standard_id-apple 0.1.2 → 0.3.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 3c67afb888da7a7a20542d46149eaf86215d02de9c097a757b98223f4c992811
-  data.tar.gz: b905edd16718f7fee932b567250a7caa5136d1cf64f82030668b7bcb8dd40d87
+  metadata.gz: d28b3018e3f7fc20688cfddeb71fbe217a4582cda164801c248e33ea9186b14b
+  data.tar.gz: aa60781200a04bffbc7fe7e3103a2db6cb7309856cf7129f17442f98af4ad6d5
 SHA512:
-  metadata.gz: fdd51606e4a08272c10bae448cecbf0472e8449a5679229013138b5fed0abef6f2e404ef1ef495731a1744c58538fbfc1c141af974ad02c825212a5a51adffc1
-  data.tar.gz: 58e35ebc3804fd52719774db5a63229918e0c89462dca2b7f654a8a57820389549044c1ca42e27cf46155afc6617942084e1ce41b650866c9ba0a049e7599289
+  metadata.gz: c2e6d33e993110034869730d54aba8f507ffb4871ca9f4c6049dd85da2c744e8e0ef097d6954bef6d0ed13fd7f2ac5f7e3504fa7b61ad542358ff03b941442ef
+  data.tar.gz: 2d586fd41238374119a596c002cb2718b7ed81c405e8b8eb4927fd9190fedc621a4cd0998f2867582ad73cf2b6eec022be825a3f9edfadfdfed62a9d88429784

data/.editorconfig

@@ -0,0 +1,15 @@
+root = true
+
+[*]
+indent_style = space
+indent_size = 2
+end_of_line = lf
+charset = utf-8
+trim_trailing_whitespace = true
+insert_final_newline = true
+
+[*.md]
+trim_trailing_whitespace = false
+
+[Makefile]
+indent_style = tab

data/.ruby-version

@@ -1 +1 @@
-3.4.4
+4.0.1

data/AGENTS.md

@@ -0,0 +1,72 @@
+# AGENTS.md - AI Agent Guide for standard_id-apple
+
+`standard_id-apple` is a provider plugin for the [StandardId](https://github.com/rarebit-one/standard_id) authentication engine. It packages a `StandardId::Providers::Apple` implementation for Sign in with Apple, and auto-registers itself with the host StandardId installation via a `Rails::Railtie` so apps that bundle the gem don't need an explicit initializer.
+
+## Quick Reference
+
+```bash
+# Run tests
+bundle exec rspec
+
+# Run a single spec file
+bundle exec rspec spec/standard_id/apple/providers/apple_spec.rb
+
+# Run linting (note: --config flag is required on Ruby 4.0)
+bundle exec rubocop --config .rubocop.yml
+
+# Auto-fix lint issues
+bundle exec rubocop --config .rubocop.yml -A
+```
+
+## Project Structure
+
+```
+standard_id-apple/
+├── lib/standard_id/
+│   ├── apple.rb                         # Top-level require entrypoint
+│   └── apple/
+│       ├── version.rb                   # Gem version constant
+│       ├── railtie.rb                   # Auto-registers provider on after_initialize
+│       └── providers/apple.rb           # StandardId::Providers::Apple implementation
+└── spec/
+    ├── spec_helper.rb                   # Boots a minimal Rails app so the Railtie fires
+    └── standard_id/                     # Provider specs
+```
+
+## Key Patterns
+
+### Provider class
+
+`StandardId::Providers::Apple` inherits from `StandardId::Providers::Base` (defined in the parent `standard_id` gem) and implements the provider contract: `provider_name`, `authorization_url`, `get_user_info`, `config_schema`, plus Apple-specific helpers (`verify_id_token`, `generate_client_secret`, JWKS fetching).
+
+### Railtie auto-registration
+
+`StandardId::Apple::Railtie` runs on `config.after_initialize` and calls `StandardId::ProviderRegistry.register(:apple, StandardId::Providers::Apple)`. Host apps just need the gem in their Gemfile — no initializer required.
+
+### Spec bootstrapping
+
+`spec/spec_helper.rb` defines a tiny `Rails::Application` and calls `Rails.application.initialize!` so the Railtie's `after_initialize` hook fires during the spec run; without this the provider would not appear in the registry.
+
+## Key Files
+
+| File | Purpose |
+|------|---------|
+| `lib/standard_id/apple.rb` | Top-level require entrypoint |
+| `lib/standard_id/apple/railtie.rb` | Provider registration on Rails boot |
+| `lib/standard_id/apple/providers/apple.rb` | Apple provider implementation |
+| `lib/standard_id/apple/version.rb` | Gem version constant |
+| `standard_id-apple.gemspec` | Gem metadata + runtime deps |
+
+## Dependencies
+
+- **standard_id** `~> 0.1`, `>= 0.1.7` (parent engine — provides `Providers::Base`, `ProviderRegistry`, errors)
+- **activesupport** `>= 8.0` (`Time.current`, `present?`/`blank?`, indifferent access)
+- **jwt** `~> 2.7` (id_token decoding, client_secret signing)
+
+Dev: rspec, rubocop, webmock, lefthook.
+
+## Testing
+
+- WebMock stubs Apple's JWKS and token endpoints — never make real network calls in specs.
+- The dummy Rails app in `spec_helper.rb` is intentionally minimal; add config via `StandardId.config.apple_*` setters in individual specs rather than expanding the dummy app.
+- CI runs the full Ruby 4.0.x patch matrix via the shared `rarebit-one/.github` reusable workflow.

data/CHANGELOG.md

@@ -1,5 +1,48 @@
+# Changelog
+
+All notable changes to this project will be documented in this file.
+
+The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.1.0/),
+and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
+
 ## [Unreleased]
 
+## [0.3.0] - 2026-04-29
+
+### Added
+
+- `.editorconfig` and `AGENTS.md` for dev tooling parity with the parent `standard_id` gem.
+- SimpleCov branch coverage reporting in `spec/spec_helper.rb`. No minimum threshold is enforced; `coverage/` is gitignored.
+
+### Changed
+
+- CI and release workflows migrated to the shared `rarebit-one/.github` reusable workflows (`reusable-gem-ci.yml@v1`, `reusable-gem-release.yml@v1`); `.github/workflows/ci.yml` and `release.yml` are now thin shims.
+- CI matrix expanded to all four Ruby 4.0.x patch releases (`4.0.0`, `4.0.1`, `4.0.2`, `4.0.3`) and lint pinned to `4.0.3`. Branch protection will be updated post-merge to require the consolidated `ci / test` aggregator (added in `rarebit-one/.github#6`) instead of per-version checks, so future Ruby version churn won't require updating protection.
+
+### Removed
+
+- **BREAKING:** Dropped support for Ruby < 4.0. `required_ruby_version` is now `>= 4.0`. Aligns with `standard_id` (the parent gem) which made the same break in [rarebit-one/standard_id#195](https://github.com/rarebit-one/standard_id/pull/195) — host apps must upgrade to Ruby 4.0+ before bundling this version.
+
+## [0.2.0] - 2026-04-21
+
+### Added
+
+- Auto-register provider with StandardId via `Rails::Railtie` on `config.after_initialize`, so apps that bundle the gem no longer need an explicit initializer (#30)
+
+## [0.1.2] - 2026-01-13
+
+### Added
+
+- Support nonce and passing custom parameters to Apple Sign In (#2)
+
+## [0.1.1] - 2025-12-24
+
+### Changed
+
+- Standardized config access patterns
+
 ## [0.1.0] - 2025-12-20
 
-- Initial release
+### Added
+
+- Initial release of Apple Sign In provider plugin for StandardId

data/CLAUDE.md

@@ -0,0 +1,26 @@
+# CLAUDE.md
+
+## Worktree-Only Workflow (Enforced)
+
+**All file modifications are blocked in the main checkout.** A PreToolUse hook (`enforce-worktree.sh`) rejects Edit, Write, and NotebookEdit operations targeting files outside a worktree. There are no opt-outs. Do not use Bash to write files in the main checkout either (e.g., `echo >`, `sed -i`, `tee`, `cp`) — the hook cannot intercept shell commands, so this rule is instruction-enforced.
+
+Before writing any code, create a worktree:
+
+```bash
+DEFAULT_BRANCH=$(git symbolic-ref refs/remotes/origin/HEAD 2>/dev/null | sed 's@refs/remotes/origin/@@')
+DEFAULT_BRANCH=${DEFAULT_BRANCH:-main}
+git fetch origin "$DEFAULT_BRANCH"
+git worktree add .worktrees/<name> -b <branch-name> "origin/$DEFAULT_BRANCH"
+```
+
+Then work inside `.worktrees/<name>/` for the rest of the session.
+
+**Naming:** Use the Linear issue identifier if available (e.g., `.worktrees/<identifier>`), a task slug (e.g., `.worktrees/fix-auth-timeout`), or today's date (e.g., `.worktrees/2026-04-01`) as fallback.
+
+**The hook allows modifications only when:**
+
+1. The file is inside a git worktree (detected via `git rev-parse --git-dir` returning a path under `.git/worktrees/`)
+2. Running in a CI/automated context where the checkout is already isolated
+**Why this matters:** Working directly on the main checkout causes cross-contamination between sessions — uncommitted changes, wrong branches, and dirty state leak into unrelated work. Worktrees eliminate this entirely.
+
+See the `/worktree` and `/start` skills for full conventions and flags.

data/lib/standard_id/apple/providers/apple.rb

@@ -240,5 +240,3 @@ module StandardId
     end
   end
 end
-
-StandardId::ProviderRegistry.register(:apple, StandardId::Providers::Apple)

data/lib/standard_id/apple/railtie.rb

@@ -0,0 +1,13 @@
+# frozen_string_literal: true
+
+module StandardId
+  module Apple
+    class Railtie < ::Rails::Railtie
+      config.after_initialize do
+        StandardId::ProviderRegistry.register(:apple, StandardId::Providers::Apple)
+
+        Rails.logger.debug("[StandardId::Apple] registered provider") if Rails.logger
+      end
+    end
+  end
+end

data/lib/standard_id/apple/version.rb

@@ -2,6 +2,6 @@
 
 module StandardId
   module Apple
-    VERSION = "0.1.2"
+    VERSION = "0.3.0"
   end
 end

data/lib/standard_id/apple.rb

@@ -2,3 +2,4 @@ require "active_support/core_ext/numeric/time"
 require "active_support/core_ext/hash/indifferent_access"
 require "standard_id"
 require "standard_id/apple/providers/apple"
+require "standard_id/apple/railtie" if defined?(Rails)

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: standard_id-apple
 version: !ruby/object:Gem::Version
-  version: 0.1.2
+  version: 0.3.0
 platform: ruby
 authors:
 - Jaryl Sim
@@ -65,16 +65,20 @@ executables: []
 extensions: []
 extra_rdoc_files: []
 files:
+- ".editorconfig"
 - ".rspec"
 - ".rubocop.yml"
 - ".ruby-version"
+- AGENTS.md
 - CHANGELOG.md
+- CLAUDE.md
 - CODE_OF_CONDUCT.md
 - LICENSE.txt
 - README.md
 - Rakefile
 - lib/standard_id/apple.rb
 - lib/standard_id/apple/providers/apple.rb
+- lib/standard_id/apple/railtie.rb
 - lib/standard_id/apple/version.rb
 homepage: https://github.com/rarebit-one/standard_id_apple
 licenses:
@@ -83,6 +87,7 @@ metadata:
   homepage_uri: https://github.com/rarebit-one/standard_id_apple
   source_code_uri: https://github.com/rarebit-one/standard_id_apple
   changelog_uri: https://github.com/rarebit-one/standard_id_apple/blob/main/CHANGELOG.md
+  bug_tracker_uri: https://github.com/rarebit-one/standard_id_apple/issues
 rdoc_options: []
 require_paths:
 - lib
@@ -90,14 +95,14 @@ required_ruby_version: !ruby/object:Gem::Requirement
   requirements:
   - - ">="
     - !ruby/object:Gem::Version
-      version: 3.2.0
+      version: '4.0'
 required_rubygems_version: !ruby/object:Gem::Requirement
   requirements:
   - - ">="
     - !ruby/object:Gem::Version
       version: '0'
 requirements: []
-rubygems_version: 3.6.7
+rubygems_version: 4.0.3
 specification_version: 4
 summary: Apple Sign In provider plugin for the StandardId engine.
 test_files: []