openid_connect 1.1.8 → 1.3.1

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 9df340e250fc573e0e6d35fea8f1b8e05da3cc24bc52b451106c80f3658af158
-  data.tar.gz: 5ceb6754cf1d7242b1e66048adc00a4d227e7ee5d2573836988e48820b2ea651
+  metadata.gz: 68649f62e8b9d6137d80e0e02cc0869d27c326ba2d18f8eed01bf48f97c34997
+  data.tar.gz: 9461179696789570d9ebf4c3dc5fe3ddc285fe80ef79f00523263d04b6075f10
 SHA512:
-  metadata.gz: 875733e0833a1a5c5edea88891025ab142cc5dc9af07d1bd56f6a5b543227de69d358e0774b6f268883571d72e03ad1d5c3e7b26fade37dc6acd64ee2248d0c2
-  data.tar.gz: d5c5092d6698e6baef8131a9bd7186b537886e8d9267bde94fd7afbc19a3203fe69133a3008d94a4b2f63f52e7a48b17bcc415179fad326e225a07335d60ef7d
+  metadata.gz: 4582ef1cb28deaf1251271e2451f02a5350f73183a37d650077cf4fb84fa6135f6ad721c952b0d2266233879cea8362bf61f89f9028c2ab349263953d738cd70
+  data.tar.gz: e0712701dd14a944bb003c17533b62f5f3b0504a0f2db306007ff8001b1444f003a5704604ce9c6ed3dc169fd0c6cc885817d7a974a018bb2a4fd3390baafc39

data/.github/FUNDING.yml

@@ -0,0 +1,3 @@
+# These are supported funding model platforms
+
+github: nov

data/.travis.yml

@@ -2,6 +2,7 @@ before_install:
   - gem install bundler
 
 rvm:
-  - 2.3.6
-  - 2.4.3
-  - 2.5.0
+  - 2.6.10
+  - 2.7.6
+  - 3.0.4
+  - 3.1.2

data/README.rdoc

@@ -2,7 +2,7 @@
 
 OpenID Connect Server & Client Library
 
-{<img src="https://secure.travis-ci.org/nov/openid_connect.png" />}[http://travis-ci.org/nov/openid_connect]
+{<img src="https://secure.travis-ci.org/nov/openid_connect.png" />}[https://travis-ci.org/nov/openid_connect]
 
 == Installation
 

data/VERSION

@@ -1 +1 @@
-1.1.8
+1.3.1

data/lib/openid_connect/discovery/provider/config/resource.rb

@@ -1,3 +1,5 @@
+require "openssl"
+
 module OpenIDConnect
   module Discovery
     module Provider
@@ -27,8 +29,8 @@ module OpenIDConnect
           end
 
           def cache_key
-            md5 = Digest::MD5.hexdigest host
-            "swd:resource:opneid-conf:#{md5}"
+            sha256 = OpenSSL::Digest::SHA256.hexdigest host
+            "swd:resource:opneid-conf:#{sha256}"
           end
         end
       end

data/lib/openid_connect/response_object/id_token.rb

@@ -8,7 +8,7 @@ module OpenIDConnect
       class InvalidAudience < InvalidToken; end
 
       attr_required :iss, :sub, :aud, :exp, :iat
-      attr_optional :acr, :amr, :azp, :jti, :sid, :auth_time, :nonce, :sub_jwk, :at_hash, :c_hash, :s_hash, :events
+      attr_optional :acr, :amr, :azp, :jti, :sid, :auth_time, :nonce, :sub_jwk, :at_hash, :c_hash, :s_hash
       attr_accessor :access_token, :code, :state
       alias_method :subject, :sub
       alias_method :subject=, :sub=

data/lib/openid_connect.rb

@@ -67,6 +67,11 @@ module OpenIDConnect
     _http_client_ = HTTPClient.new(
       agent_name: "OpenIDConnect (#{VERSION})"
     )
+
+    # NOTE: httpclient gem seems stopped maintaining root certtificate set, use OS default.
+    _http_client_.ssl_config.clear_cert_store
+    _http_client_.ssl_config.cert_store.set_default_paths
+
     _http_client_.request_filter << Debugger::RequestFilter.new if debugging?
     http_config.try(:call, _http_client_)
     _http_client_

data/openid_connect.gemspec

@@ -21,9 +21,16 @@ Gem::Specification.new do |s|
   s.add_runtime_dependency "swd", ">= 1.0.0"
   s.add_runtime_dependency "webfinger", ">= 1.0.1"
   s.add_runtime_dependency "rack-oauth2", ">= 1.6.1"
+  if Gem.ruby_version >= Gem::Version.create(3.1)
+    # TODO:
+    #  remove "net-smtp" dependency after mail gem 2.8+ (which supports ruby 3.1+) released.
+    #  ref.) https://rubygems.org/gems/mailhttps://github.com/mikel/mail
+    s.add_runtime_dependency "net-smtp"
+  end
   s.add_development_dependency "rake"
   s.add_development_dependency "rspec"
   s.add_development_dependency "rspec-its"
   s.add_development_dependency "webmock"
   s.add_development_dependency "simplecov"
+  s.add_development_dependency "rexml"
 end

data/spec/openid_connect/response_object/id_token_spec.rb

@@ -19,7 +19,7 @@ describe OpenIDConnect::ResponseObject::IdToken do
   describe 'attributes' do
     subject { klass }
     its(:required_attributes) { should == [:iss, :sub, :aud, :exp, :iat] }
-    its(:optional_attributes) { should == [:acr, :amr, :azp, :jti, :sid, :auth_time, :nonce, :sub_jwk, :at_hash, :c_hash, :s_hash, :events] }
+    its(:optional_attributes) { should == [:acr, :amr, :azp, :jti, :sid, :auth_time, :nonce, :sub_jwk, :at_hash, :c_hash, :s_hash] }
 
     describe 'auth_time' do
       subject { id_token.auth_time }

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: openid_connect
 version: !ruby/object:Gem::Version
-  version: 1.1.8
+  version: 1.3.1
 platform: ruby
 authors:
 - nov matake
-autorequire: 
+autorequire:
 bindir: bin
 cert_chain: []
-date: 2019-06-27 00:00:00.000000000 Z
+date: 2022-08-14 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: tzinfo
@@ -136,6 +136,20 @@ dependencies:
     - - ">="
       - !ruby/object:Gem::Version
         version: 1.6.1
+- !ruby/object:Gem::Dependency
+  name: net-smtp
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: '0'
+  type: :runtime
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: '0'
 - !ruby/object:Gem::Dependency
   name: rake
   requirement: !ruby/object:Gem::Requirement
@@ -206,6 +220,20 @@ dependencies:
     - - ">="
       - !ruby/object:Gem::Version
         version: '0'
+- !ruby/object:Gem::Dependency
+  name: rexml
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: '0'
+  type: :development
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: '0'
 description: OpenID Connect Server & Client Library
 email:
 - nov@matake.jp
@@ -213,6 +241,7 @@ executables: []
 extensions: []
 extra_rdoc_files: []
 files:
+- ".github/FUNDING.yml"
 - ".gitignore"
 - ".rspec"
 - ".travis.yml"
@@ -304,7 +333,7 @@ homepage: https://github.com/nov/openid_connect
 licenses:
 - MIT
 metadata: {}
-post_install_message: 
+post_install_message:
 rdoc_options: []
 require_paths:
 - lib
@@ -319,8 +348,8 @@ required_rubygems_version: !ruby/object:Gem::Requirement
     - !ruby/object:Gem::Version
       version: '0'
 requirements: []
-rubygems_version: 3.0.3
-signing_key: 
+rubygems_version: 3.3.7
+signing_key:
 specification_version: 4
 summary: OpenID Connect Server & Client Library
 test_files: