omniauth-google-oauth2 1.2.1 → 1.2.3
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- checksums.yaml +4 -4
- data/.github/workflows/ci.yml +5 -4
- data/.github/workflows/rubocop.yml +19 -0
- data/.rubocop.yml +10 -3
- data/CHANGELOG.md +180 -1
- data/Gemfile +2 -0
- data/README.md +148 -127
- data/_config.yml +3 -0
- data/examples/Gemfile +1 -0
- data/examples/config.ru +96 -62
- data/examples/omni_auth.rb +7 -15
- data/lib/omniauth/google_oauth2/version.rb +1 -1
- data/lib/omniauth/strategies/google_oauth2.rb +251 -27
- data/omniauth-google-oauth2.gemspec +7 -8
- data/spec/omniauth/strategies/google_oauth2_spec.rb +643 -19
- data/spec/spec_helper.rb +9 -0
- metadata +16 -26
- data/spec/rubocop_spec.rb +0 -9
checksums.yaml
CHANGED
|
@@ -1,7 +1,7 @@
|
|
|
1
1
|
---
|
|
2
2
|
SHA256:
|
|
3
|
-
metadata.gz:
|
|
4
|
-
data.tar.gz:
|
|
3
|
+
metadata.gz: 4ce851358d916e9ca658928491f439ed90b13be620c6cee889530fcd8cbdab23
|
|
4
|
+
data.tar.gz: 8ab78932795f49af9cfb974669c680a0138af5ce9752d43cb041a3332889f3dd
|
|
5
5
|
SHA512:
|
|
6
|
-
metadata.gz:
|
|
7
|
-
data.tar.gz:
|
|
6
|
+
metadata.gz: 23e96c5c0f2853bbca7ddac277abc160ff24ebf170f71154b17b8a41f51f0e57dfe04b53e78334f7739fe702904de08b209748ae89fc9de715ae560b59ddc198
|
|
7
|
+
data.tar.gz: 248bc72e9cb561afa7153eb6a76d20cae09e36b7cff39828ad55c83f6c2f5ff0ef234bffb92a1147a84eaefab5e51ab7e6c17e118a66b256481137d0988d9e8a
|
data/.github/workflows/ci.yml
CHANGED
|
@@ -1,4 +1,4 @@
|
|
|
1
|
-
name: CI
|
|
1
|
+
name: CI
|
|
2
2
|
|
|
3
3
|
on: [push, pull_request]
|
|
4
4
|
|
|
@@ -6,16 +6,17 @@ jobs:
|
|
|
6
6
|
test:
|
|
7
7
|
runs-on: ubuntu-latest
|
|
8
8
|
strategy:
|
|
9
|
+
fail-fast: false
|
|
9
10
|
matrix:
|
|
10
|
-
ruby-version: ['2.5', '2.6', '2.7', '3.0', '3.1', '3.2', truffleruby-head]
|
|
11
|
+
ruby-version: ['2.5', '2.6', '2.7', '3.0', '3.1', '3.2', '3.3', '3.4', '4.0', truffleruby-head]
|
|
11
12
|
|
|
12
13
|
steps:
|
|
13
|
-
- uses: actions/checkout@
|
|
14
|
+
- uses: actions/checkout@v6
|
|
14
15
|
- name: Set up Ruby ${{ matrix.ruby-version }}
|
|
15
16
|
uses: ruby/setup-ruby@v1
|
|
16
17
|
with:
|
|
17
18
|
ruby-version: ${{ matrix.ruby-version }}
|
|
18
19
|
bundler-cache: true # 'bundle install' and cache
|
|
19
|
-
- name: Run specs
|
|
20
|
+
- name: Run specs
|
|
20
21
|
run: |
|
|
21
22
|
bundle exec rake
|
|
@@ -0,0 +1,19 @@
|
|
|
1
|
+
name: rubocop
|
|
2
|
+
|
|
3
|
+
on:
|
|
4
|
+
push:
|
|
5
|
+
pull_request:
|
|
6
|
+
|
|
7
|
+
jobs:
|
|
8
|
+
rubocop:
|
|
9
|
+
runs-on: ubuntu-latest
|
|
10
|
+
steps:
|
|
11
|
+
- uses: actions/checkout@v6
|
|
12
|
+
- name: Set up Ruby 3.4
|
|
13
|
+
uses: ruby/setup-ruby@v1
|
|
14
|
+
with:
|
|
15
|
+
ruby-version: "3.4"
|
|
16
|
+
- name: Lint Ruby code with RuboCop
|
|
17
|
+
run: |
|
|
18
|
+
bundle install
|
|
19
|
+
bundle exec rubocop --parallel
|
data/.rubocop.yml
CHANGED
|
@@ -1,9 +1,14 @@
|
|
|
1
|
+
AllCops:
|
|
2
|
+
NewCops: disable
|
|
3
|
+
SuggestExtensions: false
|
|
4
|
+
TargetRubyVersion: 2.5
|
|
5
|
+
|
|
1
6
|
Metrics/ClassLength:
|
|
2
7
|
Enabled: false
|
|
3
8
|
Metrics/AbcSize:
|
|
4
9
|
Enabled: false
|
|
5
10
|
Metrics/BlockLength:
|
|
6
|
-
|
|
11
|
+
AllowedMethods: ['describe', 'context', 'shared_examples']
|
|
7
12
|
Metrics/CyclomaticComplexity:
|
|
8
13
|
Enabled: false
|
|
9
14
|
Layout/LineLength:
|
|
@@ -18,6 +23,8 @@ Style/MutableConstant:
|
|
|
18
23
|
Enabled: false
|
|
19
24
|
Gemspec/RequiredRubyVersion:
|
|
20
25
|
Enabled: false
|
|
26
|
+
Gemspec/RequireMFA:
|
|
27
|
+
Enabled: false
|
|
21
28
|
Lint/RaiseException:
|
|
22
29
|
Enabled: false
|
|
23
30
|
Lint/StructNewOverride:
|
|
@@ -28,5 +35,5 @@ Style/HashTransformKeys:
|
|
|
28
35
|
Enabled: false
|
|
29
36
|
Style/HashTransformValues:
|
|
30
37
|
Enabled: false
|
|
31
|
-
|
|
32
|
-
|
|
38
|
+
Style/FetchEnvVar:
|
|
39
|
+
Enabled: false
|
data/CHANGELOG.md
CHANGED
|
@@ -1,389 +1,553 @@
|
|
|
1
1
|
# Changelog
|
|
2
|
+
|
|
2
3
|
All notable changes to this project will be documented in this file.
|
|
3
4
|
|
|
5
|
+
## 1.2.3 - 2026-08-31
|
|
6
|
+
|
|
7
|
+
### Security
|
|
8
|
+
|
|
9
|
+
- Verify caller-supplied ID tokens against Google's published signing keys before trusting them. An ID token sent alongside a direct `access_token` callback was previously decoded without checking its signature, so `extra.id_info` and `extra.id_token` could be populated from a forged token. `uid` and `info` were never affected, as they come from the userinfo endpoint. A caller-supplied ID token genuinely issued by Google for the same user and a trusted client continues to be accepted after verification.
|
|
10
|
+
- Require a caller-supplied ID token to describe the same user as the access token it was sent with, by comparing the token's `sub` against the userinfo subject. A verified signature only proves Google issued the token, not that it belongs to the person the access token identifies, so without this a genuine ID token for one user could be paired with an access token for another and leave `uid` and `extra.id_info` describing different people. The `at_hash` claim is checked first as a fast path, and this subject check settles the cases `at_hash` cannot: tokens that omit the claim, and tokens whose `at_hash` is stale because the client refreshed its access token after sign-in. This check runs even when `skip_info` is set, as that option trims the auth hash rather than waiving verification.
|
|
11
|
+
- The bundled example app no longer disables TLS certificate verification. Anyone who copied that line into an application should remove it: it turns off certificate checking for every Faraday-based request in the process, not just the ones this gem makes.
|
|
12
|
+
|
|
13
|
+
### Added
|
|
14
|
+
|
|
15
|
+
- `reset_jwks_cache!` for clearing the cached Google signing keys between tests.
|
|
16
|
+
- `cached_jwks`, the class-level fetch-and-cache primitive behind it, which takes the fetch itself as a block.
|
|
17
|
+
- `JWKS_URL`, `JWKS_CACHE_TTL`, and `JWKS_RETRY_INTERVAL` constants, and a `JwksUnavailable` error.
|
|
18
|
+
- An upper bound of `< 4` on the `jwt` dependency. This is precautionary rather than a response to a released version: it keeps a future major release from being picked up before it has been verified against this strategy.
