oauth 1.1.0 → 1.1.2

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (39) hide show
  1. checksums.yaml +4 -4
  2. checksums.yaml.gz.sig +4 -0
  3. data/CHANGELOG.md +330 -41
  4. data/CITATION.cff +20 -0
  5. data/CODE_OF_CONDUCT.md +79 -29
  6. data/CONTRIBUTING.md +213 -24
  7. data/FUNDING.md +77 -0
  8. data/{LICENSE → LICENSE.txt} +1 -1
  9. data/README.md +543 -275
  10. data/REEK +0 -0
  11. data/RUBOCOP.md +71 -0
  12. data/SECURITY.md +27 -11
  13. data/lib/oauth/client/action_controller_request.rb +14 -9
  14. data/lib/oauth/client/em_http.rb +106 -99
  15. data/lib/oauth/client/helper.rb +15 -11
  16. data/lib/oauth/client/net_http.rb +39 -13
  17. data/lib/oauth/consumer.rb +105 -54
  18. data/lib/oauth/errors/problem.rb +1 -1
  19. data/lib/oauth/helper.rb +25 -3
  20. data/lib/oauth/oauth.rb +28 -6
  21. data/lib/oauth/optional.rb +20 -0
  22. data/lib/oauth/request_proxy/action_controller_request.rb +11 -7
  23. data/lib/oauth/request_proxy/action_dispatch_request.rb +41 -0
  24. data/lib/oauth/request_proxy/base.rb +15 -12
  25. data/lib/oauth/request_proxy/em_http_request.rb +53 -52
  26. data/lib/oauth/request_proxy/jabber_request.rb +9 -2
  27. data/lib/oauth/request_proxy/net_http.rb +1 -1
  28. data/lib/oauth/request_proxy/rest_client_request.rb +4 -3
  29. data/lib/oauth/server.rb +12 -8
  30. data/lib/oauth/signature/base.rb +1 -1
  31. data/lib/oauth/signature/rsa/sha1.rb +11 -4
  32. data/lib/oauth/tokens/access_token.rb +1 -1
  33. data/lib/oauth/tokens/consumer_token.rb +2 -2
  34. data/lib/oauth/tokens/request_token.rb +9 -4
  35. data/lib/oauth/version.rb +1 -1
  36. data.tar.gz.sig +0 -0
  37. metadata +246 -81
  38. metadata.gz.sig +0 -0
  39. data/TODO +0 -32
data/CHANGELOG.md CHANGED
@@ -1,21 +1,78 @@
1
1
  # Changelog
2
+
3
+ [![SemVer 2.0.0][📌semver-img]][📌semver] [![Keep-A-Changelog 1.0.0][📗keep-changelog-img]][📗keep-changelog]
4
+
2
5
  All notable changes to this project will be documented in this file.
3
6
 
4
- The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/),
5
- and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
7
+ The format is based on [Keep a Changelog][📗keep-changelog],
8
+ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html),
9
+ and [yes][📌major-versions-not-sacred], platform and engine support are part of the [public API][📌semver-breaking].
10
+ Please file a bug if you notice a violation of semantic versioning.
11
+
12
+ [📌semver]: https://semver.org/spec/v2.0.0.html
13
+ [📌semver-img]: https://img.shields.io/badge/semver-2.0.0-FFDD67.svg?style=flat
14
+ [📌semver-breaking]: https://github.com/semver/semver/issues/716#issuecomment-869336139
15
+ [📌major-versions-not-sacred]: https://tom.preston-werner.com/2022/05/23/major-version-numbers-are-not-sacred.html
16
+ [📗keep-changelog]: https://keepachangelog.com/en/1.0.0/
17
+ [📗keep-changelog-img]: https://img.shields.io/badge/keep--a--changelog-1.0.0-FFDD67.svg?style=flat
6
18
 
7
19
  ## [Unreleased]
20
+
8
21
  ### Added
9
22
 
10
23
  ### Changed
11
24
 
25
+ ### Deprecated
26
+
27
+ ### Removed
28
+
12
29
  ### Fixed
13
30
 
31
+ ### Security
32
+
33
+ ## [1.1.2] - 2025-09-21
34
+
35
+ - TAG: [v1.1.2][1.1.2t]
36
+ - COVERAGE: 81.78% -- 817/999 lines in 36 files
37
+ - BRANCH COVERAGE: 50.54% -- 140/277 branches in 36 files
38
+ - 40.71% documented
39
+
40
+ ### Added
41
+
42
+ - Corrected SHA-256 & SHA-512 checksums for release 1.1.1
43
+
44
+ ## [1.1.1] - 2025-09-21
45
+
46
+ - TAG: [v1.1.1][1.1.1t]
47
+ - COVERAGE: 81.70% -- 817/1000 lines in 36 files
48
+ - BRANCH COVERAGE: 50.54% -- 140/277 branches in 36 files
49
+ - 40.71% documented
50
+
51
+ ### Added
52
+
53
+ - kettle-dev v1.1.18
54
+ - Internal escape & unescape methods
55
+ - Stop relying on URI / CGI for escaping and unescaping
56
+ - They are both unstable across supported versions of Ruby (including 3.5 HEAD)
57
+ - Tests against Rails-specific code are now run in CI
58
+ - Documented OAuth 1.0, 1.0a differences
59
+
60
+ ### Changed
61
+
62
+ - converted minitest => rspec
63
+
14
64
  ### Removed
15
65
 
