openstax_accounts 9.8.0 → 9.9.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 3cd4aa7a22ea69ad3166b90650c73a63b0bcdf5b029bb6d1d3405d45c3769fdc
-  data.tar.gz: 4d0308a4b059dc5d4f81042995d930f60a571c44f6bdf432f9718b771f198b75
+  metadata.gz: '052890df79906093f92d5a4896aea0cf95c38162531e22b15bc362aaa1d6c338'
+  data.tar.gz: 604b36d975e723a09f065eca4fb9cd0da55bf87fd83a6b9575f281466cc3b050
 SHA512:
-  metadata.gz: 9594b3dfa88ac6e1a79ab3c75e13a895eea7661827050c61f7573983a44696a69a29d0433dc23937a3ff18d745ec1e52e15dba01682be7d095ff2dcc5aaa62cd
-  data.tar.gz: d808626f78220265082eaac3855b4f47700c843d0e36564ff67e4e3e6194790fca1c9497aab2093ee1e8a8da8387f41603ee9ee9c2fdfe36caeaa7f247d04516
+  metadata.gz: 5896c59ae817c36644eb2efd04de95670e6ec35655b39b1d46f6890dfde628a7eadb8e9906eb50c6ca4f4293b8cff7d7bf679368a872b29944b41260a55d9eaa
+  data.tar.gz: ca1f9cc44b7d3e12cda586678f03354d8e73d7b87e6d5b00ed4fb32aa8fce4ce67aed1b03ad62fb9f70140893cc578282436695467a3c240400aa1c018b1b498

data/app/controllers/openstax/accounts/sessions_controller.rb

@@ -35,9 +35,9 @@ module OpenStax
           # (or at least eventually) the Accounts logout URL so that users can't sign back
           # in automagically.
           sign_out!
-          redirect_to configuration.enable_stubbing? ?
+          redirect_to(configuration.enable_stubbing? ?
                         main_app.root_url :
-                        configuration.logout_redirect_url(request)
+                        configuration.logout_redirect_url(request), allow_other_host: true)
         end
       end
 

data/app/handlers/openstax/accounts/accounts_search.rb

@@ -48,6 +48,7 @@ module OpenStax
                   order_by: search_params.order_by,
                   page: search_params.page,
                   per_page: search_params.per_page}
+
         out = run(OpenStax::Accounts::SearchAccounts, params).outputs
         outputs.total_count = out.total_count
 

data/app/models/openstax/accounts/account.rb

@@ -39,7 +39,8 @@ module OpenStax::Accounts
       :designer,
       :other,
       :adjunct,
-      :homeschool
+      :homeschool,
+      :researcher
     ]
 
     enum school_type: [

data/config/routes.rb

@@ -4,7 +4,7 @@ OpenStax::Accounts::Engine.routes.draw do
 
   # Shortcut to OmniAuth route that redirects to the Accounts server
   # This is provided by OmniAuth and is not in the SessionsController
-  get '/auth/openstax', to: ->(env) { [ 404, {}, [ '' ] ] }, as: 'openstax_login'
+  post '/auth/openstax', to: ->(env) { [ 404, {}, [ '' ] ] }, as: 'openstax_login'
 
   if OpenStax::Accounts.configuration.enable_stubbing?
     # User profile route

data/lib/omniauth/strategies/openstax.rb

@@ -1,5 +1,6 @@
 require 'omniauth'
 require 'omniauth-oauth2'
+require 'omniauth/rails_csrf_protection'
 
 module OmniAuth
   module Strategies

data/lib/openstax/accounts/version.rb

@@ -1,5 +1,5 @@
 module OpenStax
   module Accounts
-    VERSION = '9.8.0'
+    VERSION = '9.9.0'
   end
 end

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: openstax_accounts
 version: !ruby/object:Gem::Version
-  version: 9.8.0
+  version: 9.9.0
 platform: ruby
 authors:
 - JP Slavinsky
 autorequire:
 bindir: bin
 cert_chain: []
-date: 2021-11-15 00:00:00.000000000 Z
+date: 2024-03-13 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: rails
@@ -16,32 +16,32 @@ dependencies:
     requirements:
     - - ">="
       - !ruby/object:Gem::Version
-        version: '5.0'
+        version: '6.0'
     - - "<"
       - !ruby/object:Gem::Version
-        version: '7.0'
+        version: '8.0'
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - ">="
       - !ruby/object:Gem::Version
-        version: '5.0'
+        version: '6.0'
     - - "<"
       - !ruby/object:Gem::Version
-        version: '7.0'
+        version: '8.0'
 - !ruby/object:Gem::Dependency
   name: omniauth
   requirement: !ruby/object:Gem::Requirement
     requirements:
-    - - "<"
+    - - ">"
       - !ruby/object:Gem::Version
         version: '2.0'
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
-    - - "<"
+    - - ">"
       - !ruby/object:Gem::Version
         version: '2.0'
 - !ruby/object:Gem::Dependency
@@ -58,6 +58,20 @@ dependencies:
     - - ">="
       - !ruby/object:Gem::Version
         version: '0'
+- !ruby/object:Gem::Dependency
+  name: omniauth-rails_csrf_protection
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: '0'
+  type: :runtime
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: '0'
 - !ruby/object:Gem::Dependency
   name: oauth2
   requirement: !ruby/object:Gem::Requirement
@@ -106,14 +120,14 @@ dependencies:
     requirements:
     - - ">="
       - !ruby/object:Gem::Version
-        version: '0'
+        version: 12.1.0
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - ">="
       - !ruby/object:Gem::Version
-        version: '0'
+        version: 12.1.0
 - !ruby/object:Gem::Dependency
   name: keyword_search
   requirement: !ruby/object:Gem::Requirement
@@ -134,14 +148,14 @@ dependencies:
     requirements:
     - - ">="
       - !ruby/object:Gem::Version
-        version: '0'
+        version: 5.1.1
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - ">="
       - !ruby/object:Gem::Version
-        version: '0'
+        version: 5.1.1
 - !ruby/object:Gem::Dependency
   name: openstax_api
   requirement: !ruby/object:Gem::Requirement
@@ -226,6 +240,20 @@ dependencies:
     - - ">="
       - !ruby/object:Gem::Version
         version: '0'
+- !ruby/object:Gem::Dependency
+  name: multi_json
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: '0'
+  type: :development
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: '0'
 - !ruby/object:Gem::Dependency
   name: shoulda-matchers
   requirement: !ruby/object:Gem::Requirement
@@ -393,7 +421,7 @@ required_rubygems_version: !ruby/object:Gem::Requirement
     - !ruby/object:Gem::Version
       version: '0'
 requirements: []
-rubygems_version: 3.1.4
+rubygems_version: 3.1.6
 signing_key:
 specification_version: 4
 summary: Rails common code and bindings for the 'accounts' API