authentication-zero 2.15.6 → 2.15.8

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: b316d9409a50bdffa5cdbd059e1702886235a9dc192ffe5d52ff442c20489517
-  data.tar.gz: 3921791567de9009be45c56f3073dbb7220d7798c524a6895a82753761ff9a7c
+  metadata.gz: c007822422ed85c18af5d096f50e5480e0f9279fca974b3204f1fbec0691893a
+  data.tar.gz: 85af3973c5fc9eab44ade1b0c427d6d283e1292b14977815222a4a0c4c9f79b5
 SHA512:
-  metadata.gz: 1fb6ecefd1929fbf8a1d2e989bd3240f5fcc55ee19f920cbe5bb36f2dce8a3209d11b261b5455f38a88d5ad66c187c6f8b647ff86e55bad4bd5140240e0b5b0e
-  data.tar.gz: e239a86be051925c5632e6686a97751267c9b478dee52a8dd87c9a5fdd983a2821fea73e30af98a3b34061d14ad9c37b49f94ac8c6d2d561c122561a522108bc
+  metadata.gz: e079761568f95e0a857a562be3aa55411ecd2ae57b7dd399345d8f0338d031e415d78f91c1f1f82af338b284674405c78a3e2dd4c554cb8bc24c4ea8ea3c24fc
+  data.tar.gz: 9f2e58043fe1eb41e12bd76f37b4a2ac74b6a9e48f6c1dd5c14039b0a4ac979cc3057e956bdf8fca77898c2d59175f50c3c6d44d2283bf8a4f9c93e5702793c5

data/Gemfile.lock

@@ -1,7 +1,7 @@
 PATH
   remote: .
   specs:
-    authentication-zero (2.15.6)
+    authentication-zero (2.15.8)
 
 GEM
   remote: https://rubygems.org/

data/README.md

@@ -19,7 +19,6 @@ The purpose of authentication zero is to generate a pre-built authentication sys
 - Reset the user password and send reset instructions
 - Reset the user password only from verified emails
 - Lock sending reset password email after many attempts (--lockable)
-- Rate limiting for your app, 1000 reqs/minute (--ratelimit)
 - Send e-mail confirmation when your email has been changed
 - Send e-mail notification when someone has logged into your account
 - Manage multiple sessions & devices

data/lib/authentication_zero/version.rb

@@ -1,3 +1,3 @@
 module AuthenticationZero
-  VERSION = "2.15.6"
+  VERSION = "2.15.8"
 end

data/lib/generators/authentication/authentication_generator.rb

@@ -3,15 +3,14 @@ require "rails/generators/active_record"
 class AuthenticationGenerator < Rails::Generators::Base
   include ActiveRecord::Generators::Migration
 
-  class_option :api,              type: :boolean, desc: "Generates API authentication"
-  class_option :pwned,            type: :boolean, desc: "Add pwned password validation"
-  class_option :code_verifiable,  type: :boolean, desc: "Add email verification using a code for api"
-  class_option :sudoable,         type: :boolean, desc: "Add password request before sensitive data changes"
-  class_option :lockable,         type: :boolean, desc: "Add password reset locking"
-  class_option :ratelimit,        type: :boolean, desc: "Add request rate limiting"
-  class_option :omniauthable,     type: :boolean, desc: "Add social login support"
-  class_option :trackable,        type: :boolean, desc: "Add activity log support"
-  class_option :two_factor,       type: :boolean, desc: "Add two factor authentication"
+  class_option :api,             type: :boolean, desc: "Generates API authentication"
+  class_option :pwned,           type: :boolean, desc: "Add pwned password validation"
+  class_option :code_verifiable, type: :boolean, desc: "Add email verification using a code for api"
+  class_option :sudoable,        type: :boolean, desc: "Add password request before sensitive data changes"
+  class_option :lockable,        type: :boolean, desc: "Add password reset locking"
+  class_option :omniauthable,    type: :boolean, desc: "Add social login support"
+  class_option :trackable,       type: :boolean, desc: "Add activity log support"
+  class_option :two_factor,      type: :boolean, desc: "Add two factor authentication"
 
   source_root File.expand_path("templates", __dir__)
 
@@ -24,10 +23,6 @@ class AuthenticationGenerator < Rails::Generators::Base
       gem "pwned", comment: "Use Pwned to check if a password has been found in any of the huge data breaches [https://github.com/philnash/pwned]"
     end
 
