standard_audit 0.13.2 → 0.13.3

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 5904e6e332f04e94ece55c2be87dc02fd2e243d846b5a7ded70e40af18831996
-  data.tar.gz: eca2147536455ac8dec6b640c272b701468946568c9dde1173cd373cdac2572d
+  metadata.gz: 77f38f95622eab13dc70d4376ad9694a3bbb03d3d54f5f2c43f63012e041ea23
+  data.tar.gz: 5d68228d9da02a23808db8cc2588dc358df1dc7f7a82d86da4447d98038f6411
 SHA512:
-  metadata.gz: 62aaf894a1583cbee375ea6184fee0a66bdaf9823d2ccae9212fcb0339ad992741e0b00d0f9a88a83c6fc9325c9beb25c1e8a400df806a1ff9ed9447504814d2
-  data.tar.gz: aac06818dd7aac827e96d4e6c82a03d26d7ddc7897d51313770d13297296f7e855268d8eac062cef12fcb7c693bc636f2a8e342f13df690313f846d9c8536fce
+  metadata.gz: c5ca114c4894594f1e0de803d0d0e207bd308f887e130237af3d967a4ed33bc476ac72f28b1cff8b83af5f2d5c56e158542a917c560680c96e3f686ec339c6ec
+  data.tar.gz: 991e7cbfd6c21c73f54bc1bc1ed64aa1df8faaa2a6d44dfdf75222ab79911eb462de275ca086d74ef72108db70bad6df1f8c9f65fab9ec7ea115c0bb5bb99f1e

data/CHANGELOG.md

@@ -7,6 +7,18 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 
 ## [Unreleased]
 
+## [0.13.3] - 2026-10-21
+
+### Fixed
+
+- The default `scope_extractor` returns the payload's `scope:` only when it is a
+  record (responds to `to_global_id`). standard_id publishes `scope:` as a
+  Symbol or String (the OAuth scope or auth plane), and the old default passed it
+  to `to_global_id`, so those events failed to write (`NoMethodError`,
+  fundbright-web FUNDBRIGHT-WEB-41). A non-record scope now falls through to
+  `current_scope_resolver`, like an absent one. A custom `scope_extractor` and an
+  explicit `scope:` on `StandardAudit.record` are unchanged.
+
 ## [0.13.2] - 2026-10-02
 
 ### Fixed

data/README.md

@@ -508,7 +508,7 @@ StandardAudit.configure(baseline: true) do |config|
   # Defaults shown below.
   config.actor_extractor  = ->(payload) { payload[:actor] }
   config.target_extractor = ->(payload) { payload[:target] }
-  config.scope_extractor  = ->(payload) { payload[:scope] }
+  config.scope_extractor  = ->(payload) { payload[:scope] } # default keeps it only if it responds to to_global_id
 
   # -- Current Attribute Resolvers --
   # Fallbacks used when payload values are nil.

data/lib/standard_audit/configuration.rb

@@ -24,7 +24,15 @@ module StandardAudit
 
       @actor_extractor = ->(payload) { payload[:actor] }
       @target_extractor = ->(payload) { payload[:target] }
-      @scope_extractor = ->(payload) { payload[:scope] }
+      # Only a record can be a scope (it is stored by GlobalID). Payloads also
+      # use `scope:` for other things: standard_id publishes the OAuth scope
+      # or auth plane there as a Symbol/String, which would raise NoMethodError
+      # on `to_global_id` at write time. Anything else falls through to
+      # `current_scope_resolver`.
+      @scope_extractor = ->(payload) {
+        scope = payload[:scope]
+        scope if scope.respond_to?(:to_global_id)
+      }
 
       # Tries StandardId's `Current.account` first, then the Rails-generator
       # convention `Current.user`. Each is respond_to?-guarded, so an app that

data/lib/standard_audit/version.rb

@@ -1,3 +1,3 @@
 module StandardAudit
-  VERSION = "0.13.2"
+  VERSION = "0.13.3"
 end

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: standard_audit
 version: !ruby/object:Gem::Version
-  version: 0.13.2
+  version: 0.13.3
 platform: ruby
 authors:
 - Jaryl Sim