66
+ - dependency on em-http-request
67
+ - now lazy Loaded so it can be optional, since some systems fail to install it, and it doesn't seem maintained
68
+
16
69
  ## [1.1.0] 2022-08-29
70
+
71
+ - TAG: [v1.1.0][1.1.0t]
72
+
17
73
  ### Changed
18
- * `OAuth::CLI` has been extracted to a new gem, `oauth-tty`, hosted on [Gitlab](https://gitlab.com/oauth-xx/oauth-tty)
74
+
75
+ * `OAuth::CLI` has been extracted to a new gem, `oauth-tty`, hosted on [Gitlab](https://gitlab.com/ruby-oauth/oauth-tty)
19
76
  * The public API of `oauth-tty` is backwards compatible (meaning `OAuth::CLI`)
20
77
  * The change within the `oauth` gem is backwards compatible as `oauth-tty` has been added as a dependency
21
78
  * Minor version bump is cautionary, as many lines of code have changed.
@@ -23,79 +80,124 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
23
80
  * symbolized keys, dot-access and snake-case are now normalized
24
81
 
25
82
  ## [1.0.1] 2022-08-29
83
+
84
+ - TAG: [v1.0.1][1.0.1t]
85
+
26
86
  ### Changed
87
+
27
88
  * `OAuth::Comsumer#options` hash is now handled by `snaky_hash`, which was extracted from `oauth2`
28
89
  * symbolized keys, dot-access and snake-case are now normalized
29
90
 
30
91
  ## [1.0.0] 2022-08-23
92
+
93
+ - TAG: [v1.0.0][1.0.0t]
94
+
31
95
  ### Changed
96
+
32
97
  * Dropped support for Ruby < 2.7
33
98
  * Dropped support for Rails < 6
34
99
 
35
100
  ### Added
101
+
36
102
  * New EOL Policy
37
103
  * Non-commercial support for the oldest version of Ruby (which itself is going EOL) will be dropped each year in April
38
104
 
39
105
  ## [0.6.2] 2022-08-29
106
+
107
+ - TAG: [v0.6.2][0.6.2t]
108
+
40
109
  ### Changed
110
+
41
111
  * `OAuth::Comsumer#options` hash is now handled by `snaky_hash`, which was extracted from `oauth2`
42
112
  * symbolized keys, dot-access and snake-case are now normalized
43
113
 
44
114
  ## [0.6.1] 2022-08-23
115
+
116
+ - TAG: [v0.6.1][0.6.1t]
117
+
45
118
  ### Changed
119
+
46
120
  * Fixed documentation in SECURITY.md
47
121
  * Change references to master => main
48
122
 
49
123
  ### Added
124
+
50
125
  * Post install note about v0.6.x EOL approaching in April, 2024
51
126
 
52
127
  ## [0.6.0] 2022-08-23
128
+
129
+ - TAG: [v0.6.0][0.6.0t]
130
+
53
131
  ### Added
132
+
54
133
  * New option `body_hash_enabled` which defaults to true to maintain backward compatibility with prior releases. Setting to `false` disables generation of a `oauth_body_hash` component as part of the signature computation.
55
134
  * Improved documentation of support policy via Tidelift
56
135
  * Stop testing against active_support v2
57
136
 
58
137
  ### Changed
138
+
59
139
  * Utilize version_gem extracted from oauth2 gem for VERSION
60
140
  * Added new `OAuth::Version` namespace
61
141
  * VERSION constant now at `OAuth::Version::VERSION`
62
142
 
63
143
  ### Removed
144
+
64
145
  * Ruby 2.0, 2.1, 2.2, and 2.3 are no longer valid install targets
65
146
 
66
147
  ## [0.5.14] 2022-08-29
148
+
149
+ - TAG: [v0.5.14][0.5.14t]
150
+
67
151
  The "hopeful last 0.5.x" Release
68
152
 
69
153
  ### Fixed
154
+
70
155
  * More typos fixed
71
156
 
72
157
  ## [0.5.13] 2022-08-23
158
+
159
+ - TAG: [v0.5.13][0.5.13t]
160
+
73
161
  The "I think I caught 'em all!" Release
74
162
 
75
163
  ### Fixed
164
+
76
165
  * Typo oauth2 => oauth as gem name in one more place.
77
166
 
78
167
  ## [0.5.12] 2022-08-23
168
+
169
+ - TAG: [v0.5.12][0.5.12t]
170
+
79
171
  The "Typoes are just the worst!" Release
80
172
 
81
173
  ### Fixed
174
+
82
175
  * Typo oauth2 => oauth as gem name in a couple places.
83
176
 
84
177
  ## [0.5.11] 2022-08-23
178
+
179
+ - TAG: [v0.5.11][0.5.11t]
180
+
85
181
  The "Is this the last release with a silly name?" Release
86
182
 
87
183
  ### Added
184
+
88
185
  * Post install note about v0.5.x EOL approaching in April, 2023
89
186
 
90
187
  ### Changed
188
+
91
189
  * Improved documentation
92
190
  * Switched branch references from master to main
93
191
  * CI builds are now all green!
94
192
 
95
193
  ## [0.5.10] 2022-05-04
194
+
195
+ - TAG: [v0.5.10][0.5.10t]
196
+
96
197
  The "Can it be the end of the line for 0.5.x?" Release
97
198
 
98
199
  ### Added
200
+
99
201
  * Major updates to Documentation
100
202
  * More CI Hardening
101
203
  * Align CI builds with official Ruby Compatibility Matrix
@@ -103,7 +205,11 @@ The "Can it be the end of the line for 0.5.x?" Release
103
205
  - diffend
104
206
 
