auth_master 0.0.3 → 0.0.5

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 1363f58683049a2b3b1c729e7dd49cd6e3dd660308da0edc5bdb6959a56ac4cd
-  data.tar.gz: 2d54954c9b106e59a0693503a524affcf547c270c73764661b66decdc2f9682d
+  metadata.gz: af811daf24f09f98a0a9c93aa4eba5f7fbebafe0a08f1fc68f3ce11491de2c14
+  data.tar.gz: 90418adf94d7341733371256330cb504c956aac0b358d4b1b323a5a220220056
 SHA512:
-  metadata.gz: d801bac756973c1c96a44ba403c8e2c163e4b73805bb59b7e5ab8d2c8ebc9294035737c70a035a19fdc8f577f6d5457e25686e7f9c9600f78f62b290a5de3f9e
-  data.tar.gz: 55e9962df8c4d9279296d37f654109f2a2fc339b46769f25002529247e2d5a1f94009fe508b8f28abbb8e0bab5eb485ba8b274f7b3c3a939441b99d9ac118216
+  metadata.gz: 4f5fe2fc28562f1128a3f41e9a783b6b7983dac6753215d69629d3faea0ebf5148bde172f8afbe634a188825cd3422584179cf1b903f09ed74618f6224dbfa9b
+  data.tar.gz: fae32da2226266542bb294e57f925b86ab5d29a50073ee23fa6d394b91066b5cb606bb1d357b7e260ea93c94039e381fff8e50589d0f44e139e771c78be70e0d

data/app/controllers/auth_master/application_controller.rb

@@ -1,5 +1,9 @@
 module AuthMaster
   class ApplicationController < ActionController::Base
+    # NOTE: Ability to use main app url helpers from main app's layout
+    helper Rails.application.routes.url_helpers
+    helper_method :target_route
+
     def target_scoped_class
       target_scope = config_for(:scope)
       target_scope.present? ? target_accessor.send(target_scope) : target_accessor
@@ -20,12 +24,20 @@ module AuthMaster
       params[:target].to_sym
     end
 
+    def target_param_name
+      params[:target].to_sym
+    end
+
+    def target_route
+      config_for(:route) || :auth_master
+    end
+
     def config_for(name)
       AuthMaster.targets[target_param][name.to_sym]
     end
 
     def check_target_configuration
-      raise ActionController::RoutingError.new("Not Found") if AuthMaster.targets[target_param].blank?
+      raise ActionController::RoutingError.new("Not Found Target Config") if AuthMaster.targets[target_param].blank?
     end
   end
 end

data/app/controllers/auth_master/sessions_controller.rb

@@ -3,14 +3,21 @@ module AuthMaster
     TIMING_ATTACK_INTERVAL = 1
 
     before_action :check_target_configuration
-    around_action :prevent_timing_attack, only: :send_link
+
+    before_action :check_token_presence, only: :link
+    before_action :check_pre_session_id, only: :link
+
+    around_action :prevent_timing_attack, only: :create
 
     # NOTE: Show input email form
     def new
     end
 
-    def send_link
-      AuthMaster::SendLinkOperation.call!(params[:email], target_scoped_class:)
+    def create
+      uuid = Random.uuid
+      session[session_key] = uuid
+
+      AuthMaster::SendLinkOperation.call!(params[:email], target_scoped_class:, uuid:)
       redirect_to auth_master_sent_url(target: target_param)
     end
 
@@ -20,8 +27,35 @@ module AuthMaster
     def link
     end
 
+    def activate
+      uuid = session[session_key]
+      auth_master_session = AuthMaster::CheckLinkOperation.call!(params[:token], uuid:, target_param_name:)
+      (redirect_to(auth_master_denied_path(target: target_param_name)) and return) if auth_master_session.blank?
+
+      session.delete(session_key)
+      session[target_session_key] = auth_master_session.id
+
+      # TODO: Use config for
+      #   a) session key;
+      #   b) default redirect path
+      saved_path = session.delete("redirect_to")
+      redirect_to(saved_path || "/")
+    end
+
+    def destroy
+      auth_master_session_id = session.delete(target_session_key)
+      AuthMaster::LogoutOperation.call!(auth_master_session_id)
+
+      # TODO: Use config for redirect_path
+      redirect_to("/")
+    end
+
     private
 
+    def session_key
+      [ "auth_master", params[:target].to_s, "id" ].join("_")
+    end
+
     def prevent_timing_attack
       start_time = Time.current
       yield
@@ -36,5 +70,17 @@ module AuthMaster
     def timing_attack_interval
       AuthMaster.timing_attack_interval.presence || TIMING_ATTACK_INTERVAL
     end
+
+    def check_token_presence
+      raise ActionController::RoutingError.new("Not Found Token") if params[:token].blank?
+    end
+
+    def check_pre_session_id
+      raise ActionController::RoutingError.new("Not Found Session") if session[session_key].blank?
+    end
+
+    def target_session_key
+      [ "current", target_param_name, "id" ].join("_")
+    end
   end
 end

data/app/controllers/concerns/auth_master/current_concern.rb

@@ -0,0 +1,22 @@
+module AuthMaster::CurrentConcern
+  extend ActiveSupport::Concern
+
+  # included do
+  #   helper_method :current_auth_master
+  # end
+
+  def current_auth_master(target_param_name)
+    session_accessor_key = [ "current", target_param_name, "id" ].join("_")
+    auth_master_session_id = session[session_accessor_key]
+    return nil if auth_master_session_id.blank?
+
+    auth_master_session = AuthMaster::Session.active.find_by(id: auth_master_session_id)
+    return nil if auth_master_session.blank?
+
+    target = auth_master_session.target
+    return nil if target.blank?
+    # return nil if !target.is_a?(target_class_by_name(target_param_name))
+
+    target
+  end
+end

data/app/lib/auth_master/config.rb

@@ -0,0 +1,42 @@
+module AuthMaster
+  module Config
+    DEFAULT_LOGIN_TIMEOUT_INTERVAL  = 5.minutes
+    DEFAULT_LOGIN_ATTEMPTS_COUNT    = 3
+    DEFAULT_TOKEN_PURPOSE           = :auth_master_email
+
+    def login_timeout_interval_config(target)
+      config_for(target, :login_timeout_interval) || DEFAULT_LOGIN_TIMEOUT_INTERVAL
+    end
+
+    def login_attempts_count_config(target)
+      config_for(target, :login_attempts_count) || DEFAULT_LOGIN_ATTEMPTS_COUNT
+    end
+
+    def token_purpose_config(target)
+      config_for(target, :token_purpose) || DEFAULT_TOKEN_PURPOSE
+    end
+
+    def secret_config(target)
+      config_for(target, :secret)
+    end
+
+    def target_mailer_config(target)
+      config_for(target, :mailer_class).to_s.classify.constantize
+    end
+
+    def target_mailer_login_link_method(target)
+      config_for(target, :mailer_login_link_method)
+    end
+
+    def target_name(target)
+      return target if target.is_a? Symbol
+      return target.to_sym if target.is_a? String
+
+      target.class.to_s.underscore.to_sym
+    end
+
+    def config_for(target, name)
+      AuthMaster.targets[target_name(target)][name.to_sym]
+    end
+  end
+end

data/app/models/auth_master/session.rb

@@ -2,6 +2,6 @@ module AuthMaster
   class Session < ApplicationRecord
     belongs_to :target, polymorphic: true
 
-    enum :status, [ :inactive, :active ], default: :inactive
+    enum :status, [ :inactive, :active, :logout ], default: :inactive
   end
 end

data/app/operations/auth_master/abstract_operation.rb

@@ -0,0 +1,7 @@
+require "token_guard"
+
+module AuthMaster
+  class AbstractOperation
+    extend AuthMaster::Config
+  end
+end

data/app/operations/auth_master/check_link_operation.rb

@@ -0,0 +1,21 @@
+module AuthMaster
+  class CheckLinkOperation < AuthMaster::AbstractOperation
+    def self.call!(encrypted_token, uuid:, target_param_name:)
+      purpose = token_purpose_config(target_param_name)
+      secret  = secret_config(target_param_name)
+
+      auth_master_session_id = TokenGuard.decrypt(encrypted_token, purpose:, secret:)
+      return if auth_master_session_id.blank?
+
+      # NOTE: Auth from the same device
+      return if auth_master_session_id != uuid
+
+      auth_master_session = AuthMaster::SessionService.inactive_find(auth_master_session_id)
+      return if auth_master_session.blank?
+
+      AuthMaster::SessionService.activate!(auth_master_session)
+
+      auth_master_session
+    end
+  end
+end

data/app/operations/auth_master/logout_operation.rb

@@ -0,0 +1,10 @@
+module AuthMaster
+  class LogoutOperation < AuthMaster::AbstractOperation
+    def self.call!(auth_master_session_id)
+      auth_master_session = AuthMaster::Session.active.find_by(id: auth_master_session_id)
+      return if auth_master_session.blank?
+
+      AuthMaster::SessionService.logout!(auth_master_session)
+    end
+  end
+end

data/app/operations/auth_master/send_link_operation.rb

@@ -1,11 +1,28 @@
 module AuthMaster
-  class SendLinkOperation
-    def self.call!(email, target_scoped_class:)
+  class SendLinkOperation < AuthMaster::AbstractOperation
+    def self.call!(email, target_scoped_class:, uuid:)
       target = target_scoped_class.find_by(email:)
       return if target.blank?
 
-      auth_master_session = AuthMaster::SessionService.create!(target)
-      AuthMaster::SessionService.send_link!(auth_master_session) if auth_master_session.present?
+      auth_master_session = AuthMaster::SessionService.create!(target, uuid:)
+      return if auth_master_session.blank?
+
+      purpose = token_purpose_config(target)
+      secret  = secret_config(target)
+      token = TokenGuard.encrypt(auth_master_session.id, purpose:, secret:)
+
+      mailer = target_mailer_config(target)
+      mailer_action = target_mailer_login_link_method(target)
+
+      url = AuthMaster::Engine.routes.url_helpers.auth_master_link_url(
+        target: target_name(target),
+        token: token,
+        host: Rails.application.config.action_mailer.default_url_options[:host]
+      )
+
+      mailer.with(email: target.email, url:).public_send(mailer_action).deliver_later
+
+      # auth_master_session
     end
   end
 end

data/app/services/auth_master/session_service.rb

@@ -2,21 +2,27 @@ require "token_guard"
 
 module AuthMaster
   class SessionService
-    LOGIN_TIMEOUT_INTERVAL  = 5.minutes
-    LOGIN_ATTEMPTS_COUNT    = 3
+    extend AuthMaster::Config
 
     class << self
-      def create!(target)
+      def create!(target, uuid:)
         return if !allow_creation?(target)
 
-        AuthMaster::Session.create!(target:)
+        AuthMaster::Session.create!(target:, id: uuid)
       end
 
-      def send_link!(auth_master_session)
-        target = auth_master_session.target
+      def inactive_find(id)
+        AuthMaster::Session.inactive.find_by(id:)
+      end
+
+      def activate!(auth_master_session)
+        # TODO: Save IP Address, User Agent, etc
+        auth_master_session.active!
+      end
 
-        token = TokenGuard.encrypt(auth_master_session.id, purpose: :email, secret: AuthMaster.targets[target_name(target)][:secret])
-        target_mailer(target).with(email: target.email, token:).send(target_mailer_login_link_method(target)).deliver_later
+      def logout!(auth_master_session)
+        # TODO: Save IP Address, User Agent, etc
+        auth_master_session.logout!
       end
 
       private
@@ -26,31 +32,7 @@ module AuthMaster
       end
 
       def allow_creation?(target)
-        count(target, time: login_timeout_interval(target)) < login_attempts_count(target)
-      end
-
-      def login_timeout_interval(target)
-        AuthMaster.targets[target_name(target)][:login_timeout_interval] || LOGIN_TIMEOUT_INTERVAL
-      end
-
-      def login_attempts_count(target)
-        AuthMaster.targets[target_name(target)][:login_attempts_count] || LOGIN_ATTEMPTS_COUNT
-      end
-
-      def target_name(target)
-        target.class.to_s.downcase.to_sym
-      end
-
-      def target_mailer(target)
-        config_for(target, :mailer_class).to_s.classify.constantize
-      end
-
-      def target_mailer_login_link_method(target)
-        config_for(target, :mailer_login_link_method)
-      end
-
-      def config_for(target, name)
-        AuthMaster.targets[target_name(target)][name.to_sym]
+        count(target, time: login_timeout_interval_config(target)) < login_attempts_count_config(target)
       end
     end
   end

data/app/views/auth_master/sessions/link.html.erb

@@ -0,0 +1,6 @@
+<h1>Login:</h1>
+
+<%= form_with url: send(target_route).auth_master_link_path(target: params[:target]), method: :post do |form| %>
+  <%= form.hidden_field :token, value: params[:token] %>
+  <%= form.submit "Login" %>
+<% end %>

data/app/views/auth_master/sessions/new.html.erb

@@ -1 +1,7 @@
-<h1>Sessions#new</h1>
+<h1>Login:</h1>
+
+<%= form_with url: send(target_route).auth_master_login_path(target: params[:target]), method: :post do |form| %>
+  <%= form.label :email, "Email:" %>
+  <%= form.email_field :email %>
+  <%= form.submit "Login" %>
+<% end %>

data/config/routes.rb

@@ -1,11 +1,9 @@
 AuthMaster::Engine.routes.draw do
-  get   "/:target/login", to: "sessions#new", as: :auth_master_login
-  post  "/:target/login", to: "sessions#send_link"
-
-  get   "/:target/sent",  to: "sessions#sent", as: :auth_master_sent
-
-  get   "/:target/link",  to: "sessions#link", as: :auth_master_link
-  post  "/:target/link",  to: "sessions#create"
-
-  get   "/:target/denied", to: "sessions#denied", as: :auth_master_denied
+  get     "/:target/login",   to: "sessions#new",     as: :auth_master_login
+  post    "/:target/login",   to: "sessions#create"
+  get     "/:target/sent",    to: "sessions#sent",    as: :auth_master_sent
+  get     "/:target/link",    to: "sessions#link",    as: :auth_master_link
+  post    "/:target/link",    to: "sessions#activate"
+  get     "/:target/denied",  to: "sessions#denied",  as: :auth_master_denied
+  delete  "/:target/logout",  to: "sessions#destroy", as: :auth_master_logout
 end

data/lib/auth_master/version.rb

@@ -1,3 +1,3 @@
 module AuthMaster
-  VERSION = "0.0.3"
+  VERSION = "0.0.5"
 end

metadata

@@ -1,13 +1,13 @@
 --- !ruby/object:Gem::Specification
 name: auth_master
 version: !ruby/object:Gem::Version
-  version: 0.0.3
+  version: 0.0.5
 platform: ruby
 authors:
 - vickodin
 bindir: bin
 cert_chain: []
-date: 2025-03-27 00:00:00.000000000 Z
+date: 2025-03-30 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: rails
@@ -56,12 +56,18 @@ files:
 - app/assets/stylesheets/auth_master/application.css
 - app/controllers/auth_master/application_controller.rb
 - app/controllers/auth_master/sessions_controller.rb
+- app/controllers/concerns/auth_master/current_concern.rb
 - app/helpers/auth_master/application_helper.rb
 - app/helpers/auth_master/sessions_helper.rb
+- app/lib/auth_master/config.rb
 - app/models/auth_master/application_record.rb
 - app/models/auth_master/session.rb
+- app/operations/auth_master/abstract_operation.rb
+- app/operations/auth_master/check_link_operation.rb
+- app/operations/auth_master/logout_operation.rb
 - app/operations/auth_master/send_link_operation.rb
 - app/services/auth_master/session_service.rb
+- app/views/auth_master/sessions/link.html.erb
 - app/views/auth_master/sessions/new.html.erb
 - app/views/auth_master/sessions/sent.html.erb
 - config/routes.rb