auth_rails 1.0.0 → 1.0.2

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 7b6047449dbddff4af60565f7c096eae14f8800b47bd129dceb3ea7f90fb42f7
-  data.tar.gz: 80776e48b7c557c9ab11ec1e9b05ae06e31bc15cca56a4143bfbf46254d2a109
+  metadata.gz: a80fe0179e20db84cc1966bd18331d98b3172c4cd5c3b652949ef7bc7a508b0a
+  data.tar.gz: 6cc51206c4381735dd92f118c8268df20998739cad769bcd2e01211dabb20e76
 SHA512:
-  metadata.gz: 03502ea907678c9ca3122701789e82a145f9c3a143d415153bbde798ad7b5a375cc464ba1e1bf4d8a583d42b298501c00fcf00aadbc7b2be221b8b2044a149fe
-  data.tar.gz: f90cfeab74aa249aebbe6a33deec189901e90c74bfdc0092d42b18a468a3e3eee3fe806611b24accf61a4c1ffc9fc0d1034b4a35cc4bb460fa94b5008790366f
+  metadata.gz: e7d2ccb1bbd06e8cf115267a998cd0490ac8e9583e5a351ca61c486d0ceafd26fda66eee7995a84e01dd4dd82ed29fa29c4af865cbf2f232b445a48bd6d0bc86
+  data.tar.gz: 7a2057151c16ea45d74eb88f9a501a232f5e714a713a22dc125b56fbb6f9710c0b02dd39d9364af8ab7a54e002b8cc511d95389d0d1467050470b970f2814ab1

data/README.md

@@ -6,8 +6,43 @@ Simple authentication for rails.
 gem 'auth_rails'
 ```
 
+# CLI
+
+- init `auth_rails`
+
+```sh
+rails g auth_rails
+```
+
+- init `auth_rails` with strategy
+
+```sh
+rails g auth_rails --strategy allowed_token
+```
+
+- create migration for `allowed_token` strategy
+
+```sh
+rails g auth_rails:migration --strategy allowed_token
+```
+
+- if your model is not User
+
+```sh
+rails g auth_rails:migration --strategy allowed_token --model CustomUser
+```
+
 # Configuration
 
+- User model must have `has_secure_password`
+
+```rb
+# app/models/user.rb
+class User < ApplicationRecord
+  has_secure_password
+end
+```
+
 ```rb
 # config/initializers/auth_rails.rb
 
@@ -84,6 +119,8 @@ end
 
 class User < ApplicationRecord
   include AuthRails::Concerns::AllowedTokenStrategy
+
+  has_secure_password
 end
 ```
 
@@ -128,6 +165,10 @@ module Api
 end
 ```
 
+# Strategy list
+
+- allowed_token
+
 # License
 
 The gem is available as open source under the terms of the [MIT License](https://opensource.org/licenses/MIT).

data/app/controllers/auth_rails/api/auth_controller.rb

@@ -22,6 +22,11 @@ module AuthRails
 
         raise AuthRails.error_class, :unauthenticated if resource.blank?
 
+        resource.allowed_tokens.find_by(
+          jti: decoded_payload[:jti],
+          aud: decoded_payload[:aud]
+        )&.destroy!
+
         respond_to_refresh(generate_token(resource))
       end
 

data/auth_rails.gemspec

@@ -40,5 +40,5 @@ Gem::Specification.new do |spec|
 
   spec.require_paths = ['lib']
 
-  spec.add_dependency 'jwt'
+  spec.add_runtime_dependency 'jwt', '>= 2.7'
 end

data/lib/auth_rails/version.rb

@@ -1,5 +1,5 @@
 # frozen_string_literal: true
 
 module AuthRails
-  VERSION = '1.0.0'
+  VERSION = '1.0.2'
 end

data/lib/auth_rails.rb

@@ -1,5 +1,7 @@
 # frozen_string_literal: true
 
+require 'jwt'
+
 require_relative 'auth_rails/config'
 require_relative 'auth_rails/version'
 require_relative 'auth_rails/class_methods'

data/lib/generators/auth_rails/migration_generator.rb

@@ -0,0 +1,53 @@
+# frozen_string_literal: true
+
+module AuthRails
+  class MigrationGenerator < Rails::Generators::Base
+    include Rails::Generators::Migration
+
+    source_root File.expand_path('templates', __dir__)
+
+    class_option :strategy,
+                 aliases: '-strat',
+                 type: :string,
+                 desc: 'Strategy to use, default is AuthRails::Strategies::BaseStrategy',
+                 default: 'base'
+
+    class_option :model,
+                 aliases: '-m',
+                 type: :string,
+                 desc: 'Model for strategy to associate with',
+                 default: 'user'
+
+    def create_migration_files
+      @model = (options[:model] || 'user').underscore.to_sym
+
+      case options[:strategy]
+      when 'allowed_token'
+        migration_template(
+          'allowed_tokens.tt',
+          'db/migrate/create_allowed_tokens.rb',
+          migration_version: migration_version
+        )
+      end
+    end
+
+    class << self
+      def next_migration_number(dirname)
+        next_migration_number = current_migration_number(dirname) + 1
+        ActiveRecord::Migration.next_migration_number(next_migration_number)
+      end
+    end
+
+    private
+
+    def versioned_migrations?
+      Rails::VERSION::MAJOR >= 5
+    end
+
+    def migration_version
+      return unless versioned_migrations?
+
+      "[#{Rails::VERSION::MAJOR}.#{Rails::VERSION::MINOR}]"
+    end
+  end
+end

data/lib/generators/auth_rails/templates/allowed_tokens.tt

@@ -0,0 +1,17 @@
+# frozen_string_literal: true
+
+class CreateAllowedTokens < ActiveRecord::Migration<%= migration_version %>
+  def change
+    create_table :allowed_tokens do |t|
+      t.string :jti, null: false
+      t.string :aud
+      t.datetime :exp, null: false
+
+      t.timestamps
+
+      t.references :<%= @model %>, foreign_key: { on_delete: :cascade }, null: false
+
+      t.index %i[jti aud]
+    end
+  end
+end

data/lib/generators/auth_rails_generator.rb

@@ -0,0 +1,38 @@
+# frozen_string_literal: true
+
+class AuthRailsGenerator < Rails::Generators::Base
+  source_root File.expand_path('templates', __dir__)
+
+  class_option :strategy,
+               aliases: '-strat',
+               type: :string,
+               desc: 'Strategy to use, default is AuthRails::Strategies::BaseStrategy',
+               default: 'base'
+
+  class_option :model,
+               aliases: '-m',
+               type: :string,
+               desc: 'Model for strategy to associate with',
+               default: 'user'
+
+  def generate_auth_rails
+    @model = (options[:model] || 'user').camelcase
+    @is_allowed_token = options[:strategy] == 'allowed_token'
+
+    template(
+      'auth_rails.tt',
+      'config/initializers/auth_rails.rb'
+    )
+  end
+
+  def create_allowed_tokens_strategy
+    return if options[:strategy].blank? || options[:strategy] != 'allowed_token'
+
+    invoke(
+      'auth_rails:migration',
+      [],
+      strategy: 'allowed_token',
+      model: (options[:model] || 'user').camelcase
+    )
+  end
+end

data/lib/generators/templates/auth_rails.tt

@@ -0,0 +1,32 @@
+# frozen_string_literal: true
+
+AuthRails.configure do |config|
+  config.jwt do |jwt|
+    jwt.access_token do |access_token|
+      access_token.exp = 1.hour.since
+      access_token.secret_key = ENV.fetch('JWT_SECRET', '')
+    end
+
+    <%= @is_allowed_token ? '' : '# ' %>jwt.strategy = AuthRails::Strategies::AllowedTokenStrategy
+
+    # if you wanna use refresh token
+    # uncomment those lines below
+    # jwt.refresh_token do |refresh_token|
+    #   refresh_token.http_only = true
+    #   refresh_token.exp = 1.year.since
+    #   refresh_token.algorithm = 'HS256'
+    #   refresh_token.cookie_key = :ref_tok
+    #   refresh_token.secret_key = ENV.fetch('JWT_SECRET', '')
+    # end
+  end
+end
+
+Rails.application.config.to_prepare do
+  AuthRails.configure do |config|
+    config.resource_class = <%= @model %>
+
+    # if you wanna use custom error classes
+    # uncomment code below
+    # config.error_class = AuthError
+  end
+end

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: auth_rails
 version: !ruby/object:Gem::Version
-  version: 1.0.0
+  version: 1.0.2
 platform: ruby
 authors:
 - Alpha
 autorequire:
 bindir: bin
 cert_chain: []
-date: 2023-12-25 00:00:00.000000000 Z
+date: 2024-01-08 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: jwt
@@ -16,14 +16,14 @@ dependencies:
     requirements:
     - - ">="
       - !ruby/object:Gem::Version
-        version: '0'
+        version: '2.7'
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - ">="
       - !ruby/object:Gem::Version
-        version: '0'
+        version: '2.7'
 description: Simple authentication for Rails
 email:
 - alphanolucifer@gmail.com
@@ -47,6 +47,10 @@ files:
 - lib/auth_rails/strategies/allowed_token_strategy.rb
 - lib/auth_rails/strategies/base_strategy.rb
 - lib/auth_rails/version.rb
+- lib/generators/auth_rails/migration_generator.rb
+- lib/generators/auth_rails/templates/allowed_tokens.tt
+- lib/generators/auth_rails_generator.rb
+- lib/generators/templates/auth_rails.tt
 homepage: https://github.com/zgid123/auth_rails
 licenses:
 - MIT