Release/v2.0.10

In this release

2.0.10 - 2025-05-16

• TAG: [v2.0.10][2.0.10t]
• COVERAGE: 100.00% -- 518/518 lines in 14 files
• BRANCH COVERAGE: 100.00% -- 170/170 branches in 14 files
• 79.05% documented

Added

• gh!632 - Added funding.yml (@Aboling0)
• !635 - Added .gitlab-ci.yml (@jessieay)
• #638 - Documentation of support for ILO Fundamental Principles of Rights at Work (@pboling)
• !642 - 20-year certificate for signing gem releases, expires 2045-04-29 (@pboling)
  • Gemspec metadata
    • funding_uri
    • news_uri
    • mailing_list_uri
  • SHA256 and SHA512 Checksums for release
• !643 - Add token_name option (@pboling)
  • Specify the parameter name that identifies the access token
• !645 - Add OAuth2::OAUTH_DEBUG constant, based on `ENV["OAUTH_DEBUG"] (@pboling)
• !646 - Add OAuth2.config.silence_extra_tokens_warning, default: false (@pboling)
• !647 - Add IETF RFC 7009 Token Revocation compliant (@pboling)
  • OAuth2::Client#revoke_token
  • OAuth2::AccessToken#revoke
  • See: https://datatracker.ietf.org/doc/html/rfc7009
• gh!644, gh!645 - Added CITATION.cff (@Aboling0)
• !648 - Improved documentation (@pboling)

Changed

• Default value of OAuth2.config.silence_extra_tokens_warning was false, now true (@pboling)
• Gem releases are now cryptographically signed, with a 20-year cert (@pboling)
  • Allow linux distros to build release without signing, as their package managers sign independently
• !647 - OAuth2::AccessToken#refresh now supports block param pass through (@pboling)
• !647 - OAuth2.config is no longer writable (@pboling)
• !647 - Errors raised by OAuth2::AccessToken are now always OAuth2::Error and have better metadata (@pboling)

Fixed

• #95 - restoring an access token via AccessToken#from_hash (@pboling)
  • This was a 13 year old bug report. 😘
• #619 - Internal options (like snaky, raise_errors, and parse) are no longer included in request (@pboling)
• !633 - Spaces will now be encoded as %20 instead of + (@nov.matake)
• !634 - CHANGELOG.md documentation fix (@skuwa229)
• !638 - fix expired? when expires_in is 0 (@disep)
• !639 - Only instantiate OAuth2::Error if raise_errors option is true (@glytch2)
• #639 - AccessToken#to_hash is now serializable, just a regular Hash (@pboling)
• !640 - README.md documentation fix (@martinezcoder)
• !641 - Do not include sensitive information in the inspect (@manuelvanrijn)
• #641 - Made default JSON response parser more resilient (@pboling)
• #645 - Response no longer becomes a snaky hash (@pboling)
• gh!646 - Change require to require_relative (improve performance) (@Aboling0)

TODOs

• Test against multiple versions of runtime dependencies
  • faraday
    • v0
    • v1
    • v2
    • head
  • jwt
    • v1
    • v2
    • v3 (beta)
    • head
  • rack
    • v1.2
    • v1.6
    • v2
    • v3
    • head
  • multi_xml
    • v0.5
    • v0.6
    • v0.7
    • head
• Add gems that Ruby 3.5 will remove from Standard Lib as dependencies, and add to test matrix
  • logger
    • v1.2
    • v1.5
    • v1.7
    • head
• Document dependencies
• Fix Code Coverage PR comments
• Release documentation
• Document that GitHub is a Federated Mirror that accepts issues and pull requests