standard_id 0.2.6 → 0.2.7

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: '088c979a8207e9ed4cf6cdeec8a679985271bea03989b3feeaa187bf28df95f4'
-  data.tar.gz: 0aee93fe07e01a10c1c5133bffac61dae72f59933999c279f1fb54ee178e27e0
+  metadata.gz: dbef18f1449e29f9a2634d4ac069294555d068b0c645e187935bd88133649d49
+  data.tar.gz: fceb6cf31ca8a240ea7969255b3d6954547bfc5f69f620ba4cae1d301b6c6981
 SHA512:
-  metadata.gz: 0ea65251e2b8a5599ee837d0e35ce8204ae5c98fd701fbba18fa2e53b34450af6d30fb54b89149c3539ffefbdadc60a93db9688b94469df08957a307ce62884a
-  data.tar.gz: bf4af5c23d299ff9488b44a4f5e3a30c59f892a155d4ca01491fb6c3b434946ba43d967f8e2e8c4d4ea4cdaa811d855bebfa8d4632430c7f779339475bdb6004
+  metadata.gz: 9f2ee859ac9c6a41f6fc5839cb597e2940d95ae0919e0a86233202f34ecc0f99d94ca4e574b6c9b790ee31e4c42003d358dc0fc5a997a3874f2de0b1b72f57fe
+  data.tar.gz: fab39f1f052246162a6fece0aa612bc8871fccb54e095d58f7d52d0b62b8307c927444043fcddf7b3b54a07da0ffcbceacb0be419379097261eeae8c59c45b24

data/app/controllers/standard_id/api/authorization_controller.rb

@@ -48,7 +48,11 @@ module StandardId
       end
 
       def requires_authentication?
-        response_type&.include?("token")
+        FLOW_STRATEGIES.key?(response_type) && !social_login?
+      end
+
+      def social_login?
+        params[:connection].present?
       end
 
       def redirect_to_login

data/app/controllers/standard_id/api/oauth/tokens_controller.rb

@@ -2,6 +2,8 @@ module StandardId
   module Api
     module Oauth
       class TokensController < BaseController
+        skip_before_action :validate_content_type!
+
         FLOW_STRATEGIES = {
           "client_credentials" => StandardId::Oauth::ClientCredentialsFlow,
           "authorization_code" => StandardId::Oauth::AuthorizationCodeFlow,
@@ -10,6 +12,8 @@ module StandardId
           "passwordless_otp" => StandardId::Oauth::PasswordlessOtpFlow
         }.freeze
 
+        before_action :extract_client_credentials_from_basic_auth
+
         def create
           response_data = flow_strategy_class.new(flow_strategy_params, request).execute
           render json: response_data, status: :ok
@@ -17,6 +21,26 @@ module StandardId
 
         private
 
+        # Support HTTP Basic authentication for client credentials (RFC 6749 Section 2.3.1)
+        def extract_client_credentials_from_basic_auth
+          auth_header = request.headers["Authorization"]
+          return unless auth_header&.start_with?("Basic ")
+
+          # RFC 6749 Section 2.3: client MUST NOT use more than one authentication method
+          if params[:client_id].present? || params[:client_secret].present?
+            raise StandardId::InvalidRequestError,
+              "Client credentials must be sent via Authorization header OR request body, not both"
+          end
+
+          decoded = Base64.strict_decode64(auth_header.split(" ", 2).last)
+          client_id, client_secret = decoded.split(":", 2)
+
+          params[:client_id] = CGI.unescape(client_id)
+          params[:client_secret] = CGI.unescape(client_secret)
+        rescue ArgumentError
+          raise StandardId::InvalidClientError, "Invalid Basic authentication encoding"
+        end
+
         def grant_type
           @grant_type ||= params[:grant_type]
         end

data/lib/standard_id/version.rb

@@ -1,3 +1,3 @@
 module StandardId
-  VERSION = "0.2.6"
+  VERSION = "0.2.7"
 end

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: standard_id
 version: !ruby/object:Gem::Version
-  version: 0.2.6
+  version: 0.2.7
 platform: ruby
 authors:
 - Jaryl Sim