omniauth-auth0 3.0.0 → 3.1.1
Sign up to get free protection for your applications and to get access to all the features.
- checksums.yaml +4 -4
- data/.circleci/config.yml +23 -4
- data/.devcontainer/devcontainer.json +18 -0
- data/.github/ISSUE_TEMPLATE/Bug Report.yml +76 -0
- data/.github/ISSUE_TEMPLATE/Feature Request.yml +53 -0
- data/.github/ISSUE_TEMPLATE/config.yml +2 -2
- data/.github/workflows/semgrep.yml +24 -0
- data/.gitignore +0 -2
- data/.semgrepignore +4 -0
- data/.shiprc +7 -0
- data/CHANGELOG.md +74 -11
- data/EXAMPLES.md +181 -0
- data/Gemfile +15 -15
- data/Gemfile.lock +184 -0
- data/README.md +93 -194
- data/lib/omniauth/auth0/jwt_validator.rb +19 -3
- data/lib/omniauth/strategies/auth0.rb +2 -2
- data/lib/omniauth-auth0/version.rb +1 -1
- data/omniauth-auth0.gemspec +3 -3
- data/opslevel.yml +6 -0
- data/spec/omniauth/auth0/jwt_validator_spec.rb +111 -33
- data/spec/omniauth/strategies/auth0_spec.rb +14 -0
- data/spec/spec_helper.rb +7 -3
- metadata +20 -19
- data/.github/ISSUE_TEMPLATE/feature_request.md +0 -39
- data/.github/ISSUE_TEMPLATE/report_a_bug.md +0 -55
- data/CODE_OF_CONDUCT.md +0 -3
checksums.yaml
CHANGED
|
@@ -1,7 +1,7 @@
|
|
|
1
1
|
---
|
|
2
2
|
SHA256:
|
|
3
|
-
metadata.gz:
|
|
4
|
-
data.tar.gz:
|
|
3
|
+
metadata.gz: e33cfd70eb2e126c6126dc8149d6d8789b28f40cbf6a2fea272d5b53017a7579
|
|
4
|
+
data.tar.gz: 381fac626d61d83e726a345c88e37985b43d77212007588ab6d631af1950bdf1
|
|
5
5
|
SHA512:
|
|
6
|
-
metadata.gz:
|
|
7
|
-
data.tar.gz:
|
|
6
|
+
metadata.gz: e0fee57eeffd9f8b97320ce6f89807009c212d046706358840e3d2230e976893a16d8c53d77b3ddad75f3a94c12af46fcc645681673ce52b2d5ca98581a0ec37
|
|
7
|
+
data.tar.gz: 6af264bce75557a00c3032a805b824d2a7b231abd4f0221d649db471a657ad3fad53e01055dec6cf8c2cab076bae6ec91faa81806dd2837ca464df2e0d60ca48
|
data/.circleci/config.yml
CHANGED
|
@@ -1,10 +1,14 @@
|
|
|
1
1
|
version: 2.1
|
|
2
|
+
orbs:
|
|
3
|
+
ship: auth0/ship@dev:d1e3a7f
|
|
4
|
+
codecov: codecov/codecov@3
|
|
5
|
+
|
|
2
6
|
matrix_rubyversions: &matrix_rubyversions
|
|
3
7
|
matrix:
|
|
4
8
|
parameters:
|
|
5
|
-
rubyversion: ["
|
|
9
|
+
rubyversion: ["3.0", "3.1", "3.2"]
|
|
6
10
|
# Default version of ruby to use for lint and publishing
|
|
7
|
-
default_rubyversion: &default_rubyversion "2
|
|
11
|
+
default_rubyversion: &default_rubyversion "3.2"
|
|
8
12
|
|
|
9
13
|
executors:
|
|
10
14
|
ruby:
|
|
@@ -13,7 +17,7 @@ executors:
|
|
|
13
17
|
type: string
|
|
14
18
|
default: *default_rubyversion
|
|
15
19
|
docker:
|
|
16
|
-
- image:
|
|
20
|
+
- image: cimg/ruby:<< parameters.rubyversion >>
|
|
17
21
|
|
|
18
22
|
jobs:
|
|
19
23
|
run-tests:
|
|
@@ -30,15 +34,30 @@ jobs:
|
|
|
30
34
|
keys:
|
|
31
35
|
- gems-v2-{{ checksum "Gemfile" }}
|
|
32
36
|
- gems-v2-
|
|
33
|
-
- run:
|
|
37
|
+
- run: |
|
|
38
|
+
echo 'export BUNDLER_VERSION=$(cat Gemfile.lock | tail -1 | tr -d " ")' >> $BASH_ENV
|
|
39
|
+
source $BASH_ENV
|
|
40
|
+
gem install bundler
|
|
41
|
+
bundle check || bundle install
|
|
34
42
|
- save_cache:
|
|
35
43
|
key: gems-v2--{{ checksum "Gemfile" }}
|
|
36
44
|
paths:
|
|
37
45
|
- vendor/bundle
|
|
38
46
|
- run: bundle exec rake spec
|
|
47
|
+
- codecov/upload
|
|
39
48
|
|
|
40
49
|
workflows:
|
|
41
50
|
tests:
|
|
42
51
|
jobs:
|
|
43
52
|
- run-tests:
|
|
44
53
|
<<: *matrix_rubyversions
|
|
54
|
+
- ship/ruby-publish:
|
|
55
|
+
context:
|
|
56
|
+
- publish-rubygems
|
|
57
|
+
- publish-gh
|
|
58
|
+
filters:
|
|
59
|
+
branches:
|
|
60
|
+
only:
|
|
61
|
+
- master
|
|
62
|
+
requires:
|
|
63
|
+
- run-tests
|
|
@@ -0,0 +1,18 @@
|
|
|
1
|
+
{
|
|
2
|
+
"name": "Ruby",
|
|
3
|
+
"image": "mcr.microsoft.com/devcontainers/ruby:3.2",
|
|
4
|
+
"features": {
|
|
5
|
+
"ghcr.io/devcontainers/features/node:1": {
|
|
6
|
+
"version": "lts"
|
|
7
|
+
}
|
|
8
|
+
},
|
|
9
|
+
|
|
10
|
+
// Use 'forwardPorts' to make a list of ports inside the container available locally.
|
|
11
|
+
// "forwardPorts": [],
|
|
12
|
+
|
|
13
|
+
// Use 'postCreateCommand' to run commands after the container is created.
|
|
14
|
+
// "postCreateCommand": "ruby --version",
|
|
15
|
+
|
|
16
|
+
// Set `remoteUser` to `root` to connect as root instead. More info: https://aka.ms/vscode-remote/containers/non-root.
|
|
17
|
+
"remoteUser": "vscode"
|
|
18
|
+
}
|
|
@@ -0,0 +1,76 @@
|
|
|
1
|
+
name: 🐞 Report a bug
|
|
2
|
+
description: Have you found a bug or issue? Create a bug report for this library
|
|
3
|
+
labels: ["bug"]
|
|
4
|
+
|
|
5
|
+
body:
|
|
6
|
+
- type: markdown
|
|
7
|
+
attributes:
|
|
8
|
+
value: |
|
|
9
|
+
**Please do not report security vulnerabilities here**. The [Responsible Disclosure Program](https://auth0.com/responsible-disclosure-policy) details the procedure for disclosing security issues.
|
|
10
|
+
|
|
11
|
+
- type: checkboxes
|
|
12
|
+
id: checklist
|
|
13
|
+
attributes:
|
|
14
|
+
label: Checklist
|
|
15
|
+
options:
|
|
16
|
+
- label: The issue can be reproduced in the [Rails sample app](https://github.com/auth0-samples/auth0-rubyonrails-sample/tree/master/sample) (or N/A).
|
|
17
|
+
required: true
|
|
18
|
+
- label: I have looked into the [Readme](https://github.com/auth0/omniauth-auth0#readme) and the [Examples](https://github.com/auth0/omniauth-auth0/blob/master/EXAMPLES.md), and have not found a suitable solution or answer.
|
|
19
|
+
required: true
|
|
20
|
+
- label: I have looked into the [API documentation](https://www.rubydoc.info/gems/omniauth-auth0) and have not found a suitable solution or answer.
|
|
21
|
+
required: true
|
|
22
|
+
- label: I have searched the [issues](https://github.com/auth0/omniauth-auth0/issues) and have not found a suitable solution or answer.
|
|
23
|
+
required: true
|
|
24
|
+
- label: I have searched the [Auth0 Community](https://community.auth0.com) forums and have not found a suitable solution or answer.
|
|
25
|
+
required: true
|
|
26
|
+
- label: I agree to the terms within the [Auth0 Code of Conduct](https://github.com/auth0/open-source-template/blob/master/CODE-OF-CONDUCT.md).
|
|
27
|
+
required: true
|
|
28
|
+
|
|
29
|
+
- type: textarea
|
|
30
|
+
id: description
|
|
31
|
+
attributes:
|
|
32
|
+
label: Description
|
|
33
|
+
description: Provide a clear and concise description of the issue, including what you expected to happen.
|
|
34
|
+
validations:
|
|
35
|
+
required: true
|
|
36
|
+
|
|
37
|
+
- type: textarea
|
|
38
|
+
id: reproduction
|
|
39
|
+
attributes:
|
|
40
|
+
label: Reproduction
|
|
41
|
+
description: Detail the steps taken to reproduce this error, and whether this issue can be reproduced consistently or if it is intermittent.
|
|
42
|
+
placeholder: |
|
|
43
|
+
1. Step 1...
|
|
44
|
+
2. Step 2...
|
|
45
|
+
3. ...
|
|
46
|
+
validations:
|
|
47
|
+
required: true
|
|
48
|
+
|
|
49
|
+
- type: textarea
|
|
50
|
+
id: additional-context
|
|
51
|
+
attributes:
|
|
52
|
+
label: Additional context
|
|
53
|
+
description: Other libraries that might be involved, or any other relevant information you think would be useful.
|
|
54
|
+
validations:
|
|
55
|
+
required: false
|
|
56
|
+
|
|
57
|
+
- type: input
|
|
58
|
+
id: environment-version
|
|
59
|
+
attributes:
|
|
60
|
+
label: omniauth-auth0 version
|
|
61
|
+
validations:
|
|
62
|
+
required: true
|
|
63
|
+
|
|
64
|
+
- type: input
|
|
65
|
+
id: environment-omniauth-version
|
|
66
|
+
attributes:
|
|
67
|
+
label: OmniAuth version
|
|
68
|
+
validations:
|
|
69
|
+
required: true
|
|
70
|
+
|
|
71
|
+
- type: input
|
|
72
|
+
id: environment-ruby-version
|
|
73
|
+
attributes:
|
|
74
|
+
label: Ruby version
|
|
75
|
+
validations:
|
|
76
|
+
required: true
|
|
@@ -0,0 +1,53 @@
|
|
|
1
|
+
name: 🧩 Feature request
|
|
2
|
+
description: Suggest an idea or a feature for this library
|
|
3
|
+
labels: ["feature request"]
|
|
4
|
+
|
|
5
|
+
body:
|
|
6
|
+
- type: checkboxes
|
|
7
|
+
id: checklist
|
|
8
|
+
attributes:
|
|
9
|
+
label: Checklist
|
|
10
|
+
options:
|
|
11
|
+
- label: I have looked into the [Readme](https://github.com/auth0/omniauth-auth0#readme) and the [Examples](https://github.com/auth0/omniauth-auth0/blob/master/EXAMPLES.md), and have not found a suitable solution or answer.
|
|
12
|
+
required: true
|
|
13
|
+
- label: I have looked into the [API documentation](https://www.rubydoc.info/gems/omniauth-auth0) and have not found a suitable solution or answer.
|
|
14
|
+
required: true
|
|
15
|
+
- label: I have searched the [issues](https://github.com/auth0/omniauth-auth0/issues) and have not found a suitable solution or answer.
|
|
16
|
+
required: true
|
|
17
|
+
- label: I have searched the [Auth0 Community](https://community.auth0.com) forums and have not found a suitable solution or answer.
|
|
18
|
+
required: true
|
|
19
|
+
- label: I agree to the terms within the [Auth0 Code of Conduct](https://github.com/auth0/open-source-template/blob/master/CODE-OF-CONDUCT.md).
|
|
20
|
+
required: true
|
|
21
|
+
|
|
22
|
+
- type: textarea
|
|
23
|
+
id: description
|
|
24
|
+
attributes:
|
|
25
|
+
label: Describe the problem you'd like to have solved
|
|
26
|
+
description: A clear and concise description of what the problem is.
|
|
27
|
+
placeholder: I'm always frustrated when...
|
|
28
|
+
validations:
|
|
29
|
+
required: true
|
|
30
|
+
|
|
31
|
+
- type: textarea
|
|
32
|
+
id: ideal-solution
|
|
33
|
+
attributes:
|
|
34
|
+
label: Describe the ideal solution
|
|
35
|
+
description: A clear and concise description of what you want to happen.
|
|
36
|
+
validations:
|
|
37
|
+
required: true
|
|
38
|
+
|
|
39
|
+
- type: textarea
|
|
40
|
+
id: alternatives-and-workarounds
|
|
41
|
+
attributes:
|
|
42
|
+
label: Alternatives and current workarounds
|
|
43
|
+
description: A clear and concise description of any alternatives you've considered or any workarounds that are currently in place.
|
|
44
|
+
validations:
|
|
45
|
+
required: false
|
|
46
|
+
|
|
47
|
+
- type: textarea
|
|
48
|
+
id: additional-context
|
|
49
|
+
attributes:
|
|
50
|
+
label: Additional context
|
|
51
|
+
description: Add any other context or screenshots about the feature request here.
|
|
52
|
+
validations:
|
|
53
|
+
required: false
|
|
@@ -1,8 +1,8 @@
|
|
|
1
1
|
blank_issues_enabled: false
|
|
2
2
|
contact_links:
|
|
3
3
|
- name: Auth0 Community
|
|
4
|
-
url: https://community.auth0.com
|
|
4
|
+
url: https://community.auth0.com
|
|
5
5
|
about: Discuss this SDK in the Auth0 Community forums
|
|
6
6
|
- name: Library Documentation
|
|
7
7
|
url: https://github.com/auth0/omniauth-auth0#documentation
|
|
8
|
-
about: Read the library docs
|
|
8
|
+
about: Read the library docs
|
|
@@ -0,0 +1,24 @@
|
|
|
1
|
+
name: Semgrep
|
|
2
|
+
|
|
3
|
+
on:
|
|
4
|
+
pull_request: {}
|
|
5
|
+
|
|
6
|
+
push:
|
|
7
|
+
branches: ["master", "main"]
|
|
8
|
+
|
|
9
|
+
schedule:
|
|
10
|
+
- cron: '30 0 1,15 * *'
|
|
11
|
+
|
|
12
|
+
jobs:
|
|
13
|
+
semgrep:
|
|
14
|
+
name: Scan
|
|
15
|
+
runs-on: ubuntu-latest
|
|
16
|
+
container:
|
|
17
|
+
image: returntocorp/semgrep
|
|
18
|
+
if: (github.actor != 'dependabot[bot]')
|
|
19
|
+
steps:
|
|
20
|
+
- uses: actions/checkout@v3
|
|
21
|
+
|
|
22
|
+
- run: semgrep ci
|
|
23
|
+
env:
|
|
24
|
+
SEMGREP_APP_TOKEN: ${{ secrets.SEMGREP_APP_TOKEN }}
|
data/.gitignore
CHANGED
data/.semgrepignore
ADDED
data/.shiprc
ADDED
data/CHANGELOG.md
CHANGED
|
@@ -1,12 +1,53 @@
|
|
|
1
1
|
# Change Log
|
|
2
2
|
|
|
3
|
+
## [v3.2.0](https://github.com/auth0/omniauth-auth0/tree/v3.2.0) (2023-07-14)
|
|
4
|
+
[Full Changelog](https://github.com/auth0/omniauth-auth0/compare/v3.1.0...v3.2.0)
|
|
5
|
+
|
|
6
|
+
**Added**
|
|
7
|
+
- [SDK-4410] Support Organization Name in JWT validation [\#184](https://github.com/auth0/omniauth-auth0/pull/184) ([stevehobbsdev](https://github.com/stevehobbsdev))
|
|
8
|
+
|
|
9
|
+
**Fixed**
|
|
10
|
+
- fix: upgrade to Sinatra 3 and use Rack::Session::Cookie in tests [\#165](https://github.com/auth0/omniauth-auth0/pull/165) ([stevehobbsdev](https://github.com/stevehobbsdev))
|
|
11
|
+
|
|
12
|
+
## [v3.1.1](https://github.com/auth0/omniauth-auth0/tree/v3.1.1) (2023-03-01)
|
|
13
|
+
[Full Changelog](https://github.com/auth0/omniauth-auth0/compare/v3.1.0...v3.1.1)
|
|
14
|
+
|
|
15
|
+
**Fixed**
|
|
16
|
+
- fix: upgrade to Sinatra 3 and use Rack::Session::Cookie in tests [\#165](https://github.com/auth0/omniauth-auth0/pull/165) ([stevehobbsdev](https://github.com/stevehobbsdev))
|
|
17
|
+
|
|
18
|
+
## [v3.1.0](https://github.com/auth0/omniauth-auth0/tree/v3.1.0) (2022-11-04)
|
|
19
|
+
|
|
20
|
+
[Full Changelog](https://github.com/auth0/omniauth-auth0/compare/v3.0.0...v3.1.0)
|
|
21
|
+
|
|
22
|
+
**Added**
|
|
23
|
+
|
|
24
|
+
- Add ui_locales to permitted params [\#135](https://github.com/auth0/omniauth-auth0/pull/135) ([martijn](https://github.com/martijn))
|
|
25
|
+
|
|
26
|
+
**Changed**
|
|
27
|
+
|
|
28
|
+
- Store plain Hash in session['authorize_params'] [\#150](https://github.com/auth0/omniauth-auth0/pull/150) ([santry](https://github.com/santry))
|
|
29
|
+
- Redesign readme to match new style [\#148](https://github.com/auth0/omniauth-auth0/pull/148) ([stevehobbsdev](https://github.com/stevehobbsdev))
|
|
30
|
+
|
|
31
|
+
**Fixed**
|
|
32
|
+
|
|
33
|
+
- Fix authentication hash link in code sample [\#153](https://github.com/auth0/omniauth-auth0/pull/153) ([ewanharris](https://github.com/ewanharris))
|
|
34
|
+
|
|
35
|
+
**Security**
|
|
36
|
+
|
|
37
|
+
- [Snyk] Fix for 1 vulnerabilities [\#149](https://github.com/auth0/omniauth-auth0/pull/149) ([snyk-bot](https://github.com/snyk-bot))
|
|
38
|
+
- Bump addressable from 2.7.0 to 2.8.0 [\#133](https://github.com/auth0/omniauth-auth0/pull/133) ([dependabot[bot]](https://github.com/apps/dependabot))
|
|
39
|
+
- [Snyk] Security upgrade webmock from 3.12.2 to 3.12.2 [\#134](https://github.com/auth0/omniauth-auth0/pull/134) ([snyk-bot](https://github.com/snyk-bot))
|
|
40
|
+
|
|
3
41
|
## [v3.0.0](https://github.com/auth0/omniauth-auth0/tree/v3.0.0) (2021-04-14)
|
|
42
|
+
|
|
4
43
|
Version 3.0 introduces [Omniauth v2.0](https://github.com/omniauth/omniauth/releases/tag/v2.0.0) which addresses [CVE-2015-9284](https://nvd.nist.gov/vuln/detail/CVE-2015-9284). Omniauth now defaults to only allow `POST` as the allowed request_phase method. This was previously handled through the recommended [mitigation](https://github.com/omniauth/omniauth/wiki/Resolving-CVE-2015-9284) using the `omniauth-rails_csrf_protection v0.x.x` gem to provide CSRF protection.
|
|
5
44
|
|
|
6
45
|
### Upgrading to omniauth-rails_csrf_protection v1.0.0
|
|
46
|
+
|
|
7
47
|
If you are using `omniauth-rails_csrf_protection` to provide CSRF protection, you will need to be upgrade to `1.x.x`.
|
|
8
48
|
|
|
9
49
|
### BREAKING CHANGES
|
|
50
|
+
|
|
10
51
|
Now that OmniAuth now defaults to only `POST` as the allowed request_phase method, if you aren't already, you will need to convert any login links to use [form helpers](https://api.rubyonrails.org/classes/ActionView/Helpers/FormHelper.html#method-i-form_for) with the `POST` method.
|
|
11
52
|
|
|
12
53
|
```html+ruby
|
|
@@ -26,10 +67,11 @@ Now that OmniAuth now defaults to only `POST` as the allowed request_phase metho
|
|
|
26
67
|
```
|
|
27
68
|
|
|
28
69
|
### Allowing GET Requests
|
|
70
|
+
|
|
29
71
|
In the scenario you absolutely must use GET requests as an allowed request method for authentication, you can override the protection provided with the following config override:
|
|
30
72
|
|
|
31
73
|
```ruby
|
|
32
|
-
# Allowing GET requests will expose you to CVE-2015-9284
|
|
74
|
+
# Allowing GET requests will expose you to CVE-2015-9284
|
|
33
75
|
OmniAuth.config.allowed_request_methods = [:get, :post]
|
|
34
76
|
```
|
|
35
77
|
|
|
@@ -38,28 +80,32 @@ OmniAuth.config.allowed_request_methods = [:get, :post]
|
|
|
38
80
|
[Full Changelog](https://github.com/auth0/omniauth-auth0/compare/v2.5.0...v2.6.0)
|
|
39
81
|
|
|
40
82
|
**Added**
|
|
41
|
-
|
|
42
|
-
-
|
|
83
|
+
|
|
84
|
+
- Org Support [SDK-2395] [\#124](https://github.com/auth0/omniauth-auth0/pull/124) ([davidpatrick](https://github.com/davidpatrick))
|
|
85
|
+
- Add login_hint to permitted params [\#123](https://github.com/auth0/omniauth-auth0/pull/123) ([Roriz](https://github.com/Roriz))
|
|
43
86
|
|
|
44
87
|
## [v2.5.0](https://github.com/auth0/omniauth-auth0/tree/v2.5.0) (2021-01-21)
|
|
45
88
|
|
|
46
89
|
[Full Changelog](https://github.com/auth0/omniauth-auth0/compare/v2.4.2...v2.5.0)
|
|
47
90
|
|
|
48
91
|
**Added**
|
|
92
|
+
|
|
49
93
|
- Parsing claims from the id_token [\#120](https://github.com/auth0/omniauth-auth0/pull/120) ([davidpatrick](https://github.com/davidpatrick))
|
|
50
94
|
|
|
51
95
|
**Changed**
|
|
96
|
+
|
|
52
97
|
- Setup build matrix in CI [\#116](https://github.com/auth0/omniauth-auth0/pull/116) ([dmathieu](https://github.com/dmathieu))
|
|
53
98
|
|
|
54
99
|
**Fixed**
|
|
55
|
-
- Fixes params passed to authorize [\#119](https://github.com/auth0/omniauth-auth0/pull/119) ([davidpatrick](https://github.com/davidpatrick))
|
|
56
100
|
|
|
101
|
+
- Fixes params passed to authorize [\#119](https://github.com/auth0/omniauth-auth0/pull/119) ([davidpatrick](https://github.com/davidpatrick))
|
|
57
102
|
|
|
58
103
|
## [v2.4.2](https://github.com/auth0/omniauth-auth0/tree/v2.4.2) (2021-01-19)
|
|
59
104
|
|
|
60
105
|
[Full Changelog](https://github.com/auth0/omniauth-auth0/compare/v2.4.1...v2.4.2)
|
|
61
106
|
|
|
62
107
|
**Fixed**
|
|
108
|
+
|
|
63
109
|
- Lock Omniauth to 1.9 in gemspec
|
|
64
110
|
|
|
65
111
|
## [v2.4.1](https://github.com/auth0/omniauth-auth0/tree/v2.4.1) (2020-10-08)
|
|
@@ -67,22 +113,23 @@ OmniAuth.config.allowed_request_methods = [:get, :post]
|
|
|
67
113
|
[Full Changelog](https://github.com/auth0/omniauth-auth0/compare/v2.4.0...v2.4.1)
|
|
68
114
|
|
|
69
115
|
**Fixed**
|
|
70
|
-
- Verify the JWT Signature [\#109](https://github.com/auth0/omniauth-auth0/pull/109) ([jimmyjames](https://github.com/jimmyjames))
|
|
71
116
|
|
|
117
|
+
- Verify the JWT Signature [\#109](https://github.com/auth0/omniauth-auth0/pull/109) ([jimmyjames](https://github.com/jimmyjames))
|
|
72
118
|
|
|
73
119
|
## [v2.4.0](https://github.com/auth0/omniauth-auth0/tree/v2.4.0) (2020-09-22)
|
|
74
120
|
|
|
75
121
|
[Full Changelog](https://github.com/auth0/omniauth-auth0/compare/v2.3.1...v2.4.0)
|
|
76
122
|
|
|
77
123
|
**Security**
|
|
124
|
+
|
|
78
125
|
- Bump rack from 2.2.2 to 2.2.3 [\#107](https://github.com/auth0/omniauth-auth0/pull/107) ([dependabot](https://github.com/dependabot))
|
|
79
126
|
- Update dependencies [\#100](https://github.com/auth0/omniauth-auth0/pull/100) ([Albalmaceda](https://github.com/Albalmaceda))
|
|
80
127
|
|
|
81
128
|
**Added**
|
|
129
|
+
|
|
82
130
|
- Add support for screen_hint=signup param [\#103](https://github.com/auth0/omniauth-auth0/pull/103) ([bbean86](https://github.com/bbean86))
|
|
83
131
|
- Add support for `connection_scope` in params [\#99](https://github.com/auth0/omniauth-auth0/pull/99) ([felixclack](https://github.com/felixclack))
|
|
84
132
|
|
|
85
|
-
|
|
86
133
|
## [v2.3.1](https://github.com/auth0/omniauth-auth0/tree/v2.3.1) (2020-03-27)
|
|
87
134
|
|
|
88
135
|
[Full Changelog](https://github.com/auth0/omniauth-auth0/compare/v2.3.0...v2.3.1)
|
|
@@ -93,29 +140,37 @@ OmniAuth.config.allowed_request_methods = [:get, :post]
|
|
|
93
140
|
- Fix "NameError: uninitialized constant OmniAuth::Auth0::TokenValidationError" [\#96](https://github.com/auth0/omniauth-auth0/pull/96) ([stefanwork](https://github.com/stefanwork))
|
|
94
141
|
|
|
95
142
|
## [v2.3.0](https://github.com/auth0/omniauth-auth0/tree/v2.3.0) (2020-03-06)
|
|
143
|
+
|
|
96
144
|
[Full Changelog](https://github.com/auth0/omniauth-auth0/compare/v2.2.0...v2.3.0)
|
|
97
145
|
|
|
98
146
|
**Added**
|
|
147
|
+
|
|
99
148
|
- Improved OIDC Compliance [\#92](https://github.com/auth0/omniauth-auth0/pull/92) ([davidpatrick](https://github.com/davidpatrick))
|
|
100
149
|
|
|
101
150
|
## [v2.2.0](https://github.com/auth0/omniauth-auth0/tree/v2.2.0) (2018-04-18)
|
|
151
|
+
|
|
102
152
|
[Full Changelog](https://github.com/auth0/omniauth-auth0/compare/v2.1.0...v2.2.0)
|
|
103
153
|
|
|
104
154
|
**Closed issues**
|
|
155
|
+
|
|
105
156
|
- It supports custom domain? [\#71](https://github.com/auth0/omniauth-auth0/issues/71)
|
|
106
157
|
- Valid Login, No Details: email=nil image=nil name="github|38257089" nickname=nil [\#70](https://github.com/auth0/omniauth-auth0/issues/70)
|
|
107
158
|
|
|
108
159
|
**Added**
|
|
160
|
+
|
|
109
161
|
- Custom issuer [\#77](https://github.com/auth0/omniauth-auth0/pull/77) ([ryan-rosenfeld](https://github.com/ryan-rosenfeld))
|
|
110
162
|
- Add telemetry to token endpoint [\#74](https://github.com/auth0/omniauth-auth0/pull/74) ([joshcanhelp](https://github.com/joshcanhelp))
|
|
111
163
|
|
|
112
164
|
**Changed**
|
|
165
|
+
|
|
113
166
|
- Remove telemetry from authorize URL [\#75](https://github.com/auth0/omniauth-auth0/pull/75) ([joshcanhelp](https://github.com/joshcanhelp))
|
|
114
167
|
|
|
115
168
|
## [v2.1.0](https://github.com/auth0/omniauth-auth0/tree/v2.1.0) (2018-10-30)
|
|
169
|
+
|
|
116
170
|
[Full Changelog](https://github.com/auth0/omniauth-auth0/compare/v2.0.0...v2.1.0)
|
|
117
171
|
|
|
118
172
|
**Closed issues**
|
|
173
|
+
|
|
119
174
|
- URL should be spelled uppercase outside of code [\#64](https://github.com/auth0/omniauth-auth0/issues/64)
|
|
120
175
|
- Add prompt=none authorization param handler [\#58](https://github.com/auth0/omniauth-auth0/issues/58)
|
|
121
176
|
- Could not find a valid mapping for path "/auth/oauth2/callback" [\#56](https://github.com/auth0/omniauth-auth0/issues/56)
|
|
@@ -124,18 +179,22 @@ OmniAuth.config.allowed_request_methods = [:get, :post]
|
|
|
124
179
|
- /auth/:provider route not registered? [\#47](https://github.com/auth0/omniauth-auth0/issues/47)
|
|
125
180
|
|
|
126
181
|
**Added**
|
|
182
|
+
|
|
127
183
|
- Add ID token validation [\#62](https://github.com/auth0/omniauth-auth0/pull/62) ([joshcanhelp](https://github.com/joshcanhelp))
|
|
128
184
|
- Silent authentication [\#59](https://github.com/auth0/omniauth-auth0/pull/59) ([batalla3692](https://github.com/batalla3692))
|
|
129
185
|
- Pass connection parameter to auth0 [\#54](https://github.com/auth0/omniauth-auth0/pull/54) ([tomgi](https://github.com/tomgi))
|
|
130
186
|
|
|
131
187
|
**Changed**
|
|
188
|
+
|
|
132
189
|
- Update to omniauth-oauth2 [\#55](https://github.com/auth0/omniauth-auth0/pull/55) ([chills42](https://github.com/chills42))
|
|
133
190
|
|
|
134
191
|
**Fixed**
|
|
192
|
+
|
|
135
193
|
- Fix Rubocop errors [\#66](https://github.com/auth0/omniauth-auth0/pull/66) ([joshcanhelp](https://github.com/joshcanhelp))
|
|
136
194
|
- Fix minute bug in README.md [\#63](https://github.com/auth0/omniauth-auth0/pull/63) ([rahuldess](https://github.com/rahuldess))
|
|
137
195
|
|
|
138
196
|
## [v2.0.0](https://github.com/auth0/omniauth-auth0/tree/v2.0.0) (2017-01-25)
|
|
197
|
+
|
|
139
198
|
[Full Changelog](https://github.com/auth0/omniauth-auth0/compare/v1.4.1...v2.0.0)
|
|
140
199
|
|
|
141
200
|
Updated library to handle OIDC conformant clients and OAuth2 features in Auth0.
|
|
@@ -153,31 +212,36 @@ The `info` object will use the [OmniAuth schema](https://github.com/omniauth/omn
|
|
|
153
212
|
Also in `extra` will have in `raw_info` the full /userinfo response.
|
|
154
213
|
|
|
155
214
|
**Fixed**
|
|
215
|
+
|
|
156
216
|
- Use image attribute of omniauth instead of picture [\#45](https://github.com/auth0/omniauth-auth0/pull/45) ([hzalaz](https://github.com/hzalaz))
|
|
157
|
-
- Rework strategy to handle OAuth and OIDC
|
|
217
|
+
- Rework strategy to handle OAuth and OIDC [\#44](https://github.com/auth0/omniauth-auth0/pull/44) ([hzalaz](https://github.com/hzalaz))
|
|
158
218
|
- lock v10 update, dependencies update [\#41](https://github.com/auth0/omniauth-auth0/pull/41) ([Amialc](https://github.com/Amialc))
|
|
159
219
|
|
|
160
220
|
## [v1.4.2](https://github.com/auth0/omniauth-auth0/tree/v1.4.2) (2016-06-13)
|
|
221
|
+
|
|
161
222
|
[Full Changelog](https://github.com/auth0/omniauth-auth0/compare/v1.4.1...v1.4.2)
|
|
162
223
|
|
|
163
224
|
**Added**
|
|
225
|
+
|
|
164
226
|
- Link to OmniAuth site [\#36](https://github.com/auth0/omniauth-auth0/pull/36) ([jghaines](https://github.com/jghaines))
|
|
165
227
|
- add ssl fix to RoR example [\#31](https://github.com/auth0/omniauth-auth0/pull/31) ([Amialc](https://github.com/Amialc))
|
|
166
228
|
- Update LICENSE [\#17](https://github.com/auth0/omniauth-auth0/pull/17) ([aguerere](https://github.com/aguerere))
|
|
167
229
|
|
|
168
230
|
**Changed**
|
|
231
|
+
|
|
169
232
|
- Update lock to version 9 [\#34](https://github.com/auth0/omniauth-auth0/pull/34) ([Annyv2](https://github.com/Annyv2))
|
|
170
233
|
- Update Gemfile [\#22](https://github.com/auth0/omniauth-auth0/pull/22) ([Annyv2](https://github.com/Annyv2))
|
|
171
234
|
- Update lock [\#15](https://github.com/auth0/omniauth-auth0/pull/15) ([Annyv2](https://github.com/Annyv2))
|
|
172
235
|
|
|
173
236
|
**Fixed**
|
|
237
|
+
|
|
174
238
|
- Fix setup [\#38](https://github.com/auth0/omniauth-auth0/pull/38) ([deepak](https://github.com/deepak))
|
|
175
239
|
- Added missing instruction [\#30](https://github.com/auth0/omniauth-auth0/pull/30) ([Annyv2](https://github.com/Annyv2))
|
|
176
240
|
- Fixes undefined Auth0Lock issue [\#28](https://github.com/auth0/omniauth-auth0/pull/28) ([Annyv2](https://github.com/Annyv2))
|
|
177
241
|
- Update Readme [\#27](https://github.com/auth0/omniauth-auth0/pull/27) ([Annyv2](https://github.com/Annyv2))
|
|
178
242
|
|
|
179
|
-
|
|
180
243
|
## [v1.4.1](https://github.com/auth0/omniauth-auth0/tree/v1.4.1) (2015-11-18)
|
|
244
|
+
|
|
181
245
|
[Full Changelog](https://github.com/auth0/omniauth-auth0/compare/v1.4.0...v1.4.1)
|
|
182
246
|
|
|
183
247
|
**Merged pull requests:**
|
|
@@ -188,6 +252,7 @@ Also in `extra` will have in `raw_info` the full /userinfo response.
|
|
|
188
252
|
- Add nested module in version.rb [\#9](https://github.com/auth0/omniauth-auth0/pull/9) ([l4u](https://github.com/l4u))
|
|
189
253
|
|
|
190
254
|
## [v1.4.0](https://github.com/auth0/omniauth-auth0/tree/v1.4.0) (2015-06-01)
|
|
255
|
+
|
|
191
256
|
**Merged pull requests:**
|
|
192
257
|
|
|
193
258
|
- Client headers [\#8](https://github.com/auth0/omniauth-auth0/pull/8) ([benschwarz](https://github.com/benschwarz))
|
|
@@ -196,6 +261,4 @@ Also in `extra` will have in `raw_info` the full /userinfo response.
|
|
|
196
261
|
- Update README.md [\#3](https://github.com/auth0/omniauth-auth0/pull/3) ([pose](https://github.com/pose))
|
|
197
262
|
- Fix Markdown typo [\#2](https://github.com/auth0/omniauth-auth0/pull/2) ([dentarg](https://github.com/dentarg))
|
|
198
263
|
|
|
199
|
-
|
|
200
|
-
|
|
201
|
-
\* *This Change Log was automatically generated by [github_changelog_generator](https://github.com/skywinder/Github-Changelog-Generator)*
|
|
264
|
+
\* _This Change Log was automatically generated by [github_changelog_generator](https://github.com/skywinder/Github-Changelog-Generator)_
|