authentication-zero 2.2.6 → 2.2.9

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 8f18ce45e177a0e4b7cdb47f22456d5516909dc516002ad33416474f7582a39b
-  data.tar.gz: 18352b1de767047836853252e9a2832c84e6329002887724157a4dddb1d02f47
+  metadata.gz: e025028c28dd89faa490a953449c4b9176a4ac3ca0060612d87bb3f1cfc1863d
+  data.tar.gz: fa5d9c5ebad6a4362d107b6ceaaa82b384ab15570c4124c69ea14db20eb4de4d
 SHA512:
-  metadata.gz: 30be7c743f859f755d32a076ff1748c33f0803d53b3368a6e7914c756e7b5a8183864d07866b15d3b07e2e0ad77bfcd174386090ebe941e1eeee1e269ab57412
-  data.tar.gz: 0b07f046c9ccfa17c4ad51fac9c4d4e59807c17f3f190acefc0d73168b32bb4b2112bdbcd14df75d402aa65b78f6c42edd68e18c55f0df39c5f1d4f2ffc7f67a
+  metadata.gz: 439ce53002ab43e268dfa3be24d9a91f5d94dd033865f4801eb2aa0c32e5f51d05e6a1e11be3655fc31285422302b7a993ac543553734d8b23b6d24d5acceec3
+  data.tar.gz: 41d4aad8d43718e4d9e458cdaa15560b7b45d61e68e2fc734444b2eaa43e632336dad558e731cd882787b03d0156a188de1cd25c6df5f38b73383e930c6fcb6c

data/Gemfile.lock

@@ -1,7 +1,7 @@
 PATH
   remote: .
   specs:
-    authentication-zero (2.2.6)
+    authentication-zero (2.2.9)
 
 GEM
   remote: https://rubygems.org/

data/lib/authentication_zero/version.rb

@@ -1,3 +1,3 @@
 module AuthenticationZero
-  VERSION = "2.2.6"
+  VERSION = "2.2.9"
 end

data/lib/generators/authentication/authentication_generator.rb

@@ -96,7 +96,7 @@ class AuthenticationGenerator < Rails::Generators::NamedBase
       route "resource :registration, only: :destroy"
       route "resource :password_reset, only: [:new, :edit, :create, :update]"
       route "resource :password, only: [:edit, :update]"
-      route "resource :email_verification, only: [:new, :edit, :create, :update]"
+      route "resource :email_verification, only: [:edit, :create]"
       route "resource :email, only: [:edit, :update]"
       route "resources :sessions, only: [:index, :show, :destroy]"
       route "post 'sign_up', to: 'registrations#create'"

data/lib/generators/authentication/templates/controllers/api/email_verifications_controller.rb.tt

@@ -1,18 +1,18 @@
 class EmailVerificationsController < ApplicationController
-  before_action :set_<%= singular_table_name %>, only: :update
+  before_action :set_<%= singular_table_name %>, only: :edit
 
-  def create
-    IdentityMailer.with(<%= singular_table_name %>: Current.<%= singular_table_name %>).email_verify_confirmation.deliver_later
+  def edit
+    @<%= singular_table_name %>.update! verified: true
   end
 
-  def update
-    @<%= singular_table_name %>.update! verified: true
+  def create
+    IdentityMailer.with(<%= singular_table_name %>: Current.<%= singular_table_name %>).email_verify_confirmation.deliver_later
   end
 
   private
     def set_<%= singular_table_name %>
       @<%= singular_table_name %> = <%= class_name %>.where(email: params[:email]).find_signed!(params[:token], purpose: params[:email])
-    rescue ActiveSupport::MessageVerifier::InvalidSignature, ActiveRecord::RecordNotFound
+    rescue
       render json: { error: "That email verification link is invalid" }, status: :bad_request
     end
 end

data/lib/generators/authentication/templates/controllers/api/emails_controller.rb.tt

@@ -1,10 +1,9 @@
 class EmailsController < ApplicationController
   before_action :set_<%= singular_table_name %>
+  before_action :validate_current_password
 
   def update
-    if !@<%= singular_table_name %>.authenticate(params[:current_password])
-      render json: { error: "The current password you entered is incorrect" }, status: :bad_request
-    elsif @<%= singular_table_name %>.update(<%= "#{singular_table_name}_params" %>)
+    if @<%= singular_table_name %>.update(<%= "#{singular_table_name}_params" %>)
       render json: @<%= singular_table_name %>
     else
       render json: @<%= singular_table_name %>.errors, status: :unprocessable_entity
@@ -19,4 +18,10 @@ class EmailsController < ApplicationController
     def <%= "#{singular_table_name}_params" %>
       params.permit(:email)
     end
+
+    def validate_current_password
+      unless @<%= singular_table_name %>.authenticate(params[:current_password])
+        render json: { error: "The current password you entered is incorrect" }, status: :bad_request
+      end
+    end
 end

data/lib/generators/authentication/templates/controllers/api/password_resets_controller.rb.tt

@@ -1,8 +1,8 @@
 class PasswordResetsController < ApplicationController
-  before_action :set_<%= singular_table_name %>, only: :update
-
   skip_before_action :authenticate
 
+  before_action :set_<%= singular_table_name %>, only: :update
+
   def create
     if @<%= singular_table_name %> = <%= class_name %>.find_by(email: params[:email], verified: true)
       IdentityMailer.with(<%= singular_table_name %>: @<%= singular_table_name %>).password_reset_provision.deliver_later
@@ -22,7 +22,7 @@ class PasswordResetsController < ApplicationController
   private
     def set_<%= singular_table_name %>
       @<%= singular_table_name %> = <%= class_name %>.find_signed!(params[:token], purpose: :password_reset)
-    rescue ActiveSupport::MessageVerifier::InvalidSignature
+    rescue
       render json: { error: "That password reset link is invalid" }, status: :bad_request
     end
 

data/lib/generators/authentication/templates/controllers/api/passwords_controller.rb.tt

@@ -1,10 +1,9 @@
 class PasswordsController < ApplicationController
   before_action :set_<%= singular_table_name %>
+  before_action :validate_current_password
 
   def update
-    if !@<%= singular_table_name %>.authenticate(params[:current_password])
-      render json: { error: "The current password you entered is incorrect" }, status: :bad_request
-    elsif @<%= singular_table_name %>.update(<%= "#{singular_table_name}_params" %>)
+    if @<%= singular_table_name %>.update(<%= "#{singular_table_name}_params" %>)
       render json: @<%= singular_table_name %>
     else
       render json: @<%= singular_table_name %>.errors, status: :unprocessable_entity
@@ -19,4 +18,10 @@ class PasswordsController < ApplicationController
     def <%= "#{singular_table_name}_params" %>
       params.permit(:password, :password_confirmation)
     end
+
+    def validate_current_password
+      unless @<%= singular_table_name %>.authenticate(params[:current_password])
+        render json: { error: "The current password you entered is incorrect" }, status: :bad_request
+      end
+    end
 end

data/lib/generators/authentication/templates/controllers/api/sessions_controller.rb.tt

@@ -1,8 +1,8 @@
 class SessionsController < ApplicationController
-  before_action :set_session, only: %i[ show destroy ]
-
   skip_before_action :authenticate, only: :create
 
+  before_action :set_session, only: %i[ show destroy ]
+
   def index
     render json: Current.<%= singular_table_name %>.sessions.order(created_at: :desc)
   end
@@ -14,7 +14,7 @@ class SessionsController < ApplicationController
   def create
     @<%= singular_table_name %> = <%= class_name %>.find_by_email(params[:email])
 
-    if @<%= singular_table_name %>.try(:authenticate, params[:password])
+    if @<%= singular_table_name %> && @<%= singular_table_name %>.authenticate(params[:password])
       session = @<%= singular_table_name %>.sessions.create!(session_params)
       response.set_header("X-Session-Token", session.signed_id)
 

data/lib/generators/authentication/templates/controllers/html/email_verifications_controller.rb.tt

@@ -1,5 +1,5 @@
 class EmailVerificationsController < ApplicationController
-  before_action :set_<%= singular_table_name %>, only: %i[ edit update ]
+  before_action :set_<%= singular_table_name %>, only: :edit
 
   def edit
     @<%= singular_table_name %>.update! verified: true
@@ -14,7 +14,7 @@ class EmailVerificationsController < ApplicationController
   private
     def set_<%= singular_table_name %>
       @<%= singular_table_name %> = <%= class_name %>.where(email: params[:email]).find_signed!(params[:token], purpose: params[:email])
-    rescue ActiveSupport::MessageVerifier::InvalidSignature, ActiveRecord::RecordNotFound
+    rescue
       redirect_to edit_email_path, alert: "That email verification link is invalid"
     end
 end

data/lib/generators/authentication/templates/controllers/html/emails_controller.rb.tt

@@ -1,13 +1,12 @@
 class EmailsController < ApplicationController
   before_action :set_<%= singular_table_name %>
+  before_action :validate_current_password, only: :update
 
   def edit
   end
 
   def update
-    if !@<%= singular_table_name %>.authenticate(params[:current_password])
-      redirect_to edit_email_path, alert: "The current password you entered is incorrect"
-    elsif @<%= singular_table_name %>.update(<%= "#{singular_table_name}_params" %>)
+    if @<%= singular_table_name %>.update(<%= "#{singular_table_name}_params" %>)
       redirect_to root_path, notice: "Your email has been changed"
     else
       render :edit, status: :unprocessable_entity
@@ -22,4 +21,10 @@ class EmailsController < ApplicationController
     def <%= "#{singular_table_name}_params" %>
       params.require(:<%= singular_table_name %>).permit(:email)
     end
+
+    def validate_current_password
+      unless @<%= singular_table_name %>.authenticate(params[:current_password])
+        redirect_to edit_email_path, alert: "The current password you entered is incorrect"
+      end
+    end
 end

data/lib/generators/authentication/templates/controllers/html/password_resets_controller.rb.tt

@@ -1,8 +1,8 @@
 class PasswordResetsController < ApplicationController
-  before_action :set_<%= singular_table_name %>, only: %i[ edit update ]
-
   skip_before_action :authenticate
 
+  before_action :set_<%= singular_table_name %>, only: %i[ edit update ]
+
   def new
   end
 
@@ -29,7 +29,7 @@ class PasswordResetsController < ApplicationController
   private
     def set_<%= singular_table_name %>
       @<%= singular_table_name %> = <%= class_name %>.find_signed!(params[:token], purpose: :password_reset)
-    rescue ActiveSupport::MessageVerifier::InvalidSignature
+    rescue
       redirect_to new_password_reset_path, alert: "That password reset link is invalid"
     end
 

data/lib/generators/authentication/templates/controllers/html/passwords_controller.rb.tt

@@ -1,13 +1,12 @@
 class PasswordsController < ApplicationController
   before_action :set_<%= singular_table_name %>
+  before_action :validate_current_password, only: :update
 
   def edit
   end
 
   def update
-    if !@<%= singular_table_name %>.authenticate(params[:current_password])
-      redirect_to edit_password_path, alert: "The current password you entered is incorrect"
-    elsif @<%= singular_table_name %>.update(<%= "#{singular_table_name}_params" %>)
+    if @<%= singular_table_name %>.update(<%= "#{singular_table_name}_params" %>)
       redirect_to root_path, notice: "Your password has been changed"
     else
       render :edit, status: :unprocessable_entity
@@ -22,4 +21,10 @@ class PasswordsController < ApplicationController
     def <%= "#{singular_table_name}_params" %>
       params.require(:<%= singular_table_name %>).permit(:password, :password_confirmation)
     end
+
+    def validate_current_password
+      unless @<%= singular_table_name %>.authenticate(params[:current_password])
+        redirect_to edit_password_path, alert: "The current password you entered is incorrect"
+      end
+    end
 end

data/lib/generators/authentication/templates/controllers/html/sessions_controller.rb.tt

@@ -1,8 +1,8 @@
 class SessionsController < ApplicationController
-  before_action :set_session, only: :destroy
-
   skip_before_action :authenticate, only: %i[ new create ]
 
+  before_action :set_session, only: :destroy
+
   def index
     @sessions = Current.<%= singular_table_name %>.sessions.order(created_at: :desc)
   end
@@ -14,7 +14,7 @@ class SessionsController < ApplicationController
   def create
     @<%= singular_table_name %> = <%= class_name %>.find_by_email(params[:email])
 
-    if @<%= singular_table_name %>.try(:authenticate, params[:password])
+    if @<%= singular_table_name %> && @<%= singular_table_name %>.authenticate(params[:password])
       session = @<%= singular_table_name %>.sessions.create!(session_params)
       cookies.signed.permanent[:session_token] = { value: session.id, httponly: true }
 

data/lib/generators/authentication/templates/models/model.rb.tt

@@ -4,19 +4,21 @@ class <%= class_name %> < ApplicationRecord
   has_many :sessions, dependent: :destroy
 
   validates :email, presence: true, uniqueness: true
-  validates :email, format: { with: /\A[^@\s]+@[^@\s]+\z/ }
+  validates_format_of :email, with: /\A[^@\s]+@[^@\s]+\z/
+
   validates_length_of :password, minimum: 8, allow_blank: true
+  validates_format_of :password, with: /(?=.*[a-z])(?=.*[A-Z])(?=.*[0-9])/, allow_blank: true, message: "might easily be guessed"
 
   before_validation do
     self.email = email.downcase.strip
   end
 
-  after_create_commit do
-    IdentityMailer.with(<%= singular_table_name %>: self).email_verify_confirmation.deliver_later
+  before_validation if: :email_changed? do
+    self.verified = false
   end
 
-  after_update_commit if: :email_previously_changed? do
-    update_columns verified: false
+  after_create_commit do
+    IdentityMailer.with(<%= singular_table_name %>: self).email_verify_confirmation.deliver_later
   end
 
   after_update_commit if: :email_previously_changed? do

data/lib/generators/authentication/templates/test_unit/controllers/api/email_verifications_controller_test.rb.tt

@@ -18,12 +18,12 @@ class EmailVerificationsControllerTest < ActionDispatch::IntegrationTest
   end
 
   test "should verify email" do
-    patch email_verification_url, params: { token: @sid, email: @<%= singular_table_name %>.email }, headers: { "Authorization" => "Bearer #{@token}" }
+    get edit_email_verification_url, params: { token: @sid, email: @<%= singular_table_name %>.email }, headers: { "Authorization" => "Bearer #{@token}" }
     assert_response :no_content
   end
 
   test "should not verify email with expired token" do
-    patch email_verification_url, params: { token: @sid_exp, email: @<%= singular_table_name %>.email }, headers: { "Authorization" => "Bearer #{@token}" }
+    get edit_email_verification_url, params: { token: @sid_exp, email: @<%= singular_table_name %>.email }, headers: { "Authorization" => "Bearer #{@token}" }
 
     assert_response :bad_request
     assert_equal "That email verification link is invalid", response.parsed_body["error"]
@@ -32,14 +32,13 @@ class EmailVerificationsControllerTest < ActionDispatch::IntegrationTest
   test "should not verify email with previous token" do
     @<%= singular_table_name %>.update! email: "other_email@hey.com"
 
-    patch email_verification_url, params: { token: @sid, email: @<%= singular_table_name %>.email_previously_was }, headers: { "Authorization" => "Bearer #{@token}" }
+    get edit_email_verification_url, params: { token: @sid, email: @<%= singular_table_name %>.email_previously_was }, headers: { "Authorization" => "Bearer #{@token}" }
 
     assert_response :bad_request
     assert_equal "That email verification link is invalid", response.parsed_body["error"]
   end
 
   def sign_in_as(<%= singular_table_name %>)
-    post(sign_in_url, params: { email: <%= singular_table_name %>.email, password: "secret123" })
-    [<%= singular_table_name %>, response.headers["X-Session-Token"]]
+    post(sign_in_url, params: { email: <%= singular_table_name %>.email, password: "Secret123" }); [<%= singular_table_name %>, response.headers["X-Session-Token"]]
   end
 end

data/lib/generators/authentication/templates/test_unit/controllers/api/emails_controller_test.rb.tt

@@ -6,7 +6,7 @@ class EmailsControllerTest < ActionDispatch::IntegrationTest
   end
 
   test "should update email" do
-    patch email_url, params: { current_password: "secret123", email: "new_email@hey.com" }, headers: { "Authorization" => "Bearer #{@token}" }
+    patch email_url, params: { current_password: "Secret123", email: "new_email@hey.com" }, headers: { "Authorization" => "Bearer #{@token}" }
     assert_response :success
   end
 
@@ -18,7 +18,6 @@ class EmailsControllerTest < ActionDispatch::IntegrationTest
   end
 
   def sign_in_as(<%= singular_table_name %>)
-    post(sign_in_url, params: { email: <%= singular_table_name %>.email, password: "secret123" })
-    [<%= singular_table_name %>, response.headers["X-Session-Token"]]
+    post(sign_in_url, params: { email: <%= singular_table_name %>.email, password: "Secret123" }); [<%= singular_table_name %>, response.headers["X-Session-Token"]]
   end
 end

data/lib/generators/authentication/templates/test_unit/controllers/api/password_resets_controller_test.rb.tt

@@ -25,7 +25,7 @@ class PasswordResetsControllerTest < ActionDispatch::IntegrationTest
   end
 
   test "should not send a password reset email to a unverified email" do
-    @<%= singular_table_name %>.update!(verified: false)
+    @<%= singular_table_name %>.update! verified: false
 
     assert_no_enqueued_emails do
       post password_reset_url, params: { email: @<%= singular_table_name %>.email }
@@ -36,12 +36,12 @@ class PasswordResetsControllerTest < ActionDispatch::IntegrationTest
   end
 
   test "should update password" do
-    patch password_reset_url, params: { token: @sid, password: "new_password", password_confirmation: "new_password" }
+    patch password_reset_url, params: { token: @sid, password: "Secret321", password_confirmation: "Secret321" }
     assert_response :success
   end
 
   test "should not update password with expired token" do
-    patch password_reset_url, params: { token: @sid_exp, password: "new_password", password_confirmation: "new_password" }
+    patch password_reset_url, params: { token: @sid_exp, password: "Secret321", password_confirmation: "Secret321" }
 
     assert_response :bad_request
     assert_equal "That password reset link is invalid", response.parsed_body["error"]

data/lib/generators/authentication/templates/test_unit/controllers/api/passwords_controller_test.rb.tt

@@ -6,19 +6,18 @@ class PasswordsControllerTest < ActionDispatch::IntegrationTest
   end
 
   test "should update password" do
-    patch password_url, params: { current_password: "secret123", password: "new_password", password_confirmation: "new_password" }, headers: { "Authorization" => "Bearer #{@token}" }
+    patch password_url, params: { current_password: "Secret123", password: "Secret321", password_confirmation: "Secret321" }, headers: { "Authorization" => "Bearer #{@token}" }
     assert_response :success
   end
 
   test "should not update password with wrong current password" do
-    patch password_url, params: { current_password: "wrong_password", password: "new_password", password_confirmation: "new_password" }, headers: { "Authorization" => "Bearer #{@token}" }
+    patch password_url, params: { current_password: "wrong_password", password: "Secret321", password_confirmation: "Secret321" }, headers: { "Authorization" => "Bearer #{@token}" }
 
     assert_response :bad_request
     assert_equal "The current password you entered is incorrect", response.parsed_body["error"]
   end
 
   def sign_in_as(<%= singular_table_name %>)
-    post(sign_in_url, params: { email: <%= singular_table_name %>.email, password: "secret123" })
-    [<%= singular_table_name %>, response.headers["X-Session-Token"]]
+    post(sign_in_url, params: { email: <%= singular_table_name %>.email, password: "Secret123" }); [<%= singular_table_name %>, response.headers["X-Session-Token"]]
   end
 end

data/lib/generators/authentication/templates/test_unit/controllers/api/registrations_controller_test.rb.tt

@@ -3,7 +3,7 @@ require "test_helper"
 class RegistrationsControllerTest < ActionDispatch::IntegrationTest
   test "should sign up" do
     assert_difference("<%= class_name %>.count") do
-      post sign_up_url, params: { email: "lazaronixon@hey.com", password: "secret123", password_confirmation: "secret123" }
+      post sign_up_url, params: { email: "lazaronixon@hey.com", password: "Secret123", password_confirmation: "Secret123" }
     end
 
     assert_response :created
@@ -20,7 +20,6 @@ class RegistrationsControllerTest < ActionDispatch::IntegrationTest
   end
 
   def sign_in_as(<%= singular_table_name %>)
-    post(sign_in_url, params: { email: <%= singular_table_name %>.email, password: "secret123" })
-    [<%= singular_table_name %>, response.headers["X-Session-Token"]]
+    post(sign_in_url, params: { email: <%= singular_table_name %>.email, password: "Secret123" }); [<%= singular_table_name %>, response.headers["X-Session-Token"]]
   end
 end

data/lib/generators/authentication/templates/test_unit/controllers/api/sessions_controller_test.rb.tt

