yes 2.4.4 → 2.5.0
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- checksums.yaml +4 -4
- data/CHANGELOG.md +47 -0
- data/lib/yes/version.rb +1 -1
- metadata +9 -9
checksums.yaml
CHANGED
|
@@ -1,7 +1,7 @@
|
|
|
1
1
|
---
|
|
2
2
|
SHA256:
|
|
3
|
-
metadata.gz:
|
|
4
|
-
data.tar.gz:
|
|
3
|
+
metadata.gz: 27fa6e481ab4f64857ba0da8b4a5467e007d335da39c9c727e305e114c91a5ec
|
|
4
|
+
data.tar.gz: 40d8b9b5c42e36f1e0b9b51b932d4b54bdc10d924a8657cf440c6e21763f62b2
|
|
5
5
|
SHA512:
|
|
6
|
-
metadata.gz:
|
|
7
|
-
data.tar.gz:
|
|
6
|
+
metadata.gz: 73e90e974f52d312bf4971695b7ced952abf55b338326a4034be85ddc905b81eddb962bc135123c41759a13d9baca8080a02bfae48b0c684f62ab5cb55639eae
|
|
7
|
+
data.tar.gz: 96cfeae522ef6c4155623c7d860a6cc9dce190ec4c1177d4c173e1d0911dfe3f21a226fe6c323ad41d237cdc75caabc3e8c43e593fb5898a37e9927f1b58f913
|
data/CHANGELOG.md
CHANGED
|
@@ -2,6 +2,53 @@
|
|
|
2
2
|
|
|
3
3
|
All notable changes to this project will be documented in this file.
|
|
4
4
|
|
|
5
|
+
## [2.5.0] - 2026-10-08
|
|
6
|
+
|
|
7
|
+
### yes-core
|
|
8
|
+
|
|
9
|
+
#### Added
|
|
10
|
+
- `Configuration#auth_error_classes` returns `Yes::Core::AuthenticationError` plus the error classes
|
|
11
|
+
of the configured auth adapter. The command API now uses it to decide which errors it rescues.
|
|
12
|
+
|
|
13
|
+
### yes-read-api
|
|
14
|
+
|
|
15
|
+
#### Fixed
|
|
16
|
+
- The read API now rescues the error classes of the configured auth adapter like the command API
|
|
17
|
+
does, so e.g. an expired token yields 401 instead of an unhandled error.
|
|
18
|
+
- A malformed bearer token no longer fails the request with an unhandled error when tracing is
|
|
19
|
+
enabled; the controller answers 401.
|
|
20
|
+
|
|
21
|
+
#### Security
|
|
22
|
+
- `QueriesController` now hands the request authorizer only the filter parameter the query applies.
|
|
23
|
+
It used to pass the raw params, with both `filters` and `filter_definition`, although a basic
|
|
24
|
+
query applies only `filters` and an advanced query (the `advanced` action, or a persisted filter
|
|
25
|
+
given by `filter_id`) applies only `filter_definition`. A request authorizer that chooses what to
|
|
26
|
+
authorize by which of the two is present could therefore authorize parameters the query ignores,
|
|
27
|
+
for example `GET /:model?filter_definition[scope][company_ids]=<own company>` passing the check
|
|
28
|
+
while the query returned unscoped rows. The query is built from the same reduced params, so
|
|
29
|
+
authorizers that bound a request by changing them keep working. Subclasses that call the request
|
|
30
|
+
authorizer from their own actions should drop the ignored parameter the same way.
|
|
31
|
+
|
|
32
|
+
### yes-command-api
|
|
33
|
+
|
|
34
|
+
#### Fixed
|
|
35
|
+
- A malformed bearer token no longer fails the request with an unhandled error when tracing is
|
|
36
|
+
enabled; the controller answers 401.
|
|
37
|
+
|
|
38
|
+
## [2.4.5] - 2026-09-23
|
|
39
|
+
|
|
40
|
+
### yes-core
|
|
41
|
+
|
|
42
|
+
#### Added
|
|
43
|
+
- `CommandHandling::EventPublisher` records every scalar top-level event metadata entry (string,
|
|
44
|
+
symbol, number, boolean) on the `Publish Event` span as its own `event.metadata.<key>`
|
|
45
|
+
attribute, next to the existing `event.metadata` JSON attribute. A tracing backend that
|
|
46
|
+
exports span attributes by name can then derive metrics dimensioned by a metadata key.