105
207
  ## [0.5.9] 2022-05-03
208
+
209
+ - TAG: [v0.5.9][0.5.9t]
210
+
106
211
  ### Added
212
+
107
213
  * Documentation related to Ruby compatibility
108
214
  * Updated CHANGELOG.md formatting
109
215
  * Corrected CHANGELOG.md typos
@@ -115,14 +221,23 @@ The "Can it be the end of the line for 0.5.x?" Release
115
221
  - overcommit
116
222
 
117
223
  ## [0.5.8] 2021-11-10
224
+
225
+ - TAG: [v0.5.8][0.5.8t]
226
+
118
227
  ### Added
228
+
119
229
  * Added more documentation files to packaged gem, e.g. SECURITY.md, CODE_OF_CONDUCT.md
120
230
 
121
231
  ### Fixed
232
+
122
233
  * Removed reference to RUBY_VERSION from gemspec, as it depends on rake release, which is problematic on some ruby engines. (by @pboling)
123
234
 
124
235
  ## [0.5.7] 2021-11-02
236
+
237
+ - TAG: [v0.5.7][0.5.7t]
238
+
125
239
  ### Added
240
+
126
241
  * Setup Rubocop (#205, #208 by @pboling)
127
242
  * Added CODE_OF_CONDUCT.md (#217, #218 by @pboling)
128
243
  * Added FUNDING.yml (#217, #218 by @pboling)
@@ -130,6 +245,7 @@ The "Can it be the end of the line for 0.5.x?" Release
130
245
  * Handle a nested array of hashes in OAuth::Helper.normalize (#80, #221 by @pboling)
131
246
 
132
247
  ### Changed
248
+
133
249
  * Switch from TravisCI to Github Actions (#202, #207, #176 by @pboling)
134
250
  * Upgrade webmock to v3.14.0 (#196 by @pboling)
135
251
  * Upgrade em-http-request to v1.1.7 (#173 by @pboling)
@@ -140,6 +256,7 @@ The "Can it be the end of the line for 0.5.x?" Release
140
256
  * Require plaintext signature method by default (#135 by @confiks & @pboling)
141
257
 
142
258
  ### Fixed
259
+
143
260
  * Fixed Infinite Redirect in v0.5.5, v0.5.6 (#186, #210 by @pboling)
144
261
  * Fixed NoMethodError on missing leading slash in path (#194, #211 by @pboling)
145
262
  * Fixed NoMethodError on nil request object (#165, #212 by @pboling)
@@ -149,49 +266,76 @@ The "Can it be the end of the line for 0.5.x?" Release
149
266
  * Fixed request proxy Class constant reference scopes - was missing `::` in many places (#225, #226 by @pboling)
150
267
 
151
268
  ### Removed
269
+
152
270
  * Remove direct development dependency on nokogiri (#299 by @pboling)
153
271
 
154
272
  ## [0.5.6] 2021-04-02
273
+
274
+ - TAG: [v0.5.6][0.5.6t]
275
+
155
276
  ### Added
277
+
156
278
  * Add metadata to Gemspec file
157
279
  * Add support for PUT requests with Action Controller (#181)
158
280
 
159
281
  ### Changed
282
+
160
283
  * Change default timeout to be the same as Net::HTTP default, 60 seconds instead of 30 seconds.
161
284
 
162
285
  ## [0.5.5] 2020-01-19
286
+
287
+ - TAG: [v0.5.5][0.5.5t]
288
+
163
289
  ### Added
290
+
164
291
  * Add :allow_empty_params option (#155)
165
292
 
166
293
  ### Changed
294
+
167
295
  * Allow redirect to different host but same path
168
296
  * Various cleanups
169
297
 
170
298
  ### Fixed
299
+
171
300
  * Fixes ssl-noverify
172
301
  * Fixed README example (#158, #159, by @pboling)
173
302
 
174
303
  ## [0.5.4] 2017-12-08
304
+
305
+ - TAG: [v0.5.4][0.5.4t]
306
+
175
307
  ### Changed
308
+
176
309
  * Various cleanups (charliesome)
177
310
 
178
311
  ### Fixed
312
+
179
313
  * Fixes UnknownRequestType on Rails 5.1 for ActionDispatch::Request (xprazak2)
180
314
 
181
315
  ## [0.5.3] 2017-05-24
316
+
317
+ - TAG: [v0.5.3][0.5.3t]
318
+
182
319
  ### Fixed
320
+
183
321
  * Fix #145 - broken CLI required loading active_support (James Pinto)
184
322
 
185
323
  ### Changed
324
+
186
325
  * Removing legacy scripts (James Pinto)
187
326
 
188
327
  ## [0.5.2] 2017-05-17
328
+
329
+ - TAG: [v0.5.2][0.5.2t]
330
+
189
331
  ### Added
332
+
190
333
  * Adding a development dependency that had not been mentioned (James Pinto)
191
334
  * Adding CodeClimate (James Pinto)
192
335
  * Adding support to Ruby 2.4 and head (James Pinto)
193
336
 
194
337
  ### Changed
338
+
195
339
  * Use assert_nil so as to silence a Minitest 6 deprecation warning (James Pinto)
196
340
  * Stop bundling tests files in the gem (Michal Papis)
197
341
  * Minor cleanup on tests (James Pinto)
@@ -209,30 +353,42 @@ The "Can it be the end of the line for 0.5.x?" Release
209
353
  * Reimplementing #82 - Debug Output Option (James Pinto)
210
354
 
211
355
  ### Fixed
356
+
212
357
  * Fix #113 adding paths when a full URL has been specified (James Pinto)
213
358
  * Bug Fix, webmock 2.0 has introduced a new bug (James Pinto)
214
359
  * Making a test/support dir (James Pinto)
215
360
  * Fix #177 - Adjusting to webmock latest recommended implementation for minitest (James Pinto)
216
361
 
217
362
  ## [0.5.1] 2016-02-29
363
+
364
+ - TAG: [v0.5.1][0.5.1t]
365
+
218
366
  ### Added
367
+
219
368
  * Add license info to the gemspec (Robert Reiz)
220
369
 
221
370
  ### Fixed
371
+
222
372
  * Proper handling for empty query string in RequestToken#build_authorize_url (midchildan,
223
373
  Harald Sitter)
224
374
  * Replace calls to String#blank? with its implementation (Sergio Gil Pérez de la Manga)
225
375
 
226
376
  ### Changed
377
+
227
378
  * Loosen some development dependencies. Add libcurl-dev to travis
228
379
  * Fixes to travis config. Switch to rubygems for installation and loading
229
380
 
230
381
  ### Removed
382
+
231
383
  * Remove obsolete comment (Arthur Nogueira Neves)
232
384
  * Remove jeweler from gemspec
233
385
 
234
386
  ## [0.5.0] 2016-02-20
387
+
388
+ - TAG: [v0.5.0][0.5.0t]
389
+
235
390
  ### Added
391
+
236
392
  * Add support for HTTP PATCH method (Richard Huang)
237
393
  * Allow reading private key from a string (Khaja Minhajuddin)
238
394
  * Add rest-client proxy (Khem Veasna)
@@ -240,12 +396,14 @@ The "Can it be the end of the line for 0.5.x?" Release
240
396
  * Allow reading certificate file path from environment variable. Add CentOS cert file path (Danil Vlasov)
241
397
 
242
398
  ### Changed
399
+
243
400
  * Replace jeweler with real spec and bundler tasks
244
401
  * Extract version to separate file
245
402
  * Use OpenSSL for all digest and hashing. Remove signature methods not defined by OAuth spec. (Kevin Hughes)
246
403
  * Change token requests to exclude `oauth_body_hash`. Update doc links in comments. (John Remmen)
247
404
 
248
405
  ### Fixed
406
+
249
407
  * Fix ability to pass in an authorize url with a query string (Roger Smith)
250
408
  * Fix bug in signature verification (r-stu31)
251
409
  * Use standard key name (`oauth_token_secret`) in Token#to_query (Craig Walker)
@@ -260,69 +418,108 @@ The "Can it be the end of the line for 0.5.x?" Release
260
418
  * Various fixes/updates to README (Evan Arnold, Jonathan Camenisch, Brian John, Ankur Sethi)
261
419
 
262
420
  ## [0.4.7] 2012-09-03
421
+
422
+ - TAG: [v0.4.7][0.4.7t]
423
+
263
424
  ### Added
425
+
264
426
  * Set a configurable timeout for all requests (Rick Olson)
265
427
 
266
428
  ### Fixed
429
+
267
430
  * Fix merging paths if the path is not empty
268
431
  * Fix nested hash params in Consumer#request (Ernie Miller)
269
432
 
270
433
  ## [0.4.6] 2012-04-21
434
+
435
+ - TAG: [v0.4.6][0.4.6t]
436
+
271
437
  ### Changed
438
+
272
439
  * Make use the path component of the :site parameter (Jonathon M. Abbott)
273
440
 
274
441
  ### Fixed
442
+
275
443
  * Fixed nested attributes in #normalize (Shaliko Usubov)
276
444
  * Fixed post body's being dropped in 1.9 (Steven Hammond)
277
445
  * Fixed PUT request handling (Anton Panasenko)
278
446
 
279
447
  ## [0.4.5] 2011-06-25
448
+
449
+ - TAG: [v0.4.5][0.4.5t]
450
+
280
451
  ### Added
452
+
281
453
  * Add explicit require for rsa/sha1 (Juris Galang)
282
454
  * Add gemtest support (Adrian Feldman)
283
455
 
284
456
  ### Changed
457
+
285
458
  * Use webmock to mock all http-requests in tests (Adrian Feldman)
286
459
  * Mention Typhoeus require in the README (Kim Ahlström)
287
460
  * Use Net::HTTPGenericRequest (Jakub Kuźma)
288
461
 
289
462
  ### Fixed
463
+
290
464
  * Fix POST Requests with Typhoeus proxy (niedhui)
291
465
  * Fix incorrect hardcoded port (Ian Taylor)
292
466
 
293
467
  ## [0.4.4] 2010-10-31
468
+
469
+ - TAG: [v0.4.4][0.4.4t]
470
+
294
471
  ### Added
472
+
295
473
  * Added support for Rails 3 in client/action_controller_request (Pelle)
296
474
 
297
475
  ### Fixed
476
+
298
477
  * Fix LoadError rescue in tests: return can't be used in this context (Hans de Graaff)
299
478
  * HTTP headers should be strings. (seancribbs)
300
479
  * ensure consumer uri gets set back to original config even if an error occurs (Brian Finney)
301
480
  * Yahoo uses & to split records in OAuth headers (Brian Finney)
302
481
 
303
482
  ## [0.4.3] 2010-09-01
483
+
484
+ - TAG: [v0.4.3][0.4.3t]
485
+
304
486
  ### Fixed
487
+
305
488
  * Fix for em-http proxy (ichverstehe)
306
489
 
307
490
  ## [0.4.2] 2010-08-13
491
+
492
+ - TAG: [v0.4.2][0.4.2t]
493
+
308
494
  ### Added
495
+
309
496
  * Added Bundler (rc) Gemfile for easier dev/testing
310
497
 
