oauth2 2.0.19

v2.0.19

on Ruby Gems

2.0.19 - 2026-05-15

• TAG: v2.0.19
• COVERAGE: 100.00% -- 515/515 lines in 14 files
• BRANCH COVERAGE: 100.00% -- 174/174 branches in 14 files
• 89.11% documented

Added

• gh!707 Add OAuth2.config[:filtered_label] to configure the placeholder used for filtered sensitive values in inspected objects and debug logging output by @pboling
• gh!707 Add OAuth2.config[:filtered_debug_keys] to configure which key names have their values redacted from debug logging output by @pboling

Changed

• gh!707 Make inspect-time and debug-log filters snapshot their configuration at initialization time rather than tracking later config changes by @pboling
• gh!714Refactor sensitive-value filtering to use auth-sanitizer while preserving OAuth2::FilteredAttributes as a permanent API alias by @pboling

Removed

• Remove the internal OAuth2::ThingFilter and OAuth2::SanitizedLogger implementations now provided by auth-sanitizer by @pboling

Security

• gh!707 Redact sensitive values from debug logging output, including Authorization headers and common token/secret fields in headers, query strings, form bodies, and JSON payloads by @pboling
  • NOTE: debug logging has always been, and remains, opt-in. It is turned off by default.

Official Discord 👉️

Many paths lead to being a sponsor or a backer of this project. Are you on such a path?