aha_builder_core 1.0.0 → 1.0.1

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 7ff589bfc8b84ca502361ec7db8fcd9052a02fcef786d45bdfa8f1463ab2ce92
-  data.tar.gz: 4271e05f6300fda500e3062d1ae8f2ad3ab0227cff5925919d8fd2a97c4b49c1
+  metadata.gz: cec0f75d63cf8393eb2c6130cefa3ff8f06c041536a2fc8062ca229c13647697
+  data.tar.gz: a8759f979fe6256c4627fe0bca73c4fe2dca1e0ca1f6874b03b145bfa46241f0
 SHA512:
-  metadata.gz: 3698b01b1e05371f68dd84881ac9ebda989a629def95533db97c6f48bf97803095a43ae7c6c2af6fcf6e5fe5f5700826da0a54780dccbba85860c25d92db12e8
-  data.tar.gz: 227dafe8165fc4562d26761a331bd4f128ec0ba10bdf1a2a8c859f15ee71c8ac95090f457bc772b3db9bede007f253523558294332b34fdd6acfe2fab4d96fd5
+  metadata.gz: f4e44c3f8cf0c1eb89f179ad97562e913f86e4621eba409b7868ff1cf26f24aff42810951430ea0e88a1e22c61aac7991baf9c37fc38472c1f2d6b34ef384220
+  data.tar.gz: 39a1ea75024a765fa7f74ed6b223d0de67d3aa5fb336dad99d644f42516cd8a3514e81535f7ebf0a4c4fe07395c3239bbea2b3f2f8c39522929879d0729c7f75

data/lib/aha/auth/version.rb

@@ -2,6 +2,6 @@
 
 module Aha
   module Auth
-    VERSION = "1.0.0"
+    VERSION = "1.0.1"
   end
 end

data/lib/generators/aha_builder_core/authentication/USAGE

@@ -0,0 +1,21 @@
+Description:
+    Generates authentication setup for Aha! Builder Core client
+
+    This generator creates:
+    - SessionsController with new and callback actions for authentication flow
+    - User model for storing authenticated user information
+    - Current model for thread-isolated current user access
+    - Authentication concern to be included in ApplicationController
+
+Example:
+    bin/rails generate aha_builder_core:authentication
+
+    This will create:
+        app/controllers/sessions_controller.rb
+        app/controllers/concerns/authentication.rb
+        app/models/user.rb
+        app/models/current.rb
+
+    And add routes:
+        get "login", to: "sessions#new", as: :new_session
+        get "callback", to: "sessions#callback", as: :session_callback

data/lib/generators/aha_builder_core/authentication/authentication_generator.rb

@@ -0,0 +1,57 @@
+# frozen_string_literal: true
+
+require "rails/generators"
+
+module AhaBuilderCore
+  module Generators
+    class AuthenticationGenerator < Rails::Generators::Base
+      source_root File.expand_path("templates", __dir__)
+
+      def create_sessions_controller
+        template "sessions_controller.rb.erb", "app/controllers/sessions_controller.rb"
+      end
+
+      def create_user_model
+        template "user.rb.erb", "app/models/user.rb"
+      end
+
+      def create_current_model
+        template "current.rb.erb", "app/models/current.rb"
+      end
+
+      def create_authentication_concern
+        template "authentication.rb.erb", "app/controllers/concerns/authentication.rb"
+      end
+
+      def add_routes
+        route <<~RUBY
+          get "login", to: "sessions#new", as: :new_session
+          get "callback", to: "sessions#callback", as: :session_callback
+        RUBY
+      end
+
+      def display_instructions
+        say "\nAuthentication setup complete!", :green
+        say "\nNext steps:"
+        say "1. Configure your environment variables:"
+        say "   - APPLICATION_URL: Your application's base URL"
+        say "   - AHA_AUTH_SERVER_URL: The authentication server URL"
+        say "   - AHA_AUTH_CLIENT_ID: Your client ID"
+        say "   - AHA_AUTH_API_KEY: Your API key (if using server-to-server operations)"
+        say "\n2. Run migrations to create the users table:"
+        say "   rails generate migration CreateUsers auth_identifier:string:index email:string first_name:string last_name:string email_verified:boolean"
+        say "   rails db:migrate"
+        say "\n3. Include authentication in ApplicationController:"
+        say "   include Authentication"
+        say "\n4. Protect routes with:"
+        say "   before_action :authenticate"
+      end
+
+      private
+
+      def application_name
+        Rails.application.class.module_parent.name
+      end
+    end
+  end
+end

data/lib/generators/aha_builder_core/authentication/templates/authentication.rb.erb

@@ -0,0 +1,48 @@
+module Authentication
+  extend ActiveSupport::Concern
+
+  included do
+    before_action :authenticate
+    helper_method :current_user, :logged_in?
+  end
+
+  private
+
+  def authenticate
+    if session[:session_token].present?
+      session_result = Aha::Auth.validate_session(
+        session[:session_token],
+        refresh_token: session[:refresh_token]
+      )
+
+      if session_result.valid?
+        # If tokens were refreshed, update stored tokens
+        if session_result.refreshed?
+          session[:session_token] = session_result.new_session_token
+          session[:refresh_token] = session_result.new_refresh_token
+        end
+
+        # Set current user
+        @current_user = User.find_by(id: session[:user_id])
+        Current.user = @current_user
+      else
+        reset_session
+        redirect_to new_session_path, alert: "Your session has expired. Please log in again."
+      end
+    else
+      redirect_to new_session_path
+    end
+  rescue Aha::Auth::ApiError => e
+    Rails.logger.error "Session validation failed: #{e.message}"
+    reset_session
+    redirect_to new_session_path, alert: "Authentication error. Please log in again."
+  end
+
+  def current_user
+    @current_user ||= Current.user
+  end
+
+  def logged_in?
+    current_user.present?
+  end
+end

data/lib/generators/aha_builder_core/authentication/templates/current.rb.erb

@@ -0,0 +1,4 @@
+# Provides a thread-isolated attributes singleton for current user
+class Current < ActiveSupport::CurrentAttributes
+  attribute :user
+end

data/lib/generators/aha_builder_core/authentication/templates/sessions_controller.rb.erb

@@ -0,0 +1,44 @@
+class SessionsController < ApplicationController
+  skip_before_action :authenticate, only: [:new, :callback]
+
+  def new
+    # Start authentication by redirecting to the auth URL
+    redirect_to Aha::Auth.login_url(
+      state: { return_to: params[:return_to] || root_path }.to_json,
+      redirect_uri: "#{ENV['APPLICATION_URL']}/callback"
+    ), allow_other_host: true
+  end
+
+  def callback
+    # Handle the callback from the authentication server
+    if params[:code].present?
+      result = Aha::Auth.authenticate_with_code(code: params[:code])
+
+      # Find or create a local user record linked to Builder Core user
+      user = User.find_or_initialize_by(auth_identifier: result[:user]["id"])
+
+      # Update local user attributes
+      user.update!(
+        email: result[:user]["email"],
+        first_name: result[:user]["first_name"],
+        last_name: result[:user]["last_name"],
+        email_verified: result[:user]["email_verified"]
+      )
+
+      # Store tokens in session
+      session[:session_token] = result[:session_token]
+      session[:refresh_token] = result[:refresh_token]
+      session[:user_id] = user.id
+
+      # Parse state to get return_to path
+      state = JSON.parse(params[:state]) rescue {}
+      redirect_to state["return_to"] || root_path
+    else
+      # Authentication failed or was cancelled
+      redirect_to new_session_path, alert: "Authentication failed. Please try again."
+    end
+  rescue Aha::Auth::ApiError => e
+    Rails.logger.error "Authentication failed: #{e.message}"
+    redirect_to new_session_path, alert: "Authentication failed. Please try again."
+  end
+end

data/lib/generators/aha_builder_core/authentication/templates/user.rb.erb

@@ -0,0 +1,8 @@
+class User < ApplicationRecord
+  validates :auth_identifier, presence: true, uniqueness: true
+  validates :email, presence: true, uniqueness: true
+
+  def name
+    "#{first_name} #{last_name}".strip.presence || email
+  end
+end

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: aha_builder_core
 version: !ruby/object:Gem::Version
-  version: 1.0.0
+  version: 1.0.1
 platform: ruby
 authors:
 - Aha! Labs Inc.
@@ -111,6 +111,12 @@ files:
 - lib/aha/auth/users_resource.rb
 - lib/aha/auth/version.rb
 - lib/aha_builder_core.rb
+- lib/generators/aha_builder_core/authentication/USAGE
+- lib/generators/aha_builder_core/authentication/authentication_generator.rb
+- lib/generators/aha_builder_core/authentication/templates/authentication.rb.erb
+- lib/generators/aha_builder_core/authentication/templates/current.rb.erb
+- lib/generators/aha_builder_core/authentication/templates/sessions_controller.rb.erb
+- lib/generators/aha_builder_core/authentication/templates/user.rb.erb
 homepage: https://www.aha.io
 licenses:
 - MIT
@@ -124,7 +130,7 @@ required_ruby_version: !ruby/object:Gem::Requirement
   requirements:
   - - ">="
     - !ruby/object:Gem::Version
-      version: 3.3.0
+      version: 3.2.0
 required_rubygems_version: !ruby/object:Gem::Requirement
   requirements:
   - - ">="