README.md in gds-sso-13.6.0 vs README.md in gds-sso-14.0.0

- old
+ new

@@ -100,11 +100,11 @@ # fails unless the user has both of these permissions authorise_user!(all_of: %w(edit create)) ``` -The signon application makes sure that only users who have been granted access to the application can access it (e.g. they have the `signin` permission for your app). This used to be left up to the applications themselves to check with the `require_signin_permission!` method. This is now deprecated and can be removed from your controllers. You should replace it with a call to `authenticate_user!` if you aren't already using that method, otherwise no signon authentication will be performed. +The signon application makes sure that only users who have been granted access to the application can access it (e.g. they have the `signin` permission for your app). ### Authorisation for API Users In addition to the single-sign-on strategy, this gem also allows authorisation via a "bearer token". This is used by publishing applications to be authorised @@ -171,9 +171,10 @@ ```ruby GDS::SSO.config do |config| # other config here config.additional_mock_permissions_required = ["array", "of", "permissions"] +end ``` The mock bearer token will then ensure that the dummy api user has the required permission. ### Testing in your application