signet 0.16.1 → 0.17.0
Sign up to get free protection for your applications and to get access to all the features.
- checksums.yaml +4 -4
- data/CHANGELOG.md +55 -57
- data/lib/signet/oauth_1/server.rb +1 -1
- data/lib/signet/oauth_2/client.rb +1 -0
- data/lib/signet/oauth_2.rb +1 -1
- data/lib/signet/version.rb +1 -1
- metadata +9 -23
checksums.yaml
CHANGED
@@ -1,7 +1,7 @@
|
|
1
1
|
---
|
2
2
|
SHA256:
|
3
|
-
metadata.gz:
|
4
|
-
data.tar.gz:
|
3
|
+
metadata.gz: 13bd869943add17b04e66089d5c1a5d34a8d6053c55fb4dc389bc9e3a83c36ae
|
4
|
+
data.tar.gz: 17a0094e4ef483d07ea945155956d81a06423a8d57abc725d326b49c2cb62171
|
5
5
|
SHA512:
|
6
|
-
metadata.gz:
|
7
|
-
data.tar.gz:
|
6
|
+
metadata.gz: c6817470226e95dd4535bb7316b98c2b95d6ef70a8b9a1466656018fc9e642a02901390e0b40562e7ac7ea3a6acfefdb07d3317c6879453bb23ca07090bd9643
|
7
|
+
data.tar.gz: d49ad82ef1cbf8fab14b74370f07e3567c3f2594045e3cf82ec5f72f69f93ebe47954bff340fe7c472fb31f6269bbe012fec8e24f369167e59a519bfc02ff13b
|
data/CHANGELOG.md
CHANGED
@@ -1,87 +1,85 @@
|
|
1
1
|
# Release History
|
2
2
|
|
3
|
-
###
|
3
|
+
### 0.17.0 (2022-06-23)
|
4
4
|
|
5
|
+
* Updated minimum Ruby version to 2.6
|
5
6
|
|
6
|
-
###
|
7
|
+
### 0.16.1 (2022-02-24)
|
7
8
|
|
8
|
-
|
9
|
+
#### Bug Fixes
|
9
10
|
|
10
|
-
|
11
|
+
* Support Faraday 2
|
11
12
|
|
13
|
+
### 0.16.0 (2021-09-03)
|
12
14
|
|
13
|
-
|
15
|
+
#### Features
|
14
16
|
|
15
|
-
* Support for fetching an access token with basic auth
|
17
|
+
* Support for fetching an access token with basic auth
|
16
18
|
|
19
|
+
#### Bug Fixes
|
17
20
|
|
18
|
-
|
21
|
+
* Remove extraneous files from the gem
|
22
|
+
* Require addressable 2.8 to remediate vulnerability
|
19
23
|
|
20
|
-
|
21
|
-
* Require addressable 2.8 to remediate vulnerability ([9a2f899](https://www.github.com/googleapis/signet/commit/9a2f8996f522538c4bb7998535e2a50331d564fc))
|
24
|
+
### 0.15.0 (2021-03-04)
|
22
25
|
|
23
|
-
|
26
|
+
* Drop support for Ruby 2.4 and add support for Ruby 3.0
|
24
27
|
|
25
|
-
|
26
|
-
### Features
|
27
|
-
|
28
|
-
* Drop support for Ruby 2.4 and add support for Ruby 3.0 ([bd6fe87](https://www.github.com/googleapis/signet/commit/bd6fe87948f8fc7702720dae651e82f4fd348b5d))
|
29
|
-
|
30
|
-
## 0.14.1 / 2021-01-27
|
28
|
+
### 0.14.1 / 2021-01-27
|
31
29
|
|
32
30
|
* Fix OAuth1 signature with duplicate query param names
|
33
31
|
|
34
|
-
|
32
|
+
### 0.14.0 / 2020-03-31
|
35
33
|
|
36
34
|
* Support for fetching ID tokens from google oauth2 endpoint.
|
37
35
|
|
38
|
-
|
36
|
+
### 0.13.2 / 2020-03-25
|
39
37
|
|
40
38
|
Rerelease of 0.13.1.
|
41
39
|
|
42
|
-
|
40
|
+
### 0.13.1 / 2020-03-24
|
43
41
|
|
44
42
|
* Update github url
|
45
43
|
|
46
|
-
|
44
|
+
### 0.13.0 / 2020-02-24
|
47
45
|
|
48
46
|
* Support Faraday 1.x
|
49
47
|
|
50
|
-
|
48
|
+
### 0.12.0 / 2019-10-08
|
51
49
|
|
52
50
|
* This version now requires Ruby 2.4.
|
53
51
|
* Support array values of the "aud" field.
|
54
52
|
* Normalize the version constant to match related gems.
|
55
53
|
|
56
|
-
|
54
|
+
### 0.11.0 / 2018-10-08
|
57
55
|
|
58
56
|
* Add constant time comparison for oauth signatures.
|
59
57
|
|
60
|
-
|
58
|
+
### 0.10.0 / 2018-09-21
|
61
59
|
|
62
60
|
* Add UnexpectedStatusError class for http status errors that are not handled.
|
63
61
|
|
64
|
-
|
62
|
+
### 0.9.2 / 2018-09-12
|
65
63
|
|
66
64
|
* Update issued_at correctly when it is set simultaneously with expires_in.
|
67
65
|
|
68
|
-
|
66
|
+
### 0.9.1 / 2018-08-29
|
69
67
|
|
70
68
|
* Warn on EOL ruby versions.
|
71
69
|
* Fix DateTime normalization.
|
72
70
|
|
73
|
-
|
71
|
+
### 0.9.0 / 2018-08-20
|
74
72
|
|
75
73
|
* Add RemoteServerError class for 5xx level errors.
|
76
74
|
* Allow to_json to be called with arguments
|
77
75
|
* Expires_in now sets and reflects current expires_at value
|
78
76
|
* Expires_within(0) now returns false when expires_at is nil.
|
79
77
|
|
80
|
-
|
78
|
+
### 0.8.1 / 2017-10-13
|
81
79
|
|
82
80
|
* Restore support for Ruby 1.9.3
|
83
81
|
|
84
|
-
|
82
|
+
### 0.8.0 / 2017-10-12
|
85
83
|
|
86
84
|
* Ensure the "expires_at" attribute is recalculated on refresh (chutzimir)
|
87
85
|
* Fix warnings on Ruby 2.4 (koic)
|
@@ -89,20 +87,20 @@ Rerelease of 0.13.1.
|
|
89
87
|
* Provide signature verification algorithm for compatibility with ruby-jwt 2.0 (jurriaan)
|
90
88
|
* Signet::OAuth2::Client#decoded_id_token can take a keyfinder block (mvastola)
|
91
89
|
|
92
|
-
|
90
|
+
### 0.7.3 / 2016-06-20
|
93
91
|
|
94
92
|
* Fix timestamp parsing on 32-bit systems
|
95
93
|
* Fix expiration check when issue/expiry times are nil
|
96
94
|
|
97
|
-
|
95
|
+
### 0.7.2 / 2015-12-21
|
98
96
|
|
99
97
|
* Don't assume Faraday form encoding middleware is present
|
100
98
|
|
101
|
-
|
99
|
+
### 0.7.1 / 2015-12-17
|
102
100
|
|
103
101
|
* Fix an issue with date parsing
|
104
102
|
|
105
|
-
|
103
|
+
### 0.7 / 2015-12-06
|
106
104
|
|
107
105
|
* No longer overwrite SSL environment variables.
|
108
106
|
* Tighten up date & URL (de)serialization for OAuth2 client
|
@@ -111,7 +109,7 @@ Rerelease of 0.13.1.
|
|
111
109
|
* Add expires_within(sec) method to oauth2 client to facilitate proactive
|
112
110
|
refreshes
|
113
111
|
|
114
|
-
|
112
|
+
### 0.6.1 / 2015-06-08
|
115
113
|
|
116
114
|
* Fix language warnings for unused & shadowed variables ((@blowmage)[])
|
117
115
|
* Update SSL cert path for OSX ((@gambaroff)[])
|
@@ -119,14 +117,14 @@ Rerelease of 0.13.1.
|
|
119
117
|
* Fix incorrect parameter name in OAuth2 client docs ((@samuelreh)[])
|
120
118
|
* Fix symbolization of URL parameter keys ((@swifthand)[])
|
121
119
|
|
122
|
-
|
120
|
+
### 0.6.0 / 2014-12-05
|
123
121
|
|
124
122
|
* Drop support for ruby versions < 1.9.3
|
125
123
|
* Update gem dependencies and lock down versions tighter
|
126
124
|
* Allow form encoded responses when exchanging OAuth 2 authorization codes
|
127
125
|
* Normalize options keys for indifferent access
|
128
126
|
|
129
|
-
|
127
|
+
### 0.5.1 / 2014-06-08
|
130
128
|
|
131
129
|
* Allow Hash objects to be used to initialize authorization URI
|
132
130
|
* Added PLAINTEXT and RSA-SHA1 signature methods to OAuth 1 support
|
@@ -134,53 +132,53 @@ Rerelease of 0.13.1.
|
|
134
132
|
* The `approval_prompt` option no longer defaults to `:force`
|
135
133
|
* The `approval_prompt` and `prompt` are now mutually exclusive.
|
136
134
|
|
137
|
-
|
135
|
+
### 0.5.0 / 2013-05-31
|
138
136
|
|
139
137
|
* Switched to faraday 0.9.0
|
140
138
|
* Added `expires_at` option
|
141
139
|
|
142
|
-
|
140
|
+
### 0.4.5
|
143
141
|
|
144
142
|
* Minor documentation fixes
|
145
143
|
* Allow postmessage as a valid redirect_uri in OAuth 2
|
146
144
|
|
147
|
-
|
145
|
+
### 0.4.4
|
148
146
|
|
149
147
|
* Add support for assertion profile
|
150
148
|
|
151
|
-
|
149
|
+
### 0.4.3
|
152
150
|
|
153
151
|
* Added method to clear credentials
|
154
152
|
|
155
|
-
|
153
|
+
### 0.4.2
|
156
154
|
|
157
155
|
* Backwards compatibility for MultiJson
|
158
156
|
|
159
|
-
|
157
|
+
### 0.4.1
|
160
158
|
|
161
159
|
* Updated Launchy dependency
|
162
160
|
|
163
|
-
|
161
|
+
### 0.4.0
|
164
162
|
|
165
163
|
* Added OAuth 1 server implementation
|
166
164
|
* Updated Faraday dependency
|
167
165
|
|
168
|
-
|
166
|
+
### 0.3.4
|
169
167
|
|
170
168
|
* Attempts to auto-detect CA cert location
|
171
169
|
|
172
|
-
|
170
|
+
### 0.3.3
|
173
171
|
|
174
172
|
* Request objects no longer recreated during processing
|
175
173
|
* Faraday middleware now supported
|
176
174
|
* Streamed requests now supported
|
177
175
|
* Fixed assertion profiles; client ID/secret omission no longer an error
|
178
176
|
|
179
|
-
|
177
|
+
### 0.3.2
|
180
178
|
|
181
179
|
* Added audience security check for ID tokens
|
182
180
|
|
183
|
-
|
181
|
+
### 0.3.1
|
184
182
|
|
185
183
|
* Fixed a warning while determining grant type
|
186
184
|
* Removed requirement that a connection be supplied when authorizing requests
|
@@ -188,52 +186,52 @@ Rerelease of 0.13.1.
|
|
188
186
|
* Fixed some documentation stuff around markdown formatting
|
189
187
|
* Added support for Google Code wiki format output when generating docs
|
190
188
|
|
191
|
-
|
189
|
+
### 0.3.0
|
192
190
|
|
193
191
|
* Replaced httpadapter gem dependency with faraday
|
194
192
|
* Replaced json gem dependency with multi_json
|
195
193
|
* Updated to OAuth 2.0 draft 22
|
196
194
|
* Complete test coverage
|
197
195
|
|
198
|
-
|
196
|
+
### 0.2.4
|
199
197
|
|
200
198
|
* Updated to incorporate changes to the Google OAuth endpoints
|
201
199
|
|
202
|
-
|
200
|
+
### 0.2.3
|
203
201
|
|
204
202
|
* Added support for JWT-formatted ID tokens.
|
205
203
|
* Added :issued_at option to #update_token! method.
|
206
204
|
|
207
|
-
|
205
|
+
### 0.2.2
|
208
206
|
|
209
207
|
* Lowered requirements for json gem
|
210
208
|
|
211
|
-
|
209
|
+
### 0.2.1
|
212
210
|
|
213
211
|
* Updated to keep in sync with the new httpadapter changes
|
214
212
|
|
215
|
-
|
213
|
+
### 0.2.0
|
216
214
|
|
217
215
|
* Added support for OAuth 2.0 draft 10
|
218
216
|
|
219
|
-
|
217
|
+
### 0.1.4
|
220
218
|
|
221
219
|
* Added support for a two-legged authorization flow
|
222
220
|
|
223
|
-
|
221
|
+
### 0.1.3
|
224
222
|
|
225
223
|
* Fixed issue with headers passed in as a Hash
|
226
224
|
* Fixed incompatibilities with Ruby 1.8.6
|
227
225
|
|
228
|
-
|
226
|
+
### 0.1.2
|
229
227
|
|
230
228
|
* Fixed bug with overzealous normalization
|
231
229
|
|
232
|
-
|
230
|
+
### 0.1.1
|
233
231
|
|
234
232
|
* Fixed bug with missing StringIO require
|
235
233
|
* Fixed issue with dependency on unreleased features of addressable
|
236
234
|
|
237
|
-
|
235
|
+
### 0.1.0
|
238
236
|
|
239
237
|
* Initial release
|
@@ -458,7 +458,7 @@ module Signet
|
|
458
458
|
# can't have been signed correctly(5849#3.4.1.3)
|
459
459
|
unless post_parameters.sort == auth_hash.reject { |k, _v| k.index "oauth_" }.to_a.sort
|
460
460
|
raise MalformedAuthorizationError, "Request is of type application/x-www-form-urlencoded " \
|
461
|
-
|
461
|
+
"but Authentication header did not include form values"
|
462
462
|
end
|
463
463
|
end
|
464
464
|
|
data/lib/signet/oauth_2.rb
CHANGED
@@ -78,7 +78,7 @@ module Signet # :nodoc:
|
|
78
78
|
when %r{^application/json.*}
|
79
79
|
MultiJson.load body
|
80
80
|
when %r{^application/x-www-form-urlencoded.*}
|
81
|
-
|
81
|
+
Addressable::URI.form_unencode(body).to_h
|
82
82
|
else
|
83
83
|
raise ArgumentError, "Invalid content type '#{content_type}'"
|
84
84
|
end
|
data/lib/signet/version.rb
CHANGED
metadata
CHANGED
@@ -1,7 +1,7 @@
|
|
1
1
|
--- !ruby/object:Gem::Specification
|
2
2
|
name: signet
|
3
3
|
version: !ruby/object:Gem::Version
|
4
|
-
version: 0.
|
4
|
+
version: 0.17.0
|
5
5
|
platform: ruby
|
6
6
|
authors:
|
7
7
|
- Bob Aman
|
@@ -9,7 +9,7 @@ authors:
|
|
9
9
|
autorequire:
|
10
10
|
bindir: bin
|
11
11
|
cert_chain: []
|
12
|
-
date: 2022-
|
12
|
+
date: 2022-06-23 00:00:00.000000000 Z
|
13
13
|
dependencies:
|
14
14
|
- !ruby/object:Gem::Dependency
|
15
15
|
name: addressable
|
@@ -34,7 +34,7 @@ dependencies:
|
|
34
34
|
version: 0.17.5
|
35
35
|
- - "<"
|
36
36
|
- !ruby/object:Gem::Version
|
37
|
-
version:
|
37
|
+
version: 3.a
|
38
38
|
type: :runtime
|
39
39
|
prerelease: false
|
40
40
|
version_requirements: !ruby/object:Gem::Requirement
|
@@ -44,7 +44,7 @@ dependencies:
|
|
44
44
|
version: 0.17.5
|
45
45
|
- - "<"
|
46
46
|
- !ruby/object:Gem::Version
|
47
|
-
version:
|
47
|
+
version: 3.a
|
48
48
|
- !ruby/object:Gem::Dependency
|
49
49
|
name: jwt
|
50
50
|
requirement: !ruby/object:Gem::Requirement
|
@@ -85,14 +85,14 @@ dependencies:
|
|
85
85
|
requirements:
|
86
86
|
- - "~>"
|
87
87
|
- !ruby/object:Gem::Version
|
88
|
-
version: 1.
|
88
|
+
version: 1.26.0
|
89
89
|
type: :development
|
90
90
|
prerelease: false
|
91
91
|
version_requirements: !ruby/object:Gem::Requirement
|
92
92
|
requirements:
|
93
93
|
- - "~>"
|
94
94
|
- !ruby/object:Gem::Version
|
95
|
-
version: 1.
|
95
|
+
version: 1.26.0
|
96
96
|
- !ruby/object:Gem::Dependency
|
97
97
|
name: kramdown
|
98
98
|
requirement: !ruby/object:Gem::Requirement
|
@@ -163,20 +163,6 @@ dependencies:
|
|
163
163
|
- - "~>"
|
164
164
|
- !ruby/object:Gem::Version
|
165
165
|
version: '3.1'
|
166
|
-
- !ruby/object:Gem::Dependency
|
167
|
-
name: simplecov
|
168
|
-
requirement: !ruby/object:Gem::Requirement
|
169
|
-
requirements:
|
170
|
-
- - "~>"
|
171
|
-
- !ruby/object:Gem::Version
|
172
|
-
version: '0.9'
|
173
|
-
type: :development
|
174
|
-
prerelease: false
|
175
|
-
version_requirements: !ruby/object:Gem::Requirement
|
176
|
-
requirements:
|
177
|
-
- - "~>"
|
178
|
-
- !ruby/object:Gem::Version
|
179
|
-
version: '0.9'
|
180
166
|
- !ruby/object:Gem::Dependency
|
181
167
|
name: yard
|
182
168
|
requirement: !ruby/object:Gem::Requirement
|
@@ -199,7 +185,7 @@ dependencies:
|
|
199
185
|
version: 0.9.12
|
200
186
|
description: 'Signet is an OAuth 1.0 / OAuth 2.0 implementation.
|
201
187
|
|
202
|
-
'
|
188
|
+
'
|
203
189
|
email: sbazyl@google.com
|
204
190
|
executables: []
|
205
191
|
extensions: []
|
@@ -241,14 +227,14 @@ required_ruby_version: !ruby/object:Gem::Requirement
|
|
241
227
|
requirements:
|
242
228
|
- - ">="
|
243
229
|
- !ruby/object:Gem::Version
|
244
|
-
version: '2.
|
230
|
+
version: '2.6'
|
245
231
|
required_rubygems_version: !ruby/object:Gem::Requirement
|
246
232
|
requirements:
|
247
233
|
- - ">="
|
248
234
|
- !ruby/object:Gem::Version
|
249
235
|
version: 1.3.5
|
250
236
|
requirements: []
|
251
|
-
rubygems_version: 3.3.
|
237
|
+
rubygems_version: 3.3.14
|
252
238
|
signing_key:
|
253
239
|
specification_version: 4
|
254
240
|
summary: Signet is an OAuth 1.0 / OAuth 2.0 implementation.
|