onelogin 1.6.0 → 1.7.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
-SHA1:
-  metadata.gz: 43e75b93559432eb4abb128fda09326b0888f7dd
-  data.tar.gz: dffa50f002def9f773dfbfbb7d2aa26dc7752769
+SHA256:
+  metadata.gz: db38cae3acb3c8a5810159344a5e088b9e2b52467831e865b625462b470d6340
+  data.tar.gz: b40ec7f43940358e3e2014a1075074778afd6d1d4263b3fa1ea2a6b78853e55e
 SHA512:
-  metadata.gz: dac538dcd80c1ae95c87f7235c6803fb7dd112671c6e1dedf1609e909da25aae8f4e50b5510545d2cef08e0eccb77069b94909cf9fb8b977fa961ca96951ca92
-  data.tar.gz: 9270fff7c56ba05816435ef2ecc81a3581e4771926c0108cbad490e584bcadbd07e2ed774b9308f923f6e2fafadde79b8af0c06d9aa60387ca678ab95bca760f
+  metadata.gz: d0e8f95dc8d30b514d1a0427b64364a2389a548057d643bda94a2a58cf6c44dc3bf33240b7d1d660ad5ff8c09595b4e4e1e7f7ad6382a5aa54fd044209219cda
+  data.tar.gz: bafb58f70a588457fc592dd397c54069a87245df8d332d56369c36bb6842d3a1fb4e5cfa9250e0b346dc335f288f99a0e6a4fdc3f9fa0960413349155c8647c7

data/.github/workflows/test.yml

@@ -0,0 +1,25 @@
+name: test
+
+on: [push, pull_request]
+
+jobs:
+  rspec:
+    runs-on: ubuntu-latest
+
+    strategy:
+      fail-fast: false
+      matrix:
+        ruby: ['3.0', '3.1', '3.2', '3.3']
+
+    steps:
+      - name: Checkout
+        uses: actions/checkout@v4
+
+      - name: Set up Ruby ${{ matrix.ruby }}
+        uses: ruby/setup-ruby@v1
+        with:
+          ruby-version: ${{ matrix.ruby }}
+          bundler-cache: true
+
+      - name: Run specs
+        run: bundle exec rspec