|
|
19
|
+
|
|
20
|
+
### Deprecated
|
|
21
|
+
|
|
22
|
+
- Nothing.
|
|
23
|
+
|
|
24
|
+
### Removed
|
|
25
|
+
|
|
26
|
+
- The fallback that placed the opaque access token in `extra.id_token` when no ID token was present. `extra.id_token` is now absent in that case rather than holding a value that was never an ID token. This was only reachable with `skip_jwt` set; without it the fallback raised instead.
|
|
27
|
+
|
|
28
|
+
### Fixed
|
|
29
|
+
|
|
30
|
+
- Ignore every credential field a caller supplies in a direct access-token callback apart from the access token itself and a verified ID token. `refresh_token` and token expiry in particular cannot be verified, so they are no longer carried through.
|
|
31
|
+
- Avoid decoding opaque access tokens as JWTs when no ID token is available.
|
|
32
|
+
- Fail with a normal authentication failure when a callback carries no usable credential, such as an ID token with no access token, a JSON body that is not an object, or an unparseable body. Previously these raised a `NoMethodError` or `TypeError` that OmniAuth turned into a failure whose message was the raw Ruby error, so applications received an unstable `message` parameter such as `undefined method 'expired?'` instead of `invalid_credentials`.
|
|
33
|
+
- Serve the cached signing keys when Google's key endpoint is briefly unreachable, and back off before refetching, rather than retrying on every request, including when nothing is cached yet.
|
|
34
|
+
- Reject a signing key response that is not an object with a `keys` array, rather than passing it on to be interpreted as some other kind of key.
|
|
35
|
+
- Cap how often an ID token naming an unrecognised key can force a key refresh, so it cannot be used to drive unbounded outbound requests while holding the shared cache lock. Key rotation still resolves within `JWKS_RETRY_INTERVAL`.
|
|
36
|
+
- `jwt_leeway` now also applies when verifying caller-supplied ID tokens, matching how it already behaved for the `extra` block.
|
|
37
|
+
- Support non-rewindable JSON request bodies under Rack 3.
|
|
38
|
+
- Accept ID tokens issued to any configured `authorized_client_ids`, matching the audiences already accepted for access tokens.
|
|
39
|
+
- Reuse successfully verified ID token claims when building `extra`, so each ID token is decoded and validated only once per request.
|
|
40
|
+
|
|
41
|
+
## 1.2.2 - 2026-02-23
|
|
42
|
+
|
|
43
|
+
### Added
|
|
44
|
+
|
|
45
|
+
- Ruby 4.0 support.
|
|
46
|
+
|
|
47
|
+
### Deprecated
|
|
48
|
+
|
|
49
|
+
- Nothing.
|
|
50
|
+
|
|
51
|
+
### Removed
|
|
52
|
+
|
|
53
|
+
- Unused `IMAGE_SIZE_REGEXP` constant.
|
|
54
|
+
- Dead `skip_friends` and `skip_image_info` options (Google+ was shut down in 2019).
|
|
55
|
+
|
|
56
|
+
### Fixed
|
|
57
|
+
|
|
58
|
+
- Replaced `CGI.parse` with `URI.decode_www_form` for Ruby 4.0 compatibility.
|
|
59
|
+
- Updated gemspec description to reference OmniAuth instead of OmniAuth 1.x.
|
|
60
|
+
- Modernized CI: bumped actions/checkout to v6, rake to 13.3, and rubocop to latest.
|
|
61
|
+
- Added edge case tests for `uid`, `strip_unnecessary_query_parameters`, `verify_token`, `verify_hd` wildcard, and malformed JSON handling.
|
|
62
|
+
|
|
4
63
|
## 1.2.1 - 2025-01-18
|
|
5
64
|
|
|
6
65
|
### Added
|
|
66
|
+
|
|
7
67
|
- Use jwt v2.9.2's public claims verification API - https://github.com/zquestz/omniauth-google-oauth2/pull/465
|
|
8
68
|
|
|
9
69
|
### Deprecated
|
|
70
|
+
|
|
10
71
|
- Nothing.
|
|
11
72
|
|
|
12
73
|
### Removed
|
|
74
|
+
|
|
13
75
|
- Support for jwt < 2.9.2.
|
|
14
76
|
|
|
15
77
|
### Fixed
|
|
78
|
+
|
|
16
79
|
- Nothing.
|
|
17
80
|
|
|
18
81
|
## 1.2.0 - 2024-09-15
|
|
19
82
|
|
|
20
83
|
### Added
|
|
84
|
+
|
|
21
85
|
- jwt 2.9.0 support for their updated claims code.
|
|
22
86
|
|
|
23
87
|
### Deprecated
|
|
88
|
+
|
|
24
89
|
- Nothing.
|
|
25
90
|
|
|
26
91
|
### Removed
|
|
92
|
+
|
|
27
93
|
- Ruby 2.3 and 2.4 support.
|
|
28
94
|
- Support for jwt < 2.9.0.
|
|
29
95
|
|
|
30
96
|
### Fixed
|
|
97
|
+
|
|
31
98
|
- Fixed image sizing code.
|
|
32
99
|
- Rubocop configuration updates.
|
|
33
100
|
|
|
34
101
|
## 1.1.3 - 2024-08-29
|
|
35
102
|
|
|
36
103
|
### Added
|
|
104
|
+
|
|
37
105
|
- Updated to use POST instead of GET for tokeninfo endpoint.
|
|
38
106
|
|
|
39
107
|
### Deprecated
|
|
108
|
+
|
|
40
109
|
- Nothing.
|
|
41
110
|
|
|
42
111
|
### Removed
|
|
112
|
+
|
|
43
113
|
- Nothing.
|
|
44
114
|
|
|
45
115
|
### Fixed
|
|
116
|
+
|
|
46
117
|
- Documentation typos.
|
|
47
118
|
- Rubocop configuration updates.
|
|
48
119
|
|
|
49
120
|
## 1.1.2 - 2024-03-28
|
|
50
121
|
|
|
51
122
|
### Added
|
|
123
|
+
|
|
52
124
|
- Add support for enable_granular_consent option (#455)
|
|
53
125
|
|
|
54
126
|
### Deprecated
|
|
127
|
+
|
|
55
128
|
- Nothing.
|
|
56
129
|
|
|
57
130
|
### Removed
|
|
131
|
+
|
|
58
132
|
- Nothing.
|
|
59
133
|
|
|
60
134
|
### Fixed
|
|
135
|
+
|
|
61
136
|
- Nothing.
|
|
62
137
|
|
|
63
138
|
## 1.1.1 - 2022-09-05
|
|
64
139
|
|
|
65
140
|
### Added
|
|
141
|
+
|
|
66
142
|
- Nothing.
|
|
67
143
|
|
|
68
144
|
### Deprecated
|
|
145
|
+
|
|
69
146
|
- Nothing.
|
|
70
147
|
|
|
71
148
|
### Removed
|
|
149
|
+
|
|
72
150
|
- Nothing.
|
|
73
151
|
|
|
74
152
|
### Fixed
|
|
153
|
+
|
|
75
154
|
- Fixed JWT decoding issue. (Invalid segment encoding) [#431](https://github.com/zquestz/omniauth-google-oauth2/pull/431)
|
|
76
155
|
|
|
77
156
|
## 1.1.0 - 2022-09-03
|
|
78
157
|
|
|
79
158
|
### Added
|
|
159
|
+
|
|
80
160
|
- `overridable_authorize_options` has been added to restrict overriding authorize_options by request params. [#423](https://github.com/zquestz/omniauth-google-oauth2/pull/423)
|
|
81
161
|
- Support for oauth2 2.0.x. [#429](https://github.com/zquestz/omniauth-google-oauth2/pull/429)
|
|
82
162
|
|
|
83
163
|
### Deprecated
|
|
164
|
+
|
|
84
165
|
- Nothing.
|
|
85
166
|
|
|
86
167
|
### Removed
|
|
168
|
+
|
|
87
169
|
- Nothing.
|
|
88
170
|
|
|
89
171
|
### Fixed
|
|
172
|
+
|
|
90
173
|
- Nothing.
|
|
91
174
|
|
|
92
175
|
## 1.0.1 - 2022-03-10
|
|
93
176
|
|
|
94
177
|
### Added
|
|
178
|
+
|
|
95
179
|
- Output granted scopes in credentials block of the auth hash.
|
|
96
180
|
- Migrated to GitHub actions.
|
|
97
181
|
|
|
98
182
|
### Deprecated
|
|
183
|
+
|
|
99
184
|
- Nothing.
|
|
100
185
|
|
|
101
186
|
### Removed
|
|
187
|
+
|
|
102
188
|
- Nothing.
