test_openid_connect 0.1.14 → 0.1.15
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- checksums.yaml +4 -4
- data/lib/omniauth/strategies/test_openid_connect.rb +22 -22
- data/test_openid_connect.gemspec +1 -1
- metadata +1 -1
checksums.yaml
CHANGED
@@ -1,7 +1,7 @@
|
|
1
1
|
---
|
2
2
|
SHA256:
|
3
|
-
metadata.gz:
|
4
|
-
data.tar.gz:
|
3
|
+
metadata.gz: 5a79df8bc165b72ca1df75aa05244d8e182962f2f053cf851e9ee7d59dc29fe7
|
4
|
+
data.tar.gz: 0a7d019baa4d6363848d7ef49af225001714c245b73f27f69373fffc039d40c6
|
5
5
|
SHA512:
|
6
|
-
metadata.gz:
|
7
|
-
data.tar.gz:
|
6
|
+
metadata.gz: d129e6865397c8fb68843995c9ccc63855f72a71fc6abb312546ecfd972f847bb3077b6521d7c6d8ae9a7312e4e7888f17e506e5b1ab5dd189507f45323d693f
|
7
|
+
data.tar.gz: 749ddecb54b51885b4d465d6bbcaf1100b85de4f2cc51d07f16e5bd9ffd1483d0543b44c0adbf4039130acc508e7c4258f2502fd07a7f04672d2192e51484129
|
@@ -92,28 +92,28 @@ module ::OmniAuth
|
|
92
92
|
super.merge(params)
|
93
93
|
end
|
94
94
|
|
95
|
-
|
96
|
-
|
97
|
-
|
98
|
-
|
99
|
-
|
100
|
-
|
101
|
-
|
102
|
-
|
103
|
-
|
104
|
-
|
105
|
-
|
106
|
-
|
107
|
-
|
108
|
-
|
109
|
-
|
110
|
-
|
111
|
-
|
112
|
-
|
113
|
-
|
114
|
-
|
115
|
-
|
116
|
-
|
95
|
+
def callback_phase
|
96
|
+
if request.params["error"] && request.params["error_description"]
|
97
|
+
# verbose_log("Error handled, redirecting\n\n#{response.to_yaml}")
|
98
|
+
return redirect(response)
|
99
|
+
end
|
100
|
+
|
101
|
+
begin
|
102
|
+
discover!
|
103
|
+
|
104
|
+
oauth2_callback_phase = super
|
105
|
+
return oauth2_callback_phase if env['omniauth.error']
|
106
|
+
|
107
|
+
if id_token_info["nonce"].nil? || id_token_info["nonce"].empty? || id_token_info["nonce"] != session.delete("omniauth.nonce")
|
108
|
+
return fail!(:csrf_detected, CallbackError.new(:csrf_detected, "CSRF detected"))
|
109
|
+
end
|
110
|
+
oauth2_callback_phase
|
111
|
+
rescue ::OmniAuth::Oauth2::DiscoveryError => e
|
112
|
+
fail!(:openid_connect_discovery_error, e)
|
113
|
+
rescue JWT::DecodeError => e
|
114
|
+
fail!(:jwt_decode_failed, e)
|
115
|
+
end
|
116
|
+
end
|
117
117
|
|
118
118
|
def id_token_info
|
119
119
|
# Verify the claims in the JWT
|
data/test_openid_connect.gemspec
CHANGED