omniauth-keycloak 1.3.0 → 1.4.2

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 8c9982a0ec26f3a29c6e8a2ff4563c45ec0c3944c69b8e3d853a5a9641fab529
-  data.tar.gz: 7bf4b42a30813bb0dd7a67866b051e9a5802970d1e1754aeaf393140b10d2e4e
+  metadata.gz: b21289e999dc87f96353efd93c5ed69dcab63cb1394359822f398dda6ad367ce
+  data.tar.gz: 55c1bcb5edc886efaf9569c65235bde99221848f0a1eaac83471224c93221dae
 SHA512:
-  metadata.gz: 7d04d5c18554fdb152fb00bc961615a2d08c320237fa85e1e1118a82616ff7ba5cf65c0b0da8d857ae0243119100c12a192547c7a9fadc3b658146470dc07db7
-  data.tar.gz: 1ca221dedc1468014e5761596612aac041d8da7acb3edda25b35ea211c2a4b30c533894a506b3dd480cecde2c43eff4fd63884bd969dfde55779728bb87dea99
+  metadata.gz: 6ba8b0ae0b5cae9a08cc56450ee8bc556974e207cb916b034f901594ebfb4d9bef36a44be1c3ece299879114e3ab4a0375a6cc0c02737adae67533b999762579
+  data.tar.gz: 416595948ad760b82aa396b447eb51b061b14c0e325610ea36361d53321ea214f3e2f3fc81170c0d9e0b68cfa8af2a99a9aaec7ae0b999cb58337ae9c57cf603

data/Gemfile.lock

@@ -1,7 +1,7 @@
 PATH
   remote: .
   specs:
-    omniauth-keycloak (1.3.0)
+    omniauth-keycloak (1.4.1)
       json-jwt (~> 1.13.0)
       omniauth (~> 2.0.4)
       omniauth-oauth2 (~> 1.7.1)
@@ -9,46 +9,38 @@ PATH
 GEM
   remote: https://rubygems.org/
   specs:
-    activesupport (6.1.3.2)
+    activesupport (7.0.3)
       concurrent-ruby (~> 1.0, >= 1.0.2)
       i18n (>= 1.6, < 2)
       minitest (>= 5.1)
       tzinfo (~> 2.0)
-      zeitwerk (~> 2.3)
-    addressable (2.5.2)
-      public_suffix (>= 2.0.2, < 4.0)
+    addressable (2.8.0)
+      public_suffix (>= 2.0.2, < 5.0)
     aes_key_wrap (1.1.0)
-    bindata (2.4.9)
-    concurrent-ruby (1.1.8)
-    crack (0.4.3)
-      safe_yaml (~> 1.0.0)
-    diff-lcs (1.3)
-    docile (1.3.1)
-    faraday (1.4.1)
-      faraday-excon (~> 1.1)
-      faraday-net_http (~> 1.0)
-      faraday-net_http_persistent (~> 1.1)
-      multipart-post (>= 1.2, < 3)
+    bindata (2.4.10)
+    concurrent-ruby (1.1.10)
+    crack (0.4.5)
+      rexml
+    diff-lcs (1.4.4)
+    docile (1.4.0)
+    faraday (2.3.0)
+      faraday-net_http (~> 2.0)
       ruby2_keywords (>= 0.0.4)
-    faraday-excon (1.1.0)
-    faraday-net_http (1.0.1)
-    faraday-net_http_persistent (1.1.0)
-    hashdiff (0.3.7)
-    hashie (4.1.0)
-    i18n (1.8.10)
+    faraday-net_http (2.0.3)
+    hashdiff (1.0.1)
+    hashie (5.0.0)
+    i18n (1.10.0)
       concurrent-ruby (~> 1.0)
-    json (2.3.1)
     json-jwt (1.13.0)
       activesupport (>= 4.2)
       aes_key_wrap
       bindata
-    jwt (2.2.3)
-    minitest (5.14.4)
+    jwt (2.3.0)
+    minitest (5.15.0)
     multi_json (1.15.0)
     multi_xml (0.6.0)
-    multipart-post (2.1.1)
-    oauth2 (1.4.7)
-      faraday (>= 0.8, < 2.0)
+    oauth2 (1.4.9)
+      faraday (>= 0.17.3, < 3.0)
       jwt (>= 1.0, < 3.0)
       multi_json (~> 1.3)
       multi_xml (~> 0.5)
@@ -57,41 +49,41 @@ GEM
       hashie (>= 3.4.6)
       rack (>= 1.6.2, < 3)
       rack-protection
-    omniauth-oauth2 (1.7.1)
+    omniauth-oauth2 (1.7.2)
       oauth2 (~> 1.4)
       omniauth (>= 1.9, < 3)
-    public_suffix (3.0.3)
+    public_suffix (4.0.6)
     rack (2.2.3)
-    rack-protection (2.1.0)
+    rack-protection (2.2.0)
       rack
     rake (13.0.1)
-    rspec (3.8.0)
-      rspec-core (~> 3.8.0)
-      rspec-expectations (~> 3.8.0)
-      rspec-mocks (~> 3.8.0)
-    rspec-core (3.8.0)
-      rspec-support (~> 3.8.0)
-    rspec-expectations (3.8.1)
+    rexml (3.2.5)
+    rspec (3.10.0)
+      rspec-core (~> 3.10.0)
+      rspec-expectations (~> 3.10.0)
+      rspec-mocks (~> 3.10.0)
+    rspec-core (3.10.1)
+      rspec-support (~> 3.10.0)
+    rspec-expectations (3.10.1)
       diff-lcs (>= 1.2.0, < 2.0)
-      rspec-support (~> 3.8.0)
-    rspec-mocks (3.8.0)
+      rspec-support (~> 3.10.0)
+    rspec-mocks (3.10.2)
       diff-lcs (>= 1.2.0, < 2.0)
-      rspec-support (~> 3.8.0)
-    rspec-support (3.8.0)
-    ruby2_keywords (0.0.4)
-    safe_yaml (1.0.4)
-    simplecov (0.16.1)
+      rspec-support (~> 3.10.0)
+    rspec-support (3.10.3)
+    ruby2_keywords (0.0.5)
+    simplecov (0.21.2)
       docile (~> 1.1)
-      json (>= 1.8, < 3)
-      simplecov-html (~> 0.10.0)
-    simplecov-html (0.10.2)
+      simplecov-html (~> 0.11)
+      simplecov_json_formatter (~> 0.1)
+    simplecov-html (0.12.3)
+    simplecov_json_formatter (0.1.3)
     tzinfo (2.0.4)
       concurrent-ruby (~> 1.0)
-    webmock (3.4.2)
-      addressable (>= 2.3.6)
+    webmock (3.14.0)
+      addressable (>= 2.8.0)
       crack (>= 0.3.2)
-      hashdiff
-    zeitwerk (2.4.2)
+      hashdiff (>= 0.4.0, < 2.0.0)
 
 PLATFORMS
   ruby
@@ -100,9 +92,9 @@ DEPENDENCIES
   bundler (~> 2.2)
   omniauth-keycloak!
   rake (~> 13.0)
-  rspec (~> 3.0)
-  simplecov (~> 0.16.1)
-  webmock (~> 3.4.2)
+  rspec (~> 3.10)
+  simplecov (~> 0.21)
+  webmock (~> 3.14)
 
 BUNDLED WITH
-   2.2.17
+   2.2.31

data/README.md

@@ -16,6 +16,15 @@ Or install it yourself as:
 
     $ gem install omniauth-keycloak
 
+## Use with Keycloak >= 17 (Quarkus distribution)
+In version 17 of Keycloak, `/auth` was removed from the default context path. (See Issue [#29](https://github.com/ccrockett/omniauth-keycloak/issues/29))  
+In order to reduce breaking existing user's setup, this gem assumes `/auth` as the default context.  
+__So if you want to use Keycloak 17 or greater then you must do one of the following:__
+
+1. Pass in `--http-relative-path '/auth'` option with the keycloak start command
+2. Pass in a empty string for you base_url client_option:  
+  `client_options: {base_url: '', site: 'https://example.keycloak-url.com', realm: 'example-realm'}`
+
 ## Usage
 
 `OmniAuth::Strategies::Keycloak` is simply a Rack middleware. Read the OmniAuth docs for detailed instructions: https://github.com/intridea/omniauth.
@@ -25,10 +34,33 @@ Here's a quick example, adding the middleware to a Rails app in `config/initiali
 ```ruby
 Rails.application.config.middleware.use OmniAuth::Builder do
   provider :keycloak_openid, 'Example-Client', '19cca35f-dddd-473a-bdd5-03f00d61d884',
-    client_options: {site: 'https://example.keycloak-url.com', realm: 'example-realm'}
+    client_options: {site: 'https://example.keycloak-url.com', realm: 'example-realm'},
+    name: 'keycloak'
+end
+```
+This will allow a POST request to `auth/keycloak` since the name is set to keycloak
+
+Or using a proc setup with a custom options:
+
+```ruby
+Rails.application.config.middleware.use OmniAuth::Builder do
+  SETUP_PROC = lambda do |env|
+    request = Rack::Request.new(env)
+    organization = Organization.find_by(host: request.host)
+    provider_config = organization.enabled_omniauth_providers[:keycloakopenid]
+
+    env["omniauth.strategy"].options[:client_id] = provider_config[:client_id]
+    env["omniauth.strategy"].options[:client_secret] = provider_config[:client_secret]
+    env["omniauth.strategy"].options[:client_options] = { site: provider_config[:site],  realm: provider_config[:realm] }
+  end
+
+  Rails.application.config.middleware.use OmniAuth::Builder do
+    provider :keycloak_openid, setup: SETUP_PROC
+  end
 end
 ```
 
+
 ## Devise Usage
 Adapted from [Devise OmniAuth Instructions](https://github.com/plataformatec/devise/wiki/OmniAuth:-Overview)
 
@@ -43,7 +75,7 @@ end
 # config/initializers/devise.rb
 config.omniauth :keycloak_openid, "Example-Client-Name", "example-secret-if-configured", client_options: { site: "https://example.keycloak-url.com", realm: "example-realm" }, :strategy_class => OmniAuth::Strategies::KeycloakOpenId
 
-# Below controller assumes callback route configuration following 
+# Below controller assumes callback route configuration following
 # in config/routes.rb
 Devise.setup do |config|
   # ...
@@ -70,6 +102,17 @@ end
 
 ```
 
+## Configuration
+  * __Base Url other than /auth__  
+  This gem tries to get the keycloak configuration from `"#{site}/auth/realms/#{realm}/.well-known/openid-configuration"`. If your keycloak server has been setup to use a different "root" url other than `/auth` then you need to pass in the `base_url` option when setting up the gem:
+    ```ruby
+    Rails.application.config.middleware.use OmniAuth::Builder do
+      provider :keycloak_openid, 'Example-Client', '19cca35f-dddd-473a-bdd5-03f00d61d884',
+        client_options: {site: 'https://example.keycloak-url.com', realm: 'example-realm', base_url: '/authorize'},
+        name: 'keycloak'
+    end
+    ```
+
 ## Contributing
 
 Bug reports and pull requests are welcome on GitHub at https://github.com/ccrockett/omniauth-keycloak. This project is intended to be a safe, welcoming space for collaboration, and contributors are expected to adhere to the [Contributor Covenant](http://contributor-covenant.org) code of conduct.

data/lib/keycloak/version.rb

@@ -1,5 +1,5 @@
 module Omniauth
   module Keycloak
-    VERSION = "1.3.0"
+    VERSION = "1.4.2"
   end
 end

data/lib/omniauth/strategies/keycloak-openid.rb

@@ -13,9 +13,11 @@ module OmniAuth
 
             attr_reader :authorize_url
             attr_reader :token_url
-            attr_reader :cert
+            attr_reader :certs
 
             def setup_phase
+                super
+
                 if @authorize_url.nil? || @token_url.nil?
                     prevent_site_option_mistake
 
@@ -24,7 +26,7 @@ module OmniAuth
 
                     raise_on_failure = options.client_options.fetch(:raise_on_failure, false)
 
-                    config_url = URI.join(site, "/auth/realms/#{realm}/.well-known/openid-configuration")
+                    config_url = URI.join(site, "#{auth_url_base}/realms/#{realm}/.well-known/openid-configuration")
 
                     log :debug, "Going to get Keycloak configuration. URL: #{config_url}"
                     response = Faraday.get config_url
@@ -46,8 +48,8 @@ module OmniAuth
                         certs = Faraday.get @certs_endpoint
                         if (certs.status == 200)
                             json = MultiJson.load(certs.body)
-                            @cert = json["keys"][0]
-                            log :debug, "Successfully got certificate. Certificate length: #{@cert.length}"
+                            @certs = json["keys"]
+                            log :debug, "Successfully got certificate. Certificate length: #{@certs.length}"
                         else
                             message = "Coundn't get certificate. URL: #{@certs_endpoint}"
                             log :error, message
@@ -62,6 +64,14 @@ module OmniAuth
                 end
             end
 
+            def auth_url_base
+              return '/auth' unless options.client_options[:base_url]
+              base_url = options.client_options[:base_url]
+              return base_url if (base_url == '' || base_url[0] == '/')
+
+              raise ConfigurationError, "Keycloak base_url option should start with '/'. Current value: #{base_url}"
+            end
+
             def prevent_site_option_mistake
               site = options.client_options[:site]
               return unless site =~ /\/auth$/
@@ -81,14 +91,14 @@ module OmniAuth
 
             def build_access_token
                 verifier = request.params["code"]
-                client.auth_code.get_token(verifier, 
+                client.auth_code.get_token(verifier,
                     {:redirect_uri => callback_url.gsub(/\?.+\Z/, "")}
-                    .merge(token_params.to_hash(:symbolize_keys => true)), 
+                    .merge(token_params.to_hash(:symbolize_keys => true)),
                     deep_symbolize(options.auth_token_params))
             end
 
             uid{ raw_info['sub'] }
-        
+
             info do
             {
                 :name => raw_info['name'],
@@ -97,17 +107,18 @@ module OmniAuth
                 :last_name => raw_info['family_name']
             }
             end
-        
+
             extra do
             {
-                'raw_info' => raw_info
+                'raw_info' => raw_info,
+                'id_token' => access_token['id_token']
             }
             end
-        
+
             def raw_info
                 id_token_string = access_token.token
-                jwk = JSON::JWK.new(@cert)
-                id_token = JSON::JWT.decode id_token_string, jwk
+                jwks = JSON::JWK::Set.new(@certs)
+                id_token = JSON::JWT.decode id_token_string, jwks
                 id_token
             end
 

data/omniauth-keycloak.gemspec

@@ -4,13 +4,13 @@ Gem::Specification.new do |spec|
   spec.version       = Omniauth::Keycloak::VERSION
   spec.authors       = ["Cameron Crockett"]
   spec.email         = ["cameron.crockett@ccrockett.com"]
-  
+
   spec.description   = %q{Omniauth strategy for Keycloak}
   spec.summary       = spec.description
   spec.homepage      = "https://github.com/ccrockett/omniauth-keycloak"
   spec.license       = "MIT"
-  spec.required_rubygems_version = '>= 1.3.5'
-  spec.required_ruby_version = '>= 2.2'
+  spec.required_rubygems_version = '>= 3.1.2'
+  spec.required_ruby_version = '>= 2.6'
 
   # Specify which files should be added to the gem when it is released.
   # The `git ls-files -z` loads the files in the RubyGem that have been added into git.
@@ -22,14 +22,14 @@ Gem::Specification.new do |spec|
   spec.executables   = spec.files.grep(%r{^exe/}) { |f| File.basename(f) }
   spec.require_paths = ["lib"]
 
-  
-  spec.add_dependency "omniauth", "~> 2.0.4"
+
+  spec.add_dependency "omniauth", ">= 2.0"
   spec.add_dependency "omniauth-oauth2", "~> 1.7.1"
   spec.add_dependency "json-jwt", "~> 1.13.0"
 
   spec.add_development_dependency "bundler", "~> 2.2"
   spec.add_development_dependency "rake", "~> 13.0"
-  spec.add_development_dependency "rspec", "~> 3.0"
-  spec.add_development_dependency 'simplecov', '~> 0.16.1'
-  spec.add_development_dependency 'webmock', '~> 3.4.2'
+  spec.add_development_dependency "rspec", "~> 3.10"
+  spec.add_development_dependency 'simplecov', '~> 0.21'
+  spec.add_development_dependency 'webmock', '~> 3.14'
 end

data/spec/omniauth/strategies/keycloak_spec.rb

@@ -1,41 +1,45 @@
 require 'spec_helper'
 
 RSpec.describe OmniAuth::Strategies::KeycloakOpenId do
-  body = '{"issuer": "http://localhost:8080/auth/realms/example-realm",
-  "authorization_endpoint": "http://localhost:8080/auth/realms/example-realm/protocol/openid-connect/auth",
-  "token_endpoint": "http://localhost:8080/auth/realms/example-realm/protocol/openid-connect/token",
-  "token_introspection_endpoint": "http://localhost:8080/auth/realms/example-realm/protocol/openid-connect/token/introspect",
-  "userinfo_endpoint": "http://localhost:8080/auth/realms/example-realm/protocol/openid-connect/userinfo",
-  "end_session_endpoint": "http://localhost:8080/auth/realms/example-realm/protocol/openid-connect/logout",
-  "jwks_uri": "http://localhost:8080/auth/realms/example-realm/protocol/openid-connect/certs",
-  "check_session_iframe": "http://localhost:8080/auth/realms/example-realm/protocol/openid-connect/login-status-iframe.html",
-  "grant_types_supported": ["authorization_code", "implicit", "refresh_token", "password", "client_credentials"],
-  "response_types_supported": ["code", "none", "id_token", "token", "id_token token", "code id_token", "code token", "code id_token token"],
-  "subject_types_supported": ["public", "pairwise"],
-  "id_token_signing_alg_values_supported": ["RS256"],
-  "userinfo_signing_alg_values_supported": ["RS256"],
-  "request_object_signing_alg_values_supported": ["none", "RS256"],
-  "response_modes_supported": ["query", "fragment", "form_post"],
-  "registration_endpoint": "http://localhost:8080/auth/realms/example-realm/clients-registrations/openid-connect",
-  "token_endpoint_auth_methods_supported": ["private_key_jwt", "client_secret_basic", "client_secret_post"],
-  "token_endpoint_auth_signing_alg_values_supported": ["RS256"],
-  "claims_supported": ["sub", "iss", "auth_time", "name", "given_name", "family_name", "preferred_username", "email"],
-  "claim_types_supported": ["normal"],
-  "claims_parameter_supported": false,
-  "scopes_supported": ["openid", "offline_access"],
-  "request_parameter_supported": true,
-  "request_uri_parameter_supported": true}'
+  let(:body) {
+    {
+      "issuer": "http://localhost:8080/auth/realms/example-realm",
+      "authorization_endpoint": "http://localhost:8080/auth/realms/example-realm/protocol/openid-connect/auth",
+      "token_endpoint": "http://localhost:8080/auth/realms/example-realm/protocol/openid-connect/token",
+      "token_introspection_endpoint": "http://localhost:8080/auth/realms/example-realm/protocol/openid-connect/token/introspect",
+      "userinfo_endpoint": "http://localhost:8080/auth/realms/example-realm/protocol/openid-connect/userinfo",
+      "end_session_endpoint": "http://localhost:8080/auth/realms/example-realm/protocol/openid-connect/logout",
+      "jwks_uri": "http://localhost:8080/auth/realms/example-realm/protocol/openid-connect/certs",
+      "check_session_iframe": "http://localhost:8080/auth/realms/example-realm/protocol/openid-connect/login-status-iframe.html",
+      "grant_types_supported": ["authorization_code", "implicit", "refresh_token", "password", "client_credentials"],
+      "response_types_supported": ["code", "none", "id_token", "token", "id_token token", "code id_token", "code token", "code id_token token"],
+      "subject_types_supported": ["public", "pairwise"],
+      "id_token_signing_alg_values_supported": ["RS256"],
+      "userinfo_signing_alg_values_supported": ["RS256"],
+      "request_object_signing_alg_values_supported": ["none", "RS256"],
+      "response_modes_supported": ["query", "fragment", "form_post"],
+      "registration_endpoint": "http://localhost:8080/auth/realms/example-realm/clients-registrations/openid-connect",
+      "token_endpoint_auth_methods_supported": ["private_key_jwt", "client_secret_basic", "client_secret_post"],
+      "token_endpoint_auth_signing_alg_values_supported": ["RS256"],
+      "claims_supported": ["sub", "iss", "auth_time", "name", "given_name", "family_name", "preferred_username", "email"],
+      "claim_types_supported": ["normal"],
+      "claims_parameter_supported": false,
+      "scopes_supported": ["openid", "offline_access"],
+      "request_parameter_supported": true,
+      "request_uri_parameter_supported": true
+    }
+  }
 
   context 'client options' do
     subject do
       stub_request(:get, "http://localhost:8080/auth/realms/example-realm/.well-known/openid-configuration")
-        .to_return(status: 200, body: body, headers: {})
+        .to_return(status: 200, body: JSON.generate(body), headers: {})
       stub_request(:get, "http://localhost:8080/auth/realms/example-realm/protocol/openid-connect/certs")
         .to_return(status: 404, body: "", headers: {})
       OmniAuth::Strategies::KeycloakOpenId.new('keycloak-openid', 'Example-Client', 'b53c572b-9f3b-4e79-bf8b-f03c799ba6ec',
         client_options: {site: 'http://localhost:8080/', realm: 'example-realm'})
     end
-    
+
     it 'should have the correct keycloak token url' do
       subject.setup_phase
       expect(subject.token_url).to eq('/auth/realms/example-realm/protocol/openid-connect/token')
@@ -47,6 +51,93 @@ RSpec.describe OmniAuth::Strategies::KeycloakOpenId do
     end
   end
 
+  describe 'client base_url option set' do
+    context 'to blank string' do
+      let(:new_body_endpoints) {
+        {
+          "authorization_endpoint": "http://localhost:8080/realms/example-realm/protocol/openid-connect/auth",
+          "token_endpoint": "http://localhost:8080/realms/example-realm/protocol/openid-connect/token",
+          "jwks_uri": "http://localhost:8080/realms/example-realm/protocol/openid-connect/certs"
+        }
+      }
+
+      subject do
+        stub_request(:get, "http://localhost:8080/realms/example-realm/.well-known/openid-configuration")
+          .to_return(status: 200, body: JSON.generate(body.merge(new_body_endpoints)), headers: {})
+        stub_request(:get, "http://localhost:8080/realms/example-realm/protocol/openid-connect/certs")
+          .to_return(status: 404, body: "", headers: {})
+        OmniAuth::Strategies::KeycloakOpenId.new('keycloak-openid', 'Example-Client', 'b53c572b-9f3b-4e79-bf8b-f03c799ba6ec',
+          client_options: {site: 'http://localhost:8080/', realm: 'example-realm', base_url: ''})
+      end
+
+      it 'should have the correct keycloak token url' do
+        subject.setup_phase
+        expect(subject.token_url).to eq('/realms/example-realm/protocol/openid-connect/token')
+      end
+
+      it 'should have the correct keycloak authorization url' do
+        subject.setup_phase
+        expect(subject.authorize_url).to eq('/realms/example-realm/protocol/openid-connect/auth')
+      end
+    end
+
+    context 'to invalid string' do
+      subject do
+        stub_request(:get, "http://localhost:8080/realms/example-realm/.well-known/openid-configuration")
+          .to_return(status: 200, body: JSON.generate(body), headers: {})
+        stub_request(:get, "http://localhost:8080/auth/realms/example-realm/protocol/openid-connect/certs")
+          .to_return(status: 404, body: "", headers: {})
+        OmniAuth::Strategies::KeycloakOpenId.new('keycloak-openid', 'Example-Client', 'b53c572b-9f3b-4e79-bf8b-f03c799ba6ec',
+          client_options: {site: 'http://localhost:8080/', realm: 'example-realm', base_url: 'test'})
+      end
+
+      it 'raises Configuration Error' do
+        expect{ subject.setup_phase }
+          .to raise_error(OmniAuth::Strategies::KeycloakOpenId::ConfigurationError)
+      end
+    end
+
+    context 'to /authorize' do
+
+      let(:new_body_endpoints) {
+        {
+          "authorization_endpoint": "http://localhost:8080/authorize/realms/example-realm/protocol/openid-connect/auth",
+          "token_endpoint": "http://localhost:8080/authorize/realms/example-realm/protocol/openid-connect/token",
+          "jwks_uri": "http://localhost:8080/authorize/realms/example-realm/protocol/openid-connect/certs"
+        }
+      }
+
+      subject do
+        stub_request(:get, "http://localhost:8080/authorize/realms/example-realm/.well-known/openid-configuration")
+          .to_return(status: 200, body: JSON.generate(body.merge(new_body_endpoints)), headers: {})
+        stub_request(:get, "http://localhost:8080/authorize/realms/example-realm/protocol/openid-connect/certs")
+          .to_return(status: 404, body: "", headers: {})
+        OmniAuth::Strategies::KeycloakOpenId.new('keycloak-openid', 'Example-Client', 'b53c572b-9f3b-4e79-bf8b-f03c799ba6ec',
+          client_options: {site: 'http://localhost:8080/', realm: 'example-realm', base_url: '/authorize'})
+      end
+
+      it 'should have the correct keycloak token url' do
+        subject.setup_phase
+        expect(subject.token_url).to eq('/authorize/realms/example-realm/protocol/openid-connect/token')
+      end
+
+      it 'should have the correct keycloak authorization url' do
+        subject.setup_phase
+        expect(subject.authorize_url).to eq('/authorize/realms/example-realm/protocol/openid-connect/auth')
+      end
+    end
+  end
+
+  context 'client setup with a proc' do
+    subject do
+      OmniAuth::Strategies::KeycloakOpenId.new('keycloak-openid', setup: proc { throw :setup_proc_was_called })
+    end
+
+    it 'should call the proc' do
+      expect { subject.setup_phase }.to throw_symbol :setup_proc_was_called
+    end
+  end
+
   describe 'errors processing' do
     context 'when site contains /auth part' do
       subject do
@@ -78,7 +169,7 @@ RSpec.describe OmniAuth::Strategies::KeycloakOpenId do
       context 'when certificates endpoint returns error response' do
         subject do
           stub_request(:get, "http://localhost:8080/auth/realms/example-realm/.well-known/openid-configuration")
-            .to_return(status: 200, body: body, headers: {})
+            .to_return(status: 200, body: JSON.generate(body), headers: {})
           stub_request(:get, "http://localhost:8080/auth/realms/example-realm/protocol/openid-connect/certs")
             .to_return(status: 404, body: "", headers: {})
           OmniAuth::Strategies::KeycloakOpenId.new('keycloak-openid', 'Example-Client', 'b53c572b-9f3b-4e79-bf8b-f03c799ba6ec',

metadata

@@ -1,29 +1,29 @@
 --- !ruby/object:Gem::Specification
 name: omniauth-keycloak
 version: !ruby/object:Gem::Version
-  version: 1.3.0
+  version: 1.4.2
 platform: ruby
 authors:
 - Cameron Crockett
 autorequire: 
 bindir: exe
 cert_chain: []
-date: 2021-05-17 00:00:00.000000000 Z
+date: 2022-06-14 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: omniauth
   requirement: !ruby/object:Gem::Requirement
     requirements:
-    - - "~>"
+    - - ">="
       - !ruby/object:Gem::Version
-        version: 2.0.4
+        version: '2.0'
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
-    - - "~>"
+    - - ">="
       - !ruby/object:Gem::Version
-        version: 2.0.4
+        version: '2.0'
 - !ruby/object:Gem::Dependency
   name: omniauth-oauth2
   requirement: !ruby/object:Gem::Requirement
@@ -86,42 +86,42 @@ dependencies:
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: '3.0'
+        version: '3.10'
   type: :development
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: '3.0'
+        version: '3.10'
 - !ruby/object:Gem::Dependency
   name: simplecov
   requirement: !ruby/object:Gem::Requirement
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: 0.16.1
+        version: '0.21'
   type: :development
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: 0.16.1
+        version: '0.21'
 - !ruby/object:Gem::Dependency
   name: webmock
   requirement: !ruby/object:Gem::Requirement
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: 3.4.2
+        version: '3.14'
   type: :development
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: 3.4.2
+        version: '3.14'
 description: Omniauth strategy for Keycloak
 email:
 - cameron.crockett@ccrockett.com
@@ -160,12 +160,12 @@ required_ruby_version: !ruby/object:Gem::Requirement
   requirements:
   - - ">="
     - !ruby/object:Gem::Version
-      version: '2.2'
+      version: '2.6'
 required_rubygems_version: !ruby/object:Gem::Requirement
   requirements:
   - - ">="
     - !ruby/object:Gem::Version
-      version: 1.3.5
+      version: 3.1.2
 requirements: []
 rubygems_version: 3.1.6
 signing_key: