https://github.com/ruby-oauth/oauth - v1.1.8

1.1.8 - 2026-07-15

• TAG: v1.1.8
• COVERAGE: 69.47% -- 835/1202 lines in 42 files
• BRANCH COVERAGE: 47.75% -- 159/333 branches in 42 files
• 40.38% documented

Changed

• Raised the anonymous_loader runtime dependency floor to >= 0.1.1.

• Raised the auth-sanitizer runtime dependency floor to >= 0.2.2 and
  switched isolated sanitizer loading to the released anonymous_loader gem,
  including local workspace wiring for the new runtime dependency.

• Raised the oauth-tty runtime dependency floor to >= 1.0.11.

• Raised the anonymous_loader runtime dependency floor to >= 0.1.2.

• Retemplated generated project metadata, support documentation, CI workflows,
  binstubs, and development dependency floors with kettle-jem v7.0.0.

Fixed

• Updated the auth-sanitizer subprocess isolation spec to load the standard
  test bootstrap, including Ruby 2.4 backports.

• Made the Ruby 2.4 appraisal's legacy cgi dependency explicit.

• Corrected RubyGems homepage metadata to point at the gem documentation site.

• Corrected persisted Open Collective and repository topology metadata used by
  future template runs.

• Package configured license files in gem release file lists.

• Updated the dep-heads workflow so current TruffleRuby uses the generated
  gemfiles/dep_heads.gemfile directly, avoiding Appraisal bootstrap failures
  with TruffleRuby's bundled RubyGems/Bundler and gem.coop.

Added

• Added support for JRuby 10.1 and TruffleRuby 34.0.

Official Discord 👉️

Many paths lead to being a sponsor or a backer of this project. Are you on such a path?

- Ruby
Published by pboling about 1 month ago

https://github.com/ruby-oauth/oauth - v1.1.7

1.1.7 - 2026-06-15

• TAG: v1.1.7
• COVERAGE: 88.32% -- 839/950 lines in 33 files
• BRANCH COVERAGE: 58.67% -- 159/271 branches in 33 files
• 40.38% documented

Changed

• Retemplated repository metadata, workflows, modular gemfiles, documentation
  scaffolding, version_gem >= 1.1.12, and templating-isolated local workspace
  Gemfile wiring with the current kettle-jem template.

• Raised the auth-sanitizer runtime dependency floor to >= 0.2.1, so OAuth
  consumers get hash and nested-attribute inspect redaction fixes plus
  downstream RBS duplicate-declaration fixes.

• Raised the oauth-tty runtime dependency floor to >= 1.0.9.

• Raised the oauth-tty runtime dependency floor to >= 1.0.10, removing
  the transitive external cgi runtime dependency for Ruby 2.4 consumers.

Fixed

• Restored docs/CNAME so the generated documentation site keeps its custom domain.

• Pinned older Ruby appraisals to Rack 2.2 so rack-test remains compatible
  with the Ruby 2.4, Ruby 2.5, and JRuby 9.2 CI jobs.

• Derived an RSA public key from PEM private-key strings before signature
  verification, matching JRuby OpenSSL behavior while preserving RSA-SHA1
  verification semantics.

• Removed the external cgi runtime dependency because the only cgi gem
  releases installable on Ruby 2.4 call String#delete_prefix, which is
  unavailable on Ruby 2.4.

• Removed the external erb dependency from the Ruby 2.4 appraisal because
  Ruby 2.4 already provides ERB and the released erb gem depends on external
  cgi.

• Added a private-key-backed RSA-SHA1 verification fallback for JRuby OpenSSL
  versions that raise OpenSSL::PKey::PKeyError during public-key
  verification.

Official Discord 👉️

Many paths lead to being a sponsor or a backer of this project. Are you on such a path?

- Ruby
Published by pboling 2 months ago

https://github.com/ruby-oauth/oauth - v1.1.6

1.1.6 - 2026-06-07

• TAG: v1.1.6
• COVERAGE: 89.05% -- 838/941 lines in 33 files
• BRANCH COVERAGE: 60.46% -- 159/263 branches in 33 files
• 40.38% documented

Changed

• Retemplated project workflows, appraisals, and development tooling with the
  current kettle-jem template.
• Documented current OAuth::Consumer configuration options, including token
  request redirect safety settings, and corrected the OAuth 1.0a usage example.
• Raised the runtime dependency floor for auth-sanitizer to >= 0.2.1.
• Raised the runtime dependency floor for snaky_hash to >= 2.0.5.

Security

• Hardened OAuth token endpoint redirect handling after the GHSA-pp92-crg2-gfv9
  review: token redirects are now bounded, resolved explicitly, and rejected
  when they cross origins unless explicitly enabled.

Official Discord 👉️

Many paths lead to being a sponsor or a backer of this project. Are you on such a path?

- Ruby
Published by pboling 2 months ago

https://github.com/ruby-oauth/oauth - v1.1.5

1.1.5 - 2026-05-20

• TAG: v1.1.5
• COVERAGE: 84.79% -- 864/1019 lines in 37 files
• BRANCH COVERAGE: 54.91% -- 151/275 branches in 37 files
• 40.86% documented

Changed

• auth-sanitizer v0.1.3

Fixed

• Load auth-sanitizer through an internal isolated loader so requiring oauth does not add top-level Auth or AuthSanitizer constants that may collide with downstream applications.

Official Discord 👉️

Many paths lead to being a sponsor or a backer of this project. Are you on such a path?

- Ruby
Published by pboling 3 months ago

https://github.com/ruby-oauth/oauth - v1.1.4

1.1.4 - 2026-05-16

• TAG: v1.1.4
• COVERAGE: 84.64% -- 854/1009 lines in 36 files
• BRANCH COVERAGE: 54.91% -- 151/275 branches in 36 files
• 40.78% documented

Added

• Add auth-sanitizer integration for inspect-time secret redaction in core OAuth objects.
• Traditional OAuth::VERSION constant

Changed

• Redact sensitive values from #inspect in OAuth::Consumer, OAuth::Token, and OAuth::Signature::Base.

Official Discord 👉️

Many paths lead to being a sponsor or a backer of this project. Are you on such a path?

- Ruby
Published by pboling 3 months ago

https://github.com/ruby-oauth/oauth - v1.1.3

1.1.3 - 2025-11-06

• TAG: v1.1.3
• COVERAGE: 81.70% -- 817/1000 lines in 36 files
• BRANCH COVERAGE: 50.54% -- 140/277 branches in 36 files
• 40.71% documented

Added

• base64 dependency, fixes Ruby 3.4 and 3.5 HEAD compatibility

Fixed

• Fix ActionController request proxy NoMethodError when building signatures
  • define wrap_values on OAuth::RequestProxy::Base
  • remove duplicate from ActionDispatchRequest
  • add specs

Official Discord 👉️

Many paths lead to being a sponsor or a backer of this project. Are you on such a path?

- Ruby
Published by pboling 9 months ago

https://github.com/ruby-oauth/oauth - v1.1.1

1.1.1 - 2025-09-21

• TAG: v1.1.1
• COVERAGE: 81.70% -- 817/1000 lines in 36 files
• BRANCH COVERAGE: 50.54% -- 140/277 branches in 36 files
• 40.71% documented

Added

• kettle-dev v1.1.18
• Internal escape & unescape methods
  • Stop relying on URI / CGI for escaping and unescaping
  • They are both unstable across supported versions of Ruby (including 3.5 HEAD)
• Tests against Rails-specific code are now run in CI
• Documented OAuth 1.0, 1.0a differences

Changed

• converted minitest => rspec

Removed

• dependency on em-http-request
  • now lazy Loaded so it can be optional, since some systems fail to install it, and it doesn't seem maintained

Official Discord 👉️

Many paths lead to being a sponsor or a backer of this project. Are you on such a path?

- Ruby
Published by pboling 11 months ago

https://github.com/ruby-oauth/oauth - v1.1.2

1.1.2 - 2025-09-21

• TAG: v1.1.2
• COVERAGE: 81.78% -- 817/999 lines in 36 files
• BRANCH COVERAGE: 50.54% -- 140/277 branches in 36 files
• 40.71% documented

Added

• Corrected SHA-256 & SHA-512 checksums for release 1.1.1

Official Discord 👉️

Many paths lead to being a sponsor or a backer of this project. Are you on such a path?

- Ruby
Published by pboling 11 months ago

https://github.com/ruby-oauth/oauth - v1.1.0

What's Changed

• 🔥 Extract CLI to new oauth-tty gem by @pboling in https://github.com/ruby-oauth/oauth/pull/275
• 271/snaky hash by @pboling in https://github.com/ruby-oauth/oauth/pull/276

Full Changelog: https://github.com/ruby-oauth/oauth/compare/v1.0.0...v1.1.0

- Ruby
Published by pboling 11 months ago

https://github.com/ruby-oauth/oauth - v1.0.1

Full Changelog: https://github.com/ruby-oauth/oauth/compare/v1.0.0...v1.0.1

- Ruby
Published by pboling 11 months ago

https://github.com/ruby-oauth/oauth - Stable Release v1

The first "Stable Release" in terms of Semantic Versioning.

The oldest supported Ruby, currently 2.7, will be dropped no later than April 2025, and a new major version of this gem will be released to drop Ruby 2.7 support (and possibly other stuff).

- Ruby
Published by pboling almost 4 years ago

https://github.com/ruby-oauth/oauth - 0.6.x is EOL April 2024

Non-commercial support for 0.6.x will end no later than April 2024.

Full Changelog: https://github.com/oauth-xx/oauth-ruby/compare/v0.5.13...v0.6.1

- Ruby
Published by pboling almost 4 years ago

https://github.com/ruby-oauth/oauth - 0.5.x is EOL April 2023

Non-commercial support for 0.5.x will end no later than April 2023.

Full Changelog: https://github.com/oauth-xx/oauth-ruby/compare/v0.5.10...v0.5.13

- Ruby
Published by pboling almost 4 years ago

https://github.com/ruby-oauth/oauth - v0.5.10

0.5.10 2022-05-04

The "Can it be the end of the line for 0.5.x?" Release

Added

• Major updates to Documentation
• More CI Hardening
• Align CI builds with official Ruby Compatibility Matrix
• Project tooling in preparation for final release of 0.5.x series
  • diffend

Commits: https://github.com/oauth-xx/oauth-ruby/compare/v0.5.9...v0.5.10

- Ruby
Published by pboling over 4 years ago

https://github.com/ruby-oauth/oauth - v0.5.9

0.5.9 2022-05-03

Added

• Documentation related to Ruby compatibility
• Updated CHANGELOG.md formatting
• Corrected CHANGELOG.md typos
• Hardened the CI build for the next few years(?!)
• Require MFA to push new version to Rubygems
• Replace Hash Rocket syntax with JSON-style symbols where possible
• Project tooling in preparation for final release of 0.5.x series
  • rubocop-ruby2_0
  • overcommit

Commits: https://github.com/oauth-xx/oauth-ruby/compare/v0.5.8...v0.5.9

- Ruby
Published by pboling over 4 years ago

https://github.com/ruby-oauth/oauth - v0.5.8

0.5.8 2021-11-10

Added

• Added more documentation files to packaged gem, e.g. SECURITY.md, CODE_OF_CONDUCT.md

Fixed

• Removed reference to RUBY_VERSION from gemspec, as it depends on rake release, which is problematic on some ruby engines. (by @pboling)

Commits: https://github.com/oauth-xx/oauth-ruby/compare/v0.5.7...v0.5.8

- Ruby
Published by pboling over 4 years ago

https://github.com/ruby-oauth/oauth - v0.5.7

[0.5.7] 2021-11-02

Added

• Setup Rubocop (#205, #208 by @pboling)
• Added CODE_OF_CONDUCT.md (#217, #218 by @pboling)
• Added FUNDING.yml (#217, #218 by @pboling)
• Added Client Certificate Options: :ssl_client_cert and :ssl_client_key (#136, #220 by @pboling)
• Handle a nested array of hashes in OAuth::Helper.normalize (#80, #221 by @pboling)

Changed

• Switch from TravisCI to Github Actions (#202, #207, #176 by @pboling)
• Upgrade webmock to v3.14.0 (#196 by @pboling)
• Upgrade em-http-request to v1.1.7 (#173 by @pboling)
• Upgrade mocha to v1.13.0 (#193 by @pboling)
• HISTORY renamed to CHANGELOG.md, and follows Keep a Changelog (#214, #215 by @pboling)
• CHANGELOG, LICENSE, and README now ship with packaged gem (#214, #215 by @pboling)
• README.rdoc renamed to README.md (#217, #218 by @pboling)
• Require plaintext signature method by default (#135 by @confiks & @pboling)

Fixed

• Fixed Infinite Redirect in v0.5.5, v0.5.6 (#186, #210 by @pboling)
• Fixed NoMethodError on missing leading slash in path (#194, #211 by @pboling)
• Fixed NoMethodError on nil request object (#165, #212 by @pboling)
• Fixed Unsafe String Comparison (#156, #209 by @pboling and @drosseau)
• Fixed typos in Gemspec (#204, #203, #208 by @pboling)
• Copyright Notice in LICENSE - added correct years (#217, #218 by @pboling)
• Fixed request proxy Class constant reference scopes - was missing :: in many places (#225, #226 by @pboling)

Removed

• Remove direct development dependency on nokogiri (#299 by @pboling)

- Ruby
Published by pboling almost 5 years ago

https://github.com/ruby-oauth/oauth - Version 0.5.5

Fixed security issue and cleaned up codebase.

- Ruby
Published by galois17 over 5 years ago

https://github.com/ruby-oauth/oauth - v0.5.4

Version 0.5.4

- Ruby
Published by galois17 over 8 years ago