omniauth-auth0 3.0.0 → 3.1.1
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- checksums.yaml +4 -4
- data/.circleci/config.yml +23 -4
- data/.devcontainer/devcontainer.json +18 -0
- data/.github/ISSUE_TEMPLATE/Bug Report.yml +76 -0
- data/.github/ISSUE_TEMPLATE/Feature Request.yml +53 -0
- data/.github/ISSUE_TEMPLATE/config.yml +2 -2
- data/.github/workflows/semgrep.yml +24 -0
- data/.gitignore +0 -2
- data/.semgrepignore +4 -0
- data/.shiprc +7 -0
- data/CHANGELOG.md +74 -11
- data/EXAMPLES.md +181 -0
- data/Gemfile +15 -15
- data/Gemfile.lock +184 -0
- data/README.md +93 -194
- data/lib/omniauth/auth0/jwt_validator.rb +19 -3
- data/lib/omniauth/strategies/auth0.rb +2 -2
- data/lib/omniauth-auth0/version.rb +1 -1
- data/omniauth-auth0.gemspec +3 -3
- data/opslevel.yml +6 -0
- data/spec/omniauth/auth0/jwt_validator_spec.rb +111 -33
- data/spec/omniauth/strategies/auth0_spec.rb +14 -0
- data/spec/spec_helper.rb +7 -3
- metadata +20 -19
- data/.github/ISSUE_TEMPLATE/feature_request.md +0 -39
- data/.github/ISSUE_TEMPLATE/report_a_bug.md +0 -55
- data/CODE_OF_CONDUCT.md +0 -3
checksums.yaml
CHANGED
|
@@ -1,7 +1,7 @@
|
|
|
1
1
|
---
|
|
2
2
|
SHA256:
|
|
3
|
-
metadata.gz:
|
|
4
|
-
data.tar.gz:
|
|
3
|
+
metadata.gz: e33cfd70eb2e126c6126dc8149d6d8789b28f40cbf6a2fea272d5b53017a7579
|
|
4
|
+
data.tar.gz: 381fac626d61d83e726a345c88e37985b43d77212007588ab6d631af1950bdf1
|
|
5
5
|
SHA512:
|
|
6
|
-
metadata.gz:
|
|
7
|
-
data.tar.gz:
|
|
6
|
+
metadata.gz: e0fee57eeffd9f8b97320ce6f89807009c212d046706358840e3d2230e976893a16d8c53d77b3ddad75f3a94c12af46fcc645681673ce52b2d5ca98581a0ec37
|
|
7
|
+
data.tar.gz: 6af264bce75557a00c3032a805b824d2a7b231abd4f0221d649db471a657ad3fad53e01055dec6cf8c2cab076bae6ec91faa81806dd2837ca464df2e0d60ca48
|
data/.circleci/config.yml
CHANGED
|
@@ -1,10 +1,14 @@
|
|
|
1
1
|
version: 2.1
|
|
2
|
+
orbs:
|
|
3
|
+
ship: auth0/ship@dev:d1e3a7f
|
|
4
|
+
codecov: codecov/codecov@3
|
|
5
|
+
|
|
2
6
|
matrix_rubyversions: &matrix_rubyversions
|
|
3
7
|
matrix:
|
|
4
8
|
parameters:
|
|
5
|
-
rubyversion: ["
|
|
9
|
+
rubyversion: ["3.0", "3.1", "3.2"]
|
|
6
10
|
# Default version of ruby to use for lint and publishing
|
|
7
|
-
default_rubyversion: &default_rubyversion "2
|
|
11
|
+
default_rubyversion: &default_rubyversion "3.2"
|
|
8
12
|
|
|
9
13
|
executors:
|
|
10
14
|
ruby:
|
|
@@ -13,7 +17,7 @@ executors:
|
|
|
13
17
|
type: string
|
|
14
18
|
default: *default_rubyversion
|
|
15
19
|
docker:
|
|
16
|
-
- image:
|
|
20
|
+
- image: cimg/ruby:<< parameters.rubyversion >>
|
|
17
21
|
|
|
18
22
|
jobs:
|
|
19
23
|
run-tests:
|
|
@@ -30,15 +34,30 @@ jobs:
|
|
|
30
34
|
keys:
|
|
31
35
|
- gems-v2-{{ checksum "Gemfile" }}
|
|
32
36
|
- gems-v2-
|
|
33
|
-
- run:
|
|
37
|
+
- run: |
|
|
38
|
+
echo 'export BUNDLER_VERSION=$(cat Gemfile.lock | tail -1 | tr -d " ")' >> $BASH_ENV
|
|
39
|
+
source $BASH_ENV
|
|
40
|
+
gem install bundler
|
|
41
|
+
bundle check || bundle install
|
|
34
42
|
- save_cache:
|
|
35
43
|
key: gems-v2--{{ checksum "Gemfile" }}
|
|
36
44
|
paths:
|
|
37
45
|
- vendor/bundle
|
|
38
46
|
- run: bundle exec rake spec
|
|
47
|
+
- codecov/upload
|
|
39
48
|
|
|
40
49
|
workflows:
|
|
41
50
|
tests:
|
|
42
51
|
jobs:
|
|
43
52
|
- run-tests:
|
|
44
53
|
<<: *matrix_rubyversions
|
|