|
|
47
|
+
Symbols are recorded as strings; nil, hash and array values, and numerics other than Integer
|
|
48
|
+
and Float, are skipped (they stay in the JSON attribute). Stateless command handlers
|
|
49
|
+
(`Commands::Stateless::Handler`) are not covered: their `Publish Event` spans still carry only
|
|
50
|
+
the JSON metadata attribute.
|
|
51
|
+
|
|
5
52
|
## [2.4.4] - 2026-09-15
|
|
6
53
|
|
|
7
54
|
### yes-core
|
data/lib/yes/version.rb
CHANGED
metadata
CHANGED
|
@@ -1,7 +1,7 @@
|
|
|
1
1
|
--- !ruby/object:Gem::Specification
|
|
2
2
|
name: 'yes'
|
|
3
3
|
version: !ruby/object:Gem::Version
|
|
4
|
-
version: 2.
|
|
4
|
+
version: 2.5.0
|
|
5
5
|
platform: ruby
|
|
6
6
|
authors:
|
|
7
7
|
- Nico Ritsche
|
|
@@ -15,56 +15,56 @@ dependencies:
|
|
|
15
15
|
requirements:
|
|
16
16
|
- - '='
|
|
17
17
|
- !ruby/object:Gem::Version
|
|
18
|
-
version: 2.
|
|
18
|
+
version: 2.5.0
|
|
19
19
|
type: :runtime
|
|
20
20
|
prerelease: false
|
|
21
21
|
version_requirements: !ruby/object:Gem::Requirement
|
|
22
22
|
requirements:
|
|
23
23
|
- - '='
|
|
24
24
|
- !ruby/object:Gem::Version
|
|
25
|
-
version: 2.
|
|
25
|
+
version: 2.5.0
|
|
26
26
|
- !ruby/object:Gem::Dependency
|
|
27
27
|
name: yes-command-api
|
|
28
28
|
requirement: !ruby/object:Gem::Requirement
|
|
29
29
|
requirements:
|
|
30
30
|
- - '='
|
|
31
31
|
- !ruby/object:Gem::Version
|
|
32
|
-
version: 2.
|
|
32
|
+
version: 2.5.0
|
|
33
33
|
type: :runtime
|
|
34
34
|
prerelease: false
|
|
35
35
|
version_requirements: !ruby/object:Gem::Requirement
|
|
36
36
|
requirements:
|
|
37
37
|
- - '='
|
|
38
38
|
- !ruby/object:Gem::Version
|
|
39
|
-
version: 2.
|
|
39
|
+
version: 2.5.0
|
|
40
40
|
- !ruby/object:Gem::Dependency
|
|
41
41
|
name: yes-core
|
|
42
42
|
requirement: !ruby/object:Gem::Requirement
|
|
43
43
|
requirements:
|
|
44
44
|
- - '='
|
|
45
45
|
- !ruby/object:Gem::Version
|
|
46
|
-
version: 2.
|
|
46
|
+
version: 2.5.0
|
|
47
47
|
type: :runtime
|
|
48
48
|
prerelease: false
|
|
49
49
|
version_requirements: !ruby/object:Gem::Requirement
|
|
50
50
|
requirements:
|
|
51
51
|
- - '='
|
|
52
52
|
- !ruby/object:Gem::Version
|
|
53
|
-
version: 2.
|
|
53
|
+
version: 2.5.0
|
|
54
54
|
- !ruby/object:Gem::Dependency
|
|
55
55
|
name: yes-read-api
|
|
56
56
|
requirement: !ruby/object:Gem::Requirement
|
|
57
57
|
requirements:
|
|
58
58
|
- - '='
|
|
59
59
|
- !ruby/object:Gem::Version
|
|
60
|
-
version: 2.
|
|
60
|
+
version: 2.5.0
|
|
61
61
|
type: :runtime
|
|
62
62
|
prerelease: false
|
|
63
63
|
version_requirements: !ruby/object:Gem::Requirement
|
|
64
64
|
requirements:
|
|
65
65
|
- - '='
|
|
66
66
|
- !ruby/object:Gem::Version
|
|
67
|
-
version: 2.
|
|
67
|
+
version: 2.5.0
|
|
68
68
|
description: Event sourcing framework for Ruby on Rails applications
|
|
69
69
|
email:
|
|
70
70
|
- nico.ritsche@yousty.ch
|