omniauth-azure-activedirectory-v2 0.1.1 → 2.1.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 80a76c16a7b809e84e27846806c3f8aa685ef765f7abc836006d17b602223a28
-  data.tar.gz: 1c6d60e594ee6002bfdf958c5d6db5a14f4f3dec4f76d71cd0ed65df1cbbfb10
+  metadata.gz: 82d3c5122483452eb3e9b37dba4ae4faab9ccad50e343e8f91834ee87771bcb2
+  data.tar.gz: 75cb855f9c40ea1d0d3186dc3282ad89e6054c1da576e8b9d5e5983a5b617a85
 SHA512:
-  metadata.gz: 125ae35a66c2a79a19cca02e628d0e825d4835ff2e82d74ba2f9da604eb80edd58bb8119ff4bab51a76be1240b8646155c2c89e33d0f3f34486dcbfce9cf7347
-  data.tar.gz: cdf8f67104262494e48d50ed872a30bc6963c0ebbb8ebbd4c251d9b0ea50133bd897bf3a417ab4c0eaff5e3ad63ac4b7812de07599ff6c1bf425871f7a2b4686
+  metadata.gz: d26b6339a494b85458791b95b52302456f34930d1ea9dd445fdb24b3eda589602ffb5088bfa2ec8c37a71238317c82759dd07b30f0ae4975c2b295bc3ca6e5eb
+  data.tar.gz: 6d1ca0c3c8e6946c2a40cbf3939ab6da98e6f6004a600f09b5096d8a2dc0e65643d0b2028d80c5ce91ca5d7f29998c1cec34d4989b6d01d9c070008dfea1e1d0

data/CHANGELOG.md

@@ -0,0 +1,51 @@
+# Change Log
+
+## v2.1.0 (2023-09-16)
+
+[Implements](https://github.com/RIPAGlobal/omniauth-azure-activedirectory-v2/pull/19) support for custom policies when using Microsoft Azure AD - thanks @stevenchanin!
+
+## v2.0.2 (2023-03-31)
+
+[Fixes](https://github.com/RIPAGlobal/omniauth-azure-activedirectory-v2/pull/16) inability to override prompt in authorisation parameters - thanks @lamroger!
+
+## v2.0.1 (2023-01-11)
+
+Renames:
+
+* RIPGlobal -> RIPAGlobal
+* Omniauth -> OmniAuth
+
+_No functional change._
+
+## v2.0.0 (2022-09-14)
+
+Makes compatible with OmniAuth 2 and requires it.
+
+Note: https://github.com/RIPAGlobal/omniauth-azure-activedirectory-v2/pull/6 for reasoning - Thanks @jessieay
+
+_Major version bump as no longer supports OmniAuth 1._
+
+## v1.0.0 (2020-09-25)
+
+Removes use of the https://graph.microsoft.com/v1.0/me API.
+
+* One of the key differences for the V2 API vs V1 is the differences
+  between who can sign with the addition of Personal Accounts - see:
+  https://nicolgit.github.io/AzureAD-Endopoint-V1-vs-V2-comparison/
+
+  - In testing we found that these accounts may not have access to
+    this endpoint
+  - All the data provided in `info` exists in the JWT anyway, so this
+    cuts down on API calls
+
+* Conforms to the OmniAuth Auth Hash Schema (1.0 and later) - see:
+  https://github.com/omniauth/omniauth/wiki/Auth-Hash-Schema
+
+  - Expose `raw_info`
+  - Remove `id` from `info`
+    - *NB: This could be a breaking change for some, but most will
+           already be using the correct property name of `uid`.*
+
+## v0.1.1 (2020-09-23)
+
+- First release.

data/CODE_OF_CONDUCT.md

@@ -55,7 +55,7 @@ further defined and clarified by project maintainers.
 ## Enforcement
 
 Instances of abusive, harassing, or otherwise unacceptable behavior may be
-reported by contacting the project team at jesse.whitham@gmail.com. All
+reported by contacting the project team at dev@ripaglobal.com. All
 complaints will be reviewed and investigated and will result in a response that
 is deemed necessary and appropriate to the circumstances. The project team is
 obligated to maintain confidentiality with regard to the reporter of an incident.

data/README.md

@@ -1,11 +1,15 @@
-# Omniauth::Azure::Activedirectory::V2
+# OmniAuth::Azure::Activedirectory::V2
+
+[![Gem Version](https://badge.fury.io/rb/omniauth-azure-activedirectory-v2.svg)](https://badge.fury.io/rb/omniauth-azure-activedirectory-v2)
+[![Build Status](https://app.travis-ci.com/RIPAGlobal/omniauth-azure-activedirectory-v2.svg?branch=master)](https://app.travis-ci.com/github/RIPAGlobal/omniauth-azure-activedirectory-v2)
+[![License](https://img.shields.io/github/license/RIPAGlobal/omniauth-azure-activedirectory-v2.svg)](LICENSE.md)
 
 OAuth 2 authentication with [Azure ActiveDirectory's V2 API](https://docs.microsoft.com/en-us/azure/active-directory/develop/v2-overview). Rationale:
 
 * https://github.com/marknadig/omniauth-azure-oauth2 is no longer maintained.
 * https://github.com/marknadig/omniauth-azure-oauth2/pull/29 contains important additions.
 
-This gem combines the two.
+This gem combines the two and makes some changes to support the full V2 API.
 
 The ActiveDirectory V1 auth API used OpenID Connect. If you need this, a gem from Microsoft [is available here](https://github.com/AzureAD/omniauth-azure-activedirectory), but seems to be abandoned.
 
@@ -31,15 +35,152 @@ Or install it yourself as:
 
 ## Usage
 
-See https://github.com/marknadig/omniauth-azure-oauth2 for background information.
+Please start by reading https://github.com/marknadig/omniauth-azure-oauth2 for basic configuration and background information. Note that with this gem, you must use strategy name `azure_activedirectory_v2` rather than `azure_oauth2`. Additional configuration information is given below.
+
+### Configuration
+
+#### With `OmniAuth::Builder`
+
+You can do something like this for a static / fixed configuration:
+
+```ruby
+use OmniAuth::Builder do
+  provider(
+    :azure_activedirectory_v2,
+    {
+      client_id:     ENV['AZURE_CLIENT_ID'],
+      client_secret: ENV['AZURE_CLIENT_SECRET']
+    }
+  )
+end
+```
+
+...or, if using a custom provider class (called `YouTenantProvider` in this example):
+
+```ruby
+use OmniAuth::Builder do
+  provider(
+    :azure_activedirectory_v2,
+    YouTenantProvider
+  )
+end
+```
+
+#### With Devise
+
+In your `config/initializers/devise.rb` file you can do something like this for a static / fixed configuration:
+
+```ruby
+config.omniauth(
+  :azure_activedirectory_v2,
+  {
+    client_id:     ENV['AZURE_CLIENT_ID'],
+    client_secret: ENV['AZURE_CLIENT_SECRET']
+  }
+)
+```
+
+...or, if using a custom provider class (called `YouTenantProvider` in this example):
+
+```ruby
+config.omniauth(
+  :azure_activedirectory_v2,
+  YouTenantProvider
+)
+```
+
+### Configuration options
+
+All of the items listed below are optional, unless noted otherwise. They can be provided either in a static configuration Hash as shown in examples above, or via *read accessor instance methods* in a provider class (more on this later).
+
+| Option | Use |
+| ------ | --- |
+| `client_id`        | **Mandatory.** Client ID for the 'application' (integration) configured on the Azure side. Found via the Azure UI. |
+| `client_secret`    | **Mandatory.** Client secret for the 'application' (integration) configured on the Azure side. Found via the Azure UI. |
+| `base_azure_url`   | Location of Azure login page, for specialised requirements; default is `OmniAuth::Strategies::AzureActivedirectoryV2::BASE_AZURE_URL` (at the time of writing, this is `https://login.microsoftonline.com`). |
+| `tenant_id`        | _Azure_ tenant ID for multi-tenanted use. Default is `common`. Forms part of the Azure OAuth URL - `{base}/{tenant_id}/oauth2/v2.0/...` |
+| `custom_policy`    | _Azure_ custom policy. Default is nil. Forms part of the Azure Token URL - `{base}/{tenant_id}/{custom_policy}/oauth2/v2.0/...` |
+| `authorize_params` | Additional parameters passed as URL query data in the initial OAuth redirection to Microsoft. See below for more. Empty Hash default. |
+| `domain_hint`      | If defined, sets (overwriting, if already present) `domain_hint` inside `authorize_params`. Default `nil` / none. |
+| `scope`            | If defined, sets (overwriting, if already present) `scope` inside `authorize_params`. Default is `OmniAuth::Strategies::AzureActivedirectoryV2::DEFAULT_SCOPE` (at the time of writing, this is `'openid profile email'`). |
+
+In addition, as a special case, if the request URL contains a query parameter `prompt`, then this will be written into `authorize_params` under that key, overwriting if present any other value there. Note that this comes from the current request URL at the time OAuth flow is commencing, _not_ via static options Hash data or via a custom provider class - but you _could_ just as easily set `scope` inside a custom `authorize_params` returned from a provider class, as shown in an example later; the request URL query mechanism is just another way of doing the same thing.
+
+#### Explaining `custom_policy`
+
+In the documentation for [requesting a token](https://learn.microsoft.com/en-us/azure/active-directory-b2c/access-tokens#request-a-token), Microsoft indicate that they want the name of custom policies to be given in the URL rather than in the body of the request:
+
+```
+POST <tenant-name>.b2clogin.com/<tenant-name>.onmicrosoft.com/<policy-name>/oauth2/v2.0/token
+```
+
+When the underlying `oath2` gem creates the request for getting a token via POST, it places all `params` (which would include anything you've provided in the normal configuration to name your custom policy) in the `body` of the request. Unfortunately, Microsoft ignores custom policies in the body and only looks for them in the URL.
+
+If you set a `custom_policy` in your configuration, it will be included in the URL between the `tenant_id` and the remaining parts of the path (`/oauth2/v2.0/token`).
+
+#### Explaining `authorize_params`
+
+The `authorize_params` hash-like object contains key-value pairs which are transformed into URL query string data and added to existing standard OAuth query data in the URL used for the initial redirection from your web site, to the Microsoft Azure AD login page, at the start of OAuth flow. You can find these listed some way down the table just below an OAuth URL example at:
+
+* https://learn.microsoft.com/en-us/azure/active-directory/develop/v2-oauth2-auth-code-flow#code-try-1
+
+...looking for in particular items from `prompt` onwards.
+
+#### Dynamic options via a custom provider class
+
+Documentation mentioned earlier at https://github.com/marknadig/omniauth-azure-oauth2#usage gives an example of setting tenant ID dynamically via a custom provider class. We can also use that class in other ways. For example, let's rewrite it thus:
+
+```ruby
+class YouTenantProvider
+  def initialize(strategy)
+    @strategy = strategy
+  end
+
+  def client_id
+    ENV['AZURE_CLIENT_ID']
+  end
+
+  def client_secret
+    ENV['AZURE_CLIENT_SECRET']
+  end
+
+  def authorize_params
+    ap = {}
+
+    if @strategy.request && @strategy.request.params['login_hint']
+      ap['login_hint'] = @strategy.request.params['login_hint']
+    end
+
+    return ap
+  end
+end
+```
+
+In this example, we're providing custom `authorize_params`. You can just return a standard Ruby Hash here, using lower case String or Symbol keys. The `strategy` value given to the initializer is an instance of [`OmniAuth::StrategiesAzureActivedirectoryV2`](https://github.com/RIPAGlobal/omniauth-azure-activedirectory-v2/blob/master/lib/omniauth/strategies/azure_activedirectory_v2.rb) which is a subclass of [`OmniAuth::Strategies::OAuth2`](https://www.rubydoc.info/gems/omniauth-oauth2/1.8.0/OmniAuth/Strategies/OAuth2), but that's not all that helpful! What's more useful is to know that **the Rails `request` object is available via `@strategy.request` and, likewise, the session store via `@strategy.session`**. This gives you a lot of flexibility for responding to an inbound request or user session, varying the parameters used for the Azure OAuth flow.
+
+In method `#authorize_params` above, the request object is used to look for a `login_hint` query string entry, set in whichever view(s) is/are presented by your application for use when your users need to be redirected to the OmniAuth controller in order to kick off OAuth with Azure. The value is copied into the `authorize_params` Hash. Earlier, it was mentioned that there was a special case of `prompt` being pulled from the request URL query data, but that this could also be done via a custom provider - here, you can see how; just check `@strategy.request.params['prompt']` and copy that into `authorize_params` if preset.
+
+> **NB:** Naming things is hard! The predecessor gem used the name `YouTenantProvider` since it was focused on custom tenant provision, but if using this in a more generic way, perhaps consider a more generic name such as, say, `CustomOmniAuthAzureProvider`.
 
