openid_connect 0.2.0 → 0.2.1

data/Gemfile.lock

@@ -1,7 +1,7 @@
 PATH
   remote: .
   specs:
-    openid_connect (0.2.0.alpha3)
+    openid_connect (0.2.0)
       activemodel (>= 3)
       attr_required (>= 0.0.5)
       json (>= 1.4.3)
@@ -15,17 +15,17 @@ PATH
 GEM
   remote: http://rubygems.org/
   specs:
-    activemodel (3.2.3)
-      activesupport (= 3.2.3)
+    activemodel (3.2.6)
+      activesupport (= 3.2.6)
       builder (~> 3.0.0)
-    activesupport (3.2.3)
+    activesupport (3.2.6)
       i18n (~> 0.6)
       multi_json (~> 1.0)
-    addressable (2.2.7)
+    addressable (2.2.8)
     attr_required (0.0.5)
     bouncy-castle-java (1.5.0146.1)
     builder (3.0.0)
-    configatron (2.9.0)
+    configatron (2.9.1)
       yamler (>= 0.1.0)
     cover_me (1.2.0)
       configatron
@@ -33,12 +33,12 @@ GEM
     crack (0.3.1)
     diff-lcs (1.1.3)
     hashie (1.2.0)
-    httpclient (2.2.4)
+    httpclient (2.2.5)
     i18n (0.6.0)
-    jruby-openssl (0.7.6.1)
+    jruby-openssl (0.7.7)
       bouncy-castle-java (>= 1.5.0146.1)
-    json (1.6.6)
-    json (1.6.6-java)
+    json (1.7.3)
+    json (1.7.3-java)
     json-jwt (0.0.7)
       activesupport (>= 2.3)
       i18n
@@ -48,8 +48,8 @@ GEM
       i18n (>= 0.4.0)
       mime-types (~> 1.16)
       treetop (~> 1.4.8)
-    mime-types (1.18)
-    multi_json (1.2.0)
+    mime-types (1.19)
+    multi_json (1.3.6)
     polyglot (0.3.3)
     rack (1.4.1)
     rack-oauth2 (0.14.4)
@@ -60,14 +60,14 @@ GEM
       json (>= 1.4.3)
       rack (>= 1.1)
     rake (0.9.2.2)
-    rspec (2.9.0)
-      rspec-core (~> 2.9.0)
-      rspec-expectations (~> 2.9.0)
-      rspec-mocks (~> 2.9.0)
-    rspec-core (2.9.0)
-    rspec-expectations (2.9.0)
+    rspec (2.10.0)
+      rspec-core (~> 2.10.0)
+      rspec-expectations (~> 2.10.0)
+      rspec-mocks (~> 2.10.0)
+    rspec-core (2.10.1)
+    rspec-expectations (2.10.0)
       diff-lcs (~> 1.1.3)
-    rspec-mocks (2.9.0)
+    rspec-mocks (2.10.1)
     swd (0.1.2)
       activesupport (>= 3)
       attr_required (>= 0.0.5)
@@ -77,14 +77,14 @@ GEM
     treetop (1.4.10)
       polyglot
       polyglot (>= 0.3.1)
-    tzinfo (0.3.32)
+    tzinfo (0.3.33)
     url_safe_base64 (0.2.1)
     validate_email (0.1.5)
       activemodel (>= 3.0)
       mail (>= 2.2.5)
     validate_url (0.2.0)
       activemodel (>= 3.0.0)
-    webmock (1.8.5)
+    webmock (1.8.7)
       addressable (>= 2.2.7)
       crack (>= 0.1.7)
     yamler (0.1.0)

data/VERSION

@@ -1 +1 @@
-0.2.0
+0.2.1

data/lib/openid_connect.rb

@@ -10,6 +10,7 @@ require 'attr_optional'
 require 'rack/oauth2'
 require 'rack/oauth2/server/authorize/request_with_connect_params'
 require 'rack/oauth2/server/id_token_response'
+require 'rack/oauth2/server/resource/error_with_connect_ext'
 
 module OpenIDConnect
   VERSION = ::File.read(

data/lib/openid_connect/response_object/id_token.rb

@@ -5,15 +5,14 @@ module OpenIDConnect
     class IdToken < ConnectObject
       class InvalidToken < Exception; end
 
-      attr_required :iss, :user_id, :aud, :exp, :nonce
-      attr_optional :acr, :auth_time
+      attr_required :iss, :user_id, :aud, :exp, :iat
+      attr_optional :acr, :auth_time, :nonce
 
       def initialize(attributes = {})
         super
-        (all_attributes - [:exp, :auth_time]).each do |key|
+        (all_attributes - [:exp, :iat, :auth_time]).each do |key|
           self.send "#{key}=", self.send(key).try(:to_s)
         end
-        @exp = @exp.to_i
       end
 
       def verify!(expected = {})

data/lib/openid_connect/response_object/user_info/open_id.rb

@@ -5,25 +5,26 @@ module OpenIDConnect
         attr_optional(
           :user_id,
           :name,
-          :given_name,
           :family_name,
+          :given_name,
           :middle_name,
           :nickname,
-          :phone_number,
-          :verified,
+          :preferred_username,
+          :profile,
+          :picture,
+          :website,
           :gender,
+          :birthday,
           :zoneinfo,
           :locale,
-          :birthday,
           :updated_time,
-          :profile,
-          :picture,
-          :website,
           :email,
-          :address
+          :email_verified,
+          :address,
+          :phone_number
         )
 
-        validates :verified, :inclusion => {:in => [true, false]},                             :allow_nil => true
+        validates :email_verified, :inclusion => {:in => [true, false]},                       :allow_nil => true
         validates :gender,   :inclusion => {:in => ['male', 'female']},                        :allow_nil => true
         validates :zoneinfo, :inclusion => {:in => TZInfo::TimezoneProxy.all.collect(&:name)}, :allow_nil => true
         validates :profile, :picture, :website, :url => true, :allow_nil => true
@@ -34,7 +35,7 @@ module OpenIDConnect
 
         def initialize(attributes = {})
           super
-          (all_attributes - [:verified, :address]).each do |key|
+          (all_attributes - [:email_verified, :address]).each do |key|
             self.send "#{key}=", self.send(key).try(:to_s)
           end
         end

data/lib/rack/oauth2/server/authorize/request_with_connect_params.rb

@@ -1,6 +1,5 @@
 class Rack::OAuth2::Server::Authorize
   module RequestWithConnectParams
-    # NOTE: nonce is REQUIRED, but define optional attributes not to break rack-oauth2 for now
     CONNECT_EXT_PARAMS = [:nonce, :display, :prompt, :request, :request_uri]
 
     def self.included(klass)
@@ -11,7 +10,6 @@ class Rack::OAuth2::Server::Authorize
           CONNECT_EXT_PARAMS.each do |attribute|
             self.send :"#{attribute}=", params[attribute.to_s]
           end
-          invalid_request!('Nonce Required') if openid_connect_request? && nonce.blank?
         end
         alias_method_chain :initialize, :connect_params
 

data/lib/rack/oauth2/server/resource/error_with_connect_ext.rb

@@ -0,0 +1,14 @@
+module Rack
+  module OAuth2
+    module Server
+      class Resource
+        module ErrorWithConnectExt
+          def invalid_schema!(description = 'The requested schema is invalid or unsupported', options = {})
+            bad_request! :invalid_schema, description, options
+          end
+        end
+        Request.send :include, ErrorWithConnectExt
+      end
+    end
+  end
+end

data/spec/mock_response/id_token.json

@@ -3,5 +3,6 @@
   "aud": "client_id",
   "user_id": "user_id",
   "nonce": "nonce",
-  "exp": 1303852880
+  "exp": 1303852880,
+  "iat": 1303850880
 }

data/spec/openid_connect/access_token_spec.rb

@@ -35,7 +35,8 @@ describe OpenIDConnect::AccessToken do
           :user_id => 'user_id',
           :aud => 'client_id',
           :nonce => 'nonce',
-          :exp => 1313424327
+          :exp => 1.week.from_now,
+          :iat => Time.now
         )
       end
       its(:id_token) { should be_a OpenIDConnect::ResponseObject::IdToken }

data/spec/openid_connect/response_object/id_token_spec.rb

@@ -5,29 +5,29 @@ describe OpenIDConnect::ResponseObject::IdToken do
   let(:id_token)    { klass.new attributes }
   let(:attributes)  { required_attributes }
   let(:ext)         { 10.minutes.from_now }
+  let(:iat)         { Time.now }
   let :required_attributes do
     {
       :iss => 'https://server.example.com',
       :user_id => 'user_id',
       :aud => 'client_id',
-      :nonce => 'nonce',
-      :exp => ext
+      :exp => ext,
+      :iat => iat
     }
   end
 
   describe 'attributes' do
     subject { klass }
-    its(:required_attributes) { should == [:iss, :user_id, :aud, :exp, :nonce] }
-    its(:optional_attributes) { should == [:acr, :auth_time] }
+    its(:required_attributes) { should == [:iss, :user_id, :aud, :exp, :iat] }
+    its(:optional_attributes) { should == [:acr, :auth_time, :nonce] }
   end
 
   describe '#verify!' do
-    context 'when both issuer, client_id and nonce are valid' do
+    context 'when both issuer, client_id are valid' do
       it do
         id_token.verify!(
           :issuer => attributes[:iss],
-          :client_id => attributes[:aud],
-          :nonce => attributes[:nonce]
+          :client_id => attributes[:aud]
         ).should be_true
       end
 
@@ -37,8 +37,7 @@ describe OpenIDConnect::ResponseObject::IdToken do
           expect do
             id_token.verify!(
               :issuer => attributes[:iss],
-              :client_id => attributes[:aud],
-              :nonce => attributes[:nonce]
+              :client_id => attributes[:aud]
             )
           end.should raise_error OpenIDConnect::ResponseObject::IdToken::InvalidToken
         end
@@ -50,8 +49,7 @@ describe OpenIDConnect::ResponseObject::IdToken do
         expect do
           id_token.verify!(
             :issuer => 'invalid_issuer',
-            :client_id => attributes[:aud],
-            :nonce => attributes[:nonce]
+            :client_id => attributes[:aud]
           )
         end.should raise_error OpenIDConnect::ResponseObject::IdToken::InvalidToken
       end
@@ -61,8 +59,7 @@ describe OpenIDConnect::ResponseObject::IdToken do
       it do
         expect do
           id_token.verify!(
-            :client_id => attributes[:aud],
-            :nonce => attributes[:nonce]
+            :client_id => attributes[:aud]
           )
         end.should raise_error OpenIDConnect::ResponseObject::IdToken::InvalidToken
       end
@@ -73,8 +70,7 @@ describe OpenIDConnect::ResponseObject::IdToken do
         expect do
           id_token.verify!(
             :issuer => attributes[:iss],
-            :client_id => 'invalid_client',
-            :nonce => attributes[:nonce]
+            :client_id => 'invalid_client'
           )
         end.should raise_error OpenIDConnect::ResponseObject::IdToken::InvalidToken
       end
@@ -84,33 +80,46 @@ describe OpenIDConnect::ResponseObject::IdToken do
       it do
         expect do
           id_token.verify!(
-            :issuer => attributes[:iss],
-            :nonce => attributes[:nonce]
+            :issuer => attributes[:iss]
           )
         end.should raise_error OpenIDConnect::ResponseObject::IdToken::InvalidToken
       end
     end
 
-    context 'when nonce is invalid' do
-      it do
-        expect do
+    context 'when nonce is given' do
+      let(:attributes)  { required_attributes.merge(:nonce => 'nonce') }
+
+      context 'when nonce is valid' do
+        it do
           id_token.verify!(
             :issuer => attributes[:iss],
             :client_id => attributes[:aud],
-            :nonce => 'invalid_nonce'
-          )
-        end.should raise_error OpenIDConnect::ResponseObject::IdToken::InvalidToken
+            :nonce => attributes[:nonce]
+          ).should be_true
+        end
       end
-    end
 
-    context 'when nonce is missing' do
-      it do
-        expect do
-          id_token.verify!(
-            :issuer => attributes[:iss],
-            :client_id => attributes[:aud]
-          )
-        end.should raise_error OpenIDConnect::ResponseObject::IdToken::InvalidToken
+      context 'when nonce is invalid' do
+        it do
+          expect do
+            id_token.verify!(
+              :issuer => attributes[:iss],
+              :client_id => attributes[:aud],
+              :nonce => 'invalid_nonce'
+            )
+          end.should raise_error OpenIDConnect::ResponseObject::IdToken::InvalidToken
+        end
+      end
+
+      context 'when nonce is missing' do
+        it do
+          expect do
+            id_token.verify!(
+              :issuer => attributes[:iss],
+              :client_id => attributes[:aud]
+            )
+          end.should raise_error OpenIDConnect::ResponseObject::IdToken::InvalidToken
+        end
       end
     end
   end

data/spec/openid_connect/response_object/user_info/open_id_spec.rb

@@ -10,13 +10,25 @@ describe OpenIDConnect::ResponseObject::UserInfo::OpenID do
     its(:required_attributes) { should == [] }
     its(:optional_attributes) do
       should == [
-        :user_id, :name, :given_name, :family_name, :middle_name, :nickname,
-        :phone_number,
-        :verified, :gender, :zoneinfo, :locale,
-        :birthday, :updated_time,
-        :profile, :picture, :website,
+        :user_id,
+        :name,
+        :family_name,
+        :given_name,
+        :middle_name,
+        :nickname,
+        :preferred_username,
+        :profile,
+        :picture,
+        :website,
+        :gender,
+        :birthday,
+        :zoneinfo,
+        :locale,
+        :updated_time,
         :email,
-        :address
+        :email_verified,
+        :address,
+        :phone_number
       ]
     end
   end
@@ -44,7 +56,7 @@ describe OpenIDConnect::ResponseObject::UserInfo::OpenID do
       its(:errors) { should include :email }
     end
 
-    [:verified, :gender, :zoneinfo].each do |one_of_list|
+    [:email_verified, :gender, :zoneinfo].each do |one_of_list|
       context "when #{one_of_list} is invalid" do
         let :attributes do
           {one_of_list => 'Out of List'}

data/spec/rack/oauth2/server/authorize/extension/code_and_id_token_and_token_spec.rb

@@ -13,7 +13,8 @@ describe Rack::OAuth2::Server::Authorize::Extension::CodeAndIdTokenAndToken do
       :user_id => 'user_id',
       :aud => 'client_id',
       :nonce => 'nonce',
-      :exp => 1313424327
+      :exp => 1313424327,
+      :iat => 1313420327
     ).to_jwt private_key
   end
 

data/spec/rack/oauth2/server/authorize/extension/code_and_id_token_spec.rb

@@ -12,7 +12,8 @@ describe Rack::OAuth2::Server::Authorize::Extension::CodeAndIdToken do
       :user_id => 'user_id',
       :aud => 'client_id',
       :nonce => 'nonce',
-      :exp => 1313424327
+      :exp => 1313424327,
+      :iat => 1313420327
     ).to_jwt private_key
   end
 

data/spec/rack/oauth2/server/authorize/extension/id_token_and_token_spec.rb

@@ -12,7 +12,8 @@ describe Rack::OAuth2::Server::Authorize::Extension::IdTokenAndToken do
       :user_id => 'user_id',
       :aud => 'client_id',
       :nonce => 'nonce',
-      :exp => 1313424327
+      :exp => 1313424327,
+      :iat => 1313420327
     ).to_jwt private_key
   end
 

data/spec/rack/oauth2/server/authorize/extension/id_token_spec.rb

@@ -11,7 +11,8 @@ describe Rack::OAuth2::Server::Authorize::Extension::IdToken do
       :user_id => 'user_id',
       :aud => 'client_id',
       :nonce => 'nonce',
-      :exp => 1313424327
+      :exp => 1313424327,
+      :iat => 1313420327
     ).to_jwt private_key
   end
 

data/spec/rack/oauth2/server/resource/error_with_connect_ext_spec.rb

@@ -0,0 +1,12 @@
+require 'spec_helper.rb'
+
+describe Rack::OAuth2::Server::Resource::ErrorWithConnectExt do
+  let(:env)     { Rack::MockRequest.env_for("/authorize?client_id=client_id") }
+  let(:request) { Rack::OAuth2::Server::Resource::Request.new env }
+
+  describe 'invalid_schema!' do
+    it do
+      expect { request.invalid_schema! }.should raise_error Rack::OAuth2::Server::Resource::BadRequest
+    end
+  end
+end

data/spec/rack/oauth2/server/token/authorization_code_spec.rb

@@ -17,6 +17,7 @@ describe Rack::OAuth2::Server::Token::AuthorizationCode do
       :user_id => 'user_id',
       :aud => 'client_id',
       :exp => 1313424327,
+      :iat => 1313420327,
       :nonce => 'nonce',
       :secret => 'secret'
     ).to_jwt private_key

data/spec/rack/oauth2/server/token/refresh_token_spec.rb

@@ -16,6 +16,7 @@ describe Rack::OAuth2::Server::Token::RefreshToken do
       :user_id => 'user_id',
       :aud => 'client_id',
       :exp => 1313424327,
+      :iat => 1313420327,
       :nonce => 'nonce',
       :secret => 'secret'
     ).to_jwt private_key

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: openid_connect
 version: !ruby/object:Gem::Version
-  version: 0.2.0
+  version: 0.2.1
   prerelease: 
 platform: ruby
 authors:
@@ -9,11 +9,11 @@ authors:
 autorequire: 
 bindir: bin
 cert_chain: []
-date: 2012-04-03 00:00:00.000000000Z
+date: 2012-07-04 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: json
-  requirement: &70310184869080 !ruby/object:Gem::Requirement
+  requirement: !ruby/object:Gem::Requirement
     none: false
     requirements:
     - - ! '>='
@@ -21,10 +21,15 @@ dependencies:
         version: 1.4.3
   type: :runtime
   prerelease: false
-  version_requirements: *70310184869080
+  version_requirements: !ruby/object:Gem::Requirement
+    none: false
+    requirements:
+    - - ! '>='
+      - !ruby/object:Gem::Version
+        version: 1.4.3
 - !ruby/object:Gem::Dependency
   name: tzinfo
-  requirement: &70310184868660 !ruby/object:Gem::Requirement
+  requirement: !ruby/object:Gem::Requirement
     none: false
     requirements:
     - - ! '>='
@@ -32,10 +37,15 @@ dependencies:
         version: '0'
   type: :runtime
   prerelease: false
-  version_requirements: *70310184868660
+  version_requirements: !ruby/object:Gem::Requirement
+    none: false
+    requirements:
+    - - ! '>='
+      - !ruby/object:Gem::Version
+        version: '0'
 - !ruby/object:Gem::Dependency
   name: attr_required
-  requirement: &70310184865020 !ruby/object:Gem::Requirement
+  requirement: !ruby/object:Gem::Requirement
     none: false
     requirements:
     - - ! '>='
@@ -43,10 +53,15 @@ dependencies:
         version: 0.0.5
   type: :runtime
   prerelease: false
-  version_requirements: *70310184865020
+  version_requirements: !ruby/object:Gem::Requirement
+    none: false
+    requirements:
+    - - ! '>='
+      - !ruby/object:Gem::Version
+        version: 0.0.5
 - !ruby/object:Gem::Dependency
   name: activemodel
-  requirement: &70310184864480 !ruby/object:Gem::Requirement
+  requirement: !ruby/object:Gem::Requirement
     none: false
     requirements:
     - - ! '>='
@@ -54,10 +69,15 @@ dependencies:
         version: '3'
   type: :runtime
   prerelease: false
-  version_requirements: *70310184864480
+  version_requirements: !ruby/object:Gem::Requirement
+    none: false
+    requirements:
+    - - ! '>='
+      - !ruby/object:Gem::Version
+        version: '3'
 - !ruby/object:Gem::Dependency
   name: validate_url
-  requirement: &70310184864080 !ruby/object:Gem::Requirement
+  requirement: !ruby/object:Gem::Requirement
     none: false
     requirements:
     - - ! '>='
@@ -65,10 +85,15 @@ dependencies:
         version: '0'
   type: :runtime
   prerelease: false
-  version_requirements: *70310184864080
+  version_requirements: !ruby/object:Gem::Requirement
+    none: false
+    requirements:
+    - - ! '>='
+      - !ruby/object:Gem::Version
+        version: '0'
 - !ruby/object:Gem::Dependency
   name: validate_email
-  requirement: &70310184863620 !ruby/object:Gem::Requirement
+  requirement: !ruby/object:Gem::Requirement
     none: false
     requirements:
     - - ! '>='
@@ -76,10 +101,15 @@ dependencies:
         version: '0'
   type: :runtime
   prerelease: false
-  version_requirements: *70310184863620
+  version_requirements: !ruby/object:Gem::Requirement
+    none: false
+    requirements:
+    - - ! '>='
+      - !ruby/object:Gem::Version
+        version: '0'
 - !ruby/object:Gem::Dependency
   name: json-jwt
-  requirement: &70310184863120 !ruby/object:Gem::Requirement
+  requirement: !ruby/object:Gem::Requirement
     none: false
     requirements:
     - - ! '>='
@@ -87,10 +117,15 @@ dependencies:
         version: 0.0.3
   type: :runtime
   prerelease: false
-  version_requirements: *70310184863120
+  version_requirements: !ruby/object:Gem::Requirement
+    none: false
+    requirements:
+    - - ! '>='
+      - !ruby/object:Gem::Version
+        version: 0.0.3
 - !ruby/object:Gem::Dependency
   name: swd
-  requirement: &70310184862620 !ruby/object:Gem::Requirement
+  requirement: !ruby/object:Gem::Requirement
     none: false
     requirements:
     - - ! '>='
@@ -98,10 +133,15 @@ dependencies:
         version: 0.1.2
   type: :runtime
   prerelease: false
-  version_requirements: *70310184862620
+  version_requirements: !ruby/object:Gem::Requirement
+    none: false
+    requirements:
+    - - ! '>='
+      - !ruby/object:Gem::Version
+        version: 0.1.2
 - !ruby/object:Gem::Dependency
   name: rack-oauth2
-  requirement: &70310184862160 !ruby/object:Gem::Requirement
+  requirement: !ruby/object:Gem::Requirement
     none: false
     requirements:
     - - ! '>='
@@ -109,10 +149,15 @@ dependencies:
         version: 0.14.2
   type: :runtime
   prerelease: false
-  version_requirements: *70310184862160
+  version_requirements: !ruby/object:Gem::Requirement
+    none: false
+    requirements:
+    - - ! '>='
+      - !ruby/object:Gem::Version
+        version: 0.14.2
 - !ruby/object:Gem::Dependency
   name: rake
-  requirement: &70310184861640 !ruby/object:Gem::Requirement
+  requirement: !ruby/object:Gem::Requirement
     none: false
     requirements:
     - - ! '>='
@@ -120,10 +165,15 @@ dependencies:
         version: '0.8'
   type: :development
   prerelease: false
-  version_requirements: *70310184861640
+  version_requirements: !ruby/object:Gem::Requirement
+    none: false
+    requirements:
+    - - ! '>='
+      - !ruby/object:Gem::Version
+        version: '0.8'
 - !ruby/object:Gem::Dependency
   name: cover_me
-  requirement: &70310184861120 !ruby/object:Gem::Requirement
+  requirement: !ruby/object:Gem::Requirement
     none: false
     requirements:
     - - ! '>='
@@ -131,10 +181,15 @@ dependencies:
         version: 1.2.0
   type: :development
   prerelease: false
-  version_requirements: *70310184861120
+  version_requirements: !ruby/object:Gem::Requirement
+    none: false
+    requirements:
+    - - ! '>='
+      - !ruby/object:Gem::Version
+        version: 1.2.0
 - !ruby/object:Gem::Dependency
   name: rspec
-  requirement: &70310184860560 !ruby/object:Gem::Requirement
+  requirement: !ruby/object:Gem::Requirement
     none: false
     requirements:
     - - ! '>='
@@ -142,10 +197,15 @@ dependencies:
         version: '2'
   type: :development
   prerelease: false
-  version_requirements: *70310184860560
+  version_requirements: !ruby/object:Gem::Requirement
+    none: false
+    requirements:
+    - - ! '>='
+      - !ruby/object:Gem::Version
+        version: '2'
 - !ruby/object:Gem::Dependency
   name: webmock
-  requirement: &70310184859940 !ruby/object:Gem::Requirement
+  requirement: !ruby/object:Gem::Requirement
     none: false
     requirements:
     - - ! '>='
@@ -153,7 +213,12 @@ dependencies:
         version: 1.6.2
   type: :development
   prerelease: false
-  version_requirements: *70310184859940
+  version_requirements: !ruby/object:Gem::Requirement
+    none: false
+    requirements:
+    - - ! '>='
+      - !ruby/object:Gem::Version
+        version: 1.6.2
 description: OpenID Connect Server & Client Library
 email:
 - nov@matake.jp
@@ -203,6 +268,7 @@ files:
 - lib/rack/oauth2/server/authorize/extension/id_token_and_token.rb
 - lib/rack/oauth2/server/authorize/request_with_connect_params.rb
 - lib/rack/oauth2/server/id_token_response.rb
+- lib/rack/oauth2/server/resource/error_with_connect_ext.rb
 - openid_connect.gemspec
 - spec/helpers/webmock_helper.rb
 - spec/mock_response/access_token/bearer.json
@@ -241,6 +307,7 @@ files:
 - spec/rack/oauth2/server/authorize/extension/code_and_id_token_spec.rb
 - spec/rack/oauth2/server/authorize/extension/id_token_and_token_spec.rb
 - spec/rack/oauth2/server/authorize/extension/id_token_spec.rb
+- spec/rack/oauth2/server/resource/error_with_connect_ext_spec.rb
 - spec/rack/oauth2/server/token/authorization_code_spec.rb
 - spec/rack/oauth2/server/token/refresh_token_spec.rb
 - spec/spec_helper.rb
@@ -264,7 +331,7 @@ required_rubygems_version: !ruby/object:Gem::Requirement
       version: '0'
 requirements: []
 rubyforge_project: 
-rubygems_version: 1.8.12
+rubygems_version: 1.8.24
 signing_key: 
 specification_version: 3
 summary: OpenID Connect Server & Client Library
@@ -306,6 +373,7 @@ test_files:
 - spec/rack/oauth2/server/authorize/extension/code_and_id_token_spec.rb
 - spec/rack/oauth2/server/authorize/extension/id_token_and_token_spec.rb
 - spec/rack/oauth2/server/authorize/extension/id_token_spec.rb
+- spec/rack/oauth2/server/resource/error_with_connect_ext_spec.rb
 - spec/rack/oauth2/server/token/authorization_code_spec.rb
 - spec/rack/oauth2/server/token/refresh_token_spec.rb
 - spec/spec_helper.rb