54
|
+
- ship/ruby-publish:
|
|
55
|
+
context:
|
|
56
|
+
- publish-rubygems
|
|
57
|
+
- publish-gh
|
|
58
|
+
filters:
|
|
59
|
+
branches:
|
|
60
|
+
only:
|
|
61
|
+
- master
|
|
62
|
+
requires:
|
|
63
|
+
- run-tests
|
|
@@ -0,0 +1,18 @@
|
|
|
1
|
+
{
|
|
2
|
+
"name": "Ruby",
|
|
3
|
+
"image": "mcr.microsoft.com/devcontainers/ruby:3.2",
|
|
4
|
+
"features": {
|
|
5
|
+
"ghcr.io/devcontainers/features/node:1": {
|
|
6
|
+
"version": "lts"
|
|
7
|
+
}
|
|
8
|
+
},
|
|
9
|
+
|
|
10
|
+
// Use 'forwardPorts' to make a list of ports inside the container available locally.
|
|
11
|
+
// "forwardPorts": [],
|
|
12
|
+
|
|
13
|
+
// Use 'postCreateCommand' to run commands after the container is created.
|
|
14
|
+
// "postCreateCommand": "ruby --version",
|
|
15
|
+
|
|
16
|
+
// Set `remoteUser` to `root` to connect as root instead. More info: https://aka.ms/vscode-remote/containers/non-root.
|
|
17
|
+
"remoteUser": "vscode"
|
|
18
|
+
}
|
|
@@ -0,0 +1,76 @@
|
|
|
1
|
+
name: 🐞 Report a bug
|
|
2
|
+
description: Have you found a bug or issue? Create a bug report for this library
|
|
3
|
+
labels: ["bug"]
|
|
4
|
+
|
|
5
|
+
body:
|
|
6
|
+
- type: markdown
|
|
7
|
+
attributes:
|
|
8
|
+
value: |
|
|
9
|
+
**Please do not report security vulnerabilities here**. The [Responsible Disclosure Program](https://auth0.com/responsible-disclosure-policy) details the procedure for disclosing security issues.
|
|
10
|
+
|
|
11
|
+
- type: checkboxes
|
|
12
|
+
id: checklist
|
|
13
|
+
attributes:
|
|
14
|
+
label: Checklist
|
|
15
|
+
options:
|
|
16
|
+
- label: The issue can be reproduced in the [Rails sample app](https://github.com/auth0-samples/auth0-rubyonrails-sample/tree/master/sample) (or N/A).
|
|
17
|
+
required: true
|
|
18
|
+
- label: I have looked into the [Readme](https://github.com/auth0/omniauth-auth0#readme) and the [Examples](https://github.com/auth0/omniauth-auth0/blob/master/EXAMPLES.md), and have not found a suitable solution or answer.
|
|
19
|
+
required: true
|
|
20
|
+
- label: I have looked into the [API documentation](https://www.rubydoc.info/gems/omniauth-auth0) and have not found a suitable solution or answer.
|
|
21
|
+
required: true
|
|
22
|
+
- label: I have searched the [issues](https://github.com/auth0/omniauth-auth0/issues) and have not found a suitable solution or answer.
|
|
23
|
+
required: true
|
|
24
|
+
- label: I have searched the [Auth0 Community](https://community.auth0.com) forums and have not found a suitable solution or answer.
|
|
25
|
+
required: true
|
|
26
|
+
- label: I agree to the terms within the [Auth0 Code of Conduct](https://github.com/auth0/open-source-template/blob/master/CODE-OF-CONDUCT.md).
|
|
27
|
+
required: true
|
|
28
|
+
|
|
29
|
+
- type: textarea
|
|
30
|
+
id: description
|
|
31
|
+
attributes:
|
|
32
|
+
label: Description
|
|
33
|
+
description: Provide a clear and concise description of the issue, including what you expected to happen.
|
|
34
|
+
validations:
|
|
35
|
+
required: true
|
|
36
|
+
|
|
37
|
+
- type: textarea
|
|
38
|
+
id: reproduction
|
|
39
|
+
attributes:
|
|
40
|
+
label: Reproduction
|
|
41
|
+
description: Detail the steps taken to reproduce this error, and whether this issue can be reproduced consistently or if it is intermittent.
