rack_entra_id_auth 1.3.1 → 1.3.2

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: bd119fc9bb232089c907b92b30f5d92741b749e328c7330a6f79c10d841dbf04
-  data.tar.gz: 35b4e6bee89780c0e7c6a8fa9ca027ceccf5c59e05f78190f4e03ce98e8a5bb7
+  metadata.gz: 9aebad558da70d6fb398d2a7042989b52ae2c7968fc3eac2233c0ae6ee4ee7be
+  data.tar.gz: 04bfdd91084705a72f4ebb4fc3dbddd6afa074c22784368918ecf3166a6626d2
 SHA512:
-  metadata.gz: 9f9e7a92450030942c267fb89b9759a804bffce0d50e6a8620917b8f26971fb8f672e65a2219103f0ddbfc9a41ebde1bdd5dd0adee63303466f5b4fc4e53ac98
-  data.tar.gz: cf85143982877a4a9c3f8d75cda39e528b37ad71d9d1f4e84e40ecda03de46e4aeaba0e6c2dfd685b1457f6a09798585325ea6ae79c3c6d50d893ccfd30e01c5
+  metadata.gz: 8d81c38f9ac7b5e71904ae21e6210ef326265c502f9654a1075aa88e5b8fe15b3b4722afb9288ae57c4028dd350cd9c0f6ab4130dc082beeee80bc0e94ee6d76
+  data.tar.gz: 56624b5e0e8c5301668638b82883218a3238e4fb86620f706d4d9642b58b83c48122a127f7188fa9146dc57fd5ae9399a263d3a95d96a77d43f52b706e4ac12d

data/lib/rack_entra_id_auth/configuration.rb

@@ -44,6 +44,7 @@ module RackEntraIdAuth
 
     RUBY_SAML_SETTINGS.each { |ruby_saml_setting| config_accessor ruby_saml_setting }
 
+    config_accessor :exclude_paths, default: []
     config_accessor :login_path, default: '/login'
     config_accessor :login_relay_state_url
     config_accessor :logout_path, default: '/logout'
@@ -86,7 +87,7 @@ module RackEntraIdAuth
     end
 
     def ruby_saml_settings
-      config.to_h.slice(*RUBY_SAML_SETTINGS).compact
+      config.to_h.slice(*RUBY_SAML_SETTINGS)
     end
   end
 end

data/lib/rack_entra_id_auth/entra_id_request.rb

@@ -1,5 +1,4 @@
 require 'ruby-saml'
-require 'uri'
 
 module RackEntraIdAuth
   class EntraIdRequest
@@ -19,6 +18,23 @@ module RackEntraIdAuth
       "#{request.base_url}#{request.path}".sub(Regexp.new("#{request.path_info}$"), '')
     end
 
+    # Returns whether the request should be ignored by the middleware. Returns
+    # true if the request's path matches any of the strings or regular
+    # expressions in the exclude_paths config, otherwise returns false.
+    #
+    # @return [Bool]
+    #
+    def excluded_path?
+      RackEntraIdAuth.config.exclude_paths.any? do |regexp_or_string|
+        case regexp_or_string
+          when Regexp
+            regexp_or_string.match?(request.path_info)
+          when String
+            regexp_or_string.eql?(request.path_info)
+        end
+      end
+    end
+
     # Returns whether the request is a Service Provider initiated sign-on
     # request. Returns true if the request's path info equals the login path
     # configuration (login_path), otherwise returns false.
@@ -81,10 +97,7 @@ module RackEntraIdAuth
     # @return [String]
     #
     def relay_state_url
-      relay_state = ''
-      relay_state = request.get_header('rack.request.form_hash')['RelayState'] if request.has_header?('rack.request.form_hash')
-      relay_state = request.params['RelayState'] if !relay_state.is_a?(String) or relay_state.empty?
-      relay_state =~ /\A#{URI::regexp(['http', 'https'])}\z/ ? relay_state : base_url
+      request.get_header('rack.request.form_hash')['RelayState'] rescue request.params['RelayState'] || base_url
     end
 
     # A single sign-on response for the SAMLResponse in the request's header.

data/lib/rack_entra_id_auth/middleware.rb

@@ -10,6 +10,8 @@ module RackEntraIdAuth
       request = Rack::Request.new(env)
       entra_id_request = EntraIdRequest.new(request)
 
+      return @app.call(env) if entra_id_request.excluded_path?
+
       # SP initiated single sign-on request
       if entra_id_request.login?
         log(env, 'Redirecting login request to Entra ID single sign-on URL…')

data/lib/rack_entra_id_auth/mock_middleware.rb

@@ -12,6 +12,8 @@ module RackEntraIdAuth
       request = Rack::Request.new(env)
       entra_id_request = EntraIdRequest.new(request)
 
+      return @app.call(env) if entra_id_request.excluded_path?
+
       # mock a login page
       if entra_id_request.login? and request.request_method.eql?('GET')
         log(env, 'Rendering mock login page…')

data/lib/rack_entra_id_auth/version.rb

@@ -1,3 +1,3 @@
 module RackEntraIdAuth
-  VERSION = '1.3.1'
+  VERSION = '1.3.2'
 end

metadata

@@ -1,14 +1,13 @@
 --- !ruby/object:Gem::Specification
 name: rack_entra_id_auth
 version: !ruby/object:Gem::Version
-  version: 1.3.1
+  version: 1.3.2
 platform: ruby
 authors:
 - David Susco
-autorequire:
 bindir: bin
 cert_chain: []
-date: 2025-03-26 00:00:00.000000000 Z
+date: 2025-08-21 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: activesupport
@@ -119,10 +118,9 @@ licenses:
 - MIT
 metadata:
   bug_tracker_uri: https://github.com/dsusco/rack_entra_id_auth/issues
-  changelog_uri: https://github.com/dsusco/rack_entra_id_auth/releases/tag/v1.3.1
+  changelog_uri: https://github.com/dsusco/rack_entra_id_auth/releases/tag/v1.3.2
   homepage_uri: https://github.com/dsusco/rack_entra_id_auth
   source_code_uri: https://github.com/dsusco/rack_entra_id_auth
-post_install_message:
 rdoc_options: []
 require_paths:
 - lib
@@ -137,8 +135,7 @@ required_rubygems_version: !ruby/object:Gem::Requirement
     - !ruby/object:Gem::Version
       version: '0'
 requirements: []
-rubygems_version: 3.5.22
-signing_key:
+rubygems_version: 3.6.2
 specification_version: 4
 summary: Rails aware Rack middleware for Entra ID authentication.
 test_files: []