omniauth-figma-oauth2 1.0.1 → 1.0.3

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 419b324efa0b450d75ecb6d80132ebb69da94603be509985821bef098e49a8f3
-  data.tar.gz: 0ed78e72c4489f25d08cd004ab80adc6866d45cb7f4175c990d307746c8dd28f
+  metadata.gz: 48e85e87de36a28b05007695447c2b57308c758f575bf4bfa25e3ffd9b69511c
+  data.tar.gz: '09f9a3274c0c08a4170f0484f3ba49f3b4e8d9d43796de0243ab440ab770068d'
 SHA512:
-  metadata.gz: 2b90de45eebe675cf86e0b90c0bcaa494b9688cf2f8490fe4ca638b3265bea243baadbf56665a106d81b39d8d3288f7dabcd23c90e76e8f2650cbb07e365769e
-  data.tar.gz: 59062fbaa6bc01fd6b15b6fb12cda17b52af32e146bf5c2228c12690fcf55fa6a1462b6e1e84b579aecae104072af656efb82359971ea83ac22d03b7852de2f5
+  metadata.gz: c5b16d4284f49cf07114e66ab8e4763c785ccad096c147c3ea45c42bb57a02c8ac6de6abfc95175957c91d8cdf648fb5f8e7217f4e9835e4675c2a8bc11a6be0
+  data.tar.gz: acfccf033a601b90db550ae854a65a76e3d96f37c6a238f324e9976548481765f5024b8bc5cc46edb7bb753584ea97796d7798a37cb85135dda13f93d94904dc

data/CHANGELOG.md

@@ -1,5 +1,19 @@
 ## [Unreleased]
 
+## [1.0.3] - 2025-11-21
+
+- Remove default scope from gem - scope must now be explicitly specified in app configuration
+- Update to use current Figma API scopes (deprecated `figma:read` removed)
+- Add documentation for scope configuration in README
+
+## [1.0.2] - 2024-03-18
+
+- Send OAuth credentials in the request header
+
+## [1.0.1] - 2024-03-18
+
+- Use the new API base URL structure to call Figma’s OAuth APIs: https://api.figma.com/v1/
+
 ## [1.0.0] - 2024-08-22
 
 - Initial release

data/README.md

@@ -30,7 +30,19 @@ This is an example that you might put into a Rails initializer at `config/initia
 
 ```ruby
 Rails.application.config.middleware.use OmniAuth::Builder do
-  provider :figma, ENV['CLIENT_ID'], ENV['CLIENT_SECRET']
+  provider :figma, ENV['CLIENT_ID'], ENV['CLIENT_SECRET'],
+    scope: 'file_content:read'
+end
+```
+
+**Note:** You must specify the `scope` parameter with the permissions your app needs. Available scopes are documented in the [Figma REST API documentation](https://developers.figma.com/docs/rest-api/scopes/).
+
+### Example with Multiple Scopes
+
+```ruby
+Rails.application.config.middleware.use OmniAuth::Builder do
+  provider :figma, ENV['CLIENT_ID'], ENV['CLIENT_SECRET'],
+    scope: 'current_user:read file_comments:read file_content:read file_metadata:read file_versions:read projects:read'
 end
 ```
 

data/lib/omniauth/strategies/figma.rb

@@ -5,19 +5,17 @@ module OmniAuth
     class Figma < OmniAuth::Strategies::OAuth2
 
       option :name, 'figma'
-      option :scope, 'file_read'
-
       option :client_options, {
-        site:           'https://www.figma.com',
-        authorize_url:  '/oauth',
-        token_url:      '/v1/oauth/token'
+        site: 'https://api.figma.com/v1/',
+        authorize_url: 'https://www.figma.com/oauth',
+        token_url: 'oauth/token',
+        auth_scheme: :basic_auth # Ensures credentials are sent in the Authorization header
       }
 
-      option :token_options, [:client_id, :client_secret]
-      option :token_params, { parse: :json }
 
       uid { raw_info['id'].to_s }
 
+
       info do
         {
           :name    => raw_info['handle'],
@@ -26,6 +24,7 @@ module OmniAuth
         }
       end
 
+
       credentials do
         {
           :access_token   => access_token.token,
@@ -35,10 +34,12 @@ module OmniAuth
         }
       end
 
+
       def raw_info
         @raw_info = access_token.get('https://api.figma.com/v1/me').parsed
       end
 
+
       def callback_url
         full_host + script_name + callback_path
       end

data/lib/omniauth-figma/version.rb

@@ -1,5 +1,5 @@
 module Omniauth
   module Figma
-    VERSION = "1.0.1"
+    VERSION = "1.0.3"
   end
 end

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: omniauth-figma-oauth2
 version: !ruby/object:Gem::Version
-  version: 1.0.1
+  version: 1.0.3
 platform: ruby
 authors:
 - Philipp Riedel
 autorequire:
 bindir: exe
 cert_chain: []
-date: 2025-03-18 00:00:00.000000000 Z
+date: 2025-11-21 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: omniauth-oauth2
@@ -158,6 +158,8 @@ files:
 - lib/omniauth-figma/version.rb
 - lib/omniauth/strategies/figma.rb
 - omniauth-figma-oauth2-1.0.0.gem
+- omniauth-figma-oauth2-1.0.1.gem
+- omniauth-figma-oauth2-1.0.2.gem
 - omniauth-figma-oauth2.gemspec
 homepage: https://github.com/phiele/omniauth-figma-oauth2
 licenses:
@@ -178,7 +180,7 @@ required_rubygems_version: !ruby/object:Gem::Requirement
     - !ruby/object:Gem::Version
       version: '0'
 requirements: []
-rubygems_version: 3.4.20
+rubygems_version: 3.4.10
 signing_key:
 specification_version: 4
 summary: Figma OAuth2 strategy for OmniAuth