@@ -16,7 +16,7 @@ class SessionsControllerTest < ActionDispatch::IntegrationTest
   end
 
   test "should sign in" do
-    post sign_in_url, params: { email: @<%= singular_table_name %>.email, password: "secret123" }
+    post sign_in_url, params: { email: @<%= singular_table_name %>.email, password: "Secret123" }
 
     assert_enqueued_email_with SessionMailer, :signed_in_notification, args: { session: @<%= singular_table_name %>.sessions.last }
     assert_response :created
@@ -33,7 +33,6 @@ class SessionsControllerTest < ActionDispatch::IntegrationTest
   end
 
   def sign_in_as(<%= singular_table_name %>)
-    post(sign_in_url, params: { email: <%= singular_table_name %>.email, password: "secret123" })
-    [<%= singular_table_name %>, response.headers["X-Session-Token"]]
+    post(sign_in_url, params: { email: <%= singular_table_name %>.email, password: "Secret123" }); [<%= singular_table_name %>, response.headers["X-Session-Token"]]
   end
 end

data/lib/generators/authentication/templates/test_unit/controllers/html/email_verifications_controller_test.rb.tt

@@ -39,6 +39,6 @@ class EmailVerificationsControllerTest < ActionDispatch::IntegrationTest
   end
 
   def sign_in_as(<%= singular_table_name %>)
-    post(sign_in_url, params: { email: <%= singular_table_name %>.email, password: "secret123" }); <%= singular_table_name %>
+    post(sign_in_url, params: { email: <%= singular_table_name %>.email, password: "Secret123" }); <%= singular_table_name %>
   end
 end

data/lib/generators/authentication/templates/test_unit/controllers/html/emails_controller_test.rb.tt

@@ -11,7 +11,7 @@ class EmailsControllerTest < ActionDispatch::IntegrationTest
   end
 
   test "should update email" do
-    patch email_url, params: { current_password: "secret123", <%= singular_table_name %>: { email: "new_email@hey.com" } }
+    patch email_url, params: { current_password: "Secret123", <%= singular_table_name %>: { email: "new_email@hey.com" } }
     assert_redirected_to root_path
   end
 
@@ -23,6 +23,6 @@ class EmailsControllerTest < ActionDispatch::IntegrationTest
   end
 
   def sign_in_as(<%= singular_table_name %>)
-    post(sign_in_url, params: { email: <%= singular_table_name %>.email, password: "secret123" }); <%= singular_table_name %>
+    post(sign_in_url, params: { email: <%= singular_table_name %>.email, password: "Secret123" }); <%= singular_table_name %>
   end
 end

data/lib/generators/authentication/templates/test_unit/controllers/html/password_resets_controller_test.rb.tt

@@ -35,7 +35,7 @@ class PasswordResetsControllerTest < ActionDispatch::IntegrationTest
   end
 
   test "should not send a password reset email to a unverified email" do
-    @<%= singular_table_name %>.update!(verified: false)
+    @<%= singular_table_name %>.update! verified: false
 
     assert_no_enqueued_emails do
       post password_reset_url, params: { email: @<%= singular_table_name %>.email }
@@ -46,12 +46,12 @@ class PasswordResetsControllerTest < ActionDispatch::IntegrationTest
   end
 
   test "should update password" do
-    patch password_reset_url, params: { token: @sid, <%= singular_table_name %>: { password: "new_password", password_confirmation: "new_password" } }
+    patch password_reset_url, params: { token: @sid, <%= singular_table_name %>: { password: "Secret321", password_confirmation: "Secret321" } }
     assert_redirected_to sign_in_path
   end
 
   test "should not update password with expired token" do
-    patch password_reset_url, params: { token: @sid_exp, password: "new_password", password_confirmation: "new_password" }
+    patch password_reset_url, params: { token: @sid_exp, password: "Secret321", password_confirmation: "Secret321" }
 
     assert_redirected_to new_password_reset_path
     assert_equal "That password reset link is invalid", flash[:alert]

data/lib/generators/authentication/templates/test_unit/controllers/html/passwords_controller_test.rb.tt

@@ -11,18 +11,18 @@ class PasswordsControllerTest < ActionDispatch::IntegrationTest
   end
 
   test "should update password" do
-    patch password_url, params: { current_password: "secret123", <%= singular_table_name %>: { password: "new_password", password_confirmation: "new_password" } }
+    patch password_url, params: { current_password: "Secret123", <%= singular_table_name %>: { password: "Secret321", password_confirmation: "Secret321" } }
     assert_redirected_to root_path
   end
 
   test "should not update password with wrong current password" do
-    patch password_url, params: { current_password: "wrong_password", <%= singular_table_name %>: { password: "new_password", password_confirmation: "new_password" } }
+    patch password_url, params: { current_password: "wrong_password", <%= singular_table_name %>: { password: "Secret321", password_confirmation: "Secret321" } }
 
     assert_redirected_to edit_password_path
     assert_equal "The current password you entered is incorrect", flash[:alert]
   end
 
   def sign_in_as(<%= singular_table_name %>)
-    post(sign_in_url, params: { email: <%= singular_table_name %>.email, password: "secret123" }); <%= singular_table_name %>
+    post(sign_in_url, params: { email: <%= singular_table_name %>.email, password: "Secret123" }); <%= singular_table_name %>
   end
 end

data/lib/generators/authentication/templates/test_unit/controllers/html/registrations_controller_test.rb.tt

@@ -8,7 +8,7 @@ class RegistrationsControllerTest < ActionDispatch::IntegrationTest
 
   test "should sign up" do
     assert_difference("<%= class_name %>.count") do
-      post sign_up_url, params: { <%= singular_table_name %>: { email: "lazaronixon@hey.com", password: "secret123", password_confirmation: "secret123" } }
+      post sign_up_url, params: { <%= singular_table_name %>: { email: "lazaronixon@hey.com", password: "Secret123", password_confirmation: "Secret123" } }
     end
 
     assert_redirected_to root_url
@@ -25,6 +25,6 @@ class RegistrationsControllerTest < ActionDispatch::IntegrationTest
   end
 
   def sign_in_as(<%= singular_table_name %>)
-    post(sign_in_url, params: { email: <%= singular_table_name %>.email, password: "secret123" }); <%= singular_table_name %>
+    post(sign_in_url, params: { email: <%= singular_table_name %>.email, password: "Secret123" }); <%= singular_table_name %>
   end
 end

data/lib/generators/authentication/templates/test_unit/controllers/html/sessions_controller_test.rb.tt

@@ -18,7 +18,7 @@ class SessionsControllerTest < ActionDispatch::IntegrationTest
   end
 
   test "should sign in" do
-    post sign_in_url, params: { email: @<%= singular_table_name %>.email, password: "secret123" }
+    post sign_in_url, params: { email: @<%= singular_table_name %>.email, password: "Secret123" }
     assert_enqueued_email_with SessionMailer, :signed_in_notification, args: { session: @<%= singular_table_name %>.sessions.last }
 
     assert_redirected_to root_url
@@ -47,6 +47,6 @@ class SessionsControllerTest < ActionDispatch::IntegrationTest
   end
 
   def sign_in_as(<%= singular_table_name %>)
-    post(sign_in_url, params: { email: <%= singular_table_name %>.email, password: "secret123" }); <%= singular_table_name %>
+    post(sign_in_url, params: { email: <%= singular_table_name %>.email, password: "Secret123" }); <%= singular_table_name %>
   end
 end

data/lib/generators/authentication/templates/test_unit/fixtures.yml.tt

@@ -2,5 +2,5 @@
 
 lazaro_nixon:
   email: lazaronixon@hotmail.com
-  password_digest: <%%= BCrypt::Password.create("secret123") %>
+  password_digest: <%%= BCrypt::Password.create("Secret123") %>
   verified: true

data/lib/generators/authentication/templates/test_unit/system/emails_test.rb.tt

@@ -8,7 +8,7 @@ class EmailsTest < ApplicationSystemTestCase
   test "updating the email" do
     click_on "Change email address"
 
-    fill_in "Current password", with: "secret123"
+    fill_in "Current password", with: "Secret123"
     fill_in "New email", with: "new_email@hey.com"
     click_on "Save changes"
 
