authentication-zero 0.0.11 → 0.0.15

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 0ea1c631f09f3da8a3b5e183d431e5596875bd04044b0a6e74a44943d7eabb8d
-  data.tar.gz: 8242c5411752b806bca65bf8b3ac0d457231b830381b5d0369e6ea2daa2374f0
+  metadata.gz: 39cf93fc2be059b756c15125cfd0d4e35e0a8f96a803fbfcfb3aa31f64b2a704
+  data.tar.gz: 728fdd4a2af75e207db825c581e8fb1856be8d55b4fbfe6ac19aaa8e373b8557
 SHA512:
-  metadata.gz: 4f73c08b89896448ceb9ce7b19df4d97a6c7ec20bfbd977c2b07b10ef20535a45a94015ccee0e13c23351388e69d0b10598a9c2ed4678858147753fdf78631d8
-  data.tar.gz: 02d3dfd0571bb4d8f20a91eeae99f5d430f747c8651751ad4eecb566b214488535d029e746c63ea6c5a76566fc4e115c88d2c1f8a4b3801d02d0d0edc896f1ea
+  metadata.gz: ca7dc09acf69d59ada1e204fb77076731212afadddf77337eccc22466307917eed2e5cc1f11b92eee6bcd8722970a021c4ca48664f92714acd9f4c7579978db0
+  data.tar.gz: fe83d4649cf6c24fbbadecfee09dfdd1d245fb689da031eb187f061df26a9d6704cee1db904aa6c3c7c17763c51665637dd58f20515c08e93a88542c01879991

data/Gemfile.lock

@@ -1,7 +1,7 @@
 PATH
   remote: .
   specs:
-    authentication-zero (0.0.11)
+    authentication-zero (0.0.15)
 
 GEM
   remote: https://rubygems.org/

data/README.md

@@ -2,6 +2,31 @@
 
 The purpose of authentication zero is to generate a pre-built authentication system into a rails application (web or api-only) that follows both security and rails best practices. By generating code into the user's application instead of using a library, the user has complete freedom to modify the authentication system so it works best with their app.
 
+## Features
+
+- Sign up
+- Email and password validations
+- Reset the user password and send reset instructions
+- Authentication by cookie (html)
+- Authentication by token (api)
+- Remember me (html)
+- Send e-mail when email is changed
+- Send e-mail when password is changed
+- Cancel my account
+- Log out
+
+## Security and best practices
+
+- [Current attributes](https://api.rubyonrails.org/classes/ActiveSupport/CurrentAttributes.html): Abstract super class that provides a thread-isolated attributes singleton, which resets automatically before and after each request.
+- [has_secure_password](https://api.rubyonrails.org/classes/ActiveModel/SecurePassword/ClassMethods.html#method-i-has_secure_password): Adds methods to set and authenticate against a BCrypt password.
+- [has_secure_token](https://api.rubyonrails.org/classes/ActiveRecord/SecureToken/ClassMethods.html#method-i-has_secure_token): Adds methods to generate unique tokens.
+- [authenticate_with_http_token](https://api.rubyonrails.org/classes/ActionController/HttpAuthentication/Token.html): Compare the tokens in a time-constant manner, to mitigate timing attacks.
+- [signed_id](https://api.rubyonrails.org/classes/ActiveRecord/SignedId.html): Returns a signed id that is tamper proof, so it's safe to send in an email or otherwise share with the outside world.
+- [Http only cookies](https://api.rubyonrails.org/classes/ActionDispatch/Cookies.html): A cookie with the httponly attribute is inaccessible to the JavaScript, this precaution helps mitigate cross-site scripting (XSS) attacks.
+- [Log filtering](https://guides.rubyonrails.org/action_controller_overview.html#log-filtering): Parameters 'token' and 'password' are marked [FILTERED] in the log.
+- [Callbacks](https://api.rubyonrails.org/classes/ActiveRecord/Callbacks.html): We use callbacks to send emails before changing an email or password.
+- [ActionMailer](https://api.rubyonrails.org/classes/ActionMailer/Base.html): Action Mailer allows you to send email from your application using a mailer model and views.
+
 ## Installation
 
 Add this lines to your application's Gemfile:
@@ -31,11 +56,15 @@ Add these lines to your `app/views/home/index.html.erb`:
 <p>Signed as <%= Current.user.email %></p>
 
 <div>
-  <%= link_to "Change password", password_edit_path %>
+  <%= link_to "Change email", edit_emails_path %>
+</div>
+
+<div>
+  <%= link_to "Change password", edit_passwords_path %>
 </div>
 
 <div>
-  <%= link_to "Cancel my account & delete my data", cancellation_new_path %>
+  <%= link_to "Cancel my account & delete my data", new_cancellations_path %>
 </div>
 
 <%= button_to "Log out", sign_out_path, method: :delete %>

data/lib/authentication_zero/version.rb

@@ -1,3 +1,3 @@
 module AuthenticationZero
-  VERSION = "0.0.11"
+  VERSION = "0.0.15"
 end

data/lib/generators/authentication/authentication_generator.rb

@@ -16,11 +16,13 @@ class AuthenticationGenerator < Rails::Generators::NamedBase
   end
 
   def create_mailers
+    template "mailers/email_mailer.rb", "app/mailers/email_mailer.rb"    
     template "mailers/password_mailer.rb", "app/mailers/password_mailer.rb"
   end
 
   def create_views
     if options.api
+      directory "views/email_mailer", "app/views/email_mailer"
       directory "views/password_mailer", "app/views/password_mailer"
     else
       directory "views", "app/views"
@@ -37,19 +39,15 @@ class AuthenticationGenerator < Rails::Generators::NamedBase
   end
 
   def add_routes
-    route "get 'sign_up', to: 'registrations#new'" unless options.api?
+    route "resource :password_resets, only: [:new, :edit, :create, :update]"
+    route "resource :cancellations, only: [:new, :create]"
+    route "resource :passwords, only: [:edit, :update]"
+    route "resource :emails, only: [:edit, :update]"
+    route "delete 'sign_out', to: 'sessions#destroy'"
     route "post 'sign_up', to: 'registrations#create'"
-    route "get 'sign_in', to: 'sessions#new'" unless options.api?
+    route "get 'sign_up', to: 'registrations#new'" unless options.api?
     route "post 'sign_in', to: 'sessions#create'"
-    route "get 'password/edit', to: 'passwords#edit'" unless options.api?
-    route "patch 'password', to: 'passwords#update'"
-    route "get 'cancellation/new', to: 'cancellations#new'" unless options.api?
-    route "post 'cancellation', to: 'cancellations#destroy'"
-    route "get 'password_reset/new', to: 'password_resets#new'" unless options.api?
-    route "post 'password_reset', to: 'password_resets#create'"
-    route "get 'password_reset/edit', to: 'password_resets#edit'"
-    route "patch 'password_reset', to: 'password_resets#update'"
-    route "delete 'sign_out', to: 'sessions#destroy'"
+    route "get 'sign_in', to: 'sessions#new'" unless options.api?
   end
 
   def add_application_controller_methods

data/lib/generators/authentication/templates/controllers/api/cancellations_controller.rb.tt

@@ -1,5 +1,5 @@
 class CancellationsController < ApplicationController
-  def destroy
+  def create
     Current.<%= singular_table_name %>.destroy
   end
 end

data/lib/generators/authentication/templates/controllers/api/emails_controller.rb.tt

@@ -0,0 +1,22 @@
+class EmailsController < ApplicationController
+  before_action :set_<%= singular_table_name %>
+
+  def update
+    if !@<%= singular_table_name %>.authenticate(params[:current_password])
+      render json: { error: "The current password you entered is incorrect" }, status: :bad_request
+    elsif @<%= singular_table_name %>.update(<%= "#{singular_table_name}_params" %>)
+      render json: @<%= singular_table_name %>
+    else
+      render json: @<%= singular_table_name %>.errors, status: :unprocessable_entity
+    end
+  end
+
+  private
+    def set_<%= singular_table_name %>
+      @<%= singular_table_name %> = Current.<%= singular_table_name %>
+    end
+
+    def <%= "#{singular_table_name}_params" %>
+      params.permit(:email)
+    end
+end

data/lib/generators/authentication/templates/controllers/api/password_resets_controller.rb.tt

@@ -1,6 +1,5 @@
 class PasswordResetsController < ApplicationController
   skip_before_action :authenticate
-
   before_action :set_<%= singular_table_name %>, only: %i[ edit update ]
 
   def edit
@@ -16,7 +15,7 @@ class PasswordResetsController < ApplicationController
   end
 
   def update
-    if @<%= singular_table_name %>.update(password_params)
+    if @<%= singular_table_name %>.update(<%= "#{singular_table_name}_params" %>)
       render json: @<%= singular_table_name %>
     else
       render json: @<%= singular_table_name %>.errors, status: :unprocessable_entity
@@ -25,12 +24,12 @@ class PasswordResetsController < ApplicationController
 
   private
     def set_<%= singular_table_name %>
-      @<%= singular_table_name %> = <%= class_name %>.find_signed!(params[:sid], purpose: "password_reset")
+      @<%= singular_table_name %> = <%= class_name %>.find_signed!(params[:token], purpose: "password_reset")
     rescue ActiveSupport::MessageVerifier::InvalidSignature
       render json: { error: "Your token has expired, please request a new one" }, status: :bad_request
     end
 
-    def password_params
-      params.require(:<%= singular_table_name %>).permit(:password, :password_confirmation)
+    def <%= "#{singular_table_name}_params" %>
+      params.permit(:password, :password_confirmation)
     end
 end

data/lib/generators/authentication/templates/controllers/api/passwords_controller.rb.tt

@@ -4,7 +4,7 @@ class PasswordsController < ApplicationController
   def update
     if !@<%= singular_table_name %>.authenticate(params[:current_password])
       render json: { error: "The current password you entered is incorrect" }, status: :bad_request
-    elsif @<%= singular_table_name %>.update(password_params)
+    elsif @<%= singular_table_name %>.update(<%= "#{singular_table_name}_params" %>)
       render json: @<%= singular_table_name %>
     else
       render json: @<%= singular_table_name %>.errors, status: :unprocessable_entity
@@ -16,7 +16,7 @@ class PasswordsController < ApplicationController
       @<%= singular_table_name %> = Current.<%= singular_table_name %>
     end
 
-    def password_params
-      params.require(:<%= singular_table_name %>).permit(:password, :password_confirmation)
+    def <%= "#{singular_table_name}_params" %>
+      params.permit(:password, :password_confirmation)
     end
 end

data/lib/generators/authentication/templates/controllers/api/registrations_controller.rb.tt

@@ -13,6 +13,6 @@ class RegistrationsController < ApplicationController
 
   private
     def <%= "#{singular_table_name}_params" %>
-      params.require(:<%= singular_table_name %>).permit(:email, :password, :password_confirmation)
+      params.permit(:email, :password, :password_confirmation)
     end
 end

data/lib/generators/authentication/templates/controllers/html/cancellations_controller.rb.tt

@@ -2,7 +2,7 @@ class CancellationsController < ApplicationController
   def new
   end
 
-  def destroy
+  def create
     Current.<%= singular_table_name %>.destroy
     redirect_to sign_in_path, notice: "Bye! Your account has been successfully cancelled"
   end

data/lib/generators/authentication/templates/controllers/html/emails_controller.rb.tt

@@ -0,0 +1,25 @@
+class EmailsController < ApplicationController
+  before_action :set_<%= singular_table_name %>
+
+  def edit
+  end
+
+  def update
+    if !@<%= singular_table_name %>.authenticate(params[:current_password])
+      redirect_to edit_emails_path, alert: "The current password you entered is incorrect"
+    elsif @<%= singular_table_name %>.update(<%= "#{singular_table_name}_params" %>)
+      redirect_to root_path, notice: "Your email has been changed successfully"
+    else
+      render :edit, status: :unprocessable_entity
+    end
+  end
+
+  private
+    def set_<%= singular_table_name %>
+      @<%= singular_table_name %> = Current.<%= singular_table_name %>
+    end
+
+    def <%= "#{singular_table_name}_params" %>
+      params.require(:<%= singular_table_name %>).permit(:email)
+    end
+end

data/lib/generators/authentication/templates/controllers/html/password_resets_controller.rb.tt

@@ -1,6 +1,5 @@
 class PasswordResetsController < ApplicationController
   skip_before_action :authenticate
-
   before_action :set_<%= singular_table_name %>, only: %i[ edit update ]
 
   def new
@@ -14,12 +13,12 @@ class PasswordResetsController < ApplicationController
       PasswordMailer.with(<%= singular_table_name %>: @<%= singular_table_name %>).reset.deliver_later
       redirect_to sign_in_path, notice: "You will receive an email with instructions on how to reset your password in a few minutes"
     else
-      redirect_to password_reset_new_path, alert: "The email address doesn't exist in our database"
+      redirect_to new_password_resets_path, alert: "The email address doesn't exist in our database"
     end
   end
 
