openid_connect 1.1.6 → 1.3.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 9e45b59e9c8ee8497e0abfc6d4bef24909ebe88e847d2cb6741a84294263a8a1
-  data.tar.gz: 64adaed69ac28e6e722562d63e5cd1f94a29a89f78a1faecf3ab8821a3768b2e
+  metadata.gz: 42a846a8e97f83ba3b339e6d2dab2e1255b75afba843f5d83ee78fc03d554edc
+  data.tar.gz: b004368bea628de55949f51af0f82bcff0981d9e8fe3becc94a753915d564df2
 SHA512:
-  metadata.gz: 78b735b49e830c6fe4a400ecf33d13bfcd6565bc502313cb5b0496cd80f226133ce989909399e2da1f2f2191039ba47060d89def1517cb832eb613a7bcef464f
-  data.tar.gz: 30771e6665ecac2029982510f54b3ecae6bf6b030d6624fc7d3d9e115b657cffe890d2d9aaaf6ccde1fed9ecd8fe54105e6f4af3697f8d48a194f51f542341ea
+  metadata.gz: c2cf62923d2b4262fbc276741f26ae80868b1d108d25ef8e52dbefb59df7005c4bf146cd9a31fbf7740a495adddb9c0ff47424a4306b3085929a4b33553fc659
+  data.tar.gz: 463aacad1ffe293e9a799fdbe367b32fca9f094409956701d396dda562e9b0faa0a54a0b4804768a34fc8685e0b93a2d44fb6033ceaa8512250d735a2f221ef3

data/.travis.yml

@@ -2,6 +2,7 @@ before_install:
   - gem install bundler
 
 rvm:
-  - 2.3.6
-  - 2.4.3
-  - 2.5.0
+  - 2.5.8
+  - 2.6.6
+  - 2.7.2
+  - 3.0.0

data/VERSION

@@ -1 +1 @@
-1.1.6
+1.3.0

data/lib/openid_connect/client/registrar.rb

@@ -50,12 +50,12 @@ module OpenIDConnect
       ]
       attr_required :endpoint
       attr_optional :initial_access_token
-      attr_required *required_metadata_attributes
-      attr_optional *(metadata_attributes - required_metadata_attributes)
+      attr_required(*required_metadata_attributes)
+      attr_optional(*(metadata_attributes - required_metadata_attributes))
 
-      validates *required_attributes,   presence: true
+      validates(*required_attributes,   presence: true)
       validates :sector_identifier_uri, presence: {if: :sector_identifier_required?}
-      validates *singular_uri_attributes, url: true, allow_nil: true
+      validates(*singular_uri_attributes, url: true, allow_nil: true)
       validate :validate_plural_uri_attributes
       validate :validate_contacts
 

data/lib/openid_connect/discovery/provider/config/resource.rb

@@ -1,3 +1,5 @@
+require "openssl"
+
 module OpenIDConnect
   module Discovery
     module Provider
@@ -27,8 +29,8 @@ module OpenIDConnect
           end
 
           def cache_key
-            md5 = Digest::MD5.hexdigest host
-            "swd:resource:opneid-conf:#{md5}"
+            sha256 = OpenSSL::Digest::SHA256.hexdigest host
+            "swd:resource:opneid-conf:#{sha256}"
           end
         end
       end

data/lib/openid_connect/discovery/provider/config/response.rb

@@ -25,12 +25,12 @@ module OpenIDConnect
               :op_tos_uri
             ]
           }
-          attr_required *(uri_attributes[:required] + [
+          attr_required(*(uri_attributes[:required] + [
             :response_types_supported,
             :subject_types_supported,
             :id_token_signing_alg_values_supported
-          ])
-          attr_optional *(uri_attributes[:optional] + [
+          ]))
+          attr_optional(*(uri_attributes[:optional] + [
             :scopes_supported,
             :response_modes_supported,
             :grant_types_supported,
@@ -54,10 +54,10 @@ module OpenIDConnect
             :request_parameter_supported,
             :request_uri_parameter_supported,
             :require_request_uri_registration
-          ])
+          ]))
 
-          validates *required_attributes, presence: true
-          validates *uri_attributes.values.flatten, url: true, allow_nil: true
+          validates(*required_attributes, presence: true)
+          validates(*uri_attributes.values.flatten, url: true, allow_nil: true)
           validates :issuer, with: :validate_issuer_matching
 
           def initialize(hash)

data/lib/openid_connect/request_object.rb

@@ -5,10 +5,12 @@ module OpenIDConnect
     attr_optional :client_id, :response_type, :redirect_uri, :scope, :state, :nonce, :display, :prompt, :userinfo, :id_token
     validate :require_at_least_one_attributes
 
+    undef :id_token=
     def id_token=(attributes = {})
       @id_token = IdToken.new(attributes) if attributes.present?
     end
 
+    undef :userinfo=
     def userinfo=(attributes = {})
       @userinfo = UserInfo.new(attributes) if attributes.present?
     end

data/lib/openid_connect/response_object/id_token.rb

@@ -8,8 +8,8 @@ module OpenIDConnect
       class InvalidAudience < InvalidToken; end
 
       attr_required :iss, :sub, :aud, :exp, :iat
-      attr_optional :acr, :amr, :azp, :jti, :sid, :auth_time, :nonce, :sub_jwk, :at_hash, :c_hash, :events
-      attr_accessor :access_token, :code
+      attr_optional :acr, :amr, :azp, :jti, :sid, :auth_time, :nonce, :sub_jwk, :at_hash, :c_hash, :s_hash
+      attr_accessor :access_token, :code, :state
       alias_method :subject, :sub
       alias_method :subject=, :sub=
 
@@ -49,6 +49,9 @@ module OpenIDConnect
         if code
           self.c_hash = left_half_hash_of code, hash_length
         end
+        if state
+          self.s_hash = left_half_hash_of state, hash_length
+        end
         super
       end
 

data/lib/openid_connect/response_object/user_info.rb

@@ -47,6 +47,7 @@ module OpenIDConnect
         errors.add :address, address.errors.full_messages.join(', ') if address.present? && !address.valid?
       end
 
+      undef :address=
       def address=(hash_or_address)
         @address = case hash_or_address
         when Hash

data/lib/openid_connect.rb

@@ -67,13 +67,18 @@ module OpenIDConnect
     _http_client_ = HTTPClient.new(
       agent_name: "OpenIDConnect (#{VERSION})"
     )
+
+    # NOTE: httpclient gem seems stopped maintaining root certtificate set, use OS default.
+    _http_client_.ssl_config.clear_cert_store
+    _http_client_.ssl_config.cert_store.set_default_paths
+
     _http_client_.request_filter << Debugger::RequestFilter.new if debugging?
     http_config.try(:call, _http_client_)
     _http_client_
   end
   def self.http_config(&block)
     @sub_protocols.each do |klass|
-      klass.http_config &block unless klass.http_config
+      klass.http_config(&block) unless klass.http_config
     end
     @@http_config ||= block
   end

data/spec/openid_connect/response_object/id_token_spec.rb

@@ -19,7 +19,7 @@ describe OpenIDConnect::ResponseObject::IdToken do
   describe 'attributes' do
     subject { klass }
     its(:required_attributes) { should == [:iss, :sub, :aud, :exp, :iat] }
-    its(:optional_attributes) { should == [:acr, :amr, :azp, :jti, :sid, :auth_time, :nonce, :sub_jwk, :at_hash, :c_hash, :events] }
+    its(:optional_attributes) { should == [:acr, :amr, :azp, :jti, :sid, :auth_time, :nonce, :sub_jwk, :at_hash, :c_hash, :s_hash] }
 
     describe 'auth_time' do
       subject { id_token.auth_time }

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: openid_connect
 version: !ruby/object:Gem::Version
-  version: 1.1.6
+  version: 1.3.0
 platform: ruby
 authors:
 - nov matake
 autorequire: 
 bindir: bin
 cert_chain: []
-date: 2018-04-27 00:00:00.000000000 Z
+date: 2021-10-01 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: tzinfo
@@ -319,8 +319,7 @@ required_rubygems_version: !ruby/object:Gem::Requirement
     - !ruby/object:Gem::Version
       version: '0'
 requirements: []
-rubyforge_project: 
-rubygems_version: 2.7.3
+rubygems_version: 3.1.4
 signing_key: 
 specification_version: 4
 summary: OpenID Connect Server & Client Library