omniauth-keycloak 1.5.2 → 1.5.3

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (6) hide show
  1. checksums.yaml +4 -4
  2. data/CHANGELOG.md +30 -0
  3. data/Gemfile.lock +14 -19
  4. data/lib/keycloak/version.rb +1 -1
  5. data/lib/omniauth/strategies/keycloak-openid.rb +3 -1
  6. metadata +3 -3
checksums.yaml CHANGED
@@ -1,7 +1,7 @@
1
1
  ---
2
2
  SHA256:
3
- metadata.gz: 9f8daef8518d7f497c7576cec5dd3bbfb57c5ba810a29a51675f096fd4a54a43
4
- data.tar.gz: fabb6b4e17276604f05c8d565dba3e46505f4478df1cd531f1ff6317dab6f3ac
3
+ metadata.gz: a0a49f1a0803162c109f3d8c46079ebe47f9930a7ba21346bf275c9e40ca5fae
4
+ data.tar.gz: f610e23846e61327d7680455b7121fed6e797f6fd2e413fe59202205bf6de28a
5
5
  SHA512:
6
- metadata.gz: 7b89cf229ad05ab331abbff1f2d87bee5173f8f7d0c4128ce6dd51ab00bf4ea376c10fee93829e799c9014b8a40cc25fbdfb71de5a60aef4e2e85bfd9a194daf
7
- data.tar.gz: 02171316cc22d0bce945b35a2bbf1ffd2f9b9a8a6ddd2fb8c3b73a33b5ce2f7268c18642eb0890c343856109f54305647aae4be496ba8c6f97da4eefe54fa271
6
+ metadata.gz: a532efb73bc332e34e43e41dbf807eaf5a96b917cd728d83d21af57f35e5e43f633b2ed70a226687dd5e79437dc2a991589bfc70594f1f5d77fce5f928891f10
7
+ data.tar.gz: 79e4fac6b445209809da12d0ea8585597fafa3de63ec4e29479ef37806806603712038316f0331988cc7cc2c3d859e41917bf0ca339a39090e8e4bca81327b1b
data/CHANGELOG.md CHANGED
@@ -1,5 +1,35 @@
1
1
  # Changelog
2
2
 
3
+ ## [v1.5.3](https://github.com/ccrockett/omniauth-keycloak/tree/v1.5.3) (2025-04-12)
4
+
5
+ [Full Changelog](https://github.com/ccrockett/omniauth-keycloak/compare/v1.5.2...v1.5.3)
6
+
7
+ **Closed issues:**
8
+
9
+ - Update json-jwt to 1.16.6 to resolve security vulnerability CVE-2024-27456/GHSA-785g-282q-pwvx [\#49](https://github.com/ccrockett/omniauth-keycloak/issues/49)
10
+ - Can we update the dependency [\#45](https://github.com/ccrockett/omniauth-keycloak/issues/45)
11
+ - Scope setting gets overwritten causing ID token not to be returned from Keycloak [\#39](https://github.com/ccrockett/omniauth-keycloak/issues/39)
12
+
13
+ **Merged pull requests:**
14
+
15
+ - Bump rexml from 3.2.6 to 3.2.8 [\#51](https://github.com/ccrockett/omniauth-keycloak/pull/51) ([dependabot[bot]](https://github.com/apps/dependabot))
16
+ - Bump json-jwt from 1.16.3 to 1.16.6 [\#48](https://github.com/ccrockett/omniauth-keycloak/pull/48) ([dependabot[bot]](https://github.com/apps/dependabot))
17
+ - Bump rack from 3.0.8 to 3.0.9.1 [\#47](https://github.com/ccrockett/omniauth-keycloak/pull/47) ([dependabot[bot]](https://github.com/apps/dependabot))
18
+ - Conditionally set options from request.params if not set already [\#40](https://github.com/ccrockett/omniauth-keycloak/pull/40) ([Kazhuu](https://github.com/Kazhuu))
19
+
20
+ ## [v1.5.2](https://github.com/ccrockett/omniauth-keycloak/tree/v1.5.2) (2024-02-01)
21
+
22
+ [Full Changelog](https://github.com/ccrockett/omniauth-keycloak/compare/v1.5.1...v1.5.2)
23
+
24
+ **Closed issues:**
25
+
26
+ - Dependency update - json-jwt [\#36](https://github.com/ccrockett/omniauth-keycloak/issues/36)
27
+ - Adding parameters and http headers to omniauth authorize path helper [\#12](https://github.com/ccrockett/omniauth-keycloak/issues/12)
28
+
29
+ **Merged pull requests:**
30
+
31
+ - Loosen omniauth-oauth2 dependency restriction [\#43](https://github.com/ccrockett/omniauth-keycloak/pull/43) ([mcelaney](https://github.com/mcelaney))
32
+
3
33
  ## [v1.5.1](https://github.com/ccrockett/omniauth-keycloak/tree/v1.5.1) (2023-03-01)
4
34
 
5
35
  [Full Changelog](https://github.com/ccrockett/omniauth-keycloak/compare/v1.5.0...v1.5.1)
data/Gemfile.lock CHANGED
@@ -10,31 +10,23 @@ PATH
10
10
  GEM
11
11
  remote: https://rubygems.org/
12
12
  specs:
13
- activesupport (7.1.0)
14
- base64
15
- bigdecimal
13
+ activesupport (6.1.7.7)
16
14
  concurrent-ruby (~> 1.0, >= 1.0.2)
17
- connection_pool (>= 2.2.5)
18
- drb
19
15
  i18n (>= 1.6, < 2)
20
16
  minitest (>= 5.1)
21
- mutex_m
22
17
  tzinfo (~> 2.0)
18
+ zeitwerk (~> 2.3)
23
19
  addressable (2.8.5)
24
20
  public_suffix (>= 2.0.2, < 6.0)
25
21
  aes_key_wrap (1.1.0)
26
- base64 (0.1.1)
27
- bigdecimal (3.1.4)
28
- bindata (2.4.15)
29
- concurrent-ruby (1.2.2)
30
- connection_pool (2.4.1)
22
+ base64 (0.2.0)
23
+ bindata (2.5.0)
24
+ concurrent-ruby (1.2.3)
31
25
  crack (0.4.5)
32
26
  rexml
33
27
  diff-lcs (1.5.0)
34
28
  docile (1.4.0)
35
- drb (2.1.1)
36
- ruby2_keywords
37
- faraday (2.7.11)
29
+ faraday (2.8.1)
38
30
  base64
39
31
  faraday-net_http (>= 2.0, < 3.1)
40
32
  ruby2_keywords (>= 0.0.4)
@@ -45,16 +37,16 @@ GEM
45
37
  hashie (5.0.0)
46
38
  i18n (1.14.1)
47
39
  concurrent-ruby (~> 1.0)
48
- json-jwt (1.16.3)
40
+ json-jwt (1.16.6)
49
41
  activesupport (>= 4.2)
50
42
  aes_key_wrap
43
+ base64
51
44
  bindata
52
45
  faraday (~> 2.0)
53
46
  faraday-follow_redirects
54
47
  jwt (2.7.1)
55
- minitest (5.20.0)
48
+ minitest (5.22.2)
56
49
  multi_xml (0.6.0)
57
- mutex_m (0.1.2)
58
50
  oauth2 (2.0.9)
59
51
  faraday (>= 0.17.3, < 3.0)
60
52
  jwt (>= 1.0, < 3.0)
@@ -70,11 +62,12 @@ GEM
70
62
  oauth2 (>= 1.4, < 3)
71
63
  omniauth (~> 2.0)
72
64
  public_suffix (5.0.3)
73
- rack (3.0.8)
65
+ rack (3.0.9.1)
74
66
  rack-protection (3.0.6)
75
67
  rack
76
68
  rake (13.0.6)
77
- rexml (3.2.6)
69
+ rexml (3.2.8)
70
+ strscan (>= 3.0.9)
78
71
  rspec (3.12.0)
79
72
  rspec-core (~> 3.12.0)
80
73
  rspec-expectations (~> 3.12.0)
@@ -98,6 +91,7 @@ GEM
98
91
  snaky_hash (2.0.1)
99
92
  hashie
100
93
  version_gem (~> 1.1, >= 1.1.1)
94
+ strscan (3.1.0)
101
95
  tzinfo (2.0.6)
102
96
  concurrent-ruby (~> 1.0)
103
97
  version_gem (1.1.3)
@@ -105,6 +99,7 @@ GEM
105
99
  addressable (>= 2.8.0)
106
100
  crack (>= 0.3.2)
107
101
  hashdiff (>= 0.4.0, < 2.0.0)
102
+ zeitwerk (2.6.13)
108
103
 
109
104
  PLATFORMS
110
105
  ruby
data/lib/keycloak/version.rb CHANGED
@@ -1,5 +1,5 @@
1
1
  module Omniauth
2
2
  module Keycloak
3
- VERSION = "1.5.2"
3
+ VERSION = '1.5.3'
4
4
  end
5
5
  end
data/lib/omniauth/strategies/keycloak-openid.rb CHANGED
@@ -99,7 +99,9 @@ module OmniAuth
99
99
  end
100
100
 
101
101
  def request_phase
102
- options.authorize_options.each {|key| options[key] = request.params[key.to_s] }
102
+ options.authorize_options.each do |key|
103
+ options[key] = request.params[key.to_s] if options[key].nil?
104
+ end
103
105
  super
104
106
  end
105
107
 
metadata CHANGED
@@ -1,14 +1,14 @@
1
1
  --- !ruby/object:Gem::Specification
2
2
  name: omniauth-keycloak
3
3
  version: !ruby/object:Gem::Version
4
- version: 1.5.2
4
+ version: 1.5.3
5
5
  platform: ruby
6
6
  authors:
7
7
  - Cameron Crockett
8
8
  autorequire:
9
9
  bindir: exe
10
10
  cert_chain: []
11
- date: 2024-02-01 00:00:00.000000000 Z
11
+ date: 2025-04-12 00:00:00.000000000 Z
12
12
  dependencies:
13
13
  - !ruby/object:Gem::Dependency
14
14
  name: omniauth
@@ -187,7 +187,7 @@ required_rubygems_version: !ruby/object:Gem::Requirement
187
187
  - !ruby/object:Gem::Version
188
188
  version: 3.1.2
189
189
  requirements: []
190
- rubygems_version: 3.4.22
190
+ rubygems_version: 3.5.22
191
191
  signing_key:
192
192
  specification_version: 4
193
193
  summary: Omniauth strategy for Keycloak