zoreal-oauth2 0.1.5 → 0.1.7
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- checksums.yaml +4 -4
- data/README.md +11 -0
- data/lib/zoreal/oauth2/version.rb +1 -1
- metadata +1 -1
checksums.yaml
CHANGED
|
@@ -1,7 +1,7 @@
|
|
|
1
1
|
---
|
|
2
2
|
SHA256:
|
|
3
|
-
metadata.gz:
|
|
4
|
-
data.tar.gz:
|
|
3
|
+
metadata.gz: f78b8895cbf253ff1aec84a07b2a993710196e51ae8de44d8e7f479e4fd1c793
|
|
4
|
+
data.tar.gz: d4085cf95a75c333cacc375206eb1f7e64b5f7ff78772dfd299c8069f85f2456
|
|
5
5
|
SHA512:
|
|
6
|
-
metadata.gz:
|
|
7
|
-
data.tar.gz:
|
|
6
|
+
metadata.gz: a71749b96a81235c3ac3afe408f53e7b39cba1aa7cc56803764101a705d37c2ed5d2685f90a520c1b665ffc88bcb947fb8434acfefa0794280a6b053605d39e3
|
|
7
|
+
data.tar.gz: 45cb3d857ef81c342f314fed754a551322c6a6fa53163efb585ea38d741b9f7703c3f855ae48e8665704f5652946c76e7d0af02fad76ae1df2a3c53025e1ecdc
|
data/README.md
CHANGED
|
@@ -1,5 +1,7 @@
|
|
|
1
1
|
# zoreal-oauth2
|
|
2
2
|
|
|
3
|
+
[](https://rubygems.org/gems/zoreal-oauth2) [](https://github.com/Bynn-Intelligence/zoreal-oauth2-ruby/actions/workflows/ci.yml) [](./LICENSE)
|
|
4
|
+
|
|
3
5
|
Login with ZOREAL for Ruby backends: the relying-party half of the flow that
|
|
4
6
|
[`@zoreal/oauth2-react`](https://github.com/Bynn-Intelligence/zoreal-oauth2-react)
|
|
5
7
|
starts in the browser.
|
|
@@ -385,6 +387,15 @@ end
|
|
|
385
387
|
normalized. Production is `https://id.zoreal.com`; override `issuer:` only
|
|
386
388
|
when pointing at a non-production provider you were given.
|
|
387
389
|
|
|
390
|
+
## Verifying this release
|
|
391
|
+
|
|
392
|
+
Every version is published from GitHub Actions by [RubyGems trusted publishing](https://guides.rubygems.org/trusted-publishing/): the workflow authenticates to rubygems.org over OIDC and no long-lived API key is stored. Each build is also attested with [Sigstore](https://www.sigstore.dev/) build provenance and recorded in a public transparency log, so you can confirm which commit and workflow produced the gem:
|
|
393
|
+
|
|
394
|
+
```sh
|
|
395
|
+
gem fetch zoreal-oauth2
|
|
396
|
+
gh attestation verify zoreal-oauth2-*.gem --repo Bynn-Intelligence/zoreal-oauth2-ruby
|
|
397
|
+
```
|
|
398
|
+
|
|
388
399
|
## The ZOREAL OAuth2 library family
|
|
389
400
|
|
|
390
401
|
| Repository | Package | Role |
|