authentication-zero 2.16.24 → 2.16.25

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 769f7682100782d48f09608fc6468e6be06375acd2d1dabd01f0aef1074b2c96
-  data.tar.gz: 04453fdec338106d6d2668809f2dc84b40bfb0f0635ac26204be27f6f7d0f001
+  metadata.gz: 7e2f92cea6894605d40f9db5bad75a4cb227a89043a19f8fe79172b83731b226
+  data.tar.gz: 85801b84481982cabfc5d1bbbbc554893d4597ed70a7550f1f4e299f8b4b81ae
 SHA512:
-  metadata.gz: 5b020228f7e344bf79771883bf498f25315078f0a8282ea617e817d658808c7706f70dc8325e1c759cf305177e9999a9f8c564666f366e25f3a9c7f85156c8c8
-  data.tar.gz: 57ab3706f6025956a4e08d4c3c332b36685cb4f9d8dedbf5d88ccfe4ff445d4d7c572a74bea5d64071e1e9b19ddcad938357836f07c0e0a630f86cca1c5c3d0f
+  metadata.gz: cc3bddc51a3cbe07dc2dd990ae65b9692699f3dad8d370da99952ee7cedb3c6d31699ee7804e5c0b5b0ff8a8e5b05182a9a1c40d58d04c364d7171f53c193b8d
+  data.tar.gz: 07bccc4f5eb51fac1da60e82bd3f819f2b29aec97085d73fd13d819ed69b81a704b12bd866e2340b6641ee860563d49a67bea43854a2efa0da23004c9501a598

data/CHANGELOG.md

@@ -1,3 +1,7 @@
+## Authentication Zero 2.16.25 ##
+
+* Add new option to refresh otp secret
+
 ## Authentication Zero 2.16.24 ##
 
 * Remove otp secret from client

data/Gemfile.lock

@@ -1,7 +1,7 @@
 PATH
   remote: .
   specs:
-    authentication-zero (2.16.24)
+    authentication-zero (2.16.25)
 
 GEM
   remote: https://rubygems.org/

data/lib/authentication_zero/version.rb

@@ -1,3 +1,3 @@
 module AuthenticationZero
-  VERSION = "2.16.24"
+  VERSION = "2.16.25"
 end

data/lib/generators/authentication/authentication_generator.rb

@@ -117,7 +117,8 @@ class AuthenticationGenerator < Rails::Generators::Base
 
   def install_javascript_dependencies
     return if options.api?
-    template "javascript/controllers/application.js", "app/javascript/controllers/application.js"
+
+    template "javascript/controllers/application.js", "app/javascript/controllers/application.js", force: true
 
     if webauthn?
       run "bin/importmap pin stimulus-web-authn" if importmaps?
@@ -195,7 +196,7 @@ class AuthenticationGenerator < Rails::Generators::Base
 
     if two_factor?
       route "resources :recovery_codes, only: [:index, :create]", namespace: [:two_factor_authentication, :profile]
-      route "resource  :totp,           only: [:new, :create]", namespace: [:two_factor_authentication, :profile]
+      route "resource  :totp,           only: [:new, :create, :update]", namespace: [:two_factor_authentication, :profile]
       route "resources :security_keys", namespace: [:two_factor_authentication, :profile] if webauthn?
 
       route "resource :recovery_codes, only: [:new, :create]", namespace: [:two_factor_authentication, :challenge]

data/lib/generators/authentication/templates/controllers/html/two_factor_authentication/profile/totps_controller.rb.tt

@@ -1,6 +1,6 @@
 class TwoFactorAuthentication::Profile::TotpsController < ApplicationController
   before_action :set_user
-  before_action :set_totp
+  before_action :set_totp, only: %i[ new create ]
 
   def new
     @qr_code = RQRCode::QRCode.new(provisioning_uri)
@@ -15,6 +15,11 @@ class TwoFactorAuthentication::Profile::TotpsController < ApplicationController
     end
   end
 
+  def update
+    @user.update! otp_secret: ROTP::Base32.random
+    redirect_to new_two_factor_authentication_profile_totp_path
+  end
+
   private
     def set_user
       @user = Current.user

data/lib/generators/authentication/templates/erb/two_factor_authentication/profile/totps/new.html.erb.tt

@@ -1,5 +1,17 @@
 <p style="color: red"><%%= alert %></p>
 
+<%% if Current.user.otp_required_for_sign_in? %>
+  <h1>Want to replace your existing 2FA setup?</h1>
+
+  <p>Your account is already protected with two-factor authentication. You can replace that setup if you want to switch to a new phone or authenticator app.</p>
+
+  <p><strong>Do you want to continue? Your existing 2FA setup will no longer work.</strong></p>
+
+  <%%= button_to "Yes, replace my 2FA setup", two_factor_authentication_profile_totp_path, method: :patch %>
+
+  <hr>
+<%% end %>
+
 <h1>Upgrade your security with 2FA</h1>
 
 <h2>Step 1: Get an Authenticator App</h2>

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: authentication-zero
 version: !ruby/object:Gem::Version
-  version: 2.16.24
+  version: 2.16.25
 platform: ruby
 authors:
 - Nixon