ruby-openid 2.1.5 → 2.1.6

data/CHANGELOG

@@ -1,18 +1,15 @@
-Fri Apr 17 11:05:55 PDT 2009  cygnus@janrain.com
-  tagged 2.1.5
-  Ignore-this: 5f2efd8e91589c54cb0833b6379b9cfa
-
-Fri Apr 17 11:05:49 PDT 2009  cygnus@janrain.com
-  * Up version to 2.1.5
-  Ignore-this: 9f500a47200c6e2edb54057ebe9b19a0
+Tue Apr 21 11:42:57 PDT 2009  cygnus@janrain.com
+  tagged 2.1.6
+  Ignore-this: b97ef05fbb348ace2f86513a5de7db46
 
-Fri Apr 17 11:03:31 PDT 2009  cygnus@janrain.com
-  * SECURITY FIX: Claimed identifier verification was inadvertently comparing values that would always return true (thanks to jbradley@mac.com)
-  Ignore-this: f69797d1383b08b6e58da70f183edb39
+Tue Apr 21 11:42:54 PDT 2009  cygnus@janrain.com
+  * Set version to 2.1.6
+  Ignore-this: 992c07fd2dca61765d11f90167008ebd
 
-Fri Apr 17 11:01:45 PDT 2009  cygnus@janrain.com
-  * Remove redundant test code
-  Ignore-this: 78592d7f2d00ff25e4ab07a90df84477
+Mon Apr 20 12:57:11 PDT 2009  cygnus@janrain.com
+  * Consumer: require that op_endpoint be signed in id_res responses
+  Ignore-this: a0fbd71a105194bac2624f7cff8a3e7a
 
-Fri Dec 19 11:50:10 PST 2008  cygnus@janrain.com
-  tagged 2.1.4
+Fri Apr 17 11:05:55 PDT 2009  cygnus@janrain.com
+  tagged 2.1.5
+  Ignore-this: 5f2efd8e91589c54cb0833b6379b9cfa

data/lib/openid.rb

@@ -13,7 +13,7 @@
 # permissions and limitations under the License.
 
 module OpenID
-  VERSION = "2.1.5"
+  VERSION = "2.1.6"
 end
 
 require "openid/consumer"

data/lib/openid/consumer/idres.rb

@@ -114,7 +114,7 @@ module OpenID
         when OPENID2_NS
           require_fields = basic_fields + ['op_endpoint']
           require_sigs = basic_sig_fields +
-            ['response_nonce', 'claimed_id', 'assoc_handle',]
+            ['response_nonce', 'claimed_id', 'assoc_handle', 'op_endpoint']
         when OPENID1_NS
           require_fields = basic_fields + ['identity']
           require_sigs = basic_sig_fields

data/test/test_idres.rb

@@ -27,7 +27,8 @@ module OpenID
 
         OPENID1_SIGNED = ['return_to', 'identity']
         OPENID2_SIGNED =
-          OPENID1_SIGNED + ['response_nonce', 'claimed_id', 'assoc_handle']
+          OPENID1_SIGNED + ['response_nonce', 'claimed_id', 'assoc_handle',
+                            'op_endpoint']
 
         def mkMsg(ns, fields, signed_fields)
           msg = Message.new(ns)

metadata

@@ -3,8 +3,8 @@ rubygems_version: 0.9.0
 specification_version: 1
 name: ruby-openid
 version: !ruby/object:Gem::Version 
-  version: 2.1.5
-date: 2009-04-17 00:00:00 -07:00
+  version: 2.1.6
+date: 2009-04-21 00:00:00 -07:00
 summary: A library for consuming and serving OpenID identities.
 require_paths: 
 - lib