authentication-zero 3.0.0.alpha1 → 3.0.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: a1c102d5a72628c6d1ffbe5d5e7724b5e0ffdfe52259754d4f39c09bd900622a
-  data.tar.gz: 679af3cd9f3120b50a46abb4e460eac87612116f21bb182456c76de3010a8e5f
+  metadata.gz: 1a3d3b8586f1e31b0110ad4dab428c38798c8a014f3f305a128bd90b8f51efe0
+  data.tar.gz: 4064bc5928d671f0403c12537d4b65adbbc4940d0efa8e8cfbaffd709b7677e4
 SHA512:
-  metadata.gz: 778ea21bb5f23e80f16a773cd095146737eb646d5688fe238a4eb6604b234230c092ecf85af31c6e15dbddb3934d936a582307651a4e6737280fbaa03715247b
-  data.tar.gz: 9e42dcc5bd6ff6dbc4731326f3c25555e90c26c37e683e1666b0de862276615ef0235e4dc03991ce66e94a95460bcdaff315d0293dbd82eaf5eb04c8e5dbb48b
+  metadata.gz: e08062d6b3710305fa2e7ac251bf816761cfd80aa8a4d0662b03cef95f072bc6a2a60803d66150e7d34830fd54abf33d20073730e6818a4aaf009a421beb9971
+  data.tar.gz: c0388c5e3a9f2eb9628a4fd1bd031543f4dbd56072631d5da7312cd3fbc3b4bd9d0ba873037218c274cecb25522154ca4ad6ed40221def8e1607d4ed410984de

data/.github/workflows/CI.yml

@@ -18,10 +18,11 @@ jobs:
       - name: Install Ruby and gems
         uses: ruby/setup-ruby@v1
         with:
+          ruby-version: "3.2"
           bundler-cache: true
 
       - name: Install the latest Rails gem
-        run: gem install rails -v "~> 7.0.0"
+        run: gem install rails -v "7.1.0"
 
       - name: Install Rubocop
         run: gem install rubocop rubocop-performance rubocop-minitest rubocop-packaging rubocop-minitest rubocop-rails
@@ -31,7 +32,7 @@ jobs:
 
       - name: Create fresh Rails app and run generator
         run: |
-          rails new test-app --main
+          rails new test-app --skip-action-mailbox --skip-action-text --skip-active-storage
           cp .rubocop.yml test-app/.rubocop.yml
           cd test-app
           bundle add authentication-zero --path ..
@@ -61,10 +62,11 @@ jobs:
       - name: Install Ruby and gems
         uses: ruby/setup-ruby@v1
         with:
+          ruby-version: "3.2"
           bundler-cache: true
 
       - name: Install the latest Rails gem
-        run: gem install rails -v "~> 7.0.0"
+        run: gem install rails -v "7.1.0"
 
       - name: Install Rubocop
         run: gem install rubocop rubocop-performance rubocop-minitest rubocop-packaging rubocop-minitest rubocop-rails
@@ -74,7 +76,7 @@ jobs:
 
       - name: Create fresh Rails app and run generator
         run: |
-          rails new test-app --main
+          rails new test-app --skip-action-mailbox --skip-action-text --skip-active-storage
           cp .rubocop.yml test-app/.rubocop.yml
           cd test-app
           bundle add authentication-zero --path ..

data/.rubocop.yml

@@ -4,5 +4,13 @@ Style/HashSyntax:
   Exclude:
     - Gemfile
 
+Layout/EmptyLinesAroundBlockBody:
+  Exclude:
+    - Gemfile
+
+Layout/TrailingWhitespace:
+  Exclude:
+    - config/initializers/filter_parameter_logging.rb
+
 Style/FrozenStringLiteralComment:
   Enabled: false

data/Gemfile.lock

@@ -1,7 +1,7 @@
 PATH
   remote: .
   specs:
-    authentication-zero (3.0.0.alpha1)
+    authentication-zero (3.0.0)
 
 GEM
   remote: https://rubygems.org/

data/README.md

@@ -5,7 +5,13 @@ The purpose of authentication zero is to generate a pre-built authentication sys
 ## Installation
 
 ```
-$ bundle add authentication-zero --version=3.0.0.alpha1
+$ bundle add authentication-zero
+```
+
+If you are using Rails < 7.1, you must use version 2.
+
+```
+$ bundle add authentication-zero --version "~> 2"
 ```
 
 ## Usage
@@ -51,6 +57,8 @@ Since Authentication Zero generates this code into your application instead of b
 ## Generated code
 
 - [has_secure_password](https://api.rubyonrails.org/classes/ActiveModel/SecurePassword/ClassMethods.html#method-i-has_secure_password): Adds methods to set and authenticate against a bcrypt password.
+- [authenticate_by](https://edgeapi.rubyonrails.org/classes/ActiveRecord/SecurePassword/ClassMethods.html#method-i-authenticate_by): Given a set of attributes, finds a record using the non-password attributes, and then authenticates that record using the password attributes.
+- [generates_token_for](https://edgeapi.rubyonrails.org/classes/ActiveRecord/TokenFor/ClassMethods.html#method-i-generates_token_for): Defines the behavior of tokens generated for a specific purpose.
 - [signed cookies](https://api.rubyonrails.org/classes/ActionDispatch/Cookies.html): Returns a jar that'll automatically generate a signed representation of cookie value and verify it when reading from the cookie again.
 - [httponly cookies](https://api.rubyonrails.org/classes/ActionDispatch/Cookies.html): A cookie with the httponly attribute is inaccessible to the JavaScript, this precaution helps mitigate cross-site scripting (XSS) attacks.
 - [signed_id](https://api.rubyonrails.org/classes/ActiveRecord/SignedId.html): Returns a signed id that is tamper proof, so it's safe to send in an email or otherwise share with the outside world.

data/lib/authentication_zero/version.rb

@@ -1,3 +1,3 @@
 module AuthenticationZero
-  VERSION = "3.0.0.alpha1"
+  VERSION = "3.0.0"
 end

data/lib/generators/authentication/templates/lib/account_middleware.rb

@@ -6,13 +6,11 @@ class AccountMiddleware
   def call(env)
     request = ActionDispatch::Request.new(env)
 
-    _, account_id, request_path = request.path.split("/", 3)
-
-    if account_id !~ /\D/
+    if m = /\A(\/(\d{1,}))/.match(request.path_info)
+      script_name, account_id, path_info = [m[1], m[2], m.post_match]
+      request.script_name = script_name
+      request.path_info   = path_info.presence || "/"
       set_current_account(account_id)
-
-      request.script_name = "/#{account_id}"
-      request.path_info   = "/#{request_path}"
       @app.call(request.env)
     else
       @app.call(request.env)

data/lib/generators/authentication/templates/models/user.rb.tt

@@ -3,7 +3,6 @@ class User < ApplicationRecord
 
   generates_token_for :email_verification, expires_in: 2.days { email }
   generates_token_for :password_reset, expires_in: 20.minutes { password_salt.last(10) }
-
   <%- if options.tenantable? %>
   belongs_to :account
   <%- end -%>

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: authentication-zero
 version: !ruby/object:Gem::Version
-  version: 3.0.0.alpha1
+  version: 3.0.0
 platform: ruby
 authors:
 - Nixon
 autorequire:
 bindir: bin
 cert_chain: []
-date: 2023-07-19 00:00:00.000000000 Z
+date: 2023-10-05 00:00:00.000000000 Z
 dependencies: []
 description:
 email:
@@ -152,11 +152,11 @@ required_ruby_version: !ruby/object:Gem::Requirement
       version: '0'
 required_rubygems_version: !ruby/object:Gem::Requirement
   requirements:
-  - - ">"
+  - - ">="
     - !ruby/object:Gem::Version
-      version: 1.3.1
+      version: '0'
 requirements: []
-rubygems_version: 3.4.10
+rubygems_version: 3.4.19
 signing_key:
 specification_version: 4
 summary: An authentication system generator for Rails applications