capcoauth 0.6.3 → 0.7.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: b90a20b86a9c6be726eaead5e05718e42010926d2c669d5b5d5bed4c5be71c09
-  data.tar.gz: fbd13ea0046b2f11303a23a6011160686a11811273d98fc94cf20ba4ac1c237d
+  metadata.gz: ccb50d6f80819e2df683c0e6a4fa2a804f07dfb2efbcd4e243e4676fc623a34c
+  data.tar.gz: 657b59b5775e7e564a1f9a8d66c581d4e7861479d35a053b5c177d4c7a2dd5f3
 SHA512:
-  metadata.gz: 8f3d938fb7d9111e1d2b7e1950776fd15bef9c0b81c7186d570cd6835c6218a53db09bba6ec7f3222dde100844846da9ca623f813a71bd453e775d392158a695
-  data.tar.gz: b602d5bf798bf5b925432a46b58eb8a63953c656454972bb1fa8e4b315b4edcf4876b972cfc73932f6ea99ae27784f0faf4b880fa08631ac5d86915c76fb5806
+  metadata.gz: f7b8b2cfb9c5ce59c62d6df7be497bc9f2df438cc92b38fd8a2c3af36a7f931dc142a5ed8e9ae853d86fef11b64eb2a3920a5b6b3778a36333dfae466d9bda76
+  data.tar.gz: acab18d6e4f65d747f70660d98f3f0c976fb196f445ebd1fc3d02520c740c987a5319b5dfda6c24826cda11e754980195f4bf89fd5c7ff118413ef07f909e992

data/app/controllers/capcoauth/application_controller.rb

@@ -14,5 +14,15 @@ module Capcoauth
     def oauth_callback_url
       "#{root_url}auth/callback"
     end
+
+    protected
+
+    def rotate_session_id
+      session_data = session.to_h
+      reset_session
+      session_data.each do |k, v|
+        session[k] = v
+      end
+    end
   end
 end

data/app/controllers/capcoauth/callback_controller.rb

@@ -23,6 +23,7 @@ module Capcoauth
         @access_token = OAuth::AccessToken.new(response.parsed_response['access_token']).verify
 
         if @access_token
+          rotate_session_id
           session[:capcoauth_access_token] = @access_token.token
           session[:capcoauth_user_id] = @access_token.user_id
           redirect_to session[:previous_url].blank? ? root_url : session.delete(:previous_url)

data/app/controllers/capcoauth/logout_controller.rb

@@ -1,8 +1,8 @@
 module Capcoauth
   class LogoutController < Capcoauth::ApplicationController
     def show
-      session.delete(:capcoauth_user_id)
-      token = session.delete(:capcoauth_access_token)
+      token = session[:capcoauth_access_token]
+      session.destroy
       OAuth::TTLCache.remove(token) if token.present?
       redirect_to root_url, notice: 'You have been logged out'
     end

data/lib/capcoauth/version.rb

@@ -5,8 +5,8 @@ module Capcoauth
 
   module VERSION
     MAJOR = 0
-    MINOR = 6
-    PATCH  = 3
+    MINOR = 7
+    PATCH  = 0
 
     STRING = [MAJOR, MINOR, PATCH].compact.join(".")
   end

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: capcoauth
 version: !ruby/object:Gem::Version
-  version: 0.6.3
+  version: 0.7.0
 platform: ruby
 authors:
 - Adam Robertson
 autorequire:
 bindir: bin
 cert_chain: []
-date: 2021-06-01 00:00:00.000000000 Z
+date: 2021-06-29 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: railties