|
|
42
|
+
placeholder: |
|
|
43
|
+
1. Step 1...
|
|
44
|
+
2. Step 2...
|
|
45
|
+
3. ...
|
|
46
|
+
validations:
|
|
47
|
+
required: true
|
|
48
|
+
|
|
49
|
+
- type: textarea
|
|
50
|
+
id: additional-context
|
|
51
|
+
attributes:
|
|
52
|
+
label: Additional context
|
|
53
|
+
description: Other libraries that might be involved, or any other relevant information you think would be useful.
|
|
54
|
+
validations:
|
|
55
|
+
required: false
|
|
56
|
+
|
|
57
|
+
- type: input
|
|
58
|
+
id: environment-version
|
|
59
|
+
attributes:
|
|
60
|
+
label: omniauth-auth0 version
|
|
61
|
+
validations:
|
|
62
|
+
required: true
|
|
63
|
+
|
|
64
|
+
- type: input
|
|
65
|
+
id: environment-omniauth-version
|
|
66
|
+
attributes:
|
|
67
|
+
label: OmniAuth version
|
|
68
|
+
validations:
|
|
69
|
+
required: true
|
|
70
|
+
|
|
71
|
+
- type: input
|
|
72
|
+
id: environment-ruby-version
|
|
73
|
+
attributes:
|
|
74
|
+
label: Ruby version
|
|
75
|
+
validations:
|
|
76
|
+
required: true
|
|
@@ -0,0 +1,53 @@
|
|
|
1
|
+
name: 🧩 Feature request
|
|
2
|
+
description: Suggest an idea or a feature for this library
|
|
3
|
+
labels: ["feature request"]
|
|
4
|
+
|
|
5
|
+
body:
|
|
6
|
+
- type: checkboxes
|
|
7
|
+
id: checklist
|
|
8
|
+
attributes:
|
|
9
|
+
label: Checklist
|
|
10
|
+
options:
|
|
11
|
+
- label: I have looked into the [Readme](https://github.com/auth0/omniauth-auth0#readme) and the [Examples](https://github.com/auth0/omniauth-auth0/blob/master/EXAMPLES.md), and have not found a suitable solution or answer.
|
|
12
|
+
required: true
|
|
13
|
+
- label: I have looked into the [API documentation](https://www.rubydoc.info/gems/omniauth-auth0) and have not found a suitable solution or answer.
|
|
14
|
+
required: true
|
|
15
|
+
- label: I have searched the [issues](https://github.com/auth0/omniauth-auth0/issues) and have not found a suitable solution or answer.
|
|
16
|
+
required: true
|
|
17
|
+
- label: I have searched the [Auth0 Community](https://community.auth0.com) forums and have not found a suitable solution or answer.
|
|
18
|
+
required: true
|
|
19
|
+
- label: I agree to the terms within the [Auth0 Code of Conduct](https://github.com/auth0/open-source-template/blob/master/CODE-OF-CONDUCT.md).
|
|
20
|
+
required: true
|
|
21
|
+
|
|
22
|
+
- type: textarea
|
|
23
|
+
id: description
|
|
24
|
+
attributes:
|
|
25
|
+
label: Describe the problem you'd like to have solved
|
|
26
|
+
description: A clear and concise description of what the problem is.
|
|
27
|
+
placeholder: I'm always frustrated when...
|
|
28
|
+
validations:
|
|
29
|
+
required: true
|
|
30
|
+
|
|
31
|
+
- type: textarea
|
|
32
|
+
id: ideal-solution
|
|
33
|
+
attributes:
|
|
34
|
+
label: Describe the ideal solution
|
|
35
|
+
description: A clear and concise description of what you want to happen.
|
|
36
|
+
validations:
|
|
37
|
+
required: true
|
|
38
|
+
|
|
39
|
+
- type: textarea
|
|
40
|
+
id: alternatives-and-workarounds
|
|
41
|
+
attributes:
|
|
42
|
+
label: Alternatives and current workarounds
|
|
43
|
+
description: A clear and concise description of any alternatives you've considered or any workarounds that are currently in place.
|
|
44
|
+
validations:
|
|
45
|
+
required: false
|
|
46
|
+
|
|
47
|
+
- type: textarea
|
|
48
|
+
id: additional-context
|
|
49
|
+
attributes:
|
|
50
|
+
label: Additional context
|
|
51
|
+
description: Add any other context or screenshots about the feature request here.
|
|
52
|
+
validations:
|
|
53
|
+
required: false
|
|
@@ -1,8 +1,8 @@
|
|
|
1
1
|
blank_issues_enabled: false
|
|
2
2
|
contact_links:
|
|
3
3
|
- name: Auth0 Community
|
|
4
|
-
url: https://community.auth0.com
|
|
4
|
+
url: https://community.auth0.com
|
|
5
5
|
about: Discuss this SDK in the Auth0 Community forums
|
|
6
6
|
- name: Library Documentation
|
|
7
7
|
url: https://github.com/auth0/omniauth-auth0#documentation
|
|
8
|
-
about: Read the library docs
|
|
8
|
+
about: Read the library docs
|
|
@@ -0,0 +1,24 @@
|
|
|
1
|
+
name: Semgrep
|
|
2
|
+
|
|
3
|
+
on:
|
|
4
|
+
pull_request: {}
|
|
5
|
+
|
|
6
|
+
push:
|
|
7
|
+
branches: ["master", "main"]
|
|
8
|
+
|
|
9
|
+
schedule:
|
|
10
|
+
- cron: '30 0 1,15 * *'
|
|
11
|
+
|
|
12
|
+
jobs:
|
|
13
|
+
semgrep:
|
|
14
|
+
name: Scan
|
|
15
|
+
runs-on: ubuntu-latest
|
|
16
|
+
container:
|
|
17
|
+
image: returntocorp/semgrep
|
|
18
|
+
if: (github.actor != 'dependabot[bot]')
|
|
19
|
+
steps:
|
|
20
|
+
- uses: actions/checkout@v3
|
|
21
|
+
|
|
22
|
+
- run: semgrep ci
|
|
23
|
+
env:
|
|
24
|
+
SEMGREP_APP_TOKEN: ${{ secrets.SEMGREP_APP_TOKEN }}
|
data/.gitignore
CHANGED
data/.semgrepignore
ADDED
data/.shiprc
ADDED
data/CHANGELOG.md
CHANGED
|
@@ -1,12 +1,53 @@
|
|
|
1
1
|
# Change Log
|
|
2
2
|
|
|
3
|
+
## [v3.2.0](https://github.com/auth0/omniauth-auth0/tree/v3.2.0) (2023-07-14)
|
|
4
|
+
[Full Changelog](https://github.com/auth0/omniauth-auth0/compare/v3.1.0...v3.2.0)
|
|
5
|
+
|
|
6
|
+
**Added**
|
|
7
|
+
- [SDK-4410] Support Organization Name in JWT validation [\#184](https://github.com/auth0/omniauth-auth0/pull/184) ([stevehobbsdev](https://github.com/stevehobbsdev))
|
|
8
|
+
|
|
9
|
+
**Fixed**
|
|
10
|
+
- fix: upgrade to Sinatra 3 and use Rack::Session::Cookie in tests [\#165](https://github.com/auth0/omniauth-auth0/pull/165) ([stevehobbsdev](https://github.com/stevehobbsdev))
|
|
11
|
+
|
|
12
|
+
## [v3.1.1](https://github.com/auth0/omniauth-auth0/tree/v3.1.1) (2023-03-01)
|
|
13
|
+
[Full Changelog](https://github.com/auth0/omniauth-auth0/compare/v3.1.0...v3.1.1)
|
|
14
|
+
|
|
15
|
+
**Fixed**
|
|
16
|
+
- fix: upgrade to Sinatra 3 and use Rack::Session::Cookie in tests [\#165](https://github.com/auth0/omniauth-auth0/pull/165) ([stevehobbsdev](https://github.com/stevehobbsdev))
|
|
17
|
+
|
|
18
|
+
## [v3.1.0](https://github.com/auth0/omniauth-auth0/tree/v3.1.0) (2022-11-04)
|
|
19
|
+
|
|
20
|
+
[Full Changelog](https://github.com/auth0/omniauth-auth0/compare/v3.0.0...v3.1.0)
|
|
21
|
+
|
|
22
|
+
**Added**
|
|
23
|
+
|
|
24
|
+
- Add ui_locales to permitted params [\#135](https://github.com/auth0/omniauth-auth0/pull/135) ([martijn](https://github.com/martijn))
|
|
25
|
+
|
|
26
|
+
**Changed**
|
|
27
|
+
|
|
28
|
+
- Store plain Hash in session['authorize_params'] [\#150](https://github.com/auth0/omniauth-auth0/pull/150) ([santry](https://github.com/santry))
|
|
29
|
+
- Redesign readme to match new style [\#148](https://github.com/auth0/omniauth-auth0/pull/148) ([stevehobbsdev](https://github.com/stevehobbsdev))
|
|
30
|
+
|
|
31
|
+
**Fixed**
|
|
32
|
+
|
|
33
|
+
- Fix authentication hash link in code sample [\#153](https://github.com/auth0/omniauth-auth0/pull/153) ([ewanharris](https://github.com/ewanharris))
|
|
34
|
+
|
|
35
|
+
**Security**
|
|
36
|
+
|
|
37
|
+
- [Snyk] Fix for 1 vulnerabilities [\#149](https://github.com/auth0/omniauth-auth0/pull/149) ([snyk-bot](https://github.com/snyk-bot))
|
|
38
|
+
- Bump addressable from 2.7.0 to 2.8.0 [\#133](https://github.com/auth0/omniauth-auth0/pull/133) ([dependabot[bot]](https://github.com/apps/dependabot))
|
|
39
|
+
- [Snyk] Security upgrade webmock from 3.12.2 to 3.12.2 [\#134](https://github.com/auth0/omniauth-auth0/pull/134) ([snyk-bot](https://github.com/snyk-bot))
|
|
40
|
+
|
|
3
41
|
## [v3.0.0](https://github.com/auth0/omniauth-auth0/tree/v3.0.0) (2021-04-14)
|
|
42
|
+
|
|
4
43
|
Version 3.0 introduces [Omniauth v2.0](https://github.com/omniauth/omniauth/releases/tag/v2.0.0) which addresses [CVE-2015-9284](https://nvd.nist.gov/vuln/detail/CVE-2015-9284). Omniauth now defaults to only allow `POST` as the allowed request_phase method. This was previously handled through the recommended [mitigation](https://github.com/omniauth/omniauth/wiki/Resolving-CVE-2015-9284) using the `omniauth-rails_csrf_protection v0.x.x` gem to provide CSRF protection.
|
|
5
44
|
|
|
6
45
|
### Upgrading to omniauth-rails_csrf_protection v1.0.0
|
|
46
|
+
|
|
7
47
|
If you are using `omniauth-rails_csrf_protection` to provide CSRF protection, you will need to be upgrade to `1.x.x`.
|
|
8
48
|
|
|
9
49
|
### BREAKING CHANGES
|
|
50
|
+
|
|
10
51
|
Now that OmniAuth now defaults to only `POST` as the allowed request_phase method, if you aren't already, you will need to convert any login links to use [form helpers](https://api.rubyonrails.org/classes/ActionView/Helpers/FormHelper.html#method-i-form_for) with the `POST` method.
|
|
11
52
|
|
|
12
53
|
```html+ruby
|
|
@@ -26,10 +67,11 @@ Now that OmniAuth now defaults to only `POST` as the allowed request_phase metho
|
|
|
26
67
|
```
|
|
27
68
|
|
|
28
69
|
### Allowing GET Requests
|
|
70
|
+
|
|
29
71
|
In the scenario you absolutely must use GET requests as an allowed request method for authentication, you can override the protection provided with the following config override:
|
|
30
72
|
|
|
31
73
|
```ruby
|
|
32
|
-
# Allowing GET requests will expose you to CVE-2015-9284
|
|
74
|
+
# Allowing GET requests will expose you to CVE-2015-9284
|
|
33
75
|
OmniAuth.config.allowed_request_methods = [:get, :post]
|
|
34
76
|
```
|
|
35
77
|
|
|
@@ -38,28 +80,32 @@ OmniAuth.config.allowed_request_methods = [:get, :post]
|
|
|
38
80
|
[Full Changelog](https://github.com/auth0/omniauth-auth0/compare/v2.5.0...v2.6.0)
|
|
39
81
|
|
|
40
82
|
**Added**
|
|
41
|
-
|
|
42
|
-
-
|
|
83
|
+
|
|
84
|
+
- Org Support [SDK-2395] [\#124](https://github.com/auth0/omniauth-auth0/pull/124) ([davidpatrick](https://github.com/davidpatrick))
|
|
85
|
+
- Add login_hint to permitted params [\#123](https://github.com/auth0/omniauth-auth0/pull/123) ([Roriz](https://github.com/Roriz))
|
|
43
86
|
|
|
44
87
|
## [v2.5.0](https://github.com/auth0/omniauth-auth0/tree/v2.5.0) (2021-01-21)
|
|
45
88
|
|
|
46
89
|
[Full Changelog](https://github.com/auth0/omniauth-auth0/compare/v2.4.2...v2.5.0)
|
|
47
90
|
|
|
48
91
|
**Added**
|
|
92
|
+
|
|
49
93
|
- Parsing claims from the id_token [\#120](https://github.com/auth0/omniauth-auth0/pull/120) ([davidpatrick](https://github.com/davidpatrick))
|
|
50
94
|
|
|
51
95
|
**Changed**
|
|
96
|
+
|
|
52
97
|