|
|
103
189
|
|
|
104
190
|
### Fixed
|
|
191
|
+
|
|
105
192
|
- Overriding the `redirect_uri` via params or JSON request body.
|
|
106
193
|
|
|
107
194
|
## 1.0.0 - 2021-03-14
|
|
108
195
|
|
|
109
196
|
### Added
|
|
197
|
+
|
|
110
198
|
- Support for Omniauth 2.x!
|
|
111
199
|
|
|
112
200
|
### Deprecated
|
|
201
|
+
|
|
113
202
|
- Nothing.
|
|
114
203
|
|
|
115
204
|
### Removed
|
|
205
|
+
|
|
116
206
|
- Support for Omniauth 1.x.
|
|
117
207
|
|
|
118
208
|
### Fixed
|
|
209
|
+
|
|
119
210
|
- Nothing.
|
|
120
211
|
|
|
121
212
|
## 0.8.2 - 2021-03-14
|
|
122
213
|
|
|
123
214
|
### Added
|
|
215
|
+
|
|
124
216
|
- Constrains the version to Omniauth 1.x.
|
|
125
217
|
|
|
126
218
|
### Deprecated
|
|
219
|
+
|
|
127
220
|
- Nothing.
|
|
128
221
|
|
|
129
222
|
### Removed
|
|
223
|
+
|
|
130
224
|
- Nothing.
|
|
131
225
|
|
|
132
226
|
### Fixed
|
|
227
|
+
|
|
133
228
|
- Nothing.
|
|
134
229
|
|
|
135
230
|
## 0.8.1 - 2020-12-12
|
|
136
231
|
|
|
137
232
|
### Added
|
|
233
|
+
|
|
138
234
|
- Support reading the access token from a json request body.
|
|
139
235
|
|
|
140
236
|
### Deprecated
|
|
237
|
+
|
|
141
238
|
- Nothing.
|
|
142
239
|
|
|
143
240
|
### Removed
|
|
241
|
+
|
|
144
242
|
- No longer verify the iat claim for JWT.
|
|
145
243
|
|
|
146
244
|
### Fixed
|
|
245
|
+
|
|
147
246
|
- A few minor issues with .rubocop.yml.
|
|
148
247
|
- Issues with image resizing code when the image came with size information from Google.
|
|
149
248
|
|
|
150
249
|
## 0.8.0 - 2019-08-21
|
|
151
250
|
|
|
152
251
|
### Added
|
|
252
|
+
|
|
153
253
|
- Updated omniauth-oauth2 to v1.6.0 for security fixes.
|
|
154
254
|
|
|
155
255
|
### Deprecated
|
|
256
|
+
|
|
156
257
|
- Nothing.
|
|
157
258
|
|
|
158
259
|
### Removed
|
|
260
|
+
|
|
159
261
|
- Ruby 2.1 support.
|
|
160
262
|
|
|
161
263
|
### Fixed
|
|
264
|
+
|
|
162
265
|
- Nothing.
|
|
163
266
|
|
|
164
267
|
## 0.7.0 - 2019-06-03
|
|
165
268
|
|
|
166
269
|
### Added
|
|
270
|
+
|
|
167
271
|
- Ensure `info[:email]` is always verified, and include `unverified_email`
|
|
168
272
|
|
|
169
273
|
### Deprecated
|
|
274
|
+
|
|
170
275
|
- Nothing.
|
|
171
276
|
|
|
172
277
|
### Removed
|
|
278
|
+
|
|
173
279
|
- Nothing.
|
|
174
280
|
|
|
175
281
|
### Fixed
|
|
282
|
+
|
|
176
283
|
- Nothing.
|
|
177
284
|
|
|
178
285
|
## 0.6.1 - 2019-03-07
|
|
179
286
|
|
|
180
287
|
### Added
|
|
288
|
+
|
|
181
289
|
- Return `email` and `email_verified` keys in response.
|
|
182
290
|
|
|
183
291
|
### Deprecated
|
|
292
|
+
|
|
184
293
|
- Nothing.
|
|
185
294
|
|
|
186
295
|
### Removed
|
|
296
|
+
|
|
187
297
|
- Nothing.
|
|
188
298
|
|
|
189
299
|
### Fixed
|
|
300
|
+
|
|
190
301
|
- Nothing.
|
|
191
302
|
|
|
192
303
|
## 0.6.0 - 2018-12-28
|
|
193
304
|
|
|
194
305
|
### Added
|
|
306
|
+
|
|
195
307
|
- Support for JWT 2.x.
|
|
196
308
|
|
|
197
309
|
### Deprecated
|
|
310
|
+
|
|
198
311
|
- Nothing.
|
|
199
312
|
|
|
200
313
|
### Removed
|
|
314
|
+
|
|
201
315
|
- Support for JWT 1.x.
|
|
202
316
|
- Support for `raw_friend_info` and `raw_image_info`.
|
|
203
317
|
- Stop using Google+ API endpoints.
|
|
204
318
|
|
|
205
319
|
### Fixed
|
|
320
|
+
|
|
206
321
|
- Nothing.
|
|
207
322
|
|
|
208
323
|
## 0.5.4 - 2018-12-07
|
|
209
324
|
|
|
210
325
|
### Added
|
|
326
|
+
|
|
211
327
|
- New recommended endpoints for Google OAuth.
|
|
212
328
|
|
|
213
329
|
### Deprecated
|
|
330
|
+
|
|
214
331
|
- Nothing.
|
|
215
332
|
|
|
216
333
|
### Removed
|
|
334
|
+
|
|
217
335
|
- Nothing.
|
|
218
336
|
|
|
219
337
|
### Fixed
|
|
338
|
+
|
|
220
339
|
- Nothing.
|
|
221
340
|
|
|
222
341
|
## 0.5.3 - 2018-01-25
|
|
223
342
|
|
|
224
343
|
### Added
|
|
344
|
+
|
|
225
345
|
- Added support for the JWT 2.x gem.
|
|
226
346
|
- Now fully qualifies the `JWT` class to prevent conflicts with the `Omniauth::JWT` strategy.
|
|
227
347
|
|
|
228
348
|
### Deprecated
|
|
349
|
+
|
|
229
350
|
- Nothing.
|
|
230
351
|
|
|
231
352
|
### Removed
|
|
353
|
+
|
|
232
354
|
- Removed the `multijson` dependency.
|
|
233
355
|
- Support for versions of `omniauth-oauth2` < 1.5.
|
|
234
356
|
|
|
235
357
|
### Fixed
|
|
358
|
+
|
|
236
359
|
- Nothing.
|
|
237
360
|
|
|
238
361
|
## 0.5.2 - 2017-07-30
|
|
239
362
|
|
|
240
363
|
### Added
|
|
364
|
+
|
|
241
365
|
- Nothing.
|
|
242
366
|
|
|
243
367
|
### Deprecated
|
|
368
|
+
|
|
244
369
|
- Nothing.
|
|
245
370
|
|
|
246
371
|
### Removed
|
|
372
|
+
|
|
247
373
|
- New `authorize_url` and `token_url` endpoints are reverted until JWT 2.0 ships.
|
|
248
374
|
|
|
249
375
|
### Fixed
|
|
376
|
+
|
|
250
377
|
- Nothing.
|
|
251
378
|
|
|
252
379
|
## 0.5.1 - 2017-07-19
|
|
253
380
|
|
|
254
381
|
### Added
|
|
255
|
-
|
|
382
|
+
|
|
383
|
+
- _Breaking_ JWT iss verification can be enabled/disabled with the `verify_iss` flag - see the README for more details.
|
|
256
384
|
- Authorize options now includes `device_id` and `device_name` for private ip ranges.
|
|
257
385
|
|
|
258
386
|
### Deprecated
|
|
387
|
+
|
|
259
388
|
- Nothing.
|
|
260
389
|
|
|
261
390
|
### Removed
|
|
391
|
+
|
|
262
392
|
- Nothing.
|
|
263
393
|
|
|
264
394
|
### Fixed
|
|
395
|
+
|
|
265
396
|
- Updated `authorize_url` and `token_url` to new endpoints.
|
|
266
397
|
|
|
267
398
|
## 0.5.0 - 2017-05-29
|
|
268
399
|
|
|
269
400
|
### Added
|
|
401
|
+
|
|
270
402
|
- Rubocop checks to specs.
|
|
271
403
|
- Defaulted dev environment to ruby 2.3.4.
|
|
272
404
|
|
|
273
405
|
### Deprecated
|
|
406
|
+
|
|
274
407
|
- Nothing.
|
|
275
408
|
|
|
276
409
|
### Removed
|
|
410
|
+
|
|
277
411
|
- Testing support for older versions of ruby not supported by OmniAuth 1.5.
|
|
278
412
|
- Key `[:urls]['Google']` no longer exists, it has been renamed to `[:urls][:google]`.
|
|
279
413
|
|
|
280
414
|
### Fixed
|
|
415
|
+
|
|
281
416
|
- Updated all code to rubocop conventions. This includes the Ruby 1.9 hash syntax when appropriate.
|
|
282
417
|
- Example javascript flow now picks up ENV vars for google key and secret.
|
|
283
418
|
|
|
284
419
|
## 0.4.1 - 2016-03-14
|
|
285
420
|
|
|
286
421
|
### Added
|
|
422
|
+
|
|
287
423
|
- Nothing.
|
|
288
424
|
|
|
289
425
|
### Deprecated
|
|
426
|
+
|
|
290
427
|
- Nothing.
|
|
291
428
|
|
|
292
429
|
### Removed
|
|
430
|
+
|
|
293
431
|
- Nothing.
|
|
294
432
|
|
|
295
433
|
### Fixed
|
|
434
|
+
|
|
296
435
|
- Fixed JWT iat leeway by requiring ruby-jwt 1.5.2
|
|
297
436
|
|
|
298
437
|
## 0.4.0 - 2016-03-11
|
|
299
438
|
|
|
300
439
|
### Added
|
|
440
|
+
|
|
301
441
|
- Addedd ability to specify multiple hosted domains.
|
|
302
442
|
- Added a default leeway of 1 minute to JWT token validation.
|
|
303
443
|
- Now requires ruby-jwt 1.5.x.
|
|
304
444
|
|
|
305
445
|
### Deprecated
|
|
446
|
+
|
|
306
447
|
- Nothing.
|
|
307
448
|
|
|
308
449
|
### Removed
|
|
450
|
+
|
|
309
451
|
- Removed support for ruby 1.9.3 as ruby-jwt 1.5.x does not support it.
|
|
310
452
|
|
|
311
453
|
### Fixed
|
|
454
|
+
|
|
312
455
|
- Nothing.
|
|
313
456
|
|
|
314
457
|
## 0.3.1 - 2016-01-28
|
|
315
458
|
|
|
316
459
|
### Added
|
|
460
|
+
|
|
317
461
|
- Verify Hosted Domain if hd is set in options.
|
|
318
462
|
|
|
319
463
|
### Deprecated
|
|
464
|
+
|
|
320
465
|
- Nothing.
|
|
321
466
|
|
|
322
467
|
### Removed
|
|
468
|
+
|
|
323
469
|
- Dependency on addressable.
|
|
324
470
|
|
|
325
471
|
### Fixed
|
|
472
|
+
|
|
326
473
|
- Nothing.
|
|
327
474
|
|
|
328
475
|
## 0.3.0 - 2016-01-09
|
|
329
476
|
|
|
330
477
|
### Added
|
|
478
|
+
|
|
331
479
|
- Updated verify_token to use the v3 tokeninfo endpoint.
|
|
332
480
|
|
|
333
481
|
### Deprecated
|
|
482
|
+
|
|
334
483
|
- Nothing.
|
|
335
484
|
|
|
336
485
|
### Removed
|
|
486
|
+
|
|
337
487
|
- Nothing.
|
|
338
488
|
|
|
339
489
|
### Fixed
|
|
490
|
+
|
|
340
491
|
- Compatibility with omniauth-oauth2 1.4.0
|
|
341
492
|
|
|
342
493
|
## 0.2.10 - 2015-11-05
|
|
343
494
|
|
|
344
495
|
### Added
|
|
496
|
+
|
|
345
497
|
- Nothing.
|
|
346
498
|
|
|
347
499
|
### Deprecated
|
|
500
|
+
|
|
348
501
|
- Nothing.
|
|
349
502
|
|
|
350
503
|
### Removed
|
|
504
|
+
|
|
351
505
|
- Removed some checks on the id_token. Now only parses the id_token in the JWT processing.
|
|
352
506
|
|
|
353
507
|
### Fixed
|
|
508
|
+
|
|
354
509
|
- Nothing.
|
|
355
510
|
|
|
356
511
|
## 0.2.9 - 2015-10-29
|
|
357
512
|
|
|
358
513
|
### Added
|
|
514
|
+
|
|
359
515
|
- Nothing.
|
|
360
516
|
|
|
361
517
|
### Deprecated
|
|
518
|
+
|
|
362
519
|
- Nothing.
|
|
363
520
|
|
|
364
521
|
### Removed
|
|
522
|
+
|
|
365
523
|
- Nothing.
|
|
366
524
|
|
|
367
525
|
### Fixed
|
|
526
|
+
|
|
368
527
|
- Issue with omniauth-oauth2 where redirect_uri was handled improperly. We now lock the dependency to ~> 1.3.1
|
|
369
528
|
|
|
370
529
|
## 0.2.8 - 2015-10-01
|
|
371
530
|
|
|
372
531
|
### Added
|
|
532
|
+
|
|
373
533
|
- Added skip_jwt option to bypass JWT decoding in case you get decoding errors.
|
|
374
534
|
|
|
375
535
|
### Deprecated
|
|
536
|
+
|
|
376
537
|
- Nothing.
|
|
377
538
|
|
|
378
539
|
### Removed
|
|
540
|
+
|
|
379
541
|
- Nothing.
|
|
380
542
|
|
|
381
543
|
### Fixed
|
|
544
|
+
|
|
382
545
|
- Resolved JWT::InvalidIatError. https://github.com/zquestz/omniauth-google-oauth2/issues/195
|
|
383
546
|
|
|
384
547
|
## 0.2.7 - 2015-09-25
|
|
385
548
|
|
|
386
549
|
### Added
|
|
550
|
+
|
|
387
551
|
- Now strips out the 'sz' parameter from profile image urls.
|
|
388
552
|
- Now uses 'addressable' gem for URI actions.
|
|
389
553
|
- Added image data to extras hash.
|
|
@@ -391,52 +555,67 @@ All notable changes to this project will be documented in this file.
|
|
|
391
555
|
- Handle authorization codes coming from an installed applications.
|
|
392
556
|
|
|
393
557
|
### Deprecated
|
|
558
|
+
|
|
394
559
|
- Nothing.
|
|
395
560
|
|
|
396
561
|
### Removed
|
|
562
|
+
|
|
397
563
|
- Nothing.
|
|
398
564
|
|
|
399
565
|
### Fixed
|
|
566
|
+
|
|
400
567
|
- Fixes double slashes in google image urls.
|
|
401
568
|
|
|
402
569
|
## 0.2.6 - 2014-10-26
|
|
403
570
|
|
|
404
571
|
### Added
|
|
572
|
+
|
|
405
573
|
- Nothing.
|
|
406
574
|
|
|
407
575
|
### Deprecated
|
|
576
|
+
|
|
408
577
|
- Nothing.
|
|
409
578
|
|
|
410
579
|
### Removed
|
|
580
|
+
|
|
411
581
|
- Nothing.
|
|
412
582
|
|
|
413
583
|
### Fixed
|
|
584
|
+
|
|
414
585
|
- Hybrid authorization issues due to bad method alias.
|
|
415
586
|
|
|
416
587
|
## 0.2.5 - 2014-07-09
|
|
417
588
|
|
|
418
589
|
### Added
|
|
590
|
+
|
|
419
591
|
- Support for versions of omniauth past 1.0.x.
|
|
420
592
|
|
|
421
593
|
### Deprecated
|
|
594
|
+
|
|
422
595
|
- Nothing.
|
|
423
596
|
|
|
424
597
|
### Removed
|
|
598
|
+
|
|
425
599
|
- Nothing.
|
|
426
600
|
|
|
427
601
|
### Fixed
|
|
602
|
+
|
|
428
603
|
- Nothing.
|
|
429
604
|
|
|
430
605
|
## 0.2.4 - 2014-04-25
|
|
431
606
|
|
|
432
607
|
### Added
|
|
608
|
+
|
|
433
609
|
- Now requiring the "Contacts API" and "Google+ API" to be enabled in your Google API console.
|
|
434
610
|
|
|
435
611
|
### Deprecated
|
|
612
|
+
|
|
436
613
|
- The old Google OAuth API support was removed without deprecation.
|
|
437
614
|
|
|
438
615
|
### Removed
|
|
616
|
+
|
|
439
617
|
- Support for the old Google OAuth API. `OAuth2::Error` will be thrown and state that access is not configured when you attempt to authenticate using the old API. See Added section for this release.
|
|
440
618
|
|
|
441
619
|
### Fixed
|
|
620
|
+
|
|
442
621
|
- Nothing.
|