Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Bump doorkeeper from 5.4.0 to 5.6.2 #1222

Open
wants to merge 1 commit into
base: master
Choose a base branch
from

Conversation

dependabot[bot]
Copy link

@dependabot dependabot bot commented on behalf of github Dec 12, 2022

Bumps doorkeeper from 5.4.0 to 5.6.2.

Release notes

Sourced from doorkeeper's releases.

v5.6.2

  • #1604 Fix fetching of the application when custom application_class defined.

v5.6.1

  • #1593 Add support for Trilogy ActiveRecord adapter.
  • #1597 Add optional support to use the url path for the native authorization code flow. Ports forward #1143 from 4.4.3
  • #1599 Remove unnecessarily re-fetch of application object when creating an access token.

v5.6.0

  • #1581 Consider token_type_hint when searching for access token in TokensController to avoid extra database calls.

v5.6.0.rc1

  • #1551 Change lazy loading for ORM to be Ruby standard autoload.

  • #1552 Remove duplicate IDs on Auth form to improve accessibility.

  • #1542 Improve performance of Doorkeeper::AccessToken#matching_token_for using database specific SQL time math.

    [IMPORTANT]: API of the Doorkeeper::AccessToken#matching_token_for method has changed and now it returns only active access tokens (previously they were just not revoked). Please remember that the idea of the reuse_access_token option is to check for existing active token (see configuration option description).

v5.5.4

  • #1535 Revert changes introduced in #1528 to allow query params in redirect_uri as per the spec.

v5.5.3

  • #1528 Don't allow extra query params in redirect_uri.
  • #1525 I18n source for forbidden token error is now doorkeeper.errors.messages.forbidden_token.missing_scope.
  • #1531 Disable strict-loading for Doorkeeper models by default.
  • #1532 Add support for Rails 7.

v5.5.2

  • #1502 Drop support for Ruby 2.4 because of EOL.
  • #1504 Updated the url fragment in the comment for code documentation.
  • #1512 Fix form behavior when response mode is form_post.
  • #1511 Fix that authorization code is returned by fragment if response_mode is fragament.

v5.5.1

  • #1496 Revoke old_refresh_token if previous_refresh_token is present.
  • #1495 Fix respond_to undefined in API-only mode
  • #1488 Verify client authentication for Resource Owner Password Grant when config.skip_client_authentication_for_password_grant is set and the client credentials are sent in a HTTP Basic auth header.

v5.5.0

  • #1482 Simplify TokenInfoController to be overridable (extract response rendering).
  • #1478 Fix ownership association and Rake tasks when custom models configured.
  • #1477 Respect ActiveRecord::Base.pluralize_table_names for Doorkeeper table names.

v5.5.0.rc2

  • #1473 Enable Applications and AuthorizedApplications controllers in API mode.

... (truncated)

Changelog

Sourced from doorkeeper's changelog.

5.6.2

  • #1604 Fix fetching of the application when custom application_class defined.

5.6.1

  • #1593 Add support for Trilogy ActiveRecord adapter.
  • #1597 Add optional support to use the url path for the native authorization code flow. Ports forward #1143 from 4.4.3
  • #1599 Remove unnecessarily re-fetch of application object when creating an access token.

5.6.0

  • #1581 Consider token_type_hint when searching for access token in TokensController to avoid extra database calls.

5.6.0.rc2

  • #1558 Fixed bug: able to obtain a token with default scopes even if they are not present in the application scopes when using client credentials.
  • #1567 Only filter code parameter if authorization_code grant flow is enabled.

5.6.0.rc1

  • #1551 Change lazy loading for ORM to be Ruby standard autoload.

  • #1552 Remove duplicate IDs on Auth form to improve accessibility.

  • #1542 Improve performance of Doorkeeper::AccessToken#matching_token_for using database specific SQL time math.

    [IMPORTANT]: API of the Doorkeeper::AccessToken#matching_token_for method has changed and now it returns only active access tokens (previously they were just not revoked). Please remember that the idea of the reuse_access_token option is to check for existing active token (see configuration option description).

5.5.4

  • #1535 Revert changes introduced in #1528 to allow query params in redirect_uri as per the spec.

5.5.3

  • #1528 Don't allow extra query params in redirect_uri.
  • #1525 I18n source for forbidden token error is now doorkeeper.errors.messages.forbidden_token.missing_scope.
  • #1531 Disable strict-loading for Doorkeeper models by default.
  • #1532 Add support for Rails 7.

5.5.2

  • #1502 Drop support for Ruby 2.4 because of EOL.
  • #1504 Updated the url fragment in the comment for code documentation.
  • #1512 Fix form behavior when response mode is form_post.
  • #1511 Fix that authorization code is returned by fragment if response_mode is fragment.

5.5.1

... (truncated)

Commits
  • 248af2f Release 5.6.2 🎉
  • e520c31 Merge pull request #1604 from doorkeeper-gem/fix-issues-with-custom-app-model
  • 5eb54be Fix fetching of the application when custom application_class defined
  • 1c077cf [ci skip] Include one more PR into release
  • cb70561 Merge pull request #1599 from saiqulhaq/refactor-mixin
  • 934ac41 Release 5.6.1 🎉
  • 79d719a Merge pull request #1590 from doorkeeper-gem/dependabot/bundler/rspec-rails-t...
  • bea4d2e Merge pull request #1597 from starsolutions/feature/port-forward-breaking-option
  • 4dbec61 Merge branch 'main' into feature/port-forward-breaking-option
  • 64673e7 Add support for optionally using the url path for native authorization
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [doorkeeper](https://github.com/doorkeeper-gem/doorkeeper) from 5.4.0 to 5.6.2.
- [Release notes](https://github.com/doorkeeper-gem/doorkeeper/releases)
- [Changelog](https://github.com/doorkeeper-gem/doorkeeper/blob/main/CHANGELOG.md)
- [Commits](doorkeeper-gem/doorkeeper@v5.4.0...v5.6.2)

---
updated-dependencies:
- dependency-name: doorkeeper
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file ruby Pull requests that update Ruby code labels Dec 12, 2022
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
dependencies Pull requests that update a dependency file ruby Pull requests that update Ruby code
Projects
None yet
Development

Successfully merging this pull request may close these issues.

0 participants