authify-api 0.4.1 → 0.4.2

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA1:
-  metadata.gz: 27ef09f0eac2be3b4726c08351dcffb65cfc8a4b
-  data.tar.gz: 19874f525600aec9655e219f8808c1346e336431
+  metadata.gz: 3127c5ad5b8138e5b9665ffc2065c39b9665dd35
+  data.tar.gz: 79080bb74c9cde1f41620080dec388b0890a9ec8
 SHA512:
-  metadata.gz: f685845d5e55982ae4a47d191be11558fbd950c2b75a917bd1f280e8f2e6496e409bebc4b59ae2dee8e39db37bf837f38073782479a93f3a76cf12ddfa286e7c
-  data.tar.gz: dbed51e9635435d3a4c7c05467a1de6865bcf6118c5e6e69dac0ab532177466d536bfebc62be48e1a00e45a13ac26e5f66fb5c9d623f2208a054a52fac7d0c7c
+  metadata.gz: ccdb294165b2ca5a997d6bedc66dadf78fd5e08c21c1e4bc4c7a2b1ef12bab7bc7385ebcf390f2dee00ab1f8a406511a551db834befc9b895cbe70322372508a
+  data.tar.gz: 02c2a745018fc38ace50d2ff046a5bd8b9003d80dc780b6cb0bfca69d7cc275b8898d17198fbb1e1f05fe8179d56212fc7303c74d85512c9d4b86a5f893c92ba

data/Dockerfile

@@ -9,6 +9,7 @@ ENV AUTHIFY_PRIVKEY_PATH=/ssl/private.pem
 ENV AUTHIFY_JWT_ISSUER="My Awesome Company Inc."
 ENV AUTHIFY_JWT_ALGORITHM="ES512"
 ENV AUTHIFY_JWT_EXPIRATION="15"
+ENV AUTHIFY_VERIFICATIONS_REQUIRED="true"
 
 RUN apk --no-cache upgrade \
     && apk --no-cache add \

data/README.md

@@ -145,6 +145,9 @@ The name of the [JWA](https://tools.ietf.org/html/draft-ietf-jose-json-web-algor
 **`AUTHIFY_JWT_EXPIRATION`**
 How long should a JWT be valid (in minutes). Defaults to 15. Too small of a value will mean a lot more requests to the API; too high increases the possibility of viable keys being captured.
 
+**`AUTHIFY_VERIFICATIONS_REQUIRED`**
+Allows disabling the requirement for email verifications for user signups. **NOT RECOMMENDED FOR PRODUCTION!** This should be used only if public signups are disabled (which is not yet implemented) or for integration testing. Simply set this environment variable to `'false'` (as a string) and Authify will not enforce verifications (making them optional).
+
 ## Usage and Authentication Workflow
 
 ### Generating an SSL Certificate

data/lib/authify/api.rb

@@ -24,6 +24,9 @@ module Authify
       redis: {
         host: ENV['AUTHIFY_REDIS_HOST'] || 'localhost',
         port: ENV['AUTHIFY_REDIS_PORT'] || '6379'
+      },
+      verifications: {
+        required: ENV['AUTHIFY_VERIFICATIONS_REQUIRED'] == 'false' ? false : true
       }
     )
   end

data/lib/authify/api/models/user.rb

@@ -83,12 +83,14 @@ module Authify
 
         def self.from_api_key(access, secret)
           key = APIKey.find_by_access_key(access)
-          key.user if key && key.compare_secret(secret) && key.user.verified?
+          verification_truthiness = (key.user.verified? || !CONFIG[:verifications][:required])
+          key.user if key && key.compare_secret(secret) && verification_truthiness
         end
 
         def self.from_email(email, password)
           found_user = Models::User.find_by_email(email)
-          found_user if found_user && found_user.authenticate(password) && found_user.verified?
+          verification_truthiness = (found_user.verified? || !CONFIG[:verifications][:required])
+          found_user if found_user && found_user.authenticate(password) && verification_truthiness
         end
 
         def self.from_identity(provider, uid)

data/lib/authify/api/services/registration.rb

@@ -74,7 +74,7 @@ module Authify
           update_current_user new_user
 
           response = { id: new_user.id, email: new_user.email }
-          if new_user.verified?
+          if new_user.verified? || !CONFIG[:verifications][:required]
             response[:verified] = true
             response[:jwt]      = jwt_token(user: new_user)
           else

data/lib/authify/api/version.rb

@@ -3,7 +3,7 @@ module Authify
     VERSION = [
       0, # Major
       4, # Minor
-      1  # Patch
+      2  # Patch
     ].join('.')
   end
 end

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: authify-api
 version: !ruby/object:Gem::Version
-  version: 0.4.1
+  version: 0.4.2
 platform: ruby
 authors:
 - Jonathan Gnagy
 autorequire: 
 bindir: exe
 cert_chain: []
-date: 2017-06-09 00:00:00.000000000 Z
+date: 2017-06-15 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: authify-core