 
 
 ## Contributing
 
-Bug reports and pull requests are welcome on GitHub at https://github.com/RIPGlobal/omniauth-azure-activedirectory-v2. This project is intended to be a safe, welcoming space for collaboration so contributors must adhere to the [code of conduct](https://github.com/[USERNAME]/omniauth-azure-activedirectory-v2/blob/master/CODE_OF_CONDUCT.md).
+Bug reports and pull requests are welcome on GitHub at https://github.com/RIPAGlobal/omniauth-azure-activedirectory-v2. This project is intended to be a safe, welcoming space for collaboration so contributors must adhere to the [code of conduct](https://github.com/RIPAGlobal/omniauth-azure-activedirectory-v2/blob/master/CODE_OF_CONDUCT.md).
+
+### Getting running
+
+* Fork the repository
+* Check out your fork
+* `cd` into the repository
+* `bin/setup`
+* `bundle exec rspec` to make sure all the tests run
 
+### Making changes
 
+* Make your change
+* Add tests and check that `bundle exec rspec` still runs successfully
+* For new features (rather than bug fixes), update `README.md` with details
 
 ## License
 
@@ -49,4 +190,4 @@ The gem is available as open source under the terms of the [MIT License](https:/
 
 ## Code of Conduct
 
-Everyone interacting in this project's codebases, issue trackers, chat rooms and mailing lists must follow the [code of conduct](https://github.com/[USERNAME]/omniauth-azure-activedirectory-v2/blob/master/CODE_OF_CONDUCT.md).
+Everyone interacting in this project's codebases, issue trackers, chat rooms and mailing lists must follow the [code of conduct](https://github.com/RIPAGlobal/omniauth-azure-activedirectory-v2/blob/master/CODE_OF_CONDUCT.md).

data/lib/omniauth/azure_activedirectory_v2/version.rb

@@ -1,8 +1,9 @@
-module Omniauth
+module OmniAuth
   module Azure
     module Activedirectory
       module V2
-        VERSION = "0.1.1"
+        VERSION = "2.1.0"
+        DATE    = "2023-09-16"
       end
     end
   end

data/lib/omniauth/strategies/azure_activedirectory_v2.rb

@@ -1,3 +1,5 @@
+# frozen_string_literal: true
+
 require 'omniauth-oauth2'
 
 module OmniAuth
@@ -9,58 +11,105 @@ module OmniAuth
       option :tenant_provider, nil
 
       DEFAULT_SCOPE = 'openid profile email'
-      USER_INFO_URL = 'https://graph.microsoft.com/v1.0/me'
 
       # tenant_provider must return client_id, client_secret and optionally tenant_id and base_azure_url
       args [:tenant_provider]
 
       def client
-        if options.tenant_provider
-          provider = options.tenant_provider.new(self)
+        provider = if options.tenant_provider
+          options.tenant_provider.new(self)
         else
-          provider = options  # if pass has to config, get mapped right on to options
+          options
         end
 
         options.client_id = provider.client_id
         options.client_secret = provider.client_secret
         options.tenant_id =
-            provider.respond_to?(:tenant_id) ? provider.tenant_id : 'common'
+          provider.respond_to?(:tenant_id) ? provider.tenant_id : 'common'
         options.base_azure_url =
-            provider.respond_to?(:base_azure_url) ? provider.base_azure_url : BASE_AZURE_URL
+          provider.respond_to?(:base_azure_url) ? provider.base_azure_url : BASE_AZURE_URL
+
+        if provider.respond_to?(:authorize_params)
+          options.authorize_params = provider.authorize_params
+        end
+
+        if provider.respond_to?(:domain_hint) && provider.domain_hint
+          options.authorize_params.domain_hint = provider.domain_hint
+        end
+
+        if defined?(request) && request.params['prompt']
+          options.authorize_params.prompt = request.params['prompt']
+        end
+
+        options.authorize_params.scope = if provider.respond_to?(:scope) && provider.scope
+          provider.scope
+        else
+          DEFAULT_SCOPE
+        end
 
-        options.authorize_params = provider.authorize_params if provider.respond_to?(:authorize_params)
-        options.authorize_params.domain_hint = provider.domain_hint if provider.respond_to?(:domain_hint) && provider.domain_hint
-        options.authorize_params.prompt = request.params['prompt'] if defined? request && request.params['prompt']
-        options.authorize_params.scope = (provider.scope if provider.respond_to?(:scope) && provider.scope) || DEFAULT_SCOPE
+        options.custom_policy =
+          provider.respond_to?(:custom_policy) ? provider.custom_policy : nil
 
         options.client_options.authorize_url = "#{options.base_azure_url}/#{options.tenant_id}/oauth2/v2.0/authorize"
-        options.client_options.token_url = "#{options.base_azure_url}/#{options.tenant_id}/oauth2/v2.0/token"
+        options.client_options.token_url =
+          if options.custom_policy
+            "#{options.base_azure_url}/#{options.tenant_id}/#{options.custom_policy}/oauth2/v2.0/token"
+          else
+            "#{options.base_azure_url}/#{options.tenant_id}/oauth2/v2.0/token"
+          end
 
         super
       end
 
-      uid {
-        raw_info['id']
-      }
+      uid { raw_info['oid'] }
 
       info do
         {
-            name: raw_info['displayName'],
-            first_name: raw_info['givenName'],
-            last_name: raw_info['surname'],
-            email: raw_info['userPrincipalName'],
-            id: raw_info['id'],
+          name: raw_info['name'],
+          email: raw_info['email'] || raw_info['upn'],
+          nickname: raw_info['unique_name'],
+          first_name: raw_info['given_name'],
+          last_name: raw_info['family_name']
         }
       end
 
+      extra do
+        { raw_info: raw_info }
+      end
+
       def callback_url
-        full_host + script_name + callback_path
+        full_host + callback_path
       end
 
+      # https://docs.microsoft.com/en-us/azure/active-directory/develop/id-tokens
+      #
+      # Some account types from Microsoft seem to only have a decodable ID token,
+      # with JWT unable to decode the access token. Information is limited in those
+      # cases. Other account types provide an expanded set of data inside the auth
+      # token, which does decode as a JWT.
+      #
+      # Merge the two, allowing the expanded auth token data to overwrite the ID
+      # token data if keys collide, and use this as raw info.
+      #
       def raw_info
-        @raw_info ||= access_token.get(USER_INFO_URL).parsed
-      end
+        if @raw_info.nil?
+          id_token_data = begin
+            ::JWT.decode(access_token.params['id_token'], nil, false).first
+          rescue StandardError
+            {}
+          end
+          auth_token_data = begin
+            ::JWT.decode(access_token.token, nil, false).first
+          rescue StandardError
+            {}
+          end
+
+          id_token_data.merge!(auth_token_data)
+          @raw_info = id_token_data
+        end
 
+        @raw_info
+      end
     end
   end
-end
+end

data/omniauth-azure-activedirectory-v2.gemspec

@@ -1,29 +1,49 @@
-require_relative 'lib/omniauth/azure_activedirectory_v2/version'
-
-Gem::Specification.new do |spec|
-  spec.name          = 'omniauth-azure-activedirectory-v2'
-  spec.version       = Omniauth::Azure::Activedirectory::V2::VERSION
-  spec.authors       = ['RIP Global']
-  spec.email         = ['dev@ripglobal.com']
-
-  spec.summary       = %q{OAuth 2 authentication with Azure ActiveDirectory's V2 API}
-  spec.homepage      = 'https://github.com/RIPGlobal/omniauth-azure-activedirectory-v2'
-  spec.license       = 'MIT'
-  spec.required_ruby_version = Gem::Requirement.new(">= 2.3.0")
-
-  spec.metadata['homepage_uri']    = spec.homepage
-  spec.metadata['source_code_uri'] = 'https://github.com/RIPGlobal/omniauth-azure-activedirectory-v2'
-  spec.metadata['bug_tracker_uri'] = 'https://github.com/RIPGlobal/omniauth-azure-activedirectory-v2/issues/'
-  spec.metadata['changelog_uri']   = 'https://github.com/RIPGlobal/omniauth-azure-activedirectory-v2/blob/master/CHANGELOG.md'
-
-  # Specify which files should be added to the gem when it is released.
-  # The `git ls-files -z` loads the files in the RubyGem that have been added into git.
-  spec.files         = Dir.chdir(File.expand_path('..', __FILE__)) do
-    `git ls-files -z`.split("\x0").reject { |f| f.match(%r{^(test|spec|features)/}) }
-  end
-  spec.bindir        = 'exe'
-  spec.executables   = spec.files.grep(%r{^exe/}) { |f| File.basename(f) }
-  spec.require_paths = ['lib']
-
-  spec.add_dependency 'omniauth-oauth2'
+# -*- encoding: utf-8 -*-
+# frozen_string_literal: true
+# stub: omniauth-azure-activedirectory-v2 1.0.0 ruby lib
+
+$:.push File.expand_path( '../lib', __FILE__ )
+require 'omniauth/azure_activedirectory_v2/version'
+
+# https://guides.rubygems.org/specification-reference/
+#
+Gem::Specification.new do |s|
+  s.name                  = 'omniauth-azure-activedirectory-v2'
+  s.version               = OmniAuth::Azure::Activedirectory::V2::VERSION
+  s.date                  = OmniAuth::Azure::Activedirectory::V2::DATE
+  s.summary               = 'OAuth 2 authentication with the Azure ActiveDirectory V2 API.'
+  s.authors               = [ 'RIPA Global'        ]
+  s.email                 = [ 'dev@ripaglobal.com' ]
+  s.licenses              = [ 'MIT'               ]
+  s.homepage              = 'https://github.com/RIPAGlobal/omniauth-azure-activedirectory-v2'
+
+  s.required_ruby_version = Gem::Requirement.new('>= 2.3.0')
+  s.require_paths         = ['lib']
+  s.bindir                = 'exe'
+  s.files                 = %w{
+    README.md
+    CHANGELOG.md
+    CODE_OF_CONDUCT.md
+    LICENSE.txt
+
+    Gemfile
+    bin/console
+    bin/setup
+
+    lib/omniauth-azure-activedirectory-v2.rb
+    lib/omniauth/azure_activedirectory_v2.rb
+    lib/omniauth/azure_activedirectory_v2/version.rb
+    lib/omniauth/strategies/azure_activedirectory_v2.rb
+
+    omniauth-azure-activedirectory-v2.gemspec
+  }
+
+  s.metadata = {
+    'homepage_uri'    => 'https://www.ripaglobal.com/',
+    'bug_tracker_uri' => 'https://github.com/RIPAGlobal/omniauth-azure-activedirectory-v2/issues/',
+    'changelog_uri'   => 'https://github.com/RIPAGlobal/omniauth-azure-activedirectory-v2/blob/master/CHANGELOG.md',
+    'source_code_uri' => 'https://github.com/RIPAGlobal/omniauth-azure-activedirectory-v2'
+  }
+
+  s.add_runtime_dependency('omniauth-oauth2', '~> 1.8')
 end

metadata

@@ -1,44 +1,41 @@
 --- !ruby/object:Gem::Specification
 name: omniauth-azure-activedirectory-v2
 version: !ruby/object:Gem::Version
-  version: 0.1.1
+  version: 2.1.0
 platform: ruby
 authors:
-- RIP Global
+- RIPA Global
 autorequire:
 bindir: exe
 cert_chain: []
-date: 2020-09-23 00:00:00.000000000 Z
+date: 2023-09-16 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: omniauth-oauth2
   requirement: !ruby/object:Gem::Requirement
     requirements:
-    - - ">="
+    - - "~>"
       - !ruby/object:Gem::Version
-        version: '0'
+        version: '1.8'
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
-    - - ">="
+    - - "~>"
       - !ruby/object:Gem::Version
-        version: '0'
+        version: '1.8'
 description:
 email:
-- dev@ripglobal.com
+- dev@ripaglobal.com
 executables: []
 extensions: []
 extra_rdoc_files: []
 files:
-- ".gitignore"
-- ".rspec"
-- ".travis.yml"
+- CHANGELOG.md
 - CODE_OF_CONDUCT.md
 - Gemfile
 - LICENSE.txt
 - README.md
-- Rakefile
 - bin/console
 - bin/setup
 - lib/omniauth-azure-activedirectory-v2.rb
@@ -46,14 +43,14 @@ files:
 - lib/omniauth/azure_activedirectory_v2/version.rb
 - lib/omniauth/strategies/azure_activedirectory_v2.rb
 - omniauth-azure-activedirectory-v2.gemspec
-homepage: https://github.com/RIPGlobal/omniauth-azure-activedirectory-v2
+homepage: https://github.com/RIPAGlobal/omniauth-azure-activedirectory-v2
 licenses:
 - MIT
 metadata:
-  homepage_uri: https://github.com/RIPGlobal/omniauth-azure-activedirectory-v2
-  source_code_uri: https://github.com/RIPGlobal/omniauth-azure-activedirectory-v2
-  bug_tracker_uri: https://github.com/RIPGlobal/omniauth-azure-activedirectory-v2/issues/
-  changelog_uri: https://github.com/RIPGlobal/omniauth-azure-activedirectory-v2/blob/master/CHANGELOG.md
+  homepage_uri: https://www.ripaglobal.com/
+  bug_tracker_uri: https://github.com/RIPAGlobal/omniauth-azure-activedirectory-v2/issues/
+  changelog_uri: https://github.com/RIPAGlobal/omniauth-azure-activedirectory-v2/blob/master/CHANGELOG.md
+  source_code_uri: https://github.com/RIPAGlobal/omniauth-azure-activedirectory-v2
 post_install_message:
 rdoc_options: []
 require_paths:
@@ -69,8 +66,8 @@ required_rubygems_version: !ruby/object:Gem::Requirement
     - !ruby/object:Gem::Version
       version: '0'
 requirements: []
-rubygems_version: 3.1.2
+rubygems_version: 3.4.4
 signing_key:
 specification_version: 4
-summary: OAuth 2 authentication with Azure ActiveDirectory's V2 API
+summary: OAuth 2 authentication with the Azure ActiveDirectory V2 API.
 test_files: []

data/.gitignore

@@ -1,16 +0,0 @@
-Gemfile.lock
-
-/.bundle/
-/.yardoc
-/_yardoc/
-/coverage/
-/doc/
-/pkg/
-/spec/reports/
-/tmp/
-
-# rspec failure tracking
-.rspec_status
-
-# ide
-.idea

data/.rspec

@@ -1,3 +0,0 @@
---format documentation
---color
---require spec_helper

data/.travis.yml

@@ -1,6 +0,0 @@
----
-language: ruby
-cache: bundler
-rvm:
-  - 2.7.0
-before_install: gem install bundler -v 2.1.2

data/Rakefile

@@ -1,6 +0,0 @@
-require "bundler/gem_tasks"
-require "rspec/core/rake_task"
-
-RSpec::Core::RakeTask.new(:spec)
-
-task :default => :spec