avo 2.14.0 → 2.14.1.pre.1

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 58033ed16e041a89bae5bc13843079be1c9daa0f85004bf810645e24960e7526
-  data.tar.gz: d401c18ba4edb14825be275b68851c0b9e32e3ff2427a79a27b5bafb377f4d51
+  metadata.gz: ea5679545bee0eb42f3d8058ac6ff039c4ab7593d2e536157e49a5e13763b40c
+  data.tar.gz: 6b2304ad51c51065346b19256aae5f45f18b4890daf342eee2391e50608da703
 SHA512:
-  metadata.gz: 32d0cda8da582e3b3104a0f676c968d11ed28cd222b26014651fec4405bdd14b868c39685f257d473c4d41c2eab5e0c1923924df097e82cc8ace744150f46bab
-  data.tar.gz: 502abd413467a87d504ae3d82dffcee741fdc96a76a5458b8501826be5da494bf6e054af8a65d1a403a641e7475455a55acb1863e229ea6ad8a26037e255f731
+  metadata.gz: 8c6b3410b50b80ca1fd9bf50fe6411721cc2fe1e27bb300b6af49a12c2a3ae8bf846ceeff89f4865bb8669cb4c911b2bc92f252a6d76f3d72b49195c7aa0e0f2
+  data.tar.gz: 2ad1265017c4e2e0d20951779f4480aa51bf56ab5a7559ccc9cbe87bb85dad3d676855b4d0de51aa7d66074ac56cc5e37157a8d46f6cb6c95fbe208193444be3

data/Gemfile.lock

@@ -1,7 +1,7 @@
 PATH
   remote: .
   specs:
-    avo (2.14.0)
+    avo (2.14.1.pre.1)
       active_link_to
       addressable
       breadcrumbs_on_rails
@@ -256,6 +256,8 @@ GEM
     nokogiri (1.13.7)
       mini_portile2 (~> 2.8.0)
       racc (~> 1.4)
+    nokogiri (1.13.7-x86_64-linux)
+      racc (~> 1.4)
     orm_adapter (0.5.0)
     pagy (5.10.1)
       activesupport

data/config/master.key

@@ -0,0 +1 @@
+2aeb23d82b909d9c6b5abb62f7058c2a

data/lib/avo/services/encryption_service.rb

@@ -18,7 +18,7 @@ module Avo
       def initialize(message:, purpose:)
         @message = message
         @purpose = purpose
-        @crypt = ActiveSupport::MessageEncryptor.new(Rails.application.secrets.secret_key_base[0..31])
+        @crypt = ActiveSupport::MessageEncryptor.new(encryption_key)
       end
 
       def encrypt
@@ -28,6 +28,20 @@ module Avo
       def decrypt
         crypt.decrypt_and_verify(message, purpose: purpose)
       end
+
+      private
+
+      def encryption_key
+        secret_key_base[0..31]
+      rescue
+        # This will fail the decryption process.
+        # It's here only to keep Avo from crashing
+        SecureRandom.random_bytes(32)
+      end
+
+      def secret_key_base
+        Rails.application.secrets.secret_key_base || ENV['SECRET_KEY_BASE']
+      end
     end
   end
 end

data/lib/avo/version.rb

@@ -1,3 +1,3 @@
 module Avo
-  VERSION = "2.14.0" unless const_defined?(:VERSION)
+  VERSION = "2.14.1.pre.1" unless const_defined?(:VERSION)
 end

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: avo
 version: !ruby/object:Gem::Version
-  version: 2.14.0
+  version: 2.14.1.pre.1
 platform: ruby
 authors:
 - Adrian Marin
@@ -1748,6 +1748,7 @@ files:
 - config/cable.yml
 - config/credentials.yml.enc
 - config/initializers/pagy.rb
+- config/master.key
 - config/routes.rb
 - config/spring.rb
 - db/factories.rb
@@ -1973,9 +1974,9 @@ required_ruby_version: !ruby/object:Gem::Requirement
       version: 2.4.0
 required_rubygems_version: !ruby/object:Gem::Requirement
   requirements:
-  - - ">="
+  - - ">"
     - !ruby/object:Gem::Version
-      version: '0'
+      version: 1.3.1
 requirements: []
 rubygems_version: 3.3.3
 signing_key: