- ruby-talk - ml.ruby-lang.org

[ruby-talk:444183] [ANN] rodauth-oauth 1.3.0 released
by Tiago Cardoso 01 Apr '23

01 Apr '23

rodauth-oauth 1.3.0 has been released. rodauth-oauth is a rack-compatible toolkit for building OAuth 2.0 authorization servers, as well as OpenID Authentication Providers. rodauth-oauth is certified <https://openid.net/certification/> for the following profiles of the OpenID Connect™ protocol: Basic OP, Implicit OP, Hybrid OP, Config OP, Dynamic OP, Form Post OP, 3rd Party Init OP # as simple as rodauth do enable :oauth_authorization_code_grant # or enable :oidc end Among its features, it supports: * Authorization Code Grant * Refresh Token Grant * Implicit Grant * Client Credentials Grant * Device Code Grant * Token Revocation * Token Introspection * Auth Server Metadata * PKCE * Resource Indicators * JWT Access Tokens * mTLS Client Authentication * Assertion Framework * SAML 2.0 Bearer Assertion Grant * JWT Bearer Assertion Grant * JWT Secured authorization requests (JAR) * JWT Secured authorization response mode (JARM) * Pushed Authorization requests * Dynamic Client Registration * OpenID * OpenID Discovery * OpenID Multiple Response types * OpenID Self Issued Tokens * OpenID Connect Dynamic Client Registration * OpenID Relying Party Initiated Logout It can also be used with Rails (via the "rodauth-rails" gem). Website: https://honeyryderchuck.gitlab.io/rodauth-oauth/ Documentation: https://honeyryderchuck.gitlab.io/rodauth-oauth/rdoc/ Wiki: https://gitlab.com/honeyryderchuck/rodauth-oauth/wikis/home CI: https://gitlab.com/honeyryderchuck/rodauth-oauth/pipeline These are the release notes since the last update: ## 1.3.0 (02/04/2023) ## Features ### Self-Signed Issued Tokens `rodauth-oauth` supports self-signed issued tokens, via the `oidc_self_issued` feature. More info about the feature [in the docs](https://gitlab.com/os85/rodauth-oauth/-/wikis/Self-Issued-OpenID). #### JARM `rodauth-oauth` supports JWT-secured Authorization Response Mode, also known as JARM, via the `oauth_jwt_secured_authorization_response_mode`. More info about the feature [in the docs](https://gitlab.com/os85/rodauth-oauth/-/wikis/JWT-Secured-Authorizati…. ## Improvements ### `fill_with_account_claims` auth method `fill_with_account_claims` is now exposed as an auth method. This allows one to override to be able to cover certain requirements, such as aggregated and distributed claims. Here's a [link to the docs](https://gitlab.com/os85/rodauth-oauth/-/wikis/Id-Token-Authentication… explaining how to do it. ### oidc: only generate refresh token when `offline_access` scope is used. When the `oidc` feature is used, refresh tokens won't be generated anymore by default; in order to do so, the `offline_access` needs to be requested for in the respective authorization request, [as the spec mandates](https://openid.net/specs/openid-connect-core-1_0.html#OfflineAcce…. ### oidc: implicit grant loaded by default The `oidc` feature now loads the `oauth_implicit_grant` feature by default. This hadn't been done before due to the wish to ship a secure integration by default, but since then, spec compliance became more prioritary, and this is a requirement. ## Bugfixes * rails integration: activerecord migrations fixes: * use `bigint` for foreign keys; * index creation instruction with the wrong syntax; * set precision 6 for default timestamps, to comply with AR defaults; * add missing `code` column to the `oauth_pushed_requests` table; * oidc: when using the `id_token` , or any composite response type including `id_token`, using any response mode other than `fragment` will result in an invalid request.

1 0

[ruby-talk:444182] [ANN] rubygems-checkcert 1.0.2 Released
by Ryan Davis 31 Mar '23

31 Mar '23

rubygems-checkcert version 1.0.2 has been released! * home: <http://www.zenspider.com/projects/rubygems-checkcert.html> * code: <https://github.com/seattlerb/rubygems-checkcert> * bugs: <https://github.com/seattlerb/rubygems-checkcert/issues> * rdoc: <http://docs.seattlerb.org/rubygems-checkcert/> * clog: <https://github.com/seattlerb/rubygems-checkcert/blob/master/History.txt> Gem command to display the certificate of a gem, if any. Changes: ### 1.0.2 / 2023-03-31 * 1 bug fix: * Fixed up for recent versions of rubygems.

1 0

[ruby-talk:444179] Reset link not reaching me from bugs.runy-lang.org
by Jesús Gómez 31 Mar '23

31 Mar '23

Hello! I wonder if there are some technical issues with the Ruby Master site[1]. I forgot my password and I’ve been trying to get a reset link for quite a while, but I don’t get it. [1] https://bugs.ruby-lang.org/ 1 <https://bugs.ruby-lang.org/> , where Ruby bugs are reported

2 2

[ruby-talk:444171] Opal Won the Fukuoka Ruby Award 2023 for Outstanding Performance
by hmdne 31 Mar '23

31 Mar '23

Opal has recently won the prestigious Fukuoka Ruby Award for Outstanding Performance in the 2023 edition. This is a major achievement for the project and its developers, and it reflects the significant contributions that Opal has made to the Ruby programming language and its ecosystem. Opal is an open-source project that allows developers to write Ruby code and run it in the browser. It achieves this by compiling Ruby code into JavaScript, which can then be executed in a browser environment. This approach has many advantages, including the ability to reuse existing Ruby code and the ability to write web applications entirely in Ruby, without needing to use JavaScript at all. Opal has been around since 2011, and it has steadily gained popularity over the years. It is now widely used by Ruby developers who want to use Ruby on both the front-end and the back-end of their applications or who want to port their Ruby libraries to JavaScript. https://opalrb.com/blog/2023/03/30/opal-won-fukuoka-ruby-award-for-outstand…

6 7

[ruby-talk:444170] [ANN] Ruby 3.2.2, 3.1.4, 3.0.6 and 2.7.8 Released
by U.Nakamura 30 Mar '23

30 Mar '23

Hi, all We've just released Ruby 3.2.2, 3.1.4, 3.0.6 and 2.7.8. How to download and details: * [Ruby 3.2.2 Released](https://www.ruby-lang.org/en/news/2023/03/30/ruby-3-2-2-released/) * [Ruby 3.1.4 Released](https://www.ruby-lang.org/en/news/2023/03/30/ruby-3-1-4-released/) * [Ruby 3.0.6 Released](https://www.ruby-lang.org/en/news/2023/03/30/ruby-3-0-6-released/) * [Ruby 2.7.8 Released](https://www.ruby-lang.org/en/news/2023/03/30/ruby-2-7-8-released/) They includes secuirty fixes. You can check details: * [CVE-2023-28755: ReDoS vulnerability in URI](https://www.ruby-lang.org/en/news/2023/03/28/redos-in-uri-cve-2023-287… * [CVE-2023-28756: ReDoS vulnerability in Time](https://www.ruby-lang.org/en/news/2023/03/30/redos-in-time-cve-2023-2… We strongly recommend to upgrade your ruby installations as soon as possible. Note: After this release, Ruby 2.7 reaches EOL. In other words, this is expected to be the last release of Ruby 2.7 series. And also, we end the normal maintenance phase of Ruby 3.0, and Ruby 3.0 enters the security maintenance phase. Therefore, we recommend to start migration to Ruby 3.2 or 3.1. Regards, -- U.Nakamaura <usa(a)garbagecollect.jp>

1 0

[ruby-talk:444168] gem mysql2 ruby 32, mysql server 8.0
by Tom Reilly 27 Mar '23

27 Mar '23

I've been able to use gem mysql2 and an older version of ruby without any problem. Updating both programs I've not been able to get them to work even though I have gone through everything I could find on the internet. With all the posts that mysql2 doesn't work is there another gem other than mysql2 that works? Is there something obvious that i am missing? Thanks Tom Reilly C:\Ruby32-x64\bin>gem install mysql2 Using rubygems directory: C:/Users/w3gat/.gem/ruby/3.2.0 Temporarily enhancing PATH for MSYS/MINGW... Installing required msys2 packages: mingw-w64-ucrt-x86_64-libmariadbclient error: failed to init transaction (unable to lock database) error: could not lock database: Permission denied pacman failed with the following output: Building native extensions. This could take a while... ERROR: Error installing mysql2: ERROR: Failed to build gem native extension. current directory: C:/Users/w3gat/.gem/ruby/3.2.0/gems/mysql2-0.5.5/ext/mysql2 C:/Ruby32-x64/bin/ruby.exe -I C:/Ruby32-x64/lib/ruby/3.2.0 extconf.rb checking for rb_absint_size()... yes checking for rb_absint_singlebit_p()... yes checking for rb_gc_mark_movable()... yes checking for rb_wait_for_single_fd()... yes checking for rb_enc_interned_str() in ruby.h... yes *** extconf.rb failed *** Could not create Makefile due to some reason, probably lack of necessary libraries and/or headers. Check the mkmf.log file for more details. You may need configuration options. Provided configuration options: --with-opt-dir --without-opt-dir --with-opt-include --without-opt-include=${opt-dir}/include --with-opt-lib --without-opt-lib=${opt-dir}/lib --with-make-prog --without-make-prog --srcdir=. --curdir --ruby=C:/Ruby32-x64/bin/$(RUBY_BASE_NAME) --with-openssl-dir --without-openssl-dir --with-mysql-dir --without-mysql-dir --with-mysql-include --without-mysql-include=${mysql-dir}/include --with-mysql-lib --without-mysql-lib=${mysql-dir}/lib --with-mysql-config --without-mysql-config --with-mysqlclient-dir --without-mysqlclient-dir --with-mysqlclient-include --without-mysqlclient-include=${mysqlclient-dir}/include --with-mysqlclient-lib --without-mysqlclient-lib=${mysqlclient-dir}/lib --with-mysqlclientlib --without-mysqlclientlib C:/Ruby32-x64/lib/ruby/3.2.0/mkmf.rb:1083:in `block in find_library': undefined method `split' for nil:NilClass (NoMethodError) paths = paths.flat_map {|path| path.split(File::PATH_SEPARATOR)} ^^^^^^ from C:/Ruby32-x64/lib/ruby/3.2.0/mkmf.rb:1083:in `each' from C:/Ruby32-x64/lib/ruby/3.2.0/mkmf.rb:1083:in `flat_map' from C:/Ruby32-x64/lib/ruby/3.2.0/mkmf.rb:1083:in `find_library' from extconf.rb:131:in `<main>' To see why this extension failed to compile, please check the mkmf.log which can be found here: C:/Users/w3gat/.gem/ruby/3.2.0/extensions/x64-mingw-ucrt/3.2.0/mysql2-0.5.5/mkmf.log extconf failed, exit code 1 Gem files will remain installed in C:/Users/w3gat/.gem/ruby/3.2.0/gems/mysql2-0.5.5 for inspection. Results logged to C:/Users/w3gat/.gem/ruby/3.2.0/extensions/x64-mingw-ucrt/3.2.0/mysql2-0.5.5/gem_make.out C:\Ruby32-x64\bin>cd \ruby32*

2 1

[ruby-talk:444167] [ANN] debride 1.11.0 Released
by Ryan Davis 24 Mar '23

24 Mar '23

debride version 1.11.0 has been released! * home: <https://github.com/seattlerb/debride> * rdoc: <http://docs.seattlerb.org/debride> Analyze code for potentially uncalled / dead methods, now with auto-removal. Changes: ### 1.11.0 / 2023-03-24 * 6 minor enhancements: * Added X.const_get(:Y) support. (TSMMark) * Added f(&block_pass) support. (TSMMark) * Added obj&.safe_call support. (TSMMark) * Added obj.method(:msg) support. (TSMMark) * Added op_asgn2 (eg x &&= y) support. (TSMMark) * Added try(:msg) support. (TSMMark)

1 0

[ruby-talk:444166] Glimmer DSL for SWT 4.27.0.0 Released
by Andy Maleh 21 Mar '23

21 Mar '23

Glimmer DSL for SWT 4.27.0.0 has just been released! Change Log for 4.27.0.0: - Upgrade to Eclipse SWT 4.27 - Upgrade to JRuby 9.3.10.0 GitHub: https://github.com/AndyObtiva/glimmer-dsl-swt RubyGems: https://rubygems.org/gems/glimmer-dsl-swt Blog Announcement: https://andymaleh.blogspot.com/2023/03/glimmer-dsl-for-swt-42700.html

1 0

[ruby-talk:444165] ChatGPT materialized as GUI via Ruby & Glimmer DSL for LibUI
by Andy Maleh 17 Mar '23

17 Mar '23

Apparently, ChatGPT has materialized in our world as a GUI (Graphical User Interface) via Ruby and Glimmer DSL for LibUI. https://andymaleh.blogspot.com/2023/03/chatgpt-materialized-as-gui-via-ruby…

1 0

[ruby-talk:444164] [ANN] JRuby 9.4.2.0 Released
by Thomas E Enebo 08 Mar '23

08 Mar '23

The JRuby community is pleased to announce the release of JRuby 9.4.2.0. - Homepage: https://www.jruby.org/ - Download: https://www.jruby.org/download JRuby 9.4.x targets Ruby 3.1 compatibility. Thank you to our contributors this release, you help keep JRuby moving forward! @k77ch7, @andsel Ruby Compatibility - __callee__ now properly returns the name under which a method was called, which will be the new name in the case of aliased methods. #2305, #7702 - More use cases for keyword arguments have been fixed to behave correctly and avoid extraneous warnings. #7637, #7645, #7657, #7658, #7670, #7672, #7686 - Array#pack now supports more cases, passing nearly all specs. #7663 - Compatibility with CRuby’s command-line arguments has been improved. #7678, #7680, #7681, #7681, #7683, #7684 Standard Library - irb is updated to 1.4.2. #7690, #7691 - open-uri is updated to 0.3.0. #7701 - io-wait is updated to 0.3.0. #7701 - stringio is updated to 3.0.5. #7701 - strscan is updated to 3.0.6. #7701 - open3 is switched to using the gem at 0.1.2. #7701 Platform Support - Exception backtraces now default to color output when the controlling terminal is a TTY. Disable using -Xbacktrace.color=false or equivalent in .jrubyrc. #7693 Performance - String#split has been optimized to skip regular expression use for simple split expressions. Simple ASCII strings also split faster. #7629 54 Github Issues resolved for 9.4.2.0 #2305 - __callee__ behaves differently from MRI #7477 - Integer#chr(encoding: Encoding::UTF_8) raises a different RangeError exception message than on CRuby #7480 - Cannot call SubClass#initialize_copy with an object created from the super class #7615 - opt != for fixnum in JIT/indy #7629 - Split opts #7637 - 9.4.1.0: Wrong number of arguments with kwargs when subclassing a java class #7639 - Typing @ into irb in 9.4.1.0 crashes it #7641 - “Port already in use” errors when configuring remote JMX in 9.4 #7642 - [9.4.1.0] ArrayIndexOutOfBoundsException #7643 - Use SmartBinder to set up struct calls #7645 - Fixes #7637. Arity error with kwargs when subclassing a java class #7650 - BigDecimal arithmetic regression [jruby-9.4] #7652 - Fix Float#to_d of bigdecimal/util #7653 - Fix Struct#values_at when passed an integer Range argument for edge cases #7655 - JIT coverage fixes #7656 - Regression: Class variables in top level methods broken compared to MRI & 9.3 #7657 - Pattern matching unexpectedly raises “duplicated key name” error #7658 - remove deplicated key name error #7659 - Fix for #7656. #7662 - END blocks had regressed and was calling same block >1 #7663 - Array#pack unknown directive warns #7664 - All these work? #7665 - Arity errors for ‘call’ things in Signal#trap #7666 - Array#new size boundary error not tripping #7667 - Kernel#respond_to? return wrong error string but right error. #7668 - Array#to_s/inspect should be same method #7669 - Proc#inspect with &:foo should print that out in str #7670 - Probably method_missing is not handling keyword arguments properly [jruby-9.4.1.0] #7671 - Binding local_variables makes sure they are lvars #7672 - jruby-9.4.1.0 issues warning about duplicated keys #7674 - Fix #7672. warning about duplicated keys #7675 - JIT loses line numbers in some warnings? #7678 - Add –encoding command line option. #7679 - Spec sweep #7680 - disabling RUBYOPT processing was not hooked up. #7681 - Frozen string debugging off by one. #7682 - The -p command line should use print and not puts. #7683 - All -I provided relative paths shold be made absolute #7684 - Fixed windowsJ encoding and do not set on invalid K values #7685 - Add a warn form that takes a callback #7686 - Fix #7670. Coverage data goes off the rails. #7687 - Passing specs #7690 - Update irb to version 1.4.2+ #7691 - Updates irb to 1.4.2 #7693 - Enable color if console is a tty #7694 - Mimic CRuby’s range error logic for chr #7696 - Make coderange set on strings created from some IO ops #7700 - Define real error methods to avoid callee #7701 - Update gems #7702 - Encode new and old name in aliased calls #7708 - Enumerator.new takes at most one arg #7709 - Eliminate 2- and 3-arity paths for Enumerator#initialize #7715 - We were quoting symbols in inspect we shouldnt have #7716 - Add infra to support Ruby 3.1 pattern error messages. -- blog: http://blog.enebo.com twitter: tom_enebo mail: tom.enebo(a)gmail.com

1 0