omniauth-keycloak 1.4.3 → 1.5.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 1494d8bd1dd545a49d8448e285844233045785b1bd0db84a1883cb28d8e8b2c9
-  data.tar.gz: ae275636ef1ba0a5cc32afab8511c62bd57e1fb253def902816182b6dff3ef50
+  metadata.gz: 2d8d99fcc7f0918b7fb7dd8190badbb8a0f47864171ad4f2db3a5f7576f010ac
+  data.tar.gz: 5ecaebf0b46ac4c953c93d53642d7dc71e074c68dc54736e3958f1f44e4489fb
 SHA512:
-  metadata.gz: d87ac330e9f9663c09873f15a424c1f0357dfe75cf1dee07bee227248173067a7f39cc9de0d42b0f6f97c4a3bc03daee3ee7a2cc3ce4442af97d429ed1c2dc6f
-  data.tar.gz: f37f008f98a366938113c48f76cf19e74f3406fb0a66f695b4b934706e27375c61020cd1ec0b86a08f4ffe6465b905ff1ce5a953ee8f81dcdf06cd0f76302921
+  metadata.gz: 24b46f0e102b524ee70ce0a751135d7ea4eec64db1406d2a67af2c45434e634d61879b0fd78a6e57bbdc1f2632495a1d09335bd61069ad59bb86a0b807895146
+  data.tar.gz: d7165cafe46c8cd15aba9efff3229e91287061e6d52853b4e64ae0fc23618e4bc49b5d45aae11badaff048ba0e08d5db8a8724f5f56b266fb53669ff3621a403

data/CHANGELOG.md

@@ -1,5 +1,72 @@
 # Changelog
 
+## [v1.4.4](https://github.com/ccrockett/omniauth-keycloak/tree/v1.4.4) (2022-07-25)
+
+[Full Changelog](https://github.com/ccrockett/omniauth-keycloak/compare/v1.4.3...v1.4.4)
+
+**Merged pull requests:**
+
+- Fix NoMethodError when querying for JSON Web keys [\#31](https://github.com/ccrockett/omniauth-keycloak/pull/31) ([Kazhuu](https://github.com/Kazhuu))
+- expose id\_token inside extra hash of auth hash [\#26](https://github.com/ccrockett/omniauth-keycloak/pull/26) ([rah-wtag](https://github.com/rah-wtag))
+
+## [v1.4.3](https://github.com/ccrockett/omniauth-keycloak/tree/v1.4.3) (2022-07-24)
+
+[Full Changelog](https://github.com/ccrockett/omniauth-keycloak/compare/v1.4.2...v1.4.3)
+
+**Fixed bugs:**
+
+- Error: uninitialized constant OmniAuth::Strategies::KeycloakOpenId::MultiJson after gem update [\#30](https://github.com/ccrockett/omniauth-keycloak/issues/30)
+
+## [v1.4.2](https://github.com/ccrockett/omniauth-keycloak/tree/v1.4.2) (2022-06-14)
+
+[Full Changelog](https://github.com/ccrockett/omniauth-keycloak/compare/v1.4.1...v1.4.2)
+
+**Closed issues:**
+
+- Adjust endpoints to updated Keycloak paths [\#29](https://github.com/ccrockett/omniauth-keycloak/issues/29)
+- Expose id\_token inside extra hash of auth hash [\#25](https://github.com/ccrockett/omniauth-keycloak/issues/25)
+
+**Merged pull requests:**
+
+- Set omniauth version to \>= 2.0 [\#28](https://github.com/ccrockett/omniauth-keycloak/pull/28) ([hobbypunk90](https://github.com/hobbypunk90))
+
+## [v1.4.1](https://github.com/ccrockett/omniauth-keycloak/tree/v1.4.1) (2022-05-25)
+
+[Full Changelog](https://github.com/ccrockett/omniauth-keycloak/compare/v1.4.0...v1.4.1)
+
+**Closed issues:**
+
+- Get Request is now Post Request [\#23](https://github.com/ccrockett/omniauth-keycloak/issues/23)
+- Is the "/auth/" part mandatory in Keycloak's configuration URL? [\#19](https://github.com/ccrockett/omniauth-keycloak/issues/19)
+- Add example instructions for Keycloak configuration [\#14](https://github.com/ccrockett/omniauth-keycloak/issues/14)
+
+**Merged pull requests:**
+
+- Bump bindata from 2.4.9 to 2.4.10 [\#22](https://github.com/ccrockett/omniauth-keycloak/pull/22) ([dependabot[bot]](https://github.com/apps/dependabot))
+
+## [v1.4.0](https://github.com/ccrockett/omniauth-keycloak/tree/v1.4.0) (2021-12-18)
+
+[Full Changelog](https://github.com/ccrockett/omniauth-keycloak/compare/v1.3.0...v1.4.0)
+
+**Closed issues:**
+
+- Are there any reason to specify one certificate key to decode JWT? [\#17](https://github.com/ccrockett/omniauth-keycloak/issues/17)
+- No route matches \[POST\] "/auth/keycloak\_openid" [\#15](https://github.com/ccrockett/omniauth-keycloak/issues/15)
+
+**Merged pull requests:**
+
+- Use JSON::JWK::Set instead of JSON::JWK [\#21](https://github.com/ccrockett/omniauth-keycloak/pull/21) ([hobbypunk90](https://github.com/hobbypunk90))
+- Allow pass a Proc to the setup option when you specify a strategy [\#18](https://github.com/ccrockett/omniauth-keycloak/pull/18) ([Cambero](https://github.com/Cambero))
+- Add information on how to use it to readme [\#16](https://github.com/ccrockett/omniauth-keycloak/pull/16) ([frenesim](https://github.com/frenesim))
+
+## [v1.3.0](https://github.com/ccrockett/omniauth-keycloak/tree/v1.3.0) (2021-05-17)
+
+[Full Changelog](https://github.com/ccrockett/omniauth-keycloak/compare/v1.2.1...v1.3.0)
+
+**Merged pull requests:**
+
+- Bump Omniauth dependencies to v2 [\#13](https://github.com/ccrockett/omniauth-keycloak/pull/13) ([offner](https://github.com/offner))
+
 ## [v1.2.1](https://github.com/ccrockett/omniauth-keycloak/tree/v1.2.1) (2020-12-19)
 
 [Full Changelog](https://github.com/ccrockett/omniauth-keycloak/compare/v1.2.0...v1.2.1)
@@ -14,6 +81,7 @@
 
 - Raise errors on setup failure and logging with OmniAuth::Strategy::log method [\#10](https://github.com/ccrockett/omniauth-keycloak/pull/10) ([alexpetrov](https://github.com/alexpetrov))
 - Bump json from 2.1.0 to 2.3.1 [\#9](https://github.com/ccrockett/omniauth-keycloak/pull/9) ([dependabot[bot]](https://github.com/apps/dependabot))
+- Bump rack from 2.2.2 to 2.2.3 [\#7](https://github.com/ccrockett/omniauth-keycloak/pull/7) ([dependabot[bot]](https://github.com/apps/dependabot))
 
 ## [v1.2.0](https://github.com/ccrockett/omniauth-keycloak/tree/v1.2.0) (2020-05-28)
 
@@ -21,7 +89,6 @@
 
 **Merged pull requests:**
 
-- Bump rack from 2.2.2 to 2.2.3 [\#7](https://github.com/ccrockett/omniauth-keycloak/pull/7) ([dependabot[bot]](https://github.com/apps/dependabot))
 - Bump activesupport from 6.0.1 to 6.0.3.1 [\#6](https://github.com/ccrockett/omniauth-keycloak/pull/6) ([dependabot[bot]](https://github.com/apps/dependabot))
 - Update rake requirement from ~\> 10.0 to ~\> 13.0 [\#4](https://github.com/ccrockett/omniauth-keycloak/pull/4) ([dependabot[bot]](https://github.com/apps/dependabot))
 - Bump rack from 2.0.7 to 2.0.8 [\#2](https://github.com/ccrockett/omniauth-keycloak/pull/2) ([dependabot[bot]](https://github.com/apps/dependabot))

data/Gemfile.lock

@@ -1,16 +1,16 @@
 PATH
   remote: .
   specs:
-    omniauth-keycloak (1.4.2)
+    omniauth-keycloak (1.4.4)
       faraday
-      json-jwt (~> 1.13.0)
+      json-jwt (> 1.13.0)
       omniauth (>= 2.0)
       omniauth-oauth2 (~> 1.7.1)
 
 GEM
   remote: https://rubygems.org/
   specs:
-    activesupport (7.0.3)
+    activesupport (7.0.4.2)
       concurrent-ruby (~> 1.0, >= 1.0.2)
       i18n (>= 1.6, < 2)
       minitest (>= 5.1)
@@ -18,44 +18,48 @@ GEM
     addressable (2.8.0)
       public_suffix (>= 2.0.2, < 5.0)
     aes_key_wrap (1.1.0)
-    bindata (2.4.10)
-    concurrent-ruby (1.1.10)
+    bindata (2.4.15)
+    concurrent-ruby (1.2.2)
     crack (0.4.5)
       rexml
     diff-lcs (1.4.4)
     docile (1.4.0)
-    faraday (2.3.0)
-      faraday-net_http (~> 2.0)
+    faraday (2.7.4)
+      faraday-net_http (>= 2.0, < 3.1)
       ruby2_keywords (>= 0.0.4)
-    faraday-net_http (2.0.3)
+    faraday-follow_redirects (0.3.0)
+      faraday (>= 1, < 3)
+    faraday-net_http (3.0.2)
     hashdiff (1.0.1)
     hashie (5.0.0)
-    i18n (1.10.0)
+    i18n (1.12.0)
       concurrent-ruby (~> 1.0)
-    json-jwt (1.13.0)
+    json-jwt (1.16.3)
       activesupport (>= 4.2)
       aes_key_wrap
       bindata
-    jwt (2.3.0)
-    minitest (5.15.0)
-    multi_json (1.15.0)
+      faraday (~> 2.0)
+      faraday-follow_redirects
+    jwt (2.7.0)
+    minitest (5.17.0)
     multi_xml (0.6.0)
-    oauth2 (1.4.9)
+    oauth2 (2.0.9)
       faraday (>= 0.17.3, < 3.0)
       jwt (>= 1.0, < 3.0)
-      multi_json (~> 1.3)
       multi_xml (~> 0.5)
-      rack (>= 1.2, < 3)
-    omniauth (2.0.4)
+      rack (>= 1.2, < 4)
+      snaky_hash (~> 2.0)
+      version_gem (~> 1.1)
+    omniauth (2.1.1)
       hashie (>= 3.4.6)
-      rack (>= 1.6.2, < 3)
+      rack (>= 2.2.3)
       rack-protection
-    omniauth-oauth2 (1.7.2)
-      oauth2 (~> 1.4)
+    omniauth-oauth2 (1.7.3)
+      oauth2 (>= 1.4, < 3)
       omniauth (>= 1.9, < 3)
     public_suffix (4.0.6)
-    rack (2.2.3)
-    rack-protection (2.2.0)
+    rack (3.0.4.1)
+    rack-protection (3.0.5)
       rack
     rake (13.0.1)
     rexml (3.2.5)
@@ -79,8 +83,12 @@ GEM
       simplecov_json_formatter (~> 0.1)
     simplecov-html (0.12.3)
     simplecov_json_formatter (0.1.3)
-    tzinfo (2.0.4)
+    snaky_hash (2.0.1)
+      hashie
+      version_gem (~> 1.1, >= 1.1.1)
+    tzinfo (2.0.6)
       concurrent-ruby (~> 1.0)
+    version_gem (1.1.1)
     webmock (3.14.0)
       addressable (>= 2.8.0)
       crack (>= 0.3.2)

data/lib/keycloak/version.rb

@@ -1,5 +1,5 @@
 module Omniauth
   module Keycloak
-    VERSION = "1.4.3"
+    VERSION = "1.5.0"
   end
 end

data/lib/omniauth/strategies/keycloak-openid.rb

@@ -18,7 +18,8 @@ module OmniAuth
             def setup_phase
                 super
 
-                if @authorize_url.nil? || @token_url.nil?
+                if (@authorize_url.nil? || @token_url.nil?) && !OmniAuth.config.test_mode
+
                     prevent_site_option_mistake
 
                     realm = options.client_options[:realm].nil? ? options.client_id : options.client_options[:realm]
@@ -47,11 +48,11 @@ module OmniAuth
                         log :debug, "Going to get certificates. URL: #{@certs_endpoint}"
                         certs = Faraday.get @certs_endpoint
                         if (certs.status == 200)
-                            json = JSON.parse(response.body)
+                            json = JSON.parse(certs.body)
                             @certs = json["keys"]
                             log :debug, "Successfully got certificate. Certificate length: #{@certs.length}"
                         else
-                            message = "Coundn't get certificate. URL: #{@certs_endpoint}"
+                            message = "Couldn't get certificate. URL: #{@certs_endpoint}"
                             log :error, message
                             raise IntegrationError, message if raise_on_failure
                         end

data/omniauth-keycloak.gemspec

@@ -25,7 +25,7 @@ Gem::Specification.new do |spec|
 
   spec.add_dependency "omniauth", ">= 2.0"
   spec.add_dependency "omniauth-oauth2", "~> 1.7.1"
-  spec.add_dependency "json-jwt", "~> 1.13.0"
+  spec.add_dependency "json-jwt", "> 1.13.0"
   spec.add_dependency "faraday"
 
   spec.add_development_dependency "bundler", "~> 2.2"

data/spec/omniauth/strategies/keycloak_spec.rb

@@ -51,6 +51,30 @@ RSpec.describe OmniAuth::Strategies::KeycloakOpenId do
     end
   end
 
+  describe "test mode" do
+    let(:config_url) { "http://localhost:8080/realms/example-realm/.well-known/openid-configuration" }
+
+    subject do
+      stub_request(:get, config_url)
+      OmniAuth::Strategies::KeycloakOpenId.new('keycloak-openid', 'Example-Client', 'b53c572b-9f3b-4e79-bf8b-f03c799ba6ec',
+                                               client_options: {site: 'http://localhost:8080/', realm: 'example-realm', base_url: ''})
+    end
+
+    before do
+      OmniAuth.config.test_mode = true
+    end
+
+    after do
+      OmniAuth.config.test_mode = false
+    end
+
+    it 'should not fetch configuration when in test mode' do
+      subject.setup_phase
+      expect(a_request(:get, config_url)).not_to have_been_made
+      OmniAuth.config.test_mode = false
+    end
+  end
+
   describe 'client base_url option set' do
     context 'to blank string' do
       let(:new_body_endpoints) {

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: omniauth-keycloak
 version: !ruby/object:Gem::Version
-  version: 1.4.3
+  version: 1.5.0
 platform: ruby
 authors:
 - Cameron Crockett
-autorequire: 
+autorequire:
 bindir: exe
 cert_chain: []
-date: 2022-07-24 00:00:00.000000000 Z
+date: 2023-03-01 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: omniauth
@@ -42,14 +42,14 @@ dependencies:
   name: json-jwt
   requirement: !ruby/object:Gem::Requirement
     requirements:
-    - - "~>"
+    - - ">"
       - !ruby/object:Gem::Version
         version: 1.13.0
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
-    - - "~>"
+    - - ">"
       - !ruby/object:Gem::Version
         version: 1.13.0
 - !ruby/object:Gem::Dependency
@@ -166,7 +166,7 @@ homepage: https://github.com/ccrockett/omniauth-keycloak
 licenses:
 - MIT
 metadata: {}
-post_install_message: 
+post_install_message:
 rdoc_options: []
 require_paths:
 - lib
@@ -181,8 +181,8 @@ required_rubygems_version: !ruby/object:Gem::Requirement
     - !ruby/object:Gem::Version
       version: 3.1.2
 requirements: []
-rubygems_version: 3.1.2
-signing_key: 
+rubygems_version: 3.3.7
+signing_key:
 specification_version: 4
 summary: Omniauth strategy for Keycloak
 test_files: []