- Setup build matrix in CI [\#116](https://github.com/auth0/omniauth-auth0/pull/116) ([dmathieu](https://github.com/dmathieu))
|
|
53
98
|
|
|
54
99
|
**Fixed**
|
|
55
|
-
- Fixes params passed to authorize [\#119](https://github.com/auth0/omniauth-auth0/pull/119) ([davidpatrick](https://github.com/davidpatrick))
|
|
56
100
|
|
|
101
|
+
- Fixes params passed to authorize [\#119](https://github.com/auth0/omniauth-auth0/pull/119) ([davidpatrick](https://github.com/davidpatrick))
|
|
57
102
|
|
|
58
103
|
## [v2.4.2](https://github.com/auth0/omniauth-auth0/tree/v2.4.2) (2021-01-19)
|
|
59
104
|
|
|
60
105
|
[Full Changelog](https://github.com/auth0/omniauth-auth0/compare/v2.4.1...v2.4.2)
|
|
61
106
|
|
|
62
107
|
**Fixed**
|
|
108
|
+
|
|
63
109
|
- Lock Omniauth to 1.9 in gemspec
|
|
64
110
|
|
|
65
111
|
## [v2.4.1](https://github.com/auth0/omniauth-auth0/tree/v2.4.1) (2020-10-08)
|
|
@@ -67,22 +113,23 @@ OmniAuth.config.allowed_request_methods = [:get, :post]
|
|
|
67
113
|
[Full Changelog](https://github.com/auth0/omniauth-auth0/compare/v2.4.0...v2.4.1)
|
|
68
114
|
|
|
69
115
|
**Fixed**
|
|
70
|
-
- Verify the JWT Signature [\#109](https://github.com/auth0/omniauth-auth0/pull/109) ([jimmyjames](https://github.com/jimmyjames))
|
|
71
116
|
|
|
117
|
+
- Verify the JWT Signature [\#109](https://github.com/auth0/omniauth-auth0/pull/109) ([jimmyjames](https://github.com/jimmyjames))
|
|
72
118
|
|
|
73
119
|
## [v2.4.0](https://github.com/auth0/omniauth-auth0/tree/v2.4.0) (2020-09-22)
|
|
74
120
|
|
|
75
121
|
[Full Changelog](https://github.com/auth0/omniauth-auth0/compare/v2.3.1...v2.4.0)
|
|
76
122
|
|
|
77
123
|
**Security**
|
|
124
|
+
|
|
78
125
|
- Bump rack from 2.2.2 to 2.2.3 [\#107](https://github.com/auth0/omniauth-auth0/pull/107) ([dependabot](https://github.com/dependabot))
|
|
79
126
|
- Update dependencies [\#100](https://github.com/auth0/omniauth-auth0/pull/100) ([Albalmaceda](https://github.com/Albalmaceda))
|
|
80
127
|
|
|
81
128
|
**Added**
|
|
129
|
+
|
|
82
130
|
- Add support for screen_hint=signup param [\#103](https://github.com/auth0/omniauth-auth0/pull/103) ([bbean86](https://github.com/bbean86))
|
|
83
131
|
- Add support for `connection_scope` in params [\#99](https://github.com/auth0/omniauth-auth0/pull/99) ([felixclack](https://github.com/felixclack))
|
|
84
132
|
|
|
85
|
-
|
|
86
133
|
## [v2.3.1](https://github.com/auth0/omniauth-auth0/tree/v2.3.1) (2020-03-27)
|
|
87
134
|
|
|
88
135
|
[Full Changelog](https://github.com/auth0/omniauth-auth0/compare/v2.3.0...v2.3.1)
|
|
@@ -93,29 +140,37 @@ OmniAuth.config.allowed_request_methods = [:get, :post]
|
|
|
93
140
|
- Fix "NameError: uninitialized constant OmniAuth::Auth0::TokenValidationError" [\#96](https://github.com/auth0/omniauth-auth0/pull/96) ([stefanwork](https://github.com/stefanwork))
|
|
94
141
|
|
|
95
142
|
## [v2.3.0](https://github.com/auth0/omniauth-auth0/tree/v2.3.0) (2020-03-06)
|
|
143
|
+
|
|
96
144
|
[Full Changelog](https://github.com/auth0/omniauth-auth0/compare/v2.2.0...v2.3.0)
|
|
97
145
|
|
|
98
146
|
**Added**
|
|
147
|
+
|
|
99
148
|
- Improved OIDC Compliance [\#92](https://github.com/auth0/omniauth-auth0/pull/92) ([davidpatrick](https://github.com/davidpatrick))
|
|
100
149
|
|
|
101
150
|
## [v2.2.0](https://github.com/auth0/omniauth-auth0/tree/v2.2.0) (2018-04-18)
|
|
151
|
+
|
|
102
152
|
[Full Changelog](https://github.com/auth0/omniauth-auth0/compare/v2.1.0...v2.2.0)
|
|
103
153
|
|
|
104
154
|
**Closed issues**
|
|
155
|
+
|
|
105
156
|
- It supports custom domain? [\#71](https://github.com/auth0/omniauth-auth0/issues/71)
|
|
106
157
|
- Valid Login, No Details: email=nil image=nil name="github|38257089" nickname=nil [\#70](https://github.com/auth0/omniauth-auth0/issues/70)
|
|
107
158
|
|
|
108
159
|
**Added**
|
|
160
|
+
|
|
109
161
|
- Custom issuer [\#77](https://github.com/auth0/omniauth-auth0/pull/77) ([ryan-rosenfeld](https://github.com/ryan-rosenfeld))
|
|
110
162
|
- Add telemetry to token endpoint [\#74](https://github.com/auth0/omniauth-auth0/pull/74) ([joshcanhelp](https://github.com/joshcanhelp))
|
|
111
163
|
|
|
112
164
|
**Changed**
|
|
165
|
+
|
|
113
166
|
- Remove telemetry from authorize URL [\#75](https://github.com/auth0/omniauth-auth0/pull/75) ([joshcanhelp](https://github.com/joshcanhelp))
|
|
114
167
|
|
|
115
168
|
## [v2.1.0](https://github.com/auth0/omniauth-auth0/tree/v2.1.0) (2018-10-30)
|
|
169
|
+
|
|
116
170
|
[Full Changelog](https://github.com/auth0/omniauth-auth0/compare/v2.0.0...v2.1.0)
|
|
117
171
|
|
|
118
172
|
**Closed issues**
|
|
173
|
+
|
|
119
174
|
- URL should be spelled uppercase outside of code [\#64](https://github.com/auth0/omniauth-auth0/issues/64)
|
|
120
175
|
- Add prompt=none authorization param handler [\#58](https://github.com/auth0/omniauth-auth0/issues/58)
|
|
121
176
|
- Could not find a valid mapping for path "/auth/oauth2/callback" [\#56](https://github.com/auth0/omniauth-auth0/issues/56)
|
|
@@ -124,18 +179,22 @@ OmniAuth.config.allowed_request_methods = [:get, :post]
|
|
|
124
179
|
- /auth/:provider route not registered? [\#47](https://github.com/auth0/omniauth-auth0/issues/47)
|
|
125
180
|
|
|
126
181
|
**Added**
|
|
182
|
+
|
|
127
183
|
- Add ID token validation [\#62](https://github.com/auth0/omniauth-auth0/pull/62) ([joshcanhelp](https://github.com/joshcanhelp))
|
|
128
184
|
- Silent authentication [\#59](https://github.com/auth0/omniauth-auth0/pull/59) ([batalla3692](https://github.com/batalla3692))
|
|
129
185
|
- Pass connection parameter to auth0 [\#54](https://github.com/auth0/omniauth-auth0/pull/54) ([tomgi](https://github.com/tomgi))
|
|
130
186
|
|
|
131
187
|
**Changed**
|
|
188
|
+
|
|
132
189
|
- Update to omniauth-oauth2 [\#55](https://github.com/auth0/omniauth-auth0/pull/55) ([chills42](https://github.com/chills42))
|
|
133
190
|
|
|
134
191
|
**Fixed**
|
|
192
|
+
|
|
135
193
|
- Fix Rubocop errors [\#66](https://github.com/auth0/omniauth-auth0/pull/66) ([joshcanhelp](https://github.com/joshcanhelp))
|
|
136
194
|
- Fix minute bug in README.md [\#63](https://github.com/auth0/omniauth-auth0/pull/63) ([rahuldess](https://github.com/rahuldess))
|
|
137
195
|
|
|
138
196
|
## [v2.0.0](https://github.com/auth0/omniauth-auth0/tree/v2.0.0) (2017-01-25)
|
|
197
|
+
|
|
139
198
|
[Full Changelog](https://github.com/auth0/omniauth-auth0/compare/v1.4.1...v2.0.0)
|
|
140
199
|
|
|
141
200
|
Updated library to handle OIDC conformant clients and OAuth2 features in Auth0.
|
|
@@ -153,31 +212,36 @@ The `info` object will use the [OmniAuth schema](https://github.com/omniauth/omn
|
|
|
153
212
|
Also in `extra` will have in `raw_info` the full /userinfo response.
|
|
154
213
|
|
|
155
214
|
**Fixed**
|
|
215
|
+
|
|
156
216
|
- Use image attribute of omniauth instead of picture [\#45](https://github.com/auth0/omniauth-auth0/pull/45) ([hzalaz](https://github.com/hzalaz))
|
|
157
|
-
- Rework strategy to handle OAuth and OIDC
|
|
217
|
+
- Rework strategy to handle OAuth and OIDC [\#44](https://github.com/auth0/omniauth-auth0/pull/44) ([hzalaz](https://github.com/hzalaz))
|
|
158
218
|
- lock v10 update, dependencies update [\#41](https://github.com/auth0/omniauth-auth0/pull/41) ([Amialc](https://github.com/Amialc))
|
|
159
219
|
|
|
160
220
|
## [v1.4.2](https://github.com/auth0/omniauth-auth0/tree/v1.4.2) (2016-06-13)
|
|
221
|
+
|
|
161
222
|
[Full Changelog](https://github.com/auth0/omniauth-auth0/compare/v1.4.1...v1.4.2)
|
|
162
223
|
|
|
163
224
|
**Added**
|
|
225
|
+
|
|
164
226
|
- Link to OmniAuth site [\#36](https://github.com/auth0/omniauth-auth0/pull/36) ([jghaines](https://github.com/jghaines))
|
|
165
227
|
- add ssl fix to RoR example [\#31](https://github.com/auth0/omniauth-auth0/pull/31) ([Amialc](https://github.com/Amialc))
|
|
166
228
|
- Update LICENSE [\#17](https://github.com/auth0/omniauth-auth0/pull/17) ([aguerere](https://github.com/aguerere))
|
|
167
229
|
|
|
168
230
|
**Changed**
|
|
231
|
+
|
|
169
232
|
- Update lock to version 9 [\#34](https://github.com/auth0/omniauth-auth0/pull/34) ([Annyv2](https://github.com/Annyv2))
|
|
170
233
|
- Update Gemfile [\#22](https://github.com/auth0/omniauth-auth0/pull/22) ([Annyv2](https://github.com/Annyv2))
|
|
171
234
|
- Update lock [\#15](https://github.com/auth0/omniauth-auth0/pull/15) ([Annyv2](https://github.com/Annyv2))
|
|
172
235
|
|
|
173
236
|
**Fixed**
|
|
237
|
+
|
|
174
238
|
- Fix setup [\#38](https://github.com/auth0/omniauth-auth0/pull/38) ([deepak](https://github.com/deepak))
|
|
175
239
|
- Added missing instruction [\#30](https://github.com/auth0/omniauth-auth0/pull/30) ([Annyv2](https://github.com/Annyv2))
|
|
176
240
|
- Fixes undefined Auth0Lock issue [\#28](https://github.com/auth0/omniauth-auth0/pull/28) ([Annyv2](https://github.com/Annyv2))
|
|
177
241
|
- Update Readme [\#27](https://github.com/auth0/omniauth-auth0/pull/27) ([Annyv2](https://github.com/Annyv2))
|
|
178
242
|
|
|
179
|
-
|
|
180
243
|
## [v1.4.1](https://github.com/auth0/omniauth-auth0/tree/v1.4.1) (2015-11-18)
|
|
244
|
+
|
|
181
245
|
[Full Changelog](https://github.com/auth0/omniauth-auth0/compare/v1.4.0...v1.4.1)
|
|
182
246
|
|
|
183
247
|
**Merged pull requests:**
|
|
@@ -188,6 +252,7 @@ Also in `extra` will have in `raw_info` the full /userinfo response.
|
|
|
188
252
|
- Add nested module in version.rb [\#9](https://github.com/auth0/omniauth-auth0/pull/9) ([l4u](https://github.com/l4u))
|
|
189
253
|
|
|
190
254
|
## [v1.4.0](https://github.com/auth0/omniauth-auth0/tree/v1.4.0) (2015-06-01)
|
|
255
|
+
|
|
191
256
|
**Merged pull requests:**
|
|
192
257
|
|
|
193
258
|
- Client headers [\#8](https://github.com/auth0/omniauth-auth0/pull/8) ([benschwarz](https://github.com/benschwarz))
|
|
@@ -196,6 +261,4 @@ Also in `extra` will have in `raw_info` the full /userinfo response.
|
|
|
196
261
|
- Update README.md [\#3](https://github.com/auth0/omniauth-auth0/pull/3) ([pose](https://github.com/pose))
|
|
197
262
|
- Fix Markdown typo [\#2](https://github.com/auth0/omniauth-auth0/pull/2) ([dentarg](https://github.com/dentarg))
|
|
198
263
|
|
|
199
|
-
|
|
200
|
-
|
|
201
|
-
\* *This Change Log was automatically generated by [github_changelog_generator](https://github.com/skywinder/Github-Changelog-Generator)*
|
|
264
|
+
\* _This Change Log was automatically generated by [github_changelog_generator](https://github.com/skywinder/Github-Changelog-Generator)_
|