Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Relax omniauth gem version requirements #4

Open
wants to merge 4 commits into
base: master
Choose a base branch
from

Conversation

nevans
Copy link
Contributor

@nevans nevans commented Jan 20, 2021

omniauth v2.0.0 was recently released, so this allows it to be upgraded. v2.0.0 finally fixes CVE-2015-9284 by default and without hacky workarounds, so I hope most apps will be upgrading ASAP.

This seems to be working just fine with the latest version (I haven't finished my testing yet, so I'll try to remember to update this PR in the next couple of days).

omniauth v2.0.0 was just released, so this allows it to be upgraded.
@nevans
Copy link
Contributor Author

nevans commented Sep 30, 2021

@amirmanji If you willing to give me rubygems access, I could push a new release with this. My colleague has also added AOL support (they're sharing the same server software... it's just another default configuration with the AOL URLs).

* add AOL strategy
* rename YahooOAuth2
* note that the back compat doesn't work.
  TODO: try OmniAuth::Configuration.add_camelization("oauth", "OAuth")
@nevans
Copy link
Contributor Author

nevans commented Nov 4, 2021

Updating the PR title to reflect AOL support. There are some documentation changes that still ought to be made. And backwards compatibility was probably broken: need to try OmniAuth::Configuration.add_camelization("oauth", "OAuth")

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants