Skip to content

Latest commit

 

History

History
224 lines (149 loc) · 4.04 KB

CHANGELOG.md

File metadata and controls

224 lines (149 loc) · 4.04 KB
Raw

Changelog

All notable changes to this project will be documented in this file.

0.5.3 - 2018-01-25

Added

  • Added support for the JWT 2.x gem.
  • Now fully qualifies the JWT class to prevent conflicts with the Omniauth::JWT strategy.

Deprecated

  • Nothing.

Removed

  • Removed the multijson dependency.
  • Support for versions of omniauth-oauth2 < 1.5.

Fixed

  • Nothing.

0.5.2 - 2017-07-30

Added

  • Nothing

Deprecated

  • Nothing.

Removed

  • New authorize_url and token_url endpoints are reverted until JWT 2.0 ships.

Fixed

  • Nothing

0.5.1 - 2017-07-19

Added

  • Breaking JWT iss verification can be enabled/disabled with the verify_iss flag - see the README for more details.
  • Authorize options now includes device_id and device_name for private ip ranges.

Deprecated

  • Nothing.

Removed

  • Nothing.

Fixed

  • Updated authorize_url and token_url to new endpoints.

0.5.0 - 2017-05-29

Added

  • Rubocop checks to specs.
  • Defaulted dev environment to ruby 2.3.4.

Deprecated

  • Nothing.

Removed

  • Testing support for older versions of ruby not supported by OmniAuth 1.5.
  • Key [:urls]['Google'] no longer exists, it has been renamed to [:urls][:google].

Fixed

  • Updated all code to rubocop conventions. This includes the Ruby 1.9 hash syntax when appropriate.
  • Example javascript flow now picks up ENV vars for google key and secret.

0.4.1 - 2016-03-14

Added

  • Nothing.

Deprecated

  • Nothing.

Removed

  • Nothing.

Fixed

  • Fixed JWT iat leeway by requiring ruby-jwt 1.5.2

0.4.0 - 2016-03-11

Added

  • Addedd ability to specify multiple hosted domains.
  • Added a default leeway of 1 minute to JWT token validation.
  • Now requires ruby-jwt 1.5.x.

Deprecated

  • Nothing.

Removed

  • Removed support for ruby 1.9.3 as ruby-jwt 1.5.x does not support it.

Fixed

  • Nothing.

0.3.1 - 2016-01-28

Added

  • Verify Hosted Domain if hd is set in options.

Deprecated

  • Nothing.

Removed

  • Dependency on addressable.

Fixed

  • Nothing.

0.3.0 - 2016-01-09

Added

  • Updated verify_token to use the v3 tokeninfo endpoint.

Deprecated

  • Nothing.

Removed

  • Nothing.

Fixed

  • Compatibility with omniauth-oauth2 1.4.0

0.2.10 - 2015-11-05

Added

  • Nothing.

Deprecated

  • Nothing.

Removed

  • Removed some checks on the id_token. Now only parses the id_token in the JWT processing.

Fixed

  • Nothing.

0.2.9 - 2015-10-29

Added

  • Nothing.

Deprecated

  • Nothing.

Removed

  • Nothing.

Fixed

  • Issue with omniauth-oauth2 where redirect_uri was handled improperly. We now lock the dependency to ~> 1.3.1

0.2.8 - 2015-10-01

Added

  • Added skip_jwt option to bypass JWT decoding in case you get decoding errors.

Deprecated

  • Nothing.

Removed

  • Nothing.

Fixed

0.2.7 - 2015-09-25

Added

  • Now strips out the 'sz' parameter from profile image urls.
  • Now uses 'addressable' gem for URI actions.
  • Added image data to extras hash.
  • Override validation on JWT token for open_id token.
  • Handle authorization codes coming from an installed applications.

Deprecated

  • Nothing.

Removed

  • Nothing.

Fixed

  • Fixes double slashes in google image urls.

0.2.6 - 2014-10-26

Added

  • Nothing.

Deprecated

  • Nothing.

Removed

  • Nothing.

Fixed

  • Hybrid authorization issues due to bad method alias.

0.2.5 - 2014-07-09

Added

  • Support for versions of omniauth past 1.0.x.

Deprecated

  • Nothing.

Removed

  • Nothing.

Fixed

  • Nothing.

0.2.4 - 2014-04-25

Added

  • Now requiring the "Contacts API" and "Google+ API" to be enabled in your Google API console.

Deprecated

  • The old Google OAuth API support was removed without deprecation.

Removed

  • Support for the old Google OAuth API. OAuth2::Error will be thrown and state that access is not configured when you attempt to authenticate using the old API. See Added section for this release.

Fixed

  • Nothing.