oauth2 2.0.14 → 2.0.17

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (13) hide show
  1. checksums.yaml +4 -4
  2. checksums.yaml.gz.sig +0 -0
  3. data/CHANGELOG.md +232 -165
  4. data/CONTRIBUTING.md +36 -4
  5. data/FUNDING.md +2 -2
  6. data/README.md +205 -43
  7. data/SECURITY.md +3 -17
  8. data/lib/oauth2/access_token.rb +24 -6
  9. data/lib/oauth2/version.rb +1 -1
  10. data/sig/oauth2/access_token.rbs +1 -1
  11. data.tar.gz.sig +0 -0
  12. metadata +204 -25
  13. metadata.gz.sig +0 -0
data/CHANGELOG.md CHANGED
@@ -17,98 +17,192 @@ Please file a bug if you notice a violation of semantic versioning.
17
17
  [📗keep-changelog-img]: https://img.shields.io/badge/keep--a--changelog-1.0.0-FFDD67.svg?style=flat
18
18
 
19
19
  ## [Unreleased]
20
+
20
21
  ### Added
22
+
21
23
  ### Changed
24
+
22
25
  ### Deprecated
26
+
23
27
  ### Removed
28
+
24
29
  ### Fixed
30
+
25
31
  ### Security
26
32
 
33
+ ## [2.0.17] - 2025-09-15
34
+
35
+ - TAG: [v2.0.17][2.0.17t]
36
+ - COVERAGE: 100.00% -- 526/526 lines in 14 files
37
+ - BRANCH COVERAGE: 100.00% -- 178/178 branches in 14 files
38
+ - 90.48% documented
39
+
40
+ ### Added
41
+
42
+ - [gh!682][gh!682] - AccessToken: support Hash-based verb-dependent token transmission mode (e.g., {get: :query, post: :header})
43
+
44
+ ## [2.0.16] - 2025-09-14
45
+
46
+ - TAG: [v2.0.16][2.0.16t]
47
+ - COVERAGE: 100.00% -- 520/520 lines in 14 files
48
+ - BRANCH COVERAGE: 100.00% -- 176/176 branches in 14 files
49
+ - 90.48% documented
50
+
51
+ ### Added
52
+
53
+ - [gh!680][gh!680] - E2E example using mock test server added in v2.0.11 by @pboling
54
+ - mock-oauth2-server upgraded to v2.3.0
55
+ - https://github.com/navikt/mock-oauth2-server
56
+ - `docker compose -f docker-compose-ssl.yml up -d --wait`
57
+ - `ruby examples/e2e.rb`
58
+ - `docker compose -f docker-compose-ssl.yml down`
59
+ - mock server readiness wait is 90s
60
+ - override via E2E_WAIT_TIMEOUT
61
+ - [gh!676][gh!676], [gh!679][gh!679] - Apache SkyWalking Eyes dependency license check by @pboling
62
+
63
+ ### Changed
64
+
65
+ - [gh!678][gh!678] - Many improvements to make CI more resilient (past/future proof) by @pboling
66
+ - [gh!681][gh!681] - Upgrade to kettle-dev v1.1.19
67
+
68
+ [gh!676]: https://github.com/ruby-oauth/oauth2/pull/676
69
+ [gh!678]: https://github.com/ruby-oauth/oauth2/pull/678
70
+ [gh!679]: https://github.com/ruby-oauth/oauth2/pull/679
71
+ [gh!680]: https://github.com/ruby-oauth/oauth2/pull/680
72
+ [gh!681]: https://github.com/ruby-oauth/oauth2/pull/681
73
+
74
+ ## [2.0.15] - 2025-09-08
75
+
76
+ - TAG: [v2.0.15][2.0.15t]
77
+ - COVERAGE: 100.00% -- 519/519 lines in 14 files
78
+ - BRANCH COVERAGE: 100.00% -- 174/174 branches in 14 files
79
+ - 90.48% documented
80
+
81
+ ### Added
82
+
83
+ - [gh!671][gh!671] - Complete documentation example for Instagram by @pboling
84
+ - .env.local.example for contributor happiness
85
+ - note lack of builds for JRuby 9.2, 9.3 & Truffleruby 22.3, 23.0
86
+ - [actions/runner - issues/2347][GHA-continue-on-error-ui]
87
+ - [community/discussions/15452][GHA-allow-failure]
88
+ - [gh!670][gh!670] - AccessToken: verb-dependent token transmission mode by @mrj
89
+ - e.g., Instagram GET=:query, POST/DELETE=:header
90
+
91
+ ### Changed
92
+
93
+ - [gh!669][gh!669] - Upgrade to kettle-dev v1.1.9 by @pboling
94
+
95
+ ### Fixed
96
+
97
+ - Remove accidentally duplicated lines, and fix typos in CHANGELOG.md
98
+ - point badge to the correct workflow for Ruby 2.3 (caboose.yml)
99
+
100
+ [gh!669]: https://github.com/ruby-oauth/oauth2/pull/669
101
+ [gh!670]: https://github.com/ruby-oauth/oauth2/pull/670
102
+ [gh!671]: https://github.com/ruby-oauth/oauth2/pull/671
103
+ [GHA-continue-on-error-ui]: https://github.com/actions/runner/issues/2347
104
+ [GHA-allow-failure]: https://github.com/orgs/community/discussions/15452
105
+
27
106
  ## [2.0.14] - 2025-08-31
107
+
28
108
  - TAG: [v2.0.14][2.0.14t]
29
109
  - COVERAGE: 100.00% -- 519/519 lines in 14 files
30
110
  - BRANCH COVERAGE: 100.00% -- 174/174 branches in 14 files
31
111
  - 90.48% documented
112
+
32
113
  ### Added
114
+
33
115
  - improved documentation by @pboling
34
- - [gh665][gh665] - Document Mutual TLS (mTLS) usage with example in README (connection_opts.ssl client_cert/client_key and auth_scheme: :tls_client_auth) by @pboling
35
- - [gh666][gh666] - Document usage of flat query params using Faraday::FlatParamsEncoder, with example URI, in README by @pboling
116
+ - [gh!665][gh!665] - Document Mutual TLS (mTLS) usage with example in README (connection_opts.ssl client_cert/client_key and auth_scheme: :tls_client_auth) by @pboling
117
+ - [gh!666][gh!666] - Document usage of flat query params using Faraday::FlatParamsEncoder, with example URI, in README by @pboling
36
118
  - Spec: verify flat params are preserved with Faraday::FlatParamsEncoder (skips on Faraday without FlatParamsEncoder)
37
- - [gh662][gh662] - documentation notes in code comments and README highlighting OAuth 2.1 differences, with references, such as: by @pboling
119
+ - [gh!662][gh!662] - documentation notes in code comments and README highlighting OAuth 2.1 differences, with references, by @pboling
38
120
  - PKCE required for auth code,
39
121
  - exact redirect URI match,
40
122
  - implicit/password grants omitted,
41
123
  - avoid bearer tokens in query,
42
124
  - refresh token guidance for public clients,
43
- - simplified client definitions)
44
- - [gh663][gh663] - document how to implement an OIDC client with this gem in OIDC.md by @pboling
125
+ - simplified client definitions
126
+ - [gh!663][gh!663] - document how to implement an OIDC client with this gem in OIDC.md by @pboling
45
127
  - also, list libraries built on top of the oauth2 gem that implement OIDC
46
- - [gh664][gh664] - README: Add example for JHipster UAA (Spring Cloud) password grant, converted from Postman/Net::HTTP by @pboling
128
+ - [gh!664][gh!664] - README: Add example for JHipster UAA (Spring Cloud) password grant, converted from Postman/Net::HTTP by @pboling
47
129
 
48
- [gh662]: https://github.com/ruby-oauth/oauth2/pull/662
49
- [gh663]: https://github.com/ruby-oauth/oauth2/pull/663
50
- [gh664]: https://github.com/ruby-oauth/oauth2/pull/664
51
- [gh665]: https://github.com/ruby-oauth/oauth2/pull/665
52
- [gh666]: https://github.com/ruby-oauth/oauth2/pull/666
130
+ [gh!662]: https://github.com/ruby-oauth/oauth2/pull/662
131
+ [gh!663]: https://github.com/ruby-oauth/oauth2/pull/663
132
+ [gh!664]: https://github.com/ruby-oauth/oauth2/pull/664
133
+ [gh!665]: https://github.com/ruby-oauth/oauth2/pull/665
134
+ [gh!666]: https://github.com/ruby-oauth/oauth2/pull/666
53
135
 
54
136
  ## [2.0.13] - 2025-08-30
137
+
55
138
  - TAG: [v2.0.13][2.0.13t]
56
139
  - COVERAGE: 100.00% -- 519/519 lines in 14 files
57
140
  - BRANCH COVERAGE: 100.00% -- 174/174 branches in 14 files
58
141
  - 90.48% documented
142
+
59
143
  ### Added
60
- - [gh656][gh656] - Support revocation with URL-encoded parameters
61
- - [gh660][gh660] - Inline yard documentation by @pboling
62
- - [gh660][gh660] - Complete RBS types documentation by @pboling
63
- - [gh660][gh660]- (more) Comprehensive documentation / examples by @pboling
64
- - [gh657][gh657] - Updated documentation for org-rename by @pboling
144
+
145
+ - [gh!656][gh!656] - Support revocation with URL-encoded parameters
146
+ - [gh!660][gh!660] - Inline yard documentation by @pboling
147
+ - [gh!660][gh!660] - Complete RBS types documentation by @pboling
148
+ - [gh!660][gh!660]- (more) Comprehensive documentation / examples by @pboling
149
+ - [gh!657][gh!657] - Updated documentation for org-rename by @pboling
65
150
  - More funding links by @Aboling0
66
151
  - Documentation: Added docs/OIDC.md with OIDC 1.0 overview, example, and references
152
+
67
153
  ### Changed
154
+
68
155
  - Upgrade Code of Conduct to Contributor Covenant 2.1 by @pboling
69
- - [gh660][gh660] - Shrink post-install message by 4 lines by @pboling
156
+ - [gh!660][gh!660] - Shrink post-install message by 4 lines by @pboling
157
+
70
158
  ### Fixed
71
- - [gh660][gh660] - Links in README (including link to HEAD documentation) by @pboling
159
+
160
+ - [gh!660][gh!660] - Links in README (including link to HEAD documentation) by @pboling
161
+
72
162
  ### Security
73
163
 
74
- [gh660]: https://github.com/ruby-oauth/oauth2/pull/660
75
- [gh657]: https://github.com/ruby-oauth/oauth2/pull/657
76
- [gh656]: https://github.com/ruby-oauth/oauth2/pull/656
164
+ [gh!660]: https://github.com/ruby-oauth/oauth2/pull/660
165
+ [gh!657]: https://github.com/ruby-oauth/oauth2/pull/657
166
+ [gh!656]: https://github.com/ruby-oauth/oauth2/pull/656
77
167
 
78
168
  ## [2.0.12] - 2025-05-31
169
+
79
170
  - TAG: [v2.0.12][2.0.12t]
80
171
  - Line Coverage: 100.0% (520 / 520)
81
172
  - Branch Coverage: 100.0% (174 / 174)
82
173
  - 80.00% documented
174
+
83
175
  ### Added
84
- - [gh652][gh652] - Support IETF rfc7515 JSON Web Signature - JWS by @mridang
176
+
177
+ - [gh!652][gh!652] - Support IETF rfc7515 JSON Web Signature - JWS by @mridang
85
178
  - Support JWT `kid` for key discovery and management
86
179
  - More Documentation by @pboling
87
180
  - Documented Serialization Extensions
88
181
  - Added Gatzo.com FLOSS logo by @Aboling0, CC BY-SA 4.0
89
182
  - Documentation site @ https://oauth2.galtzo.com now complete
183
+
90
184
  ### Changed
185
+
91
186
  - Updates to gemspec (email, funding url, post install message)
92
- ### Deprecated
93
- ### Removed
187
+
94
188
  ### Fixed
189
+
95
190
  - Documentation Typos by @pboling
96
- ### Security
97
191
 
98
- [gh652]: https://github.com/oauth-xx/oauth2/pull/652
99
- [gh652]: https://github.com/ruby-oauth/oauth2/pull/652
192
+ [gh!652]: https://github.com/ruby-oauth/oauth2/pull/652
100
193
 
101
194
  ## [2.0.11] - 2025-05-23
195
+
102
196
  - TAG: [v2.0.11][2.0.11t]
103
197
  - COVERAGE: 100.00% -- 518/518 lines in 14 files
104
198
  - BRANCH COVERAGE: 100.00% -- 172/172 branches in 14 files
105
199
  - 80.00% documented
200
+
106
201
  ### Added
107
- - [gh651](https://github.com/oauth-xx/oauth2/pull/651) - `:snaky_hash_klass` option (@pboling)
108
- - [gh651](https://github.com/ruby-oauth/oauth2/pull/651) - `:snaky_hash_klass` option (@pboling)
202
+
203
+ - [gh!651](https://github.com/ruby-oauth/oauth2/pull/651) - `:snaky_hash_klass` option (@pboling)
109
204
  - More documentation
110
205
  - Codeberg as ethical mirror (@pboling)
111
- - https://codeberg.org/oauth-xx/oauth2
112
206
  - https://codeberg.org/ruby-oauth/oauth2
113
207
  - Don't check for cert if SKIP_GEM_SIGNING is set (@pboling)
114
208
  - All runtime deps, including oauth-xx sibling gems, are now tested against HEAD (@pboling)
@@ -116,31 +210,30 @@ Please file a bug if you notice a violation of semantic versioning.
116
210
  - YARD config, GFM compatible with relative file links (@pboling)
117
211
  - Documentation site on GitHub Pages (@pboling)
118
212
  - [oauth2.galtzo.com](https://oauth2.galtzo.com)
119
- - [!649](https://gitlab.com/oauth-xx/oauth2/-/merge_requests/649) - Test compatibility with all key minor versions of Hashie v0, v1, v2, v3, v4, v5, HEAD (@pboling)
120
- - [gh651](https://github.com/oauth-xx/oauth2/pull/651) - Mock OAuth2 server for testing (@pboling)
121
213
  - [!649](https://gitlab.com/ruby-oauth/oauth2/-/merge_requests/649) - Test compatibility with all key minor versions of Hashie v0, v1, v2, v3, v4, v5, HEAD (@pboling)
122
- - [gh651](https://github.com/ruby-oauth/oauth2/pull/651) - Mock OAuth2 server for testing (@pboling)
214
+ - [gh!651](https://github.com/ruby-oauth/oauth2/pull/651) - Mock OAuth2 server for testing (@pboling)
123
215
  - https://github.com/navikt/mock-oauth2-server
216
+
124
217
  ### Changed
125
- - [gh651](https://github.com/oauth-xx/oauth2/pull/651) - Upgraded to snaky_hash v2.0.3 (@pboling)
126
- - [gh651](https://github.com/ruby-oauth/oauth2/pull/651) - Upgraded to snaky_hash v2.0.3 (@pboling)
218
+
219
+ - [gh!651](https://github.com/ruby-oauth/oauth2/pull/651) - Upgraded to snaky_hash v2.0.3 (@pboling)
127
220
  - Provides solution for serialization issues
128
221
  - Updated `spec.homepage_uri` in gemspec to GitHub Pages YARD documentation site (@pboling)
222
+
129
223
  ### Fixed
130
- - [gh650](https://github.com/oauth-xx/oauth2/pull/650) - Regression in return type of `OAuth2::Response#parsed` (@pboling)
131
- - [gh650](https://github.com/ruby-oauth/oauth2/pull/650) - Regression in return type of `OAuth2::Response#parsed` (@pboling)
224
+
225
+ - [gh!650](https://github.com/ruby-oauth/oauth2/pull/650) - Regression in return type of `OAuth2::Response#parsed` (@pboling)
132
226
  - Incorrect documentation related to silencing warnings (@pboling)
133
227
 
134
228
  ## [2.0.10] - 2025-05-17
229
+
135
230
  - TAG: [v2.0.10][2.0.10t]
136
231
  - COVERAGE: 100.00% -- 518/518 lines in 14 files
137
232
  - BRANCH COVERAGE: 100.00% -- 170/170 branches in 14 files
138
233
  - 79.05% documented
234
+
139
235
  ### Added
140
- - [gh!632](https://github.com/oauth-xx/oauth2/pull/632) - Added `funding.yml` (@Aboling0)
141
- - [!635](https://gitlab.com/oauth-xx/oauth2/-/merge_requests/635) - Added `.gitlab-ci.yml` (@jessieay)
142
- - [#638](https://gitlab.com/oauth-xx/oauth2/-/issues/638) - Documentation of support for **ILO Fundamental Principles of Rights at Work** (@pboling)
143
- - [!642](https://gitlab.com/oauth-xx/oauth2/-/merge_requests/642) - 20-year certificate for signing gem releases, expires 2045-04-29 (@pboling)
236
+
144
237
  - [gh!632](https://github.com/ruby-oauth/oauth2/pull/632) - Added `funding.yml` (@Aboling0)
145
238
  - [!635](https://gitlab.com/ruby-oauth/oauth2/-/merge_requests/635) - Added `.gitlab-ci.yml` (@jessieay)
146
239
  - [#638](https://gitlab.com/ruby-oauth/oauth2/-/issues/638) - Documentation of support for **ILO Fundamental Principles of Rights at Work** (@pboling)
@@ -150,47 +243,30 @@ Please file a bug if you notice a violation of semantic versioning.
150
243
  - news_uri
151
244
  - mailing_list_uri
152
245
  - SHA256 and SHA512 Checksums for release
153
- - [!643](https://gitlab.com/oauth-xx/oauth2/-/merge_requests/643) - Add `token_name` option (@pboling)
154
246
  - [!643](https://gitlab.com/ruby-oauth/oauth2/-/merge_requests/643) - Add `token_name` option (@pboling)
155
247
  - Specify the parameter name that identifies the access token
156
- - [!645](https://gitlab.com/oauth-xx/oauth2/-/merge_requests/645) - Add `OAuth2::OAUTH_DEBUG` constant, based on `ENV["OAUTH_DEBUG"] (@pboling)
157
- - [!646](https://gitlab.com/oauth-xx/oauth2/-/merge_requests/646) - Add `OAuth2.config.silence_extra_tokens_warning`, default: false (@pboling)
158
- - [!647](https://gitlab.com/oauth-xx/oauth2/-/merge_requests/647) - Add IETF RFC 7009 Token Revocation compliant (@pboling)
159
248
  - [!645](https://gitlab.com/ruby-oauth/oauth2/-/merge_requests/645) - Add `OAuth2::OAUTH_DEBUG` constant, based on `ENV["OAUTH_DEBUG"] (@pboling)
160
249
  - [!646](https://gitlab.com/ruby-oauth/oauth2/-/merge_requests/646) - Add `OAuth2.config.silence_extra_tokens_warning`, default: false (@pboling)
161
250
  - [!647](https://gitlab.com/ruby-oauth/oauth2/-/merge_requests/647) - Add IETF RFC 7009 Token Revocation compliant (@pboling)
162
251
  - `OAuth2::Client#revoke_token`
163
252
  - `OAuth2::AccessToken#revoke`
164
253
  - See: https://datatracker.ietf.org/doc/html/rfc7009
165
- - [gh!644](https://github.com/oauth-xx/oauth2/pull/644), [gh!645](https://github.com/oauth-xx/oauth2/pull/645) - Added CITATION.cff (@Aboling0)
166
- - [!648](https://gitlab.com/oauth-xx/oauth2/-/merge_requests/648) - Improved documentation (@pboling)
167
254
  - [gh!644](https://github.com/ruby-oauth/oauth2/pull/644), [gh!645](https://github.com/ruby-oauth/oauth2/pull/645) - Added CITATION.cff (@Aboling0)
168
255
  - [!648](https://gitlab.com/ruby-oauth/oauth2/-/merge_requests/648) - Improved documentation (@pboling)
256
+
169
257
  ### Changed
258
+
170
259
  - Default value of `OAuth2.config.silence_extra_tokens_warning` was `false`, now `true` (@pboling)
171
260
  - Gem releases are now cryptographically signed, with a 20-year cert (@pboling)
172
261
  - Allow linux distros to build release without signing, as their package managers sign independently
173
- - [!647](https://gitlab.com/oauth-xx/oauth2/-/merge_requests/647) - `OAuth2::AccessToken#refresh` now supports block param pass through (@pboling)
174
- - [!647](https://gitlab.com/oauth-xx/oauth2/-/merge_requests/647) - `OAuth2.config` is no longer writable (@pboling)
175
- - [!647](https://gitlab.com/oauth-xx/oauth2/-/merge_requests/647) - Errors raised by `OAuth2::AccessToken` are now always `OAuth2::Error` and have better metadata (@pboling)
176
262
  - [!647](https://gitlab.com/ruby-oauth/oauth2/-/merge_requests/647) - `OAuth2::AccessToken#refresh` now supports block param pass through (@pboling)
177
263
  - [!647](https://gitlab.com/ruby-oauth/oauth2/-/merge_requests/647) - `OAuth2.config` is no longer writable (@pboling)
178
264
  - [!647](https://gitlab.com/ruby-oauth/oauth2/-/merge_requests/647) - Errors raised by `OAuth2::AccessToken` are now always `OAuth2::Error` and have better metadata (@pboling)
265
+
179
266
  ### Fixed
180
- - [#95](https://gitlab.com/oauth-xx/oauth2/-/issues/95) - restoring an access token via `AccessToken#from_hash` (@pboling)
267
+
181
268
  - [#95](https://gitlab.com/ruby-oauth/oauth2/-/issues/95) - restoring an access token via `AccessToken#from_hash` (@pboling)
182
269
  - This was a 13 year old bug report. 😘
183
- - [#619](https://gitlab.com/oauth-xx/oauth2/-/issues/619) - Internal options (like `snaky`, `raise_errors`, and `parse`) are no longer included in request (@pboling)
184
- - [!633](https://gitlab.com/oauth-xx/oauth2/-/merge_requests/633) - Spaces will now be encoded as `%20` instead of `+` (@nov.matake)
185
- - [!634](https://gitlab.com/oauth-xx/oauth2/-/merge_requests/634) - `CHANGELOG.md` documentation fix (@skuwa229)
186
- - [!638](https://gitlab.com/oauth-xx/oauth2/-/merge_requests/638) - fix `expired?` when `expires_in` is `0` (@disep)
187
- - [!639](https://gitlab.com/oauth-xx/oauth2/-/merge_requests/639) - Only instantiate `OAuth2::Error` if `raise_errors` option is `true` (@glytch2)
188
- - [#639](https://gitlab.com/oauth-xx/oauth2/-/issues/639) - `AccessToken#to_hash` is now serializable, just a regular Hash (@pboling)
189
- - [!640](https://gitlab.com/oauth-xx/oauth2/-/merge_requests/640) - `README.md` documentation fix (@martinezcoder)
190
- - [!641](https://gitlab.com/oauth-xx/oauth2/-/merge_requests/641) - Do not include sensitive information in the `inspect` (@manuelvanrijn)
191
- - [#641](https://gitlab.com/oauth-xx/oauth2/-/issues/641) - Made default JSON response parser more resilient (@pboling)
192
- - [#645](https://gitlab.com/oauth-xx/oauth2/-/issues/645) - Response no longer becomes a snaky hash (@pboling)
193
- - [gh!646](https://github.com/oauth-xx/oauth2/pull/646) - Change `require` to `require_relative` (improve performance) (@Aboling0)
194
270
  - [#619](https://gitlab.com/ruby-oauth/oauth2/-/issues/619) - Internal options (like `snaky`, `raise_errors`, and `parse`) are no longer included in request (@pboling)
195
271
  - [!633](https://gitlab.com/ruby-oauth/oauth2/-/merge_requests/633) - Spaces will now be encoded as `%20` instead of `+` (@nov.matake)
196
272
  - [!634](https://gitlab.com/ruby-oauth/oauth2/-/merge_requests/634) - `CHANGELOG.md` documentation fix (@skuwa229)
@@ -204,45 +280,58 @@ Please file a bug if you notice a violation of semantic versioning.
204
280
  - [gh!646](https://github.com/ruby-oauth/oauth2/pull/646) - Change `require` to `require_relative` (improve performance) (@Aboling0)
205
281
 
206
282
  ## [2.0.9] - 2022-09-16
283
+
207
284
  - TAG: [v2.0.9][2.0.9t]
285
+
208
286
  ### Added
287
+
209
288
  - More specs (@pboling)
289
+
210
290
  ### Changed
291
+
211
292
  - Complete migration to main branch as default (@pboling)
212
293
  - Complete migration to Gitlab, updating all links, and references in VCS-managed files (@pboling)
213
294
 
214
295
  ## [2.0.8] - 2022-09-01
296
+
215
297
  - TAG: [v2.0.8][2.0.8t]
298
+
216
299
  ### Changed
217
- - [!630](https://gitlab.com/oauth-xx/oauth2/-/merge_requests/630) - Extract snaky_hash to external dependency (@pboling)
300
+
218
301
  - [!630](https://gitlab.com/ruby-oauth/oauth2/-/merge_requests/630) - Extract snaky_hash to external dependency (@pboling)
302
+
219
303
  ### Added
220
- - [!631](https://gitlab.com/oauth-xx/oauth2/-/merge_requests/631) - New global configuration option OAuth2.config.silence_extra_tokens_warning (default: false) fixes [#628](https://gitlab.com/oauth-xx/oauth2/-/issues/628)
304
+
221
305
  - [!631](https://gitlab.com/ruby-oauth/oauth2/-/merge_requests/631) - New global configuration option OAuth2.config.silence_extra_tokens_warning (default: false) fixes [#628](https://gitlab.com/ruby-oauth/oauth2/-/issues/628)
222
306
 
223
307
  ## [2.0.7] - 2022-08-22
308
+
224
309
  - TAG: [v2.0.7][2.0.7t]
310
+
225
311
  ### Added
226
- - [!629](https://gitlab.com/oauth-xx/oauth2/-/merge_requests/629) - Allow POST of JSON to get token (@pboling, @terracatta)
312
+
227
313
  - [!629](https://gitlab.com/ruby-oauth/oauth2/-/merge_requests/629) - Allow POST of JSON to get token (@pboling, @terracatta)
314
+
228
315
  ### Fixed
229
- - [!626](https://gitlab.com/oauth-xx/oauth2/-/merge_requests/626) - Fixes a regression in 2.0.6. Will now prefer the key order from the lookup, not the hash keys (@rickselby)
316
+
230
317
  - [!626](https://gitlab.com/ruby-oauth/oauth2/-/merge_requests/626) - Fixes a regression in 2.0.6. Will now prefer the key order from the lookup, not the hash keys (@rickselby)
231
318
  - Note: This fixes compatibility with `omniauth-oauth2` and AWS
232
- - [!625](https://gitlab.com/oauth-xx/oauth2/-/merge_requests/625) - Fixes the printed version in the post install message (@hasghari)
233
319
  - [!625](https://gitlab.com/ruby-oauth/oauth2/-/merge_requests/625) - Fixes the printed version in the post install message (@hasghari)
234
320
 
235
321
  ## [2.0.6] - 2022-07-13
322
+
236
323
  - TAG: [v2.0.6][2.0.6t]
324
+
237
325
  ### Fixed
238
- - [!624](https://gitlab.com/oauth-xx/oauth2/-/merge_requests/624) - Fixes a [regression](https://gitlab.com/oauth-xx/oauth2/-/merge_requests/623) in v2.0.5, where an error would be raised in refresh_token flows due to (legitimate) lack of access_token (@pboling)
326
+
239
327
  - [!624](https://gitlab.com/ruby-oauth/oauth2/-/merge_requests/624) - Fixes a [regression](https://gitlab.com/ruby-oauth/oauth2/-/merge_requests/623) in v2.0.5, where an error would be raised in refresh_token flows due to (legitimate) lack of access_token (@pboling)
240
328
 
241
329
  ## [2.0.5] - 2022-07-07
330
+
242
331
  - TAG: [v2.0.5][2.0.5t]
332
+
243
333
  ### Fixed
244
- - [!620](https://gitlab.com/oauth-xx/oauth2/-/merge_requests/620) - Documentation improvements, to help with upgrading (@swanson)
245
- - [!621](https://gitlab.com/oauth-xx/oauth2/-/merge_requests/621) - Fixed [#528](https://gitlab.com/oauth-xx/oauth2/-/issues/528) and [#619](https://gitlab.com/oauth-xx/oauth2/-/issues/619) (@pboling)
334
+
246
335
  - [!620](https://gitlab.com/ruby-oauth/oauth2/-/merge_requests/620) - Documentation improvements, to help with upgrading (@swanson)
247
336
  - [!621](https://gitlab.com/ruby-oauth/oauth2/-/merge_requests/621) - Fixed [#528](https://gitlab.com/ruby-oauth/oauth2/-/issues/528) and [#619](https://gitlab.com/ruby-oauth/oauth2/-/issues/619) (@pboling)
248
337
  - All data in responses is now returned, with the access token removed and set as `token`
@@ -252,69 +341,52 @@ Please file a bug if you notice a violation of semantic versioning.
252
341
  - There is now 100% test coverage, for lines _and_ branches, and it will stay that way.
253
342
 
254
343
  ## [2.0.4] - 2022-07-01
344
+
255
345
  - TAG: [v2.0.4][2.0.4t]
346
+
256
347
  ### Fixed
257
- - [!618](https://gitlab.com/oauth-xx/oauth2/-/merge_requests/618) - In some scenarios the `snaky` option default value was not applied (@pboling)
348
+
258
349
  - [!618](https://gitlab.com/ruby-oauth/oauth2/-/merge_requests/618) - In some scenarios the `snaky` option default value was not applied (@pboling)
259
350
 
260
351
  ## [2.0.3] - 2022-06-28
352
+
261
353
  - TAG: [v2.0.3][2.0.3t]
354
+
262
355
  ### Added
263
- - [!611](https://gitlab.com/oauth-xx/oauth2/-/merge_requests/611) - Proper deprecation warnings for `extract_access_token` argument (@pboling)
264
- - [!612](https://gitlab.com/oauth-xx/oauth2/-/merge_requests/612) - Add `snaky: false` option to skip conversion to `OAuth2::SnakyHash` (default: true) (@pboling)
356
+
265
357
  - [!611](https://gitlab.com/ruby-oauth/oauth2/-/merge_requests/611) - Proper deprecation warnings for `extract_access_token` argument (@pboling)
266
358
  - [!612](https://gitlab.com/ruby-oauth/oauth2/-/merge_requests/612) - Add `snaky: false` option to skip conversion to `OAuth2::SnakyHash` (default: true) (@pboling)
359
+
267
360
  ### Fixed
268
- - [!608](https://gitlab.com/oauth-xx/oauth2/-/merge_requests/608) - Wrap `Faraday::TimeoutError` in `OAuth2::TimeoutError` (@nbibler)
269
- - [!615](https://gitlab.com/oauth-xx/oauth2/-/merge_requests/615) - Fix support for requests with blocks, see `Faraday::Connection#run_request` (@pboling)
361
+
270
362
  - [!608](https://gitlab.com/ruby-oauth/oauth2/-/merge_requests/608) - Wrap `Faraday::TimeoutError` in `OAuth2::TimeoutError` (@nbibler)
271
363
  - [!615](https://gitlab.com/ruby-oauth/oauth2/-/merge_requests/615) - Fix support for requests with blocks, see `Faraday::Connection#run_request` (@pboling)
272
364
 
273
365
  ## [2.0.2] - 2022-06-24
366
+
274
367
  - TAG: [v2.0.2][2.0.2t]
368
+
275
369
  ### Fixed
276
- - [!604](https://gitlab.com/oauth-xx/oauth2/-/merge_requests/604) - Wrap `Faraday::TimeoutError` in `OAuth2::TimeoutError` (@stanhu)
277
- - [!606](https://gitlab.com/oauth-xx/oauth2/-/merge_requests/606) - Ruby 2.7 deprecation warning fix: Move `access_token_class` parameter into `Client` constructor (@stanhu)
278
- - [!607](https://gitlab.com/oauth-xx/oauth2/-/merge_requests/607) - CHANGELOG correction, reference to `OAuth2::ConnectionError` (@zavan)
370
+
279
371
  - [!604](https://gitlab.com/ruby-oauth/oauth2/-/merge_requests/604) - Wrap `Faraday::TimeoutError` in `OAuth2::TimeoutError` (@stanhu)
280
372
  - [!606](https://gitlab.com/ruby-oauth/oauth2/-/merge_requests/606) - Ruby 2.7 deprecation warning fix: Move `access_token_class` parameter into `Client` constructor (@stanhu)
281
373
  - [!607](https://gitlab.com/ruby-oauth/oauth2/-/merge_requests/607) - CHANGELOG correction, reference to `OAuth2::ConnectionError` (@zavan)
282
374
 
283
375
  ## [2.0.1] - 2022-06-22
376
+
284
377
  - TAG: [v2.0.1][2.0.1t]
378
+
285
379
  ### Added
380
+
286
381
  - Documentation improvements (@pboling)
287
382
  - Increased test coverage to 99% (@pboling)
288
383
 
289
384
  ## [2.0.0] - 2022-06-21
385
+
290
386
  - TAG: [v2.0.0][2.0.0t]
387
+
291
388
  ### Added
292
- - [!158](https://gitlab.com/oauth-xx/oauth2/-/merge_requests/158), [!344](https://gitlab.com/oauth-xx/oauth2/-/merge_requests/344) - Optionally pass raw response to parsers (@niels)
293
- - [!190](https://gitlab.com/oauth-xx/oauth2/-/merge_requests/190), [!332](https://gitlab.com/oauth-xx/oauth2/-/merge_requests/332), [!334](https://gitlab.com/oauth-xx/oauth2/-/merge_requests/334), [!335](https://gitlab.com/oauth-xx/oauth2/-/merge_requests/335), [!360](https://gitlab.com/oauth-xx/oauth2/-/merge_requests/360), [!426](https://gitlab.com/oauth-xx/oauth2/-/merge_requests/426), [!427](https://gitlab.com/oauth-xx/oauth2/-/merge_requests/427), [!461](https://gitlab.com/oauth-xx/oauth2/-/merge_requests/461) - Documentation (@josephpage, @pboling, @meganemura, @joshRpowell, @elliotcm)
294
- - [!220](https://gitlab.com/oauth-xx/oauth2/-/merge_requests/220) - Support IETF rfc7523 JWT Bearer Tokens Draft 04+ (@jhmoore)
295
- - [!298](https://gitlab.com/oauth-xx/oauth2/-/merge_requests/298) - Set the response object on the access token on Client#get_token for debugging (@cpetschnig)
296
- - [!305](https://gitlab.com/oauth-xx/oauth2/-/merge_requests/305) - Option: `OAuth2::Client#get_token` - `:access_token_class` (`AccessToken`); user specified class to use for all calls to `get_token` (@styd)
297
- - [!346](https://gitlab.com/oauth-xx/oauth2/-/merge_requests/571) - Modern gem structure (@pboling)
298
- - [!351](https://gitlab.com/oauth-xx/oauth2/-/merge_requests/351) - Support Jruby 9k (@pboling)
299
- - [!362](https://gitlab.com/oauth-xx/oauth2/-/merge_requests/362) - Support SemVer release version scheme (@pboling)
300
- - [!363](https://gitlab.com/oauth-xx/oauth2/-/merge_requests/363) - New method `OAuth2::AccessToken#refresh!` same as old `refresh`, with backwards compatibility alias (@pboling)
301
- - [!364](https://gitlab.com/oauth-xx/oauth2/-/merge_requests/364) - Support `application/hal+json` format (@pboling)
302
- - [!365](https://gitlab.com/oauth-xx/oauth2/-/merge_requests/365) - Support `application/vnd.collection+json` format (@pboling)
303
- - [!376](https://gitlab.com/oauth-xx/oauth2/-/merge_requests/376) - _Documentation_: Example / Test for Google 2-legged JWT (@jhmoore)
304
- - [!381](https://gitlab.com/oauth-xx/oauth2/-/merge_requests/381) - Spec for extra header params on client credentials (@nikz)
305
- - [!394](https://gitlab.com/oauth-xx/oauth2/-/merge_requests/394) - Option: `OAuth2::AccessToken#initialize` - `:expires_latency` (`nil`); number of seconds by which AccessToken validity will be reduced to offset latency (@klippx)
306
- - [!412](https://gitlab.com/oauth-xx/oauth2/-/merge_requests/412) - Support `application/vdn.api+json` format (from jsonapi.org) (@david-christensen)
307
- - [!413](https://gitlab.com/oauth-xx/oauth2/-/merge_requests/413) - _Documentation_: License scan and report (@meganemura)
308
- - [!442](https://gitlab.com/oauth-xx/oauth2/-/merge_requests/442) - Option: `OAuth2::Client#initialize` - `:logger` (`::Logger.new($stdout)`) logger to use when OAUTH_DEBUG is enabled (for parity with `1-4-stable` branch) (@rthbound)
309
- - [!494](https://gitlab.com/oauth-xx/oauth2/-/merge_requests/494) - Support [OIDC 1.0 Private Key JWT](https://openid.net/specs/openid-connect-core-1_0.html#ClientAuthentication); based on the OAuth JWT assertion specification [(RFC 7523)](https://tools.ietf.org/html/rfc7523) (@SteveyblamWork)
310
- - [!549](https://gitlab.com/oauth-xx/oauth2/-/merge_requests/549) - Wrap `Faraday::ConnectionFailed` in `OAuth2::ConnectionError` (@nikkypx)
311
- - [!550](https://gitlab.com/oauth-xx/oauth2/-/merge_requests/550) - Raise error if location header not present when redirecting (@stanhu)
312
- - [!552](https://gitlab.com/oauth-xx/oauth2/-/merge_requests/552) - Add missing `version.rb` require (@ahorek)
313
- - [!553](https://gitlab.com/oauth-xx/oauth2/-/merge_requests/553) - Support `application/problem+json` format (@janz93)
314
- - [!560](https://gitlab.com/oauth-xx/oauth2/-/merge_requests/560) - Support IETF rfc6749, section 2.3.1 - don't set auth params when `nil` (@bouk)
315
- - [!571](https://gitlab.com/oauth-xx/oauth2/-/merge_requests/571) - Support Ruby 3.1 (@pboling)
316
- - [!575](https://gitlab.com/oauth-xx/oauth2/-/merge_requests/575) - Support IETF rfc7231, section 7.1.2 - relative location in redirect (@pboling)
317
- - [!581](https://gitlab.com/oauth-xx/oauth2/-/merge_requests/581) - _Documentation_: of breaking changes (@pboling)
389
+
318
390
  - [!158](https://gitlab.com/ruby-oauth/oauth2/-/merge_requests/158), [!344](https://gitlab.com/ruby-oauth/oauth2/-/merge_requests/344) - Optionally pass raw response to parsers (@niels)
319
391
  - [!190](https://gitlab.com/ruby-oauth/oauth2/-/merge_requests/190), [!332](https://gitlab.com/ruby-oauth/oauth2/-/merge_requests/332), [!334](https://gitlab.com/ruby-oauth/oauth2/-/merge_requests/334), [!335](https://gitlab.com/ruby-oauth/oauth2/-/merge_requests/335), [!360](https://gitlab.com/ruby-oauth/oauth2/-/merge_requests/360), [!426](https://gitlab.com/ruby-oauth/oauth2/-/merge_requests/426), [!427](https://gitlab.com/ruby-oauth/oauth2/-/merge_requests/427), [!461](https://gitlab.com/ruby-oauth/oauth2/-/merge_requests/461) - Documentation (@josephpage, @pboling, @meganemura, @joshRpowell, @elliotcm)
320
392
  - [!220](https://gitlab.com/ruby-oauth/oauth2/-/merge_requests/220) - Support IETF rfc7523 JWT Bearer Tokens Draft 04+ (@jhmoore)
@@ -341,17 +413,9 @@ Please file a bug if you notice a violation of semantic versioning.
341
413
  - [!571](https://gitlab.com/ruby-oauth/oauth2/-/merge_requests/571) - Support Ruby 3.1 (@pboling)
342
414
  - [!575](https://gitlab.com/ruby-oauth/oauth2/-/merge_requests/575) - Support IETF rfc7231, section 7.1.2 - relative location in redirect (@pboling)
343
415
  - [!581](https://gitlab.com/ruby-oauth/oauth2/-/merge_requests/581) - _Documentation_: of breaking changes (@pboling)
416
+
344
417
  ### Changed
345
- - [!191](https://gitlab.com/oauth-xx/oauth2/-/merge_requests/191) - **BREAKING**: Token is expired if `expired_at` time is `now` (@davestevens)
346
- - [!312](https://gitlab.com/oauth-xx/oauth2/-/merge_requests/312) - **BREAKING**: Set `:basic_auth` as default for `:auth_scheme` instead of `:request_body`. This was default behavior before 1.3.0. (@tetsuya, @wy193777)
347
- - [!317](https://gitlab.com/oauth-xx/oauth2/-/merge_requests/317) - _Dependency_: Upgrade `jwt` to 2.x.x (@travisofthenorth)
348
- - [!338](https://gitlab.com/oauth-xx/oauth2/-/merge_requests/338) - _Dependency_: Switch from `Rack::Utils.escape` to `CGI.escape` (@josephpage)
349
- - [!339](https://gitlab.com/oauth-xx/oauth2/-/merge_requests/339), [!368](https://gitlab.com/oauth-xx/oauth2/-/merge_requests/368), [!424](https://gitlab.com/oauth-xx/oauth2/-/merge_requests/424), [!479](https://gitlab.com/oauth-xx/oauth2/-/merge_requests/479), [!493](https://gitlab.com/oauth-xx/oauth2/-/merge_requests/493), [!539](https://gitlab.com/oauth-xx/oauth2/-/merge_requests/539), [!542](https://gitlab.com/oauth-xx/oauth2/-/merge_requests/542), [!553](https://gitlab.com/oauth-xx/oauth2/-/merge_requests/553) - CI Updates, code coverage, linting, spelling, type fixes, New VERSION constant (@pboling, @josephpage, @ahorek)
350
- - [!410](https://gitlab.com/oauth-xx/oauth2/-/merge_requests/410) - **BREAKING**: Removed the ability to call .error from an OAuth2::Response object (@jhmoore)
351
- - [!414](https://gitlab.com/oauth-xx/oauth2/-/merge_requests/414) - Use Base64.strict_encode64 instead of custom internal logic (@meganemura)
352
- - [!469](https://gitlab.com/oauth-xx/oauth2/-/merge_requests/469) - **BREAKING**: Default value for option `OAuth2::Client` - `:authorize_url` removed leading slash to work with relative paths by default (`'oauth/authorize'`) (@ghost)
353
- - [!469](https://gitlab.com/oauth-xx/oauth2/-/merge_requests/469) - **BREAKING**: Default value for option `OAuth2::Client` - `:token_url` removed leading slash to work with relative paths by default (`'oauth/token'`) (@ghost)
354
- - [!507](https://gitlab.com/oauth-xx/oauth2/-/merge_requests/507), [!575](https://gitlab.com/oauth-xx/oauth2/-/merge_requests/575) - **BREAKING**: Transform keys to snake case, always, by default (ultimately via `rash_alt` gem)
418
+
355
419
  - [!191](https://gitlab.com/ruby-oauth/oauth2/-/merge_requests/191) - **BREAKING**: Token is expired if `expired_at` time is `now` (@davestevens)
356
420
  - [!312](https://gitlab.com/ruby-oauth/oauth2/-/merge_requests/312) - **BREAKING**: Set `:basic_auth` as default for `:auth_scheme` instead of `:request_body`. This was default behavior before 1.3.0. (@tetsuya, @wy193777)
357
421
  - [!317](https://gitlab.com/ruby-oauth/oauth2/-/merge_requests/317) - _Dependency_: Upgrade `jwt` to 2.x.x (@travisofthenorth)
@@ -365,29 +429,11 @@ Please file a bug if you notice a violation of semantic versioning.
365
429
  - Original keys will still work as previously, in most scenarios, thanks to `rash_alt` gem.
366
430
  - However, this is a _breaking_ change if you rely on `response.parsed.to_h`, as the keys in the result will be snake case.
367
431
  - As of version 2.0.4 you can turn key transformation off with the `snaky: false` option.
368
- - [!576](https://gitlab.com/oauth-xx/oauth2/-/merge_requests/576) - **BREAKING**: Stop rescuing parsing errors (@pboling)
369
- - [!591](https://gitlab.com/oauth-xx/oauth2/-/merge_requests/576) - _DEPRECATION_: `OAuth2::Client` - `:extract_access_token` option is deprecated
370
432
  - [!576](https://gitlab.com/ruby-oauth/oauth2/-/merge_requests/576) - **BREAKING**: Stop rescuing parsing errors (@pboling)
371
433
  - [!591](https://gitlab.com/ruby-oauth/oauth2/-/merge_requests/576) - _DEPRECATION_: `OAuth2::Client` - `:extract_access_token` option is deprecated
434
+
372
435
  ### Fixed
373
- - [!158](https://gitlab.com/oauth-xx/oauth2/-/merge_requests/158), [!344](https://gitlab.com/oauth-xx/oauth2/-/merge_requests/344) - Handling of errors when using `omniauth-facebook` (@niels)
374
- - [!294](https://gitlab.com/oauth-xx/oauth2/-/merge_requests/294) - Fix: "Unexpected middleware set" issue with Faraday when `OAUTH_DEBUG=true` (@spectator, @gafrom)
375
- - [!300](https://gitlab.com/oauth-xx/oauth2/-/merge_requests/300) - _Documentation_: `Oauth2::Error` - Error codes are strings, not symbols (@NobodysNightmare)
376
- - [!318](https://gitlab.com/oauth-xx/oauth2/-/merge_requests/318), [!326](https://gitlab.com/oauth-xx/oauth2/-/merge_requests/326), [!343](https://gitlab.com/oauth-xx/oauth2/-/merge_requests/343), [!347](https://gitlab.com/oauth-xx/oauth2/-/merge_requests/347), [!397](https://gitlab.com/oauth-xx/oauth2/-/merge_requests/397), [!464](https://gitlab.com/oauth-xx/oauth2/-/merge_requests/464), [!561](https://gitlab.com/oauth-xx/oauth2/-/merge_requests/561), [!565](https://gitlab.com/oauth-xx/oauth2/-/merge_requests/565) - _Dependency_: Support all versions of `faraday` (see [gemfiles/README.md][gemfiles/readme] for compatibility matrix with Ruby engines & versions) (@pboling, @raimondasv, @zacharywelch, @Fudoshiki, @ryogift, @sj26, @jdelStrother)
377
- - [!322](https://gitlab.com/oauth-xx/oauth2/-/merge_requests/322), [!331](https://gitlab.com/oauth-xx/oauth2/-/merge_requests/331), [!337](https://gitlab.com/oauth-xx/oauth2/-/merge_requests/337), [!361](https://gitlab.com/oauth-xx/oauth2/-/merge_requests/361), [!371](https://gitlab.com/oauth-xx/oauth2/-/merge_requests/371), [!377](https://gitlab.com/oauth-xx/oauth2/-/merge_requests/377), [!383](https://gitlab.com/oauth-xx/oauth2/-/merge_requests/383), [!392](https://gitlab.com/oauth-xx/oauth2/-/merge_requests/392), [!395](https://gitlab.com/oauth-xx/oauth2/-/merge_requests/395), [!400](https://gitlab.com/oauth-xx/oauth2/-/merge_requests/400), [!401](https://gitlab.com/oauth-xx/oauth2/-/merge_requests/401), [!403](https://gitlab.com/oauth-xx/oauth2/-/merge_requests/403), [!415](https://gitlab.com/oauth-xx/oauth2/-/merge_requests/415), [!567](https://gitlab.com/oauth-xx/oauth2/-/merge_requests/567) - Updated Rubocop, Rubocop plugins and improved code style (@pboling, @bquorning, @lautis, @spectator)
378
- - [!328](https://gitlab.com/oauth-xx/oauth2/-/merge_requests/328) - _Documentation_: Homepage URL is SSL (@amatsuda)
379
- - [!339](https://gitlab.com/oauth-xx/oauth2/-/merge_requests/339), [!479](https://gitlab.com/oauth-xx/oauth2/-/merge_requests/479) - Update testing infrastructure for all supported Rubies (@pboling and @josephpage)
380
- - [!366](https://gitlab.com/oauth-xx/oauth2/-/merge_requests/366) - **Security**: Fix logging to `$stdout` of request and response bodies via Faraday's logger and `ENV["OAUTH_DEBUG"] == 'true'` (@pboling)
381
- - [!380](https://gitlab.com/oauth-xx/oauth2/-/merge_requests/380) - Fix: Stop attempting to encode non-encodable objects in `Oauth2::Error` (@jhmoore)
382
- - [!399](https://gitlab.com/oauth-xx/oauth2/-/merge_requests/399) - Fix: Stop duplicating `redirect_uri` in `get_token` (@markus)
383
- - [!410](https://gitlab.com/oauth-xx/oauth2/-/merge_requests/410) - Fix: `SystemStackError` caused by circular reference between Error and Response classes (@jhmoore)
384
- - [!460](https://gitlab.com/oauth-xx/oauth2/-/merge_requests/460) - Fix: Stop throwing errors when `raise_errors` is set to `false`; analog of [!524](https://gitlab.com/oauth-xx/oauth2/-/merge_requests/524) for `1-4-stable` branch (@joaolrpaulo)
385
- - [!472](https://gitlab.com/oauth-xx/oauth2/-/merge_requests/472) - **Security**: Add checks to enforce `client_secret` is *never* passed in authorize_url query params for `implicit` and `auth_code` grant types (@dfockler)
386
- - [!482](https://gitlab.com/oauth-xx/oauth2/-/merge_requests/482) - _Documentation_: Update last of `intridea` links to `oauth-xx` (@pboling)
387
- - [!536](https://gitlab.com/oauth-xx/oauth2/-/merge_requests/536) - **Security**: Compatibility with more (and recent) Ruby OpenSSL versions, Github Actions, Rubocop updated, analogous to [!535](https://gitlab.com/oauth-xx/oauth2/-/merge_requests/535) on `1-4-stable` branch (@pboling)
388
- - [!595](https://gitlab.com/oauth-xx/oauth2/-/merge_requests/595) - Graceful handling of empty responses from `Client#get_token`, respecting `:raise_errors` config (@stanhu)
389
- - [!596](https://gitlab.com/oauth-xx/oauth2/-/merge_requests/596) - Consistency between `AccessToken#refresh` and `Client#get_token` named arguments (@stanhu)
390
- - [!598](https://gitlab.com/oauth-xx/oauth2/-/merge_requests/598) - Fix unparseable data not raised as error in `Client#get_token`, respecting `:raise_errors` config (@stanhu)
436
+
391
437
  - [!158](https://gitlab.com/ruby-oauth/oauth2/-/merge_requests/158), [!344](https://gitlab.com/ruby-oauth/oauth2/-/merge_requests/344) - Handling of errors when using `omniauth-facebook` (@niels)
392
438
  - [!294](https://gitlab.com/ruby-oauth/oauth2/-/merge_requests/294) - Fix: "Unexpected middleware set" issue with Faraday when `OAUTH_DEBUG=true` (@spectator, @gafrom)
393
439
  - [!300](https://gitlab.com/ruby-oauth/oauth2/-/merge_requests/300) - _Documentation_: `Oauth2::Error` - Error codes are strings, not symbols (@NobodysNightmare)
@@ -406,13 +452,9 @@ Please file a bug if you notice a violation of semantic versioning.
406
452
  - [!595](https://gitlab.com/ruby-oauth/oauth2/-/merge_requests/595) - Graceful handling of empty responses from `Client#get_token`, respecting `:raise_errors` config (@stanhu)
407
453
  - [!596](https://gitlab.com/ruby-oauth/oauth2/-/merge_requests/596) - Consistency between `AccessToken#refresh` and `Client#get_token` named arguments (@stanhu)
408
454
  - [!598](https://gitlab.com/ruby-oauth/oauth2/-/merge_requests/598) - Fix unparseable data not raised as error in `Client#get_token`, respecting `:raise_errors` config (@stanhu)
455
+
409
456
  ### Removed
410
- - [!341](https://gitlab.com/oauth-xx/oauth2/-/merge_requests/341) - Remove Rdoc & Jeweler related files (@josephpage)
411
- - [!342](https://gitlab.com/oauth-xx/oauth2/-/merge_requests/342) - **BREAKING**: Dropped support for Ruby 1.8 (@josephpage)
412
- - [!539](https://gitlab.com/oauth-xx/oauth2/-/merge_requests/539) - Remove reliance on globally included OAuth2 in tests, analog of [!538](https://gitlab.com/oauth-xx/oauth2/-/merge_requests/538) for 1-4-stable (@anderscarling)
413
- - [!566](https://gitlab.com/oauth-xx/oauth2/-/merge_requests/566) - _Dependency_: Removed `wwtd` (@bquorning)
414
- - [!589](https://gitlab.com/oauth-xx/oauth2/-/merge_requests/589), [!593](https://gitlab.com/oauth-xx/oauth2/-/merge_requests/593) - Remove support for expired MAC token draft spec (@stanhu)
415
- - [!590](https://gitlab.com/oauth-xx/oauth2/-/merge_requests/590) - _Dependency_: Removed `multi_json` (@stanhu)
457
+
416
458
  - [!341](https://gitlab.com/ruby-oauth/oauth2/-/merge_requests/341) - Remove Rdoc & Jeweler related files (@josephpage)
417
459
  - [!342](https://gitlab.com/ruby-oauth/oauth2/-/merge_requests/342) - **BREAKING**: Dropped support for Ruby 1.8 (@josephpage)
418
460
  - [!539](https://gitlab.com/ruby-oauth/oauth2/-/merge_requests/539) - Remove reliance on globally included OAuth2 in tests, analog of [!538](https://gitlab.com/ruby-oauth/oauth2/-/merge_requests/538) for 1-4-stable (@anderscarling)
@@ -421,18 +463,19 @@ Please file a bug if you notice a violation of semantic versioning.
421
463
  - [!590](https://gitlab.com/ruby-oauth/oauth2/-/merge_requests/590) - _Dependency_: Removed `multi_json` (@stanhu)
422
464
 
