rodauth-ciba 0.1.0
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- checksums.yaml +7 -0
- data/CHANGELOG.md +34 -0
- data/LICENSE +21 -0
- data/README.md +106 -0
- data/docs/adr/0003-follow-rodauth-hook-conventions.md +9 -0
- data/docs/adr/0004-retain-atomic-issuance-and-stage-alignment.md +16 -0
- data/docs/alignment-closeout.md +136 -0
- data/docs/alignment-roadmap.md +160 -0
- data/docs/api.md +337 -0
- data/docs/authentication-claims.md +80 -0
- data/docs/authorization-details.md +50 -0
- data/docs/claims.md +46 -0
- data/docs/failure-contract.md +34 -0
- data/docs/id-token-encryption.md +288 -0
- data/docs/id-token-hint.md +174 -0
- data/docs/login-hint-token.md +35 -0
- data/docs/max-age.md +65 -0
- data/docs/node-alignment.md +336 -0
- data/docs/operations.md +130 -0
- data/docs/outbound-http.md +52 -0
- data/docs/pairwise.md +76 -0
- data/docs/ping.md +118 -0
- data/docs/protocol-coverage.md +114 -0
- data/docs/refresh-tokens.md +151 -0
- data/docs/release-readiness.md +75 -0
- data/docs/release-validation.md +498 -0
- data/docs/request-context.md +51 -0
- data/docs/requirements-audit-current.json +3221 -0
- data/docs/requirements-audit-current.md +424 -0
- data/docs/requirements-audit.json +3190 -0
- data/docs/requirements-audit.md +175 -0
- data/docs/research/access-token-revocation-reference.md +81 -0
- data/docs/research/alignment-partial-triage.md +50 -0
- data/docs/research/claims-reference-contract.md +33 -0
- data/docs/research/client-assertion-algorithm-contract.md +177 -0
- data/docs/research/completion-error-boundaries.md +56 -0
- data/docs/research/consent-api-evolution.md +59 -0
- data/docs/research/dpop-reference-contract.md +423 -0
- data/docs/research/id-token-hint-reference-contract.md +254 -0
- data/docs/research/mtls-reference-contract.md +449 -0
- data/docs/research/node-ciba-lifecycle.md +30 -0
- data/docs/research/node-oidc-provider-comparison.md +45 -0
- data/docs/research/pairwise-reference-contract.md +264 -0
- data/docs/research/ping-reference-contract.md +165 -0
- data/docs/research/rar-reference-contract.md +55 -0
- data/docs/research/refresh-reference-contract.md +85 -0
- data/docs/research/registration-reference-contract.md +567 -0
- data/docs/research/request-parameter-inventory.md +42 -0
- data/docs/research/required-parameter-inventory.md +39 -0
- data/docs/research/resource-reference-contract.md +40 -0
- data/docs/research/signed-request-reference-contract.md +113 -0
- data/docs/resources.md +55 -0
- data/docs/security-review.md +294 -0
- data/docs/signed-requests.md +162 -0
- data/docs/user-code.md +73 -0
- data/docs/validation/node-alignment-tests.txt +10 -0
- data/examples/client.rb +39 -0
- data/examples/demo_app.rb +121 -0
- data/examples/dpop_smoke.rb +169 -0
- data/examples/ecdh_id_token_smoke.rb +84 -0
- data/examples/edwards_id_token_smoke.rb +48 -0
- data/examples/edwards_smoke.rb +87 -0
- data/examples/edwards_tls_smoke.rb +73 -0
- data/examples/encrypted_id_token_smoke.rb +73 -0
- data/examples/encryption_tls_smoke.rb +123 -0
- data/examples/extensions_smoke.rb +226 -0
- data/examples/fixtures/edwards-requests.json +30 -0
- data/examples/hmac_id_token_smoke.rb +72 -0
- data/examples/migration.rb +18 -0
- data/examples/mtls_smoke.rb +395 -0
- data/examples/ping_smoke.rb +226 -0
- data/examples/registration_smoke.rb +73 -0
- data/examples/server.rb +14 -0
- data/examples/smoke.rb +46 -0
- data/examples/symmetric_id_token_smoke.rb +83 -0
- data/lib/rodauth/ciba/authorization_details.rb +60 -0
- data/lib/rodauth/ciba/dpop.rb +250 -0
- data/lib/rodauth/ciba/http.rb +69 -0
- data/lib/rodauth/ciba/id_token_encryption.rb +175 -0
- data/lib/rodauth/ciba/jwks_cache.rb +149 -0
- data/lib/rodauth/ciba/mtls.rb +174 -0
- data/lib/rodauth/ciba/pairwise.rb +105 -0
- data/lib/rodauth/ciba/registration.rb +489 -0
- data/lib/rodauth/ciba/schema.rb +182 -0
- data/lib/rodauth/ciba/version.rb +6 -0
- data/lib/rodauth/ciba.rb +4 -0
- data/lib/rodauth/features/ciba.rb +2185 -0
- metadata +231 -0
metadata
ADDED
|
@@ -0,0 +1,231 @@
|
|
|
1
|
+
--- !ruby/object:Gem::Specification
|
|
2
|
+
name: rodauth-ciba
|
|
3
|
+
version: !ruby/object:Gem::Version
|
|
4
|
+
version: 0.1.0
|
|
5
|
+
platform: ruby
|
|
6
|
+
authors:
|
|
7
|
+
- rodauth-ciba contributors
|
|
8
|
+
autorequire:
|
|
9
|
+
bindir: bin
|
|
10
|
+
cert_chain: []
|
|
11
|
+
date: 2026-10-11 00:00:00.000000000 Z
|
|
12
|
+
dependencies:
|
|
13
|
+
- !ruby/object:Gem::Dependency
|
|
14
|
+
name: rodauth-oauth
|
|
15
|
+
requirement: !ruby/object:Gem::Requirement
|
|
16
|
+
requirements:
|
|
17
|
+
- - '='
|
|
18
|
+
- !ruby/object:Gem::Version
|
|
19
|
+
version: 1.7.0
|
|
20
|
+
type: :runtime
|
|
21
|
+
prerelease: false
|
|
22
|
+
version_requirements: !ruby/object:Gem::Requirement
|
|
23
|
+
requirements:
|
|
24
|
+
- - '='
|
|
25
|
+
- !ruby/object:Gem::Version
|
|
26
|
+
version: 1.7.0
|
|
27
|
+
- !ruby/object:Gem::Dependency
|
|
28
|
+
name: rodauth
|
|
29
|
+
requirement: !ruby/object:Gem::Requirement
|
|
30
|
+
requirements:
|
|
31
|
+
- - "~>"
|
|
32
|
+
- !ruby/object:Gem::Version
|
|
33
|
+
version: 2.28.0
|
|
34
|
+
type: :runtime
|
|
35
|
+
prerelease: false
|
|
36
|
+
version_requirements: !ruby/object:Gem::Requirement
|
|
37
|
+
requirements:
|
|
38
|
+
- - "~>"
|
|
39
|
+
- !ruby/object:Gem::Version
|
|
40
|
+
version: 2.28.0
|
|
41
|
+
- !ruby/object:Gem::Dependency
|
|
42
|
+
name: sequel
|
|
43
|
+
requirement: !ruby/object:Gem::Requirement
|
|
44
|
+
requirements:
|
|
45
|
+
- - "~>"
|
|
46
|
+
- !ruby/object:Gem::Version
|
|
47
|
+
version: 5.108.0
|
|
48
|
+
type: :runtime
|
|
49
|
+
prerelease: false
|
|
50
|
+
version_requirements: !ruby/object:Gem::Requirement
|
|
51
|
+
requirements:
|
|
52
|
+
- - "~>"
|
|
53
|
+
- !ruby/object:Gem::Version
|
|
54
|
+
version: 5.108.0
|
|
55
|
+
- !ruby/object:Gem::Dependency
|
|
56
|
+
name: jwt
|
|
57
|
+
requirement: !ruby/object:Gem::Requirement
|
|
58
|
+
requirements:
|
|
59
|
+
- - "~>"
|
|
60
|
+
- !ruby/object:Gem::Version
|
|
61
|
+
version: 3.3.0
|
|
62
|
+
type: :runtime
|
|
63
|
+
prerelease: false
|
|
64
|
+
version_requirements: !ruby/object:Gem::Requirement
|
|
65
|
+
requirements:
|
|
66
|
+
- - "~>"
|
|
67
|
+
- !ruby/object:Gem::Version
|
|
68
|
+
version: 3.3.0
|
|
69
|
+
- !ruby/object:Gem::Dependency
|
|
70
|
+
name: jwe
|
|
71
|
+
requirement: !ruby/object:Gem::Requirement
|
|
72
|
+
requirements:
|
|
73
|
+
- - "~>"
|
|
74
|
+
- !ruby/object:Gem::Version
|
|
75
|
+
version: 1.1.1
|
|
76
|
+
type: :runtime
|
|
77
|
+
prerelease: false
|
|
78
|
+
version_requirements: !ruby/object:Gem::Requirement
|
|
79
|
+
requirements:
|
|
80
|
+
- - "~>"
|
|
81
|
+
- !ruby/object:Gem::Version
|
|
82
|
+
version: 1.1.1
|
|
83
|
+
- !ruby/object:Gem::Dependency
|
|
84
|
+
name: json
|
|
85
|
+
requirement: !ruby/object:Gem::Requirement
|
|
86
|
+
requirements:
|
|
87
|
+
- - "~>"
|
|
88
|
+
- !ruby/object:Gem::Version
|
|
89
|
+
version: '2.18'
|
|
90
|
+
type: :runtime
|
|
91
|
+
prerelease: false
|
|
92
|
+
version_requirements: !ruby/object:Gem::Requirement
|
|
93
|
+
requirements:
|
|
94
|
+
- - "~>"
|
|
95
|
+
- !ruby/object:Gem::Version
|
|
96
|
+
version: '2.18'
|
|
97
|
+
- !ruby/object:Gem::Dependency
|
|
98
|
+
name: bcrypt
|
|
99
|
+
requirement: !ruby/object:Gem::Requirement
|
|
100
|
+
requirements:
|
|
101
|
+
- - "~>"
|
|
102
|
+
- !ruby/object:Gem::Version
|
|
103
|
+
version: '3.1'
|
|
104
|
+
type: :runtime
|
|
105
|
+
prerelease: false
|
|
106
|
+
version_requirements: !ruby/object:Gem::Requirement
|
|
107
|
+
requirements:
|
|
108
|
+
- - "~>"
|
|
109
|
+
- !ruby/object:Gem::Version
|
|
110
|
+
version: '3.1'
|
|
111
|
+
description: Adds backchannel authentication, Ruby completion APIs, transactional
|
|
112
|
+
hooks and observation events to rodauth-oauth.
|
|
113
|
+
email:
|
|
114
|
+
executables: []
|
|
115
|
+
extensions: []
|
|
116
|
+
extra_rdoc_files: []
|
|
117
|
+
files:
|
|
118
|
+
- CHANGELOG.md
|
|
119
|
+
- LICENSE
|
|
120
|
+
- README.md
|
|
121
|
+
- docs/adr/0003-follow-rodauth-hook-conventions.md
|
|
122
|
+
- docs/adr/0004-retain-atomic-issuance-and-stage-alignment.md
|
|
123
|
+
- docs/alignment-closeout.md
|
|
124
|
+
- docs/alignment-roadmap.md
|
|
125
|
+
- docs/api.md
|
|
126
|
+
- docs/authentication-claims.md
|
|
127
|
+
- docs/authorization-details.md
|
|
128
|
+
- docs/claims.md
|
|
129
|
+
- docs/failure-contract.md
|
|
130
|
+
- docs/id-token-encryption.md
|
|
131
|
+
- docs/id-token-hint.md
|
|
132
|
+
- docs/login-hint-token.md
|
|
133
|
+
- docs/max-age.md
|
|
134
|
+
- docs/node-alignment.md
|
|
135
|
+
- docs/operations.md
|
|
136
|
+
- docs/outbound-http.md
|
|
137
|
+
- docs/pairwise.md
|
|
138
|
+
- docs/ping.md
|
|
139
|
+
- docs/protocol-coverage.md
|
|
140
|
+
- docs/refresh-tokens.md
|
|
141
|
+
- docs/release-readiness.md
|
|
142
|
+
- docs/release-validation.md
|
|
143
|
+
- docs/request-context.md
|
|
144
|
+
- docs/requirements-audit-current.json
|
|
145
|
+
- docs/requirements-audit-current.md
|
|
146
|
+
- docs/requirements-audit.json
|
|
147
|
+
- docs/requirements-audit.md
|
|
148
|
+
- docs/research/access-token-revocation-reference.md
|
|
149
|
+
- docs/research/alignment-partial-triage.md
|
|
150
|
+
- docs/research/claims-reference-contract.md
|
|
151
|
+
- docs/research/client-assertion-algorithm-contract.md
|
|
152
|
+
- docs/research/completion-error-boundaries.md
|
|
153
|
+
- docs/research/consent-api-evolution.md
|
|
154
|
+
- docs/research/dpop-reference-contract.md
|
|
155
|
+
- docs/research/id-token-hint-reference-contract.md
|
|
156
|
+
- docs/research/mtls-reference-contract.md
|
|
157
|
+
- docs/research/node-ciba-lifecycle.md
|
|
158
|
+
- docs/research/node-oidc-provider-comparison.md
|
|
159
|
+
- docs/research/pairwise-reference-contract.md
|
|
160
|
+
- docs/research/ping-reference-contract.md
|
|
161
|
+
- docs/research/rar-reference-contract.md
|
|
162
|
+
- docs/research/refresh-reference-contract.md
|
|
163
|
+
- docs/research/registration-reference-contract.md
|
|
164
|
+
- docs/research/request-parameter-inventory.md
|
|
165
|
+
- docs/research/required-parameter-inventory.md
|
|
166
|
+
- docs/research/resource-reference-contract.md
|
|
167
|
+
- docs/research/signed-request-reference-contract.md
|
|
168
|
+
- docs/resources.md
|
|
169
|
+
- docs/security-review.md
|
|
170
|
+
- docs/signed-requests.md
|
|
171
|
+
- docs/user-code.md
|
|
172
|
+
- docs/validation/node-alignment-tests.txt
|
|
173
|
+
- examples/client.rb
|
|
174
|
+
- examples/demo_app.rb
|
|
175
|
+
- examples/dpop_smoke.rb
|
|
176
|
+
- examples/ecdh_id_token_smoke.rb
|
|
177
|
+
- examples/edwards_id_token_smoke.rb
|
|
178
|
+
- examples/edwards_smoke.rb
|
|
179
|
+
- examples/edwards_tls_smoke.rb
|
|
180
|
+
- examples/encrypted_id_token_smoke.rb
|
|
181
|
+
- examples/encryption_tls_smoke.rb
|
|
182
|
+
- examples/extensions_smoke.rb
|
|
183
|
+
- examples/fixtures/edwards-requests.json
|
|
184
|
+
- examples/hmac_id_token_smoke.rb
|
|
185
|
+
- examples/migration.rb
|
|
186
|
+
- examples/mtls_smoke.rb
|
|
187
|
+
- examples/ping_smoke.rb
|
|
188
|
+
- examples/registration_smoke.rb
|
|
189
|
+
- examples/server.rb
|
|
190
|
+
- examples/smoke.rb
|
|
191
|
+
- examples/symmetric_id_token_smoke.rb
|
|
192
|
+
- lib/rodauth/ciba.rb
|
|
193
|
+
- lib/rodauth/ciba/authorization_details.rb
|
|
194
|
+
- lib/rodauth/ciba/dpop.rb
|
|
195
|
+
- lib/rodauth/ciba/http.rb
|
|
196
|
+
- lib/rodauth/ciba/id_token_encryption.rb
|
|
197
|
+
- lib/rodauth/ciba/jwks_cache.rb
|
|
198
|
+
- lib/rodauth/ciba/mtls.rb
|
|
199
|
+
- lib/rodauth/ciba/pairwise.rb
|
|
200
|
+
- lib/rodauth/ciba/registration.rb
|
|
201
|
+
- lib/rodauth/ciba/schema.rb
|
|
202
|
+
- lib/rodauth/ciba/version.rb
|
|
203
|
+
- lib/rodauth/features/ciba.rb
|
|
204
|
+
homepage: https://github.com/kajisha/rodauth-ciba
|
|
205
|
+
licenses:
|
|
206
|
+
- MIT
|
|
207
|
+
metadata:
|
|
208
|
+
source_code_uri: https://github.com/kajisha/rodauth-ciba
|
|
209
|
+
bug_tracker_uri: https://github.com/kajisha/rodauth-ciba/issues
|
|
210
|
+
changelog_uri: https://github.com/kajisha/rodauth-ciba/blob/main/CHANGELOG.md
|
|
211
|
+
rubygems_mfa_required: 'true'
|
|
212
|
+
post_install_message:
|
|
213
|
+
rdoc_options: []
|
|
214
|
+
require_paths:
|
|
215
|
+
- lib
|
|
216
|
+
required_ruby_version: !ruby/object:Gem::Requirement
|
|
217
|
+
requirements:
|
|
218
|
+
- - ">="
|
|
219
|
+
- !ruby/object:Gem::Version
|
|
220
|
+
version: '3.3'
|
|
221
|
+
required_rubygems_version: !ruby/object:Gem::Requirement
|
|
222
|
+
requirements:
|
|
223
|
+
- - ">="
|
|
224
|
+
- !ruby/object:Gem::Version
|
|
225
|
+
version: '0'
|
|
226
|
+
requirements: []
|
|
227
|
+
rubygems_version: 3.5.20
|
|
228
|
+
signing_key:
|
|
229
|
+
specification_version: 4
|
|
230
|
+
summary: CIBA poll/ping OpenID Provider extension for rodauth-oauth
|
|
231
|
+
test_files: []
|