311
498
  ### Fixed
499
+
312
500
  * Fixed compatibility with Ruby 1.9.2 (ecavazos)
313
501
  * Fixed the em-http request proxy (Joshua Hull)
314
502
  * Fix for oauth proxy string manipulation (Jakub Suder)
315
503
 
316
504
  ## [0.4.1] 2010-06-16
505
+
506
+ - TAG: [v0.4.1][0.4.1t]
507
+
317
508
  ### Added
509
+
318
510
  * Added support for using OAuth with proxies (Marsh Gardiner)
319
511
 
320
512
  ### Fixed
513
+
321
514
  * Rails 3 Compatibility fixes (Pelle Braendgaard)
322
515
  * Fixed load errors on tests for missing (non-required) libraries
323
516
 
324
517
  ## [0.4.0] 2010-04-22
518
+
519
+ - TAG: [v0.4.0][0.4.0t]
520
+
325
521
  ### Added
522
+
326
523
  * Added computation of oauth_body_hash as per OAuth Request Body Hash 1.0 Draft 4 (Michael Reinsch)
327
524
  * Added the optional `oauth_session_handle` parameter for the Yahoo implementation (Will Bailey)
328
525
  * Added optional block to OAuth::Consumer.get_*_token (Neill Pearman)
@@ -334,29 +531,41 @@ The "Can it be the end of the line for 0.5.x?" Release
334
531
  * New website (Aaron Quint)
335
532
 
336
533
  ### Changed
534
+
337
535
  * Better marshalling implementation (Yoan Blanc)
338
536
  * Replaced hoe with Jeweler (Aaron Quint)
339
537
 
340
538
  ### Fixed
539
+
341
540
  * Strip extraneous spaces and line breaks from access_token responses (observed in the wild with Yahoo!'s OAuth+OpenID hybrid) (Eric Hartmann)
342
541
  * Stop double-escaping PLAINTEXT signatures (Jimmy Zimmerman)
343
542
  * OAuth::Client::Helper won't override the specified `oauth_version` (Philip Kromer)
344
543
  * Fixed an encoding / multibyte issue (成田 一生)
345
544
 
346
545
  ## [0.3.6] 2009-09-14
546
+
547
+ - TAG: [v0.3.6][0.3.6t]
548
+
347
549
  ### Added
550
+
348
551
  * Added -B CLI option to use the :body authentication scheme (Seth)
349
552
  * Support POST and PUT with raw bodies (Yu-Shan Fung et al)
350
553
  * Added :ca_file consumer option to allow consumer specific certificate override. (Pelle)
351
554
 
352
555
  ### Changed
556
+
353
557
  * Test clean-up (Xavier Shay, Hannes Tydén)
354
558
 
355
559
  ### Fixed
560
+
356
561
  * Respect `--method` in `authorize` CLI command (Seth)
357
562
 
358
563
  ## [0.3.5] 2009-06-03
564
+
565
+ - TAG: [v0.3.5][0.3.5t]
566
+
359
567
  ### Added
568
+
360
569
  * `query` CLI command to access protected resources (Seth)
361
570
  * Added -H, -Q CLI options for specifying the authentication scheme (Seth)
362
571
  * Added -O CLI option for specifying a file containing options (Seth)
@@ -366,28 +575,43 @@ The "Can it be the end of the line for 0.5.x?" Release
366
575
  * Added --scope CLI option for Google's 'scope' parameter (Seth)
367
576
 
368
577
  ## [0.3.4] 2009-05-06
578
+
579
+ - TAG: [v0.3.4][0.3.4t]
580
+
369
581
  ### Changed
582
+
370
583
  * OAuth::Client::Helper uses OAuth::Version::VERSION (chadisfaction)
371
584
 
372
585
  ### Fixed
586
+
373
587
  * Fix OAuth::RequestProxy::ActionControllerRequest's handling of params (Tristan Groléat)
374
588
 
375
589
  ## [0.3.3] 2009-05-04
590
+
591
+ - TAG: [v0.3.3][0.3.3t]
592
+
376
593
  ### Added
594
+
377
595
  * Support for arguments in OAuth::Consumer#get_access_token (Matt Sanford)
378
596
  * Add gem version to user-agent header (Matt Sanford)
379
597
 
380
598
  ### Changed
599
+
381
600
  * Improved error handling for invalid Authorization headers (Matt Sanford)
382
601
  * Handle input from aggressive form encoding libraries (Matt Wood)
383
602
 
384
603
  ### Fixed
604
+
385
605
  * Corrected OAuth XMPP namespace (Seth)
386
606
  * Fixed signatures for non-ASCII under $KCODE other than 'u' (Matt Sanford)
387
607
  * Fixed edge cases in ActionControllerRequestProxy where params were being incorrectly signed (Marcos Wright Kuhns)
388
608
 
389
609
  ## [0.3.2] 2009-03-23
610
+
611
+ - TAG: [v0.3.2][0.3.2t]
612
+
390
613
  ### Added
614
+
391
615
  * Support applications using the MethodOverride Rack middleware (László Bácsi)
392
616
  * `authorize` command for `oauth` CLI (Seth)
393
617
  * Initial support for Problem Reporting extension (Seth)
@@ -395,110 +619,175 @@ The "Can it be the end of the line for 0.5.x?" Release
395
619
  * Added help to the 'oauth' CLI (Seth)
396
620
 
397
621
  ### Fixed
622
+
398
623
  * 2xx statuses should be treated as success (Anders Conbere)
399
624
  * Fixed ActionController parameter escaping behavior (Thiago Arrais, László Bácsi, Brett Gibson, et al)
400
625
  * Fixed signature calculation when both options and a block were provided to OAuth::Signature::Base#initialize (Seth)
401
626
  * Fixed a problem when attempting to normalize MockRequest URIs (Seth)
402
627
 
