authentication-zero 0.0.12 → 0.0.16

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: c9a25e8862ad568105b15810d98b4efb68b1d7a69199c35ff7a726b991aeb21d
-  data.tar.gz: fd37bc06817fb23c8bd61c4cfe8635932be62ae94df89b5f5928f55b749e0a7d
+  metadata.gz: 99e38209d9e08d15cc9edabeb10704f340f5b903f3e6582119c0c086f7a821b0
+  data.tar.gz: 7c0c7c3fdc4d858f30df3f48aabb0ae73f7d175c04ef6babdb9ae3f458bceb4d
 SHA512:
-  metadata.gz: 7c89d91c1e3b5259b2924b6c25ee09c094db9f71deb75944cf9387b45c7f3202cba8bc394539d1fc5c79038aeb5dbbbe74eed5b0ac4fd44c7f76377278380f24
-  data.tar.gz: 4f79e7af311270e7d995f8e07f3e2a73269c41b4fe17e31d7542e98547c96df4a6f55340d3575f05cd56e445582a9955443ca279ce8fe01f5fab4164d90c7d94
+  metadata.gz: 499be6541793f23e314a7e82fcee557d0bb84430d55dccf200ec7cffaf761fabd9d6783293f5a257485105f6484d023b757012753c7a0d9f80830346eb4ce9c5
+  data.tar.gz: 66da6b4184558ede3a23aa294aa7b9f09b52bd7e4ed5ecc90d2e9ab62e6c109d82fa095472b74284e00112ab391950c6925cb2ab7693f0606bcbbde7e23d49a6

data/Gemfile.lock

@@ -1,7 +1,7 @@
 PATH
   remote: .
   specs:
-    authentication-zero (0.0.12)
+    authentication-zero (0.0.16)
 
 GEM
   remote: https://rubygems.org/

data/README.md

@@ -2,6 +2,31 @@
 
 The purpose of authentication zero is to generate a pre-built authentication system into a rails application (web or api-only) that follows both security and rails best practices. By generating code into the user's application instead of using a library, the user has complete freedom to modify the authentication system so it works best with their app.
 
+## Features
+
+- Sign up
+- Email and password validations
+- Reset the user password and send reset instructions
+- Authentication by cookie (html)
+- Authentication by token (api)
+- Remember me (html)
+- Send e-mail when email is changed
+- Send e-mail when password is changed
+- Cancel my account
+- Log out
+
+## Security and best practices
+
+- [Current attributes](https://api.rubyonrails.org/classes/ActiveSupport/CurrentAttributes.html): Abstract super class that provides a thread-isolated attributes singleton, which resets automatically before and after each request.
+- [has_secure_password](https://api.rubyonrails.org/classes/ActiveModel/SecurePassword/ClassMethods.html#method-i-has_secure_password): Adds methods to set and authenticate against a BCrypt password.
+- [has_secure_token](https://api.rubyonrails.org/classes/ActiveRecord/SecureToken/ClassMethods.html#method-i-has_secure_token): Adds methods to generate unique tokens.
+- [signed_id](https://api.rubyonrails.org/classes/ActiveRecord/SignedId.html): Returns a signed id that is tamper proof, so it's safe to send in an email or otherwise share with the outside world.
+- [Signed cookies](https://api.rubyonrails.org/classes/ActionDispatch/Cookies.html): Returns a jar that'll automatically generate a signed representation of cookie value and verify it when reading from the cookie again.
+- [Http only cookies](https://api.rubyonrails.org/classes/ActionDispatch/Cookies.html): A cookie with the httponly attribute is inaccessible to the JavaScript, this precaution helps mitigate cross-site scripting (XSS) attacks.
+- [Log filtering](https://guides.rubyonrails.org/action_controller_overview.html#log-filtering): Parameters 'token' and 'password' are marked [FILTERED] in the log.
+- [Callbacks](https://api.rubyonrails.org/classes/ActiveRecord/Callbacks.html): We use callbacks to send emails before changing an email or password.
+- [Action mailer](https://api.rubyonrails.org/classes/ActionMailer/Base.html): Action Mailer allows you to send email from your application using a mailer model and views.
+
 ## Installation
 
 Add this lines to your application's Gemfile:
@@ -30,6 +55,10 @@ Add these lines to your `app/views/home/index.html.erb`:
 
 <p>Signed as <%= Current.user.email %></p>
 
+<div>
+  <%= link_to "Change email", edit_emails_path %>
+</div>
+
 <div>
   <%= link_to "Change password", edit_passwords_path %>
 </div>

data/lib/authentication_zero/version.rb

@@ -1,3 +1,3 @@
 module AuthenticationZero
-  VERSION = "0.0.12"
+  VERSION = "0.0.16"
 end

data/lib/generators/authentication/authentication_generator.rb

@@ -16,11 +16,13 @@ class AuthenticationGenerator < Rails::Generators::NamedBase
   end
 
   def create_mailers
+    template "mailers/email_mailer.rb", "app/mailers/email_mailer.rb"
     template "mailers/password_mailer.rb", "app/mailers/password_mailer.rb"
   end
 
   def create_views
     if options.api
+      directory "views/email_mailer", "app/views/email_mailer"
       directory "views/password_mailer", "app/views/password_mailer"
     else
       directory "views", "app/views"
@@ -39,7 +41,8 @@ class AuthenticationGenerator < Rails::Generators::NamedBase
   def add_routes
     route "resource :password_resets, only: [:new, :edit, :create, :update]"
     route "resource :cancellations, only: [:new, :create]"
-    route "resource :passwords, only: [:update, :edit]"
+    route "resource :passwords, only: [:edit, :update]"
+    route "resource :emails, only: [:edit, :update]"
     route "delete 'sign_out', to: 'sessions#destroy'"
     route "post 'sign_up', to: 'registrations#create'"
     route "get 'sign_up', to: 'registrations#new'" unless options.api?
@@ -56,7 +59,7 @@ class AuthenticationGenerator < Rails::Generators::NamedBase
 
         private
           def authenticate
-            if #{singular_table_name} = authenticate_with_http_token { |token, _| #{class_name}.find_by_session_token(token) }
+            if #{singular_table_name} = authenticate_with_http_token { |t, _| #{class_name}.find_signed_session_token(t) }
               Current.user = #{singular_table_name}
             else
               request_http_token_authentication
@@ -70,7 +73,7 @@ class AuthenticationGenerator < Rails::Generators::NamedBase
 
         private
           def authenticate
-            if #{singular_table_name} = cookies[:session_token] && #{class_name}.find_by_session_token(cookies[:session_token])
+            if #{singular_table_name} = #{class_name}.find_by_session_token(cookies.signed[:session_token])
               Current.user = #{singular_table_name}
             else
               redirect_to sign_in_path, alert: "You need to sign in or sign up before continuing"

data/lib/generators/authentication/templates/controllers/api/emails_controller.rb.tt

@@ -0,0 +1,22 @@
+class EmailsController < ApplicationController
+  before_action :set_<%= singular_table_name %>
+
+  def update
+    if !@<%= singular_table_name %>.authenticate(params[:current_password])
+      render json: { error: "The current password you entered is incorrect" }, status: :bad_request
+    elsif @<%= singular_table_name %>.update(<%= "#{singular_table_name}_params" %>)
+      render json: @<%= singular_table_name %>
+    else
+      render json: @<%= singular_table_name %>.errors, status: :unprocessable_entity
+    end
+  end
+
+  private
+    def set_<%= singular_table_name %>
+      @<%= singular_table_name %> = Current.<%= singular_table_name %>
+    end
+
+    def <%= "#{singular_table_name}_params" %>
+      params.permit(:email)
+    end
+end

data/lib/generators/authentication/templates/controllers/api/password_resets_controller.rb.tt

@@ -1,6 +1,5 @@
 class PasswordResetsController < ApplicationController
   skip_before_action :authenticate
-
   before_action :set_<%= singular_table_name %>, only: %i[ edit update ]
 
   def edit
@@ -16,7 +15,7 @@ class PasswordResetsController < ApplicationController
   end
 
   def update
-    if @<%= singular_table_name %>.update(password_params)
+    if @<%= singular_table_name %>.update(<%= "#{singular_table_name}_params" %>)
       render json: @<%= singular_table_name %>
     else
       render json: @<%= singular_table_name %>.errors, status: :unprocessable_entity
@@ -25,12 +24,12 @@ class PasswordResetsController < ApplicationController
 
   private
     def set_<%= singular_table_name %>
-      @<%= singular_table_name %> = <%= class_name %>.find_signed!(params[:sid], purpose: "password_reset")
+      @<%= singular_table_name %> = <%= class_name %>.find_signed!(params[:token], purpose: "password_reset")
     rescue ActiveSupport::MessageVerifier::InvalidSignature
       render json: { error: "Your token has expired, please request a new one" }, status: :bad_request
     end
 
-    def password_params
+    def <%= "#{singular_table_name}_params" %>
       params.permit(:password, :password_confirmation)
     end
 end

data/lib/generators/authentication/templates/controllers/api/passwords_controller.rb.tt

@@ -4,7 +4,7 @@ class PasswordsController < ApplicationController
   def update
     if !@<%= singular_table_name %>.authenticate(params[:current_password])
       render json: { error: "The current password you entered is incorrect" }, status: :bad_request
-    elsif @<%= singular_table_name %>.update(password_params)
+    elsif @<%= singular_table_name %>.update(<%= "#{singular_table_name}_params" %>)
       render json: @<%= singular_table_name %>
     else
       render json: @<%= singular_table_name %>.errors, status: :unprocessable_entity
@@ -16,7 +16,7 @@ class PasswordsController < ApplicationController
       @<%= singular_table_name %> = Current.<%= singular_table_name %>
     end
 
-    def password_params
+    def <%= "#{singular_table_name}_params" %>
       params.permit(:password, :password_confirmation)
     end
 end

data/lib/generators/authentication/templates/controllers/api/sessions_controller.rb.tt

@@ -5,9 +5,9 @@ class SessionsController < ApplicationController
     @<%= singular_table_name %> = <%= class_name %>.find_by_email(params[:email])
 
     if @<%= singular_table_name %>.try(:authenticate, params[:password])
-      render json: { session_token: @<%= singular_table_name %>.session_token }
+      render json: { session_token: @<%= singular_table_name %>.signed_session_token }
     else
-      render json: { error: "Invalid session token" }, status: :unauthorized
+      render json: { error: "Invalid email or password" }, status: :unauthorized
     end
   end
 

data/lib/generators/authentication/templates/controllers/html/emails_controller.rb.tt

@@ -0,0 +1,25 @@
+class EmailsController < ApplicationController
+  before_action :set_<%= singular_table_name %>
+
+  def edit
+  end
+
+  def update
+    if !@<%= singular_table_name %>.authenticate(params[:current_password])
+      redirect_to edit_emails_path, alert: "The current password you entered is incorrect"
+    elsif @<%= singular_table_name %>.update(<%= "#{singular_table_name}_params" %>)
+      redirect_to root_path, notice: "Your email has been changed successfully"
+    else
+      render :edit, status: :unprocessable_entity
+    end
+  end
+
+  private
+    def set_<%= singular_table_name %>
+      @<%= singular_table_name %> = Current.<%= singular_table_name %>
+    end
+
+    def <%= "#{singular_table_name}_params" %>
+      params.require(:<%= singular_table_name %>).permit(:email)
+    end
+end

data/lib/generators/authentication/templates/controllers/html/password_resets_controller.rb.tt

@@ -1,6 +1,5 @@
 class PasswordResetsController < ApplicationController
   skip_before_action :authenticate
-
   before_action :set_<%= singular_table_name %>, only: %i[ edit update ]
 
   def new
@@ -14,12 +13,12 @@ class PasswordResetsController < ApplicationController
       PasswordMailer.with(<%= singular_table_name %>: @<%= singular_table_name %>).reset.deliver_later
       redirect_to sign_in_path, notice: "You will receive an email with instructions on how to reset your password in a few minutes"
     else
-      redirect_to new_password_resets_path, alert: "The email address doesn't exist in our database"
+      redirect_to new_password_resets_path(email_hint: params[:email]), alert: "The email address doesn't exist in our database"
     end
   end
 
   def update
-    if @<%= singular_table_name %>.update(password_params)
+    if @<%= singular_table_name %>.update(<%= "#{singular_table_name}_params" %>)
       redirect_to sign_in_path, notice: "Your password was reset successfully. Please sign in"
     else
       render :edit, status: :unprocessable_entity
@@ -28,12 +27,12 @@ class PasswordResetsController < ApplicationController
 
   private
     def set_<%= singular_table_name %>
-      @<%= singular_table_name %> = <%= class_name %>.find_signed!(params[:sid], purpose: "password_reset")
+      @<%= singular_table_name %> = <%= class_name %>.find_signed!(params[:token], purpose: "password_reset")
     rescue ActiveSupport::MessageVerifier::InvalidSignature
       redirect_to new_password_resets_path, alert: "Your token has expired, please request a new one"
     end
 
-    def password_params
+    def <%= "#{singular_table_name}_params" %>
       params.require(:<%= singular_table_name %>).permit(:password, :password_confirmation)
     end
 end

data/lib/generators/authentication/templates/controllers/html/passwords_controller.rb.tt

@@ -2,13 +2,12 @@ class PasswordsController < ApplicationController
   before_action :set_<%= singular_table_name %>
 
   def edit
-    @<%= singular_table_name %> = Current.<%= singular_table_name %>
   end
 
   def update
     if !@<%= singular_table_name %>.authenticate(params[:current_password])
       redirect_to edit_passwords_path, alert: "The current password you entered is incorrect"
-    elsif @<%= singular_table_name %>.update(password_params)
+    elsif @<%= singular_table_name %>.update(<%= "#{singular_table_name}_params" %>)
       redirect_to root_path, notice: "Your password has been changed successfully"
     else
       render :edit, status: :unprocessable_entity
@@ -20,7 +19,7 @@ class PasswordsController < ApplicationController
       @<%= singular_table_name %> = Current.<%= singular_table_name %>
     end
 
-    def password_params
+    def <%= "#{singular_table_name}_params" %>
       params.require(:<%= singular_table_name %>).permit(:password, :password_confirmation)
     end
 end

data/lib/generators/authentication/templates/controllers/html/registrations_controller.rb.tt

@@ -9,7 +9,7 @@ class RegistrationsController < ApplicationController
     @<%= singular_table_name %> = <%= class_name %>.new(<%= "#{singular_table_name}_params" %>)
 
     if @<%= singular_table_name %>.save
-      cookies[:session_token] = { value: @<%= singular_table_name %>.session_token, httponly: true }
+      cookies.signed[:session_token] = { value: @<%= singular_table_name %>.session_token, httponly: true }
       redirect_to root_path, notice: "Welcome! You have signed up successfully"
     else
       render :new, status: :unprocessable_entity

data/lib/generators/authentication/templates/controllers/html/sessions_controller.rb.tt

@@ -10,9 +10,9 @@ class SessionsController < ApplicationController
 
     if @<%= singular_table_name %>.try(:authenticate, params[:password])
       if params[:remember_me] == "1"
-        cookies.permanent[:session_token] = { value: @<%= singular_table_name %>.session_token, httponly: true }
+        cookies.signed.permanent[:session_token] = { value: @<%= singular_table_name %>.session_token, httponly: true }
       else
-        cookies[:session_token] = { value: @<%= singular_table_name %>.session_token, httponly: true }
+        cookies.signed[:session_token] = { value: @<%= singular_table_name %>.session_token, httponly: true }
       end
 
       redirect_to root_path, notice: "Signed in successfully"

data/lib/generators/authentication/templates/mailers/email_mailer.rb.tt

@@ -0,0 +1,6 @@
+class EmailMailer < ApplicationMailer
+  def changed
+    @previous_email, @current_email = params[:change]
+    mail to: @previous_email
+  end
+end

data/lib/generators/authentication/templates/mailers/password_mailer.rb.tt

@@ -1,4 +1,8 @@
 class PasswordMailer < ApplicationMailer
+  def changed
+    mail to: params[:<%= singular_table_name %>].email
+  end
+
   def reset
     @signed_id = params[:<%= singular_table_name %>].signed_id(purpose: "password_reset", expires_in: 20.minutes)
     mail to: params[:<%= singular_table_name %>].email

data/lib/generators/authentication/templates/models/resource.rb.tt

@@ -6,9 +6,30 @@ class <%= class_name %> < ApplicationRecord
   validates :email, format: { with: /\A[^@\s]+@[^@\s]+\z/ }
   validates_length_of :password, minimum: 8, allow_blank: true
 
-  before_validation { self.email = email.downcase.strip }
+  before_validation do
+    self.email = email.downcase.strip
+  end
 
