authie 1.1.2 → 1.2.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA1:
-  metadata.gz: 9fceaec2d8448646db6476f337b746959dff91f5
-  data.tar.gz: a79f47205b8f41732d97945e9ed269a6bd30454c
+  metadata.gz: 0ea78ebd3e2b407c987201b3bc6ad66357c6658c
+  data.tar.gz: a4c4929103666a5b2b9c4db3341473374d7d9673
 SHA512:
-  metadata.gz: b8feb419ef17ff72794cb74be0a5dcee8915cbcb80413dbe7b2745d6afce4e19bec02f583be3489f43e544d94c2325e0606aac332e3847b983a3f6f4e7cf24e6
-  data.tar.gz: 98eed592ad7a9f140198c3dfd1f178de77bc330ebb4fbc170869dea97a7bb734a72f555435f93a180e56e46db74403e4fbecaa062192b445e38ab42eb675fb9f
+  metadata.gz: 2e9df9e143a97a0ff29234c32482bb9fe3b02d581233d0f89acce4e71c552ea46dd20e1de3f0e8e40df8496220cd2b3af81cf64a0211b243c8a1dacf4bf976b6
+  data.tar.gz: 6580ee0efb43f130eee21cfb65a20b994039e75fefcefad41881ca3f3c473e6c8512e7d8447d24d8d20cd718ab5da6054c75219423afcc22ba9b3299cefa4744

data/db/migrate/20150305135400_add_two_factor_auth_fields_to_authie.rb

@@ -0,0 +1,8 @@
+class AddTwoFactorAuthFieldsToAuthie < ActiveRecord::Migration
+  def change
+    add_column :authie_sessions, :two_factored_at, :datetime
+    add_column :authie_sessions, :two_factored_ip, :string
+    add_column :authie_sessions, :requests, :integer, :default => 0
+    add_column :authie_sessions, :password_seen_at, :datetime
+  end
+end

data/lib/authie/config.rb

@@ -11,6 +11,11 @@ module Authie
     end
     attr_writer :persistent_session_length
 
+    def sudo_session_timeout
+      @sudo_session_timeout || 10.minutes
+    end
+    attr_writer :sudo_session_timeout
+
   end
 
   def self.config

data/lib/authie/session.rb

@@ -5,6 +5,7 @@ module Authie
     class InactiveSession < Error; end
     class ExpiredSession < Error; end
     class BrowserMismatch < Error; end
+    class NoParentSessionForRevert < Error; end
 
     # Set table name
     self.table_name = "authie_sessions"
@@ -40,6 +41,7 @@ module Authie
       self.last_activity_at = Time.now
       self.last_activity_ip = controller.request.ip
       self.last_activity_path = controller.request.path
+      self.requests += 1
       self.save!
     end
 
@@ -118,6 +120,54 @@ module Authie
       (self.data ||= {})[key.to_s]
     end
 
+    # Invalidate all sessions but this one for this user
+    def invalidate_others!
+      self.class.where.not(:id => self.id).where(:user => self.user).each do |s|
+        s.invalidate!
+      end
+    end
+
+    # Note that we have just seen the user enter their password.
+    def see_password!
+      self.password_seen_at = Time.now
+      self.save!
+    end
+
+    # Have we seen the user's password recently in this sesion?
+    def recently_seen_password?
+      !!(self.password_seen_at && self.password_seen_at >= Authie.config.sudo_session_timeout.ago)
+    end
+
+    # Is two factor authentication required for this request?
+    def two_factored?
+      !!(two_factored_at || self.parent_id)
+    end
+
+    # Mark this request as two factor authoritsed
+    def mark_as_two_factored!
+      self.two_factored_at = Time.now
+      self.two_factored_ip = controller.request.ip
+      self.save!
+    end
+
+    # Create a new session for impersonating for the given user
+    def impersonate!(user)
+      self.class.start(controller, :user => user, :parent => self)
+    end
+
+    # Revert back to the parent session
+    def revert_to_parent!
+      if self.parent
+        self.invalidate!
+        self.parent.activate!
+        self.parent.controller = self.controller
+        self.parent.set_cookie!
+        self.parent
+      else
+        raise NoParentSessionForRevert, "Session does not have a parent therefore cannot be reverted."
+      end
+    end
+
     # Find a session from the database for the given controller instance.
     # Returns a session object or :none if no session is found.
     def self.get_session(controller)

data/lib/authie/version.rb

@@ -1,3 +1,3 @@
 module Authie
-  VERSION = '1.1.2'
+  VERSION = '1.2.0'
 end

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: authie
 version: !ruby/object:Gem::Version
-  version: 1.1.2
+  version: 1.2.0
 platform: ruby
 authors:
 - Adam Cooke
 autorequire: 
 bindir: bin
 cert_chain: []
-date: 2015-03-04 00:00:00.000000000 Z
+date: 2015-03-05 00:00:00.000000000 Z
 dependencies: []
 description: A Rails library for storing user sessions in a backend database
 email:
@@ -20,6 +20,7 @@ files:
 - db/migrate/20141012174250_create_authie_sessions.rb
 - db/migrate/20141013115205_add_indexes_to_authie_sessions.rb
 - db/migrate/20150109144120_add_parent_id_to_authie_sessions.rb
+- db/migrate/20150305135400_add_two_factor_auth_fields_to_authie.rb
 - lib/authie.rb
 - lib/authie/config.rb
 - lib/authie/controller_delegate.rb