   def update
-    if @<%= singular_table_name %>.update(password_params)
+    if @<%= singular_table_name %>.update(<%= "#{singular_table_name}_params" %>)
       redirect_to sign_in_path, notice: "Your password was reset successfully. Please sign in"
     else
       render :edit, status: :unprocessable_entity
@@ -28,12 +27,12 @@ class PasswordResetsController < ApplicationController
 
   private
     def set_<%= singular_table_name %>
-      @<%= singular_table_name %> = <%= class_name %>.find_signed!(params[:sid], purpose: "password_reset")
+      @<%= singular_table_name %> = <%= class_name %>.find_signed!(params[:token], purpose: "password_reset")
     rescue ActiveSupport::MessageVerifier::InvalidSignature
-      redirect_to password_reset_new_path, alert: "Your token has expired, please request a new one"
+      redirect_to new_password_resets_path, alert: "Your token has expired, please request a new one"
     end
 
-    def password_params
+    def <%= "#{singular_table_name}_params" %>
       params.require(:<%= singular_table_name %>).permit(:password, :password_confirmation)
     end
 end

data/lib/generators/authentication/templates/controllers/html/passwords_controller.rb.tt

@@ -2,13 +2,12 @@ class PasswordsController < ApplicationController
   before_action :set_<%= singular_table_name %>
 
   def edit
-    @<%= singular_table_name %> = Current.<%= singular_table_name %>
   end
 
   def update
     if !@<%= singular_table_name %>.authenticate(params[:current_password])
-      redirect_to password_edit_path, alert: "The current password you entered is incorrect"
-    elsif @<%= singular_table_name %>.update(password_params)
+      redirect_to edit_passwords_path, alert: "The current password you entered is incorrect"
+    elsif @<%= singular_table_name %>.update(<%= "#{singular_table_name}_params" %>)
       redirect_to root_path, notice: "Your password has been changed successfully"
     else
       render :edit, status: :unprocessable_entity
@@ -20,7 +19,7 @@ class PasswordsController < ApplicationController
       @<%= singular_table_name %> = Current.<%= singular_table_name %>
     end
 
-    def password_params
+    def <%= "#{singular_table_name}_params" %>
       params.require(:<%= singular_table_name %>).permit(:password, :password_confirmation)
     end
 end

data/lib/generators/authentication/templates/mailers/email_mailer.rb.tt

@@ -0,0 +1,6 @@
+class EmailMailer < ApplicationMailer
+  def changed
+    @previous_email, @current_email = params[:change]
+    mail to: @previous_email
+  end
+end

data/lib/generators/authentication/templates/mailers/password_mailer.rb.tt

@@ -1,4 +1,8 @@
 class PasswordMailer < ApplicationMailer
+  def changed
+    mail to: params[:<%= singular_table_name %>].email
+  end
+
   def reset
     @signed_id = params[:<%= singular_table_name %>].signed_id(purpose: "password_reset", expires_in: 20.minutes)
     mail to: params[:<%= singular_table_name %>].email

data/lib/generators/authentication/templates/models/resource.rb.tt

@@ -6,9 +6,23 @@ class <%= class_name %> < ApplicationRecord
   validates :email, format: { with: /\A[^@\s]+@[^@\s]+\z/ }
   validates_length_of :password, minimum: 8, allow_blank: true
 
-  before_validation { self.email = email.downcase.strip }
+  before_validation do
+    self.email = email.downcase.strip
+  end
 
-  def as_json(options)
+  after_update_commit do
+    if self.email_previously_changed?
+      EmailMailer.with(change: self.email_previous_change).changed.deliver_later
+    end
+  end
+
+  after_update_commit do
+    if self.password_digest_previously_changed?
+      PasswordMailer.with(<%= singular_table_name %>: self).changed.deliver_later
+    end
+  end
+
+  def as_json(options = {})
     super(options.merge(except: [:password_digest, :session_token]))
-  end  
+  end
 end

data/lib/generators/authentication/templates/views/cancellations/new.html.erb.tt

@@ -7,5 +7,5 @@
 <br>
 
 <div>
-  <%%= button_to "OK, close my account", cancellation_path %>
+  <%%= button_to "OK, close my account", cancellations_path %>
 </div>

data/lib/generators/authentication/templates/views/email_mailer/changed.html.erb.tt

@@ -0,0 +1,11 @@
+<p>Hey there,</p>
+
+<p>We just wanted to confirm that your email address has been updated.</p>
+
+<p><strong>Before, it was: <%%= @previous_email %></strong></p>
+
+<p><strong>Now it is set to: <%%= @current_email %></strong></p>
+
+<hr>
+
+<p>If you didn't make this change, someone else may have access to your account. If you think that may be the case, please reply to this email and our support team will help you out.</p>

data/lib/generators/authentication/templates/views/email_mailer/changed.text.erb.tt

@@ -0,0 +1,9 @@
+Hey there,
+
+We just wanted to confirm that your email address has been updated.
+
+Before, it was: <%%= @previous_email %>
+
+Now it is set to: <%%= @current_email %>
+
+If you didn't make this change, someone else may have access to your account. If you think that may be the case, please reply to this email and our support team will help you out.

data/lib/generators/authentication/templates/views/emails/edit.html.erb.tt

@@ -0,0 +1,37 @@
+<p style="color: red"><%%= alert %></p>
+
+<h1>Change your email</h1>
+
+<%%= form_with(model: @<%= model_resource_name %>, url: emails_path) do |form| %>
+  <%% if @<%= singular_table_name %>.errors.any? %>
+    <div style="color: red">
+      <h2><%%= pluralize(@<%= singular_table_name %>.errors.count, "error") %> prohibited this <%= singular_table_name %> from being saved:</h2>
+
+      <ul>
+        <%% @<%= singular_table_name %>.errors.each do |error| %>
+          <li><%%= error.full_message %></li>
+        <%% end %>
+      </ul>
+    </div>
+  <%% end %>
+
+  <div>
+    <%%= label_tag :current_password, nil, style: "display: block" %>
+    <%%= password_field_tag :current_password, nil, autofocus: true, autocomplete: "current-password" %>
+  </div>
+
+  <div>
+    <%%= form.label :email, "New email", style: "display: block" %>
+    <%%= form.email_field :email %>
+  </div>
+
+  <div>
+    <%%= form.submit "Save changes" %>
+  </div>
+<%% end %>
+
+<br>
+
+<div>
+  <%%= link_to "Back", root_path %>
+</div>

data/lib/generators/authentication/templates/views/password_mailer/changed.html.erb.tt

@@ -0,0 +1,7 @@
+<p>Hey there,</p>
+
+<p>We just wanted to confirm that your password has been updated.</p>
+
+<hr>
+
+<p>If you didn't make this change, someone else may have access to your account. If you think that may be the case, please reply to this email and our support team will help you out.</p>

data/lib/generators/authentication/templates/views/password_mailer/changed.text.erb.tt

@@ -0,0 +1,5 @@
+Hey there,
+
+We just wanted to confirm that your password has been updated.
+
+If you didn't make this change, someone else may have access to your account. If you think that may be the case, please reply to this email and our support team will help you out.

data/lib/generators/authentication/templates/views/password_mailer/reset.html.erb.tt

@@ -2,7 +2,7 @@
 
 <p>Can't remember your password for <strong><%%= params[:<%= singular_table_name %>].email %></strong>? That's OK, it happens. Just hit the link below to set a new one.</p>
 
-<p><%%= link_to "Reset my password", password_reset_edit_url(sid: @signed_id) %></p>
+<p><%%= link_to "Reset my password", edit_password_resets_url(token: @signed_id) %></p>
 
 <p>If you did not request a password reset you can safely ignore this email, it expires in 20 minutes. Only someone with access to this email account can reset your password.</p>
 

data/lib/generators/authentication/templates/views/password_mailer/reset.text.erb.tt

@@ -2,7 +2,7 @@ Hey there,
 
 Can't remember your password for <%%= params[:<%= singular_table_name %>].email %>? That's OK, it happens. Just hit the link below to set a new one.
 
-[Reset my password]<%%= password_reset_edit_url(sid: @signed_id) %>
+[Reset my password]<%%= edit_password_resets_url(token: @signed_id) %>
 
 If you did not request a password reset you can safely ignore this email, it expires in 20 minutes. Only someone with access to this email account can reset your password.
 

data/lib/generators/authentication/templates/views/password_resets/edit.html.erb.tt

@@ -1,6 +1,6 @@
 <h1>Reset your password</h1>
 
-<%%= form_with(model: @<%= model_resource_name %>, url: password_reset_path) do |form| %>
+<%%= form_with(model: @<%= model_resource_name %>, url: password_resets_path) do |form| %>
   <%% if @<%= singular_table_name %>.errors.any? %>
     <div style="color: red">
       <h2><%%= pluralize(@<%= singular_table_name %>.errors.count, "error") %> prohibited this <%= singular_table_name %> from being saved:</h2>
@@ -13,7 +13,7 @@
     </div>
   <%% end %>
 
-  <%%= hidden_field_tag :sid, params[:sid] %>
+  <%%= hidden_field_tag :token, params[:token] %>
 
   <div>
     <%%= form.label :password, "New password", style: "display: block" %>

data/lib/generators/authentication/templates/views/password_resets/new.html.erb.tt

@@ -2,7 +2,7 @@
 
 <h1>Forgot your password?</h1>
 
-<%%= form_with(url: password_reset_path) do |form| %>
+<%%= form_with(url: password_resets_path) do |form| %>
   <div>
     <%%= form.label :email, style: "display: block" %>
     <%%= form.email_field :email, autofocus: true, required: true %>

data/lib/generators/authentication/templates/views/passwords/edit.html.erb.tt

@@ -2,7 +2,7 @@
 
 <h1>Change your password</h1>
 
-<%%= form_with(model: @<%= model_resource_name %>, url: password_path) do |form| %>
+<%%= form_with(model: @<%= model_resource_name %>, url: passwords_path) do |form| %>
   <%% if @<%= singular_table_name %>.errors.any? %>
     <div style="color: red">
       <h2><%%= pluralize(@<%= singular_table_name %>.errors.count, "error") %> prohibited this <%= singular_table_name %> from being saved:</h2>

data/lib/generators/authentication/templates/views/sessions/new.html.erb.tt

@@ -28,5 +28,5 @@
 
 <div>
   <%%= link_to "Sign up", sign_up_path %> |
-  <%%= link_to "Forgot your password?", password_reset_new_path %>
+  <%%= link_to "Forgot your password?", new_password_resets_path %>
 </div>

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: authentication-zero
 version: !ruby/object:Gem::Version
-  version: 0.0.11
+  version: 0.0.15
 platform: ruby
 authors:
 - Nixon
 autorequire: 
 bindir: bin
 cert_chain: []
-date: 2022-02-16 00:00:00.000000000 Z
+date: 2022-02-17 00:00:00.000000000 Z
 dependencies: []
 description: 
 email:
@@ -32,20 +32,28 @@ files:
 - lib/generators/authentication/USAGE
 - lib/generators/authentication/authentication_generator.rb
 - lib/generators/authentication/templates/controllers/api/cancellations_controller.rb.tt
+- lib/generators/authentication/templates/controllers/api/emails_controller.rb.tt
 - lib/generators/authentication/templates/controllers/api/password_resets_controller.rb.tt
 - lib/generators/authentication/templates/controllers/api/passwords_controller.rb.tt
 - lib/generators/authentication/templates/controllers/api/registrations_controller.rb.tt
 - lib/generators/authentication/templates/controllers/api/sessions_controller.rb.tt
 - lib/generators/authentication/templates/controllers/html/cancellations_controller.rb.tt
+- lib/generators/authentication/templates/controllers/html/emails_controller.rb.tt
 - lib/generators/authentication/templates/controllers/html/password_resets_controller.rb.tt
 - lib/generators/authentication/templates/controllers/html/passwords_controller.rb.tt
 - lib/generators/authentication/templates/controllers/html/registrations_controller.rb.tt
 - lib/generators/authentication/templates/controllers/html/sessions_controller.rb.tt
+- lib/generators/authentication/templates/mailers/email_mailer.rb.tt
 - lib/generators/authentication/templates/mailers/password_mailer.rb.tt
 - lib/generators/authentication/templates/migration.rb.tt
 - lib/generators/authentication/templates/models/current.rb.tt
 - lib/generators/authentication/templates/models/resource.rb.tt
 - lib/generators/authentication/templates/views/cancellations/new.html.erb.tt
+- lib/generators/authentication/templates/views/email_mailer/changed.html.erb.tt
+- lib/generators/authentication/templates/views/email_mailer/changed.text.erb.tt
+- lib/generators/authentication/templates/views/emails/edit.html.erb.tt
+- lib/generators/authentication/templates/views/password_mailer/changed.html.erb.tt
+- lib/generators/authentication/templates/views/password_mailer/changed.text.erb.tt
 - lib/generators/authentication/templates/views/password_mailer/reset.html.erb.tt
 - lib/generators/authentication/templates/views/password_mailer/reset.text.erb.tt
 - lib/generators/authentication/templates/views/password_resets/edit.html.erb.tt