omniauth-realme 0.2.1 → 2.1.1

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: dffa1aa5b4ac54a63feb3e625adde68e9e8c05a4b3a73e05ac47a4bad4415366
-  data.tar.gz: 2f7c8a95cbdd11294e48085fbba5c31aa6215e62dd877eef93b1bac7fd84b4b3
+  metadata.gz: 8869994f2435a34b3092d7a2225bf5de25f7dd224ae8ae5bc34a2a5f1ec46eb8
+  data.tar.gz: 852e0a6165f87d23f0efb4fed7f61a1f411649d2d3f96434cafd0d9a3f94bee8
 SHA512:
-  metadata.gz: 19a34fba96441def30a507defd6464b0bee537168647e2853131ae3023675eeab3c5174d0f17a9535e2c1b0a965ec08b8971d40e58768456b1f90aefedb428d1
-  data.tar.gz: 391927a2bc6015d69455a80ad5335c22ba385dc03a831bb3b8cc023dae505a6636dd04cde37dc3b9ab5a60c67e14f84f09040ed592bb13f452890771a9ce6033
+  metadata.gz: e4421dea23f54a81652898f8a67b4ee9761079799992e10c8ed78da56ff2b9270e59338c6fe6190d049c5896f272ea8b1932bc2aca3370aa1440dc2fe1f4737c
+  data.tar.gz: 475b78b04d1e87ec76fb67d51eaa277198b763ebe7a6ace822473ee9bf4c2df9c1490cc0959ed5393430c575664cebf3d7cb07c6c7910b53338eb9d051535ac2

data/Gemfile

@@ -5,5 +5,6 @@ source 'https://rubygems.org'
 # Specify your gem's dependencies in omniauth-realme.gemspec
 gemspec
 
-gem 'rake', '~> 12.0'
-gem 'rspec', '~> 3.0'
+gem 'nokogiri', '>= 1.12.5'
+gem 'rake', '~> 13.0.6'
+gem 'rspec', '~> 3.10.0'

data/Gemfile.lock

@@ -1,30 +1,64 @@
 PATH
   remote: .
   specs:
-    omniauth-realme (0.2.1)
-      omniauth (~> 1.0)
-      ruby-saml (~> 1.5)
-      uuid (~> 2.0)
+    omniauth-realme (2.1.1)
+      omniauth (~> 2.0.4)
+      omniauth-rails_csrf_protection (~> 1.0.0)
+      ruby-saml (~> 1.13.0)
+      uuid (~> 2.3.9)
 
 GEM
   remote: https://rubygems.org/
   specs:
+    actionpack (6.1.4.1)
+      actionview (= 6.1.4.1)
+      activesupport (= 6.1.4.1)
+      rack (~> 2.0, >= 2.0.9)
+      rack-test (>= 0.6.3)
+      rails-dom-testing (~> 2.0)
+      rails-html-sanitizer (~> 1.0, >= 1.2.0)
+    actionview (6.1.4.1)
+      activesupport (= 6.1.4.1)
+      builder (~> 3.1)
+      erubi (~> 1.4)
+      rails-dom-testing (~> 2.0)
+      rails-html-sanitizer (~> 1.1, >= 1.2.0)
+    activesupport (6.1.4.1)
+      concurrent-ruby (~> 1.0, >= 1.0.2)
+      i18n (>= 1.6, < 2)
+      minitest (>= 5.1)
+      tzinfo (~> 2.0)
+      zeitwerk (~> 2.3)
     ast (2.4.0)
+    builder (3.2.4)
     byebug (11.1.3)
     coderay (1.1.3)
-    diff-lcs (1.3)
+    concurrent-ruby (1.1.9)
+    crass (1.0.6)
+    diff-lcs (1.4.4)
+    erubi (1.10.0)
     hashie (4.1.0)
+    i18n (1.8.10)
+      concurrent-ruby (~> 1.0)
     jaro_winkler (1.5.4)
+    loofah (2.12.0)
+      crass (~> 1.0.2)
+      nokogiri (>= 1.5.9)
     macaddr (1.7.2)
       systemu (~> 2.6.5)
     method_source (1.0.0)
-    mini_portile2 (2.5.0)
-    nokogiri (1.11.1)
-      mini_portile2 (~> 2.5.0)
+    mini_portile2 (2.6.1)
+    minitest (5.14.4)
+    nokogiri (1.12.5)
+      mini_portile2 (~> 2.6.1)
       racc (~> 1.4)
-    omniauth (1.9.1)
+    omniauth (2.0.4)
       hashie (>= 3.4.6)
       rack (>= 1.6.2, < 3)
+      rack-protection
+    omniauth-rails_csrf_protection (1.0.0)
+      actionpack (>= 4.2)
+      omniauth (~> 2.0)
     parallel (1.19.1)
     parser (2.7.0.2)
       ast (~> 2.4.0)
@@ -36,24 +70,31 @@ GEM
       pry (~> 0.13.0)
     racc (1.5.2)
     rack (2.2.3)
+    rack-protection (2.1.0)
+      rack
     rack-test (1.1.0)
       rack (>= 1.0, < 3)
+    rails-dom-testing (2.0.3)
+      activesupport (>= 4.2.0)
+      nokogiri (>= 1.6)
+    rails-html-sanitizer (1.4.2)
+      loofah (~> 2.3)
     rainbow (3.0.0)
-    rake (12.3.3)
-    rexml (3.2.4)
-    rspec (3.9.0)
-      rspec-core (~> 3.9.0)
-      rspec-expectations (~> 3.9.0)
-      rspec-mocks (~> 3.9.0)
-    rspec-core (3.9.1)
-      rspec-support (~> 3.9.1)
-    rspec-expectations (3.9.0)
+    rake (13.0.6)
+    rexml (3.2.5)
+    rspec (3.10.0)
+      rspec-core (~> 3.10.0)
+      rspec-expectations (~> 3.10.0)
+      rspec-mocks (~> 3.10.0)
+    rspec-core (3.10.1)
+      rspec-support (~> 3.10.0)
+    rspec-expectations (3.10.1)
       diff-lcs (>= 1.2.0, < 2.0)
-      rspec-support (~> 3.9.0)
-    rspec-mocks (3.9.1)
+      rspec-support (~> 3.10.0)
+    rspec-mocks (3.10.2)
       diff-lcs (>= 1.2.0, < 2.0)
-      rspec-support (~> 3.9.0)
-    rspec-support (3.9.2)
+      rspec-support (~> 3.10.0)
+    rspec-support (3.10.2)
     rubocop (0.80.0)
       jaro_winkler (~> 1.5.1)
       parallel (~> 1.10)
@@ -65,23 +106,28 @@ GEM
     rubocop-rspec (1.38.1)
       rubocop (>= 0.68.1)
     ruby-progressbar (1.10.1)
-    ruby-saml (1.11.0)
-      nokogiri (>= 1.5.10)
+    ruby-saml (1.13.0)
+      nokogiri (>= 1.10.5)
+      rexml
     systemu (2.6.5)
+    tzinfo (2.0.4)
+      concurrent-ruby (~> 1.0)
     unicode-display_width (1.6.1)
     uuid (2.3.9)
       macaddr (~> 1.0)
+    zeitwerk (2.4.2)
 
 PLATFORMS
   ruby
 
 DEPENDENCIES
   bundler
+  nokogiri (>= 1.12.5)
   omniauth-realme!
   pry-byebug
   rack-test
-  rake (~> 12.0)
-  rspec (~> 3.0)
+  rake (~> 13.0.6)
+  rspec (~> 3.10.0)
   rubocop
   rubocop-rspec
 

data/lib/omniauth/realme/version.rb

@@ -2,6 +2,6 @@
 
 module OmniAuth
   module Realme
-    VERSION = '0.2.1'
+    VERSION = '2.1.1'
   end
 end

data/lib/omniauth/strategies/realme.rb

@@ -54,7 +54,7 @@ module OmniAuth
         # application and `#callback_phase` below is executed.
         #
         if request.params['relay_state']
-          if request.params['relay_state'].length > MAX_LENGTH_OF_RELAY_STATE
+          if limit_relay_state? && request.params['relay_state'].length > MAX_LENGTH_OF_RELAY_STATE
             ex = RelayStateTooLongError.new('RelayState exceeds SAML spec max length of 80 bytes')
 
             # fail!() returns a rack response which this callback must also
@@ -252,6 +252,12 @@ module OmniAuth
         options.fetch('legacy_rails_session_behaviour_enabled', true)
       end
 
+      # Many providers including RealMe don't limit the RelayState option
+      # so allow the limit to be disabled
+      def limit_relay_state?
+        options.fetch('limit_relay_state', true)
+      end
+
       def default_error_messages_for_rails_session(error)
         case error
         when /Timeout/

data/omniauth-realme.gemspec

@@ -28,9 +28,10 @@ Gem::Specification.new do |spec|
   spec.executables   = spec.files.grep(%r{^exe/}) { |f| File.basename(f) }
   spec.require_paths = ['lib']
 
-  spec.add_dependency 'omniauth', '~> 1.0'
-  spec.add_dependency 'ruby-saml', '~> 1.5'
-  spec.add_dependency 'uuid', '~> 2.0'
+  spec.add_dependency 'omniauth', '~> 2.0.4'
+  spec.add_dependency 'omniauth-rails_csrf_protection', '~> 1.0.0'
+  spec.add_dependency 'ruby-saml', '~> 1.13.0'
+  spec.add_dependency 'uuid', '~> 2.3.9'
 
   spec.add_development_dependency 'bundler'
   spec.add_development_dependency 'pry-byebug'

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: omniauth-realme
 version: !ruby/object:Gem::Version
-  version: 0.2.1
+  version: 2.1.1
 platform: ruby
 authors:
 - DigitalNZ
 autorequire: 
 bindir: exe
 cert_chain: []
-date: 2021-01-08 00:00:00.000000000 Z
+date: 2021-09-30 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: omniauth
@@ -16,42 +16,56 @@ dependencies:
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: '1.0'
+        version: 2.0.4
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: '1.0'
+        version: 2.0.4
+- !ruby/object:Gem::Dependency
+  name: omniauth-rails_csrf_protection
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: 1.0.0
+  type: :runtime
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: 1.0.0
 - !ruby/object:Gem::Dependency
   name: ruby-saml
   requirement: !ruby/object:Gem::Requirement
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: '1.5'
+        version: 1.13.0
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: '1.5'
+        version: 1.13.0
 - !ruby/object:Gem::Dependency
   name: uuid
   requirement: !ruby/object:Gem::Requirement
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: '2.0'
+        version: 2.3.9
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: '2.0'
+        version: 2.3.9
 - !ruby/object:Gem::Dependency
   name: bundler
   requirement: !ruby/object:Gem::Requirement