omniauth-bigcommerce 0.5.0 → 0.6.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 1ab65242f6af944039277657ae8ebffec01bdd38bfe9766094bd56a6c142bb71
-  data.tar.gz: b71e105172d89c5649ec7934015e687595d9f7ad1eec5010f9569cfa2556e9d5
+  metadata.gz: 94fe29588447b0666473ccef5dc1820d10884e7ad531410ae6f464c9aa2809bf
+  data.tar.gz: 53bb238cdf4377d42dd9358bd032382ee2b148add235a3c7d51719b655de8eb3
 SHA512:
-  metadata.gz: aac59b20ee2202e8028b4506b21164aec151be9916038340256aa91ba1d2facb837bb1acc299816afb25d169a253e04ba4d2aff43d917114c47d2acb0b48329c
-  data.tar.gz: 9bae0bc193e0d3dd9e67369a893b178a04b385b0d4a6fc7f99ff88e206426327b8697288e4cbcac9e203f1f4464de13c7c3d6191122bb77df64cf44dbd545e82
+  metadata.gz: 7038bfc278a92340eadb768b68e286de9a2afc101cd451792e8297c28c323f0b2925068b123bb5c9b7abd07ce947a9ffca2056c990e5251efe4d3d0f0078ac99
+  data.tar.gz: 9a70721b5b37ebe26920cda450d6136c58224bee06c20375fa3cee345803be5d74c62790297989d2f71552053d46fff5e1aa4b7ecd9d6fd81910689030a85f16

data/lib/omniauth/bigcommerce/version.rb

@@ -17,6 +17,6 @@
 #
 module OmniAuth
   module BigCommerce
-    VERSION = '0.5.0'
+    VERSION = '0.6.0'
   end
 end

data/lib/omniauth/strategies/bigcommerce.rb

@@ -31,7 +31,11 @@ module OmniAuth
       option :client_options,
              site: ENV.fetch('BC_AUTH_SERVICE', 'https://login.bigcommerce.com'),
              authorize_url: '/oauth2/authorize',
-             token_url: '/oauth2/token'
+             token_url: '/oauth2/token',
+             # oauth2 2.x defaults auth_scheme to :basic_auth, which sends the client
+             # credentials in the Authorization header. BigCommerce's token endpoint
+             # expects them in the request body, so preserve the oauth2 1.x behavior.
+             auth_scheme: :request_body
 
       uid { access_token.params['user']['id'] }
 
@@ -43,9 +47,11 @@ module OmniAuth
       end
 
       credentials do
-        {
-          token: access_token
-        }
+        hash = { 'token' => access_token.token }
+        hash['refresh_token'] = access_token.refresh_token if access_token.expires? && access_token.refresh_token
+        hash['expires_at'] = access_token.expires_at if access_token.expires?
+        hash['expires'] = access_token.expires?
+        hash
       end
 
       extra do
@@ -63,8 +69,10 @@ module OmniAuth
 
       # Exclude query string in callback url. This used to be part of omniauth-oauth2, but was
       # removed in 1.4.0: https://github.com/intridea/omniauth-oauth2/pull/70
+      # Note: callback_path already includes script_name (omniauth/strategy.rb#L458), so we
+      # must not prepend script_name again here.
       def callback_url
-        full_host + script_name + callback_path
+        full_host + callback_path
       end
 
       # Make sure to pass scope and context through to the authorize call

data/omniauth-bigcommerce.gemspec

@@ -27,12 +27,12 @@ Gem::Specification.new do |gem|
   gem.files         = Dir['README.md', 'lib/**/*', 'omniauth-bigcommerce.gemspec', 'Gemfile']
   gem.name          = 'omniauth-bigcommerce'
   gem.require_paths = ['lib']
-  gem.required_ruby_version = '>= 2.1'
+  gem.required_ruby_version = '>= 3.3'
   gem.version       = OmniAuth::BigCommerce::VERSION
   gem.license       = 'MIT'
 
-  gem.add_dependency 'oauth2', '>= 1.4.4', '< 2'
+  gem.add_dependency 'oauth2', '>= 2.0.22', '< 3'
   gem.add_dependency 'omniauth'
-  gem.add_dependency 'omniauth-oauth2', '>= 1.5'
+  gem.add_dependency 'omniauth-oauth2', '>= 1.7.3'
   gem.metadata['rubygems_mfa_required'] = 'true'
 end

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: omniauth-bigcommerce
 version: !ruby/object:Gem::Version
-  version: 0.5.0
+  version: 0.6.0
 platform: ruby
 authors:
 - BigCommerce Engineering
 autorequire:
 bindir: bin
 cert_chain: []
-date: 2025-02-05 00:00:00.000000000 Z
+date: 2026-06-16 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: oauth2
@@ -16,20 +16,20 @@ dependencies:
     requirements:
     - - ">="
       - !ruby/object:Gem::Version
-        version: 1.4.4
+        version: 2.0.22
     - - "<"
       - !ruby/object:Gem::Version
-        version: '2'
+        version: '3'
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - ">="
       - !ruby/object:Gem::Version
-        version: 1.4.4
+        version: 2.0.22
     - - "<"
       - !ruby/object:Gem::Version
-        version: '2'
+        version: '3'
 - !ruby/object:Gem::Dependency
   name: omniauth
   requirement: !ruby/object:Gem::Requirement
@@ -50,14 +50,14 @@ dependencies:
     requirements:
     - - ">="
       - !ruby/object:Gem::Version
-        version: '1.5'
+        version: 1.7.3
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - ">="
       - !ruby/object:Gem::Version
-        version: '1.5'
+        version: 1.7.3
 description: Official OmniAuth strategy for BigCommerce.
 email:
 - developer@bigcommerce.com
@@ -84,14 +84,14 @@ required_ruby_version: !ruby/object:Gem::Requirement
   requirements:
   - - ">="
     - !ruby/object:Gem::Version
-      version: '2.1'
+      version: '3.3'
 required_rubygems_version: !ruby/object:Gem::Requirement
   requirements:
   - - ">="
     - !ruby/object:Gem::Version
       version: '0'
 requirements: []
-rubygems_version: 3.4.10
+rubygems_version: 3.5.22
 signing_key:
 specification_version: 4
 summary: Official OmniAuth strategy for BigCommerce.