openstax_accounts 9.8.1 → 9.9.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 52fa7d9305c25705166caab1576b661a18a542e9a1482fa9e4677f8e076f6be1
-  data.tar.gz: a7069ffb3c2145b110b91188029fb3dc89c3622740c7157a3cfabe2a57b22c2e
+  metadata.gz: '052890df79906093f92d5a4896aea0cf95c38162531e22b15bc362aaa1d6c338'
+  data.tar.gz: 604b36d975e723a09f065eca4fb9cd0da55bf87fd83a6b9575f281466cc3b050
 SHA512:
-  metadata.gz: 1ca35029dd45866b05b0dca01e49f62968e3427f85ebf17f86d190ace2b27b2ba9d30f4bf3dffb2ae044583da661d7eabd2730eae2404595b67e8b7dc172edbe
-  data.tar.gz: 586b18d5e8508c99e3a0211fd6d20d17c93f27e25bef8828abbcc9d198b29b6433b2834b2bedc24d79e19cc0247bb68886e91efb68d2a4c19758ffb647288b04
+  metadata.gz: 5896c59ae817c36644eb2efd04de95670e6ec35655b39b1d46f6890dfde628a7eadb8e9906eb50c6ca4f4293b8cff7d7bf679368a872b29944b41260a55d9eaa
+  data.tar.gz: ca1f9cc44b7d3e12cda586678f03354d8e73d7b87e6d5b00ed4fb32aa8fce4ce67aed1b03ad62fb9f70140893cc578282436695467a3c240400aa1c018b1b498

data/app/controllers/openstax/accounts/sessions_controller.rb

@@ -35,9 +35,9 @@ module OpenStax
           # (or at least eventually) the Accounts logout URL so that users can't sign back
           # in automagically.
           sign_out!
-          redirect_to configuration.enable_stubbing? ?
+          redirect_to(configuration.enable_stubbing? ?
                         main_app.root_url :
-                        configuration.logout_redirect_url(request)
+                        configuration.logout_redirect_url(request), allow_other_host: true)
         end
       end
 

data/app/handlers/openstax/accounts/accounts_search.rb

@@ -48,6 +48,7 @@ module OpenStax
                   order_by: search_params.order_by,
                   page: search_params.page,
                   per_page: search_params.per_page}
+
         out = run(OpenStax::Accounts::SearchAccounts, params).outputs
         outputs.total_count = out.total_count
 

data/config/routes.rb

@@ -4,7 +4,7 @@ OpenStax::Accounts::Engine.routes.draw do
 
   # Shortcut to OmniAuth route that redirects to the Accounts server
   # This is provided by OmniAuth and is not in the SessionsController
-  get '/auth/openstax', to: ->(env) { [ 404, {}, [ '' ] ] }, as: 'openstax_login'
+  post '/auth/openstax', to: ->(env) { [ 404, {}, [ '' ] ] }, as: 'openstax_login'
 
   if OpenStax::Accounts.configuration.enable_stubbing?
     # User profile route

data/lib/omniauth/strategies/openstax.rb

@@ -1,5 +1,6 @@
 require 'omniauth'
 require 'omniauth-oauth2'
+require 'omniauth/rails_csrf_protection'
 
 module OmniAuth
   module Strategies

data/lib/openstax/accounts/version.rb

@@ -1,5 +1,5 @@
 module OpenStax
   module Accounts
-    VERSION = '9.8.1'
+    VERSION = '9.9.0'
   end
 end

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: openstax_accounts
 version: !ruby/object:Gem::Version
-  version: 9.8.1
+  version: 9.9.0
 platform: ruby
 authors:
 - JP Slavinsky
 autorequire:
 bindir: bin
 cert_chain: []
-date: 2023-10-02 00:00:00.000000000 Z
+date: 2024-03-13 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: rails
@@ -16,32 +16,32 @@ dependencies:
     requirements:
     - - ">="
       - !ruby/object:Gem::Version
-        version: '5.0'
+        version: '6.0'
     - - "<"
       - !ruby/object:Gem::Version
-        version: '7.0'
+        version: '8.0'
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - ">="
       - !ruby/object:Gem::Version
-        version: '5.0'
+        version: '6.0'
     - - "<"
       - !ruby/object:Gem::Version
-        version: '7.0'
+        version: '8.0'
 - !ruby/object:Gem::Dependency
   name: omniauth
   requirement: !ruby/object:Gem::Requirement
     requirements:
-    - - "<"
+    - - ">"
       - !ruby/object:Gem::Version
         version: '2.0'
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
-    - - "<"
+    - - ">"
       - !ruby/object:Gem::Version
         version: '2.0'
 - !ruby/object:Gem::Dependency
@@ -58,6 +58,20 @@ dependencies:
     - - ">="
       - !ruby/object:Gem::Version
         version: '0'
+- !ruby/object:Gem::Dependency
+  name: omniauth-rails_csrf_protection
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: '0'
+  type: :runtime
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: '0'
 - !ruby/object:Gem::Dependency
   name: oauth2
   requirement: !ruby/object:Gem::Requirement
@@ -106,14 +120,14 @@ dependencies:
     requirements:
     - - ">="
       - !ruby/object:Gem::Version
-        version: '0'
+        version: 12.1.0
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - ">="
       - !ruby/object:Gem::Version
-        version: '0'
+        version: 12.1.0
 - !ruby/object:Gem::Dependency
   name: keyword_search
   requirement: !ruby/object:Gem::Requirement
@@ -134,14 +148,14 @@ dependencies:
     requirements:
     - - ">="
       - !ruby/object:Gem::Version
-        version: '0'
+        version: 5.1.1
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - ">="
       - !ruby/object:Gem::Version
-        version: '0'
+        version: 5.1.1
 - !ruby/object:Gem::Dependency
   name: openstax_api
   requirement: !ruby/object:Gem::Requirement