omniauth-spotify 1.0.3 → 1.0.4

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
checksums.yaml CHANGED
@@ -1,7 +1,7 @@
1
1
  ---
2
2
  SHA256:
3
- metadata.gz: '0815d73976c95dffbb11f88bf365087fa2b25b09231ce80bd72ff352d394b10a'
4
- data.tar.gz: 8d5bad8ba5aba32663f09fec35a71ae0e6735cfc3162fa5c545d3e815631941f
3
+ metadata.gz: de25e7d9dc464fdd5bb4b7b8ffd945fd7ef6ccd025ac8d938f3bad368a1b7ae1
4
+ data.tar.gz: 4ec21d397695d96c73f3eff5d202462d62d882430b25e272406b60cc25955c53
5
5
  SHA512:
6
- metadata.gz: 0a8fc2fae4c7f1ca18f6fefc5a18a2296c1b92d0428fb9dfb1f17d48d67d7befbf02d1cc77666730d2c366639fc656bc87573564dd6345a858e577d24ae558c0
7
- data.tar.gz: 336b4f5637959473922803e57cf14652868367c4b3e776f6c4badc5ed9cfdd62bb55e70cb6184ec417898e8768d24b8279f24b7eaad62b1a904dc8e2ba523b40
6
+ metadata.gz: 4735b6ad5984b8cbb9ab8d1e37e942b6a90edf67e0b0cfef1595133e8ccfd76320fa0e4048c40c15973719868586ea42fbb71a5aa6c8d3ede64bc6b6f5ba3149
7
+ data.tar.gz: 60e28c8cb306d54f96747c6a52120a61e4aa3156c903ee6ba67cfc4607bfe665262c622c79a13f13b54e8c6f4151839ee6e8244f306e208031acf823c5f6d34c
data/README.md CHANGED
@@ -35,6 +35,9 @@ end
35
35
  - Spotify developer dashboard: <https://developer.spotify.com/dashboard>
36
36
  - OAuth scopes reference: <https://developer.spotify.com/documentation/web-api/concepts/scopes>
37
37
  - Register callback URL (example): `https://your-app.example.com/auth/spotify/callback`
38
+ - The redirect URI must match exactly in Spotify's dashboard.
39
+ - Spotify requires HTTPS redirect URIs except for loopback IP literals such as
40
+ `http://127.0.0.1:3000/auth/spotify/callback`; `localhost` is not accepted.
38
41
 
39
42
  ## Options
40
43
 
@@ -103,7 +106,38 @@ Example payload from `request.env['omniauth.auth']` (real shape, anonymized):
103
106
  }
104
107
  ```
105
108
 
106
- `info.image` and `info.birthdate` are included only when Spotify returns those fields.
109
+ `info.email`, `info.image`, `info.birthdate`, `info.country_code`,
110
+ `info.product`, and `info.follower_count` are included only when Spotify
111
+ returns those fields.
112
+
113
+ ## Spotify API Changelog Notes
114
+
115
+ The strategy still uses Spotify's authorization-code flow and
116
+ `GET https://api.spotify.com/v1/me` for the current user profile.
117
+
118
+ Recent changelog items reviewed:
119
+
120
+ - February 2026 Development Mode changes: Spotify deprecated `country`,
121
+ `email`, `explicit_content`, `followers`, and `product` and may omit them
122
+ from `GET /me` user payloads for affected development-mode apps. The gem
123
+ treats these fields as optional and omits absent values from `info`.
124
+ - March 2026 changelog: Spotify reverted the February removal of Album and
125
+ Track `external_ids`. This gem does not call Album or Track endpoints and
126
+ does not map `external_ids`, so no code change is required for that reversal.
127
+ - February 2025 redirect URI security changes: Spotify rejects `localhost`
128
+ redirect URIs and requires HTTPS except for explicit loopback IP literals.
129
+ - Development Mode access changes: if `GET /me` returns `403` with a message
130
+ requiring Spotify Premium for the app owner, OAuth token exchange may still
131
+ be working; the Web API call is blocked by Spotify account/app policy, not by
132
+ this strategy's auth-hash mapping.
133
+
134
+ References:
135
+
136
+ - <https://developer.spotify.com/documentation/web-api/tutorials/february-2026-migration-guide>
137
+ - <https://developer.spotify.com/documentation/web-api/references/changes/february-2026>
138
+ - <https://developer.spotify.com/documentation/web-api/references/changes/march-2026>
139
+ - <https://developer.spotify.com/documentation/web-api/concepts/redirect_uri>
140
+ - <https://developer.spotify.com/blog/2026-02-06-update-on-developer-access-and-platform-security>
107
141
 
108
142
  ## Development
109
143
 
@@ -2,6 +2,6 @@
2
2
 
3
3
  module OmniAuth
4
4
  module Spotify
5
- VERSION = "1.0.3"
5
+ VERSION = "1.0.4"
6
6
  end
7
7
  end
metadata CHANGED
@@ -1,7 +1,7 @@
1
1
  --- !ruby/object:Gem::Specification
2
2
  name: omniauth-spotify
3
3
  version: !ruby/object:Gem::Version
4
- version: 1.0.3
4
+ version: 1.0.4
5
5
  platform: ruby
6
6
  authors:
7
7
  - Claudio Poli