avo 2.14.0 → 2.14.2.pre.1

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 58033ed16e041a89bae5bc13843079be1c9daa0f85004bf810645e24960e7526
-  data.tar.gz: d401c18ba4edb14825be275b68851c0b9e32e3ff2427a79a27b5bafb377f4d51
+  metadata.gz: 4b2dd6f882eac9d9271bbb4824fb9fb71bad9c77c7fa1e71df410cb9b4aeb54f
+  data.tar.gz: 32a04dae63c3694152bcc9b531d4d323e135b2440becd4a33f721ad9f351b1c5
 SHA512:
-  metadata.gz: 32d0cda8da582e3b3104a0f676c968d11ed28cd222b26014651fec4405bdd14b868c39685f257d473c4d41c2eab5e0c1923924df097e82cc8ace744150f46bab
-  data.tar.gz: 502abd413467a87d504ae3d82dffcee741fdc96a76a5458b8501826be5da494bf6e054af8a65d1a403a641e7475455a55acb1863e229ea6ad8a26037e255f731
+  metadata.gz: 5cee10bf690be47c5151cf6d00d1ddff9c32c0f3306be7b99962477e1d61c731dca473bcca93cce2eeea9a7ee4b0fe27ba160fe45548ae7042b900b0a9711f3f
+  data.tar.gz: 12267b7e20da3cd91c971e4b86d7ee872cb584eee965b9e8c7c92bc3235a42b17a0ea75b25d30abd694647548341300a1342bb383b800cb6dca9b3e7134e2c26

data/Gemfile.lock

@@ -1,7 +1,7 @@
 PATH
   remote: .
   specs:
-    avo (2.14.0)
+    avo (2.14.2.pre.1)
       active_link_to
       addressable
       breadcrumbs_on_rails
@@ -256,6 +256,8 @@ GEM
     nokogiri (1.13.7)
       mini_portile2 (~> 2.8.0)
       racc (~> 1.4)
+    nokogiri (1.13.7-x86_64-linux)
+      racc (~> 1.4)
     orm_adapter (0.5.0)
     pagy (5.10.1)
       activesupport

data/app/components/avo/fields/common/single_file_viewer_component.html.erb

@@ -21,7 +21,7 @@
     <div class="flex space-x-2">
       <div class="flex">
         <% if @resource.authorization.authorize_action(:download_attachments?, raise_exception: false) %>
-          <%= a_link file.url(disposition: :attachment),
+          <%= a_link Rails.application.routes.url_helpers.rails_blob_path(file, only_path: true, disposition: :attachment),
             icon: 'heroicons/outline/download',
             color: :primary,
             download: true,

data/config/master.key

@@ -0,0 +1 @@
+2aeb23d82b909d9c6b5abb62f7058c2a

data/lib/avo/services/encryption_service.rb

@@ -18,7 +18,7 @@ module Avo
       def initialize(message:, purpose:)
         @message = message
         @purpose = purpose
-        @crypt = ActiveSupport::MessageEncryptor.new(Rails.application.secrets.secret_key_base[0..31])
+        @crypt = ActiveSupport::MessageEncryptor.new(encryption_key)
       end
 
       def encrypt
@@ -28,6 +28,20 @@ module Avo
       def decrypt
         crypt.decrypt_and_verify(message, purpose: purpose)
       end
+
+      private
+
+      def encryption_key
+        secret_key_base[0..31]
+      rescue
+        # This will fail the decryption process.
+        # It's here only to keep Avo from crashing
+        SecureRandom.random_bytes(32)
+      end
+
+      def secret_key_base
+        Rails.application.secrets.secret_key_base || ENV['SECRET_KEY_BASE']
+      end
     end
   end
 end

data/lib/avo/version.rb

@@ -1,3 +1,3 @@
 module Avo
-  VERSION = "2.14.0" unless const_defined?(:VERSION)
+  VERSION = "2.14.2.pre.1" unless const_defined?(:VERSION)
 end

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: avo
 version: !ruby/object:Gem::Version
-  version: 2.14.0
+  version: 2.14.2.pre.1
 platform: ruby
 authors:
 - Adrian Marin
@@ -1748,6 +1748,7 @@ files:
 - config/cable.yml
 - config/credentials.yml.enc
 - config/initializers/pagy.rb
+- config/master.key
 - config/routes.rb
 - config/spring.rb
 - db/factories.rb
@@ -1973,9 +1974,9 @@ required_ruby_version: !ruby/object:Gem::Requirement
       version: 2.4.0
 required_rubygems_version: !ruby/object:Gem::Requirement
   requirements:
-  - - ">="
+  - - ">"
     - !ruby/object:Gem::Version
-      version: '0'
+      version: 1.3.1
 requirements: []
 rubygems_version: 3.3.3
 signing_key: