diff --git a/.credo.exs b/.credo.exs index e10d3d37..f68419b1 100644 --- a/.credo.exs +++ b/.credo.exs @@ -1,3 +1,6 @@ +# SPDX-FileCopyrightText: 2023 Erlang Ecosystem Foundation +# SPDX-License-Identifier: Apache-2.0 + # This file contains the configuration for Credo and you are probably reading # this after creating it with `mix credo.gen.config`. # diff --git a/.env b/.env index d14fe264..3055ff81 100644 --- a/.env +++ b/.env @@ -1,2 +1,5 @@ +# SPDX-FileCopyrightText: 2023 Erlang Ecosystem Foundation +# SPDX-License-Identifier: Apache-2.0 + # Required for rebar3_format / new language features ERL_AFLAGS="-enable-feature all" diff --git a/.formatter.exs b/.formatter.exs index 65f2b216..98eadcfc 100644 --- a/.formatter.exs +++ b/.formatter.exs @@ -1,3 +1,6 @@ +# SPDX-FileCopyrightText: 2023 Erlang Ecosystem Foundation +# SPDX-License-Identifier: Apache-2.0 + [ inputs: [ "lib/**/*.ex", diff --git a/.github/CONTRIBUTING.md b/.github/CONTRIBUTING.md index de0774f0..3f60c751 100644 --- a/.github/CONTRIBUTING.md +++ b/.github/CONTRIBUTING.md @@ -1,3 +1,8 @@ + + # Contributing to `oidcc` ## Welcome! diff --git a/.github/ISSUE_TEMPLATE/BUG.yml b/.github/ISSUE_TEMPLATE/BUG.yml index 3d65f4f0..e95d129e 100644 --- a/.github/ISSUE_TEMPLATE/BUG.yml +++ b/.github/ISSUE_TEMPLATE/BUG.yml @@ -1,3 +1,6 @@ +# SPDX-FileCopyrightText: 2023 Erlang Ecosystem Foundation +# SPDX-License-Identifier: Apache-2.0 + name: 🐞 Bug Report description: Something is broken? labels: ["bug"] diff --git a/.github/ISSUE_TEMPLATE/FEATURE.yml b/.github/ISSUE_TEMPLATE/FEATURE.yml index e5dec637..6238f338 100644 --- a/.github/ISSUE_TEMPLATE/FEATURE.yml +++ b/.github/ISSUE_TEMPLATE/FEATURE.yml @@ -1,3 +1,6 @@ +# SPDX-FileCopyrightText: 2023 Erlang Ecosystem Foundation +# SPDX-License-Identifier: Apache-2.0 + name: 🎉 Feature Request description: You have a neat idea that should be implemented? labels: ["enhancement"] diff --git a/.github/PULL_REQUEST_TEMPLATE.md.license b/.github/PULL_REQUEST_TEMPLATE.md.license new file mode 100644 index 00000000..3b4cff84 --- /dev/null +++ b/.github/PULL_REQUEST_TEMPLATE.md.license @@ -0,0 +1,2 @@ +SPDX-FileCopyrightText: 2023 Erlang Ecosystem Foundation +SPDX-License-Identifier: Apache-2.0 diff --git a/.github/PULL_REQUEST_TEMPLATE/FIX.md.license b/.github/PULL_REQUEST_TEMPLATE/FIX.md.license new file mode 100644 index 00000000..3b4cff84 --- /dev/null +++ b/.github/PULL_REQUEST_TEMPLATE/FIX.md.license @@ -0,0 +1,2 @@ +SPDX-FileCopyrightText: 2023 Erlang Ecosystem Foundation +SPDX-License-Identifier: Apache-2.0 diff --git a/.github/PULL_REQUEST_TEMPLATE/IMPROVEMENT.md.license b/.github/PULL_REQUEST_TEMPLATE/IMPROVEMENT.md.license new file mode 100644 index 00000000..3b4cff84 --- /dev/null +++ b/.github/PULL_REQUEST_TEMPLATE/IMPROVEMENT.md.license @@ -0,0 +1,2 @@ +SPDX-FileCopyrightText: 2023 Erlang Ecosystem Foundation +SPDX-License-Identifier: Apache-2.0 diff --git a/.github/PULL_REQUEST_TEMPLATE/NEW_FEATURE.md.license b/.github/PULL_REQUEST_TEMPLATE/NEW_FEATURE.md.license new file mode 100644 index 00000000..3b4cff84 --- /dev/null +++ b/.github/PULL_REQUEST_TEMPLATE/NEW_FEATURE.md.license @@ -0,0 +1,2 @@ +SPDX-FileCopyrightText: 2023 Erlang Ecosystem Foundation +SPDX-License-Identifier: Apache-2.0 diff --git a/.github/dependabot.yml b/.github/dependabot.yml index aa7ea2c1..32917a4f 100644 --- a/.github/dependabot.yml +++ b/.github/dependabot.yml @@ -1,3 +1,6 @@ +# SPDX-FileCopyrightText: 2023 Erlang Ecosystem Foundation +# SPDX-License-Identifier: Apache-2.0 + version: 2 updates: - package-ecosystem: "github-actions" diff --git a/.github/scorecard.yml b/.github/scorecard.yml index fd941566..ae69e248 100644 --- a/.github/scorecard.yml +++ b/.github/scorecard.yml @@ -1,3 +1,6 @@ +# SPDX-FileCopyrightText: 2023 Erlang Ecosystem Foundation +# SPDX-License-Identifier: Apache-2.0 + annotations: - checks: - fuzzing diff --git a/.github/workflows/branch_main.yml b/.github/workflows/branch_main.yml index 058e43ca..1db250a7 100644 --- a/.github/workflows/branch_main.yml +++ b/.github/workflows/branch_main.yml @@ -1,3 +1,6 @@ +# SPDX-FileCopyrightText: 2023 Erlang Ecosystem Foundation +# SPDX-License-Identifier: Apache-2.0 + on: push: branches: @@ -18,6 +21,18 @@ jobs: uses: ./.github/workflows/part_test.yml + license: + name: "License" + + permissions: + id-token: write + contents: read + attestations: write + + uses: ./.github/workflows/part_license.yml + with: + attest: false + docs: name: "Docs" diff --git a/.github/workflows/part_docs.yml b/.github/workflows/part_docs.yml index c372138f..19e1961c 100644 --- a/.github/workflows/part_docs.yml +++ b/.github/workflows/part_docs.yml @@ -1,3 +1,6 @@ +# SPDX-FileCopyrightText: 2023 Erlang Ecosystem Foundation +# SPDX-License-Identifier: Apache-2.0 + on: workflow_call: inputs: diff --git a/.github/workflows/part_license.yml b/.github/workflows/part_license.yml new file mode 100644 index 00000000..71bf76c4 --- /dev/null +++ b/.github/workflows/part_license.yml @@ -0,0 +1,74 @@ +# SPDX-FileCopyrightText: 2023 Erlang Ecosystem Foundation +# SPDX-License-Identifier: Apache-2.0 + +on: + workflow_call: + inputs: + attest: + description: "Attest the SBoM" + default: true + type: boolean + + +name: "License Compliance" + +permissions: + contents: read + +jobs: + lint: + name: "Check REUSE License Compliance" + + runs-on: ubuntu-latest + + steps: + - name: Harden Runner + uses: step-security/harden-runner@c95a14d0e5bab51a9f56296a4eb0e416910cd350 # v2.10.3 + with: + egress-policy: audit + + - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2 + + - name: REUSE Compliance Check + uses: fsfe/reuse-action@bb774aa972c2a89ff34781233d275075cbddf542 # v5.0.0 + + spdx: + name: "Generate SBoM" + + runs-on: ubuntu-latest + + permissions: + id-token: write + contents: read + attestations: write + + steps: + - name: Harden Runner + uses: step-security/harden-runner@c95a14d0e5bab51a9f56296a4eb0e416910cd350 # v2.10.3 + with: + egress-policy: audit + + - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2 + + - name: REUSE Compliance Check + uses: fsfe/reuse-action@bb774aa972c2a89ff34781233d275075cbddf542 # v5.0.0 + with: + args: spdx --output sbom.spdx --creator-person "GitHub Action" --creator-organization "Erlang Ecosystem Foundation" + + - name: "Attest provenance" + uses: actions/attest-build-provenance@7668571508540a607bdfd90a87a560489fe372eb # v2.1.0 + id: attest-provenance + if: "${{ github.event.inputs.attest }}" + with: + subject-path: 'sbom.spdx' + + - name: "Copy provenance" + if: "${{ github.event.inputs.attest }}" + run: cp "$ATTESTATION" sbom.spdx.sigstore + env: + ATTESTATION: "${{ steps.attest-provenance.outputs.bundle-path }}" + + - uses: actions/upload-artifact@65c4c4a1ddee5b72f698fdd19549f0f0fb45cf08 # v4.6.0 + with: + name: sbom + path: sbom.spdx* diff --git a/.github/workflows/part_publish.yml b/.github/workflows/part_publish.yml index 3691eb1c..2664e120 100644 --- a/.github/workflows/part_publish.yml +++ b/.github/workflows/part_publish.yml @@ -1,3 +1,6 @@ +# SPDX-FileCopyrightText: 2023 Erlang Ecosystem Foundation +# SPDX-License-Identifier: Apache-2.0 + on: workflow_call: inputs: diff --git a/.github/workflows/part_release.yml b/.github/workflows/part_release.yml index 9551fbc1..e691d7cb 100644 --- a/.github/workflows/part_release.yml +++ b/.github/workflows/part_release.yml @@ -1,3 +1,6 @@ +# SPDX-FileCopyrightText: 2023 Erlang Ecosystem Foundation +# SPDX-License-Identifier: Apache-2.0 + on: workflow_call: inputs: @@ -56,10 +59,19 @@ jobs: with: name: docs path: . + + - name: "Download SBoM Artifact" + uses: actions/download-artifact@fa0a91b85d4f404e444e00e005971372dc801d16 # v4.1.8 + with: + name: sbom + path: . + + - name: Upload Docs env: GITHUB_TOKEN: ${{ github.token }} run: | gh release upload --clobber "${{ inputs.releaseName }}" \ --repo ${{ github.repository }} \ - docs.tar.gz* + docs.tar.gz* \ + sbom.spdx* diff --git a/.github/workflows/part_test.yml b/.github/workflows/part_test.yml index 72ce0619..98772ff5 100644 --- a/.github/workflows/part_test.yml +++ b/.github/workflows/part_test.yml @@ -1,3 +1,6 @@ +# SPDX-FileCopyrightText: 2023 Erlang Ecosystem Foundation +# SPDX-License-Identifier: Apache-2.0 + on: workflow_call: {} diff --git a/.github/workflows/pr.yml b/.github/workflows/pr.yml index e7a7d839..d8263e46 100644 --- a/.github/workflows/pr.yml +++ b/.github/workflows/pr.yml @@ -1,3 +1,6 @@ +# SPDX-FileCopyrightText: 2023 Erlang Ecosystem Foundation +# SPDX-License-Identifier: Apache-2.0 + on: pull_request: branches: @@ -19,6 +22,18 @@ jobs: uses: ./.github/workflows/part_test.yml + license: + name: "License" + + permissions: + id-token: write + contents: read + attestations: write + + uses: ./.github/workflows/part_license.yml + with: + attest: false + docs: name: "Docs" diff --git a/.github/workflows/scorecards.yml b/.github/workflows/scorecards.yml index a9649d3f..c4b964db 100644 --- a/.github/workflows/scorecards.yml +++ b/.github/workflows/scorecards.yml @@ -1,3 +1,6 @@ +# SPDX-FileCopyrightText: 2023 Erlang Ecosystem Foundation +# SPDX-License-Identifier: Apache-2.0 + # This workflow uses actions that are not certified by GitHub. They are provided # by a third-party and are governed by separate terms of service, privacy # policy, and support documentation. diff --git a/.github/workflows/tag-beta.yml b/.github/workflows/tag-beta.yml index 019bec2b..a70591e4 100644 --- a/.github/workflows/tag-beta.yml +++ b/.github/workflows/tag-beta.yml @@ -1,3 +1,6 @@ +# SPDX-FileCopyrightText: 2023 Erlang Ecosystem Foundation +# SPDX-License-Identifier: Apache-2.0 + on: push: tags: @@ -21,6 +24,16 @@ jobs: uses: ./.github/workflows/part_docs.yml + license: + name: "License" + + permissions: + id-token: write + contents: read + attestations: write + + uses: ./.github/workflows/part_license.yml + publish: name: "Publish" diff --git a/.github/workflows/tag-stable.yml b/.github/workflows/tag-stable.yml index 9468c344..cc41dc53 100644 --- a/.github/workflows/tag-stable.yml +++ b/.github/workflows/tag-stable.yml @@ -1,3 +1,6 @@ +# SPDX-FileCopyrightText: 2023 Erlang Ecosystem Foundation +# SPDX-License-Identifier: Apache-2.0 + on: push: tags: @@ -19,6 +22,16 @@ jobs: uses: ./.github/workflows/part_docs.yml + license: + name: "License" + + permissions: + id-token: write + contents: read + attestations: write + + uses: ./.github/workflows/part_license.yml + publish: name: "Publish" diff --git a/.gitignore b/.gitignore index b4dc0c2e..a123ecdd 100644 --- a/.gitignore +++ b/.gitignore @@ -1,3 +1,6 @@ +# SPDX-FileCopyrightText: 2023 Erlang Ecosystem Foundation +# SPDX-License-Identifier: Apache-2.0 + # The directory Mix & Rebar will write compiled artifacts to. /_build/ *.beam diff --git a/.tool-versions b/.tool-versions index 3261510c..5f6c17a9 100644 --- a/.tool-versions +++ b/.tool-versions @@ -1,3 +1,6 @@ +# SPDX-FileCopyrightText: 2023 Erlang Ecosystem Foundation +# SPDX-License-Identifier: Apache-2.0 + erlang 27.1.2 rebar 3.24.0 elixir 1.17.3 diff --git a/LICENSES/Apache-2.0.txt b/LICENSES/Apache-2.0.txt new file mode 100644 index 00000000..137069b8 --- /dev/null +++ b/LICENSES/Apache-2.0.txt @@ -0,0 +1,73 @@ +Apache License +Version 2.0, January 2004 +http://www.apache.org/licenses/ + +TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION + +1. Definitions. + +"License" shall mean the terms and conditions for use, reproduction, and distribution as defined by Sections 1 through 9 of this document. + +"Licensor" shall mean the copyright owner or entity authorized by the copyright owner that is granting the License. + +"Legal Entity" shall mean the union of the acting entity and all other entities that control, are controlled by, or are under common control with that entity. For the purposes of this definition, "control" means (i) the power, direct or indirect, to cause the direction or management of such entity, whether by contract or otherwise, or (ii) ownership of fifty percent (50%) or more of the outstanding shares, or (iii) beneficial ownership of such entity. + +"You" (or "Your") shall mean an individual or Legal Entity exercising permissions granted by this License. + +"Source" form shall mean the preferred form for making modifications, including but not limited to software source code, documentation source, and configuration files. + +"Object" form shall mean any form resulting from mechanical transformation or translation of a Source form, including but not limited to compiled object code, generated documentation, and conversions to other media types. + +"Work" shall mean the work of authorship, whether in Source or Object form, made available under the License, as indicated by a copyright notice that is included in or attached to the work (an example is provided in the Appendix below). + +"Derivative Works" shall mean any work, whether in Source or Object form, that is based on (or derived from) the Work and for which the editorial revisions, annotations, elaborations, or other modifications represent, as a whole, an original work of authorship. For the purposes of this License, Derivative Works shall not include works that remain separable from, or merely link (or bind by name) to the interfaces of, the Work and Derivative Works thereof. + +"Contribution" shall mean any work of authorship, including the original version of the Work and any modifications or additions to that Work or Derivative Works thereof, that is intentionally submitted to Licensor for inclusion in the Work by the copyright owner or by an individual or Legal Entity authorized to submit on behalf of the copyright owner. For the purposes of this definition, "submitted" means any form of electronic, verbal, or written communication sent to the Licensor or its representatives, including but not limited to communication on electronic mailing lists, source code control systems, and issue tracking systems that are managed by, or on behalf of, the Licensor for the purpose of discussing and improving the Work, but excluding communication that is conspicuously marked or otherwise designated in writing by the copyright owner as "Not a Contribution." + +"Contributor" shall mean Licensor and any individual or Legal Entity on behalf of whom a Contribution has been received by Licensor and subsequently incorporated within the Work. + +2. Grant of Copyright License. Subject to the terms and conditions of this License, each Contributor hereby grants to You a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare Derivative Works of, publicly display, publicly perform, sublicense, and distribute the Work and such Derivative Works in Source or Object form. + +3. Grant of Patent License. Subject to the terms and conditions of this License, each Contributor hereby grants to You a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable (except as stated in this section) patent license to make, have made, use, offer to sell, sell, import, and otherwise transfer the Work, where such license applies only to those patent claims licensable by such Contributor that are necessarily infringed by their Contribution(s) alone or by combination of their Contribution(s) with the Work to which such Contribution(s) was submitted. If You institute patent litigation against any entity (including a cross-claim or counterclaim in a lawsuit) alleging that the Work or a Contribution incorporated within the Work constitutes direct or contributory patent infringement, then any patent licenses granted to You under this License for that Work shall terminate as of the date such litigation is filed. + +4. Redistribution. You may reproduce and distribute copies of the Work or Derivative Works thereof in any medium, with or without modifications, and in