2t]: https://github.com/ruby-oauth/oauth/releases/tag/v0.6.2
718
+ [0.6.1]: https://gitlab.com/ruby-oauth/oauth/-/compare/v0.6.0...v0.6.1
719
+ [0.6.1t]: https://github.com/ruby-oauth/oauth/releases/tag/v0.6.1
720
+ [0.6.0]: https://gitlab.com/ruby-oauth/oauth/-/compare/v0.5.14...v0.6.0
721
+ [0.6.0t]: https://github.com/ruby-oauth/oauth/releases/tag/v0.6.0
722
+ [0.5.14]: https://gitlab.com/ruby-oauth/oauth/-/compare/v0.5.13...v0.5.14
723
+ [0.5.14t]: https://github.com/ruby-oauth/oauth/releases/tag/v0.5.14
724
+ [0.5.13]: https://gitlab.com/ruby-oauth/oauth/-/compare/v0.5.12...v0.5.13
725
+ [0.5.13t]: https://github.com/ruby-oauth/oauth/releases/tag/v0.5.13
726
+ [0.5.12]: https://gitlab.com/ruby-oauth/oauth/-/compare/v0.5.11...v0.5.12
727
+ [0.5.12t]: https://github.com/ruby-oauth/oauth/releases/tag/v0.5.12
728
+ [0.5.11]: https://gitlab.com/ruby-oauth/oauth/-/compare/v0.5.10...v0.5.11
729
+ [0.5.11t]: https://github.com/ruby-oauth/oauth/releases/tag/v0.5.11
730
+ [0.5.10t]: https://github.com/ruby-oauth/oauth/releases/tag/v0.5.10
731
+ [0.5.9]: https://gitlab.com/ruby-oauth/oauth/-/compare/v0.5.8...v0.5.9
732
+ [0.5.9t]: https://github.com/ruby-oauth/oauth/releases/tag/v0.5.9
733
+ [0.5.8]: https://gitlab.com/ruby-oauth/oauth/-/compare/v0.5.7...v0.5.8
734
+ [0.5.8t]: https://github.com/ruby-oauth/oauth/releases/tag/v0.5.8
735
+ [0.5.7]: https://gitlab.com/ruby-oauth/oauth/-/compare/v0.5.6...v0.5.7
736
+ [0.5.7t]: https://github.com/ruby-oauth/oauth/releases/tag/v0.5.7
737
+ [0.5.6]: https://gitlab.com/ruby-oauth/oauth/-/compare/v0.5.5...v0.5.6
738
+ [0.5.6t]: https://github.com/ruby-oauth/oauth/releases/tag/v0.5.6
739
+ [0.5.5]: https://gitlab.com/ruby-oauth/oauth/-/compare/v0.5.4...v0.5.5
740
+ [0.5.5t]: https://github.com/ruby-oauth/oauth/releases/tag/v0.5.5
741
+ [0.5.4]: https://gitlab.com/ruby-oauth/oauth/-/compare/v0.5.3...v0.5.4
742
+ [0.5.4t]: https://github.com/ruby-oauth/oauth/releases/tag/v0.5.4
743
+ [0.5.3]: https://gitlab.com/ruby-oauth/oauth/-/compare/v0.5.2...v0.5.3
744
+ [0.5.3t]: https://github.com/ruby-oauth/oauth/releases/tag/v0.5.3
745
+ [0.5.2]: https://gitlab.com/ruby-oauth/oauth/-/compare/v0.5.1...v0.5.2
746
+ [0.5.2t]: https://github.com/ruby-oauth/oauth/releases/tag/v0.5.2
747
+ [0.5.1]: https://gitlab.com/ruby-oauth/oauth/-/compare/v0.5.0...v0.5.1
748
+ [0.5.1t]: https://github.com/ruby-oauth/oauth/releases/tag/v0.5.1
749
+ [0.5.0]: https://gitlab.com/ruby-oauth/oauth/-/compare/v0.4.7...v0.5.0
750
+ [0.5.0t]: https://github.com/ruby-oauth/oauth/releases/tag/v0.5.0
751
+ [0.4.7]: https://gitlab.com/ruby-oauth/oauth/-/compare/v0.4.6...v0.4.7
752
+ [0.4.7t]: https://github.com/ruby-oauth/oauth/releases/tag/v0.4.7
753
+ [0.4.6]: https://gitlab.com/ruby-oauth/oauth/-/compare/v0.4.5...v0.4.6
754
+ [0.4.6t]: https://github.com/ruby-oauth/oauth/releases/tag/v0.4.6
755
+ [0.4.5]: https://gitlab.com/ruby-oauth/oauth/-/compare/v0.4.4...v0.4.5
756
+ [0.4.5t]: https://github.com/ruby-oauth/oauth/releases/tag/v0.4.5
757
+ [0.4.4]: https://gitlab.com/ruby-oauth/oauth/-/compare/v0.4.3...v0.4.4
758
+ [0.4.4t]: https://github.com/ruby-oauth/oauth/releases/tag/v0.4.4
759
+ [0.4.3]: https://gitlab.com/ruby-oauth/oauth/-/compare/v0.4.2...v0.4.3
760
+ [0.4.3t]: https://github.com/ruby-oauth/oauth/releases/tag/v0.4.3
761
+ [0.4.2]: https://gitlab.com/ruby-oauth/oauth/-/compare/v0.4.1...v0.4.2
762
+ [0.4.2t]: https://github.com/ruby-oauth/oauth/releases/tag/v0.4.2
763
+ [0.4.1]: https://gitlab.com/ruby-oauth/oauth/-/compare/v0.4.0...v0.4.1
764
+ [0.4.1t]: https://github.com/ruby-oauth/oauth/releases/tag/v0.4.1
765
+ [0.4.0]: https://gitlab.com/ruby-oauth/oauth/-/compare/v0.3.6...v0.4.0
766
+ [0.4.0t]: https://github.com/ruby-oauth/oauth/releases/tag/v0.4.0
767
+ [0.3.6]: https://gitlab.com/ruby-oauth/oauth/-/compare/v0.3.5...v0.3.6
768
+ [0.3.6t]: https://github.com/ruby-oauth/oauth/releases/tag/v0.3.6
769
+ [0.3.5]: https://gitlab.com/ruby-oauth/oauth/-/compare/v0.3.4...v0.3.5
770
+ [0.3.5t]: https://github.com/ruby-oauth/oauth/releases/tag/v0.3.5
771
+ [0.3.4]: https://gitlab.com/ruby-oauth/oauth/-/compare/v0.3.3...v0.3.4
772
+ [0.3.4t]: https://github.com/ruby-oauth/oauth/releases/tag/v0.3.4
773
+ [0.3.3]: https://gitlab.com/ruby-oauth/oauth/-/compare/v0.3.2...v0.3.3
774
+ [0.3.3t]: https://github.com/ruby-oauth/oauth/releases/tag/v0.3.3
775
+ [0.3.2]: https://gitlab.com/ruby-oauth/oauth/-/compare/v0.3.1...v0.3.2
776
+ [0.3.2t]: https://github.com/ruby-oauth/oauth/releases/tag/v0.3.2
777
+ [0.3.1]: https://gitlab.com/ruby-oauth/oauth/-/compare/v0.3.0...v0.3.1
778
+ [0.3.1t]: https://github.com/ruby-oauth/oauth/releases/tag/v0.3.1
779
+ [0.3.0]: https://github.com/ruby-oauth/oauth/releases/tag/v0.3.0
780
+ [0.3.0t]: https://github.com/ruby-oauth/oauth/releases/tag/v0.3.0