423
465
  ## [1.4.11] - 2022-09-16
466
+
424
467
  - TAG: [v1.4.11][1.4.11t]
425
468
  - Complete migration to main branch as default (@pboling)
426
469
  - Complete migration to Gitlab, updating all links, and references in VCS-managed files (@pboling)
427
470
 
428
471
  ## [1.4.10] - 2022-07-01
472
+
429
473
  - TAG: [v1.4.10][1.4.10t]
430
- - FIPS Compatibility [!587](https://gitlab.com/oauth-xx/oauth2/-/merge_requests/587) (@akostadinov)
431
474
  - FIPS Compatibility [!587](https://gitlab.com/ruby-oauth/oauth2/-/merge_requests/587) (@akostadinov)
432
475
 
433
476
  ## [1.4.9] - 2022-02-20
477
+
434
478
  - TAG: [v1.4.9][1.4.9t]
435
- - Fixes compatibility with Faraday v2 [572](https://gitlab.com/oauth-xx/oauth2/-/issues/572)
436
479
  - Fixes compatibility with Faraday v2 [572](https://gitlab.com/ruby-oauth/oauth2/-/issues/572)
437
480
  - Includes supported versions of Faraday in test matrix:
438
481
  - Faraday ~> 2.2.0 with Ruby >= 2.6
@@ -441,72 +484,58 @@ Please file a bug if you notice a violation of semantic versioning.
441
484
  - Add Windows and MacOS to test matrix
442
485
 
443
486
  ## [1.4.8] - 2022-02-18
487
+
444
488
  - TAG: [v1.4.8][1.4.8t]
445
489
  - MFA is now required to push new gem versions (@pboling)
446
490
  - README overhaul w/ new Ruby Version and Engine compatibility policies (@pboling)
447
- - [!569](https://gitlab.com/oauth-xx/oauth2/-/merge_requests/569) Backport fixes ([!561](https://gitlab.com/oauth-xx/oauth2/-/merge_requests/561) by @ryogift), and add more fixes, to allow faraday 1.x and 2.x (@jrochkind)
448
491
  - [!569](https://gitlab.com/ruby-oauth/oauth2/-/merge_requests/569) Backport fixes ([!561](https://gitlab.com/ruby-oauth/oauth2/-/merge_requests/561) by @ryogift), and add more fixes, to allow faraday 1.x and 2.x (@jrochkind)
449
492
  - Improve Code Coverage tracking (Coveralls, CodeCov, CodeClimate), and enable branch coverage (@pboling)
450
493
  - Add CodeQL, Security Policy, Funding info (@pboling)
451
494
  - Added Ruby 3.1, jruby, jruby-head, truffleruby, truffleruby-head to build matrix (@pboling)
452
- - [!543](https://gitlab.com/oauth-xx/oauth2/-/merge_requests/543) - Support for more modern Open SSL libraries (@pboling)
453
495
  - [!543](https://gitlab.com/ruby-oauth/oauth2/-/merge_requests/543) - Support for more modern Open SSL libraries (@pboling)
454
496
 
455
497
  ## [1.4.7] - 2021-03-19
498
+
456
499
  - TAG: [v1.4.7][1.4.7t]
457
- - [!541](https://gitlab.com/oauth-xx/oauth2/-/merge_requests/541) - Backport fix to expires_at handling [!533](https://gitlab.com/oauth-xx/oauth2/-/merge_requests/533) to 1-4-stable branch. (@dobon)
458
500
  - [!541](https://gitlab.com/ruby-oauth/oauth2/-/merge_requests/541) - Backport fix to expires_at handling [!533](https://gitlab.com/ruby-oauth/oauth2/-/merge_requests/533) to 1-4-stable branch. (@dobon)
459
501
 
460
502
  ## [1.4.6] - 2021-03-19
503
+
461
504
  - TAG: [v1.4.6][1.4.6t]
462
- - [!540](https://gitlab.com/oauth-xx/oauth2/-/merge_requests/540) - Add VERSION constant (@pboling)
463
- - [!537](https://gitlab.com/oauth-xx/oauth2/-/merge_requests/537) - Fix crash in OAuth2::Client#get_token (@anderscarling)
464
- - [!538](https://gitlab.com/oauth-xx/oauth2/-/merge_requests/538) - Remove reliance on globally included OAuth2 in tests, analogous to [!539](https://gitlab.com/oauth-xx/oauth2/-/merge_requests/539) on main branch (@anderscarling)
465
505
  - [!540](https://gitlab.com/ruby-oauth/oauth2/-/merge_requests/540) - Add VERSION constant (@pboling)
466
506
  - [!537](https://gitlab.com/ruby-oauth/oauth2/-/merge_requests/537) - Fix crash in OAuth2::Client#get_token (@anderscarling)
467
507
  - [!538](https://gitlab.com/ruby-oauth/oauth2/-/merge_requests/538) - Remove reliance on globally included OAuth2 in tests, analogous to [!539](https://gitlab.com/ruby-oauth/oauth2/-/merge_requests/539) on main branch (@anderscarling)
468
508
 
469
509
  ## [1.4.5] - 2021-03-18
510
+
470
511
  - TAG: [v1.4.5][1.4.5t]
471
- - [!535](https://gitlab.com/oauth-xx/oauth2/-/merge_requests/535) - Compatibility with range of supported Ruby OpenSSL versions, Rubocop updates, Github Actions, analogous to [!536](https://gitlab.com/oauth-xx/oauth2/-/merge_requests/536) on main branch (@pboling)
472
- - [!518](https://gitlab.com/oauth-xx/oauth2/-/merge_requests/518) - Add extract_access_token option to OAuth2::Client (@jonspalmer)
473
- - [!507](https://gitlab.com/oauth-xx/oauth2/-/merge_requests/507) - Fix camel case content type, response keys (@anvox)
474
- - [!500](https://gitlab.com/oauth-xx/oauth2/-/merge_requests/500) - Fix YARD documentation formatting (@olleolleolle)
475
512
  - [!535](https://gitlab.com/ruby-oauth/oauth2/-/merge_requests/535) - Compatibility with range of supported Ruby OpenSSL versions, Rubocop updates, Github Actions, analogous to [!536](https://gitlab.com/ruby-oauth/oauth2/-/merge_requests/536) on main branch (@pboling)
476
513
  - [!518](https://gitlab.com/ruby-oauth/oauth2/-/merge_requests/518) - Add extract_access_token option to OAuth2::Client (@jonspalmer)
477
514
  - [!507](https://gitlab.com/ruby-oauth/oauth2/-/merge_requests/507) - Fix camel case content type, response keys (@anvox)
478
515
  - [!500](https://gitlab.com/ruby-oauth/oauth2/-/merge_requests/500) - Fix YARD documentation formatting (@olleolleolle)
479
516
 
480
517
  ## [1.4.4] - 2020-02-12
518
+
481
519
  - TAG: [v1.4.4][1.4.4t]
482
- - [!408](https://gitlab.com/oauth-xx/oauth2/-/merge_requests/408) - Fixed expires_at for formatted time (@Lomey)
483
520
  - [!408](https://gitlab.com/ruby-oauth/oauth2/-/merge_requests/408) - Fixed expires_at for formatted time (@Lomey)
484
521
 
485
522
  ## [1.4.3] - 2020-01-29
523
+
486
524
  - TAG: [v1.4.3][1.4.3t]
487
- - [!483](https://gitlab.com/oauth-xx/oauth2/-/merge_requests/483) - add project metadata to gemspec (@orien)
488
- - [!495](https://gitlab.com/oauth-xx/oauth2/-/merge_requests/495) - support additional types of access token requests (@SteveyblamFreeagent, @thomcorley, @dgholz)
489
525
  - [!483](https://gitlab.com/ruby-oauth/oauth2/-/merge_requests/483) - add project metadata to gemspec (@orien)
490
526
  - [!495](https://gitlab.com/ruby-oauth/oauth2/-/merge_requests/495) - support additional types of access token requests (@SteveyblamFreeagent, @thomcorley, @dgholz)
491
527
  - Adds support for private_key_jwt and tls_client_auth
492
- - [!433](https://gitlab.com/oauth-xx/oauth2/-/merge_requests/433) - allow field names with square brackets and numbers in params (@asm256)
493
528
  - [!433](https://gitlab.com/ruby-oauth/oauth2/-/merge_requests/433) - allow field names with square brackets and numbers in params (@asm256)
494
529
 
495
530
  ## [1.4.2] - 2019-10-01
531
+
496
532
  - TAG: [v1.4.2][1.4.2t]
497
- - [!478](https://gitlab.com/oauth-xx/oauth2/-/merge_requests/478) - support latest version of faraday & fix build (@pboling)
498
533
  - [!478](https://gitlab.com/ruby-oauth/oauth2/-/merge_requests/478) - support latest version of faraday & fix build (@pboling)
499
534
  - Officially support Ruby 2.6 and truffleruby
500
535
 
501
536
  ## [1.4.1] - 2018-10-13
537
+
502
538
  - TAG: [v1.4.1][1.4.1t]
503
- - [!417](https://gitlab.com/oauth-xx/oauth2/-/merge_requests/417) - update jwt dependency (@thewoolleyman)
504
- - [!419](https://gitlab.com/oauth-xx/oauth2/-/merge_requests/419) - remove rubocop dependency (temporary, added back in [!423](https://gitlab.com/oauth-xx/oauth2/-/merge_requests/423)) (@pboling)
505
- - [!418](https://gitlab.com/oauth-xx/oauth2/-/merge_requests/418) - update faraday dependency (@pboling)
506
- - [!420](https://gitlab.com/oauth-xx/oauth2/-/merge_requests/420) - update [oauth2.gemspec](https://gitlab.com/oauth-xx/oauth2/-/blob/1-4-stable/oauth2.gemspec) (@pboling)
507
- - [!421](https://gitlab.com/oauth-xx/oauth2/-/merge_requests/421) - fix [CHANGELOG.md](https://gitlab.com/oauth-xx/oauth2/-/blob/1-4-stable/CHANGELOG.md) for previous releases (@pboling)
508
- - [!422](https://gitlab.com/oauth-xx/oauth2/-/merge_requests/422) - update [LICENSE](https://gitlab.com/oauth-xx/oauth2/-/blob/1-4-stable/LICENSE) and [README.md](https://gitlab.com/oauth-xx/oauth2/-/blob/1-4-stable/README.md) (@pboling)
509
- - [!423](https://gitlab.com/oauth-xx/oauth2/-/merge_requests/423) - update [builds](https://travis-ci.org/oauth-xx/oauth2/builds), [Rakefile](https://gitlab.com/oauth-xx/oauth2/-/blob/1-4-stable/Rakefile) (@pboling)
510
539
  - [!417](https://gitlab.com/ruby-oauth/oauth2/-/merge_requests/417) - update jwt dependency (@thewoolleyman)
511
540
  - [!419](https://gitlab.com/ruby-oauth/oauth2/-/merge_requests/419) - remove rubocop dependency (temporary, added back in [!423](https://gitlab.com/ruby-oauth/oauth2/-/merge_requests/423)) (@pboling)
512
541
  - [!418](https://gitlab.com/ruby-oauth/oauth2/-/merge_requests/418) - update faraday dependency (@pboling)
@@ -533,6 +562,7 @@ Please file a bug if you notice a violation of semantic versioning.
533
562
  [jruby-9.2]: https://www.jruby.org/2018/05/24/jruby-9-2-0-0.html
534
563
 
535
564
  ## [1.4.0] - 2017-06-09
565
+
536
566
  - TAG: [v1.4.0][1.4.0t]
537
567
  - Drop Ruby 1.8.7 support (@sferik)
538
568
  - Fix some RuboCop offenses (@sferik)
@@ -540,11 +570,13 @@ Please file a bug if you notice a violation of semantic versioning.
540
570
  - _Dependency_: Upgrade Faraday to 0.12 (@sferik)
541
571
 
542
572
  ## [1.3.1] - 2017-03-03
573
+
543
574
  - TAG: [v1.3.1][1.3.1t]
544
575
  - Add support for Ruby 2.4.0 (@pschambacher)
545
576
  - _Dependency_: Upgrade Faraday to Faraday 0.11 (@mcfiredrill, @rhymes, @pschambacher)
546
577
 
547
578
  ## [1.3.0] - 2016-12-28
579
+
548
580
  - TAG: [v1.3.0][1.3.0t]
549
581
  - Add support for header-based authentication to the `Client` so it can be used across the library (@bjeanes)
550
582
  - Default to header-based authentication when getting a token from an authorisation code (@maletor)
@@ -555,26 +587,36 @@ Please file a bug if you notice a violation of semantic versioning.
555
587
  - Add support for Faraday 0.10 (@rhymes)
556
588
 
557
589
  ## [1.2.0] - 2016-07-01
590
+
558
591
  - TAG: [v1.2.0][1.2.0t]
559
592
  - Properly handle encoding of error responses (so we don't blow up, for example, when Google's response includes a ∞) (@Motoshi-Nishihira)
560
593
  - Make a copy of the options hash in `AccessToken#from_hash` to avoid accidental mutations (@Linuus)
561
594
  - Use `raise` rather than `fail` to throw exceptions (@sferik)
562
595
 
563
596
  ## [1.1.0] - 2016-01-30
597
+
564
598
  - TAG: [v1.1.0][1.1.0t]
565
599
  - Various refactors (eliminating `Hash#merge!` usage in `AccessToken#refresh!`, use `yield` instead of `#call`, freezing mutable objects in constants, replacing constants with class variables) (@sferik)
566
600
  - Add support for Rack 2, and bump various other dependencies (@sferik)
567
601
 
568
602
  ## [1.0.0] - 2014-07-09
603
+
569
604
  - TAG: [v1.0.0][1.0.0t]
605
+
570
606
  ### Added
607
+
571
608
  - Add an implementation of the MAC token spec.
609
+
572
610
  ### Fixed
611
+
573
612
  - Fix Base64.strict_encode64 incompatibility with Ruby 1.8.7.
574
613
 
575
614
  ## [0.5.0] - 2011-07-29
615
+
576
616
  - TAG: [v0.5.0][0.5.0t]
617
+
577
618
  ### Changed
619
+
578
620
  - *breaking* `oauth_token` renamed to `oauth_bearer`.
579
621
  - *breaking* `authorize_path` Client option renamed to `authorize_url`.
580
622
  - *breaking* `access_token_path` Client option renamed to `token_url`.
@@ -582,65 +624,90 @@ Please file a bug if you notice a violation of semantic versioning.
582
624
  - *breaking* `web_server` renamed to `auth_code`.
583
625
 
584
626
  ## [0.4.1] - 2011-04-20
627
+
585
628
  - TAG: [v0.4.1][0.4.1t]
586
629
 
587
630
  ## [0.4.0] - 2011-04-20
631
+
588
632
  - TAG: [v0.4.0][0.4.0t]
589
633
 
590
634
  ## [0.3.0] - 2011-04-08
635
+
591
636
  - TAG: [v0.3.0][0.3.0t]
592
637
 
593
638
  ## [0.2.0] - 2011-04-01
639
+
594
640
  - TAG: [v0.2.0][0.2.0t]
595
641
 
596
642
  ## [0.1.1] - 2011-01-12
643
+
597
644
  - TAG: [v0.1.1][0.1.1t]
598
645
 
599
646
  ## [0.1.0] - 2010-10-13
647
+
600
648
  - TAG: [v0.1.0][0.1.0t]
601
649
 
602
650
  ## [0.0.13] - 2010-08-17
651
+
603
652
  - TAG: [v0.0.13][0.0.13t]
604
653
 
605
654
  ## [0.0.12] - 2010-08-17
655
+
606
656
  - TAG: [v0.0.12][0.0.12t]
607
657
 
608
658
  ## [0.0.11] - 2010-08-17
659
+
609
660
  - TAG: [v0.0.11][0.0.11t]
610
661
 
611
662
  ## [0.0.10] - 2010-06-19
663
+
612
664
  - TAG: [v0.0.10][0.0.10t]
613
665
 
614
666
  ## [0.0.9] - 2010-06-18
667
+
615
668
  - TAG: [v0.0.9][0.0.9t]
616
669
 
617
670
  ## [0.0.8] - 2010-04-27
671
+
618
672
  - TAG: [v0.0.8][0.0.8t]
619
673
 
620
674
  ## [0.0.7] - 2010-04-27
675
+
621
676
  - TAG: [v0.0.7][0.0.7t]
622
677
 
623
678
  ## [0.0.6] - 2010-04-25
679
+
624
680
  - TAG: [v0.0.6][0.0.6t]
625
681
 
626
682
  ## [0.0.5] - 2010-04-23
683
+
627
684
  - TAG: [v0.0.5][0.0.5t]
628
685
 
629
686
  ## [0.0.4] - 2010-04-22
687
+
630
688
  - TAG: [v0.0.4][0.0.4t]
631
689
 
632
690
  ## [0.0.3] - 2010-04-22
691
+
633
692
  - TAG: [v0.0.3][0.0.3t]
634
693
 
635
694
  ## [0.0.2] - 2010-04-22
695
+
636
696
  - TAG: [v0.0.2][0.0.2t]
637
697
 
638
698
  ## [0.0.1] - 2010-04-22
699
+
639
700
  - TAG: [v0.0.1][0.0.1t]
640
701
 
641
702
  [gemfiles/readme]: gemfiles/README.md
642
703
 
643
- [Unreleased]: https://github.com/ruby-oauth/oauth2/compare/v2.0.14...HEAD
704
+ [Unreleased]: https://github.com/ruby-oauth/oauth2/compare/v2.0.17...HEAD
705
+ [2.0.17]: https://github.com/ruby-oauth/oauth2/compare/v2.0.16...v2.0.17
706
+ [2.0.17t]: https://github.com/ruby-oauth/oauth2/releases/tag/v2.0.17
707
+ [2.0.16]: https://github.com/ruby-oauth/oauth2/compare/v2.0.15...v2.0.16
708
+ [2.0.16t]: https://github.com/ruby-oauth/oauth2/releases/tag/v2.0.16
709
+ [2.0.15]: https://github.com/ruby-oauth/oauth2/compare/v2.0.14...v2.0.15
710
+ [2.0.15t]: https://github.com/ruby-oauth/oauth2/releases/tag/v2.0.15
644
711
  [2.0.14]: https://github.com/ruby-oauth/oauth2/compare/v2.0.13...v2.0.14
645
712
  [2.0.14t]: https://github.com/ruby-oauth/oauth2/releases/tag/v2.0.14
646
713
  [2.0.13]: https://github.com/ruby-oauth/oauth2/compare/v2.0.12...v2.0.13