403
628
  ## [0.3.1] 2009-01-26
629
+
630
+ - TAG: [v0.3.1][0.3.1t]
631
+
404
632
  ### Fixed
633
+
405
634
  * Fixed a problem with relative and absolute token request paths. (Michael Wood)
406
635
 
407
636
  ## [0.3.0] 2009-01-25
637
+
638
+ - TAG: [v0.3.0][0.3.0t]
639
+
408
640
  ### Added
641
+
409
642
  * Support ActionController::Request from Edge Rails (László Bácsi)
410
643
  * Added #normalized_parameters to OAuth::RequestProxy::Base (Pelle)
411
644
  * Command-line app for generating signatures. (Seth)
412
645
 
413
646
  ### Changed
647
+
414
648
  * OAuth::Signature.sign and friends now yield the RequestProxy instead of the token when the passed block's arity is 1. (Seth)
415
649
  * Improved test-cases and compatibility for encoding issues. (Pelle)
416
650
 
417
651
  ### Fixed
652
+
418
653
  * Correctly handle multi-valued parameters (Seth)
419
654
  * Token requests are made to the configured URL rather than generating a potentially incorrect one. (Kellan Elliott-McCrea)
420
655
 
421
656
  ## 0.2.7 2008-09-10
657
+
422
658
  The lets fix the last release release
423
659
 
424
660
  ### Fixed
661
+
425
662
  * Fixed plain text signatures (Andrew Arrow)
426
663
  * Fixed RSA requests using OAuthTokens. (Philip Lipu Tsai)
427
664
 
428
665
  ## 0.2.6 2008-09-09
666
+
429
667
  The lets RSA release
430
668
 
431
669
  ### Added
670
+
432
671
  * Improved support for Ruby 1.8.7 (Bill Kocik)
433
672
  * Added support for 'private_key_file' option for RSA signatures (Chris Mear)
434
673
 
435
674
  ### Changed
675
+
436
676
  * Improved RSA testing
437
677
  * Omit token when signing with RSA
438
678
 
439
679
  ### Fixed
680
+
440
681
  * Fixed RSA verification to support RSA providers now using Ruby and RSA
441
682
  * Fixed several edge cases where params were being incorrectly signed (Scott Hill)
442
683
  * Fixed RSA signing (choonkeat)
443
684
 
444
685
  ## 0.2.2 2008-02-22
686
+
445
687
  Lets actually support SSL release
446
688
 
447
689
  ### Fixed
690
+
448
691
  * Use HTTPS when required.
449
692
 
450
693
  ## 0.2 2008-1-19
694
+
451
695
  All together now release
452
696
 
453
- This is a big release, where we have merged the efforts of various parties into one common library.
697
+ ### Changed
698
+
699
+ * This is a big release, where we have merged the efforts of various parties into one common library.
454
700
  This means there are definitely some API changes you should be aware of. They should be minimal
455
701
  but please have a look at the unit tests.
456
702
 
457
703
  ## 0.1.2 2007-12-1
704
+
458
705
  ### Fixed
706
+
459
707
  * Fixed checks for missing OAuth params to improve performance
460
708
  * Includes Pat's fix for getting the realm out.
461
709
 
462
710
  ## 0.1.1 2007-11-26
711
+
463
712
  ### Added
713
+
464
714
  * First release as a GEM
465
715
  * Moved all non-Rails functionality from the Rails plugin:
466
716
  http://code.google.com/p/oauth-plugin/
467
717
 
468
- [Unreleased]: https://github.com/oauth-xx/oauth-ruby/compare/v1.1.0...main
469
- [1.1.0]: https://github.com/oauth-xx/oauth-ruby/releases/tag/v1.1.0
470
- [1.0.1]: https://github.com/oauth-xx/oauth-ruby/releases/tag/v1.0.1
471
- [1.0.0]: https://github.com/oauth-xx/oauth-ruby/releases/tag/v1.0.0
472
- [0.6.2]: https://github.com/oauth-xx/oauth-ruby/releases/tag/v0.6.2
473
- [0.6.1]: https://github.com/oauth-xx/oauth-ruby/releases/tag/v0.6.1
474
- [0.6.0]: https://github.com/oauth-xx/oauth-ruby/releases/tag/v0.6.0
475
- [0.5.14]: https://github.com/oauth-xx/oauth-ruby/releases/tag/v0.5.14
476
- [0.5.13]: https://github.com/oauth-xx/oauth-ruby/releases/tag/v0.5.13
477
- [0.5.12]: https://github.com/oauth-xx/oauth-ruby/releases/tag/v0.5.12
478
- [0.5.11]: https://github.com/oauth-xx/oauth-ruby/releases/tag/v0.5.11
479
- [0.5.10]: https://github.com/oauth-xx/oauth-ruby/releases/tag/v0.5.10
480
- [0.5.9]: https://github.com/oauth-xx/oauth-ruby/releases/tag/v0.5.9
481
- [0.5.8]: https://github.com/oauth-xx/oauth-ruby/releases/tag/v0.5.8
482
- [0.5.7]: https://github.com/oauth-xx/oauth-ruby/releases/tag/v0.5.7
483
- [0.5.6]: https://github.com/oauth-xx/oauth-ruby/releases/tag/v0.5.6
484
- [0.5.5]: https://github.com/oauth-xx/oauth-ruby/releases/tag/v0.5.5
485
- [0.5.4]: https://github.com/oauth-xx/oauth-ruby/releases/tag/v0.5.4
486
- [0.5.3]: https://github.com/oauth-xx/oauth-ruby/releases/tag/v0.5.3
487
- [0.5.2]: https://github.com/oauth-xx/oauth-ruby/releases/tag/v0.5.2
488
- [0.5.1]: https://github.com/oauth-xx/oauth-ruby/releases/tag/v0.5.1
489
- [0.5.0]: https://github.com/oauth-xx/oauth-ruby/releases/tag/v0.5.0
490
- [0.4.7]: https://github.com/oauth-xx/oauth-ruby/releases/tag/v0.4.7
491
- [0.4.6]: https://github.com/oauth-xx/oauth-ruby/releases/tag/v0.4.6
492
- [0.4.5]: https://github.com/oauth-xx/oauth-ruby/releases/tag/v0.4.5
493
- [0.4.4]: https://github.com/oauth-xx/oauth-ruby/releases/tag/v0.4.4
494
- [0.4.3]: https://github.com/oauth-xx/oauth-ruby/releases/tag/v0.4.3
495
- [0.4.2]: https://github.com/oauth-xx/oauth-ruby/releases/tag/v0.4.2
496
- [0.4.1]: https://github.com/oauth-xx/oauth-ruby/releases/tag/v0.4.1
497
- [0.4.0]: https://github.com/oauth-xx/oauth-ruby/releases/tag/v0.4.0
498
- [0.3.6]: https://github.com/oauth-xx/oauth-ruby/releases/tag/v0.3.6
499
- [0.3.5]: https://github.com/oauth-xx/oauth-ruby/releases/tag/v0.3.5
500
- [0.3.4]: https://github.com/oauth-xx/oauth-ruby/releases/tag/v0.3.4
501
- [0.3.3]: https://github.com/oauth-xx/oauth-ruby/releases/tag/v0.3.3
502
- [0.3.2]: https://github.com/oauth-xx/oauth-ruby/releases/tag/v0.3.2
503
- [0.3.1]: https://github.com/oauth-xx/oauth-ruby/releases/tag/v0.3.1
504
- [0.3.0]: https://github.com/oauth-xx/oauth-ruby/releases/tag/v0.3.0
718
+ [Unreleased]: https://github.com/ruby-oauth/oauth/compare/v1.1.2...HEAD
719
+ [1.1.2]: https://github.com/ruby-oauth/oauth/compare/v1.1.1...v1.1.2
720
+ [1.1.2t]: https://github.com/ruby-oauth/oauth/releases/tag/v1.1.2
721
+ [1.1.1]: https://github.com/ruby-oauth/oauth/compare/v1.1.0...v1.1.1
722
+ [1.1.1t]: https://github.com/ruby-oauth/oauth/releases/tag/v1.1.1
723
+ [1.1.0]: https://gitlab.com/ruby-oauth/oauth/-/compare/v1.0.1...v1.1.0
724
+ [1.1.0t]: https://github.com/ruby-oauth/oauth/releases/tag/v1.1.0
725
+ [1.0.1]: https://gitlab.com/ruby-oauth/oauth/-/compare/v1.0.0...v1.0.1
726
+ [1.0.1t]: https://github.com/ruby-oauth/oauth/releases/tag/v1.0.1
727
+ [1.0.0]: https://gitlab.com/ruby-oauth/oauth/-/compare/v0.6.2...v1.0.0
728
+ [1.0.0t]: https://github.com/ruby-oauth/oauth/releases/tag/v1.0.0
729
+ [0.6.2]: https://gitlab.com/ruby-oauth/oauth/-/compare/v0.6.1...v0.6.2
730
+ [0.6.2t]: https://github.com/ruby-oauth/oauth/releases/tag/v0.6.2
731
+ [0.6.1]: https://gitlab.com/ruby-oauth/oauth/-/compare/v0.6.0...v0.6.1
732
+ [0.6.1t]: https://github.com/ruby-oauth/oauth/releases/tag/v0.6.1
733
+ [0.6.0]: https://gitlab.com/ruby-oauth/oauth/-/compare/v0.5.14...v0.6.0
734
+ [0.6.0t]: https://github.com/ruby-oauth/oauth/releases/tag/v0.6.0
735
+ [0.5.14]: https://gitlab.com/ruby-oauth/oauth/-/compare/v0.5.13...v0.5.14
736
+ [0.5.14t]: https://github.com/ruby-oauth/oauth/releases/tag/v0.5.14
737
+ [0.5.13]: https://gitlab.com/ruby-oauth/oauth/-/compare/v0.5.12...v0.5.13
738
+ [0.5.13t]: https://github.com/ruby-oauth/oauth/releases/tag/v0.5.13
739
+ [0.5.12]: https://gitlab.com/ruby-oauth/oauth/-/compare/v0.5.11...v0.5.12
740
+ [0.5.12t]: https://github.com/ruby-oauth/oauth/releases/tag/v0.5.12
741
+ [0.5.11]: https://gitlab.com/ruby-oauth/oauth/-/compare/v0.5.10...v0.5.11
742
+ [0.5.11t]: https://github.com/ruby-oauth/oauth/releases/tag/v0.5.11
743
+ [0.5.10t]: https://github.com/ruby-oauth/oauth/releases/tag/v0.5.10
744
+ [0.5.9]: https://gitlab.com/ruby-oauth/oauth/-/compare/v0.5.8...v0.5.9
745
+ [0.5.9t]: https://github.com/ruby-oauth/oauth/releases/tag/v0.5.9
746
+ [0.5.8]: https://gitlab.com/ruby-oauth/oauth/-/compare/v0.5.7...v0.5.8
747
+ [0.5.8t]: https://github.com/ruby-oauth/oauth/releases/tag/v0.5.8
748
+ [0.5.7]: https://gitlab.com/ruby-oauth/oauth/-/compare/v0.5.6...v0.5.7
749
+ [0.5.7t]: https://github.com/ruby-oauth/oauth/releases/tag/v0.5.7
750
+ [0.5.6]: https://gitlab.com/ruby-oauth/oauth/-/compare/v0.5.5...v0.5.6
751
+ [0.5.6t]: https://github.com/ruby-oauth/oauth/releases/tag/v0.5.6
752
+ [0.5.5]: https://gitlab.com/ruby-oauth/oauth/-/compare/v0.5.4...v0.5.5
753
+ [0.5.5t]: https://github.com/ruby-oauth/oauth/releases/tag/v0.5.5
754
+ [0.5.4]: https://gitlab.com/ruby-oauth/oauth/-/compare/v0.5.3...v0.5.4
755
+ [0.5.4t]: https://github.com/ruby-oauth/oauth/releases/tag/v0.5.4
756
+ [0.5.3]: https://gitlab.com/ruby-oauth/oauth/-/compare/v0.5.2...v0.5.3
757
+ [0.5.3t]: https://github.com/ruby-oauth/oauth/releases/tag/v0.5.3
758
+ [0.5.2]: https://gitlab.com/ruby-oauth/oauth/-/compare/v0.5.1...v0.5.2
759
+ [0.5.2t]: https://github.com/ruby-oauth/oauth/releases/tag/v0.5.2
760
+ [0.5.1]: https://gitlab.com/ruby-oauth/oauth/-/compare/v0.5.0...v0.5.1
761
+ [0.5.1t]: https://github.com/ruby-oauth/oauth/releases/tag/v0.5.1
762
+ [0.5.0]: https://gitlab.com/ruby-oauth/oauth/-/compare/v0.4.7...v0.5.0
763
+ [0.5.0t]: https://github.com/ruby-oauth/oauth/releases/tag/v0.5.0
764
+ [0.4.7]: https://gitlab.com/ruby-oauth/oauth/-/compare/v0.4.6...v0.4.7
765
+ [0.4.7t]: https://github.com/ruby-oauth/oauth/releases/tag/v0.4.7
766
+ [0.4.6]: https://gitlab.com/ruby-oauth/oauth/-/compare/v0.4.5...v0.4.6
767
+ [0.4.6t]: https://github.com/ruby-oauth/oauth/releases/tag/v0.4.6
768
+ [0.4.5]: https://gitlab.com/ruby-oauth/oauth/-/compare/v0.4.4...v0.4.5
769
+ [0.4.5t]: https://github.com/ruby-oauth/oauth/releases/tag/v0.4.5
770
+ [0.4.4]: https://gitlab.com/ruby-oauth/oauth/-/compare/v0.4.3...v0.4.4
771
+ [0.4.4t]: https://github.com/ruby-oauth/oauth/releases/tag/v0.4.4
772
+ [0.4.3]: https://gitlab.com/ruby-oauth/oauth/-/compare/v0.4.2...v0.4.3
773
+ [0.4.3t]: https://github.com/ruby-oauth/oauth/releases/tag/v0.4.3
774
+ [0.4.2]: https://gitlab.com/ruby-oauth/oauth/-/compare/v0.4.1...v0.4.2
775
+ [0.4.2t]: https://github.com/ruby-oauth/oauth/releases/tag/v0.4.2
776
+ [0.4.1]: https://gitlab.com/ruby-oauth/oauth/-/compare/v0.4.0...v0.4.1
777
+ [0.4.1t]: https://github.com/ruby-oauth/oauth/releases/tag/v0.4.1
778
+ [0.4.0]: https://gitlab.com/ruby-oauth/oauth/-/compare/v0.3.6...v0.4.0
779
+ [0.4.0t]: https://github.com/ruby-oauth/oauth/releases/tag/v0.4.0
780
+ [0.3.6]: https://gitlab.com/ruby-oauth/oauth/-/compare/v0.3.5...v0.3.6
781
+ [0.3.6t]: https://github.com/ruby-oauth/oauth/releases/tag/v0.3.6
782
+ [0.3.5]: https://gitlab.com/ruby-oauth/oauth/-/compare/v0.3.4...v0.3.5
783
+ [0.3.5t]: https://github.com/ruby-oauth/oauth/releases/tag/v0.3.5
784
+ [0.3.4]: https://gitlab.com/ruby-oauth/oauth/-/compare/v0.3.3...v0.3.4
785
+ [0.3.4t]: https://github.com/ruby-oauth/oauth/releases/tag/v0.3.4
786
+ [0.3.3]: https://gitlab.com/ruby-oauth/oauth/-/compare/v0.3.2...v0.3.3
787
+ [0.3.3t]: https://github.com/ruby-oauth/oauth/releases/tag/v0.3.3
788
+ [0.3.2]: https://gitlab.com/ruby-oauth/oauth/-/compare/v0.3.1...v0.3.2
789
+ [0.3.2t]: https://github.com/ruby-oauth/oauth/releases/tag/v0.3.2
790
+ [0.3.1]: https://gitlab.com/ruby-oauth/oauth/-/compare/v0.3.0...v0.3.1
791
+ [0.3.1t]: https://github.com/ruby-oauth/oauth/releases/tag/v0.3.1
792
+ [0.3.0]: https://github.com/ruby-oauth/oauth/releases/tag/v0.3.0
793
+ [0.3.0t]: https://github.com/ruby-oauth/oauth/releases/tag/v0.3.0