action_auth 0.2.3 → 0.2.5

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 53e3c3e104dc46bd4e726f7513e1aecd04a4cbb45d5fb6f64c68cef215402283
-  data.tar.gz: 40c067a613238dcce61431c8ee8bdf70c013f4eccb4a9057531a9acfbd008119
+  metadata.gz: 7b759c3db6150a889321f9fae95ada3c25602811ead1f523bbcb40e2d357aeb0
+  data.tar.gz: 83b68428631ea15336325a72c1c403044cefe8b8372f594cd7b01afab820535d
 SHA512:
-  metadata.gz: 212ae2f001d0a7fd07bd77b51e69f625d77ec03a412083962614a4aa319dcba97f785e697a7797dfd794d84e80e6318791e5a3366f30b74eff87ead133af6ad6
-  data.tar.gz: 465003510e85a95bfc3cfc8a845b937c553b1023f7ee55f8204b2db3effd2fa3beefc2031f8c013d99cff439df5586657e42c192f246351f6903333a493d2963
+  metadata.gz: 254819cd786c3592aefefcd33cec0d01eae5465a776cd303df4b5163f9699576b26e0b57a0ea35f437beb54e5f117dc0497a543e913c67891a21aa435e3ce1e2
+  data.tar.gz: 1c20f3bd253414b9cd4fb0771df7a694ef33ea8dd3af460604880dda6373376d28cc7353ac4dee83b4159341532a06439b9699e0bd86e7e8230149ffc3104d88

data/README.md

@@ -33,7 +33,18 @@ In your view layout
 <% end %>
 ```
 
-See [WebAuthn](#webauthn) for additional configuration.
+See [WebAuthn](#webauthn) for additional configuration steps if you want to enable WebAuthn.
+In your `config/initializers/action_auth.rb` file, you can add the following configuration
+settings.
+
+```ruby
+ActionAuth.configure do |config|
+  config.webauthn_enabled = true
+  config.webauthn_origin = "http://localhost:3000" # or "https://example.com"
+  config.webauthn_rp_name = Rails.application.class.to_s.deconstantize
+  config.verify_email_on_sign_in = true
+end
+```
 
 ## Features
 
@@ -164,6 +175,7 @@ ActionAuth.configure do |config|
   config.webauthn_enabled = true
   config.webauthn_origin = "http://localhost:3000" # or "https://example.com"
   config.webauthn_rp_name = Rails.application.class.to_s.deconstantize
+  config.verify_email_on_sign_in = true
 end
 ```
 

data/app/assets/stylesheets/action_auth/application.css

@@ -18,7 +18,7 @@ body {
   -webkit-text-size-adjust: 100%;
   -webkit-tap-highlight-color: rgba(0, 0, 0, 0);
   box-sizing: border-box;
-  width: 400px;
+  width: 450px;
   padding-right: 12px;
   padding-left: 12px;
   margin-right: auto;

data/app/controllers/action_auth/registrations_controller.rb

@@ -8,11 +8,15 @@ module ActionAuth
       @user = User.new(user_params)
 
       if @user.save
-        session_record = @user.action_auth_sessions.create!
-        cookies.signed.permanent[:session_token] = { value: session_record.id, httponly: true }
+        if ActionAuth.configuration.verify_email_on_sign_in
+          send_email_verification
+          redirect_to main_app.root_path, notice: "Welcome! You have signed up successfully. Please check your email to verify your account."
+        else
+          session_record = @user.action_auth_sessions.create!
+          cookies.signed.permanent[:session_token] = { value: session_record.id, httponly: true }
 
-        send_email_verification
-        redirect_to main_app.root_path, notice: "Welcome! You have signed up successfully"
+          redirect_to main_app.root_path, notice: "Welcome! You have signed up successfully"
+        end
       else
         render :new, status: :unprocessable_entity
       end

data/app/controllers/action_auth/sessions_controller.rb

@@ -17,6 +17,7 @@ module ActionAuth
           session[:webauthn_user_id] = user.id
           redirect_to new_webauthn_credential_authentications_path
         else
+          return if check_if_email_is_verified(user)
           @session = user.action_auth_sessions.create
           cookies.signed.permanent[:session_token] = { value: @session.id, httponly: true }
           redirect_to main_app.root_path, notice: "Signed in successfully"
@@ -31,5 +32,15 @@ module ActionAuth
       session.destroy
       redirect_to main_app.root_path, notice: "That session has been logged out"
     end
+
+    private
+
+    def check_if_email_is_verified(user)
+      return false unless ActionAuth.configuration.verify_email_on_sign_in
+      return false if user.verified?
+
+      redirect_to sign_in_path(email_hint: params[:email]),
+        alert: "You must verify your email before you sign in."
+    end
   end
 end

data/lib/action_auth/configuration.rb

@@ -4,11 +4,13 @@ module ActionAuth
     attr_accessor :webauthn_enabled
     attr_accessor :webauthn_origin
     attr_accessor :webauthn_rp_name
+    attr_accessor :verify_email_on_sign_in
 
     def initialize
       @webauthn_enabled = defined?(WebAuthn)
       @webauthn_origin = "http://localhost:3000"
       @webauthn_rp_name = Rails.application.class.to_s.deconstantize
+      @verify_email_on_sign_in = true
     end
 
     def webauthn_enabled?

data/lib/action_auth/version.rb

@@ -1,3 +1,3 @@
 module ActionAuth
-  VERSION = "0.2.3"
+  VERSION = "0.2.5"
 end

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: action_auth
 version: !ruby/object:Gem::Version
-  version: 0.2.3
+  version: 0.2.5
 platform: ruby
 authors:
 - Dave Kimura
@@ -121,7 +121,7 @@ required_rubygems_version: !ruby/object:Gem::Requirement
     - !ruby/object:Gem::Version
       version: '0'
 requirements: []
-rubygems_version: 3.5.3
+rubygems_version: 3.5.4
 signing_key:
 specification_version: 4
 summary: A simple Rails engine for authorization.