booth 0.0.4 → 0.0.5

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: edffbca58e6e40fa8b572564a2fdefd1243becc6bc64247765adae3c2bc4cfe0
-  data.tar.gz: 9ca0edd3a0fd70873623f5cb7f109bab2082f4c3fd5546056dfdd4d0d29b54e1
+  metadata.gz: 264066475702a46d7d19919ea95013455262385bcdc0ff8035615dcfd70d9e70
+  data.tar.gz: 329fbfa42ec1aea4901db11db6cec1ddaaf09365a324fff312b0470f3bf6e366
 SHA512:
-  metadata.gz: cb38a8a59631b6590de981e724c3dce086f15f70e6d579b4948a5b8051af01b85321c58d8a92a9e7742da39f75f32c3c3e424d6e55c9ffd2b470411864fa7b8b
-  data.tar.gz: 8d2e7119be3efe18a9ff5ef840d75e332220f33ec876f1ef46b87a7ccebca508b39e35443d873f4283ee62d0725840d391ef1ee3011dba22ec4152fdb9b113f5
+  metadata.gz: 54191963f2bbe26f3483067e96a506c4d2ac0061134dba817379c3adcbfd5b7a0b4888c767f514305188335b8320bd938e951c46879b866fe18d56881aee0ed7
+  data.tar.gz: 709bd0a9a61668f8a20182de852475b0d080d8d7795cc3e4baf3f246d6fa2740164f2328862f094d2e6620a8e0d9c81b2cd94f69758c9b359700e530cb2e53c2

data/CHANGELOG.md

@@ -1,4 +1,10 @@
 # main
+
+# 0.0.5
+
+- Fix playwright dependencies
+- Add webauth sudo tests
+
 # 0.0.4
 
 - Expose Credential domain in Passport

data/lib/booth/request.rb

@@ -50,6 +50,21 @@ module Booth
       ::Booth::Syntaxes::Domain.call(request.host).valid_domain
     end
 
+    # The webauthn gem compares the browser's origin against `allowed_origins` character-by-character.
+    # Hardcoding `"http://#{host}:#{port}"` caused `WebAuthn::OriginVerificationError` in production.
+    # The browser sends `https://example.com` (no port) when the port is the scheme default.
+    # The browser sends `http://localhost:3000` (with port) when the port is not the scheme default.
+    # This method builds the origin string to match exactly what the browser sends.
+    def origin
+      standard_port = request.scheme == 'https' ? 443 : 80
+
+      if port == standard_port
+        "#{request.scheme}://#{host}"
+      else
+        "#{request.scheme}://#{host}:#{port}"
+      end
+    end
+
     def agent
       ::Booth::Requests::Agent.call(request:)
     end

data/lib/booth/testing/userland/sudo_webauth.rb

@@ -0,0 +1,34 @@
+# frozen_string_literal: true
+
+module Booth
+  module Testing
+    module Userland
+      class SudoWebauth < ::Booth::Testing::IncorporationTestCase
+        def call
+          before_test&.call
+
+          create_and_onboard(username: 'alice')
+          virtual_authenticators.create
+          register_new_passkey(username: 'alice')
+
+          # Visit webauths index with fresh sudo
+          visit_namespaced controller: :webauths, action: :index
+          assert_userland_view controller: :webauths, step: :index
+
+          # Time travel to expire sudo (default interaction_timeout is 20 minutes)
+          travel 21.minutes
+
+          # Visit webauths index again - should require sudo
+          visit_namespaced controller: :webauths, action: :index
+          assert_userland_view controller: :webauths, step: :sudo
+
+          # Re-authenticate with hardware key to restore sudo
+          click_on :authenticate
+
+          # After successful sudo, user sees the index again
+          assert_userland_view controller: :webauths, step: :index
+        end
+      end
+    end
+  end
+end

data/lib/booth/testing/userland.rb

@@ -12,6 +12,7 @@ require_relative 'userland/registration_without_passkey'
 require_relative 'userland/sessions_manage_behavior'
 require_relative 'userland/sessions_revoke_all_others'
 require_relative 'userland/sessions_revoke_one'
+require_relative 'userland/sudo_webauth'
 
 module Booth
   module Testing
@@ -24,6 +25,7 @@ module Booth
         ::Booth::Testing::Userland::LoginRemotely,
         ::Booth::Testing::Userland::SessionsRevokeOne,
         ::Booth::Testing::Userland::SessionsRevokeAllOthers,
+        ::Booth::Testing::Userland::SudoWebauth,
       ].freeze
 
       def self.scenarios

data/lib/booth/version.rb

@@ -1,5 +1,5 @@
 # frozen_string_literal: true
 
 module Booth
-  VERSION = '0.0.4'
+  VERSION = '0.0.5'
 end

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: booth
 version: !ruby/object:Gem::Version
-  version: 0.0.4
+  version: 0.0.5
 platform: ruby
 authors:
 - halo
@@ -345,6 +345,7 @@ files:
 - lib/booth/testing/userland/sessions_manage_behavior.rb
 - lib/booth/testing/userland/sessions_revoke_all_others.rb
 - lib/booth/testing/userland/sessions_revoke_one.rb
+- lib/booth/testing/userland/sudo_webauth.rb
 - lib/booth/to_struct.rb
 - lib/booth/userland.rb
 - lib/booth/userland/extract_flash_messages.rb
@@ -413,7 +414,7 @@ required_rubygems_version: !ruby/object:Gem::Requirement
     - !ruby/object:Gem::Version
       version: '0'
 requirements: []
-rubygems_version: 4.0.1
+rubygems_version: 3.6.9
 specification_version: 4
 summary: Opinionated authentication framework for Rails
 test_files: []