zendesk_apps_support 4.44.0.alpha.5 → 4.44.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 819e620049b981005127f9ebf2f8beb2eda7869af04dfbf9beb48d5600527371
-  data.tar.gz: 3e19f3ed1983ee0acfb4b321ad4534f4f86ab50c156722b9d8fd12951f8b7eca
+  metadata.gz: 6ab47aa0e5d6274fd6b7527a5bb09dc16c833359464c5535855940892466687e
+  data.tar.gz: 34e8962b318292e95eb5b784bddaea7a409d4fe7feb0edd010aa76021bc13d04
 SHA512:
-  metadata.gz: df1ff143120996fb43f41e6aefd6438519c5a89b27c16a9c60870f963243b9c1d07681cb8b2c9e3dab68a917b1c43c58b17a492f74b760a43fa4c81b003ad35e
-  data.tar.gz: cbe74096f6e394d03fad114b625635af807f194a251ebec7b21b9e58cd80d0fd51475958c1dae62f06488e7363496b48a822c81638e68edbad3e10701838b888
+  metadata.gz: 3783f916fe8f1546a9c9eba93c13e91a7bb1690f8872fb056be89fec7f48f901b491f757a7b5117d7f14bf1bcb902ae2aef58dad4c9e733462c4a4648291eb37
+  data.tar.gz: 3a075c7d184f66d49ab4fe5f569ea8196eca5ef51288fad0a36035d9de0058cea9868047cece4f0fca78351944133d05132e53a511113238c1cf2262f34a3145

data/config/locales/en.yml

@@ -281,6 +281,11 @@ en:
             invalid_url: '%{field} must be a valid URL, got "%{value}".'
             password_parameter_type_deprecated: 'Password parameter type can no longer
               be used. Use Secure settings instead. Learn more: %{link}.'
+            field_requires_secure_parameter: "%{field} cannot be defined in a non-secure
+              parameter."
+            field_cannot_be_empty: "%{field} cannot be empty."
+            field_contains_invalid_values: "%{field} contains invalid values: %{values}."
+            field_contains_invalid_keys: "%{field} contains invalid keys: %{keys}."
         warning:
           app_build:
             deprecated_version: You are targeting a deprecated version of the framework.

data/config/locales/translations/zendesk_apps_support.yml

@@ -633,3 +633,19 @@ parts:
       key: "txt.apps.admin.error.app_build.password_parameter_type_deprecated"
       title: "App builder job: Password parameter type is deprecated"
       value: "Password parameter type can no longer be used. Use Secure settings instead. Learn more: %{link}."
+  - translation:
+      key: "txt.apps.admin.error.app_build.field_requires_secure_parameter"
+      title: "App builder job: Error when parameter field requires secure setting set to true. Placeholder %{field} shows parameter field along with parameter name like \"parameter[name='param'].scopes\" found in the supplied manifest file."
+      value: "%{field} cannot be defined in a non-secure parameter."
+  - translation:
+      key: "txt.apps.admin.error.app_build.field_cannot_be_empty"
+      title: "App builder job: field cannot be empty. %{field} will be replaced with empty fields such as \"name\", \"author\" \"parameter[name='param'].scopes\" etc in the supplied manifest file."
+      value: "%{field} cannot be empty."
+  - translation:
+      key: "txt.apps.admin.error.app_build.field_contains_invalid_values"
+      title: "App builder job: Error for invalid field values. Placeholder %{field} shows parameter fields like \"parameter[name='param'].scopes\" in the supplied manifest file, %{values} shows the invalid values in the user input corresponding to those fields."
+      value: "%{field} contains invalid values: %{values}."
+  - translation:
+      key: "txt.apps.admin.error.app_build.field_contains_invalid_keys"
+      title: "App builder job: Error for invalid field keys. Placeholder %{field} shows parameter fields like \"parameter[name='param'].scopes\" provided in the supplied manifest file, %{keys} shows the invalid keys found within the field."
+      value: "%{field} contains invalid keys: %{keys}."

data/lib/zendesk_apps_support/manifest/parameter.rb

@@ -4,7 +4,7 @@ module ZendeskAppsSupport
   class Manifest
     class Parameter
       TYPES = %w[text password checkbox url number multiline hidden oauth].freeze
-      ATTRIBUTES = %i[name type required secure default].freeze
+      ATTRIBUTES = %i[name type required secure default scopes].freeze
       attr_reader(*ATTRIBUTES)
       def default?
         @has_default
@@ -17,6 +17,7 @@ module ZendeskAppsSupport
         @secure = p['secure'] || false
         @has_default = p.key? 'default'
         @default = p['default'] if @has_default
+        @scopes = p['scopes']
       end
     end
   end

data/lib/zendesk_apps_support/package.rb

@@ -36,9 +36,10 @@ module ZendeskAppsSupport
       skip_marketplace_translations = options.fetch(:skip_marketplace_translations, false)
       error_on_password_parameter = options.fetch(:error_on_password_parameter, false)
       validate_custom_objects_v2 = options.fetch(:validate_custom_objects_v2, false)
+      validate_scopes_for_secure_parameter = options.fetch(:validate_scopes_for_secure_parameter, false)
 
       errors = []
-      errors << Validations::Manifest.call(self, error_on_password_parameter: error_on_password_parameter)
+      errors << Validations::Manifest.call(self, error_on_password_parameter: error_on_password_parameter, validate_scopes_for_secure_parameter: validate_scopes_for_secure_parameter)
 
       if has_valid_manifest?(errors)
         errors << Validations::Marketplace.call(self) if marketplace

data/lib/zendesk_apps_support/validations/manifest.rb

@@ -11,9 +11,10 @@ module ZendeskAppsSupport
       OAUTH_REQUIRED_FIELDS = %w[client_id client_secret authorize_uri access_token_uri].freeze
       PARAMETER_TYPES = ZendeskAppsSupport::Manifest::Parameter::TYPES
       OAUTH_MANIFEST_LINK = 'https://developer.zendesk.com/apps/docs/developer-guide/manifest#oauth'
+      SECURE_PARAM_SCOPES = %w[header body url_host url_path jwt_secret_key jwt_claim basic_auth_username basic_auth_password].freeze
 
       class << self
-        def call(package, error_on_password_parameter: false)
+        def call(package, error_on_password_parameter: false, validate_scopes_for_secure_parameter: false)
           unless package.has_file?('manifest.json')
             nested_manifest = package.files.find { |file| file =~ %r{\A[^/]+?/manifest\.json\Z} }
             if nested_manifest
@@ -24,7 +25,7 @@ module ZendeskAppsSupport
 
           package.warnings << password_parameter_warning if !error_on_password_parameter && password_param_present?(package.manifest)
 
-          collate_manifest_errors(package, error_on_password_parameter)
+          collate_manifest_errors(package, error_on_password_parameter, validate_scopes_for_secure_parameter)
         rescue JSON::ParserError => e
           return [ValidationError.new(:manifest_not_json, errors: e)]
         rescue ZendeskAppsSupport::Manifest::OverrideError => e
@@ -37,7 +38,7 @@ module ZendeskAppsSupport
           manifest.parameters.any? { |p| p.type == 'password' }
         end
 
-        def collate_manifest_errors(package, error_on_password_parameter)
+        def collate_manifest_errors(package, error_on_password_parameter, validate_scopes_for_secure_parameter)
           manifest = package.manifest
 
           errors = [
@@ -46,7 +47,7 @@ module ZendeskAppsSupport
             oauth_error(manifest),
             default_locale_error(manifest, package),
             validate_urls(manifest),
-            validate_parameters(manifest),
+            validate_parameters(manifest, validate_scopes_for_secure_parameter),
             if manifest.requirements_only? || manifest.marketing_only?
               [ ban_location(manifest),
                 ban_framework_version(manifest) ]
@@ -87,7 +88,7 @@ module ZendeskAppsSupport
           errors
         end
 
-        def validate_parameters(manifest)
+        def validate_parameters(manifest, validate_scopes_for_secure_parameter)
           if manifest.marketing_only?
             marketing_only_errors(manifest)
           else
@@ -97,7 +98,8 @@ module ZendeskAppsSupport
               invalid_type_error(manifest),
               too_many_oauth_parameters(manifest),
               oauth_cannot_be_secure(manifest),
-              name_as_parameter_name_error(manifest)
+              name_as_parameter_name_error(manifest),
+              *(validate_scopes_for_secure_parameter ? invalid_secure_param_scopes_errors(manifest) : invalid_scopes_key_error(manifest)),
             ]
           end
         end
@@ -110,6 +112,52 @@ module ZendeskAppsSupport
           end
         end
 
+        def invalid_scopes_key_error(manifest)
+          errors = []
+          manifest.parameters.each do |parameter|
+            next if parameter.scopes.nil?
+
+            errors << ValidationError.new(:field_contains_invalid_keys,
+                                        field: "parameters[name=\"#{parameter.name}\"]",
+                                        keys: 'scopes')
+          end
+          errors
+        end
+
+        def invalid_secure_param_scopes_errors(manifest)
+          errors = []
+
+          manifest.parameters.each do |parameter|
+            next if parameter.scopes.nil?
+
+            unless parameter.secure
+              errors << ValidationError.new(:field_requires_secure_parameter, field: "parameters[name=\"#{parameter.name}\"].scopes")
+            end
+
+            unless parameter.scopes.is_a?(Array)
+              errors << ValidationError.new(:unacceptable_array,
+                                          field: "parameters[name=\"#{parameter.name}\"].scopes",
+                                          value: parameter.scopes.class.to_s)
+              next
+            end
+
+            if parameter.scopes.empty?
+              errors << ValidationError.new(:field_cannot_be_empty, field: "parameters[name=\"#{parameter.name}\"].scopes")
+            end
+
+            invalid_scopes = parameter.scopes - SECURE_PARAM_SCOPES
+            if invalid_scopes.any?
+                errors << ValidationError.new(
+                  :field_contains_invalid_values,
+                  field: "parameters[name=\"#{parameter.name}\"].scopes",
+                  values: invalid_scopes.join(I18n.t('txt.apps.admin.error.app_build.listing_comma'))
+                )
+            end
+          end
+
+          errors
+        end
+
         def marketing_only_errors(manifest)
           [
             ban_parameters(manifest),
@@ -261,12 +309,12 @@ module ZendeskAppsSupport
           end
 
           invalid_required = manifest.parameters.map do |parameter|
-            validate_boolean(parameter.required, "parameters.#{parameter.name}.required")
+            validate_boolean(parameter.required, "parameters[name=\"#{parameter.name}\"].required")
           end.compact
           return invalid_required if invalid_required.any?
 
           invalid_secure = manifest.parameters.map do |parameter|
-            validate_boolean(parameter.secure, "parameters.#{parameter.name}.secure")
+            validate_boolean(parameter.secure, "parameters[name=\"#{parameter.name}\"].secure")
           end.compact
           return invalid_secure if invalid_secure.any?
         end

data/lib/zendesk_apps_support/version.rb

@@ -1,3 +1,3 @@
 module ZendeskAppsSupport
-  VERSION = '4.44.0.alpha.5'
+  VERSION = "4.44.0"
 end

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: zendesk_apps_support
 version: !ruby/object:Gem::Version
-  version: 4.44.0.alpha.5
+  version: 4.44.0
 platform: ruby
 authors:
 - James A. Rosen
@@ -11,7 +11,7 @@ authors:
 autorequire:
 bindir: bin
 cert_chain: []
-date: 2025-10-29 00:00:00.000000000 Z
+date: 2025-11-06 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: i18n