strongmind-auth 1.1.130 → 1.1.135

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: fdea7796aff5be69bf43b1698f45b13bdda49b98b82820b39ac994f1fbf9aa7a
-  data.tar.gz: 3e6d886004d96faf9ee693edf1dc26526adbffdc9f884f385b5fab7820aabd43
+  metadata.gz: 379c216fe35cd20101fe7c5c678cf8b1962a6e07e767cc6674600ca62b0c6d82
+  data.tar.gz: 0455fa318d4ee4996196998655037f272136827089ad3a695941502720dbd23d
 SHA512:
-  metadata.gz: 57919bc480e88993f59974441b0be1d9f0e25fd9e0924730410cad98071bf97261771ba192ed7cf0535f6b23aa1968b7af21d630700bd27402b94538709a430c
-  data.tar.gz: 970fe8a81aa9cafdbc32e916c6aea4b4eb76bb297bd00cb91e339377ca098306da6ec743d31003827e2021c96291b51967b62182d592260d7724b85455e9daa9
+  metadata.gz: 5cd3a8019c77fde8657ebc90f19f4e50bbb0e0448441fc0efdd6e87c878267ad5f441154802c2b9238f0cf2c83cf2959881503cf2e3ac376ea47ab07a3a46dde
+  data.tar.gz: 3f872997981262f1972e219def3d1630e16042f3adad73ffde9e0d92abf72c2a603be9b14b10e9fdfeb0e566e43d871c28c202d5b22c5cc5b6a4213c15c8d196

data/app/controllers/concerns/jwt_utilities.rb

@@ -80,6 +80,18 @@ module JwtUtilities
       ENV['IDENTITY_CLIENT_SECRET'])
     begin
       if tokens.nil?
+        if session_data[:refresh_token].nil?
+          Rails.logger.error "[DEBUG] NIL REFRESH TOKEN DETECTED - User: #{current_user&.id}, will cause ArgumentError"
+          
+          Sentry.capture_message("Nil refresh_token detected", extra: {
+            user_id: current_user&.id,
+            session_keys: session_data&.keys,
+            session_data: session_data&.to_h,
+            has_cached_tokens: current_user&.auth_token_cache.present?,
+            controller_action: "#{self.class}#user_jwt"
+          })
+        end
+        
         tokens = auth_client.new_refresh_token(session_data[:refresh_token])
       else
         auth_client.refresh_session(session: tokens)

data/app/controllers/users/omniauth_callbacks_controller.rb

@@ -7,13 +7,19 @@ module Users
 
     def strongmind
       auth = request.env['omniauth.auth']
+      Rails.logger.info "[DEBUG] OAUTH CALLBACK - User: #{@user&.id}, Auth: #{auth.inspect}"
       User.auth_token_cache = auth
       @user = User.with_credentials(auth)
 
       render plain: "You do not have permission to access this application.", status: :unauthorized and return if @user.nil?
 
-      reset_session
-      session[:refresh_token] = auth.credentials['refresh_token']
+    if auth.credentials['refresh_token'].blank?
+      Rails.logger.error "[DEBUG] OAUTH MISSING REFRESH TOKEN - User: #{@user&.id}"
+    end
+    
+    reset_session
+    session[:refresh_token] = auth.credentials['refresh_token']
+      
       flash.delete(:notice)
 
       if @user.persisted?

data/app/controllers/users/sessions_controller.rb

@@ -35,9 +35,16 @@ module Users
       end
     end
 
-    def initiate_backchannel_logout
-      redirect_to user_strongmind_omniauth_authorize_url, allow_other_host: true and return unless current_user
-      user_token_info = fetch_user_token_info
+  def initiate_backchannel_logout
+    Rails.logger.info "[DEBUG] INITIATE BACKCHANNEL LOGOUT - User: #{current_user&.id}, Session: #{session.id}, Refresh Token: #{session[:refresh_token]}"
+    
+    redirect_to user_strongmind_omniauth_authorize_url, allow_other_host: true and return unless current_user
+    
+    if session[:refresh_token].blank? && current_user&.auth_token_cache.blank?
+      Rails.logger.error "[DEBUG] LOGOUT ISSUE DETECTED - User: #{current_user.id}, Session: #{session.id}, No tokens available"
+    end
+    
+    user_token_info = fetch_user_token_info
 
       id_token_hint = user_token_info[:id_token]
       current_user&.invalidate_all_sessions!

data/lib/strongmind/auth/version.rb

@@ -1,5 +1,5 @@
 module Strongmind
   module Auth
-    VERSION = "1.1.130"
+    VERSION = "1.1.135"
   end
 end

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: strongmind-auth
 version: !ruby/object:Gem::Version
-  version: 1.1.130
+  version: 1.1.135
 platform: ruby
 authors:
 - Team Belding
 autorequire:
 bindir: bin
 cert_chain: []
-date: 2025-04-17 00:00:00.000000000 Z
+date: 2025-07-25 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: rails