ask-auth 0.1.0 → 0.1.2

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: b1cfb133ab080dc2840a380b4039d783fa982a676c05b3b10cb597264d0da899
-  data.tar.gz: 042e1afabf24c3543eef2cab5e54c8918e97c5bbccf489c8af4f1fd1211e3739
+  metadata.gz: d839820898bcd001809176b196900faf071717a66b53d70ac4a9605b31b3aa1f
+  data.tar.gz: dc3b21d1e383b5c7ee08d9b3798bb966d828b5f8e245c5cd5be036931092c823
 SHA512:
-  metadata.gz: ee48024db5d7ffaf38afa8244017202c42b917aa8233bd600f0895bc100e32ac5d1089067666eb6ee8fb159d59c88e31236daf9fdca4ef085078a2ecb0f07e9e
-  data.tar.gz: 9d6ba6e6f408b522f57da8793638812105dd3c0b691f24a98ff29ff316e31b82078d9ea84f77a1a71be48e8f360b1edb22f07b674138b29c1aa227e0b585c33d
+  metadata.gz: a092a91d436da5623755ca25116c28510921fad524fc7a562305fba76b94e2ec1d273d65264a847454e9e60813c742c930b2710545315c0b8e8790d303a10689
+  data.tar.gz: a0e8feee12cadfb082abac95349febe768b8f67e0697a9287dceee9b4a4feacf1d6fcbe141969196afd23055c47675e4cadacc17a285212700f1fb6c55a732f7

data/CHANGELOG.md

@@ -0,0 +1,23 @@
+## [0.1.1] - 2026-06-25
+
+### Changed
+- Infrastructure: rubocop, overcommit, bin/setup, CI matrix, gemspec test, SimpleCov, .minitest config.
+# Changelog
+
+## [0.1.0] — 2026-06-09
+
+Initial release of `ask-auth`, the credential resolution gem for the ask-rb ecosystem.
+
+### Added
+
+- **Configuration system** — `Ask::Auth.configure` with block-based config and frozen post-boot safety
+- **Resolution chain** — `Ask::Auth.resolve(name, user: nil)` walks providers in order, returns first non-nil
+- **Blank normalization** — empty string and whitespace-only values normalize to `nil`
+- **Error classes** — `MissingCredential` and `InvalidCredential` with actionable messages
+- **Env provider** — resolves from `ENV` by convention (`GITHUB_TOKEN`, `GITHUBTOKEN`, `github_token`)
+- **File provider** — reads `~/.ask/credentials.yml` with configurable path and Symbol-safe YAML loading
+- **RailsCredentials provider** — wraps `Rails.application.credentials` with safe nil when Rails not loaded
+- **Database provider** — ActiveRecord-backed per-user token storage with automatic expiry + refresh
+- **OAuth provider** — PKCE interface with `authorize_url` and `authorize!` methods (full flow deferred)
+- **Test suite** — 45 tests, 99%+ coverage across all providers and the resolution chain
+- **Thread safety** — configuration is frozen after `configure` completes

data/lib/ask/auth/providers/rails_credentials.rb

@@ -5,16 +5,48 @@ module Ask
     module Providers
       # Resolves credentials from Rails encrypted credentials.
       #
-      # Convention: +resolve(:github_token)+ looks up +Rails.application.credentials.github.token+
-      # (dot-separated path from the credential name).
+      # Convention: +resolve(:github_token)+ looks up multiple paths in order:
+      #
+      #   1. Full name as a single top-level key (flat layout):
+      #      +Rails.application.credentials.github_token+
+      #
+      #   2. First segment as namespace, joined rest as sub-key (nested layout):
+      #      +Rails.application.credentials.github.token+
+      #
+      #   3. Fully split path (deeply nested layout):
+      #      +Rails.application.credentials.github.api.key+
+      #
+      # Strategy 2 handles compound key names like +api_key+ correctly.
+      # For +resolve(:opencode_api_key)+, it looks up:
+      #   +Rails.application.credentials.opencode.api_key+
+      # instead of breaking +api_key+ into +api+ and +key+.
       #
       # Safely returns nil when Rails is not loaded.
       class RailsCredentials
         def call(name, user: nil)
           return nil unless defined?(::Rails) && ::Rails.application.respond_to?(:credentials)
 
-          parts = name.to_s.split("_")
-          value = parts.reduce(::Rails.application.credentials) do |obj, part|
+          creds = ::Rails.application.credentials
+          s = name.to_s
+          parts = s.split("_")
+
+          # 1. Full name as a single top-level key
+          return creds.public_send(s) if creds.respond_to?(s)
+
+          # 2. First segment as namespace, joined rest as sub-key
+          #    e.g., opencode_api_key → credentials.opencode.api_key
+          if parts.length >= 2
+            first = parts.first
+            rest = parts.drop(1).join("_")
+            if creds.respond_to?(first)
+              obj = creds.public_send(first)
+              return obj.public_send(rest) if obj.respond_to?(rest)
+            end
+          end
+
+          # 3. Fully split path (original behavior)
+          #    e.g., opencode.go.api_key → credentials.opencode.go.api_key
+          value = parts.reduce(creds) do |obj, part|
             break nil unless obj.respond_to?(part)
             obj.public_send(part)
           end

data/lib/ask/auth/version.rb

@@ -2,6 +2,6 @@
 
 module Ask
   module Auth
-    VERSION = "0.1.0"
+    VERSION = "0.1.2"
   end
 end

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: ask-auth
 version: !ruby/object:Gem::Version
-  version: 0.1.0
+  version: 0.1.2
 platform: ruby
 authors:
 - Kaka Ruto
@@ -73,6 +73,7 @@ executables: []
 extensions: []
 extra_rdoc_files: []
 files:
+- CHANGELOG.md
 - LICENSE
 - README.md
 - lib/ask-auth.rb
@@ -86,7 +87,10 @@ files:
 homepage: https://github.com/ask-rb/ask-auth
 licenses:
 - MIT
-metadata: {}
+metadata:
+  homepage_uri: https://github.com/ask-rb/ask-auth
+  source_code_uri: https://github.com/ask-rb/ask-auth
+  changelog_uri: https://github.com/ask-rb/ask-auth/blob/master/CHANGELOG.md
 rdoc_options: []
 require_paths:
 - lib