rails-auth 3.1.0 → 3.2.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: ebb7b8700e3c8719cdb65a37efa8e1234b79a35a43fba6dffcb9d427cbf9e2e7
-  data.tar.gz: 46e21ea3735dde1cf16c1242ca1117288bce5a4c4ef5cf0f3669e890fecc5124
+  metadata.gz: 1c24122c461b2ef37326ca28f26261614ef8215bd85b62bfc171b47f56aeac29
+  data.tar.gz: e6453804040de859e7da0cb344ebe8e75b34f846a221441f246499016e05b4ec
 SHA512:
-  metadata.gz: fcec7e972d73c52fdcaeef22da67dee25849efaddbf254964b3e73f5179e849ef1bd32e80c1f6520f5502884f27811c0b6bb66278923da67320b38cdfd42464b
-  data.tar.gz: 12a93fbdbfc37c44da69bdbb8b163554dd145364627fb689b5acc530a4ec176f6ac5ee2fa0b502ab594a998ce0fad8664e111aafdd268e0f04571f942d9ce6e1
+  metadata.gz: aa0db28d5b895a29f3fc8563575895cb0bf18e8917f7e816d4e6148a25a5615d9b649ba089f94369a7565c2d24a9622a93eff0f1dbb7c14d62c4926ac2333c7f
+  data.tar.gz: ddae5587f3da9ef4291bb0b9cea00563007e58d55d830a025375ba03a9ad2c83aa754d5b86050cf4dac0a8dbb72280c8eb93c905ef4dd5cbc3f883c09da0a52f

data/.github/workflows/mri.yml

@@ -15,6 +15,9 @@ jobs:
           - 2.6
           - 2.7
           - 3.0
+          - 3.1
+          - 3.2
+          - 3.3
 
     steps:
     - uses: actions/checkout@v2

data/.rubocop.yml

@@ -1,6 +1,7 @@
 AllCops:
+  NewCops: enable
   DisplayCopNames: true
-  TargetRubyVersion: 2.3
+  TargetRubyVersion: 2.5
 
 Style/StringLiterals:
   EnforcedStyle: double_quotes
@@ -8,24 +9,8 @@ Style/StringLiterals:
 Layout/HashAlignment:
   Enabled: false
 
-Metrics/BlockLength:
-  ExcludedMethods: ['describe', 'context']
-
-Metrics/ParameterLists:
-  Max: 5
-  CountKeywordArgs: false
-
-Metrics/LineLength:
-  Max: 128
-
-Metrics/MethodLength:
-  Max: 25
-
-Metrics/AbcSize:
-  Max: 25
-
-Metrics/CyclomaticComplexity:
-  Max: 8
+Metrics:
+  Enabled: false
 
 Naming/MethodParameterName:
   MinNameLength: 2

data/Gemfile

@@ -2,19 +2,12 @@
 
 source "https://rubygems.org"
 
-group :development do
-  gem "guard-rspec"
-end
-
-group :development, :test do
-  gem "activesupport", "~> 4"
-  gem "certificate_authority", require: false
-  gem "coveralls", require: false
-  # Workaround for: https://github.com/bundler/bundler/pull/4650
-  gem "rack", "~> 1.x"
-  gem "rake"
-  gem "rspec"
-  gem "rubocop", "0.77.0"
-end
+gem "activesupport"
+gem "certificate_authority", require: false
+gem "guard-rspec"
+gem "pry-byebug", platform: :mri
+gem "rake"
+gem "rspec"
+gem "rubocop"
 
 gemspec

data/lib/rails/auth/acl.rb

@@ -19,9 +19,14 @@ module Rails
       # @param [String] :yaml serialized YAML to load an ACL from
       def self.from_yaml(yaml, **args)
         require "yaml"
-        # rubocop:todo Security/YAMLLoad
-        new(YAML.load(yaml), **args)
-        # rubocop:enable Security/YAMLLoad
+        new(
+          if YAML::VERSION >= "4.0"
+            YAML.safe_load(yaml, aliases: true)
+          else
+            YAML.safe_load(yaml, [], [], true)
+          end,
+          **args
+        )
       end
 
       # @param [Array<Hash>] :acl Access Control List configuration

data/lib/rails/auth/rspec/matchers/acl_matchers.rb

@@ -6,7 +6,7 @@ RSpec::Matchers.define(:permit) do |env|
     credentials = Rails::Auth.credentials(env)
     message     = "allow #{method}s by "
 
-    return message + "unauthenticated clients" if credentials.count.zero?
+    return "#{message}unauthenticated clients" if credentials.count.zero?
 
     message + credentials.values.map(&:inspect).join(", ")
   end

data/lib/rails/auth/version.rb

@@ -3,6 +3,6 @@
 module Rails
   # Pluggable authentication and authorization for Rack/Rails
   module Auth
-    VERSION = "3.1.0"
+    VERSION = "3.2.0"
   end
 end

data/lib/rails/auth/x509/filter/pem.rb

@@ -11,7 +11,7 @@ module Rails
             # certificates are normally formatted in otherwise parsing with fail
             # with a 'nested asn1 error'. split(" ") handles sequential whitespace
             # characters like \t, \n, and space.
-            OpenSSL::X509::Certificate.new(pem.split(" ").instance_eval do
+            OpenSSL::X509::Certificate.new(pem.split.instance_eval do
               [[self[0], self[1]].join(" "), self[2...-2], [self[-2], self[-1]].join(" ")]
                 .flatten.join("\n")
             end).freeze

data/lib/rails/auth.rb

@@ -1,5 +1,8 @@
 # frozen_string_literal: true
 
+require "active_support"
+require "active_support/core_ext/object"
+
 # Pull in core library components that work with any Rack application
 require "rails/auth/rack"
 

data/rails-auth.gemspec

@@ -21,15 +21,14 @@ Gem::Specification.new do |spec|
 
   # Only allow gem to be pushed to https://rubygems.org
   spec.metadata["allowed_push_host"] = "https://rubygems.org"
+  spec.metadata["rubygems_mfa_required"] = "true"
 
   spec.files         = `git ls-files`.split("\n")
   spec.bindir        = "exe"
   spec.require_paths = ["lib"]
 
-  spec.required_ruby_version = ">= 2.3.0"
+  spec.required_ruby_version = ">= 2.5.0"
 
-  spec.add_runtime_dependency "rack"
-
-  spec.add_development_dependency "bundler", ">= 1.10", "< 3"
-  spec.add_development_dependency "rake", "~> 10.0"
+  spec.add_dependency "activesupport"
+  spec.add_dependency "rack"
 end

data/spec/rails/auth/controller_methods_spec.rb

@@ -6,7 +6,7 @@ RSpec.describe Rails::Auth::ControllerMethods do
       attr_reader :request
 
       def initialize(env)
-        @request = OpenStruct.new(env: env)
+        @request = Struct.new(:env).new(env)
       end
 
       include Rails::Auth::ControllerMethods

data/spec/rails/auth/x509/middleware_spec.rb

@@ -14,7 +14,7 @@ RSpec.describe Rails::Auth::X509::Middleware do
     described_class.new(
       app,
       cert_filters: { example_key => cert_filter },
-      logger: Logger.new(STDERR)
+      logger: Logger.new($stderr)
     )
   end
 

data/spec/spec_helper.rb

@@ -1,8 +1,5 @@
 # frozen_string_literal: true
 
-require "coveralls"
-Coveralls.wear!
-
 $LOAD_PATH.unshift File.expand_path("../lib", __dir__)
 require "rails/auth"
 require "rails/auth/rspec"

metadata

@@ -1,17 +1,17 @@
 --- !ruby/object:Gem::Specification
 name: rails-auth
 version: !ruby/object:Gem::Version
-  version: 3.1.0
+  version: 3.2.0
 platform: ruby
 authors:
 - Tony Arcieri
-autorequire: 
+autorequire:
 bindir: exe
 cert_chain: []
-date: 2021-10-26 00:00:00.000000000 Z
+date: 2024-08-02 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
-  name: rack
+  name: activesupport
   requirement: !ruby/object:Gem::Requirement
     requirements:
     - - ">="
@@ -25,39 +25,19 @@ dependencies:
       - !ruby/object:Gem::Version
         version: '0'
 - !ruby/object:Gem::Dependency
-  name: bundler
+  name: rack
   requirement: !ruby/object:Gem::Requirement
     requirements:
     - - ">="
       - !ruby/object:Gem::Version
-        version: '1.10'
-    - - "<"
-      - !ruby/object:Gem::Version
-        version: '3'
-  type: :development
+        version: '0'
+  type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - ">="
       - !ruby/object:Gem::Version
-        version: '1.10'
-    - - "<"
-      - !ruby/object:Gem::Version
-        version: '3'
-- !ruby/object:Gem::Dependency
-  name: rake
-  requirement: !ruby/object:Gem::Requirement
-    requirements:
-    - - "~>"
-      - !ruby/object:Gem::Version
-        version: '10.0'
-  type: :development
-  prerelease: false
-  version_requirements: !ruby/object:Gem::Requirement
-    requirements:
-    - - "~>"
-      - !ruby/object:Gem::Version
-        version: '10.0'
+        version: '0'
 description: A plugin-based framework for supporting multiple authentication and authorization
   systems in Rails/Rack apps. Supports resource-oriented route-by-route access control
   lists with TLS authentication.
@@ -139,7 +119,8 @@ licenses:
 - Apache-2.0
 metadata:
   allowed_push_host: https://rubygems.org
-post_install_message: 
+  rubygems_mfa_required: 'true'
+post_install_message:
 rdoc_options: []
 require_paths:
 - lib
@@ -147,15 +128,15 @@ required_ruby_version: !ruby/object:Gem::Requirement
   requirements:
   - - ">="
     - !ruby/object:Gem::Version
-      version: 2.3.0
+      version: 2.5.0
 required_rubygems_version: !ruby/object:Gem::Requirement
   requirements:
   - - ">="
     - !ruby/object:Gem::Version
       version: '0'
 requirements: []
-rubygems_version: 3.1.6
-signing_key: 
+rubygems_version: 3.5.9
+signing_key:
 specification_version: 4
 summary: Modular resource-oriented authentication and authorization for Rails/Rack
 test_files: []