-    if options.ratelimit?
-      gem "rack-ratelimit", group: :production, comment: "Use Rack::Ratelimit to rate limit requests [https://github.com/jeremy/rack-ratelimit]"
-    end
-
     if omniauthable?
       gem "omniauth", comment: "Use OmniAuth to support multi-provider authentication [https://github.com/omniauth/omniauth]"
       gem "omniauth-rails_csrf_protection", comment: "Provides a mitigation against CVE-2015-9284 [https://github.com/cookpad/omniauth-rails_csrf_protection]"
@@ -44,15 +39,6 @@ class AuthenticationGenerator < Rails::Generators::Base
     copy_file "config/initializers/omniauth.rb", "config/initializers/omniauth.rb" if omniauthable?
   end
 
-  def add_environment_configurations
-    ratelimit_code = <<~CODE
-      # Rate limit general requests by IP address in a rate of 1000 requests per minute
-      config.middleware.use(Rack::Ratelimit, name: "General", rate: [1000, 1.minute], redis: Redis.new, logger: Rails.logger) { |env| ActionDispatch::Request.new(env).ip }
-    CODE
-
-    environment ratelimit_code, env: "production" if options.ratelimit?
-  end
-
   def create_migrations
     migration_template "migrations/create_users_migration.rb", "#{db_migrate_path}/create_users.rb"
     migration_template "migrations/create_sessions_migration.rb", "#{db_migrate_path}/create_sessions.rb"

data/lib/generators/authentication/templates/test_unit/controllers/api/identity/password_resets_controller_test.rb.tt

@@ -34,14 +34,14 @@ class Identity::PasswordResetsControllerTest < ActionDispatch::IntegrationTest
   end
 
   test "should update password" do
-    sid = @user.create_password_reset_token.signed_id(expires_in: 20.minutes)
+    sid = @user.password_reset_tokens.create.signed_id(expires_in: 20.minutes)
 
     patch identity_password_reset_url, params: { sid: sid, password: "Secret6*4*2*", password_confirmation: "Secret6*4*2*" }
     assert_response :success
   end
 
   test "should not update password with expired token" do
-    sid_exp = @user.create_password_reset_token.signed_id(expires_in: 0.minutes)
+    sid_exp = @user.password_reset_tokens.create.signed_id(expires_in: 0.minutes)
 
     patch identity_password_reset_url, params: { sid: sid_exp, password: "Secret6*4*2*", password_confirmation: "Secret6*4*2*" }
     assert_response :bad_request

data/lib/generators/authentication/templates/test_unit/controllers/html/identity/password_resets_controller_test.rb.tt

@@ -11,7 +11,7 @@ class Identity::PasswordResetsControllerTest < ActionDispatch::IntegrationTest
   end
 
   test "should get edit" do
-    sid = @user.create_password_reset_token.signed_id(expires_in: 20.minutes)
+    sid = @user.password_reset_tokens.create.signed_id(expires_in: 20.minutes)
 
     get edit_identity_password_reset_url(sid: sid)
     assert_response :success
@@ -46,14 +46,14 @@ class Identity::PasswordResetsControllerTest < ActionDispatch::IntegrationTest
   end
 
   test "should update password" do
-    sid = @user.create_password_reset_token.signed_id(expires_in: 20.minutes)
+    sid = @user.password_reset_tokens.create.signed_id(expires_in: 20.minutes)
 
     patch identity_password_reset_url, params: { sid: sid, password: "Secret6*4*2*", password_confirmation: "Secret6*4*2*" }
     assert_redirected_to sign_in_url
   end
 
   test "should not update password with expired token" do
-    sid_exp = @user.create_password_reset_token.signed_id(expires_in: 0.minutes)
+    sid_exp = @user.password_reset_tokens.create.signed_id(expires_in: 0.minutes)
 
     patch identity_password_reset_url, params: { sid: @sid_exp, password: "Secret6*4*2*", password_confirmation: "Secret6*4*2*" }
     assert_redirected_to new_identity_password_reset_url

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: authentication-zero
 version: !ruby/object:Gem::Version
-  version: 2.15.6
+  version: 2.15.8
 platform: ruby
 authors:
 - Nixon
 autorequire:
 bindir: bin
 cert_chain: []
-date: 2022-08-24 00:00:00.000000000 Z
+date: 2022-09-27 00:00:00.000000000 Z
 dependencies: []
 description:
 email: