omniauth-ebay-oauth 1.0.0 → 1.0.1

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: ab0104101de3fbd57ee567e17d4d8439528ce4ca6acb2c80ad7d35733d1e8e5d
-  data.tar.gz: 1cba5d5cbf2821445869057fe086aaf50983043090171a225c7d1cef66bf502b
+  metadata.gz: 0f00d0daffc4a2c20bcfc95aae0f3d4ed4850f8d512f0539321785d92477d02e
+  data.tar.gz: 91b24a5437389617ba8dc70b8d9429080945464dafa0df32a163b14cc64eeb36
 SHA512:
-  metadata.gz: fcc4e6adda2ce0b2a6a3aea277c7452e13b6bc8244c5162ced049d8e981918e0858a84dbbf43ad5ba0591327e1dba30e3b3c66bb540e869e340945ff3fba130f
-  data.tar.gz: edbe8b21811965d437b6a76e863d052a5f08da7fb64440e297d86245085bb034cf8237d99b54308614b834201884011ed96b384e52e63cfeaaeaa1db793f659c
+  metadata.gz: c7ea7e859bdaa6acd10eab5739880fef484e89414cdeed9aed8001af3a713e01055f4294f0970d3f0c3f95b373679974e25758c840dfea3e5cfb46f927c85aeb
+  data.tar.gz: 9b419002a3618d8ebea03be43f1734d2b3b94256807f1a5057d337061edfe2d3139e2ef2b6c976dd9772760e8faf9a97ea8e1d50d78b8874b573bf1a0dd086bf

data/CHANGELOG.md

@@ -4,6 +4,12 @@ All notable changes to this project will be documented in this file.
 The format is based on [Keep a Changelog](http://keepachangelog.com/en/1.0.0/)
 and this project adheres to [Semantic Versioning](http://semver.org/spec/v2.0.0.html).
 
+## [1.0.1] - 2021-09-01
+
+### Fixed
+
+ - Ruby 3.0 compatibility (keyword arguments usage)
+
 ## [1.0.0] - 2021-04-01
 
 Mark gem as stable
@@ -64,6 +70,7 @@ Mark gem as stable
  - Initial release: fully working strategy. @ignat-z
 
 
+[1.0.1]: https://github.com/evilmartians/omniauth-ebay-oauth/compare/v1.0.0...v1.0.1
 [1.0.0]: https://github.com/evilmartians/omniauth-ebay-oauth/compare/v0.5.0...v1.0.0
 [0.5.0]: https://github.com/evilmartians/omniauth-ebay-oauth/compare/v0.4.0...v0.5.0
 [0.4.0]: https://github.com/evilmartians/omniauth-ebay-oauth/compare/v0.3.0...v0.4.0

data/README.md

@@ -90,6 +90,10 @@ end
 get '/auth/ebay/callback' do
   "Hello, #{request.env['omniauth.auth'].dig('info', 'name')}"
 end
+
+# OmniAuth disables starting authentication with GET request to mitigate CVE-2015-9284.
+# For testing purposes we can enable it, but for production it is better to use POST with CSRF protection/
+OmniAuth.config.allowed_request_methods += %i[get]
 ```
 
 

data/lib/omniauth/ebay-oauth/version.rb

@@ -2,6 +2,6 @@
 
 module OmniAuth
   module EbayOauth
-    VERSION = '1.0.0'
+    VERSION = '1.0.1'
   end
 end

data/lib/omniauth/strategies/ebay_oauth.rb

@@ -67,7 +67,7 @@ module OmniAuth
       def user_info
         @user_info ||=
           OmniAuth::EbayOauth::UserInfo.new(OmniAuth::EbayOauth::UserInfoRequest
-          .new(access_token.token, client.options).call)
+          .new(access_token.token, **client.options).call)
       end
     end
   end

data/spec/omniauth/strategies/ebay_oauth_spec.rb

@@ -5,6 +5,8 @@ require 'spec_helper'
 RSpec.describe OmniAuth::Strategies::EbayOauth do
   let(:options) { {} }
 
+  before { subject.setup_phase }
+
   subject { described_class.new(nil, options) }
 
   describe '#callback_url' do
@@ -16,8 +18,6 @@ RSpec.describe OmniAuth::Strategies::EbayOauth do
   end
 
   describe '#options' do
-    before { subject.setup_phase }
-
     it 'default mode is sandbox' do
       expect(subject.options.client_options.user_info_endpoint)
         .to eq('https://api.sandbox.ebay.com/ws/api.dll')
@@ -112,15 +112,12 @@ RSpec.describe OmniAuth::Strategies::EbayOauth do
   describe '#user_info' do
     let(:access_token) { instance_double(OAuth2::AccessToken, token: :token) }
     let(:user_info) { instance_double(OmniAuth::EbayOauth::UserInfo) }
-    let(:request) do
-      instance_double(OmniAuth::EbayOauth::UserInfoRequest, call: {})
-    end
 
     before do
       expect(subject).to receive(:access_token).and_return(access_token)
-      expect(OmniAuth::EbayOauth::UserInfoRequest)
-        .to receive(:new).and_return(request)
-      expect(OmniAuth::EbayOauth::UserInfo)
+      allow_any_instance_of(OmniAuth::EbayOauth::UserInfoRequest)
+        .to receive(:call).and_return({})
+      allow(OmniAuth::EbayOauth::UserInfo)
         .to receive(:new).with({}).and_return(user_info)
     end
 

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: omniauth-ebay-oauth
 version: !ruby/object:Gem::Version
-  version: 1.0.0
+  version: 1.0.1
 platform: ruby
 authors:
 - Ignat Zakrevsky
@@ -9,7 +9,7 @@ authors:
 autorequire: 
 bindir: bin
 cert_chain: []
-date: 2021-04-01 00:00:00.000000000 Z
+date: 2021-09-01 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: omniauth
@@ -182,7 +182,7 @@ required_rubygems_version: !ruby/object:Gem::Requirement
     - !ruby/object:Gem::Version
       version: '0'
 requirements: []
-rubygems_version: 3.1.4
+rubygems_version: 3.1.6
 signing_key: 
 specification_version: 4
 summary: OmniAuth strategy for new eBay OAuth API