omniauth-azure-activedirectory-v2 2.2.0 → 2.3.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 4d83e537b36b58ba370dad64ad70f74eed7d9c46e040bc22e2bd4881618d41fd
-  data.tar.gz: 2b0f73ad03dbb4d1603994f015639532547742ed8f99aa02bbb69f3b4383058a
+  metadata.gz: 1d2af307cd27da676b6c99c2898110b3f25756512b8c0deb86c61f2b5885f4f2
+  data.tar.gz: 51d51b4c4c6a607d2556bb4e22fade57d07686bffd363d92898dfed39e148b14
 SHA512:
-  metadata.gz: 7311d8d6538068f6181f1ac78a24ed315b96343a263aa0137d1a7ca31cd15b3f161664030c1966d8abfee40717924640d3ac2bd9534fbca8322844479c2c2339
-  data.tar.gz: 4913177aa072ac5c04d74a3e121bf04ceb668c0ae53ebc0938849a265c7f6f4e6d12a23085273d4230fb82d8a2f237d889488970792056dc37ad255bb71978f8
+  metadata.gz: f111440b945136d382f51cd17cff17ef899a898e2dde86e15bb913fd21a3be33863387b9c9f95e659ac670c19524fc4e5fde9972ce0fdf60bb24cc5a85007a1c
+  data.tar.gz: 3ab5ed6e3e8d6f20e660f00976b4e1cffeeee2c57eee0a8880d40b1143490e7dbd6b8c6feb83491f1161127a402c9fe121c47c48ed380527beda51acdc3f43df

data/CHANGELOG.md

@@ -1,5 +1,9 @@
 # Change Log
 
+## v2.3.0 (2024-07-16)
+
+[Implements](https://github.com/RIPAGlobal/omniauth-azure-activedirectory-v2/pull/29) support for on-premise Active Directory installations via the `adfs` option; see `README.md` for details - thanks @frenkel!
+
 ## v2.2.0 (2024-07-09)
 
 [Implements](https://github.com/RIPAGlobal/omniauth-azure-activedirectory-v2/pull/26) support for specifying `scope` via the authorisation URL, in addition to the prior support for static configuration or configuration via a custom provider class - thanks @nbgoodall!

data/README.md

@@ -106,6 +106,7 @@ All of the items listed below are optional, unless noted otherwise. They can be
 | `authorize_params` | Additional parameters passed as URL query data in the initial OAuth redirection to Microsoft. See below for more. Empty Hash default. |
 | `domain_hint`      | If defined, sets (overwriting, if already present) `domain_hint` inside `authorize_params`. Default `nil` / none. |
 | `scope`            | If defined, sets (overwriting, if already present) `scope` inside `authorize_params`. Default is `OmniAuth::Strategies::AzureActivedirectoryV2::DEFAULT_SCOPE` (at the time of writing, this is `'openid profile email'`). |
+| `adfs`             | If defined, modifies the URLs so they work with an on premise ADFS server. In order to use this you also need to set the `base_azure_url` correctly and fill the `tenant_id` with `'adfs'`. |
 
 In addition, as a special case, if the request URL contains a query parameter `prompt`, then this will be written into `authorize_params` under that key, overwriting if present any other value there. Note that this comes from the current request URL at the time OAuth flow is commencing, _not_ via static options Hash data or via a custom provider class - but you _could_ just as easily set `scope` inside a custom `authorize_params` returned from a provider class, as shown in an example later; the request URL query mechanism is just another way of doing the same thing.
 

data/lib/omniauth/azure_activedirectory_v2/version.rb

@@ -2,8 +2,8 @@ module OmniAuth
   module Azure
     module Activedirectory
       module V2
-        VERSION = "2.2.0"
-        DATE    = "2024-07-09"
+        VERSION = "2.3.0"
+        DATE    = "2024-07-16"
       end
     end
   end

data/lib/omniauth/strategies/azure_activedirectory_v2.rb

@@ -52,12 +52,13 @@ module OmniAuth
         options.custom_policy =
           provider.respond_to?(:custom_policy) ? provider.custom_policy : nil
 
-        options.client_options.authorize_url = "#{options.base_azure_url}/#{options.tenant_id}/oauth2/v2.0/authorize"
+        oauth2 = provider.respond_to?(:adfs?) && provider.adfs? ? 'oauth2' : 'oauth2/v2.0'
+        options.client_options.authorize_url = "#{options.base_azure_url}/#{options.tenant_id}/#{oauth2}/authorize"
         options.client_options.token_url =
           if options.custom_policy
-            "#{options.base_azure_url}/#{options.tenant_id}/#{options.custom_policy}/oauth2/v2.0/token"
+            "#{options.base_azure_url}/#{options.tenant_id}/#{options.custom_policy}/#{oauth2}/token"
           else
-            "#{options.base_azure_url}/#{options.tenant_id}/oauth2/v2.0/token"
+            "#{options.base_azure_url}/#{options.tenant_id}/#{oauth2}/token"
           end
 
         super

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: omniauth-azure-activedirectory-v2
 version: !ruby/object:Gem::Version
-  version: 2.2.0
+  version: 2.3.0
 platform: ruby
 authors:
 - RIPA Global
 autorequire:
 bindir: exe
 cert_chain: []
-date: 2024-07-09 00:00:00.000000000 Z
+date: 2024-07-16 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: omniauth-oauth2