standard_id 0.51.1 → 0.51.2
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- checksums.yaml +4 -4
- data/CHANGELOG.md +6 -0
- data/lib/standard_id/config/callable_validator.rb +7 -4
- data/lib/standard_id/version.rb +1 -1
- metadata +1 -1
checksums.yaml
CHANGED
|
@@ -1,7 +1,7 @@
|
|
|
1
1
|
---
|
|
2
2
|
SHA256:
|
|
3
|
-
metadata.gz:
|
|
4
|
-
data.tar.gz:
|
|
3
|
+
metadata.gz: 18c7955706f1fbe444d4bd7db052f615acfb01d7310f1a9c7088717017b864c5
|
|
4
|
+
data.tar.gz: 65435d9e1d57e2bfcbd479b5ecd81353d2961f831ad3f53db911bf830d20d89e
|
|
5
5
|
SHA512:
|
|
6
|
-
metadata.gz:
|
|
7
|
-
data.tar.gz:
|
|
6
|
+
metadata.gz: ec9734a8609d74823eb5b5a1b7b395d28f11c38268a19ff305618145777543ac13a5671c54f66cf2ecae5f68a9924e54dfeed495726dbc554f591d7f52f07078
|
|
7
|
+
data.tar.gz: 8616544546bd160e81490b665f40e5d4b64b03b2a612128efe896c4aacea446dbd240a8518e9d9c9a1e8bed1ef491421a406deb22ccfc52bd73f03fc6dab6a8e
|
data/CHANGELOG.md
CHANGED
|
@@ -7,6 +7,12 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
|
|
|
7
7
|
|
|
8
8
|
## [Unreleased]
|
|
9
9
|
|
|
10
|
+
## [0.51.2] - 2026-10-21
|
|
11
|
+
|
|
12
|
+
### Fixed
|
|
13
|
+
|
|
14
|
+
- **`claim_resolvers` and `custom_claims` may declare `profile:`.** The grant flows (and `TokenMinter`) have always passed the bound profile as `profile:` in the resolver context, but the boot-time `Config::CallableValidator` rejected the keyword, so a resolver could not actually use it — including the explicit `TokenMinter.mint(profile:)` added in 0.51.0.
|
|
15
|
+
|
|
10
16
|
## [0.51.1] - 2026-10-20
|
|
11
17
|
|
|
12
18
|
### Added
|
|
@@ -42,9 +42,9 @@ module StandardId
|
|
|
42
42
|
keywords: %i[account auth_method provider request flow]
|
|
43
43
|
},
|
|
44
44
|
"oauth.custom_claims" => {
|
|
45
|
-
signature: "(account:, client:, request:, audience:)",
|
|
45
|
+
signature: "(account:, client:, request:, audience:, profile:)",
|
|
46
46
|
kind: :keyword,
|
|
47
|
-
keywords: %i[account client request audience]
|
|
47
|
+
keywords: %i[account client request audience profile]
|
|
48
48
|
},
|
|
49
49
|
"oauth.audience_resolver" => {
|
|
50
50
|
signature: "(client:, audience:, resource:, request:)",
|
|
@@ -73,8 +73,11 @@ module StandardId
|
|
|
73
73
|
}
|
|
74
74
|
}.freeze
|
|
75
75
|
|
|
76
|
-
# Keys available to claim_resolvers callables at invocation time
|
|
77
|
-
|
|
76
|
+
# Keys available to claim_resolvers callables at invocation time
|
|
77
|
+
# (TokenGrantFlow#claim_resolvers_context). `profile` is the profile the
|
|
78
|
+
# audience binding resolved, or the one passed to TokenMinter; nil when
|
|
79
|
+
# the audience has no binding.
|
|
80
|
+
CLAIM_RESOLVER_KEYWORDS = %i[client account request audience profile].freeze
|
|
78
81
|
|
|
79
82
|
class << self
|
|
80
83
|
def validate!(config = StandardId.config)
|
data/lib/standard_id/version.rb
CHANGED