omniauth-whop 0.1.0 → 0.1.1
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- checksums.yaml +4 -4
- data/CHANGELOG.md +8 -0
- data/README.md +7 -2
- data/lib/omniauth/whop/version.rb +1 -1
- metadata +1 -1
checksums.yaml
CHANGED
|
@@ -1,7 +1,7 @@
|
|
|
1
1
|
---
|
|
2
2
|
SHA256:
|
|
3
|
-
metadata.gz:
|
|
4
|
-
data.tar.gz:
|
|
3
|
+
metadata.gz: 621f46079ec835a432d49e40f8db9c21f1ce9e9f728416f1264a5de7e7484b18
|
|
4
|
+
data.tar.gz: 80afbc44acb57f3d50b1a9ae620ccb5cf580bb3f4f94cd9cc3eb75dd85760875
|
|
5
5
|
SHA512:
|
|
6
|
-
metadata.gz:
|
|
7
|
-
data.tar.gz:
|
|
6
|
+
metadata.gz: 3333f24be0e708e02147dcf3c9d0950a5422cf095e60e724c9e9dcc79606e9deef2ba620f7f8eb5cc4db19ec8c64451e540718829a4b773461c59298174de006
|
|
7
|
+
data.tar.gz: ed7e195e1d5820955ced6882c89b16e2f4a9bfd14e86ea1c5801459372cfe9554e1f72420c668d011536d4683ee686fcd837f6db5b39626b5948339ef69d3178
|
data/CHANGELOG.md
CHANGED
|
@@ -1,5 +1,13 @@
|
|
|
1
1
|
# Changelog
|
|
2
2
|
|
|
3
|
+
## 0.1.1 — 2026-11-15
|
|
4
|
+
|
|
5
|
+
- Add fresh Rails/Devise integration checks and minimum-dependency CI.
|
|
6
|
+
- Cover signing-key rotation, callback paths, and provider failure responses.
|
|
7
|
+
- Configure Dependabot and tag-based RubyGems Trusted Publishing.
|
|
8
|
+
- Upgrade the local demo's Puma dependency to the patched 7.2 series.
|
|
9
|
+
- Verify a real production login and document maintenance/release steps.
|
|
10
|
+
|
|
3
11
|
## 0.1.0
|
|
4
12
|
|
|
5
13
|
- Initial Whop OmniAuth strategy with PKCE, state and nonce validation.
|
data/README.md
CHANGED
|
@@ -14,7 +14,7 @@ A community-maintained [OmniAuth](https://github.com/omniauth/omniauth) strategy
|
|
|
14
14
|
|
|
15
15
|
Requires Ruby 3.2+ and OmniAuth 2 (via `omniauth-oauth2`).
|
|
16
16
|
|
|
17
|
-
Verified with
|
|
17
|
+
Verified with real Whop sandbox and production logins on November 15, 2026: authorization, code exchange, signature/claim validation, and UserInfo profile mapping. Fresh Rails applications also exercise both standalone OmniAuth and Devise integration in CI.
|
|
18
18
|
|
|
19
19
|
## Installation
|
|
20
20
|
|
|
@@ -141,10 +141,15 @@ Open `http://localhost:9292` and click **Sign in with Whop**. The demo displays
|
|
|
141
141
|
bundle install
|
|
142
142
|
bundle exec rake
|
|
143
143
|
bundle exec rubocop
|
|
144
|
+
bundle exec ruby bin/test_rails
|
|
144
145
|
gem build omniauth-whop.gemspec
|
|
145
146
|
```
|
|
146
147
|
|
|
147
|
-
Tests exercise the real OmniAuth middleware and HTTP boundary with generated signing keys and stubbed Whop responses. External HTTP is disabled in the test suite. CI runs Ruby 3.2, 3.3, 3.4, and 4.0.
|
|
148
|
+
Tests exercise the real OmniAuth middleware and HTTP boundary with generated signing keys and stubbed Whop responses. External HTTP is disabled in the test suite. CI runs Ruby 3.2, 3.3, 3.4, and 4.0, plus the minimum supported JWT/OmniAuth dependencies. The Rails integration matrix covers Rails 7.2/Devise 4.9, Rails 8.0/Devise 5, and Rails 8.1/Devise 5.
|
|
149
|
+
|
|
150
|
+
`bin/test_rails` builds and installs the packaged gem into a temporary fresh Rails application. It checks POST initiation with a real Rails CSRF token, signed callbacks, persisted sessions, callback replay, and missing CSRF tokens in both standalone and Devise configurations. Set `RAILS_VERSION` and `DEVISE_VERSION` to select another supported combination; set `GEM_ARTIFACT` to test a previously built `.gem`. Whop HTTP responses are stubbed, so this command does not need credentials.
|
|
151
|
+
|
|
152
|
+
See [CONTRIBUTING.md](CONTRIBUTING.md) for checks and the Trusted Publishing release process.
|
|
148
153
|
|
|
149
154
|
Report bugs with a minimal reproduction, Ruby/gem versions, and the failure type. Do not include credentials, authorization codes, or customer data. To report a security issue privately, use [GitHub's security advisory form](https://github.com/yshmarov/omniauth-whop/security/advisories/new).
|
|
150
155
|
|