authentication-zero 2.3.3 → 2.3.6

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 9b21b7a771364a0d7b04c7e53a5977febf8cdc32cb71bb6c221c1d12ca66d7cb
-  data.tar.gz: cebe4c241e5286362c3ca64667ec429ba24c13526c4e2dd6830c1bac1e82af06
+  metadata.gz: 3cd20da7b0f56b6c19dcc3133bd3423222705fd77b64b6754284b2d0a34b795d
+  data.tar.gz: a4fecf9bdff5dc659b584326323ac6b53840d4bc9e0e0096f957d68d34ce521b
 SHA512:
-  metadata.gz: fd13b4bbacb750616f8c50fedcd10edf81d97dbeb8e07353ef4f8e3639fcc5920e28ed1b2d23a26c7d109b38fb8e808bfa7d46f5f00708cb7f16b4d121924443
-  data.tar.gz: 92a2247ccec6a39bcaab61493a774e832e2d8892a9726d40ab574f7b019c8b9c148330582f8e9e2262469434aa2a688d3c6bcf66cda3f90bbc23e71b5a37273e
+  metadata.gz: 9b16ae0a95f453247ea61761bd50bac1abb196980ec8ec56cae879e58239b3f80ffcbb43cde1de81ac4bd50efecaaada6416890a9a04090c3c558c3ffa28870d
+  data.tar.gz: 4563fc71ef94b056bd823dca4dee733d0a337796b995d886e9eeca5cd82706deb43e108857dd70e1bedf1b29a67c0eb1dd08ef2f9fc231a1c0ef51f3c74f17e8

data/Gemfile.lock

@@ -1,7 +1,7 @@
 PATH
   remote: .
   specs:
-    authentication-zero (2.3.3)
+    authentication-zero (2.3.6)
 
 GEM
   remote: https://rubygems.org/

data/lib/authentication_zero/version.rb

@@ -1,3 +1,3 @@
 module AuthenticationZero
-  VERSION = "2.3.3"
+  VERSION = "2.3.6"
 end

data/lib/generators/authentication/authentication_generator.rb

@@ -55,7 +55,7 @@ class AuthenticationGenerator < Rails::Generators::NamedBase
       end
 
       def require_sudo
-        if Time.current > 30.minutes.after(Current.session.sudo_at)
+        if Current.session.sudo_at < 30.minutes.ago
           render json: { error: "Enter your password to continue" }, status: :forbidden
         end
       end
@@ -73,7 +73,7 @@ class AuthenticationGenerator < Rails::Generators::NamedBase
       end
 
       def require_sudo
-        if Time.current > 30.minutes.after(Current.session.sudo_at)
+        if Current.session.sudo_at < 30.minutes.ago
           redirect_to new_sudo_path(proceed_to_url: request.url)
         end
       end

data/lib/generators/authentication/templates/controllers/api/password_resets_controller.rb.tt

@@ -4,8 +4,8 @@ class PasswordResetsController < ApplicationController
   before_action :set_<%= singular_table_name %>, only: :update
 
   def create
-    if <%= singular_table_name %> = <%= class_name %>.find_by(email: params[:email], verified: true)
-      IdentityMailer.with(<%= singular_table_name %>: <%= singular_table_name %>).password_reset_provision.deliver_later
+    if @<%= singular_table_name %> = <%= class_name %>.find_by(email: params[:email], verified: true)
+      IdentityMailer.with(<%= singular_table_name %>: @<%= singular_table_name %>).password_reset_provision.deliver_later
     else
       render json: { error: "You can't reset your password until you verify your email" }, status: :not_found
     end

data/lib/generators/authentication/templates/controllers/api/registrations_controller.rb.tt

@@ -2,12 +2,12 @@ class RegistrationsController < ApplicationController
   skip_before_action :authenticate, only: :create
 
   def create
-    <%= singular_table_name %> = <%= class_name %>.new(<%= "#{singular_table_name}_params" %>)
+    @<%= singular_table_name %> = <%= class_name %>.new(<%= "#{singular_table_name}_params" %>)
 
-    if <%= singular_table_name %>.save
-      render json: <%= singular_table_name %>, status: :created
+    if @<%= singular_table_name %>.save
+      render json: @<%= singular_table_name %>, status: :created
     else
-      render json: <%= singular_table_name %>.errors, status: :unprocessable_entity
+      render json: @<%= singular_table_name %>.errors, status: :unprocessable_entity
     end
   end
 

data/lib/generators/authentication/templates/controllers/api/sessions_controller.rb.tt

@@ -15,10 +15,10 @@ class SessionsController < ApplicationController
     <%= singular_table_name %> = <%= class_name %>.find_by_email(params[:email])
 
     if <%= singular_table_name %> && <%= singular_table_name %>.authenticate(params[:password])
-      session = <%= singular_table_name %>.sessions.create!(session_params)
-      response.set_header("X-Session-Token", session.signed_id)
+      @session = <%= singular_table_name %>.sessions.create!(session_params)
+      response.set_header("X-Session-Token", @session.signed_id)
 
-      render json: session, status: :created
+      render json: @session, status: :created
     else
       render json: { error: "That email or password is incorrect" }, status: :unauthorized
     end

data/lib/generators/authentication/templates/controllers/html/password_resets_controller.rb.tt

@@ -10,8 +10,8 @@ class PasswordResetsController < ApplicationController
   end
 
   def create
-    if <%= singular_table_name %> = <%= class_name %>.find_by(email: params[:email], verified: true)
-      IdentityMailer.with(<%= singular_table_name %>: <%= singular_table_name %>).password_reset_provision.deliver_later
+    if @<%= singular_table_name %> = <%= class_name %>.find_by(email: params[:email], verified: true)
+      IdentityMailer.with(<%= singular_table_name %>: @<%= singular_table_name %>).password_reset_provision.deliver_later
       redirect_to sign_in_path, notice: "Check your email for reset instructions"
     else
       redirect_to new_password_reset_path, alert: "You can't reset your password until you verify your email"

data/lib/generators/authentication/templates/controllers/html/registrations_controller.rb.tt

@@ -6,10 +6,10 @@ class RegistrationsController < ApplicationController
   end
 
   def create
-    <%= singular_table_name %> = <%= class_name %>.new(<%= "#{singular_table_name}_params" %>)
+    @<%= singular_table_name %> = <%= class_name %>.new(<%= "#{singular_table_name}_params" %>)
 
-    if <%= singular_table_name %>.save
-      session = <%= singular_table_name %>.sessions.create!(session_params)
+    if @<%= singular_table_name %>.save
+      session = @<%= singular_table_name %>.sessions.create!(session_params)
       cookies.signed.permanent[:session_token] = { value: session.id, httponly: true }
 
       redirect_to root_path, notice: "Welcome! You have signed up successfully"

data/lib/generators/authentication/templates/controllers/html/sessions_controller.rb.tt

@@ -15,8 +15,8 @@ class SessionsController < ApplicationController
     <%= singular_table_name %> = <%= class_name %>.find_by_email(params[:email])
 
     if <%= singular_table_name %> && <%= singular_table_name %>.authenticate(params[:password])
-      session = <%= singular_table_name %>.sessions.create!(session_params)
-      cookies.signed.permanent[:session_token] = { value: session.id, httponly: true }
+      @session = <%= singular_table_name %>.sessions.create!(session_params)
+      cookies.signed.permanent[:session_token] = { value: @session.id, httponly: true }
 
       redirect_to root_path, notice: "Signed in successfully"
     else

data/lib/generators/authentication/templates/erb/identity_mailer/password_reset_provision.html.erb.tt

@@ -1,6 +1,6 @@
 <p>Hey there,</p>
 
-<p>Can't remember your password for <strong><%%= @session.<%= singular_table_name %>.email %></strong>? That's OK, it happens. Just hit the link below to set a new one.</p>
+<p>Can't remember your password for <strong><%%= @<%= singular_table_name %>.email %></strong>? That's OK, it happens. Just hit the link below to set a new one.</p>
 
 <p><%%= link_to "Reset my password", edit_password_reset_url(token: @signed_id) %></p>
 

data/lib/generators/authentication/templates/erb/identity_mailer/password_reset_provision.text.erb.tt

@@ -1,6 +1,6 @@
 Hey there,
 
-Can't remember your password for <%%= @session.<%= singular_table_name %>.email %>? That's OK, it happens. Just hit the link below to set a new one.
+Can't remember your password for <%%= @<%= singular_table_name %>.email %>? That's OK, it happens. Just hit the link below to set a new one.
 
 [Reset my password]<%%= edit_password_reset_url(token: @signed_id) %>
 

data/lib/generators/authentication/templates/mailers/identity_mailer.rb.tt

@@ -1,14 +1,14 @@
 class IdentityMailer < ApplicationMailer
   def password_reset_provision
     @<%= singular_table_name %> = params[:<%= singular_table_name %>]
-    @signed_id = params[:<%= singular_table_name %>].signed_id(purpose: :password_reset, expires_in: 20.minutes)
+    @signed_id = @<%= singular_table_name %>.signed_id(purpose: :password_reset, expires_in: 20.minutes)
 
     mail to: @<%= singular_table_name %>.email, subject: "Reset your password"
   end
 
   def email_verify_confirmation
     @<%= singular_table_name %> = params[:<%= singular_table_name %>]
-    @signed_id = params[:<%= singular_table_name %>].signed_id(purpose: @<%= singular_table_name %>.email, expires_in: 20.minutes)
+    @signed_id = @<%= singular_table_name %>.signed_id(purpose: @<%= singular_table_name %>.email, expires_in: 3.days)
 
     mail to: @<%= singular_table_name %>.email, subject: "Verify your email"
   end

data/lib/generators/authentication/templates/migrations/create_sessions_migration.rb.tt

@@ -1,7 +1,7 @@
 class <%= migration_class_name %> < ActiveRecord::Migration[<%= ActiveRecord::Migration.current_version %>]
   def change
     create_table :sessions do |t|
-      t.references :user, null: false, foreign_key: true
+      t.references :<%= singular_table_name %>, null: false, foreign_key: true
 
       t.string :user_agent, null: false
       t.string :ip_address, null: false

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: authentication-zero
 version: !ruby/object:Gem::Version
-  version: 2.3.3
+  version: 2.3.6
 platform: ruby
 authors:
 - Nixon
 autorequire:
 bindir: bin
 cert_chain: []
-date: 2022-02-26 00:00:00.000000000 Z
+date: 2022-02-27 00:00:00.000000000 Z
 dependencies: []
 description:
 email: