gems oauth 1.1.6
v1.1.6

5 hours ago

1.1.6 - 2026-06-07

  • TAG: v1.1.6
  • COVERAGE: 89.05% -- 838/941 lines in 33 files
  • BRANCH COVERAGE: 60.46% -- 159/263 branches in 33 files
  • 40.38% documented

Changed

  • Retemplated project workflows, appraisals, and development tooling with the
    current kettle-jem template.
  • Documented current OAuth::Consumer configuration options, including token
    request redirect safety settings, and corrected the OAuth 1.0a usage example.
  • Raised the runtime dependency floor for auth-sanitizer to >= 0.2.1.
  • Raised the runtime dependency floor for snaky_hash to >= 2.0.5.

Security

  • Hardened OAuth token endpoint redirect handling after the GHSA-pp92-crg2-gfv9
    review: token redirects are now bounded, resolved explicitly, and rejected
    when they cross origins unless explicitly enabled.

Official Discord 👉️ Live Chat on Discord

Many paths lead to being a sponsor or a backer of this project. Are you on such a path?

OpenCollective Backers OpenCollective Sponsors Sponsor Me on Github Liberapay Goal Progress Donate on PayPal

Buy me a coffee Donate on Polar Donate to my FLOSS efforts at ko-fi.com Donate to my FLOSS efforts using Patreon

Don't miss a new oauth release

NewReleases is sending notifications on new releases.