operto 0.3.0 → 0.4.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 31bc34a291dadd87aded5937654fc9824be5cc365e94010724ef763b75169b49
-  data.tar.gz: 46b42729bb8e8590b02452b56c83fe4387638e5db2bee5b290f6f98040196d63
+  metadata.gz: 560a7613ec23670aa8c3e8f14eae1047aa3aa56b11e918b436aea5a0650fea19
+  data.tar.gz: ade003d02974835e84663c7d9bdb745bb420d6d076daed0452cab20f8a55f35d
 SHA512:
-  metadata.gz: 0cc0aa3b12cb92f0d521dfa5f46e6a834a69ddb047a881f9eb125a12a829bc5ff4ca2b9210a8c18b48f9df761abc81ad7374133fd2bac236dac55d6199cae374
-  data.tar.gz: 8579d576182fc7598faf1bc8a4fa5e7e166a995def47059412a00a74ab23f5854225ea702468611f4116a76a29db45ab6469a73182437b1e02b5222c449a27fb
+  metadata.gz: 898ef137d8c04c1aa72ee37783c1b731cd4789bbe297355c5605fad46551f1bdd9f5af45140778e3c02d561801590e23263d7ad90f6ae2769c18b8039059d06d
+  data.tar.gz: 98691df6518db77646c2e26d9310746bf0c71c686714b615cc6d224f780ba8fa50ea61491d97daae8dbe463d6e4f6744110cc3e81046e43abb4681baa82c8a94

data/CHANGELOG.md

@@ -1,5 +1,12 @@
 # Changelog
 
+## 0.4.0 - 2026-10-12
+
+- When Operto rejects the access token (a `401` or an `auth_token_expired` response), the client clears the token store, renews the token and replays the request once.
+- A host token store's `clear` must retire the token so the next `active` returns `nil`.
+- Retry only idempotent requests, and only on `502`, `503` and `504`. `POST` and `PATCH` requests and `429` responses are no longer retried.
+- `Homes::Index` and `Staff::Index` keep an unparseable create date as the raw value instead of failing with `Date::Error`.
+
 ## 0.3.0 - 2026-09-27
 
 - `Tasks::Index` returns the whole task: rule, booking, name, description, start and due times, and the active and completion flags.

data/README.md

@@ -9,7 +9,7 @@ framework dependency.
 
 ```ruby
 # Gemfile
-gem 'operto', '~> 0.3.0'
+gem 'operto', '~> 0.4.0'
 ```
 
 ```sh
@@ -43,7 +43,7 @@ login/refresh and delegates persistence to it via four methods:
 | `active` | the current non-expired token, or `nil` |
 | `refreshable` | a token whose refresh token is still valid, or `nil` |
 | `save(access_token:, expires_at:, refresh_token: nil, refresh_expires_at: nil)` | persist and return the token |
-| `clear` | drop the cached token (called after a `401`) |
+| `clear` | retire the token so the next `active` returns `nil` (called when Operto rejects it, before the renewal) |
 
 A token responds to `access_token`, `refresh_token`, `refresh_expires_at`, and
 `expired?`.

data/lib/operto/authorization.rb

@@ -0,0 +1,30 @@
+module Operto
+  # Faraday middleware that signs each request with the stored access token.
+  # When Operto rejects the token (a 401 or an auth_token_expired envelope), it
+  # clears the store, renews the token and replays the request once.
+  class Authorization < Faraday::Middleware
+    HEADER = 'Authorization'.freeze
+    EXPIRED_REASON = 'auth_token_expired'.freeze
+
+    def call(env)
+      request_body = env.body
+      response = @app.call(sign(env))
+      return response unless rejected?(response)
+
+      Operto.config.token_store.clear
+      env.body = request_body
+      @app.call(sign(env))
+    end
+
+    private
+
+    def sign(env)
+      env.request_headers[HEADER] = "VRS #{Operto::Client.auth_token}"
+      env
+    end
+
+    def rejected?(response)
+      response.status == 401 || Operto::Client.response_body(response)[:ReasonText].to_s.include?(EXPIRED_REASON)
+    end
+  end
+end

data/lib/operto/client.rb

@@ -10,15 +10,14 @@ module Operto
       interval: 1.0,
       interval_randomness: 0.5,
       backoff_factor: 2,
-      retry_statuses: [401, 429, 502, 503, 504],
+      retry_statuses: [502, 503, 504],
       exceptions: [*Faraday::Retry::Middleware::DEFAULT_EXCEPTIONS, Faraday::ConnectionFailed],
-      methods: [*Faraday::Retry::Middleware::IDEMPOTENT_METHODS, :patch, :post],
-      retry_block: ->(env:, **) { Operto.config.token_store.clear if env.status == 401 }
+      methods: Faraday::Retry::Middleware::IDEMPOTENT_METHODS
     }.freeze
 
     def connection(url: Operto.config.base_url, skip_auth: false)
       Faraday.new(url:) do |builder|
-        builder.request :authorization, 'VRS', -> { auth_token } unless skip_auth
+        builder.use Operto::Authorization unless skip_auth
 
         builder.request :json
         builder.request :retry, RETRY_OPTIONS

data/lib/operto/version.rb

@@ -1,3 +1,3 @@
 module Operto
-  VERSION = '0.3.0'.freeze
+  VERSION = '0.4.0'.freeze
 end

data/lib/operto.rb

@@ -10,6 +10,7 @@ require_relative 'operto/error'
 require_relative 'operto/memory_token_store'
 require_relative 'operto/config'
 require_relative 'operto/operation'
+require_relative 'operto/authorization'
 require_relative 'operto/client'
 require_relative 'operto/issue_types'
 require_relative 'operto/filtered_pagination'

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: operto
 version: !ruby/object:Gem::Version
-  version: 0.3.0
+  version: 0.4.0
 platform: ruby
 authors:
 - Guestit
@@ -90,6 +90,7 @@ files:
 - README.md
 - lib/operto.rb
 - lib/operto/access_tokens/upsert.rb
+- lib/operto/authorization.rb
 - lib/operto/client.rb
 - lib/operto/config.rb
 - lib/operto/error.rb
@@ -133,7 +134,7 @@ required_rubygems_version: !ruby/object:Gem::Requirement
     - !ruby/object:Gem::Version
       version: '0'
 requirements: []
-rubygems_version: 4.0.20
+rubygems_version: 4.0.21
 specification_version: 4
 summary: Client for the Operto Teams API
 test_files: []