Merge pull request #356 from ruby-oauth/feat/auth-sanitizer

Add: auth-sanitizer

Author: pboling

.rubocop_gradual.lock

@@ -1 +1 @@
-ruby 3.4.7
+ruby 4.0.4

.tool-versions

@@ -20,8 +20,12 @@ Please file a bug if you notice a violation of semantic versioning.
 
 ### Added
 
+- Add `auth-sanitizer` integration for inspect-time secret redaction in core OAuth objects.
+
 ### Changed
 
+- Redact sensitive values from `#inspect` in `OAuth::Consumer`, `OAuth::Token`, and `OAuth::Signature::Base`.
+
 ### Deprecated
 
 ### Removed

CHANGELOG.md

@@ -12,6 +12,22 @@ git_source(:gitlab) { |repo_name| "https://gitlab.com/#{repo_name}" }
 # Include dependencies from <gem name>.gemspec
 gemspec
 
+unless %w[false 0 no off].include?(ENV.fetch("RUBY_OAUTH_DEV", "false").downcase)
+  begin
+    require "nomono/bundler" unless defined?(Nomono)
+  rescue LoadError
+    require_relative "../nomono/lib/nomono/bundler"
+  end
+
+  eval_nomono_gems(
+    gems: %w[auth-sanitizer],
+    prefix: "RUBY_OAUTH",
+    path_env: "RUBY_OAUTH_DEV",
+    root: %w[code src ruby-oauth],
+    debug_env: "RUBY_OAUTH_DEBUG",
+  )
+end
+
 # Debugging
 eval_gemfile "gemfiles/modular/debug.gemfile"