Source or Object form, provided that You meet the following conditions: + + (a) You must give any other recipients of the Work or Derivative Works a copy of this License; and + + (b) You must cause any modified files to carry prominent notices stating that You changed the files; and + + (c) You must retain, in the Source form of any Derivative Works that You distribute, all copyright, patent, trademark, and attribution notices from the Source form of the Work, excluding those notices that do not pertain to any part of the Derivative Works; and + + (d) If the Work includes a "NOTICE" text file as part of its distribution, then any Derivative Works that You distribute must include a readable copy of the attribution notices contained within such NOTICE file, excluding those notices that do not pertain to any part of the Derivative Works, in at least one of the following places: within a NOTICE text file distributed as part of the Derivative Works; within the Source form or documentation, if provided along with the Derivative Works; or, within a display generated by the Derivative Works, if and wherever such third-party notices normally appear. The contents of the NOTICE file are for informational purposes only and do not modify the License. You may add Your own attribution notices within Derivative Works that You distribute, alongside or as an addendum to the NOTICE text from the Work, provided that such additional attribution notices cannot be construed as modifying the License. + + You may add Your own copyright statement to Your modifications and may provide additional or different license terms and conditions for use, reproduction, or distribution of Your modifications, or for any such Derivative Works as a whole, provided Your use, reproduction, and distribution of the Work otherwise complies with the conditions stated in this License. + +5. Submission of Contributions. Unless You explicitly state otherwise, any Contribution intentionally submitted for inclusion in the Work by You to the Licensor shall be under the terms and conditions of this License, without any additional terms or conditions. Notwithstanding the above, nothing herein shall supersede or modify the terms of any separate license agreement you may have executed with Licensor regarding such Contributions. + +6. Trademarks. This License does not grant permission to use the trade names, trademarks, service marks, or product names of the Licensor, except as required for reasonable and customary use in describing the origin of the Work and reproducing the content of the NOTICE file. + +7. Disclaimer of Warranty. Unless required by applicable law or agreed to in writing, Licensor provides the Work (and each Contributor provides its Contributions) on an "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied, including, without limitation, any warranties or conditions of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A PARTICULAR PURPOSE. You are solely responsible for determining the appropriateness of using or redistributing the Work and assume any risks associated with Your exercise of permissions under this License. + +8. Limitation of Liability. In no event and under no legal theory, whether in tort (including negligence), contract, or otherwise, unless required by applicable law (such as deliberate and grossly negligent acts) or agreed to in writing, shall any Contributor be liable to You for damages, including any direct, indirect, special, incidental, or consequential damages of any character arising as a result of this License or out of the use or inability to use the Work (including but not limited to damages for loss of goodwill, work stoppage, computer failure or malfunction, or any and all other commercial damages or losses), even if such Contributor has been advised of the possibility of such damages. + +9. Accepting Warranty or Additional Liability. While redistributing the Work or Derivative Works thereof, You may choose to offer, and charge a fee for, acceptance of support, warranty, indemnity, or other liability obligations and/or rights consistent with this License. However, in accepting such obligations, You may act only on Your own behalf and on Your sole responsibility, not on behalf of any other Contributor, and only if You agree to indemnify, defend, and hold each Contributor harmless for any liability incurred by, or claims asserted against, such Contributor by reason of your accepting any such warranty or additional liability. + +END OF TERMS AND CONDITIONS + +APPENDIX: How to apply the Apache License to your work. + +To apply the Apache License to your work, attach the following boilerplate notice, with the fields enclosed by brackets "[]" replaced with your own identifying information. (Don't include the brackets!) The text should be enclosed in the appropriate comment syntax for the file format. We also recommend that a file or class name and description of purpose be included on the same "printed page" as the copyright notice for easier identification within third-party archives. + +Copyright [yyyy] [name of copyright owner] + +Licensed under the Apache License, Version 2.0 (the "License"); +you may not use this file except in compliance with the License. +You may obtain a copy of the License at + +http://www.apache.org/licenses/LICENSE-2.0 + +Unless required by applicable law or agreed to in writing, software +distributed under the License is distributed on an "AS IS" BASIS, +WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. +See the License for the specific language governing permissions and +limitations under the License. diff --git a/LICENSES/CC0-1.0.txt b/LICENSES/CC0-1.0.txt new file mode 100644 index 00000000..0e259d42 --- /dev/null +++ b/LICENSES/CC0-1.0.txt @@ -0,0 +1,121 @@ +Creative Commons Legal Code + +CC0 1.0 Universal + + CREATIVE COMMONS CORPORATION IS NOT A LAW FIRM AND DOES NOT PROVIDE + LEGAL SERVICES. DISTRIBUTION OF THIS DOCUMENT DOES NOT CREATE AN + ATTORNEY-CLIENT RELATIONSHIP. CREATIVE COMMONS PROVIDES THIS + INFORMATION ON AN "AS-IS" BASIS. CREATIVE COMMONS MAKES NO WARRANTIES + REGARDING THE USE OF THIS DOCUMENT OR THE INFORMATION OR WORKS + PROVIDED HEREUNDER, AND DISCLAIMS LIABILITY FOR DAMAGES RESULTING FROM + THE USE OF THIS DOCUMENT OR THE INFORMATION OR WORKS PROVIDED + HEREUNDER. + +Statement of Purpose + +The laws of most jurisdictions throughout the world automatically confer +exclusive Copyright and Related Rights (defined below) upon the creator +and subsequent owner(s) (each and all, an "owner") of an original work of +authorship and/or a database (each, a "Work"). + +Certain owners wish to permanently relinquish those rights to a Work for +the purpose of contributing to a commons of creative, cultural and +scientific works ("Commons") that the public can reliably and without fear +of later claims of infringement build upon, modify, incorporate in other +works, reuse and redistribute as freely as possible in any form whatsoever +and for any purposes, including without limitation commercial purposes. +These owners may contribute to the Commons to promote the ideal of a free +culture and the further production of creative, cultural and scientific +works, or to gain reputation or greater distribution for their Work in +part through the use and efforts of others. + +For these and/or other purposes and motivations, and without any +expectation of additional consideration or compensation, the person +associating CC0 with a Work (the "Affirmer"), to the extent that he or she +is an owner of Copyright and Related Rights in the Work, voluntarily +elects to apply CC0 to the Work and publicly distribute the Work under its +terms, with knowledge of his or her Copyright and Related Rights in the +Work and the meaning and intended legal effect of CC0 on those rights. + +1. Copyright and Related Rights. A Work made available under CC0 may be +protected by copyright and related or neighboring rights ("Copyright and +Related Rights"). Copyright and Related Rights include, but are not +limited to, the following: + + i. the right to reproduce, adapt, distribute, perform, display, + communicate, and translate a Work; + ii. moral rights retained by the original author(s) and/or performer(s); +iii. publicity and privacy rights pertaining to a person's image or + likeness depicted in a Work; + iv. rights protecting against unfair competition in regards to a Work, + subject to the limitations in paragraph 4(a), below; + v. rights protecting the extraction, dissemination, use and reuse of data + in a Work; + vi. database rights (such as those arising under Directive 96/9/EC of the + European Parliament and of the Council of 11 March 1996 on the legal + protection of databases, and under any national implementation + thereof, including any amended or successor version of such + directive); and +vii. other similar, equivalent or corresponding rights throughout the + world based on applicable law or treaty, and any national + implementations thereof. + +2. Waiver. To the greatest extent permitted by, but not in contravention +of, applicable law, Affirmer hereby overtly, fully, permanently, +irrevocably and unconditionally waives, abandons, and surrenders all of +Affirmer's Copyright and Related Rights and associated claims and causes +of action, whether now known or unknown (including existing as well as +future claims and causes of action), in the Work (i) in all territories +worldwide, (ii) for the maximum duration provided by applicable law or +treaty (including future time extensions), (iii) in any current or future +medium and for any number of copies, and (iv) for any purpose whatsoever, +including without limitation commercial, advertising or promotional +purposes (the "Waiver"). Affirmer makes the Waiver for the benefit of each +member of the public at large and to the detriment of Affirmer's heirs and +successors, fully intending that such Waiver shall not be subject to +revocation, rescission, cancellation, termination, or any other legal or +equitable action to disrupt the quiet enjoyment of the Work by the public +as contemplated by Affirmer's express Statement of Purpose. + +3. Public License Fallback. Should any part of the Waiver for any reason +be judged legally invalid or ineffective under applicable law, then the +Waiver shall be preserved to the maximum extent permitted taking into +account Affirmer's express Statement of Purpose. In addition, to the +extent the Waiver is so judged Affirmer hereby grants to each affected +person a royalty-free, non transferable, non sublicensable, non exclusive, +irrevocable and unconditional license to exercise Affirmer's Copyright and +Related Rights in the Work (i) in all territories worldwide, (ii) for the +maximum duration provided by applicable law or treaty (including future +time extensions), (iii) in any current or future medium and for any number +of copies, and (iv) for any purpose whatsoever, including without +limitation commercial, advertising or promotional purposes (the +"License"). The License shall be deemed effective as of the date CC0 was +applied by Affirmer to the Work. Should any part of the License for any +reason be judged legally invalid or ineffective under applicable law, such +partial invalidity or ineffectiveness shall not invalidate the remainder +of the License, and in such case Affirmer hereby affirms that he or she +will not (i) exercise any of his or her remaining Copyright and Related +Rights in the Work or (ii) assert any associated claims and causes of +action with respect to the Work, in either case contrary to Affirmer's +express Statement of Purpose. + +4. Limitations and Disclaimers. + + a. No trademark or patent rights held by Affirmer are waived, abandoned, + surrendered, licensed or otherwise affected by this document. + b. Affirmer offers the Work as-is and makes no representations or + warranties of any kind concerning the Work, express, implied, + statutory or otherwise, including without limitation warranties of + title, merchantability, fitness for a particular purpose, non + infringement, or the absence of latent or other defects, accuracy, or + the present or absence of errors, whether or not discoverable, all to + the greatest extent permissible under applicable law. + c. Affirmer disclaims responsibility for clearing rights of other persons + that may apply to the Work or any use thereof, including without + limitation any person's Copyright and Related Rights in the Work. + Further, Affirmer disclaims responsibility for obtaining any necessary + consents, permissions or other rights required for any use of the + Work. + d. Affirmer understands and acknowledges that Creative Commons is not a + party to this document and has no duty or obligation with respect to + this CC0 or use of the Work. diff --git a/LICENSES/LicenseRef-EEF-Logo.txt b/LICENSES/LicenseRef-EEF-Logo.txt new file mode 100644 index 00000000..5c79eb60 --- /dev/null +++ b/LICENSES/LicenseRef-EEF-Logo.txt @@ -0,0 +1,75 @@ +ERLANG ECOSYSTEM FOUNDATION TRADEMARK POLICY + +This Trademark Policy (“Policy”) governs the use of any logos, trademarks, service marks, and trade names (collectively, the “Marks”) owned by the Erlang Ecosystem Foundation (“EEF” or “we”). By using the Marks, you agree to comply with this Policy. + +------------------------- +1. OWNERSHIP AND SCOPE +------------------------- + +1.1 Ownership +All rights, title, and interest in and to the Marks belong exclusively to the EEF. Your use of the Marks inures to the benefit of the EEF. + +1.2 Scope of Policy +This Policy applies to all uses of the Marks, including digital and print publications, software, advertising, marketing, and other promotional materials. + +------------------------- +2. PERMISSIBLE USE +------------------------- + +2.1 EEF Projects +Individuals and entities may use the Marks in projects officially affiliated with or governed by the EEF. If you are unsure whether a project is officially affiliated, please contact eef@erlef.org. + +2.2 By Permission +You may request explicit written permission from the EEF to use the Marks. To request permission, email eef@erlef.org with details regarding the proposed use. You may not use the Marks until you have received our written permission. + +2.3 Nominative Fair Use +You may use the Marks only as is necessary to identify or refer to the EEF or its projects (for example, in news articles, product reviews, or scholarly works). This nominative fair use must: +- Be factual and not misleading, +- Not imply sponsorship, endorsement, or false association with the EEF, +- Use only as much of the Mark as is necessary to identify the EEF. + +------------------------- +3. PROHIBITED USES +------------------------- + +3.1 Misrepresentation +You may not use the Marks to suggest or imply that you are endorsed by, sponsored by, affiliated with, or otherwise associated with the EEF unless you have explicit written permission. + +3.2 Modifications or Derivatives +You may not alter the Marks, create derivatives, or incorporate them into another name, logo, or design without prior written approval. For example, changing the fonts, colors, or proportions of an EEF logo is not allowed without permission. + +3.3 Confusingly Similar +You may not use any mark, design, or logo that is confusingly similar to the Marks in a way that may mislead others into thinking they are part of or endorsed by the EEF. + +------------------------- +4. QUALITY AND USAGE GUIDELINES +------------------------- + +4.1 Quality Standards +Any use of the Marks must comply with any brand guidelines or usage standards published by the EEF (if applicable). The EEF reserves the right to review and approve or reject any proposed usage that does not meet our standards. + +4.2 Integrity of the Mark +You may not display the Marks in a way that is deceptive, objectionable, or damaging to the EEF’s reputation, or in any manner that violates applicable laws or regulations. + +------------------------- +5. TERMINATION OF PERMISSION +------------------------- + +The EEF may revoke permission to use the Marks at any time, for any reason, upon notice. Once permission is revoked, you must immediately discontinue all use of the Marks unless otherwise authorized in writing. + +------------------------- +6. DISCLAIMER AND LIMITATION OF LIABILITY +------------------------- + +The EEF disclaims any warranties that might be construed from this Policy or any other documentation related to the Marks. Under no circumstances will the EEF be held liable to any party for any direct, indirect, special, or other consequential damages arising from use of the Marks. + +------------------------- +7. CONTACT INFORMATION +------------------------- + +For questions, clarifications, or to request permission to use the Marks, please contact: + +Erlang Ecosystem Foundation +Attn: Trademark Usage +Email: eef@erlef.org +Website: https://erlef.org diff --git a/LICENSES/LicenseRef-OpenID-Mark.txt b/LICENSES/LicenseRef-OpenID-Mark.txt new file mode 100644 index 00000000..94b64e76 --- /dev/null +++ b/LICENSES/LicenseRef-OpenID-Mark.txt @@ -0,0 +1,4 @@ +Usage only in conformance with the OpenID Foundation Terms and Conditions for +Certification of Conformance to an OpenID Connect Conformance Profile: + +https://openid.net/mark/ \ No newline at end of file diff --git a/README.md b/README.md index b032610b..9caab7a8 100644 --- a/README.md +++ b/README.md @@ -1,3 +1,8 @@ + +
["src"], diff --git a/erlang_ls.config b/erlang_ls.config deleted file mode 100644 index 4a7c8282..00000000 --- a/erlang_ls.config +++ /dev/null @@ -1,3 +0,0 @@ -include_dirs: - - "include" - - "_build/default/lib" \ No newline at end of file diff --git a/include/internal/doc.hrl b/include/internal/doc.hrl index 2260b739..d46e10a2 100644 --- a/include/internal/doc.hrl +++ b/include/internal/doc.hrl @@ -1,3 +1,6 @@ +%% SPDX-FileCopyrightText: 2023 Erlang Ecosystem Foundation +%% SPDX-License-Identifier: Apache-2.0 + %% TODO: Remove the following macros as soon as only OTP >= 27 is supported. -if(?OTP_RELEASE >= 27). -define(MODULEDOC(Str), -moduledoc(Str)). diff --git a/include/oidcc.hrl b/include/oidcc.hrl index 16f708c3..78486669 100644 --- a/include/oidcc.hrl +++ b/include/oidcc.hrl @@ -1,3 +1,6 @@ +%% SPDX-FileCopyrightText: 2023 Erlang Ecosystem Foundation +%% SPDX-License-Identifier: Apache-2.0 + -ifndef(OIDCC_HRL). -include("oidcc_provider_configuration.hrl"). diff --git a/include/oidcc_client_context.hrl b/include/oidcc_client_context.hrl index 7c2bd656..546adf0b 100644 --- a/include/oidcc_client_context.hrl +++ b/include/oidcc_client_context.hrl @@ -1,3 +1,6 @@ +%% SPDX-FileCopyrightText: 2023 Erlang Ecosystem Foundation +%% SPDX-License-Identifier: Apache-2.0 + -ifndef(OIDCC_CLIENT_CONTEXT_HRL). -record(oidcc_client_context, { diff --git a/include/oidcc_client_registration.hrl b/include/oidcc_client_registration.hrl index 2f3f5ece..18e918db 100644 --- a/include/oidcc_client_registration.hrl +++ b/include/oidcc_client_registration.hrl @@ -1,3 +1,6 @@ +%% SPDX-FileCopyrightText: 2023 Erlang Ecosystem Foundation +%% SPDX-License-Identifier: Apache-2.0 + -ifndef(OIDCC_CLIENT_REGISTRATION_HRL). %% @see https://openid.net/specs/openid-connect-registration-1_0.html#ClientMetadata diff --git a/include/oidcc_provider_configuration.hrl b/include/oidcc_provider_configuration.hrl index 2611d1f9..2cfd87a9 100644 --- a/include/oidcc_provider_configuration.hrl +++ b/include/oidcc_provider_configuration.hrl @@ -1,3 +1,6 @@ +%% SPDX-FileCopyrightText: 2023 Erlang Ecosystem Foundation +%% SPDX-License-Identifier: Apache-2.0 + -ifndef(oidcc_provider_configuration_HRL). %% @see https://openid.net/specs/openid-connect-discovery-1_0.html#ProviderMetadata diff --git a/include/oidcc_token.hrl b/include/oidcc_token.hrl index 9ce7f762..46af7926 100644 --- a/include/oidcc_token.hrl +++ b/include/oidcc_token.hrl @@ -1,3 +1,6 @@ +%% SPDX-FileCopyrightText: 2023 Erlang Ecosystem Foundation +%% SPDX-License-Identifier: Apache-2.0 + -ifndef(OIDCC_TOKEN_HRL). -record(oidcc_token_id, {token :: binary(), claims :: oidcc_jwt_util:claims()}). diff --git a/include/oidcc_token_introspection.hrl b/include/oidcc_token_introspection.hrl index 1f8643b7..c8ec6cc5 100644 --- a/include/oidcc_token_introspection.hrl +++ b/include/oidcc_token_introspection.hrl @@ -1,3 +1,6 @@ +%% SPDX-FileCopyrightText: 2023 Erlang Ecosystem Foundation +%% SPDX-License-Identifier: Apache-2.0 + -ifndef(OIDCC_TOKEN_INTROSPECTION_HRL). %% @see https://datatracker.ietf.org/doc/html/rfc7662#section-2.2 diff --git a/lib/oidcc.ex b/lib/oidcc.ex index f0245291..ecb57172 100644 --- a/lib/oidcc.ex +++ b/lib/oidcc.ex @@ -1,3 +1,6 @@ +# SPDX-FileCopyrightText: 2023 Erlang Ecosystem Foundation +# SPDX-License-Identifier: Apache-2.0 + defmodule Oidcc do @moduledoc """ OpenID Connect High Level Interface diff --git a/lib/oidcc/authorization.ex b/lib/oidcc/authorization.ex index dfeeaac1..345e2a8d 100644 --- a/lib/oidcc/authorization.ex +++ b/lib/oidcc/authorization.ex @@ -1,3 +1,6 @@ +# SPDX-FileCopyrightText: 2023 Erlang Ecosystem Foundation +# SPDX-License-Identifier: Apache-2.0 + defmodule Oidcc.Authorization do use TelemetryRegistry diff --git a/lib/oidcc/client_context.ex b/lib/oidcc/client_context.ex index 396dd119..83798f97 100644 --- a/lib/oidcc/client_context.ex +++ b/lib/oidcc/client_context.ex @@ -1,3 +1,6 @@ +# SPDX-FileCopyrightText: 2023 Erlang Ecosystem Foundation +# SPDX-License-Identifier: Apache-2.0 + defmodule Oidcc.ClientContext do @moduledoc """ Client Configuration for authorization, token exchange and userinfo diff --git a/lib/oidcc/client_registration.ex b/lib/oidcc/client_registration.ex index 29902bc1..13aa30f7 100644 --- a/lib/oidcc/client_registration.ex +++ b/lib/oidcc/client_registration.ex @@ -1,3 +1,6 @@ +# SPDX-FileCopyrightText: 2023 Erlang Ecosystem Foundation +# SPDX-License-Identifier: Apache-2.0 + defmodule Oidcc.ClientRegistration do use TelemetryRegistry diff --git a/lib/oidcc/client_registration/response.ex b/lib/oidcc/client_registration/response.ex index 830e8aaa..df5babfe 100644 --- a/lib/oidcc/client_registration/response.ex +++ b/lib/oidcc/client_registration/response.ex @@ -1,3 +1,6 @@ +# SPDX-FileCopyrightText: 2023 Erlang Ecosystem Foundation +# SPDX-License-Identifier: Apache-2.0 + defmodule Oidcc.ClientRegistration.Response do @moduledoc """ Client Registration Response Struct diff --git a/lib/oidcc/logout.ex b/lib/oidcc/logout.ex index 6382b1f9..2d04cd1b 100644 --- a/lib/oidcc/logout.ex +++ b/lib/oidcc/logout.ex @@ -1,3 +1,6 @@ +# SPDX-FileCopyrightText: 2023 Erlang Ecosystem Foundation +# SPDX-License-Identifier: Apache-2.0 + defmodule Oidcc.Logout do @moduledoc """ Logout from the OpenID Provider diff --git a/lib/oidcc/provider_configuration.ex b/lib/oidcc/provider_configuration.ex index 5a0e7658..a86c77fa 100644 --- a/lib/oidcc/provider_configuration.ex +++ b/lib/oidcc/provider_configuration.ex @@ -1,3 +1,6 @@ +# SPDX-FileCopyrightText: 2023 Erlang Ecosystem Foundation +# SPDX-License-Identifier: Apache-2.0 + defmodule Oidcc.ProviderConfiguration do use TelemetryRegistry diff --git a/lib/oidcc/provider_configuration/worker.ex b/lib/oidcc/provider_configuration/worker.ex index 5ad7a253..50160e3b 100644 --- a/lib/oidcc/provider_configuration/worker.ex +++ b/lib/oidcc/provider_configuration/worker.ex @@ -1,3 +1,6 @@ +# SPDX-FileCopyrightText: 2023 Erlang Ecosystem Foundation +# SPDX-License-Identifier: Apache-2.0 + defmodule Oidcc.ProviderConfiguration.Worker do @moduledoc """ OIDC Config Provider Worker diff --git a/lib/record_struct.ex b/lib/oidcc/record_struct.ex similarity index 94% rename from lib/record_struct.ex rename to lib/oidcc/record_struct.ex index fe6401e3..79a462a9 100644 --- a/lib/record_struct.ex +++ b/lib/oidcc/record_struct.ex @@ -1,3 +1,6 @@ +# SPDX-FileCopyrightText: 2023 Erlang Ecosystem Foundation +# SPDX-License-Identifier: Apache-2.0 + defmodule Oidcc.RecordStruct do @moduledoc false diff --git a/lib/oidcc/token.ex b/lib/oidcc/token.ex index 3a955cef..1683b921 100644 --- a/lib/oidcc/token.ex +++ b/lib/oidcc/token.ex @@ -1,3 +1,6 @@ +# SPDX-FileCopyrightText: 2023 Erlang Ecosystem Foundation +# SPDX-License-Identifier: Apache-2.0 + defmodule Oidcc.Token do use TelemetryRegistry diff --git a/lib/oidcc/token/access.ex b/lib/oidcc/token/access.ex index b993bbf3..d6105c32 100644 --- a/lib/oidcc/token/access.ex +++ b/lib/oidcc/token/access.ex @@ -1,3 +1,6 @@ +# SPDX-FileCopyrightText: 2023 Erlang Ecosystem Foundation +# SPDX-License-Identifier: Apache-2.0 + defmodule Oidcc.Token.Access do @moduledoc """ Access Token struct. diff --git a/lib/oidcc/token/id.ex b/lib/oidcc/token/id.ex index 3d36a464..b927a480 100644 --- a/lib/oidcc/token/id.ex +++ b/lib/oidcc/token/id.ex @@ -1,3 +1,6 @@ +# SPDX-FileCopyrightText: 2023 Erlang Ecosystem Foundation +# SPDX-License-Identifier: Apache-2.0 + defmodule Oidcc.Token.Id do @moduledoc """ ID Token struct diff --git a/lib/oidcc/token/refresh.ex b/lib/oidcc/token/refresh.ex index 57a357da..7b61bcc5 100644 --- a/lib/oidcc/token/refresh.ex +++ b/lib/oidcc/token/refresh.ex @@ -1,3 +1,6 @@ +# SPDX-FileCopyrightText: 2023 Erlang Ecosystem Foundation +# SPDX-License-Identifier: Apache-2.0 + defmodule Oidcc.Token.Refresh do @moduledoc """ Refresh Token struct diff --git a/lib/oidcc/token_introspection.ex b/lib/oidcc/token_introspection.ex index 74d25caa..616b557c 100644 --- a/lib/oidcc/token_introspection.ex +++ b/lib/oidcc/token_introspection.ex @@ -1,3 +1,6 @@ +# SPDX-FileCopyrightText: 2023 Erlang Ecosystem Foundation +# SPDX-License-Identifier: Apache-2.0 + defmodule Oidcc.TokenIntrospection do use TelemetryRegistry diff --git a/lib/oidcc/userinfo.ex b/lib/oidcc/userinfo.ex index 99d17f7d..92e15279 100644 --- a/lib/oidcc/userinfo.ex +++ b/lib/oidcc/userinfo.ex @@ -1,3 +1,6 @@ +# SPDX-FileCopyrightText: 2023 Erlang Ecosystem Foundation +# SPDX-License-Identifier: Apache-2.0 + defmodule Oidcc.Userinfo do use TelemetryRegistry diff --git a/mix.exs b/mix.exs index 59224f3d..46c2b85b 100644 --- a/mix.exs +++ b/mix.exs @@ -1,3 +1,6 @@ +# SPDX-FileCopyrightText: 2023 Erlang Ecosystem Foundation +# SPDX-License-Identifier: Apache-2.0 + defmodule Oidcc.Mixfile do use Mix.Project diff --git a/priv/test/fixtures/README.md b/priv/test/fixtures/README.md index 4184cb8b..de840091 100644 --- a/priv/test/fixtures/README.md +++ b/priv/test/fixtures/README.md @@ -1,3 +1,8 @@ + + # Regenerating `jwk_cert.pem` ``` bash diff --git a/priv/test/fixtures/REUSE.toml b/priv/test/fixtures/REUSE.toml new file mode 100644 index 00000000..a21c4579 --- /dev/null +++ b/priv/test/fixtures/REUSE.toml @@ -0,0 +1,10 @@ +version = 1 + +[[annotations]] +path = [ + "*.json", + "*.pem", + "*.csr" +] +SPDX-FileCopyrightText = "2023 Erlang Ecosystem Foundation" +SPDX-License-Identifier = "CC0-1.0" diff --git a/priv/test/fixtures/SECRET_NOTE.md b/priv/test/fixtures/SECRET_NOTE.md index b501febd..546e0dac 100644 --- a/priv/test/fixtures/SECRET_NOTE.md +++ b/priv/test/fixtures/SECRET_NOTE.md @@ -1,3 +1,8 @@ + + # Note about the Secrets in the Fixtures The secrets contained in this fixture directory were intentionally leaked. They diff --git a/rebar.config b/rebar.config index 7da2e45f..5cfe39cb 100644 --- a/rebar.config +++ b/rebar.config @@ -1,3 +1,6 @@ +%% SPDX-FileCopyrightText: 2023 Erlang Ecosystem Foundation +%% SPDX-License-Identifier: Apache-2.0 + {erl_opts, [warn_unused_import, warn_export_vars, verbose, report, debug_info]}. {minimum_otp_vsn, "26"}. diff --git a/rebar.config.script b/rebar.config.script index f01af064..8819bef0 100644 --- a/rebar.config.script +++ b/rebar.config.script @@ -1,3 +1,6 @@ +%% SPDX-FileCopyrightText: 2023 Erlang Ecosystem Foundation +%% SPDX-License-Identifier: Apache-2.0 + case {os:getenv("GITHUB_ACTIONS"), os:getenv("GITHUB_TOKEN")} of {"true", Token} when is_list(Token) -> CONFIG1 = [{coveralls_repo_token, Token}, diff --git a/src/oidcc.app.src b/src/oidcc.app.src index b9768dcf..00badea9 100644 --- a/src/oidcc.app.src +++ b/src/oidcc.app.src @@ -1,3 +1,6 @@ +%% SPDX-FileCopyrightText: 2023 Erlang Ecosystem Foundation +%% SPDX-License-Identifier: Apache-2.0 + {application, oidcc, [ {description, "OpenID Connect client library for the BEAM."}, {vsn, "3.2.6"}, diff --git a/src/oidcc.erl b/src/oidcc.erl index 817afc33..caba13db 100644 --- a/src/oidcc.erl +++ b/src/oidcc.erl @@ -1,3 +1,6 @@ +%% SPDX-FileCopyrightText: 2023 Erlang Ecosystem Foundation +%% SPDX-License-Identifier: Apache-2.0 + -module(oidcc). -feature(maybe_expr, enable). diff --git a/src/oidcc_auth_util.erl b/src/oidcc_auth_util.erl index b4338a14..e8f46a5c 100644 --- a/src/oidcc_auth_util.erl +++ b/src/oidcc_auth_util.erl @@ -1,3 +1,6 @@ +%% SPDX-FileCopyrightText: 2023 Erlang Ecosystem Foundation +%% SPDX-License-Identifier: Apache-2.0 + -module(oidcc_auth_util). -feature(maybe_expr, enable). diff --git a/src/oidcc_authorization.erl b/src/oidcc_authorization.erl index 0f1b214e..c7d0ec61 100644 --- a/src/oidcc_authorization.erl +++ b/src/oidcc_authorization.erl @@ -1,3 +1,6 @@ +%% SPDX-FileCopyrightText: 2023 Erlang Ecosystem Foundation +%% SPDX-License-Identifier: Apache-2.0 + -module(oidcc_authorization). -feature(maybe_expr, enable). diff --git a/src/oidcc_backoff.erl b/src/oidcc_backoff.erl index a0803d9c..0ed18852 100644 --- a/src/oidcc_backoff.erl +++ b/src/oidcc_backoff.erl @@ -1,3 +1,6 @@ +%% SPDX-FileCopyrightText: 2023 Erlang Ecosystem Foundation +%% SPDX-License-Identifier: Apache-2.0 + -module(oidcc_backoff). -include("internal/doc.hrl"). diff --git a/src/oidcc_client_context.erl b/src/oidcc_client_context.erl index ff3e250f..24a6d0f5 100644 --- a/src/oidcc_client_context.erl +++ b/src/oidcc_client_context.erl @@ -1,3 +1,6 @@ +%% SPDX-FileCopyrightText: 2023 Erlang Ecosystem Foundation +%% SPDX-License-Identifier: Apache-2.0 + -module(oidcc_client_context). -feature(maybe_expr, enable). diff --git a/src/oidcc_client_registration.erl b/src/oidcc_client_registration.erl index e8e4f340..87a38887 100644 --- a/src/oidcc_client_registration.erl +++ b/src/oidcc_client_registration.erl @@ -1,3 +1,6 @@ +%% SPDX-FileCopyrightText: 2023 Erlang Ecosystem Foundation +%% SPDX-License-Identifier: Apache-2.0 + -module(oidcc_client_registration). -feature(maybe_expr, enable). diff --git a/src/oidcc_decode_util.erl b/src/oidcc_decode_util.erl index de2b0f36..c176cbc5 100644 --- a/src/oidcc_decode_util.erl +++ b/src/oidcc_decode_util.erl @@ -1,3 +1,6 @@ +%% SPDX-FileCopyrightText: 2023 Erlang Ecosystem Foundation +%% SPDX-License-Identifier: Apache-2.0 + -module(oidcc_decode_util). -include("internal/doc.hrl"). diff --git a/src/oidcc_http_util.erl b/src/oidcc_http_util.erl index ddf4c7f6..ff859d2d 100644 --- a/src/oidcc_http_util.erl +++ b/src/oidcc_http_util.erl @@ -1,3 +1,6 @@ +%% SPDX-FileCopyrightText: 2023 Erlang Ecosystem Foundation +%% SPDX-License-Identifier: Apache-2.0 + -module(oidcc_http_util). -feature(maybe_expr, enable). diff --git a/src/oidcc_jwt_util.erl b/src/oidcc_jwt_util.erl index 42da9e43..f964e36f 100644 --- a/src/oidcc_jwt_util.erl +++ b/src/oidcc_jwt_util.erl @@ -1,3 +1,6 @@ +%% SPDX-FileCopyrightText: 2023 Erlang Ecosystem Foundation +%% SPDX-License-Identifier: Apache-2.0 + -module(oidcc_jwt_util). -feature(maybe_expr, enable). diff --git a/src/oidcc_logout.erl b/src/oidcc_logout.erl index 46ef5f14..5c652f2b 100644 --- a/src/oidcc_logout.erl +++ b/src/oidcc_logout.erl @@ -1,3 +1,6 @@ +%% SPDX-FileCopyrightText: 2023 Erlang Ecosystem Foundation +%% SPDX-License-Identifier: Apache-2.0 + -module(oidcc_logout). -feature(maybe_expr, enable). diff --git a/src/oidcc_profile.erl b/src/oidcc_profile.erl index 0eb6462e..e7971423 100644 --- a/src/oidcc_profile.erl +++ b/src/oidcc_profile.erl @@ -1,3 +1,6 @@ +%% SPDX-FileCopyrightText: 2023 Erlang Ecosystem Foundation +%% SPDX-License-Identifier: Apache-2.0 + -module(oidcc_profile). -feature(maybe_expr, enable). diff --git a/src/oidcc_provider_configuration.erl b/src/oidcc_provider_configuration.erl index b9b3533b..8aef47a7 100644 --- a/src/oidcc_provider_configuration.erl +++ b/src/oidcc_provider_configuration.erl @@ -1,3 +1,6 @@ +%% SPDX-FileCopyrightText: 2023 Erlang Ecosystem Foundation +%% SPDX-License-Identifier: Apache-2.0 + -module(oidcc_provider_configuration). -feature(maybe_expr, enable). diff --git a/src/oidcc_provider_configuration_worker.erl b/src/oidcc_provider_configuration_worker.erl index 0c046ec1..2f4eb4b5 100644 --- a/src/oidcc_provider_configuration_worker.erl +++ b/src/oidcc_provider_configuration_worker.erl @@ -1,3 +1,6 @@ +%% SPDX-FileCopyrightText: 2023 Erlang Ecosystem Foundation +%% SPDX-License-Identifier: Apache-2.0 + -module(oidcc_provider_configuration_worker). -feature(maybe_expr, enable). diff --git a/src/oidcc_scope.erl b/src/oidcc_scope.erl index 749093c2..8097aea2 100644 --- a/src/oidcc_scope.erl +++ b/src/oidcc_scope.erl @@ -1,3 +1,6 @@ +%% SPDX-FileCopyrightText: 2023 Erlang Ecosystem Foundation +%% SPDX-License-Identifier: Apache-2.0 + -module(oidcc_scope). -feature(maybe_expr, enable). diff --git a/src/oidcc_token.erl b/src/oidcc_token.erl index 4e226373..5623486f 100644 --- a/src/oidcc_token.erl +++ b/src/oidcc_token.erl @@ -1,3 +1,6 @@ +%% SPDX-FileCopyrightText: 2023 Erlang Ecosystem Foundation +%% SPDX-License-Identifier: Apache-2.0 + -module(oidcc_token). -feature(maybe_expr, enable). diff --git a/src/oidcc_token_introspection.erl b/src/oidcc_token_introspection.erl index 8f6e227e..7567b593 100644 --- a/src/oidcc_token_introspection.erl +++ b/src/oidcc_token_introspection.erl @@ -1,3 +1,6 @@ +%% SPDX-FileCopyrightText: 2023 Erlang Ecosystem Foundation +%% SPDX-License-Identifier: Apache-2.0 + -module(oidcc_token_introspection). -feature(maybe_expr, enable). diff --git a/src/oidcc_userinfo.erl b/src/oidcc_userinfo.erl index 157ea853..75b6c976 100644 --- a/src/oidcc_userinfo.erl +++ b/src/oidcc_userinfo.erl @@ -1,3 +1,6 @@ +%% SPDX-FileCopyrightText: 2023 Erlang Ecosystem Foundation +%% SPDX-License-Identifier: Apache-2.0 + -module(oidcc_userinfo). -feature(maybe_expr, enable). diff --git a/test/oidcc/authorization_test.exs b/test/oidcc/authorization_test.exs index be629228..35514ced 100644 --- a/test/oidcc/authorization_test.exs +++ b/test/oidcc/authorization_test.exs @@ -1,3 +1,6 @@ +# SPDX-FileCopyrightText: 2023 Erlang Ecosystem Foundation +# SPDX-License-Identifier: Apache-2.0 + defmodule Oidcc.AuthorizationTest do use ExUnit.Case, async: true diff --git a/test/oidcc/client_context_test.exs b/test/oidcc/client_context_test.exs index 1965be77..c173fc41 100644 --- a/test/oidcc/client_context_test.exs +++ b/test/oidcc/client_context_test.exs @@ -1,3 +1,6 @@ +# SPDX-FileCopyrightText: 2023 Erlang Ecosystem Foundation +# SPDX-License-Identifier: Apache-2.0 + defmodule Oidcc.ClientContextTest do use ExUnit.Case, async: true diff --git a/test/oidcc/client_registration/response_test.exs b/test/oidcc/client_registration/response_test.exs index 106a28de..a30bd339 100644 --- a/test/oidcc/client_registration/response_test.exs +++ b/test/oidcc/client_registration/response_test.exs @@ -1,3 +1,6 @@ +# SPDX-FileCopyrightText: 2023 Erlang Ecosystem Foundation +# SPDX-License-Identifier: Apache-2.0 + defmodule Oidcc.ClientRegistration.ResponseTest do use ExUnit.Case, async: true diff --git a/test/oidcc/client_registration_test.exs b/test/oidcc/client_registration_test.exs index 847fe88c..37b4ebd6 100644 --- a/test/oidcc/client_registration_test.exs +++ b/test/oidcc/client_registration_test.exs @@ -1,3 +1,6 @@ +# SPDX-FileCopyrightText: 2023 Erlang Ecosystem Foundation +# SPDX-License-Identifier: Apache-2.0 + defmodule Oidcc.ClientRegistrationTest do use ExUnit.Case, async: true diff --git a/test/oidcc/logout_test.exs b/test/oidcc/logout_test.exs index 529b8c82..2d928203 100644 --- a/test/oidcc/logout_test.exs +++ b/test/oidcc/logout_test.exs @@ -1,3 +1,6 @@ +# SPDX-FileCopyrightText: 2023 Erlang Ecosystem Foundation +# SPDX-License-Identifier: Apache-2.0 + defmodule Oidcc.LogoutTest do use ExUnit.Case, async: true diff --git a/test/oidcc/provider_configuration/worker_test.exs b/test/oidcc/provider_configuration/worker_test.exs index bfe3caf7..9c7a9150 100644 --- a/test/oidcc/provider_configuration/worker_test.exs +++ b/test/oidcc/provider_configuration/worker_test.exs @@ -1,3 +1,6 @@ +# SPDX-FileCopyrightText: 2023 Erlang Ecosystem Foundation +# SPDX-License-Identifier: Apache-2.0 + defmodule Oidcc.ProviderConfiguration.WorkerTest do use ExUnit.Case, async: true diff --git a/test/oidcc/provider_configuration_test.exs b/test/oidcc/provider_configuration_test.exs index 7067c672..53975b02 100644 --- a/test/oidcc/provider_configuration_test.exs +++ b/test/oidcc/provider_configuration_test.exs @@ -1,3 +1,6 @@ +# SPDX-FileCopyrightText: 2023 Erlang Ecosystem Foundation +# SPDX-License-Identifier: Apache-2.0 + defmodule Oidcc.ProviderConfigurationTest do use ExUnit.Case, async: true diff --git a/test/oidcc/token/access_test.exs b/test/oidcc/token/access_test.exs index 0639a7b8..e2397877 100644 --- a/test/oidcc/token/access_test.exs +++ b/test/oidcc/token/access_test.exs @@ -1,3 +1,6 @@ +# SPDX-FileCopyrightText: 2023 Erlang Ecosystem Foundation +# SPDX-License-Identifier: Apache-2.0 + defmodule Oidcc.Token.AccessTest do use ExUnit.Case, async: true diff --git a/test/oidcc/token/id_test.exs b/test/oidcc/token/id_test.exs index e72d8809..3bfe2fdd 100644 --- a/test/oidcc/token/id_test.exs +++ b/test/oidcc/token/id_test.exs @@ -1,3 +1,6 @@ +# SPDX-FileCopyrightText: 2023 Erlang Ecosystem Foundation +# SPDX-License-Identifier: Apache-2.0 + defmodule Oidcc.Token.IdTest do use ExUnit.Case, async: true diff --git a/test/oidcc/token/refresh_test.exs b/test/oidcc/token/refresh_test.exs index 43d145b2..82d35947 100644 --- a/test/oidcc/token/refresh_test.exs +++ b/test/oidcc/token/refresh_test.exs @@ -1,3 +1,6 @@ +# SPDX-FileCopyrightText: 2023 Erlang Ecosystem Foundation +# SPDX-License-Identifier: Apache-2.0 + defmodule Oidcc.Token.RefreshTest do use ExUnit.Case, async: true diff --git a/test/oidcc/token_introspection_test.exs b/test/oidcc/token_introspection_test.exs index f4dd7a77..cd342f78 100644 --- a/test/oidcc/token_introspection_test.exs +++ b/test/oidcc/token_introspection_test.exs @@ -1,3 +1,6 @@ +# SPDX-FileCopyrightText: 2023 Erlang Ecosystem Foundation +# SPDX-License-Identifier: Apache-2.0 + defmodule Oidcc.TokenIntrospectionTest do use ExUnit.Case diff --git a/test/oidcc/token_test.exs b/test/oidcc/token_test.exs index e2166103..edba3832 100644 --- a/test/oidcc/token_test.exs +++ b/test/oidcc/token_test.exs @@ -1,3 +1,6 @@ +# SPDX-FileCopyrightText: 2023 Erlang Ecosystem Foundation +# SPDX-License-Identifier: Apache-2.0 + defmodule Oidcc.TokenTest do use ExUnit.Case, async: false diff --git a/test/oidcc/userinfo_test.exs b/test/oidcc/userinfo_test.exs index 33dca9a4..18fbb374 100644 --- a/test/oidcc/userinfo_test.exs +++ b/test/oidcc/userinfo_test.exs @@ -1,3 +1,6 @@ +# SPDX-FileCopyrightText: 2023 Erlang Ecosystem Foundation +# SPDX-License-Identifier: Apache-2.0 + defmodule Oidcc.UserinfoTest do use ExUnit.Case, async: false diff --git a/test/oidcc_SUITE.erl b/test/oidcc_SUITE.erl index eedbb9c1..959e0d73 100644 --- a/test/oidcc_SUITE.erl +++ b/test/oidcc_SUITE.erl @@ -1,3 +1,6 @@ +%% SPDX-FileCopyrightText: 2023 Erlang Ecosystem Foundation +%% SPDX-License-Identifier: Apache-2.0 + -module(oidcc_SUITE). -export([all/0]). diff --git a/test/oidcc_auth_util_test.erl b/test/oidcc_auth_util_test.erl index a44a8817..43e98159 100644 --- a/test/oidcc_auth_util_test.erl +++ b/test/oidcc_auth_util_test.erl @@ -1,3 +1,6 @@ +%% SPDX-FileCopyrightText: 2023 Erlang Ecosystem Foundation +%% SPDX-License-Identifier: Apache-2.0 + -module(oidcc_auth_util_test). -include_lib("eunit/include/eunit.hrl"). diff --git a/test/oidcc_authorization_SUITE.erl b/test/oidcc_authorization_SUITE.erl index 61de536e..3c6ef94d 100644 --- a/test/oidcc_authorization_SUITE.erl +++ b/test/oidcc_authorization_SUITE.erl @@ -1,3 +1,6 @@ +%% SPDX-FileCopyrightText: 2023 Erlang Ecosystem Foundation +%% SPDX-License-Identifier: Apache-2.0 + -module(oidcc_authorization_SUITE). -include("oidcc_client_context.hrl"). diff --git a/test/oidcc_authorization_test.erl b/test/oidcc_authorization_test.erl index bc4bde60..c8aa1e9a 100644 --- a/test/oidcc_authorization_test.erl +++ b/test/oidcc_authorization_test.erl @@ -1,3 +1,6 @@ +%% SPDX-FileCopyrightText: 2023 Erlang Ecosystem Foundation +%% SPDX-License-Identifier: Apache-2.0 + -module(oidcc_authorization_test). -include_lib("eunit/include/eunit.hrl"). diff --git a/test/oidcc_backoff_test.erl b/test/oidcc_backoff_test.erl index 08b4de6b..9cb0a96a 100644 --- a/test/oidcc_backoff_test.erl +++ b/test/oidcc_backoff_test.erl @@ -1,3 +1,7 @@ +%% SPDX-FileCopyrightText: 2023 Erlang Ecosystem Foundation +%% SPDX-FileCopyrightText: 2016-2024 Ecto DB Connection Contributors +%% SPDX-License-Identifier: Apache-2.0 + %% Based on https://github.com/elixir-ecto/db_connection/blob/8ef1f2ea54922873590b8939f2dad6b031c5b49c/test/db_connection/backoff_test.exs -module(oidcc_backoff_test). diff --git a/test/oidcc_client_context_SUITE.erl b/test/oidcc_client_context_SUITE.erl index cd4f6df4..3d36d37e 100644 --- a/test/oidcc_client_context_SUITE.erl +++ b/test/oidcc_client_context_SUITE.erl @@ -1,3 +1,6 @@ +%% SPDX-FileCopyrightText: 2023 Erlang Ecosystem Foundation +%% SPDX-License-Identifier: Apache-2.0 + -module(oidcc_client_context_SUITE). -export([all/0]). diff --git a/test/oidcc_client_context_test.erl b/test/oidcc_client_context_test.erl index 6d4527ac..ee952e85 100644 --- a/test/oidcc_client_context_test.erl +++ b/test/oidcc_client_context_test.erl @@ -1,3 +1,6 @@ +%% SPDX-FileCopyrightText: 2023 Erlang Ecosystem Foundation +%% SPDX-License-Identifier: Apache-2.0 + -module(oidcc_client_context_test). -include_lib("eunit/include/eunit.hrl"). diff --git a/test/oidcc_client_registration_test.erl b/test/oidcc_client_registration_test.erl index 077861ab..ed1c5363 100644 --- a/test/oidcc_client_registration_test.erl +++ b/test/oidcc_client_registration_test.erl @@ -1,3 +1,6 @@ +%% SPDX-FileCopyrightText: 2023 Erlang Ecosystem Foundation +%% SPDX-License-Identifier: Apache-2.0 + -module(oidcc_client_registration_test). -include_lib("eunit/include/eunit.hrl"). diff --git a/test/oidcc_http_util_SUITE.erl b/test/oidcc_http_util_SUITE.erl index 91880633..1044685b 100644 --- a/test/oidcc_http_util_SUITE.erl +++ b/test/oidcc_http_util_SUITE.erl @@ -1,3 +1,6 @@ +%% SPDX-FileCopyrightText: 2023 Erlang Ecosystem Foundation +%% SPDX-License-Identifier: Apache-2.0 + -module(oidcc_http_util_SUITE). -export([all/0]). diff --git a/test/oidcc_http_util_test.erl b/test/oidcc_http_util_test.erl index 73ff7876..af1122b9 100644 --- a/test/oidcc_http_util_test.erl +++ b/test/oidcc_http_util_test.erl @@ -1,3 +1,6 @@ +%% SPDX-FileCopyrightText: 2023 Erlang Ecosystem Foundation +%% SPDX-License-Identifier: Apache-2.0 + -module(oidcc_http_util_test). -include_lib("eunit/include/eunit.hrl"). diff --git a/test/oidcc_logout_test.erl b/test/oidcc_logout_test.erl index 3f9a8cfe..2ce21f8d 100644 --- a/test/oidcc_logout_test.erl +++ b/test/oidcc_logout_test.erl @@ -1,3 +1,6 @@ +%% SPDX-FileCopyrightText: 2023 Erlang Ecosystem Foundation +%% SPDX-License-Identifier: Apache-2.0 + -module(oidcc_logout_test). -include_lib("eunit/include/eunit.hrl"). diff --git a/test/oidcc_provider_configuration_SUITE.erl b/test/oidcc_provider_configuration_SUITE.erl index af407fd2..b09ef2ef 100644 --- a/test/oidcc_provider_configuration_SUITE.erl +++ b/test/oidcc_provider_configuration_SUITE.erl @@ -1,3 +1,6 @@ +%% SPDX-FileCopyrightText: 2023 Erlang Ecosystem Foundation +%% SPDX-License-Identifier: Apache-2.0 + -module(oidcc_provider_configuration_SUITE). -export([all/0]). diff --git a/test/oidcc_provider_configuration_test.erl b/test/oidcc_provider_configuration_test.erl index fb95b0f7..92e416c8 100644 --- a/test/oidcc_provider_configuration_test.erl +++ b/test/oidcc_provider_configuration_test.erl @@ -1,3 +1,6 @@ +%% SPDX-FileCopyrightText: 2023 Erlang Ecosystem Foundation +%% SPDX-License-Identifier: Apache-2.0 + -module(oidcc_provider_configuration_test). -include_lib("eunit/include/eunit.hrl"). diff --git a/test/oidcc_provider_configuration_worker_SUITE.erl b/test/oidcc_provider_configuration_worker_SUITE.erl index 64ed2ae6..2d54038d 100644 --- a/test/oidcc_provider_configuration_worker_SUITE.erl +++ b/test/oidcc_provider_configuration_worker_SUITE.erl @@ -1,3 +1,6 @@ +%% SPDX-FileCopyrightText: 2023 Erlang Ecosystem Foundation +%% SPDX-License-Identifier: Apache-2.0 + -module(oidcc_provider_configuration_worker_SUITE). -export([all/0]). diff --git a/test/oidcc_provider_configuration_worker_test.erl b/test/oidcc_provider_configuration_worker_test.erl index 3d6fe53e..cf08bf11 100644 --- a/test/oidcc_provider_configuration_worker_test.erl +++ b/test/oidcc_provider_configuration_worker_test.erl @@ -1,3 +1,6 @@ +%% SPDX-FileCopyrightText: 2023 Erlang Ecosystem Foundation +%% SPDX-License-Identifier: Apache-2.0 + -module(oidcc_provider_configuration_worker_test). -include_lib("eunit/include/eunit.hrl"). diff --git a/test/oidcc_test.exs b/test/oidcc_test.exs index 0197af26..0b2c1028 100644 --- a/test/oidcc_test.exs +++ b/test/oidcc_test.exs @@ -1,3 +1,6 @@ +# SPDX-FileCopyrightText: 2023 Erlang Ecosystem Foundation +# SPDX-License-Identifier: Apache-2.0 + defmodule OidccTest do use ExUnit.Case diff --git a/test/oidcc_token_SUITE.erl b/test/oidcc_token_SUITE.erl index 1231ebba..a79108ae 100644 --- a/test/oidcc_token_SUITE.erl +++ b/test/oidcc_token_SUITE.erl @@ -1,3 +1,6 @@ +%% SPDX-FileCopyrightText: 2023 Erlang Ecosystem Foundation +%% SPDX-License-Identifier: Apache-2.0 + -module(oidcc_token_SUITE). -export([all/0]). diff --git a/test/oidcc_token_introspection_test.erl b/test/oidcc_token_introspection_test.erl index 3e0b13e4..a8d32137 100644 --- a/test/oidcc_token_introspection_test.erl +++ b/test/oidcc_token_introspection_test.erl @@ -1,3 +1,6 @@ +%% SPDX-FileCopyrightText: 2023 Erlang Ecosystem Foundation +%% SPDX-License-Identifier: Apache-2.0 + -module(oidcc_token_introspection_test). -include_lib("eunit/include/eunit.hrl"). diff --git a/test/oidcc_token_test.erl b/test/oidcc_token_test.erl index 2eef3ae7..45cc3086 100644 --- a/test/oidcc_token_test.erl +++ b/test/oidcc_token_test.erl @@ -1,3 +1,6 @@ +%% SPDX-FileCopyrightText: 2023 Erlang Ecosystem Foundation +%% SPDX-License-Identifier: Apache-2.0 + -module(oidcc_token_test). -include_lib("eunit/include/eunit.hrl"). diff --git a/test/oidcc_userinfo_test.erl b/test/oidcc_userinfo_test.erl index 1195d415..35efd9ff 100644 --- a/test/oidcc_userinfo_test.erl +++ b/test/oidcc_userinfo_test.erl @@ -1,3 +1,6 @@ +%% SPDX-FileCopyrightText: 2023 Erlang Ecosystem Foundation +%% SPDX-License-Identifier: Apache-2.0 + -module(oidcc_userinfo_test). -include_lib("eunit/include/eunit.hrl"). diff --git a/test/test_helper.exs b/test/test_helper.exs index 869559e7..0ee0aa54 100644 --- a/test/test_helper.exs +++ b/test/test_helper.exs @@ -1 +1,4 @@ +# SPDX-FileCopyrightText: 2023 Erlang Ecosystem Foundation +# SPDX-License-Identifier: Apache-2.0 + ExUnit.start()