data/.gitignore

@@ -7,6 +7,7 @@
 /pkg/
 /spec/reports/
 /tmp/
+/vendor/
 
 .DS_Store
 .rspec_status

data/README.md

@@ -42,6 +42,7 @@ If you don't have an account you can [sign up for a free developer account here]
 |region| Optional: `us` or `eu`. Defaults to `us`   |
 |max_results| Optional: Defaults to 1000  |
 |timeout| Optional: Defaults to 60 (requires httparty > 0.16.2) |
+|token_expiration_buffer| Optional: Non-negative number of seconds before token expiration to trigger a refresh. Set to `0` to disable. Defaults to 30 |
 
 ```ruby
 require 'onelogin'

data/lib/onelogin/api/client.rb

@@ -26,6 +26,7 @@ module OneLogin
                          Nokogiri::XML::ParseOptions::NONET
 
       DEFAULT_USER_AGENT = "onelogin-ruby-sdk v#{OneLogin::VERSION}".freeze
+      DEFAULT_TOKEN_EXPIRATION_BUFFER = 30 # seconds
 
       # Create a new instance of the Client.
       #
@@ -38,6 +39,7 @@ module OneLogin
         @client_secret = options[:client_secret]
         @region = options[:region] || 'us'
         @max_results = options[:max_results] || 1000
+        @token_expiration_buffer = normalize_expiration_buffer(options[:token_expiration_buffer])
 
         if options[:timeout] and defined? self.class.default_timeout
           self.class.default_timeout options[:timeout]
@@ -58,6 +60,29 @@ module OneLogin
         raise ArgumentError, 'client_id & client_secret are required' unless @client_id && @client_secret
       end
 
+      # Coerce the configured refresh buffer into a non-negative Integer.
+      #
+      # ENV-backed configs hand this over as a String, and a negative buffer
+      # would move the refresh point past the token's real expiry - which is the
+      # 401 this buffer exists to prevent - so reject both loudly.
+      #
+      def normalize_expiration_buffer(value)
+        return DEFAULT_TOKEN_EXPIRATION_BUFFER if value.nil?
+
+        buffer = begin
+          Integer(value)
+        rescue ArgumentError, TypeError
+          nil
+        end
+
+        if buffer.nil? || buffer < 0
+          raise ArgumentError, "token_expiration_buffer must be a non-negative integer, got #{value.inspect}"
+        end
+
+        buffer
+      end
+      private :normalize_expiration_buffer
+
       # Clean any previous error registered at the client.
       #
       def clean_error
@@ -66,15 +91,26 @@ module OneLogin
         @error_attribute = nil
       end
 
+      # Whether the current access token should be considered expired.
+      #
+      # Treats the token as expired `token_expiration_buffer` seconds early so a
+      # token that would lapse while a request is in flight is refreshed first.
+      #
+      # @return [Boolean] true when there is no expiration recorded or the token
+      #   is inside the refresh buffer.
+      #
       def expired?
-        Time.now.utc > @expiration
+        return true if @expiration.nil?
+        Time.now.utc > (@expiration - @token_expiration_buffer)
       end
 
       def prepare_token
         if @access_token.nil?
           access_token
         elsif expired?
-          regenerate_token
+          # Fall back to a brand new token if the refresh grant fails, otherwise
+          # the stale token is reused and the request comes back 401.
+          regenerate_token || access_token
         end
       end
 

data/lib/onelogin/version.rb

@@ -1,3 +1,3 @@
 module OneLogin
-  VERSION = "1.6.0"
+  VERSION = "1.7.0"
 end

data/onelogin.gemspec

@@ -42,4 +42,5 @@ Gem::Specification.new do |spec|
   spec.add_development_dependency "bundler"
   spec.add_development_dependency "rake", "~> 10.0"
   spec.add_development_dependency "rspec", "~> 3.0"
+  spec.add_development_dependency "webmock", "~> 3.0"
 end

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: onelogin
 version: !ruby/object:Gem::Version
-  version: 1.6.0
+  version: 1.7.0
 platform: ruby
 authors:
 - OneLogin
-autorequire: 
+autorequire:
 bindir: exe
 cert_chain: []
-date: 2022-01-28 00:00:00.000000000 Z
+date: 2026-08-04 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: httparty
@@ -80,6 +80,20 @@ dependencies:
     - - "~>"
       - !ruby/object:Gem::Version
         version: '3.0'
+- !ruby/object:Gem::Dependency
+  name: webmock
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '3.0'
+  type: :development
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '3.0'
 description: OneLogin's Ruby SDK. Use this API client to interact with OneLogin's
   platform
 email:
@@ -91,6 +105,7 @@ extra_rdoc_files:
 - README.md
 files:
 - ".github/workflows/git-secrets-public.yml"
+- ".github/workflows/test.yml"
 - ".gitignore"
 - ".travis.yml"
 - CODE_OF_CONDUCT.md
@@ -258,7 +273,7 @@ licenses:
 - MIT
 metadata:
   allowed_push_host: https://rubygems.org
-post_install_message: 
+post_install_message:
 rdoc_options: []
 require_paths:
 - lib
@@ -273,9 +288,8 @@ required_rubygems_version: !ruby/object:Gem::Requirement
     - !ruby/object:Gem::Version
       version: '0'
 requirements: []
-rubyforge_project: http://www.rubygems.org/gems/onelogin-ruby-sdk
-rubygems_version: 2.5.2.1
-signing_key: 
+rubygems_version: 3.2.33
+signing_key:
 specification_version: 4
 summary: OneLogin's Ruby SDK.
 test_files: []