action_auth 0.2.4 → 0.2.6

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: e0d4717c14c8a74f3c08552d11dadd6a709a9d7d23972b61f3627afa8ded5775
-  data.tar.gz: 9f5339e1e752f85e1136339805d04b7738b228f426846858dc5c596f6594a130
+  metadata.gz: 8cc6e675d4345ed6c6986a5f317a8f9391315e3ddbc3c6d0a1606298fcc077a3
+  data.tar.gz: 716d16126a59ddd907060874799b548ccb991ae9f0e4240bf8224894a2e1cd22
 SHA512:
-  metadata.gz: 9a1e71e5fa998a07f4bcd2c2db4be596b2d88da3a35545f53ad5242c7c51ee3c252a2be6086e727e6c5456426831a12608f9fe1c5c134f660057807ad363ef61
-  data.tar.gz: 80833cbffda59cf7335b3ab6fb9df49518ff510b391d450ec4805d09af3b6918f76f76800c495b4d4710be19bb9a66d324e8e6feec7deee8277f572f26936844
+  metadata.gz: 4766a371ef3e17beed05240ba91f3a26c8a6c9b25c9482c31a7ca8320d81c44d453185fabbbc880fd896e4bf9d843dca8272b393b6ac6e83fe82870e276ce503
+  data.tar.gz: 0f56ca221e5fba51bffe140e47b9f777aabff4d3985618e528752119fd900e466950b73ebb029d5a8c59161ed16aa340437a0e725381ebdd99dc632b443800bc

data/README.md

@@ -33,7 +33,18 @@ In your view layout
 <% end %>
 ```
 
-See [WebAuthn](#webauthn) for additional configuration.
+See [WebAuthn](#webauthn) for additional configuration steps if you want to enable WebAuthn.
+In your `config/initializers/action_auth.rb` file, you can add the following configuration
+settings.
+
+```ruby
+ActionAuth.configure do |config|
+  config.webauthn_enabled = true
+  config.webauthn_origin = "http://localhost:3000" # or "https://example.com"
+  config.webauthn_rp_name = Rails.application.class.to_s.deconstantize
+  config.verify_email_on_sign_in = true
+end
+```
 
 ## Features
 
@@ -164,6 +175,7 @@ ActionAuth.configure do |config|
   config.webauthn_enabled = true
   config.webauthn_origin = "http://localhost:3000" # or "https://example.com"
   config.webauthn_rp_name = Rails.application.class.to_s.deconstantize
+  config.verify_email_on_sign_in = true
 end
 ```
 

data/app/assets/stylesheets/action_auth/application.css

@@ -18,7 +18,7 @@ body {
   -webkit-text-size-adjust: 100%;
   -webkit-tap-highlight-color: rgba(0, 0, 0, 0);
   box-sizing: border-box;
-  width: 400px;
+  width: 450px;
   padding-right: 12px;
   padding-left: 12px;
   margin-right: auto;

data/app/controllers/action_auth/registrations_controller.rb

@@ -8,11 +8,15 @@ module ActionAuth
       @user = User.new(user_params)
 
       if @user.save
-        session_record = @user.action_auth_sessions.create!
-        cookies.signed.permanent[:session_token] = { value: session_record.id, httponly: true }
+        if ActionAuth.configuration.verify_email_on_sign_in
+          send_email_verification
+          redirect_to main_app.root_path, notice: "Welcome! You have signed up successfully. Please check your email to verify your account."
+        else
+          session_record = @user.action_auth_sessions.create!
+          cookies.signed.permanent[:session_token] = { value: session_record.id, httponly: true }
 
-        send_email_verification
-        redirect_to main_app.root_path, notice: "Welcome! You have signed up successfully"
+          redirect_to main_app.root_path, notice: "Welcome! You have signed up successfully"
+        end
       else
         render :new, status: :unprocessable_entity
       end

data/app/controllers/action_auth/sessions_controller.rb

@@ -17,6 +17,7 @@ module ActionAuth
           session[:webauthn_user_id] = user.id
           redirect_to new_webauthn_credential_authentications_path
         else
+          return if check_if_email_is_verified(user)
           @session = user.action_auth_sessions.create
           cookies.signed.permanent[:session_token] = { value: @session.id, httponly: true }
           redirect_to main_app.root_path, notice: "Signed in successfully"
@@ -31,5 +32,15 @@ module ActionAuth
       session.destroy
       redirect_to main_app.root_path, notice: "That session has been logged out"
     end
+
+    private
+
+    def check_if_email_is_verified(user)
+      return false unless ActionAuth.configuration.verify_email_on_sign_in
+      return false if user.verified?
+
+      redirect_to sign_in_path(email_hint: params[:email]),
+        alert: "You must verify your email before you sign in."
+    end
   end
 end

data/lib/action_auth/configuration.rb

@@ -4,11 +4,13 @@ module ActionAuth
     attr_accessor :webauthn_enabled
     attr_accessor :webauthn_origin
     attr_accessor :webauthn_rp_name
+    attr_accessor :verify_email_on_sign_in
 
     def initialize
       @webauthn_enabled = defined?(WebAuthn)
       @webauthn_origin = "http://localhost:3000"
       @webauthn_rp_name = Rails.application.class.to_s.deconstantize
+      @verify_email_on_sign_in = true
     end
 
     def webauthn_enabled?

data/lib/action_auth/version.rb

@@ -1,3 +1,3 @@
 module ActionAuth
-  VERSION = "0.2.4"
+  VERSION = "0.2.6"
 end

data/lib/action_auth.rb

@@ -14,6 +14,8 @@ module ActionAuth
 
     def configure_webauthn
       return unless configuration.webauthn_enabled?
+      return unless defined?(WebAuthn)
+
       WebAuthn.configure do |config|
         config.origin = configuration.webauthn_origin
         config.rp_name = configuration.webauthn_rp_name

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: action_auth
 version: !ruby/object:Gem::Version
-  version: 0.2.4
+  version: 0.2.6
 platform: ruby
 authors:
 - Dave Kimura
 autorequire:
 bindir: bin
 cert_chain: []
-date: 2024-01-13 00:00:00.000000000 Z
+date: 2024-01-14 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: rails