omniauth-facebook 1.4.1 → 1.5.0

Sign up to get free protection for your applications and to get access to all the features.

Potentially problematic release.


This version of omniauth-facebook might be problematic. Click here for more details.

@@ -0,0 +1,7 @@
1
+ ---
2
+ SHA1:
3
+ metadata.gz: 46abf3346f9a25423f118274047a991a28ab862a
4
+ data.tar.gz: 07620c5fefec062bb3461e4e951fcafc6d709470
5
+ SHA512:
6
+ metadata.gz: c5b3352257919a6b885277811d3ce1970fe2211bb7c547a5edf511bceb3a4b46547b0c8a82dd30f5cf9534fec43dd5e7c0f43474bd63c38ae1e829ff2bd6dfff
7
+ data.tar.gz: 586ae998f9478c48dd45afd39755008e7f8577ccbc5dc21b142e06ae63ca2af499c89f8faf737b279178819707b0af51e779d6bd441b39bb6d787c98e7a72a63
@@ -3,6 +3,3 @@ rvm:
3
3
  - 1.9.2
4
4
  - 1.9.3
5
5
  - jruby
6
- branches:
7
- only:
8
- - master
data/README.md CHANGED
@@ -52,8 +52,6 @@ end
52
52
 
53
53
  If you want to set the `display` format or `scope` on a per-request basis, you can just pass it to the OmniAuth request phase URL, for example: `/auth/facebook?display=popup` or `/auth/facebook?scope=email`.
54
54
 
55
- You can also pass through a `state` param which will be passed along to the callback url.
56
-
57
55
  ### Custom Callback URL/Path
58
56
 
59
57
  You can set a custom `callback_url` or `callback_path` option to override the default value. See [OmniAuth::Strategy#callback_url](https://github.com/intridea/omniauth/blob/master/lib/omniauth/strategy.rb#L411) for more details on the default.
@@ -1,5 +1,5 @@
1
1
  module OmniAuth
2
2
  module Facebook
3
- VERSION = "1.4.1"
3
+ VERSION = "1.5.0"
4
4
  end
5
5
  end
@@ -112,7 +112,7 @@ module OmniAuth
112
112
  end
113
113
 
114
114
  ##
115
- # You can pass +display+, +state+ or +scope+ params to the auth request, if
115
+ # You can pass +display+ or +scope+ params to the auth request, if
116
116
  # you need to set them dynamically. You can also set these options
117
117
  # in the OmniAuth config :authorize_params option.
118
118
  #
@@ -120,12 +120,9 @@ module OmniAuth
120
120
  #
121
121
  def authorize_params
122
122
  super.tap do |params|
123
- %w[display state scope].each do |v|
123
+ %w[display scope].each do |v|
124
124
  if request.params[v]
125
125
  params[v.to_sym] = request.params[v]
126
-
127
- # to support omniauth-oauth2's auto csrf protection
128
- session['omniauth.state'] = params[:state] if v == 'state'
129
126
  end
130
127
  end
131
128
 
@@ -50,20 +50,20 @@ module OAuth2StrategyTests
50
50
  assert_equal strategy.authorize_params['state'], strategy.session['omniauth.state']
51
51
  end
52
52
 
53
- test 'should store state in the session when present in authorize params vs. a random one' do
53
+ test 'should not store state in the session when present in authorize params vs. a random one' do
54
54
  @options = { :authorize_params => { :state => 'bar' } }
55
55
  refute_empty strategy.authorize_params['state']
56
- assert_equal 'bar', strategy.authorize_params[:state]
56
+ refute_equal 'bar', strategy.authorize_params[:state]
57
57
  refute_empty strategy.session['omniauth.state']
58
- assert_equal 'bar', strategy.session['omniauth.state']
58
+ refute_equal 'bar', strategy.session['omniauth.state']
59
59
  end
60
60
 
61
- test 'should store state in the session when present in request params vs. a random one' do
61
+ test 'should not store state in the session when present in request params vs. a random one' do
62
62
  @request.stubs(:params).returns({ 'state' => 'foo' })
63
63
  refute_empty strategy.authorize_params['state']
64
- assert_equal 'foo', strategy.authorize_params[:state]
64
+ refute_equal 'foo', strategy.authorize_params[:state]
65
65
  refute_empty strategy.session['omniauth.state']
66
- assert_equal 'foo', strategy.session['omniauth.state']
66
+ refute_equal 'foo', strategy.session['omniauth.state']
67
67
  end
68
68
  end
69
69
 
@@ -56,12 +56,6 @@ class AuthorizeParamsTest < StrategyTestCase
56
56
  assert_equal 'touch', strategy.authorize_params[:display]
57
57
  end
58
58
 
59
- test 'includes state parameter from request when present' do
60
- @request.stubs(:params).returns({ 'state' => 'some_state' })
61
- assert strategy.authorize_params.is_a?(Hash)
62
- assert_equal 'some_state', strategy.authorize_params[:state]
63
- end
64
-
65
59
  test 'overrides default scope with parameter passed from request' do
66
60
  @request.stubs(:params).returns({ 'scope' => 'email' })
67
61
  assert strategy.authorize_params.is_a?(Hash)
metadata CHANGED
@@ -1,20 +1,18 @@
1
1
  --- !ruby/object:Gem::Specification
2
2
  name: omniauth-facebook
3
3
  version: !ruby/object:Gem::Version
4
- version: 1.4.1
5
- prerelease:
4
+ version: 1.5.0
6
5
  platform: ruby
7
6
  authors:
8
7
  - Mark Dodwell
9
8
  autorequire:
10
9
  bindir: bin
11
10
  cert_chain: []
12
- date: 2012-07-07 00:00:00.000000000 Z
11
+ date: 2013-11-13 00:00:00.000000000 Z
13
12
  dependencies:
14
13
  - !ruby/object:Gem::Dependency
15
14
  name: omniauth-oauth2
16
15
  requirement: !ruby/object:Gem::Requirement
17
- none: false
18
16
  requirements:
19
17
  - - ~>
20
18
  - !ruby/object:Gem::Version
@@ -22,7 +20,6 @@ dependencies:
22
20
  type: :runtime
23
21
  prerelease: false
24
22
  version_requirements: !ruby/object:Gem::Requirement
25
- none: false
26
23
  requirements:
27
24
  - - ~>
28
25
  - !ruby/object:Gem::Version
@@ -30,49 +27,43 @@ dependencies:
30
27
  - !ruby/object:Gem::Dependency
31
28
  name: minitest
32
29
  requirement: !ruby/object:Gem::Requirement
33
- none: false
34
30
  requirements:
35
- - - ! '>='
31
+ - - '>='
36
32
  - !ruby/object:Gem::Version
37
33
  version: '0'
38
34
  type: :development
39
35
  prerelease: false
40
36
  version_requirements: !ruby/object:Gem::Requirement
41
- none: false
42
37
  requirements:
43
- - - ! '>='
38
+ - - '>='
44
39
  - !ruby/object:Gem::Version
45
40
  version: '0'
46
41
  - !ruby/object:Gem::Dependency
47
42
  name: mocha
48
43
  requirement: !ruby/object:Gem::Requirement
49
- none: false
50
44
  requirements:
51
- - - ! '>='
45
+ - - '>='
52
46
  - !ruby/object:Gem::Version
53
47
  version: '0'
54
48
  type: :development
55
49
  prerelease: false
56
50
  version_requirements: !ruby/object:Gem::Requirement
57
- none: false
58
51
  requirements:
59
- - - ! '>='
52
+ - - '>='
60
53
  - !ruby/object:Gem::Version
61
54
  version: '0'
62
55
  - !ruby/object:Gem::Dependency
63
56
  name: rake
64
57
  requirement: !ruby/object:Gem::Requirement
65
- none: false
66
58
  requirements:
67
- - - ! '>='
59
+ - - '>='
68
60
  - !ruby/object:Gem::Version
69
61
  version: '0'
70
62
  type: :development
71
63
  prerelease: false
72
64
  version_requirements: !ruby/object:Gem::Requirement
73
- none: false
74
65
  requirements:
75
- - - ! '>='
66
+ - - '>='
76
67
  - !ruby/object:Gem::Version
77
68
  version: '0'
78
69
  description:
@@ -100,33 +91,26 @@ files:
100
91
  - test/test.rb
101
92
  homepage: https://github.com/mkdynamic/omniauth-facebook
102
93
  licenses: []
94
+ metadata: {}
103
95
  post_install_message:
104
96
  rdoc_options: []
105
97
  require_paths:
106
98
  - lib
107
99
  required_ruby_version: !ruby/object:Gem::Requirement
108
- none: false
109
100
  requirements:
110
- - - ! '>='
101
+ - - '>='
111
102
  - !ruby/object:Gem::Version
112
103
  version: '0'
113
- segments:
114
- - 0
115
- hash: 1875274478054024285
116
104
  required_rubygems_version: !ruby/object:Gem::Requirement
117
- none: false
118
105
  requirements:
119
- - - ! '>='
106
+ - - '>='
120
107
  - !ruby/object:Gem::Version
121
108
  version: '0'
122
- segments:
123
- - 0
124
- hash: 1875274478054024285
125
109
  requirements: []
126
110
  rubyforge_project:
127
- rubygems_version: 1.8.24
111
+ rubygems_version: 2.0.3
128
112
  signing_key:
129
- specification_version: 3
113
+ specification_version: 4
130
114
  summary: Facebook strategy for OmniAuth
131
115
  test_files:
132
116
  - test/helper.rb