-  def as_json(options)
-    super(options.merge(except: [:password_digest, :session_token]))
-  end  
+  after_update_commit do
+    if self.email_previously_changed?
+      EmailMailer.with(change: self.email_previous_change).changed.deliver_later
+    end
+  end
+
+  after_update_commit do
+    if self.password_digest_previously_changed?
+      PasswordMailer.with(<%= singular_table_name %>: self).changed.deliver_later
+    end
+  end
+<% if options.api? -%>
+  def signed_session_token
+    self.class.signed_id_verifier.generate(session_token)
+  end
+
+  def self.find_signed_session_token(signed_session_token)
+    if session_token = signed_id_verifier.verified(signed_session_token)
+      find_by_session_token(session_token)
+    end
+  end
+<% end -%>
 end

data/lib/generators/authentication/templates/views/email_mailer/changed.html.erb.tt

@@ -0,0 +1,11 @@
+<p>Hey there,</p>
+
+<p>We just wanted to confirm that your email address has been updated.</p>
+
+<p><strong>Before, it was: <%%= @previous_email %></strong></p>
+
+<p><strong>Now it is set to: <%%= @current_email %></strong></p>
+
+<hr>
+
+<p>If you didn't make this change, someone else may have access to your account. If you think that may be the case, please reply to this email and our support team will help you out.</p>

data/lib/generators/authentication/templates/views/email_mailer/changed.text.erb.tt

@@ -0,0 +1,9 @@
+Hey there,
+
+We just wanted to confirm that your email address has been updated.
+
+Before, it was: <%%= @previous_email %>
+
+Now it is set to: <%%= @current_email %>
+
+If you didn't make this change, someone else may have access to your account. If you think that may be the case, please reply to this email and our support team will help you out.

data/lib/generators/authentication/templates/views/emails/edit.html.erb.tt

@@ -0,0 +1,37 @@
+<p style="color: red"><%%= alert %></p>
+
+<h1>Change your email</h1>
+
+<%%= form_with(model: @<%= model_resource_name %>, url: emails_path) do |form| %>
+  <%% if @<%= singular_table_name %>.errors.any? %>
+    <div style="color: red">
+      <h2><%%= pluralize(@<%= singular_table_name %>.errors.count, "error") %> prohibited this <%= singular_table_name %> from being saved:</h2>
+
+      <ul>
+        <%% @<%= singular_table_name %>.errors.each do |error| %>
+          <li><%%= error.full_message %></li>
+        <%% end %>
+      </ul>
+    </div>
+  <%% end %>
+
+  <div>
+    <%%= label_tag :current_password, nil, style: "display: block" %>
+    <%%= password_field_tag :current_password, nil, autofocus: true, autocomplete: "current-password" %>
+  </div>
+
+  <div>
+    <%%= form.label :email, "New email", style: "display: block" %>
+    <%%= form.email_field :email %>
+  </div>
+
+  <div>
+    <%%= form.submit "Save changes" %>
+  </div>
+<%% end %>
+
+<br>
+
+<div>
+  <%%= link_to "Back", root_path %>
+</div>

data/lib/generators/authentication/templates/views/password_mailer/changed.html.erb.tt

@@ -0,0 +1,7 @@
+<p>Hey there,</p>
+
+<p>We just wanted to confirm that your password has been updated.</p>
+
+<hr>
+
+<p>If you didn't make this change, someone else may have access to your account. If you think that may be the case, please reply to this email and our support team will help you out.</p>

data/lib/generators/authentication/templates/views/password_mailer/changed.text.erb.tt

@@ -0,0 +1,5 @@
+Hey there,
+
+We just wanted to confirm that your password has been updated.
+
+If you didn't make this change, someone else may have access to your account. If you think that may be the case, please reply to this email and our support team will help you out.

data/lib/generators/authentication/templates/views/password_mailer/reset.html.erb.tt

@@ -2,7 +2,7 @@
 
 <p>Can't remember your password for <strong><%%= params[:<%= singular_table_name %>].email %></strong>? That's OK, it happens. Just hit the link below to set a new one.</p>
 
-<p><%%= link_to "Reset my password", edit_password_resets_url(sid: @signed_id) %></p>
+<p><%%= link_to "Reset my password", edit_password_resets_url(token: @signed_id) %></p>
 
 <p>If you did not request a password reset you can safely ignore this email, it expires in 20 minutes. Only someone with access to this email account can reset your password.</p>
 

data/lib/generators/authentication/templates/views/password_mailer/reset.text.erb.tt

@@ -2,7 +2,7 @@ Hey there,
 
 Can't remember your password for <%%= params[:<%= singular_table_name %>].email %>? That's OK, it happens. Just hit the link below to set a new one.
 
-[Reset my password]<%%= edit_password_resets_url(sid: @signed_id) %>
+[Reset my password]<%%= edit_password_resets_url(token: @signed_id) %>
 
 If you did not request a password reset you can safely ignore this email, it expires in 20 minutes. Only someone with access to this email account can reset your password.
 

data/lib/generators/authentication/templates/views/password_resets/edit.html.erb.tt

@@ -13,7 +13,7 @@
     </div>
   <%% end %>
 
-  <%%= hidden_field_tag :sid, params[:sid] %>
+  <%%= hidden_field_tag :token, params[:token] %>
 
   <div>
     <%%= form.label :password, "New password", style: "display: block" %>

data/lib/generators/authentication/templates/views/password_resets/new.html.erb.tt

@@ -5,7 +5,7 @@
 <%%= form_with(url: password_resets_path) do |form| %>
   <div>
     <%%= form.label :email, style: "display: block" %>
-    <%%= form.email_field :email, autofocus: true, required: true %>
+    <%%= form.email_field :email, value: params[:email_hint], autofocus: true, required: true %>
   </div>
 
   <div>

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: authentication-zero
 version: !ruby/object:Gem::Version
-  version: 0.0.12
+  version: 0.0.16
 platform: ruby
 authors:
 - Nixon
 autorequire: 
 bindir: bin
 cert_chain: []
-date: 2022-02-17 00:00:00.000000000 Z
+date: 2022-02-18 00:00:00.000000000 Z
 dependencies: []
 description: 
 email:
@@ -32,20 +32,28 @@ files:
 - lib/generators/authentication/USAGE
 - lib/generators/authentication/authentication_generator.rb
 - lib/generators/authentication/templates/controllers/api/cancellations_controller.rb.tt
+- lib/generators/authentication/templates/controllers/api/emails_controller.rb.tt
 - lib/generators/authentication/templates/controllers/api/password_resets_controller.rb.tt
 - lib/generators/authentication/templates/controllers/api/passwords_controller.rb.tt
 - lib/generators/authentication/templates/controllers/api/registrations_controller.rb.tt
 - lib/generators/authentication/templates/controllers/api/sessions_controller.rb.tt
 - lib/generators/authentication/templates/controllers/html/cancellations_controller.rb.tt
+- lib/generators/authentication/templates/controllers/html/emails_controller.rb.tt
 - lib/generators/authentication/templates/controllers/html/password_resets_controller.rb.tt
 - lib/generators/authentication/templates/controllers/html/passwords_controller.rb.tt
 - lib/generators/authentication/templates/controllers/html/registrations_controller.rb.tt
 - lib/generators/authentication/templates/controllers/html/sessions_controller.rb.tt
+- lib/generators/authentication/templates/mailers/email_mailer.rb.tt
 - lib/generators/authentication/templates/mailers/password_mailer.rb.tt
 - lib/generators/authentication/templates/migration.rb.tt
 - lib/generators/authentication/templates/models/current.rb.tt
 - lib/generators/authentication/templates/models/resource.rb.tt
 - lib/generators/authentication/templates/views/cancellations/new.html.erb.tt
+- lib/generators/authentication/templates/views/email_mailer/changed.html.erb.tt
+- lib/generators/authentication/templates/views/email_mailer/changed.text.erb.tt
+- lib/generators/authentication/templates/views/emails/edit.html.erb.tt
+- lib/generators/authentication/templates/views/password_mailer/changed.html.erb.tt
+- lib/generators/authentication/templates/views/password_mailer/changed.text.erb.tt
 - lib/generators/authentication/templates/views/password_mailer/reset.html.erb.tt
 - lib/generators/authentication/templates/views/password_mailer/reset.text.erb.tt
 - lib/generators/authentication/templates/views/password_resets/edit.html.erb.tt