rodauth-oauth 0.9.1 → 0.9.2

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 8d0412f0fc70f27a32d2517afbc688eae79304a52fd074298ecac3176edf2ee8
-  data.tar.gz: 2bed00e6896786192f3a4b93b145e8b75b0813741b323213586d736745323617
+  metadata.gz: 2514b45f82f9e8dda98f15dc2c1ccc0eeba306c9d1ee40e6fa47e4999d766c1c
+  data.tar.gz: d68579829772121a157b7bd654fb40999921af46673910caa21892462655ed0e
 SHA512:
-  metadata.gz: d04277337c21a48a9b0504eaadac11342bd69a0892e1ee7bd7114880b35fe1cdf4e086044d8fa6198c82da3b8f49b6e12be58b98316f592ed980733d2c2cdaa7
-  data.tar.gz: f3b8ebe3574ff7559c827a42b76ad698b3a33ba93593fe09695a833af92709ca39b33a9e3be0d1c57c6300666de97850810f37e629a29e59bddd0b8746f63f10
+  metadata.gz: 8121458a789119610c920c835fc99cde76d4eca41fb7bb48acbe9c1e2f4be89f68c9370235335d7dc8c6b3b715b6825a4d77bafbda37551464ebf35a516f55de
+  data.tar.gz: bdd2c1d2bee336459186606b2bfb293cd690333a58c421798155e6bc53e418b71bbd142ac19e48ddcff701f28eaaa6c65c8d045c715a7f84690fb5dd6865ddbe

data/README.md

@@ -73,7 +73,7 @@ Or install it yourself as:
 
 ## Usage
 
-This tutorial assumes you already read the documentation and know how to set up `rodauth`. After that, integrating `roda-auth` will look like:
+This tutorial assumes you already read the documentation and know how to set up `rodauth`. After that, integrating `rodauth-oauth` will look like:
 
 ```ruby
 plugin :rodauth do

data/doc/release_notes/0_9_2.md

@@ -0,0 +1,10 @@
+### 0.9.2 (11/05/2022)
+
+#### Bugfixes
+
+* Fixed remaining namespacing fix issues requiring usage of `require "rodauth-oauth"`.
+* Fixed wrong expectation of database for resource-server mode when `:oauth_management_base` plugin was used.
+* oidc: fixed incorrect grant creation flow whenn using `nonce` param.
+* oidc: fixed jwt encoding regression when not setting encryption method/algorithmm for client applications.
+* templates: added missing jwks field to the "New oauth application" form.
+* Several fixes on the example OIDC applications, mostly around CSRF breakage when using latest version of `omniauth`.

data/lib/rodauth/features/oauth_application_management.rb

@@ -33,7 +33,7 @@ module Rodauth
 
     translatable_method :oauth_applications_name_label, "Name"
     translatable_method :oauth_applications_description_label, "Description"
-    translatable_method :oauth_applications_scopes_label, "Scopes"
+    translatable_method :oauth_applications_scopes_label, "Default scopes"
     translatable_method :oauth_applications_contacts_label, "Contacts"
     translatable_method :oauth_applications_tos_uri_label, "Terms of service"
     translatable_method :oauth_applications_policy_uri_label, "Policy"

data/lib/rodauth/features/oauth_jwt.rb

@@ -1,5 +1,6 @@
 # frozen-string-literal: true
 
+require "rodauth/oauth/version"
 require "rodauth/oauth/ttl_store"
 
 module Rodauth
@@ -38,6 +39,9 @@ module Rodauth
 
     translatable_method :oauth_applications_jwt_public_key_label, "Public key"
 
+    auth_value_method :oauth_application_jwt_public_key_param, "jwt_public_key"
+    auth_value_method :oauth_application_jwks_param, "jwks"
+
     auth_value_method :oauth_jwt_keys, {}
     auth_value_method :oauth_jwt_key, nil
     auth_value_method :oauth_jwt_public_key, nil

data/lib/rodauth/features/oauth_jwt_bearer_grant.rb

@@ -1,5 +1,6 @@
 # frozen-string-literal: true
 
+require "rodauth/oauth/version"
 require "rodauth/oauth/ttl_store"
 
 module Rodauth

data/lib/rodauth/features/oauth_management_base.rb

@@ -48,6 +48,10 @@ module Rodauth
 
     def post_configure
       super
+
+      # TODO: remove this in v1, when resource-server mode does not load all of the provider features.
+      return unless db
+
       db.extension :pagination
     end
 

data/lib/rodauth/features/oidc.rb

@@ -120,7 +120,8 @@ module Rodauth
               jwks: oauth_application_jwks,
               encryption_algorithm: @oauth_application[oauth_applications_userinfo_encrypted_response_alg_column],
               encryption_method: @oauth_application[oauth_applications_userinfo_encrypted_response_enc_column]
-            }
+            }.compact
+
             jwt = jwt_encode(
               oidc_claims,
               signing_algorithm: algo,
@@ -315,7 +316,7 @@ module Rodauth
     def create_oauth_grant(create_params = {})
       return super unless (nonce = param_or_nil("nonce"))
 
-      super(oauth_grants_nonce_column => nonce)
+      super(create_params.merge(oauth_grants_nonce_column => nonce))
     end
 
     def create_oauth_token_from_authorization_code(oauth_grant, create_params)
@@ -357,7 +358,8 @@ module Rodauth
         signing_algorithm: oauth_application[oauth_applications_id_token_signed_response_alg_column] || oauth_jwt_algorithm,
         encryption_algorithm: oauth_application[oauth_applications_id_token_encrypted_response_alg_column],
         encryption_method: oauth_application[oauth_applications_id_token_encrypted_response_enc_column]
-      }
+      }.compact
+
       oauth_token[:id_token] = jwt_encode(id_token_claims, **params)
     end
 

data/lib/rodauth/oauth/version.rb

@@ -2,6 +2,6 @@
 
 module Rodauth
   module OAuth
-    VERSION = "0.9.1"
+    VERSION = "0.9.2"
   end
 end

data/locales/en.yml

@@ -19,7 +19,7 @@ en:
     oauth_management_pagination_next_button: "Next"
     oauth_applications_name_label: "Name"
     oauth_applications_description_label: "Description"
-    oauth_applications_scopes_label: "Scopes"
+    oauth_applications_scopes_label: "Default scopes"
     oauth_applications_contacts_label: "Contacts"
     oauth_applications_homepage_url_label: "Homepage URL"
     oauth_applications_tos_uri_label: "Terms of Service URL"

data/templates/jwks_field.str

@@ -1,4 +1,4 @@
 <div class="form-group">
   <label for="name">#{rodauth.oauth_applications_jwks_label}#{rodauth.input_field_label_suffix}</label>
-  #{rodauth.input_field_string(rodauth.oauth_application_jwks_param, "jwks", :type=>"text")}
+   <textarea id="jwks" class="form-control" name="#{rodauth.oauth_application_jwks_param}" rows="3"></textarea>
 </div>

data/templates/jwt_public_key_field.str

@@ -1,4 +1,4 @@
 <div class="form-group">
   <label for="name">#{rodauth.oauth_applications_jwt_public_key_label}#{rodauth.input_field_label_suffix}</label>
-  #{rodauth.input_field_string(rodauth.oauth_application_jwt_public_key_param, "jwt_public_key", :type=>"text")}
+  #{rodauth.input_field_string(rodauth.oauth_application_jwt_public_key_param, "jwt_public_key", :type=>"text", :required=>false)}
 </div>

data/templates/new_oauth_application.str

@@ -11,7 +11,7 @@
     if rodauth.features.include?(:oauth_jwt)
       <<-HTML
         #{rodauth.render('jwt_public_key_field')}
-        #{rodauth.render('jws_jwk_field')}
+        #{rodauth.render('jwks_field')}
       HTML
     end
   }

data/templates/scope_field.str

@@ -1,8 +1,9 @@
 <fieldset class="form-group">
+  <legend>#{rodauth.oauth_applications_scopes_label}</legend>
   #{
     rodauth.oauth_application_scopes.map do |scope|
-      "<div class=\"form-check checkbox\">" +
-      "<input id=\"#{scope}\" type=\"checkbox\" name=\"#{rodauth.oauth_application_scopes_param}[]\" value=\"#{scope}\">" +
+      "<div class=\"form-group form-check\">" +
+      "<input id=\"#{scope}\" type=\"checkbox\" class=\"form-check-input\" name=\"#{rodauth.oauth_application_scopes_param}[]\" value=\"#{scope}\">" +
       "<label for=\"#{scope}\">#{scope}</label>" +
       "</div>"
     end.join

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: rodauth-oauth
 version: !ruby/object:Gem::Version
-  version: 0.9.1
+  version: 0.9.2
 platform: ruby
 authors:
 - Tiago Cardoso
 autorequire:
 bindir: bin
 cert_chain: []
-date: 2022-05-08 00:00:00.000000000 Z
+date: 2022-05-11 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: rodauth
@@ -58,6 +58,7 @@ extra_rdoc_files:
 - doc/release_notes/0_8_0.md
 - doc/release_notes/0_9_0.md
 - doc/release_notes/0_9_1.md
+- doc/release_notes/0_9_2.md
 files:
 - CHANGELOG.md
 - LICENSE.txt
@@ -87,6 +88,7 @@ files:
 - doc/release_notes/0_8_0.md
 - doc/release_notes/0_9_0.md
 - doc/release_notes/0_9_1.md
+- doc/release_notes/0_9_2.md
 - lib/generators/rodauth/oauth/install_generator.rb
 - lib/generators/rodauth/oauth/templates/app/models/oauth_application.rb
 - lib/generators/rodauth/oauth/templates/app/models/oauth_grant.rb