omniauth-linkedin-openid 1.0.1 → 2.0.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 5d24e038173a780854d661200c13cc6b7deaa126b861ef47006449e46f2e8b89
-  data.tar.gz: 6aff8449c80b4aedb0402e0159db3d5bb088b4b6647c34876026a8cc492c17e1
+  metadata.gz: 50479ce9d7983a53ad4ed9da5ad084dd560994b93082cdf86e4b2e3a3d5418fd
+  data.tar.gz: 5655c4c6cda4adef371c4b917485c27f8b9e020ab89ea0b58d85f58b18f21713
 SHA512:
-  metadata.gz: c27e72803f406b7b399e2c111d1c978b23885264248467acd69aebccd3e9dfe78cabd3dbd5f1128f02e89a17f88a09e0da1269916ba4e2336170043aabb5a9b0
-  data.tar.gz: 30a1f67320926300d481596803444f3f8304544d7903077602e5b90f27eceab81a3e18f4e61a2791a06e126a09d33aecbe431009551ee296460dc7d69204444e
+  metadata.gz: e0a871c6e2975d65026b0ca17d5e472cdc29489f854bde4dc2b5959305f2eb1822da4a79f479184997ecbbada33e8599e06ac0577fb85e3b330e53d65fa43f6a
+  data.tar.gz: 8553f7ffbe0d84803e1b7f6a20076c8dab4deb4ea6803a54ee0d32785357dfcf75ca2a9b2d5855bef1e9d3926664024bcc6978fb3035f3428cd4684ca9765693

data/.github/workflows/ruby.yml

@@ -11,10 +11,10 @@ jobs:
     runs-on: ubuntu-latest
     strategy:
       matrix:
-        ruby-version: ['2.4', '2.5', '2.6', '2.7', '3.0', '3.1', '3.2', 'truffleruby-head']
+        ruby-version: ['3.2', '3.3', '3.4', '4.0', 'truffleruby-head']
 
     steps:
-    - uses: actions/checkout@v3
+    - uses: actions/checkout@v5
     - name: Set up Ruby ${{ matrix.ruby-version }}
       uses: ruby/setup-ruby@v1
       with:

data/README.md

@@ -44,6 +44,10 @@ provider :linkedin,
   scope: 'openid profile email'
 ```
 
+## Email Verification
+
+LinkedIn returns the member's primary email with a separate, optional `email_verified` flag. `info.email` is only set when LinkedIn reports the email as verified, so it is safe to use for finding or linking accounts. The email as LinkedIn returned it is always available in `info.unverified_email`, and the flag in `info.email_verified`.
+
 ## Profile Fields
 
 When specifying which permissions you want users to grant to your application, you can also specify the array of fields that you want returned in the OmniAuth hash. The following fields are requested by default:

data/lib/omniauth/strategies/linkedin.rb

@@ -8,7 +8,8 @@ module OmniAuth
       option :client_options, {
         :site => 'https://api.linkedin.com',
         :authorize_url => 'https://www.linkedin.com/oauth/v2/authorization?response_type=code',
-        :token_url => 'https://www.linkedin.com/oauth/v2/accessToken'
+        :token_url => 'https://www.linkedin.com/oauth/v2/accessToken',
+        :token_method => :post_with_query_string
       }
 
       option :scope, 'openid profile email'
@@ -23,7 +24,9 @@ module OmniAuth
 
       info do
         {
-          email: raw_info['email'],
+          email: verified_email,
+          unverified_email: raw_info['email'],
+          email_verified: raw_info['email_verified'],
           first_name: raw_info['given_name'],
           last_name: raw_info['family_name'],
           picture_url: raw_info['picture']
@@ -56,6 +59,10 @@ module OmniAuth
 
       private
 
+      def verified_email
+        raw_info['email_verified'] == true ? raw_info['email'] : nil
+      end
+
       def fields_mapping
         # https://learn.microsoft.com/en-us/linkedin/consumer/integrations/self-serve/sign-in-with-linkedin-v2?context=linkedin%2Fconsumer%2Fcontext#api-request-to-retreive-member-details
         {

data/lib/omniauth-linkedin-openid/version.rb

@@ -1,5 +1,5 @@
 module OmniAuth
   module LinkedInOpenID
-    VERSION = "1.0.1"
+    VERSION = "2.0.0"
   end
 end

data/omniauth-linkedin-openid.gemspec

@@ -15,6 +15,7 @@ Gem::Specification.new do |gem|
   gem.name          = 'omniauth-linkedin-openid'
   gem.require_paths = ['lib']
   gem.version       = OmniAuth::LinkedInOpenID::VERSION
+  gem.required_ruby_version = '>= 3.2'
 
   gem.metadata = {
     "bug_tracker_uri" => "https://github.com/jclusso/omniauth-linkedin-openid/issues",

data/spec/omniauth/strategies/linkedin_spec.rb

@@ -20,6 +20,10 @@ describe OmniAuth::Strategies::LinkedIn do
     it 'has correct `token_url`' do
       expect(subject.client.options[:token_url]).to eq('https://www.linkedin.com/oauth/v2/accessToken')
     end
+
+    it 'has a correct `token_method`' do
+      expect(subject.client.options[:token_method]).to eq(:post_with_query_string)
+    end
   end
 
   describe '#callback_path' do
@@ -64,6 +68,44 @@ describe OmniAuth::Strategies::LinkedIn do
     end
   end
 
+  describe '#info email' do
+    let(:email) { 'member@example.com' }
+
+    before :each do
+      allow(subject).to receive(:raw_info) { raw_info }
+    end
+
+    context 'when the email is verified' do
+      let(:raw_info) { Hash['email' => email, 'email_verified' => true] }
+
+      it 'returns the email' do
+        expect(subject.info[:email]).to eq(email)
+        expect(subject.info[:unverified_email]).to eq(email)
+        expect(subject.info[:email_verified]).to eq(true)
+      end
+    end
+
+    context 'when the email is not verified' do
+      let(:raw_info) { Hash['email' => email, 'email_verified' => false] }
+
+      it 'only returns the email as unverified_email' do
+        expect(subject.info[:email]).to be_nil
+        expect(subject.info[:unverified_email]).to eq(email)
+        expect(subject.info[:email_verified]).to eq(false)
+      end
+    end
+
+    context 'when email_verified is missing' do
+      let(:raw_info) { Hash['email' => email] }
+
+      it 'only returns the email as unverified_email' do
+        expect(subject.info[:email]).to be_nil
+        expect(subject.info[:unverified_email]).to eq(email)
+        expect(subject.info[:email_verified]).to be_nil
+      end
+    end
+  end
+
   describe '#extra' do
     let(:raw_info) { Hash[:foo => 'bar'] }
 
@@ -96,6 +138,8 @@ describe OmniAuth::Strategies::LinkedIn do
     describe 'scope' do
       before :each do
         allow(subject).to receive(:session).and_return({})
+        allow(subject).to receive(:callback_url)
+          .and_return('https://example.com/auth/linkedin/callback')
       end
 
       it 'sets default scope' do

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: omniauth-linkedin-openid
 version: !ruby/object:Gem::Version
-  version: 1.0.1
+  version: 2.0.0
 platform: ruby
 authors:
 - Jarrett Lusso
 autorequire:
 bindir: bin
 cert_chain: []
-date: 2024-02-25 00:00:00.000000000 Z
+date: 2026-10-25 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: oauth2
@@ -132,14 +132,14 @@ required_ruby_version: !ruby/object:Gem::Requirement
   requirements:
   - - ">="
     - !ruby/object:Gem::Version
-      version: '0'
+      version: '3.2'
 required_rubygems_version: !ruby/object:Gem::Requirement
   requirements:
   - - ">="
     - !ruby/object:Gem::Version
       version: '0'
 requirements: []
-rubygems_version: 3.4.10
+rubygems_version: 3.5.3
 signing_key:
 specification_version: 4
 summary: OmniAuth strategy for LinkedIn using OpenID.