Avoid auth-sanitizer top-level namespaces

[pboling]

Summary

• load auth-sanitizer through an isolated internal loader
• keep sanitizer integration under the OAuth namespace
• prevent requiring oauth from adding top-level Auth or AuthSanitizer constants

Testing

• bundle exec rspec spec/oauth/auth_sanitizer_spec.rb spec/oauth/token_spec.rb spec/oauth/consumer_spec.rb spec/oauth/signature/base_spec.rb

[Copilot]

Pull request overview

This PR changes how the auth-sanitizer dependency is loaded so require "oauth" no longer introduces top-level Auth / AuthSanitizer constants, keeping the sanitizer integration contained within the OAuth namespace.

Changes:

• Introduces OAuth::AUTH_SANITIZER via an internal isolated loader and updates OAuth core classes to include OAuth::AUTH_SANITIZER::FilteredAttributes.
• Adds a spec to assert top-level constants are not defined after requiring oauth.
• Bumps the auth-sanitizer dependency to >= 0.1.3 and updates the gem version/lockfile accordingly.

Reviewed changes

Copilot reviewed 12 out of 13 changed files in this pull request and generated 1 comment.

Show a summary per file

File	Description
spec/oauth/auth_sanitizer_spec.rb	Adds regression coverage to ensure Auth / AuthSanitizer don’t leak into the top-level namespace and verifies mixins are present.
sig/oauth/tokens/token.rbs	Updates signatures to include OAuth::AUTH_SANITIZER::FilteredAttributes.
sig/oauth/signature/base.rbs	Updates signatures to include OAuth::AUTH_SANITIZER::FilteredAttributes.
sig/oauth/consumer.rbs	Updates signatures to include OAuth::AUTH_SANITIZER::FilteredAttributes.
oauth.gemspec	Bumps auth-sanitizer dependency minimum version to 0.1.3.
lib/oauth/version.rb	Bumps gem version to 1.1.5.
lib/oauth/tokens/token.rb	Switches redaction mixin reference to OAuth::AUTH_SANITIZER::FilteredAttributes.
lib/oauth/signature/base.rb	Switches redaction mixin reference to OAuth::AUTH_SANITIZER::FilteredAttributes.
lib/oauth/consumer.rb	Switches redaction mixin reference to OAuth::AUTH_SANITIZER::FilteredAttributes.
lib/oauth/auth_sanitizer.rb	Adds isolated loader that loads auth-sanitizer without defining top-level constants.
lib/oauth.rb	Replaces direct auth/sanitizer require with internal loader require.
Gemfile.lock	Updates locked versions for oauth + auth-sanitizer.
CHANGELOG.md	Documents the isolation change under Unreleased.

---

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.