@@ -27,7 +27,7 @@ class EmailsTest < ApplicationSystemTestCase
   def sign_in_as(<%= singular_table_name %>)
     visit sign_in_url
     fill_in :email, with: <%= singular_table_name %>.email
-    fill_in :password, with: "secret123"
+    fill_in :password, with: "Secret123"
     click_on "Sign in"
 
     return <%= singular_table_name %>

data/lib/generators/authentication/templates/test_unit/system/password_resets_test.rb.tt

@@ -19,8 +19,8 @@ class PasswordResetsTest < ApplicationSystemTestCase
   test "updating password" do
     visit edit_password_reset_url(token: @sid)
 
-    fill_in "New password", with: "new_password"
-    fill_in "Confirm new password", with: "new_password"
+    fill_in "New password", with: "Secret321"
+    fill_in "Confirm new password", with: "Secret321"
     click_on "Save changes"
 
     assert_text "Your password was reset successfully. Please sign in"

data/lib/generators/authentication/templates/test_unit/system/passwords_test.rb.tt

@@ -8,9 +8,9 @@ class PasswordsTest < ApplicationSystemTestCase
   test "updating the password" do
     click_on "Change password"
 
-    fill_in "Current password", with: "secret123"
-    fill_in "New password", with: "new_password"
-    fill_in "Confirm new password", with: "new_password"
+    fill_in "Current password", with: "Secret123"
+    fill_in "New password", with: "Secret321"
+    fill_in "Confirm new password", with: "Secret321"
     click_on "Save changes"
 
     assert_text "Your password has been changed"
@@ -19,7 +19,7 @@ class PasswordsTest < ApplicationSystemTestCase
   def sign_in_as(<%= singular_table_name %>)
     visit sign_in_url
     fill_in :email, with: <%= singular_table_name %>.email
-    fill_in :password, with: "secret123"
+    fill_in :password, with: "Secret123"
     click_on "Sign in"
 
     return <%= singular_table_name %>

data/lib/generators/authentication/templates/test_unit/system/registrations_test.rb.tt

@@ -10,8 +10,8 @@ class RegistrationsTest < ApplicationSystemTestCase
     click_on "Sign up"
 
     fill_in "Email", with: "lazaronixon@hey.com"
-    fill_in "Password", with: "new_password"
-    fill_in "Password confirmation", with: "new_password"
+    fill_in "Password", with: "Secret321"
+    fill_in "Password confirmation", with: "Secret321"
     click_on "Sign up"
 
     assert_text "Welcome! You have signed up successfully"
@@ -27,7 +27,7 @@ class RegistrationsTest < ApplicationSystemTestCase
   def sign_in_as(<%= singular_table_name %>)
     visit sign_in_url
     fill_in :email, with: <%= singular_table_name %>.email
-    fill_in :password, with: "secret123"
+    fill_in :password, with: "Secret123"
     click_on "Sign in"
 
     return <%= singular_table_name %>

data/lib/generators/authentication/templates/test_unit/system/sessions_test.rb.tt

@@ -15,7 +15,7 @@ class SessionsTest < ApplicationSystemTestCase
   test "signing in" do
     visit sign_in_url
     fill_in "Email", with: @<%= singular_table_name %>.email
-    fill_in "Password", with: "secret123"
+    fill_in "Password", with: "Secret123"
     click_on "Sign in"
 
     assert_text "Signed in successfully"
@@ -31,7 +31,7 @@ class SessionsTest < ApplicationSystemTestCase
   def sign_in_as(<%= singular_table_name %>)
     visit sign_in_url
     fill_in :email, with: <%= singular_table_name %>.email
-    fill_in :password, with: "secret123"
+    fill_in :password, with: "Secret123"
     click_on "Sign in"
 
     return <%= singular_table_name %>

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: authentication-zero
 version: !ruby/object:Gem::Version
-  version: 2.2.6
+  version: 2.2.9
 platform: ruby
 authors:
 - Nixon
 autorequire: 
 bindir: bin
 cert_chain: []
-date: 2022-02-24 00:00:00.000000000 Z
+date: 2022-02-25 00:00:00.000000000 Z
 dependencies: []
 description: 
 email: