omniauth-ldap 3.0.0 → 3.0.2

data/SECURITY.md

@@ -4,7 +4,7 @@
 
 | Version  | Supported |
 |----------|-----------|
-| 1.latest | ✅         |
+| 3.0.latest | ✅         |
 
 ## Security contact information
 

data/certs/pboling.pem

@@ -0,0 +1,27 @@
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----

data/lib/omniauth/ldap/adaptor.rb

@@ -23,7 +23,7 @@ module OmniAuth
     class Adaptor
       include OmniAuth::LDAP::AUTH_SANITIZER::FilteredAttributes
 
-      filtered_attributes :@auth, :@configuration, :@connection, :@password, :@tls_options
+      filtered_attributes :auth, :configuration, :connection, :key, :password, :tls_options
 
       # Generic adaptor error super-class
       # @see Error classes that inherit from this class
@@ -63,7 +63,7 @@ module OmniAuth
         # Timeouts
         :connect_timeout,
         :read_timeout,
-        :method,
+        :method
       ]
 
       # Required configuration keys. This may include alternatives as sub-lists
@@ -74,7 +74,7 @@ module OmniAuth
         [:encryption, :method], # :method is deprecated
         [:hosts, :host],
         [:hosts, :port],
-        [:uid, :filter],
+        [:uid, :filter]
       ]
 
       # Supported encryption method mapping for configuration readability.
@@ -87,7 +87,7 @@ module OmniAuth
         # Deprecated. This mapping aimed to be user-friendly, but only caused
         # confusion. Better to pass through the actual `Net::LDAP` encryption type.
         ssl: :simple_tls,
-        tls: :start_tls,
+        tls: :start_tls
       }
 
       # @!attribute [rw] bind_dn
@@ -167,7 +167,7 @@ module OmniAuth
           hosts: @hosts,
           host: @host,
           port: @port,
-          encryption: encryption_options,
+          encryption: encryption_options
         }
         # Remove passing timeouts here to avoid issues on older net-ldap versions.
         # We'll set them after initialization if the connection responds to writers.
@@ -181,7 +181,7 @@ module OmniAuth
         @auth ||= {
           method: @bind_method,
           username: @bind_dn,
-          password: @password,
+          password: @password
         }
         config[:auth] = @auth
         @connection = Net::LDAP.new(config)
@@ -235,7 +235,7 @@ module OmniAuth
                 {
                   method: :simple,
                   username: dn,
-                  password: password,
+                  password: password
                 }
               end
 
@@ -275,7 +275,7 @@ module OmniAuth
 
         {
           method: translated_method,
-          tls_options: tls_options(translated_method),
+          tls_options: tls_options(translated_method)
         }
       end
 
@@ -333,7 +333,7 @@ module OmniAuth
             method: :sasl,
             initial_credential: initial_credential,
             mechanism: mechanism,
-            challenge_response: challenge_response,
+            challenge_response: challenge_response
           }
         end
         auths
@@ -437,7 +437,7 @@ module OmniAuth
             end
             @last_password_policy_response = ctrl if ctrl
           end
-        rescue StandardError
+        rescue
           # Swallow errors to keep authentication flow unaffected when server or gem doesn't support controls
           @last_password_policy_response = nil
         end

data/lib/omniauth/ldap/auth_sanitizer.rb

@@ -1,32 +1,16 @@
+require "anonymous_loader"
+
 module OmniAuth
   module LDAP
     # See: Zero Top-Level Namespace Additions
     #      https://github.com/ruby-oauth/auth-sanitizer/blob/main/README.md#zero-top-level-namespace-additions
     AUTH_SANITIZER = begin
-      auth_sanitizer_requirement = Gem::Requirement.new("~> 0.1", ">= 0.1.4")
-      auth_sanitizer_spec = Gem.loaded_specs["auth-sanitizer"]
-      unless auth_sanitizer_spec && auth_sanitizer_requirement.satisfied_by?(auth_sanitizer_spec.version)
-        # :nocov:
-        auth_sanitizer_spec = Gem::Specification.find_by_name("auth-sanitizer", auth_sanitizer_requirement)
-        # :nocov:
-      end
-
-      auth_sanitizer_loader_path = File.join(
-        auth_sanitizer_spec.full_gem_path,
-        "lib/auth_sanitizer/loader.rb",
-      )
-      unless File.file?(auth_sanitizer_loader_path)
-        # :nocov:
-        raise LoadError, "omniauth-ldap requires auth-sanitizer #{auth_sanitizer_requirement}; " \
-          "loader not found at #{auth_sanitizer_loader_path}"
-        # :nocov:
-      end
-
-      auth_sanitizer_loader_namespace = Module.new
-      auth_sanitizer_loader_namespace.module_eval(
-        File.read(auth_sanitizer_loader_path),
-        auth_sanitizer_loader_path,
-        1,
+      auth_sanitizer_requirement = Gem::Requirement.new("~> 0.2", ">= 0.2.2")
+      auth_sanitizer_loader_namespace = AnonymousLoader.load_path(
+        gem_name: "auth-sanitizer",
+        require_path: "auth_sanitizer/loader.rb",
+        version_requirement: auth_sanitizer_requirement,
+        version_file: "auth/sanitizer/version.rb"
       )
 
       auth_sanitizer_loader_namespace

data/lib/omniauth/ldap/version.rb

@@ -1,17 +1,10 @@
+# frozen_string_literal: true
+
 module OmniAuth
   module LDAP
-    # Version namespace for the omniauth-ldap gem
-    #
-    # This module contains the version constant used by rubygems and in code
-    # consumers. It intentionally exposes VERSION both inside the Version
-    # namespace and as OmniAuth::LDAP::VERSION for compatibility.
     module Version
-      # Public semantic version for the gem
-      # @return [String]
-      VERSION = "3.0.0"
+      VERSION = "3.0.2"
     end
-    # Convenience constant for consumers that expect OmniAuth::LDAP::VERSION
-    # @return [String]
-    VERSION = Version::VERSION # Make VERSION available in traditional way
+    VERSION = Version::VERSION # Traditional Constant Location
   end
 end

data/lib/omniauth/strategies/ldap.rb

@@ -72,7 +72,7 @@ module OmniAuth
         "uid" => "dn",
         "url" => ["wwwhomepage"],
         "image" => "jpegPhoto",
-        "description" => "description",
+        "description" => "description"
       }
 
       # Default title shown on the login form.
@@ -169,7 +169,11 @@ module OmniAuth
 
         return fail!(:invalid_request_method) unless valid_request_method?
 
-        validate_header_auth_configuration!
+        begin
+          validate_header_auth_configuration!
+        rescue => e
+          return fail!(:ldap_error, e)
+        end
 
         # Header-based SSO (REMOTE_USER-style) path
         if (hu = header_username)

data/sig/omniauth/ldap/version.rbs

@@ -3,9 +3,6 @@ module OmniAuth
     module Version
       VERSION: String
     end
-
-    # Traditional constant alias
     VERSION: String
   end
 end
-

metadata

@@ -1,12 +1,32 @@
 --- !ruby/object:Gem::Specification
 name: omniauth-ldap
 version: !ruby/object:Gem::Version
-  version: 3.0.0
+  version: 3.0.2
 platform: ruby
 authors:
-- Peter Boling
+- Hubert
 - Ping Yu
-- Tom Milewski
+- angel brown
+- Dmitriy Dzema
+- Dmitriy Zaporozhets
+- Pat Thoyts
+- Rashit Azizbaev
+- Samuel de Framond
+- Terry Tai
+- David Benko
+- Jakub Jirutka
+- Jason Hollingsworth
+- Mack Talcott
+- Drew Blessing
+- Julian Kniephoff
+- Mike Tierney
+- Sasha Kotlyar
+- Michael Kozono
+- Tiago Botelho
+- tmilewski
+- Finn Bacall
+- Stan Hu
+- Peter H. Boling
 bindir: exe
 cert_chain:
 - |
@@ -40,7 +60,7 @@ cert_chain:
 date: 1980-01-02 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
-  name: auth-sanitizer
+  name: anonymous_loader
   requirement: !ruby/object:Gem::Requirement
     requirements:
     - - "~>"
@@ -48,7 +68,7 @@ dependencies:
         version: '0.1'
     - - ">="
       - !ruby/object:Gem::Version
-        version: 0.1.4
+        version: 0.1.2
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
@@ -58,7 +78,27 @@ dependencies:
         version: '0.1'
     - - ">="
       - !ruby/object:Gem::Version
-        version: 0.1.4
+        version: 0.1.2
+- !ruby/object:Gem::Dependency
+  name: auth-sanitizer
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '0.2'
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: 0.2.2
+  type: :runtime
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '0.2'
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: 0.2.2
 - !ruby/object:Gem::Dependency
   name: net-ldap
   requirement: !ruby/object:Gem::Requirement
@@ -168,7 +208,7 @@ dependencies:
         version: '1.1'
     - - ">="
       - !ruby/object:Gem::Version
-        version: 1.1.9
+        version: 1.1.14
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
@@ -178,49 +218,41 @@ dependencies:
         version: '1.1'
     - - ">="
       - !ruby/object:Gem::Version
-        version: 1.1.9
-- !ruby/object:Gem::Dependency
-  name: roda
-  requirement: !ruby/object:Gem::Requirement
-    requirements:
-    - - "~>"
-      - !ruby/object:Gem::Version
-        version: '3.97'
-  type: :development
-  prerelease: false
-  version_requirements: !ruby/object:Gem::Requirement
-    requirements:
-    - - "~>"
-      - !ruby/object:Gem::Version
-        version: '3.97'
+        version: 1.1.14
 - !ruby/object:Gem::Dependency
   name: kettle-dev
   requirement: !ruby/object:Gem::Requirement
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: '1.1'
+        version: '2.3'
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: 2.3.4
   type: :development
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: '1.1'
+        version: '2.3'
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: 2.3.4
 - !ruby/object:Gem::Dependency
   name: bundler-audit
   requirement: !ruby/object:Gem::Requirement
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: 0.9.2
+        version: 0.9.3
   type: :development
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: 0.9.2
+        version: 0.9.3
 - !ruby/object:Gem::Dependency
   name: rake
   requirement: !ruby/object:Gem::Requirement
@@ -261,48 +293,60 @@ dependencies:
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: '3.0'
+        version: '3.1'
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: 3.1.4
   type: :development
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: '3.0'
+        version: '3.1'
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: 3.1.4
 - !ruby/object:Gem::Dependency
   name: kettle-test
   requirement: !ruby/object:Gem::Requirement
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: '1.0'
+        version: '2.0'
     - - ">="
       - !ruby/object:Gem::Version
-        version: 1.0.6
+        version: 2.0.10
   type: :development
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: '1.0'
+        version: '2.0'
     - - ">="
       - !ruby/object:Gem::Version
-        version: 1.0.6
+        version: 2.0.10
 - !ruby/object:Gem::Dependency
-  name: rack-test
+  name: turbo_tests2
   requirement: !ruby/object:Gem::Requirement
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: '2.2'
+        version: '3.1'
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: 3.1.7
   type: :development
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: '2.2'
+        version: '3.1'
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: 3.1.7
 - !ruby/object:Gem::Dependency
   name: ruby-progressbar
   requirement: !ruby/object:Gem::Requirement
@@ -326,7 +370,7 @@ dependencies:
         version: '1.0'
     - - ">="
       - !ruby/object:Gem::Version
-        version: 1.0.2
+        version: 1.0.6
   type: :development
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
@@ -336,27 +380,55 @@ dependencies:
         version: '1.0'
     - - ">="
       - !ruby/object:Gem::Version
-        version: 1.0.2
+        version: 1.0.6
 - !ruby/object:Gem::Dependency
   name: gitmoji-regex
   requirement: !ruby/object:Gem::Requirement
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: '1.0'
+        version: '2.0'
     - - ">="
       - !ruby/object:Gem::Version
-        version: 1.0.3
+        version: 2.0.4
   type: :development
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: '1.0'
+        version: '2.0'
     - - ">="
       - !ruby/object:Gem::Version
-        version: 1.0.3
+        version: 2.0.4
+- !ruby/object:Gem::Dependency
+  name: rack-test
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '2.2'
+  type: :development
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '2.2'
+- !ruby/object:Gem::Dependency
+  name: roda
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '3.97'
+  type: :development
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '3.97'
 description: "\U0001F4C1 LDAP strategy for OmniAuth."
 email:
 - floss@galtzo.com
@@ -368,7 +440,7 @@ extra_rdoc_files:
 - CODE_OF_CONDUCT.md
 - CONTRIBUTING.md
 - FUNDING.md
-- LICENSE.txt
+- LICENSE.md
 - README.md
 - RUBOCOP.md
 - SECURITY.md
@@ -378,10 +450,12 @@ files:
 - CODE_OF_CONDUCT.md
 - CONTRIBUTING.md
 - FUNDING.md
-- LICENSE.txt
+- LICENSE.md
+- MIT.md
 - README.md
 - RUBOCOP.md
 - SECURITY.md
+- certs/pboling.pem
 - lib/omniauth-ldap.rb
 - lib/omniauth/ldap.rb
 - lib/omniauth/ldap/adaptor.rb
@@ -399,11 +473,11 @@ homepage: https://github.com/omniauth/omniauth-ldap
 licenses:
 - MIT
 metadata:
-  homepage_uri: https://omniauth-ldap.galtzo.com/
-  source_code_uri: https://github.com/omniauth/omniauth-ldap/tree/v3.0.0
-  changelog_uri: https://github.com/omniauth/omniauth-ldap/blob/v3.0.0/CHANGELOG.md
+  homepage_uri: https://omniauth-ldap.galtzo.com
+  source_code_uri: https://github.com/omniauth/omniauth-ldap/tree/v3.0.2
+  changelog_uri: https://github.com/omniauth/omniauth-ldap/blob/v3.0.2/CHANGELOG.md
   bug_tracker_uri: https://github.com/omniauth/omniauth-ldap/issues
-  documentation_uri: https://www.rubydoc.info/gems/omniauth-ldap/3.0.0
+  documentation_uri: https://www.rubydoc.info/gems/omniauth-ldap/3.0.2
   funding_uri: https://github.com/sponsors/pboling
   wiki_uri: https://github.com/omniauth/omniauth-ldap/wiki
   news_uri: https://www.railsbling.com/tags/omniauth-ldap
@@ -432,7 +506,7 @@ required_rubygems_version: !ruby/object:Gem::Requirement
     - !ruby/object:Gem::Version
       version: '0'
 requirements: []
-rubygems_version: 4.0.11
+rubygems_version: 4.0.10
 specification_version: 4
 summary: "\U0001F4C1 LDAP strategy for OmniAuth."
 test_files: []

data/LICENSE.txt

@@ -1,24 +0,0 @@
-MIT License
-
-Copyright (c) 2025 - 2026 Peter H. Boling, and omniauth-ldap contributors
-Copyright (c) 2014 David Benko
-Copyright (c) 2011 by Ping Yu and Intridea, Inc.
-
-Permission is hereby granted, free of charge, to any person obtaining
-a copy of this software and associated documentation files (the
-"Software"), to deal in the Software without restriction, including
-without limitation the rights to use, copy, modify, merge, publish,
-distribute, sublicense, and/or sell copies of the Software, and to
-permit persons to whom the Software is furnished to do so, subject to
-the following conditions:
-
-The above copyright notice and this permission notice shall be
-included in all copies or substantial portions of the Software.
-
-THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND,
-EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF
-MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND
-NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE
-LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION
-OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION
-WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.