omniauth-suomifi 0.8.0 → 0.9.0
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- checksums.yaml +4 -4
- data/README.md +1 -1
- data/lib/omniauth/strategies/suomifi.rb +5 -4
- data/lib/omniauth-suomifi/ruby_saml_extensions.rb +4 -4
- data/lib/omniauth-suomifi/version.rb +1 -1
- metadata +6 -90
checksums.yaml
CHANGED
|
@@ -1,7 +1,7 @@
|
|
|
1
1
|
---
|
|
2
2
|
SHA256:
|
|
3
|
-
metadata.gz:
|
|
4
|
-
data.tar.gz:
|
|
3
|
+
metadata.gz: 828b52d04db9791651039f76e3658cc35d0341761c0d89a8093fec92c6a59633
|
|
4
|
+
data.tar.gz: bf9f6300e7f75e92940d8e30c961eb83bb3178044e5cc87a9f1e86621b4d3ec1
|
|
5
5
|
SHA512:
|
|
6
|
-
metadata.gz:
|
|
7
|
-
data.tar.gz:
|
|
6
|
+
metadata.gz: a0d270db302440de00ade6e5aa206d178c6782c304b135fd7c1934f997b8f2930d79aad93e9c7ad4832d1c187dae866fee3f61388dc003e9be95747f92f3cc09
|
|
7
|
+
data.tar.gz: 50bb332a0ccb99bb91b11931f2f746a4d576c521ed97d92afde48d0b594251360384a4c70de7edd11e2e23dcdc732eee5a5b43839618a590d25705ca29ed8687
|
data/README.md
CHANGED
|
@@ -198,7 +198,7 @@ Devise.setup do |config|
|
|
|
198
198
|
# is why it is generated from the personal identity codes. That code may,
|
|
199
199
|
# however, contain personal data such as date of birth or gender, which is
|
|
200
200
|
# why it is hashed using this salt. For Rails, this defaults to
|
|
201
|
-
# `Rails.application.
|
|
201
|
+
# `Rails.application.secret_key_base` and does not need to be
|
|
202
202
|
# specifically configured.
|
|
203
203
|
uid_salt: 'abcdef123'
|
|
204
204
|
end
|
|
@@ -448,7 +448,7 @@ module OmniAuth
|
|
|
448
448
|
# birth, gender, etc.). Please provide a salt with the `uid_salt`
|
|
449
449
|
# configuration option for proper hashing of the strings. For Rails, it
|
|
450
450
|
# will be automatically set by
|
|
451
|
-
# `Rails.application.
|
|
451
|
+
# `Rails.application.secret_key_base`.
|
|
452
452
|
#
|
|
453
453
|
# Finally, fallback to the SAML NameID which is only unique per session.
|
|
454
454
|
# This should not happen with any valid authentication requests.
|
|
@@ -462,7 +462,7 @@ module OmniAuth
|
|
|
462
462
|
if options.uid_salt
|
|
463
463
|
options.uid_salt
|
|
464
464
|
elsif defined?(::Rails) && ::Rails.application
|
|
465
|
-
::Rails.application.
|
|
465
|
+
::Rails.application.secret_key_base
|
|
466
466
|
else
|
|
467
467
|
''
|
|
468
468
|
end
|
|
@@ -482,7 +482,7 @@ module OmniAuth
|
|
|
482
482
|
# hash for easier access.
|
|
483
483
|
extra do
|
|
484
484
|
{
|
|
485
|
-
search_success: search_success
|
|
485
|
+
search_success: search_success?,
|
|
486
486
|
saml_attributes: saml_attributes
|
|
487
487
|
}
|
|
488
488
|
end
|
|
@@ -712,10 +712,11 @@ module OmniAuth
|
|
|
712
712
|
# This will return true if the VTJ search (population information system,
|
|
713
713
|
# väestötietojärjestelmä) was successful and information about the person
|
|
714
714
|
# was transmitted in the SAML response.
|
|
715
|
-
def search_success
|
|
715
|
+
def search_success?
|
|
716
716
|
success_string = find_attribute_by(['urn:oid:1.2.246.517.3002.111.2'])
|
|
717
717
|
success_string == 'true'
|
|
718
718
|
end
|
|
719
|
+
alias search_success search_success?
|
|
719
720
|
|
|
720
721
|
def saml_attributes
|
|
721
722
|
{}.tap do |attrs|
|
|
@@ -47,19 +47,19 @@ OneLogin::RubySaml::Utils.class_eval do
|
|
|
47
47
|
data = cipher_text[iv_len..]
|
|
48
48
|
cipher.padding = 0
|
|
49
49
|
cipher.key = symmetric_key
|
|
50
|
-
cipher.iv = cipher_text[0..iv_len - 1]
|
|
50
|
+
cipher.iv = cipher_text[0..(iv_len - 1)]
|
|
51
51
|
assertion_plaintext = cipher.update(data)
|
|
52
52
|
assertion_plaintext << cipher.final
|
|
53
53
|
elsif auth_cipher
|
|
54
54
|
iv_len = auth_cipher.iv_len
|
|
55
55
|
text_len = cipher_text.length
|
|
56
56
|
tag_len = 16
|
|
57
|
-
data = cipher_text[iv_len..text_len - 1 - tag_len]
|
|
57
|
+
data = cipher_text[iv_len..(text_len - 1 - tag_len)]
|
|
58
58
|
auth_cipher.padding = 0
|
|
59
59
|
auth_cipher.key = symmetric_key
|
|
60
|
-
auth_cipher.iv = cipher_text[0..iv_len - 1]
|
|
60
|
+
auth_cipher.iv = cipher_text[0..(iv_len - 1)]
|
|
61
61
|
auth_cipher.auth_data = ''
|
|
62
|
-
auth_cipher.auth_tag = cipher_text[text_len - tag_len..]
|
|
62
|
+
auth_cipher.auth_tag = cipher_text[(text_len - tag_len)..]
|
|
63
63
|
assertion_plaintext = auth_cipher.update(data)
|
|
64
64
|
assertion_plaintext << auth_cipher.final
|
|
65
65
|
elsif rsa
|
metadata
CHANGED
|
@@ -1,14 +1,14 @@
|
|
|
1
1
|
--- !ruby/object:Gem::Specification
|
|
2
2
|
name: omniauth-suomifi
|
|
3
3
|
version: !ruby/object:Gem::Version
|
|
4
|
-
version: 0.
|
|
4
|
+
version: 0.9.0
|
|
5
5
|
platform: ruby
|
|
6
6
|
authors:
|
|
7
7
|
- Antti Hukkanen
|
|
8
8
|
autorequire:
|
|
9
9
|
bindir: bin
|
|
10
10
|
cert_chain: []
|
|
11
|
-
date:
|
|
11
|
+
date: 2026-07-31 00:00:00.000000000 Z
|
|
12
12
|
dependencies:
|
|
13
13
|
- !ruby/object:Gem::Dependency
|
|
14
14
|
name: omniauth-saml
|
|
@@ -30,98 +30,14 @@ dependencies:
|
|
|
30
30
|
requirements:
|
|
31
31
|
- - "~>"
|
|
32
32
|
- !ruby/object:Gem::Version
|
|
33
|
-
version: '1.
|
|
33
|
+
version: '1.18'
|
|
34
34
|
type: :runtime
|
|
35
35
|
prerelease: false
|
|
36
36
|
version_requirements: !ruby/object:Gem::Requirement
|
|
37
37
|
requirements:
|
|
38
38
|
- - "~>"
|
|
39
39
|
- !ruby/object:Gem::Version
|
|
40
|
-
version: '1.
|
|
41
|
-
- !ruby/object:Gem::Dependency
|
|
42
|
-
name: rake
|
|
43
|
-
requirement: !ruby/object:Gem::Requirement
|
|
44
|
-
requirements:
|
|
45
|
-
- - "~>"
|
|
46
|
-
- !ruby/object:Gem::Version
|
|
47
|
-
version: '13.1'
|
|
48
|
-
type: :development
|
|
49
|
-
prerelease: false
|
|
50
|
-
version_requirements: !ruby/object:Gem::Requirement
|
|
51
|
-
requirements:
|
|
52
|
-
- - "~>"
|
|
53
|
-
- !ruby/object:Gem::Version
|
|
54
|
-
version: '13.1'
|
|
55
|
-
- !ruby/object:Gem::Dependency
|
|
56
|
-
name: rspec
|
|
57
|
-
requirement: !ruby/object:Gem::Requirement
|
|
58
|
-
requirements:
|
|
59
|
-
- - "~>"
|
|
60
|
-
- !ruby/object:Gem::Version
|
|
61
|
-
version: '3.13'
|
|
62
|
-
type: :development
|
|
63
|
-
prerelease: false
|
|
64
|
-
version_requirements: !ruby/object:Gem::Requirement
|
|
65
|
-
requirements:
|
|
66
|
-
- - "~>"
|
|
67
|
-
- !ruby/object:Gem::Version
|
|
68
|
-
version: '3.13'
|
|
69
|
-
- !ruby/object:Gem::Dependency
|
|
70
|
-
name: rack-test
|
|
71
|
-
requirement: !ruby/object:Gem::Requirement
|
|
72
|
-
requirements:
|
|
73
|
-
- - "~>"
|
|
74
|
-
- !ruby/object:Gem::Version
|
|
75
|
-
version: 2.1.0
|
|
76
|
-
type: :development
|
|
77
|
-
prerelease: false
|
|
78
|
-
version_requirements: !ruby/object:Gem::Requirement
|
|
79
|
-
requirements:
|
|
80
|
-
- - "~>"
|
|
81
|
-
- !ruby/object:Gem::Version
|
|
82
|
-
version: 2.1.0
|
|
83
|
-
- !ruby/object:Gem::Dependency
|
|
84
|
-
name: webmock
|
|
85
|
-
requirement: !ruby/object:Gem::Requirement
|
|
86
|
-
requirements:
|
|
87
|
-
- - "~>"
|
|
88
|
-
- !ruby/object:Gem::Version
|
|
89
|
-
version: '3.20'
|
|
90
|
-
type: :development
|
|
91
|
-
prerelease: false
|
|
92
|
-
version_requirements: !ruby/object:Gem::Requirement
|
|
93
|
-
requirements:
|
|
94
|
-
- - "~>"
|
|
95
|
-
- !ruby/object:Gem::Version
|
|
96
|
-
version: '3.20'
|
|
97
|
-
- !ruby/object:Gem::Dependency
|
|
98
|
-
name: xmlenc
|
|
99
|
-
requirement: !ruby/object:Gem::Requirement
|
|
100
|
-
requirements:
|
|
101
|
-
- - "~>"
|
|
102
|
-
- !ruby/object:Gem::Version
|
|
103
|
-
version: 0.8.0
|
|
104
|
-
type: :development
|
|
105
|
-
prerelease: false
|
|
106
|
-
version_requirements: !ruby/object:Gem::Requirement
|
|
107
|
-
requirements:
|
|
108
|
-
- - "~>"
|
|
109
|
-
- !ruby/object:Gem::Version
|
|
110
|
-
version: 0.8.0
|
|
111
|
-
- !ruby/object:Gem::Dependency
|
|
112
|
-
name: simplecov
|
|
113
|
-
requirement: !ruby/object:Gem::Requirement
|
|
114
|
-
requirements:
|
|
115
|
-
- - "~>"
|
|
116
|
-
- !ruby/object:Gem::Version
|
|
117
|
-
version: 0.22.0
|
|
118
|
-
type: :development
|
|
119
|
-
prerelease: false
|
|
120
|
-
version_requirements: !ruby/object:Gem::Requirement
|
|
121
|
-
requirements:
|
|
122
|
-
- - "~>"
|
|
123
|
-
- !ruby/object:Gem::Version
|
|
124
|
-
version: 0.22.0
|
|
40
|
+
version: '1.18'
|
|
125
41
|
description: Suomi.fi e-Identification service integration for OmniAuth.
|
|
126
42
|
email:
|
|
127
43
|
- antti.hukkanen@mainiotech.fi
|
|
@@ -154,14 +70,14 @@ required_ruby_version: !ruby/object:Gem::Requirement
|
|
|
154
70
|
requirements:
|
|
155
71
|
- - ">="
|
|
156
72
|
- !ruby/object:Gem::Version
|
|
157
|
-
version: '
|
|
73
|
+
version: '3.0'
|
|
158
74
|
required_rubygems_version: !ruby/object:Gem::Requirement
|
|
159
75
|
requirements:
|
|
160
76
|
- - ">="
|
|
161
77
|
- !ruby/object:Gem::Version
|
|
162
78
|
version: '0'
|
|
163
79
|
requirements: []
|
|
164
|
-
rubygems_version: 3.
|
|
80
|
+
rubygems_version: 3.5.23
|
|
165
81
|
signing_key:
|
|
166
82
|
specification_version: 4
|
|
167
83
|
summary: Provides a Suomi.fi strategy for OmniAuth.
|