authentication-zero 2.16.10 → 2.16.11

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 65348917c3c30813d335ddaa0ded556499189389735612c8c004a44c6fb7ab5c
-  data.tar.gz: dcfff79d0c2ad9098d450923dab94ea849f122c1e31991ce602dec0796d70527
+  metadata.gz: 1c322e94333e2ab7cb4267e120c023f0de6bc908b5f91f966dc315ebe24fa99a
+  data.tar.gz: a472b502f2f0795d457aa7afa5c678fbe368c5cb98399c200416fee0caaa8573
 SHA512:
-  metadata.gz: ba5886da3c24e24eff75f138f38846c1a3867075dbbc1199cbe89c73eb26db21b6286bc705129ee9c6925a00b768fe5d9a09e2cc814b2de733caccdfde7ce963
-  data.tar.gz: 5287419cf37c6ee2251414ccf57a544316aea3db54ba06df630f12893c5539154c1a33c5a283a859309050114b39e349dba4e6f367c83b64aa17991ef7a6425c
+  metadata.gz: 76a33fb738dfdeba9ab24a4189dabae296a1c3a369f96b771a202481f3361d576412998ffce4f97a193d47c51bb693d22028f0e33f4ff44b85be9f1c5ee151b3
+  data.tar.gz: ee103521ed7fe35a8afaa3a6cd8c669a3b999c20bbb783fe0f889daec2391e6820bc44a4e0113754b8b0297e4e68345fbc1f8c1450e2676460706ddb0e412af2

data/CHANGELOG.md

@@ -1,3 +1,9 @@
+## Authentication Zero 2.16.11 ##
+
+* Added sending invitation
+* Remove password challenge for 2FA
+* Remove lock from sign in
+
 ## Authentication Zero 2.16.8 ##
 
 * Verify email using identity/email_verification?sid=xxx instead of

data/Gemfile.lock

@@ -1,7 +1,7 @@
 PATH
   remote: .
   specs:
-    authentication-zero (2.16.10)
+    authentication-zero (2.16.11)
 
 GEM
   remote: https://rubygems.org/

data/README.md

@@ -30,11 +30,12 @@ Since Authentication Zero generates this code into your application instead of b
 - Passwordless authentication (--passwordless)
 - Two factor authentication (--two-factor)
 - Social Login with OmniAuth (--omniauthable)
+- Send invitations (--invitable)
 - Verify email using a link with token
 - Verify email using a six random digits code for api (--code-verifiable)
 - Reset the user password and send reset instructions
 - Reset the user password only from verified emails
-- Lock mechanism for resetting password and sign-in (--lockable)
+- Lock mechanism for resetting password (--lockable)
 - Send e-mail confirmation when your email has been changed
 - Send e-mail notification when someone has logged into your account
 - Manage multiple sessions & devices

data/lib/authentication_zero/version.rb

@@ -1,3 +1,3 @@
 module AuthenticationZero
-  VERSION = "2.16.10"
+  VERSION = "2.16.11"
 end

data/lib/generators/authentication/authentication_generator.rb

@@ -11,6 +11,7 @@ class AuthenticationGenerator < Rails::Generators::Base
   class_option :omniauthable,    type: :boolean, desc: "Add social login support"
   class_option :trackable,       type: :boolean, desc: "Add activity log support"
   class_option :two_factor,      type: :boolean, desc: "Add two factor authentication"
+  class_option :invitable,       type: :boolean, desc: "Add sending invitations"
 
   source_root File.expand_path("templates", __dir__)
 
@@ -77,6 +78,7 @@ class AuthenticationGenerator < Rails::Generators::Base
     directory "controllers/#{format_folder}/two_factor_authentication", "app/controllers/two_factor_authentication" if two_factor?
     template  "controllers/#{format_folder}/sessions_controller.rb", "app/controllers/sessions_controller.rb"
     template  "controllers/#{format_folder}/passwords_controller.rb", "app/controllers/passwords_controller.rb"
+    template  "controllers/#{format_folder}/invitations_controller.rb", "app/controllers/invitations_controller.rb" if invitable?
     template  "controllers/#{format_folder}/registrations_controller.rb", "app/controllers/registrations_controller.rb"
     template  "controllers/#{format_folder}/home_controller.rb", "app/controllers/home_controller.rb" unless options.api?
     template  "controllers/#{format_folder}/sessions/omniauth_controller.rb", "app/controllers/sessions/omniauth_controller.rb" if omniauthable?
@@ -98,6 +100,8 @@ class AuthenticationGenerator < Rails::Generators::Base
       directory "erb/passwords", "app/views/passwords"
       directory "erb/registrations", "app/views/registrations"
 
+      directory "erb/invitations", "app/views/invitations" if invitable?
+
       template "erb/sessions/index.html.erb", "app/views/sessions/index.html.erb"
       template "erb/sessions/new.html.erb", "app/views/sessions/new.html.erb"
 
@@ -137,8 +141,9 @@ class AuthenticationGenerator < Rails::Generators::Base
     route "resource :password_reset,     only: [:new, :edit, :create, :update]", namespace: :identity
     route "resource :email_verification, only: [:show, :create]", namespace: :identity
     route "resource :email,              only: [:edit, :update]", namespace: :identity
-    route "resource  :password, only: [:edit, :update]"
-    route "resources :sessions, only: [:index, :show, :destroy]"
+    route "resource  :invitation, only: [:new, :create]" if invitable?
+    route "resource  :password,   only: [:edit, :update]"
+    route "resources :sessions,   only: [:index, :show, :destroy]"
     route "post 'sign_up', to: 'registrations#create'"
     route "get  'sign_up', to: 'registrations#new'" unless options.api?
     route "post 'sign_in', to: 'sessions#create'"
@@ -170,6 +175,10 @@ class AuthenticationGenerator < Rails::Generators::Base
       options.two_factor? && !options.api?
     end
 
+    def invitable?
+      options.invitable? && !options.api?
+    end
+
     def code_verifiable?
       options.code_verifiable? && options.api?
     end

data/lib/generators/authentication/templates/controllers/html/invitations_controller.rb.tt

@@ -0,0 +1,25 @@
+class InvitationsController < ApplicationController
+  def new
+    @user = User.new
+  end
+
+  def create
+    @user = User.new(user_params)
+
+    if @user.save
+      send_invitation_instructions
+      redirect_to new_invitation_path, notice: "An invitation email has been sent to #{@user.email}"
+    else
+      render :new, status: :unprocessable_entity
+    end
+  end
+
+  private
+    def user_params
+      params.permit(:email).merge(password: SecureRandom::base58, verified: true)
+    end
+
+    def send_invitation_instructions
+      UserMailer.with(user: @user).invitation_instructions.deliver_later
+    end
+end

data/lib/generators/authentication/templates/controllers/html/sessions_controller.rb.tt

@@ -1,9 +1,6 @@
 class SessionsController < ApplicationController
   skip_before_action :authenticate, only: %i[ new create ]
 
-  <%- if options.lockable? -%>
-  before_action :require_lock, attempts: 20, only: :create
-  <%- end -%>
   before_action :set_session, only: :destroy
 
   def index

data/lib/generators/authentication/templates/controllers/html/two_factor_authentication/totps_controller.rb.tt

@@ -7,9 +7,7 @@ class TwoFactorAuthentication::TotpsController < ApplicationController
   end
 
   def create
-    if !@user.authenticate(params[:current_password])
-      redirect_to new_two_factor_authentication_totp_path, alert: "The password you entered is incorrect"
-    elsif @totp.verify(params[:code], drift_behind: 15)
+    if @totp.verify(params[:code], drift_behind: 15)
       @user.update! otp_secret: params[:secret]
       redirect_to root_path, notice: "2FA is enabled on your account"
     else

data/lib/generators/authentication/templates/erb/home/index.html.erb.tt

@@ -19,6 +19,11 @@
     <%%= link_to "Activity Log", authentications_events_path %>
   </div>
   <%- end -%>
+  <%- if invitable? %>
+  <div>
+    <%%= link_to "Send invitation", new_invitation_path %>
+  </div>
+  <%- end -%>
   <%- if two_factor? %>
   <div>
     <%%= link_to "Two-Factor Authentication", new_two_factor_authentication_totp_path %>

data/lib/generators/authentication/templates/erb/invitations/new.html.erb.tt

@@ -0,0 +1,26 @@
+<p style="color: green"><%%= notice %></p>
+
+<h1>Send invitation</h1>
+
+<%%= form_with(url: invitation_path) do |form| %>
+  <%% if @user.errors.any? %>
+    <div style="color: red">
+      <h2><%%= pluralize(@user.errors.count, "error") %> prohibited this user from being saved:</h2>
+
+      <ul>
+        <%% @user.errors.each do |error| %>
+          <li><%%= error.full_message %></li>
+        <%% end %>
+      </ul>
+    </div>
+  <%% end %>
+
+  <div>
+    <%%= form.label :email, style: "display: block" %>
+    <%%= form.email_field :email, required: true, autofocus: true %>
+  </div>
+
+  <div>
+    <%%= form.submit "Send an invitation" %>
+  </div>
+<%% end %>

data/lib/generators/authentication/templates/erb/two_factor_authentication/totps/new.html.erb.tt

@@ -22,11 +22,6 @@
     <%%= form.text_field :code, required: true, autofocus: true, autocomplete: :off %>
   </div>
 
-  <div>
-    <%%= form.label :current_password, style: "display: block" %>
-    <%%= form.password_field :current_password, required: true, autocomplete: "current-password" %>
-  </div>
-
   <div>
     <%%= form.submit "Verify and activate" %>
   </div>

data/lib/generators/authentication/templates/erb/user_mailer/invitation_instructions.html.erb.tt

@@ -0,0 +1,11 @@
+<p>Hey there,</p>
+
+<p>Someone has invited you to the application, you can accept it through the link below.</p>
+
+<p><%%= link_to "Accept invitation", edit_identity_password_reset_url(sid: @signed_id) %></p>
+
+<p>If you don't want to accept the invitation, please ignore this email. Your account won't be created until you access the link above and set your password.</p>
+
+<hr>
+
+<p>Have questions or need help? Just reply to this email and our support team will help you sort it out.</p>

data/lib/generators/authentication/templates/mailers/user_mailer.rb.tt

@@ -24,4 +24,12 @@ class UserMailer < ApplicationMailer
     mail to: @user.email, subject: "Your sign in link"
   end
   <%- end -%>
+  <%- if invitable? %>
+  def invitation_instructions
+    @user = params[:user]
+    @signed_id = @user.password_reset_tokens.create.signed_id(expires_in: 2.days)
+
+    mail to: @user.email, subject: "Invitation instructions"
+  end
+  <%- end -%>
 end

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: authentication-zero
 version: !ruby/object:Gem::Version
-  version: 2.16.10
+  version: 2.16.11
 platform: ruby
 authors:
 - Nixon
 autorequire:
 bindir: bin
 cert_chain: []
-date: 2023-03-26 00:00:00.000000000 Z
+date: 2023-04-02 00:00:00.000000000 Z
 dependencies: []
 description:
 email:
@@ -51,6 +51,7 @@ files:
 - lib/generators/authentication/templates/controllers/html/identity/email_verifications_controller.rb.tt
 - lib/generators/authentication/templates/controllers/html/identity/emails_controller.rb.tt
 - lib/generators/authentication/templates/controllers/html/identity/password_resets_controller.rb.tt
+- lib/generators/authentication/templates/controllers/html/invitations_controller.rb.tt
 - lib/generators/authentication/templates/controllers/html/passwords_controller.rb.tt
 - lib/generators/authentication/templates/controllers/html/registrations_controller.rb.tt
 - lib/generators/authentication/templates/controllers/html/sessions/omniauth_controller.rb.tt
@@ -63,6 +64,7 @@ files:
 - lib/generators/authentication/templates/erb/identity/emails/edit.html.erb.tt
 - lib/generators/authentication/templates/erb/identity/password_resets/edit.html.erb.tt
 - lib/generators/authentication/templates/erb/identity/password_resets/new.html.erb.tt
+- lib/generators/authentication/templates/erb/invitations/new.html.erb.tt
 - lib/generators/authentication/templates/erb/passwords/edit.html.erb.tt
 - lib/generators/authentication/templates/erb/registrations/new.html.erb.tt
 - lib/generators/authentication/templates/erb/session_mailer/signed_in_notification.html.erb.tt
@@ -72,6 +74,7 @@ files:
 - lib/generators/authentication/templates/erb/two_factor_authentication/challenges/new.html.erb.tt
 - lib/generators/authentication/templates/erb/two_factor_authentication/totps/new.html.erb.tt
 - lib/generators/authentication/templates/erb/user_mailer/email_verification.html.erb.tt
+- lib/generators/authentication/templates/erb/user_mailer/invitation_instructions.html.erb.tt
 - lib/generators/authentication/templates/erb/user_mailer/password_reset.html.erb.tt
 - lib/generators/authentication/templates/erb/user_mailer/passwordless.html.erb.tt
 - lib/generators/authentication/templates/mailers/session_mailer.rb.tt