zoreal-oauth2 0.1.6 → 0.1.7
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- checksums.yaml +4 -4
- data/README.md +10 -1
- data/lib/zoreal/oauth2/version.rb +1 -1
- metadata +1 -1
checksums.yaml
CHANGED
|
@@ -1,7 +1,7 @@
|
|
|
1
1
|
---
|
|
2
2
|
SHA256:
|
|
3
|
-
metadata.gz:
|
|
4
|
-
data.tar.gz:
|
|
3
|
+
metadata.gz: f78b8895cbf253ff1aec84a07b2a993710196e51ae8de44d8e7f479e4fd1c793
|
|
4
|
+
data.tar.gz: d4085cf95a75c333cacc375206eb1f7e64b5f7ff78772dfd299c8069f85f2456
|
|
5
5
|
SHA512:
|
|
6
|
-
metadata.gz:
|
|
7
|
-
data.tar.gz:
|
|
6
|
+
metadata.gz: a71749b96a81235c3ac3afe408f53e7b39cba1aa7cc56803764101a705d37c2ed5d2685f90a520c1b665ffc88bcb947fb8434acfefa0794280a6b053605d39e3
|
|
7
|
+
data.tar.gz: 45cb3d857ef81c342f314fed754a551322c6a6fa53163efb585ea38d741b9f7703c3f855ae48e8665704f5652946c76e7d0af02fad76ae1df2a3c53025e1ecdc
|
data/README.md
CHANGED
|
@@ -1,6 +1,6 @@
|
|
|
1
1
|
# zoreal-oauth2
|
|
2
2
|
|
|
3
|
-
[](https://rubygems.org/gems/zoreal-oauth2) [](https://rubygems.org/gems/zoreal-oauth2) [](https://github.com/Bynn-Intelligence/zoreal-oauth2-ruby/actions/workflows/ci.yml) [](./LICENSE)
|
|
4
4
|
|
|
5
5
|
Login with ZOREAL for Ruby backends: the relying-party half of the flow that
|
|
6
6
|
[`@zoreal/oauth2-react`](https://github.com/Bynn-Intelligence/zoreal-oauth2-react)
|
|
@@ -387,6 +387,15 @@ end
|
|
|
387
387
|
normalized. Production is `https://id.zoreal.com`; override `issuer:` only
|
|
388
388
|
when pointing at a non-production provider you were given.
|
|
389
389
|
|
|
390
|
+
## Verifying this release
|
|
391
|
+
|
|
392
|
+
Every version is published from GitHub Actions by [RubyGems trusted publishing](https://guides.rubygems.org/trusted-publishing/): the workflow authenticates to rubygems.org over OIDC and no long-lived API key is stored. Each build is also attested with [Sigstore](https://www.sigstore.dev/) build provenance and recorded in a public transparency log, so you can confirm which commit and workflow produced the gem:
|
|
393
|
+
|
|
394
|
+
```sh
|
|
395
|
+
gem fetch zoreal-oauth2
|
|
396
|
+
gh attestation verify zoreal-oauth2-*.gem --repo Bynn-Intelligence/zoreal-oauth2-ruby
|
|
397
|
+
```
|
|
398
|
+
|
|
390
399
|
## The ZOREAL OAuth2 library family
|
|
391
400
|
|
|
392
401
|
| Repository | Package | Role |
|