simple_oauth 1.0.3 → 1.0.4

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: ed41a0a0f5917e46e47d2fc785730f9c194a0541af8199b46a4928405000f110
-  data.tar.gz: 34d5043273278eb6571534259ee8628268c851d468462e6a25806402ce2afd83
+  metadata.gz: '085f7b377ecba7e5a389e1fa122341ca4c5b517b65cf77ac41d4e69c6f3ac2d0'
+  data.tar.gz: d38ee1bd5f40c23c29182df41d687f6eee8bb04004b9aee9152ed04b61e532bd
 SHA512:
-  metadata.gz: eca0708e81fc8a823e7c5c3e87b48003bce4f6da9ac16d9c8fc0f6a5a45003261ecfaae9bf787e54f5f46b89acdaaf2c1719ad9ba9ac52c4523aaf201cd1aaac
-  data.tar.gz: ba7096154201bf4a19cfa3c34e5cf92a5c566e46165be3d1bf9632bbeb28bcd78b891b07a6743d631140a18a1d3bd7170176d65585af3da0f455a01a06236479
+  metadata.gz: 111934cffa979ed69516a53f3dbe875e8f4ebc3dfb60890dd202019df92f267ae46cbcf8dd313c3241889548e05e026583e72ee455283635f0e06822a639d063
+  data.tar.gz: 267bbab778351538d6173534b4315ca9a953911cbc74c610f3c1395f9cbea6fc854ae9b274cfcaeb4ba62a58158d43232ad67f75fc745aeecc6246b79b4ab98d

data/CHANGELOG.md

@@ -5,6 +5,18 @@ All notable changes to this project will be documented in this file.
 The format is based on [Keep a Changelog](https://keepachangelog.com/en/2.0.0/),
 and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
 
+## [1.0.4] - 2026-11-14
+
+### Changed
+
+- Look up a signature method by the name it was registered under without allocating, so signing a request allocates at least 4 fewer objects and verifying one at least 6 fewer. Verifying without a `signature_method` now allocates fewer objects than in 1.0.1
+
+## [0.5.4] - 2026-11-14
+
+### Changed
+
+- Look up a signature method by the name it was registered under without allocating, so signing a request allocates at least 4 fewer objects and verifying one at least 6 fewer. Verifying without a `signature_method` now allocates fewer objects than in 0.5.1
+
 ## [1.0.3] - 2026-11-14
 
 ### Fixed
@@ -143,6 +155,8 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 - Avoid symbolizing untrusted input in parse methods for security
 - Refactored `Header.parse` for improved robustness using StringScanner
 
+[1.0.4]: https://github.com/laserlemon/simple_oauth/compare/v1.0.3...v1.0.4
+[0.5.4]: https://github.com/laserlemon/simple_oauth/compare/v0.5.3...v0.5.4
 [1.0.3]: https://github.com/laserlemon/simple_oauth/compare/v1.0.2...v1.0.3
 [0.5.3]: https://github.com/laserlemon/simple_oauth/compare/v0.5.2...v0.5.3
 [1.0.2]: https://github.com/laserlemon/simple_oauth/compare/v1.0.1...v1.0.2

data/lib/simple_oauth/signature.rb

@@ -27,6 +27,10 @@ module SimpleOAuth
     # Registry of signature method implementations
     @registry = {}
 
+    # The registry key of each name a signature method was registered under, so a lookup by that
+    # name, as nearly every lookup is, needs no normalizing and allocates nothing
+    @names = {}
+
     class << self
       # Registers a custom signature method
       #
@@ -48,7 +52,9 @@ module SimpleOAuth
       #     )
       #   end
       def register(name, rsa: false, verify: nil, digest: DEFAULT_DIGEST, &block)
-        @registry[normalize_name(name)] = {implementation: block, rsa: rsa, verifier: verify, digest: digest}
+        key = normalize_name(name)
+        @names[name] = key
+        @registry[key] = {implementation: block, rsa: rsa, verifier: verify, digest: digest}
       end
 
       # Checks if a signature method is registered
@@ -59,7 +65,7 @@ module SimpleOAuth
       # @example
       #   SimpleOAuth::Signature.registered?("HMAC-SHA1") # => true
       def registered?(name)
-        @registry.key?(normalize_name(name))
+        @registry.key?(registry_key(name))
       end
 
       # Returns list of registered signature method names
@@ -139,7 +145,9 @@ module SimpleOAuth
       # @example
       #   SimpleOAuth::Signature.unregister("HMAC-SHA512")
       def unregister(name)
-        @registry.delete(normalize_name(name))
+        key = registry_key(name)
+        @names.delete_if { |_, registered| registered.eql?(key) }
+        @registry.delete(key)
       end
 
       # Resets the registry to only built-in methods (useful for testing)
@@ -150,6 +158,7 @@ module SimpleOAuth
       #   SimpleOAuth::Signature.reset!
       def reset!
         @registry.clear
+        @names.clear
         register_builtin_methods
       end
 
@@ -188,12 +197,25 @@ module SimpleOAuth
       # @return [Hash] the registry entry
       # @raise [ArgumentError] if the signature method is not registered
       def fetch(name)
-        @registry.fetch(normalize_name(name)) do
+        @registry.fetch(registry_key(name)) do
           raise ArgumentError, "Unknown signature method: #{name}. " \
                                "Registered methods: #{@registry.keys.join(", ")}"
         end
       end
 
+      # Finds the registry key for a signature method name
+      #
+      # A name a method was registered under is found in the index of those names. Any other
+      # spelling is normalized, without being added to the index, so names from received headers
+      # cannot grow it.
+      #
+      # @api private
+      # @param name [String] the signature method name
+      # @return [String] the registry key (lowercase, dashes to underscores)
+      def registry_key(name)
+        @names[name] || normalize_name(name)
+      end
+
       # Normalizes signature method name for registry lookup
       #
       # @api private

data/lib/simple_oauth/version.rb

@@ -3,5 +3,5 @@
 # OAuth 1.0 header generation library
 module SimpleOAuth
   # The current version of the SimpleOAuth gem
-  VERSION = "1.0.3"
+  VERSION = "1.0.4"
 end

data/sig/simple_oauth/signature.rbs

@@ -19,6 +19,9 @@ module SimpleOAuth
     # Registry of signature method implementations (class-level instance variable)
     self.@registry: Hash[String, registry_entry]
 
+    # The registry key of each name a signature method was registered under
+    self.@names: Hash[String | Symbol, String]
+
     # Registers a custom signature method
     def self.register: (String | Symbol name, ?rsa: bool, ?verify: verifier_block?, ?digest: String) { (untyped, String) -> String } -> void
 
@@ -57,6 +60,9 @@ module SimpleOAuth
     # Looks up a registered signature method
     def self.fetch: (String | Symbol name) -> registry_entry
 
+    # Finds the registry key for a signature method name
+    def self.registry_key: (String | Symbol name) -> String
+
     # Normalizes signature method name for registry lookup
     def self.normalize_name: (String | Symbol name) -> String
 

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: simple_oauth
 version: !ruby/object:Gem::Version
-  version: 1.0.3
+  version: 1.0.4
 platform: ruby
 authors:
 - Steve Richert