onfido 2.8.0 → 3.0.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 38b8a8f0808cfd6cd4df9d3853705ae0b432136e28d8a0cd8712c353f61a2063
-  data.tar.gz: c205a16862973f2bfe582aae44e58f4aa6d36ebd31647535e7151104b798f8ee
+  metadata.gz: a9653d3538d5e5bb57827c1e1219904664065fb717c2a8bffb4adbf021d64ca7
+  data.tar.gz: c1d007e144f6516a305b84936f6b60c0f723af9407df2c8c2144016793540179
 SHA512:
-  metadata.gz: 30a055206b8ac359f93f45584edd9a751390f381bc11caabdee05cf5b13f06c71a79388753ec6e680672c274b1fd08604334af75b9c4465cfab651d7e6f36e36
-  data.tar.gz: 5a887ab3f679946ce049ad3b4ba4bf874c31f641d437019df2093fe8f734ebebc29f6cca15b2b730ac47d14480e1ce239107ac5a6ce3fa639a71c8c78494b373
+  metadata.gz: 85351c613a670ca1b2c437d7bbbfd206f864b37fec99171ec731b4c23c82168b4919e9fc18e0155eeb9e3ee1abdb4b9eb9bea6e3a79346323d4aa029b48ee630
+  data.tar.gz: a2db36ed27b85c56bf775e20f8c264dc894848e6bafc99a968ac78b0c4942578e98826e4f7d8ab683bd52f0ffa404feefdc15dc96470482d08b522a29371e366

data/CHANGELOG.md

@@ -1,3 +1,14 @@
+# Changelog
+
+## v3.0.0 24th June 2024
+
+- Library has been rebuilt from scratch and automatically generated on [Onfido OpenAPI Spec](https://github.com/onfido/onfido-openapi-spec) (release [v3.0.0](https://github.com/onfido/onfido-openapi-spec/releases/tag/v3.0.0))
+- Integration tests have also been implemented
+
+## v2.9.0 24 November 2023
+
+- Added `signed_evidence_file` method for WorkflowRuns
+
 ## v2.8.0, 24 January 2023
 
 - Updated to use API v3.6, for more details please see our [release notes](https://developers.onfido.com/release-notes#api-v36).
@@ -17,11 +28,11 @@
 
 ## v2.4.0, 05 October 2022
 
-- Updated to use API v3.5, for more details please see our [release notes](https://developers.onfido.com/release-notes#api-v35). 
+- Updated to use API v3.5, for more details please see our [release notes](https://developers.onfido.com/release-notes#api-v35).
 
 ## v2.3.0, 02 March 2022
 
-- Updated to use API v3.4, for more details please see our [release notes](https://developers.onfido.com/release-notes#api-v34). 
+- Updated to use API v3.4, for more details please see our [release notes](https://developers.onfido.com/release-notes#api-v34).
 
 ## v2.2.0, 02 March 2022
 
@@ -88,7 +99,7 @@
 ## v0.11.0, 18 April 2018
 
 - Automatically detect the correct Onfido API region to use based on the provided API
-key (#49) (@tpinto)
+  key (#49) (@tpinto)
 
 ## v0.10.0, 3 April 2018
 
@@ -102,7 +113,7 @@ key (#49) (@tpinto)
 ## v0.8.4, 29 January 2018
 
 - Replace use of `method_missing` with explicitly-defined accessors when accessing
-resources from an `Onfido::API` instance (@hmac)
+  resources from an `Onfido::API` instance (@hmac)
 
 ## v0.8.3, 16 January 2018
 

data/Gemfile

@@ -1,10 +1,11 @@
-# frozen_string_literal: true
-
 source 'https://rubygems.org'
+
 gemspec
 
 group :development, :test do
-  gem 'pry'
+  gem 'rake', '~> 13.0.1'
   gem 'pry-byebug'
-  gem 'pry-stack_explorer'
+  gem 'rubocop', '~> 0.66.0'
 end
+
+gem "faraday-follow_redirects", "~> 0.3.0"

data/LICENSE

@@ -1,7 +1,6 @@
 The MIT License (MIT)
 
-Original work Copyright (c) 2015 Hassle
-Modified work Copyright 2019 Onfido
+Copyright (c) 2024 Onfido
 
 Permission is hereby granted, free of charge, to any person obtaining a copy
 of this software and associated documentation files (the "Software"), to deal
@@ -10,14 +9,13 @@ to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
 copies of the Software, and to permit persons to whom the Software is
 furnished to do so, subject to the following conditions:
 
-The above copyright notice and this permission notice shall be included in all
-copies or substantial portions of the Software.
+The above copyright notice and this permission notice shall be included in
+all copies or substantial portions of the Software.
 
 THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
 IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
 FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
 AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
 LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
-OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
-SOFTWARE.
-
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN
+THE SOFTWARE.

data/README.md

@@ -1,40 +1,42 @@
-# Onfido
+# Onfido Ruby Library
 
 The official Ruby library for integrating with the Onfido API.
 
-[![Gem Version](https://badge.fury.io/rb/onfido.svg)](http://badge.fury.io/rb/onfido)
-[![Build Status](https://travis-ci.org/onfido/onfido-ruby.svg?branch=master)](https://travis-ci.org/onfido/onfido-ruby)
+Documentation can be found at <https://documentation.onfido.com>.
 
-Documentation can be found at https://documentation.onfido.com
+This version uses Onfido API v3.6. Refer to our [API versioning guide](https://developers.onfido.com/guide/api-versioning-policy#client-libraries) for details of which client library versions use which versions of the API.
 
-This version uses Onfido API v3.6 and is compatible with Ruby 2.4 onwards. Refer to our [API versioning guide](https://developers.onfido.com/guide/api-versioning-policy#client-libraries) for details of which client library versions use which versions of the API.
+[![Gem Version](https://badge.fury.io/rb/onfido.svg)](http://badge.fury.io/rb/onfido)
+[![Build Status](https://travis-ci.org/onfido/onfido-ruby.svg?branch=master)](https://travis-ci.org/onfido/onfido-ruby)
 
-## Installation
+## Installation & Usage
 
-Add this line to your application's Gemfile:
+### Installation
 
 ```ruby
-gem 'onfido', '~> 2.0.1'
+gem onfido, '~> 3.0.0'
 ```
 
-## Getting started
-
-Configure with your API token and region:
+Configure with your API token, region and optional timeout (default value is 30):
 
 ```ruby
-onfido = Onfido::API.new(
-  api_key: ENV['ONFIDO_API_KEY'],
-  # Supports :eu, :us and :ca. Previously defaulted to :eu.
-  region: :eu
-)
+require onfido
+
+Onfido.configure do |config|
+  config.api_token = ENV["ONFIDO_API_TOKEN"]
+  config.region = config.region[:EU]
+  config.timeout = 30
+end
+
+onfido_api = Onfido::DefaultApi.new
 ```
 
 All resources share the same interface when making API calls. Use `.create` to create a resource, `.find` to find one, and `.all` to fetch all resources.
 
-For example, to create an applicant:
+### Making a call to the API
 
 ```ruby
-onfido.applicant.create(
+applicant = onfido_api.create_applicant(
   first_name: 'Test',
   last_name: 'Applicant'
 )
@@ -44,62 +46,78 @@ Documentation and code examples can be found at https://documentation.onfido.com
 
 ## Error Handling
 
-There are 3 classes of errors raised by the library, all of which subclass `Onfido::OnfidoError`:
+All errors are wrapped by `ApiError` coming from [FaradayExpection](https://www.rubydoc.info/github/lostisland/faraday/Faraday/ClientError):
 
-- `Onfido::RequestError` is raised whenever Onfido returns a `4xx` response
-- `Onfido::ServerError` is raised whenever Onfido returns a `5xx` response
-- `Onfido::ConnectionError` is raised whenever a network error occurs (e.g., a timeout)
+- `Connection timed out` is raised in case of `Faraday::TimeoutError`
+- `Connection failed` is raised in case of `Faraday::ConnectionFailed`
 
-All 3 error classes provide the `response_code`, `response_body`, `json_body`, `type` and `fields` of the error (although for `Onfido::ServerError` and `Onfido::ConnectionError` the last 3 are likely to be `nil`).
+All errors provide the `response_code`, `response_body`, `json_body`, `type` and `fields` of the error.
 
 ```ruby
 def create_applicant
-  onfido.applicant.create(params)
-rescue Onfido::RequestError => e
+  onfido_api.create_applicant(params)
+rescue Faraday::ConnectionFailed => e
   e.type          # => 'validation_error'
   e.fields        # => { "email": { "messages": ["invalid format"] } }
   e.response_code # => '422'
 end
 ```
 
-## Other configuration
+### Webhook event verification
 
-Optional configuration options with their defaults:
+Webhook events payload needs to be verified before it can be accessed. Library allows to easily decode the payload and verify its signature before returning it as an object for user convenience:
 
 ```ruby
-onfido = Onfido::API.new(
-  # ...
-  open_timeout: 10,
-  read_timeout: 30
-)
-```
+  require 'onfido/webhook_event_verifier'
 
-## Verifying webhooks
+  def webhook_verifier()
+    verifier = Onfido::WebhookEventVerifier.new(ENV["ONFIDO_WEBHOOK_SECRET_TOKEN"])
 
-Each webhook endpoint has a secret token, generated automatically and [exposed](https://documentation.onfido.com/#register-webhook) in the API. When sending a request, Onfido includes a signature computed using the request body and this token in the `X-SHA2-Signature` header.
+    signature = "a0...760e"
 
-You should compare this provided signature to one you generate yourself with the token to verify that a webhook is a genuine request from Onfido.
+    event = verifier.read_payload('{"payload":{"r...3"}}', signature)
 
-```ruby
-if Onfido::Webhook.valid?(request.raw_post,
-                          request.headers["X-SHA2-Signature"],
-                          ENV['ONFIDO_WEBHOOK_TOKEN'])
-  process_webhook
-else
-  render status: 498, text: "498 Token expired/invalid"
-end
+  rescue Onfido::OnfidoInvalidSignatureError => e
+    e.type
+    e.fields
+    e.response_code
+  end
 ```
 
-Read more at https://developers.onfido.com/guide/manual-webhook-signature-verification#webhook-security
-
 ## Contributing
 
-1. Fork it ( https://github.com/onfido/onfido-ruby/fork )
+This library is automatically generated using [OpenAPI Generator](https://openapi-generator.tech) (version: 7.6.0); therefore all the contributions, except tests files, should target [Onfido OpenAPI specification repository](https://github.com/onfido/onfido-openapi-spec/tree/master) instead of this repository.
+
+For contributions to the tests instead, please follow the steps below:
+
+1. [Fork](https://github.com/onfido/onfido-ruby/fork) repository
 2. Create your feature branch (`git checkout -b my-new-feature`)
-3. Commit your changes (`git commit -am 'Add some feature'`)
-4. Push to the branch (`git push origin my-new-feature`)
-5. Create a new Pull Request
+3. Make your changes
+4. Commit your changes (`git commit -am 'Add some feature'`)
+5. Push to the branch (`git push origin my-new-feature`)
+6. Create a new Pull Request
+
+## Versioning policy
+
+[Semantic Versioning](https://semver.org) policy is used for library versioning, following guidelines and limitations below:
+
+- MAJOR versions (x.0.0) might:
+  - target a new API version
+  - include non-backward compatible change
+- MINOR versions (0.x.0) might:
+  - add a new functionality, non-mandatory parameter or property
+  - deprecate an old functionality
+  - include non-backward compatible change to a functionality which is:
+    - labelled as alpha or beta
+    - completely broken and not usable
+- PATCH version (0.0.x) might:
+  - fix a bug
+  - include backward compatible changes only
 
 ## More documentation
 
-More documentation and code examples can be found at https://documentation.onfido.com
+More documentation and code examples can be found at <https://documentation.onfido.com>.
+
+## Support
+
+Should you encounter any technical issues during integration, please contact Onfido's Customer Support team via the [Customer Experience Portal](https://public.support.onfido.com/) which also includes support documentation.

data/Rakefile

@@ -0,0 +1,10 @@
+require "bundler/gem_tasks"
+
+begin
+  require 'rspec/core/rake_task'
+
+  RSpec::Core::RakeTask.new(:spec)
+  task default: :spec
+rescue LoadError
+  # no rspec available
+end