standard_id 0.48.1 → 0.49.0

data/lib/standard_id.rb

@@ -38,6 +38,7 @@ require "standard_id/auth_lineage"
 require "standard_id/account_cleanup"
 require "standard_id/oauth/audience_profile_resolver"
 require "standard_id/oauth/audience_scope_resolver"
+require "standard_id/oauth/audience_resolver"
 require "standard_id/oauth/base_request_flow"
 require "standard_id/oauth/token_lifetime_resolver"
 require "standard_id/oauth/oauth_session_persistence"
@@ -47,6 +48,8 @@ require "standard_id/oauth/authorization_code_flow"
 require "standard_id/oauth/password_flow"
 require "standard_id/oauth/refresh_token_flow"
 require "standard_id/oauth/social_flow"
+require "standard_id/oauth/direct_mint_flow"
+require "standard_id/token_minter"
 require "standard_id/oauth/authorization_flow"
 require "standard_id/oauth/authorization_code_authorization_flow"
 require "standard_id/oauth/implicit_authorization_flow"
@@ -57,6 +60,7 @@ require "standard_id/oauth/passwordless_otp_flow"
 require "standard_id/oauth/discovery_resolver"
 require "standard_id/oauth/grant_types"
 require "standard_id/oauth/discovery_document"
+require "standard_id/oauth/protected_resource_document"
 require "standard_id/routing"
 require "standard_id/oauth/consent_payload"
 require "standard_id/oauth/client_registration"

data/lib/tasks/standard_id_tasks.rake

@@ -39,8 +39,15 @@ namespace :standard_id do
       )
     end
 
+    desc "Delete dynamically registered clients that were deregistered, or never authorized, more than GRACE_DAYS ago (default 7)"
+    task dynamic_clients: :environment do
+      StandardId::PurgeStaleDynamicClientsJob.perform_now(
+        stale_after_seconds: StandardId::RakeHelpers.grace_period_seconds
+      )
+    end
+
     desc "Run all StandardId cleanup jobs with GRACE_DAYS (default 7)"
-    task all: [:sessions, :refresh_tokens, :authorization_codes, :code_challenges]
+    task all: [:sessions, :refresh_tokens, :authorization_codes, :code_challenges, :dynamic_clients]
   end
 end
 

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: standard_id
 version: !ruby/object:Gem::Version
-  version: 0.48.1
+  version: 0.49.0
 platform: ruby
 authors:
 - Jaryl Sim
@@ -123,6 +123,7 @@ files:
 - app/controllers/concerns/standard_id/passwordless_flow.rb
 - app/controllers/concerns/standard_id/passwordless_strategy.rb
 - app/controllers/concerns/standard_id/rate_limit_handling.rb
+- app/controllers/concerns/standard_id/resource_server.rb
 - app/controllers/concerns/standard_id/sentry_context.rb
 - app/controllers/concerns/standard_id/set_current_request_details.rb
 - app/controllers/concerns/standard_id/social_authentication.rb
@@ -143,6 +144,7 @@ files:
 - app/controllers/standard_id/api/userinfo_controller.rb
 - app/controllers/standard_id/api/well_known/jwks_controller.rb
 - app/controllers/standard_id/api/well_known/oauth_authorization_server_controller.rb
+- app/controllers/standard_id/api/well_known/oauth_protected_resource_controller.rb
 - app/controllers/standard_id/api/well_known/openid_configuration_controller.rb
 - app/controllers/standard_id/web/account_controller.rb
 - app/controllers/standard_id/web/auth/callback/providers_controller.rb
@@ -172,6 +174,7 @@ files:
 - app/jobs/standard_id/cleanup_expired_refresh_tokens_job.rb
 - app/jobs/standard_id/cleanup_expired_sessions_job.rb
 - app/jobs/standard_id/password_reset_delivery_job.rb
+- app/jobs/standard_id/purge_stale_dynamic_clients_job.rb
 - app/jobs/standard_id/secure_mail_delivery_job.rb
 - app/mailers/standard_id/application_mailer.rb
 - app/mailers/standard_id/password_reset_mailer.rb
@@ -239,6 +242,7 @@ files:
 - db/migrate/20261002000000_create_standard_id_social_identities.rb
 - db/migrate/20261004000000_add_auth_method_to_standard_id_refresh_tokens.rb
 - db/migrate/20261020000000_add_client_application_id_to_standard_id_refresh_tokens.rb
+- db/migrate/20261020120000_add_registration_access_token_digest_to_standard_id_client_applications.rb
 - lib/generators/standard_id/install/install_generator.rb
 - lib/generators/standard_id/install/templates/standard_id.rb
 - lib/standard_id.rb
@@ -278,6 +282,7 @@ files:
 - lib/standard_id/migration_check.rb
 - lib/standard_id/migration_helpers.rb
 - lib/standard_id/oauth/audience_profile_resolver.rb
+- lib/standard_id/oauth/audience_resolver.rb
 - lib/standard_id/oauth/audience_scope_resolver.rb
 - lib/standard_id/oauth/authorization_code_authorization_flow.rb
 - lib/standard_id/oauth/authorization_code_flow.rb
@@ -286,6 +291,7 @@ files:
 - lib/standard_id/oauth/client_credentials_flow.rb
 - lib/standard_id/oauth/client_registration.rb
 - lib/standard_id/oauth/consent_payload.rb
+- lib/standard_id/oauth/direct_mint_flow.rb
 - lib/standard_id/oauth/discovery_document.rb
 - lib/standard_id/oauth/discovery_resolver.rb
 - lib/standard_id/oauth/grant_types.rb
@@ -293,6 +299,7 @@ files:
 - lib/standard_id/oauth/oauth_session_persistence.rb
 - lib/standard_id/oauth/password_flow.rb
 - lib/standard_id/oauth/passwordless_otp_flow.rb
+- lib/standard_id/oauth/protected_resource_document.rb
 - lib/standard_id/oauth/refresh_token_flow.rb
 - lib/standard_id/oauth/social_flow.rb
 - lib/standard_id/oauth/subflows/base.rb
@@ -324,6 +331,7 @@ files:
 - lib/standard_id/testing/factory_bot.rb
 - lib/standard_id/testing/provider_examples.rb
 - lib/standard_id/testing/request_helpers.rb
+- lib/standard_id/token_minter.rb
 - lib/standard_id/utils/callable_parameter_filter.rb
 - lib/standard_id/utils/ip_normalizer.rb
 - lib/standard_id/version.rb