openid-token-proxy 0.1.7 → 0.1.8

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA1:
-  metadata.gz: c64cf28d8d4c3fb0774488c18ecae95c5e3abcbb
-  data.tar.gz: 4eaa2ce104d161d27c36ff7291bf25990fb15106
+  metadata.gz: e5f6193dcfc4af49f08e7833b5bcc30bb0108a64
+  data.tar.gz: 5b9c5966abcc7eda3a1d0e1ba18da58067741e58
 SHA512:
-  metadata.gz: d76ce92ad630b77f81c9cd1c9b993c52a886728f4bed5cfbc86fbc8ddd6d702e1597e3d77addb8ee4626f542cde7f6f5ee4bb3a99e93db78715991b1cfa7e8d6
-  data.tar.gz: 3f658685bfc72a789dd1427c4632d396ee89cfcc82c606c2ae08d35c69a61eadb047fcccf2a99794a70a0cf5e3dc5e7b3e9335333a02be7a99046f4508c072a8
+  metadata.gz: 1afb7525dbe82c28c04e19f864adc189dd62afc1c67adac23d9f819251cebb8b9a8123e77f329a3ef6a34355e437bd2b062213d40355fc1d14559ba79d7bc44e
+  data.tar.gz: c7f09358d2ad3d9851dbddd4b05015cca6344b6be13c61fecb93c6250b2b4d02a88f5a8c44270945344637a3ec7f0197876885bcd420422bfad06c1d1749fe7f

data/.travis.yml

@@ -3,4 +3,9 @@ cache: bundler
 rvm:
   - 2.0.0
   - 2.1.0
+  - 2.2.5
+matrix:
+  allow_failures:
+    - rvm: 2.0.0
+    - rvm: 2.1.0
 script: bundle exec rake spec

data/CHANGELOG.md

@@ -1,5 +1,9 @@
 # Changelog
 
+### v0.1.8 - August 4, 2016
+
+- No longer validates client/application ID.
+
 ### v0.1.7 - February 15, 2016
 
 - Allow passing tokens from cookies.

data/lib/openid_token_proxy/token.rb

@@ -1,5 +1,4 @@
 require 'openid_token_proxy/token/expired'
-require 'openid_token_proxy/token/invalid_application'
 require 'openid_token_proxy/token/invalid_audience'
 require 'openid_token_proxy/token/invalid_issuer'
 require 'openid_token_proxy/token/malformed'
@@ -39,11 +38,6 @@ module OpenIDTokenProxy
         raise InvalidAudience unless audiences.include? assertions[:audience]
       end
 
-      if assertions[:client_id]
-        appid = id_token.raw_attributes['appid']
-        raise InvalidApplication if appid && appid != assertions[:client_id]
-      end
-
       if assertions[:issuer]
         issuer = id_token.iss
         raise InvalidIssuer unless issuer == assertions[:issuer]

data/lib/openid_token_proxy/token/authentication.rb

@@ -28,8 +28,7 @@ module OpenIDTokenProxy
 
       def require_valid_token
         config = OpenIDTokenProxy.config
-        current_token.validate! audience: config.resource,
-                                client_id: config.client_id
+        current_token.validate! audience: config.resource
       end
 
       def expose_token_expiry_time

data/lib/openid_token_proxy/version.rb

@@ -1,3 +1,3 @@
 module OpenIDTokenProxy
-  VERSION = '0.1.7'
+  VERSION = '0.1.8'
 end

data/spec/lib/openid_token_proxy/token_spec.rb

@@ -42,14 +42,6 @@ RSpec.describe OpenIDTokenProxy::Token do
       end
     end
 
-    context 'when application differs' do
-      it 'raises' do
-        expect do
-          subject.validate! client_id: 'expected client ID'
-        end.to raise_error OpenIDTokenProxy::Token::InvalidApplication
-      end
-    end
-
     context 'when audience differs' do
       it 'raises' do
         expect do
@@ -70,7 +62,6 @@ RSpec.describe OpenIDTokenProxy::Token do
       it 'returns true' do
         assertions = {
           audience: audience,
-          client_id: client_id,
           issuer: issuer
         }
         expect(subject.validate! assertions).to be_truthy

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: openid-token-proxy
 version: !ruby/object:Gem::Version
-  version: 0.1.7
+  version: 0.1.8
 platform: ruby
 authors:
 - Tim Kurvers
 autorequire: 
 bindir: bin
 cert_chain: []
-date: 2016-02-15 00:00:00.000000000 Z
+date: 2016-08-04 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: openid_connect
@@ -226,7 +226,6 @@ files:
 - lib/openid_token_proxy/token.rb
 - lib/openid_token_proxy/token/authentication.rb
 - lib/openid_token_proxy/token/expired.rb
-- lib/openid_token_proxy/token/invalid_application.rb
 - lib/openid_token_proxy/token/invalid_audience.rb
 - lib/openid_token_proxy/token/invalid_issuer.rb
 - lib/openid_token_proxy/token/malformed.rb
@@ -311,7 +310,7 @@ required_rubygems_version: !ruby/object:Gem::Requirement
       version: '0'
 requirements: []
 rubyforge_project: 
-rubygems_version: 2.4.5.1
+rubygems_version: 2.2.2
 signing_key: 
 specification_version: 4
 summary: Retrieves and refreshes OpenID tokens on behalf of a user

data/lib/openid_token_proxy/token/invalid_application.rb

@@ -1,12 +0,0 @@
-module OpenIDTokenProxy
-  class Token
-
-    # Raised when a token's application did not match
-    class InvalidApplication < Error
-      def initialize
-        super 'Token is not intended for this application.'
-      end
-    end
-
-  end
-end