omniauth-saml 2.1.0 → 2.2.3

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (7) hide show
  1. checksums.yaml +4 -4
  2. data/CHANGELOG.md +51 -0
  3. data/README.md +4 -4
  4. data/lib/omniauth/strategies/saml.rb +1 -1
  5. data/lib/omniauth-saml/version.rb +1 -1
  6. data/spec/omniauth/strategies/saml_spec.rb +3 -2
  7. metadata +25 -31
checksums.yaml CHANGED
@@ -1,7 +1,7 @@
1
1
  ---
2
2
  SHA256:
3
- metadata.gz: 032f34c12924a5666a189462f819b871c2e321891cbe23b45e56c47acdbfc53c
4
- data.tar.gz: 17bb6e9741181862fcb34f3ca0a47084b9805aba71b3dd5dadfb951c7cd20d27
3
+ metadata.gz: 74e6f8ffd71deca8c0cf5a47561df7c878b200af810dbf893f89677eb49da313
4
+ data.tar.gz: 217c895d6d946983062dc1f66f362f98aa394c94a8f0267e69e2af9f1555cbc4
5
5
  SHA512:
6
- metadata.gz: eb87a7392dc23407ab0064b67efd4ffefd9ec3fbbca18b32e96bf973281dffb9477bffc3765d8b4c3e278df7aedca255a95aa03deb44053b33c3cfff5af9435e
7
- data.tar.gz: 22daef0cc26447f27023c5dc2e6f816e1f79c57c0538b86ffae0f8a2ea9d08492bc351aa31838ca7b4a272ae577aea3f914a87dba0656e1ac2e098f49f034041
6
+ metadata.gz: '0825de571d12121384accff0a106c4d76420308d007698632dd2661f030942cc4ed570e649f8b455ddcf2340d9109d26422de44ec3eb36f06978b732023409b4'
7
+ data.tar.gz: 5229a183ad1d335f01b9de5111293925d5be4d8e461de89e2d5f4924a14939eb4286fe4d307af7c7e5db2b126a0ff495a0c3c9ba064f6d430624f207c25119df
data/CHANGELOG.md CHANGED
@@ -1,3 +1,54 @@
1
+ <a name="v2.2.3"></a>
2
+ ### v2.2.3 (2025-03-12)
3
+
4
+
5
+ #### Features
6
+
7
+ * new release 2.2.3 ([0d06a3c](/../../commit/0d06a3c))
8
+
9
+
10
+ #### Bug Fixes
11
+
12
+ * bump ruby-saml to 1.18 ([7a348b4](/../../commit/7a348b4))
13
+
14
+
15
+ <a name="v2.2.2"></a>
16
+ ### v2.2.2 (2025-03-04)
17
+
18
+
19
+ #### Features
20
+
21
+ * log errors on failed logout ([23ef364](/../../commit/23ef364))
22
+
23
+
24
+ <a name="v2.2.1"></a>
25
+ ### v2.2.1 (2024-09-11)
26
+
27
+ * Fix permission file permissions within published gem (#226)
28
+
29
+ <a name="v2.2.0"></a>
30
+ ### v2.2.0 (2024-09-10)
31
+
32
+ This release fixes:
33
+
34
+ * [GHSA-jw9c-mfg7-9rx2](https://github.com/SAML-Toolkits/ruby-saml/security/advisories/GHSA-jw9c-mfg7-9rx2)
35
+ * [GHSA-cvp8-5r8g-fhvq](https://github.com/omniauth/omniauth-saml/security/advisories/GHSA-cvp8-5r8g-fhvq)
36
+
37
+ #### Chores
38
+
39
+ * use semantic versioning for ruby-saml as per gem build hints ([e17f460](/../../commit/e17f460))
40
+
41
+ <a name="v2.1.1"></a>
42
+ ### v2.1.1 (2024-09-10)
43
+
44
+ #### Chores
45
+
46
+ * Add Ruby 3.1 to the CI matrix ([8954310](/../../commit/8954310))
47
+ * Add Ruby 3.2 to CI matrix ([9403366](/../../commit/9403366))
48
+ * Fix copy-pasteability of code example ([3eb8942](/../../commit/3eb8942))
49
+ * bump dependencies and remove ruby eol versions ([c6fc2db](/../../commit/c6fc2db))
50
+ * Remove old maintainer email from gemspec ([9f6daa](/../../commit/9f6daa))
51
+
1
52
  <a name="v2.1.0"></a>
2
53
  ### v2.1.0 (2022-03-01)
3
54
 
data/README.md CHANGED
@@ -15,8 +15,8 @@ https://github.com/omniauth/omniauth-saml
15
15
 
16
16
  ## Requirements
17
17
 
18
- * [OmniAuth](http://www.omniauth.org/) 1.3+
19
- * Ruby 2.4.x+
18
+ * [OmniAuth](http://www.omniauth.org/) 2.1+
19
+ * Ruby 3.1.x+
20
20
 
21
21
  ## Versioning
22
22
 
@@ -37,7 +37,7 @@ use OmniAuth::Strategies::SAML,
37
37
  :idp_cert_multi => {
38
38
  :signing => ["-----BEGIN CERTIFICATE-----\n...-----END CERTIFICATE-----", "-----BEGIN CERTIFICATE-----\n...-----END CERTIFICATE-----", ...],
39
39
  :encryption => []
40
- }
40
+ },
41
41
  :idp_cert_fingerprint => "E7:91:B2:E1:...",
42
42
  :idp_cert_fingerprint_validator => lambda { |fingerprint| fingerprint },
43
43
  :name_identifier_format => "urn:oasis:names:tc:SAML:1.1:nameid-format:emailAddress"
@@ -64,7 +64,7 @@ Rails.application.config.middleware.use OmniAuth::Builder do
64
64
  :idp_cert_multi => {
65
65
  :signing => ["-----BEGIN CERTIFICATE-----\n...-----END CERTIFICATE-----", "-----BEGIN CERTIFICATE-----\n...-----END CERTIFICATE-----", ...],
66
66
  :encryption => []
67
- }
67
+ },
68
68
  :idp_cert_fingerprint => "E7:91:B2:E1:...",
69
69
  :idp_cert_fingerprint_validator => lambda { |fingerprint| fingerprint },
70
70
  :name_identifier_format => "urn:oasis:names:tc:SAML:1.1:nameid-format:emailAddress"
data/lib/omniauth/strategies/saml.rb CHANGED
@@ -190,7 +190,7 @@ module OmniAuth
190
190
  logout_response = OneLogin::RubySaml::SloLogoutresponse.new.create(settings, logout_request_id, nil, RelayState: slo_relay_state)
191
191
  redirect(logout_response)
192
192
  else
193
- raise OmniAuth::Strategies::SAML::ValidationError.new("SAML failed to process LogoutRequest")
193
+ raise OmniAuth::Strategies::SAML::ValidationError.new("SAML failed to process LogoutRequest (#{logout_request.errors.join(', ')})")
194
194
  end
195
195
  end
196
196
 
data/lib/omniauth-saml/version.rb CHANGED
@@ -1,5 +1,5 @@
1
1
  module OmniAuth
2
2
  module SAML
3
- VERSION = '2.1.0'
3
+ VERSION = '2.2.3'
4
4
  end
5
5
  end
data/spec/omniauth/strategies/saml_spec.rb CHANGED
@@ -346,12 +346,13 @@ describe OmniAuth::Strategies::SAML, :type => :strategy do
346
346
  context "when request is an invalid logout request" do
347
347
  before :each do
348
348
  allow_any_instance_of(OneLogin::RubySaml::SloLogoutrequest).to receive(:is_valid?).and_return(false)
349
+ allow_any_instance_of(OneLogin::RubySaml::SloLogoutrequest).to receive(:errors).and_return(['Blank logout request'])
349
350
  end
350
351
 
351
352
  # TODO: Maybe this should not raise an exception, but return some 4xx error instead?
352
353
  it "should raise an exception" do
353
354
  expect { subject }.
354
- to raise_error(OmniAuth::Strategies::SAML::ValidationError, 'SAML failed to process LogoutRequest')
355
+ to raise_error(OmniAuth::Strategies::SAML::ValidationError, 'SAML failed to process LogoutRequest (Blank logout request)')
355
356
  end
356
357
  end
357
358
 
@@ -410,7 +411,7 @@ describe OmniAuth::Strategies::SAML, :type => :strategy do
410
411
 
411
412
  it 'should get SP metadata page' do
412
413
  expect(last_response.status).to eq 200
413
- expect(last_response.header["Content-Type"]).to eq "application/xml"
414
+ expect(last_response.headers["Content-Type"]).to eq "application/xml"
414
415
  end
415
416
 
416
417
  it 'should configure attributes consuming service' do
metadata CHANGED
@@ -1,7 +1,7 @@
1
1
  --- !ruby/object:Gem::Specification
2
2
  name: omniauth-saml
3
3
  version: !ruby/object:Gem::Version
4
- version: 2.1.0
4
+ version: 2.2.3
5
5
  platform: ruby
6
6
  authors:
7
7
  - Raecoo Cao
@@ -14,7 +14,7 @@ authors:
14
14
  autorequire:
15
15
  bindir: bin
16
16
  cert_chain: []
17
- date: 2022-03-01 00:00:00.000000000 Z
17
+ date: 2025-03-12 00:00:00.000000000 Z
18
18
  dependencies:
19
19
  - !ruby/object:Gem::Dependency
20
20
  name: omniauth
@@ -22,120 +22,114 @@ dependencies:
22
22
  requirements:
23
23
  - - "~>"
24
24
  - !ruby/object:Gem::Version
25
- version: '2.0'
25
+ version: '2.1'
26
26
  type: :runtime
27
27
  prerelease: false
28
28
  version_requirements: !ruby/object:Gem::Requirement
29
29
  requirements:
30
30
  - - "~>"
31
31
  - !ruby/object:Gem::Version
32
- version: '2.0'
32
+ version: '2.1'
33
33
  - !ruby/object:Gem::Dependency
34
34
  name: ruby-saml
35
35
  requirement: !ruby/object:Gem::Requirement
36
36
  requirements:
37
37
  - - "~>"
38
38
  - !ruby/object:Gem::Version
39
- version: '1.12'
39
+ version: '1.18'
40
40
  type: :runtime
41
41
  prerelease: false
42
42
  version_requirements: !ruby/object:Gem::Requirement
43
43
  requirements:
44
44
  - - "~>"
45
45
  - !ruby/object:Gem::Version
46
- version: '1.12'
46
+ version: '1.18'
47
47
  - !ruby/object:Gem::Dependency
48
48
  name: rake
49
49
  requirement: !ruby/object:Gem::Requirement
50
50
  requirements:
51
- - - ">="
51
+ - - "~>"
52
52
  - !ruby/object:Gem::Version
53
- version: 12.3.3
53
+ version: '13.2'
54
54
  type: :development
55
55
  prerelease: false
56
56
  version_requirements: !ruby/object:Gem::Requirement
57
57
  requirements:
58
- - - ">="
58
+ - - "~>"
59
59
  - !ruby/object:Gem::Version
60
- version: 12.3.3
60
+ version: '13.2'
61
61
  - !ruby/object:Gem::Dependency
62
62
  name: rspec
63
63
  requirement: !ruby/object:Gem::Requirement
64
64
  requirements:
65
65
  - - "~>"
66
66
  - !ruby/object:Gem::Version
67
- version: '3.4'
67
+ version: '3.13'
68
68
  type: :development
69
69
  prerelease: false
70
70
  version_requirements: !ruby/object:Gem::Requirement
71
71
  requirements:
72
72
  - - "~>"
73
73
  - !ruby/object:Gem::Version
74
- version: '3.4'
74
+ version: '3.13'
75
75
  - !ruby/object:Gem::Dependency
76
76
  name: simplecov
77
77
  requirement: !ruby/object:Gem::Requirement
78
78
  requirements:
79
79
  - - "~>"
80
80
  - !ruby/object:Gem::Version
81
- version: '0.11'
81
+ version: '0.10'
82
82
  type: :development
83
83
  prerelease: false
84
84
  version_requirements: !ruby/object:Gem::Requirement
85
85
  requirements:
86
86
  - - "~>"
87
87
  - !ruby/object:Gem::Version
88
- version: '0.11'
88
+ version: '0.10'
89
89
  - !ruby/object:Gem::Dependency
90
90
  name: rack-test
91
91
  requirement: !ruby/object:Gem::Requirement
92
92
  requirements:
93
93
  - - "~>"
94
94
  - !ruby/object:Gem::Version
95
- version: '0.6'
96
- - - ">="
97
- - !ruby/object:Gem::Version
98
- version: 0.6.3
95
+ version: '2.1'
99
96
  type: :development
100
97
  prerelease: false
101
98
  version_requirements: !ruby/object:Gem::Requirement
102
99
  requirements:
103
100
  - - "~>"
104
101
  - !ruby/object:Gem::Version
105
- version: '0.6'
106
- - - ">="
107
- - !ruby/object:Gem::Version
108
- version: 0.6.3
102
+ version: '2.1'
109
103
  - !ruby/object:Gem::Dependency
110
104
  name: conventional-changelog
111
105
  requirement: !ruby/object:Gem::Requirement
112
106
  requirements:
113
107
  - - "~>"
114
108
  - !ruby/object:Gem::Version
115
- version: '1.2'
109
+ version: '1.3'
116
110
  type: :development
117
111
  prerelease: false
118
112
  version_requirements: !ruby/object:Gem::Requirement
119
113
  requirements:
120
114
  - - "~>"
121
115
  - !ruby/object:Gem::Version
122
- version: '1.2'
116
+ version: '1.3'
123
117
  - !ruby/object:Gem::Dependency
124
118
  name: coveralls
125
119
  requirement: !ruby/object:Gem::Requirement
126
120
  requirements:
127
- - - ">="
121
+ - - "~>"
128
122
  - !ruby/object:Gem::Version
129
- version: 0.8.23
123
+ version: '0.8'
130
124
  type: :development
131
125
  prerelease: false
132
126
  version_requirements: !ruby/object:Gem::Requirement
133
127
  requirements:
134
- - - ">="
128
+ - - "~>"
135
129
  - !ruby/object:Gem::Version
136
- version: 0.8.23
130
+ version: '0.8'
137
131
  description: A generic SAML strategy for OmniAuth.
138
- email: rajiv@alum.mit.edu
132
+ email:
139
133
  executables: []
140
134
  extensions: []
141
135
  extra_rdoc_files: []
@@ -161,14 +155,14 @@ required_ruby_version: !ruby/object:Gem::Requirement
161
155
  requirements:
162
156
  - - ">="
163
157
  - !ruby/object:Gem::Version
164
- version: '2.4'
158
+ version: '3.1'
165
159
  required_rubygems_version: !ruby/object:Gem::Requirement
166
160
  requirements:
167
161
  - - ">="
168
162
  - !ruby/object:Gem::Version
169
163
  version: '0'
170
164
  requirements: []
171
- rubygems_version: 3.2.32
165
+ rubygems_version: 3.4.19
172
166
  signing_key:
173
167
  specification_version: 4
174
168
  summary: A generic SAML strategy for OmniAuth.