RubyGems - clerk-sdk-ruby - Versions diffs - 4.0.0.beta3 → 4.0.0.beta5 - Mend

clerk-sdk-ruby 4.0.0.beta3 → 4.0.0.beta5

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.

Files changed (204) hide show

checksums.yaml +4 -4
data/.env.example +3 -0
data/.github/workflows/main.yml +24 -14
data/.gitignore +7 -1
data/.rspec +3 -0
data/.ruby-version +1 -0
data/CHANGELOG.md +22 -0
data/Gemfile +26 -3
data/Gemfile.lock +269 -13
data/Guardfile +14 -0
data/README.md +71 -11
data/Rakefile +50 -6
data/apps/rack/app.rb +67 -0
data/apps/rack/config.ru +17 -0
data/apps/rack/middleware/disable_paths.rb +13 -0
data/apps/rails-api/.dockerignore +41 -0
data/apps/rails-api/.gitattributes +9 -0
data/apps/rails-api/.gitignore +32 -0
data/apps/rails-api/.kamal/hooks/docker-setup.sample +3 -0
data/apps/rails-api/.kamal/hooks/post-deploy.sample +14 -0
data/apps/rails-api/.kamal/hooks/post-proxy-reboot.sample +3 -0
data/apps/rails-api/.kamal/hooks/pre-build.sample +51 -0
data/apps/rails-api/.kamal/hooks/pre-connect.sample +47 -0
data/apps/rails-api/.kamal/hooks/pre-deploy.sample +109 -0
data/apps/rails-api/.kamal/hooks/pre-proxy-reboot.sample +3 -0
data/apps/rails-api/.kamal/secrets +17 -0
data/apps/rails-api/.rubocop.yml +8 -0
data/apps/rails-api/.ruby-version +1 -0
data/apps/rails-api/Dockerfile +69 -0
data/apps/rails-api/Gemfile +54 -0
data/apps/rails-api/Gemfile.lock +374 -0
data/apps/rails-api/README.md +24 -0
data/apps/rails-api/Rakefile +6 -0
data/apps/rails-api/app/controllers/application_controller.rb +3 -0
data/apps/rails-api/app/controllers/home_controller.rb +5 -0
data/apps/rails-api/app/jobs/application_job.rb +7 -0
data/apps/rails-api/app/mailers/application_mailer.rb +4 -0
data/apps/rails-api/app/models/application_record.rb +3 -0
data/apps/rails-api/app/views/layouts/mailer.html.erb +13 -0
data/apps/rails-api/app/views/layouts/mailer.text.erb +1 -0
data/apps/rails-api/bin/brakeman +7 -0
data/apps/rails-api/bin/bundle +109 -0
data/apps/rails-api/bin/dev +2 -0
data/apps/rails-api/bin/docker-entrypoint +14 -0
data/apps/rails-api/bin/jobs +6 -0
data/apps/rails-api/bin/kamal +27 -0
data/apps/rails-api/bin/rails +4 -0
data/apps/rails-api/bin/rake +4 -0
data/apps/rails-api/bin/rubocop +8 -0
data/apps/rails-api/bin/setup +34 -0
data/apps/rails-api/bin/thrust +5 -0
data/apps/rails-api/config/application.rb +36 -0
data/apps/rails-api/config/boot.rb +4 -0
data/apps/rails-api/config/cable.yml +17 -0
data/apps/rails-api/config/cache.yml +16 -0
data/apps/rails-api/config/credentials.yml.enc +1 -0
data/apps/rails-api/config/database.yml +41 -0
data/apps/rails-api/config/deploy.yml +116 -0
data/apps/rails-api/config/environment.rb +5 -0
data/apps/rails-api/config/environments/development.rb +70 -0
data/apps/rails-api/config/environments/production.rb +88 -0
data/apps/rails-api/config/environments/test.rb +53 -0
data/apps/rails-api/config/initializers/cors.rb +16 -0
data/apps/rails-api/config/initializers/filter_parameter_logging.rb +8 -0
data/apps/rails-api/config/initializers/inflections.rb +16 -0
data/apps/rails-api/config/locales/en.yml +31 -0
data/apps/rails-api/config/puma.rb +41 -0
data/apps/rails-api/config/queue.yml +18 -0
data/apps/rails-api/config/recurring.yml +10 -0
data/apps/rails-api/config/routes.rb +10 -0
data/apps/rails-api/config/storage.yml +34 -0
data/apps/rails-api/config.ru +6 -0
data/apps/rails-api/db/cable_schema.rb +11 -0
data/apps/rails-api/db/cache_schema.rb +14 -0
data/apps/rails-api/db/queue_schema.rb +129 -0
data/apps/rails-api/db/seeds.rb +9 -0
data/apps/rails-api/public/robots.txt +1 -0
data/apps/rails-api/test/controllers/home_controller_test.rb +7 -0
data/apps/rails-api/test/test_helper.rb +15 -0
data/apps/rails-full/.dockerignore +47 -0
data/apps/rails-full/.gitattributes +9 -0
data/apps/rails-full/.gitignore +34 -0
data/apps/rails-full/.kamal/hooks/docker-setup.sample +3 -0
data/apps/rails-full/.kamal/hooks/post-deploy.sample +14 -0
data/apps/rails-full/.kamal/hooks/post-proxy-reboot.sample +3 -0
data/apps/rails-full/.kamal/hooks/pre-build.sample +51 -0
data/apps/rails-full/.kamal/hooks/pre-connect.sample +47 -0
data/apps/rails-full/.kamal/hooks/pre-deploy.sample +109 -0
data/apps/rails-full/.kamal/hooks/pre-proxy-reboot.sample +3 -0
data/apps/rails-full/.kamal/secrets +17 -0
data/apps/rails-full/.rubocop.yml +8 -0
data/apps/rails-full/.ruby-version +1 -0
data/apps/rails-full/Dockerfile +72 -0
data/apps/rails-full/Gemfile +70 -0
data/apps/rails-full/Gemfile.lock +429 -0
data/apps/rails-full/README.md +24 -0
data/apps/rails-full/Rakefile +6 -0
data/apps/rails-full/app/assets/stylesheets/application.css +10 -0
data/apps/rails-full/app/controllers/application_controller.rb +6 -0
data/apps/rails-full/app/controllers/home_controller.rb +11 -0
data/apps/rails-full/app/helpers/application_helper.rb +2 -0
data/apps/rails-full/app/helpers/home_helper.rb +2 -0
data/apps/rails-full/app/javascript/application.js +3 -0
data/apps/rails-full/app/javascript/controllers/application.js +9 -0
data/apps/rails-full/app/javascript/controllers/hello_controller.js +7 -0
data/apps/rails-full/app/javascript/controllers/index.js +4 -0
data/apps/rails-full/app/jobs/application_job.rb +7 -0
data/apps/rails-full/app/mailers/application_mailer.rb +4 -0
data/apps/rails-full/app/models/application_record.rb +3 -0
data/apps/rails-full/app/views/home/index.html.erb +7 -0
data/apps/rails-full/app/views/layouts/application.html.erb +60 -0
data/apps/rails-full/app/views/layouts/mailer.html.erb +13 -0
data/apps/rails-full/app/views/layouts/mailer.text.erb +1 -0
data/apps/rails-full/app/views/pwa/manifest.json.erb +22 -0
data/apps/rails-full/app/views/pwa/service-worker.js +26 -0
data/apps/rails-full/bin/brakeman +7 -0
data/apps/rails-full/bin/bundle +109 -0
data/apps/rails-full/bin/dev +2 -0
data/apps/rails-full/bin/docker-entrypoint +14 -0
data/apps/rails-full/bin/importmap +4 -0
data/apps/rails-full/bin/jobs +6 -0
data/apps/rails-full/bin/kamal +27 -0
data/apps/rails-full/bin/rails +4 -0
data/apps/rails-full/bin/rake +4 -0
data/apps/rails-full/bin/rubocop +8 -0
data/apps/rails-full/bin/setup +34 -0
data/apps/rails-full/bin/thrust +5 -0
data/apps/rails-full/config/application.rb +31 -0
data/apps/rails-full/config/boot.rb +4 -0
data/apps/rails-full/config/cable.yml +17 -0
data/apps/rails-full/config/cache.yml +16 -0
data/apps/rails-full/config/credentials.yml.enc +1 -0
data/apps/rails-full/config/database.yml +41 -0
data/apps/rails-full/config/deploy.yml +116 -0
data/apps/rails-full/config/environment.rb +5 -0
data/apps/rails-full/config/environments/development.rb +72 -0
data/apps/rails-full/config/environments/production.rb +91 -0
data/apps/rails-full/config/environments/test.rb +53 -0
data/apps/rails-full/config/importmap.rb +7 -0
data/apps/rails-full/config/initializers/assets.rb +7 -0
data/apps/rails-full/config/initializers/clerk.rb +4 -0
data/apps/rails-full/config/initializers/content_security_policy.rb +25 -0
data/apps/rails-full/config/initializers/filter_parameter_logging.rb +8 -0
data/apps/rails-full/config/initializers/inflections.rb +16 -0
data/apps/rails-full/config/locales/en.yml +31 -0
data/apps/rails-full/config/puma.rb +41 -0
data/apps/rails-full/config/queue.yml +18 -0
data/apps/rails-full/config/recurring.yml +10 -0
data/apps/rails-full/config/routes.rb +15 -0
data/apps/rails-full/config/storage.yml +34 -0
data/apps/rails-full/config.ru +6 -0
data/apps/rails-full/db/cable_schema.rb +11 -0
data/apps/rails-full/db/cache_schema.rb +14 -0
data/apps/rails-full/db/queue_schema.rb +129 -0
data/apps/rails-full/db/seeds.rb +9 -0
data/apps/rails-full/public/400.html +114 -0
data/apps/rails-full/public/404.html +114 -0
data/apps/rails-full/public/406-unsupported-browser.html +114 -0
data/apps/rails-full/public/422.html +114 -0
data/apps/rails-full/public/500.html +114 -0
data/apps/rails-full/public/icon.png +0 -0
data/apps/rails-full/public/icon.svg +3 -0
data/apps/rails-full/public/robots.txt +1 -0
data/apps/rails-full/test/application_system_test_case.rb +5 -0
data/apps/rails-full/test/controllers/home_controller_test.rb +7 -0
data/apps/rails-full/test/test_helper.rb +15 -0
data/apps/sinatra/app.rb +29 -0
data/apps/sinatra/config.ru +2 -0
data/apps/sinatra/views/index.erb +44 -0
data/clerk-sdk-ruby.gemspec +2 -1
data/lib/clerk/authenticatable.rb +14 -79
data/lib/clerk/authenticate_context.rb +164 -181
data/lib/clerk/authenticate_request.rb +238 -230
data/lib/clerk/configuration.rb +78 -0
data/lib/clerk/constants.rb +68 -46
data/lib/clerk/error.rb +17 -0
data/lib/clerk/jwks_cache.rb +27 -22
data/lib/clerk/proxy.rb +135 -0
data/lib/clerk/rack.rb +2 -0
data/lib/clerk/rack_middleware.rb +88 -73
data/lib/clerk/rails.rb +3 -0
data/lib/clerk/railtie.rb +7 -6
data/lib/clerk/sdk.rb +17 -156
data/lib/clerk/sinatra.rb +52 -0
data/lib/clerk/utils.rb +46 -6
data/lib/clerk/version.rb +1 -1
data/lib/clerk.rb +15 -51
metadata +187 -25
data/CODEOWNERS +0 -1
data/lib/clerk/errors.rb +0 -22
data/lib/clerk/rack_middleware_v2.rb +0 -167
data/lib/clerk/resources/allowlist.rb +0 -16
data/lib/clerk/resources/allowlist_identifiers.rb +0 -16
data/lib/clerk/resources/clients.rb +0 -23
data/lib/clerk/resources/email_addresses.rb +0 -17
data/lib/clerk/resources/emails.rb +0 -16
data/lib/clerk/resources/jwks.rb +0 -18
data/lib/clerk/resources/organizations.rb +0 -73
data/lib/clerk/resources/phone_numbers.rb +0 -17
data/lib/clerk/resources/plural_resource.rb +0 -38
data/lib/clerk/resources/sessions.rb +0 -26
data/lib/clerk/resources/singular_resource.rb +0 -14
data/lib/clerk/resources/users.rb +0 -37
data/lib/clerk/resources.rb +0 -10

data/apps/rack/app.rb ADDED Viewed

@@ -0,0 +1,67 @@
+require "erb"
+require "clerk"
+class App
+  def call(env)
+    # # Example: Without using `Clerk::Rack::Reverification` Middleware
+    # preset = Clerk::StepUp::Preset::LAX
+    # if env["clerk"].user_needs_reverification?(preset)
+    #   return env["clerk"].user_reverification_rack_response(preset)
+    # end
+    respond_with(200) do
+      user = env["clerk"].user
+      user ? "Authenticated User: #{user.first_name} (#{user.id})" : "Not Authenticated"
+    end
+  end
+  private
+  def respond_with(status, plain_body = nil, &html_body)
+    return [status, {"Content-Type" => "text/plain; charset=utf-8"}, [plain_body]] unless block_given?
+    compiled = <<-HTML
+      <html>
+        <head>
+          <title>Rack</title>
+          <style>
+            html { font-family: monospace; }
+            @media (prefers-color-scheme: dark) {
+              html {
+                color: #FFE6E6FF;
+                background-color: #201D1E;
+              }
+            }
+          </style>
+          <script
+            async
+            crossorigin="anonymous"
+            data-clerk-publishable-key="#{ENV["CLERK_PUBLISHABLE_KEY"]}"
+            src="#{ENV["CLERK_JS_URL"]}"
+            type="text/javascript"
+          ></script>
+          <script>
+            window.addEventListener('load', async function () {
+              await Clerk.load()
+              const container = document.getElementById('auth-container')
+              if (Clerk.user) {
+                container.innerHTML = `<div id="user-button"></div>`
+                Clerk.mountUserButton(document.getElementById('user-button'))
+              } else {
+                container.innerHTML = `<div id="sign-in"></div>`
+                Clerk.mountSignIn(document.getElementById('sign-in'))
+              }
+            })
+          </script>
+        </head>
+        <body>
+          <h1>Rack</h1>
+          <h2>#{yield}</h2>
+          <div id="auth-container"></div>
+        </body>
+      </html>
+    HTML
+    [status, {"Content-Type" => "text/html; charset=utf-8"}, [compiled]]
+  end
+end

data/apps/rack/config.ru ADDED Viewed

@@ -0,0 +1,17 @@
+require "active_support"
+require "rack"
+require "clerk/rack"
+require "dotenv"
+require_relative "app"
+require_relative "middleware/disable_paths"
+Dotenv.load(".env")
+use DisablePaths, paths: ["/favicon.ico"]
+use Clerk::Rack::Middleware
+use Clerk::Rack::Reverification,
+  preset: Clerk::StepUp::Preset::LAX,
+  routes: ["/*"]
+run App.new

data/apps/rack/middleware/disable_paths.rb ADDED Viewed

@@ -0,0 +1,13 @@
+class DisablePaths
+  def initialize(app, paths: [])
+    @app = app
+    @paths = {}
+    paths.each { |p| @paths[p] = true }
+  end
+  def call(env)
+    return [404, {}, []] if @paths[env["PATH_INFO"]]
+    @app.call(env)
+  end
+end

data/apps/rails-api/.dockerignore ADDED Viewed

@@ -0,0 +1,41 @@
+# See https://docs.docker.com/engine/reference/builder/#dockerignore-file for more about ignoring files.
+# Ignore git directory.
+/.git/
+/.gitignore
+# Ignore bundler config.
+/.bundle
+# Ignore all environment files.
+/.env*
+# Ignore all default key files.
+/config/master.key
+/config/credentials/*.key
+# Ignore all logfiles and tempfiles.
+/log/*
+/tmp/*
+!/log/.keep
+!/tmp/.keep
+# Ignore pidfiles, but keep the directory.
+/tmp/pids/*
+!/tmp/pids/.keep
+# Ignore storage (uploaded files in development and any SQLite databases).
+/storage/*
+!/storage/.keep
+/tmp/storage/*
+!/tmp/storage/.keep
+# Ignore CI service files.
+/.github
+# Ignore development files
+/.devcontainer
+# Ignore Docker-related files
+/.dockerignore
+/Dockerfile*

data/apps/rails-api/.gitattributes ADDED Viewed

@@ -0,0 +1,9 @@
+# See https://git-scm.com/docs/gitattributes for more about git attribute files.
+# Mark the database schema as having been generated.
+db/schema.rb linguist-generated
+# Mark any vendored files as having been vendored.
+vendor/* linguist-vendored
+config/credentials/*.yml.enc diff=rails_credentials
+config/credentials.yml.enc diff=rails_credentials

data/apps/rails-api/.gitignore ADDED Viewed

@@ -0,0 +1,32 @@
+# See https://help.github.com/articles/ignoring-files for more about ignoring files.
+#
+# Temporary files generated by your text editor or operating system
+# belong in git's global ignore instead:
+# `$XDG_CONFIG_HOME/git/ignore` or `~/.config/git/ignore`
+# Ignore bundler config.
+/.bundle
+# Ignore all environment files.
+/.env*
+# Ignore all logfiles and tempfiles.
+/log/*
+/tmp/*
+!/log/.keep
+!/tmp/.keep
+# Ignore pidfiles, but keep the directory.
+/tmp/pids/*
+!/tmp/pids/
+!/tmp/pids/.keep
+# Ignore storage (uploaded files in development and any SQLite databases).
+/storage/*
+!/storage/.keep
+/tmp/storage/*
+!/tmp/storage/
+!/tmp/storage/.keep
+# Ignore master key for decrypting credentials and more.
+/config/master.key

data/apps/rails-api/.kamal/hooks/docker-setup.sample ADDED Viewed

@@ -0,0 +1,3 @@
+#!/bin/sh
+echo "Docker set up on $KAMAL_HOSTS..."

data/apps/rails-api/.kamal/hooks/post-deploy.sample ADDED Viewed

@@ -0,0 +1,14 @@
+#!/bin/sh
+# A sample post-deploy hook
+#
+# These environment variables are available:
+# KAMAL_RECORDED_AT
+# KAMAL_PERFORMER
+# KAMAL_VERSION
+# KAMAL_HOSTS
+# KAMAL_ROLE (if set)
+# KAMAL_DESTINATION (if set)
+# KAMAL_RUNTIME
+echo "$KAMAL_PERFORMER deployed $KAMAL_VERSION to $KAMAL_DESTINATION in $KAMAL_RUNTIME seconds"

data/apps/rails-api/.kamal/hooks/post-proxy-reboot.sample ADDED Viewed

@@ -0,0 +1,3 @@
+#!/bin/sh
+echo "Rebooted kamal-proxy on $KAMAL_HOSTS"

data/apps/rails-api/.kamal/hooks/pre-build.sample ADDED Viewed

@@ -0,0 +1,51 @@
+#!/bin/sh
+# A sample pre-build hook
+#
+# Checks:
+# 1. We have a clean checkout
+# 2. A remote is configured
+# 3. The branch has been pushed to the remote
+# 4. The version we are deploying matches the remote
+#
+# These environment variables are available:
+# KAMAL_RECORDED_AT
+# KAMAL_PERFORMER
+# KAMAL_VERSION
+# KAMAL_HOSTS
+# KAMAL_ROLE (if set)
+# KAMAL_DESTINATION (if set)
+if [ -n "$(git status --porcelain)" ]; then
+  echo "Git checkout is not clean, aborting..." >&2
+  git status --porcelain >&2
+  exit 1
+fi
+first_remote=$(git remote)
+if [ -z "$first_remote" ]; then
+  echo "No git remote set, aborting..." >&2
+  exit 1
+fi
+current_branch=$(git branch --show-current)
+if [ -z "$current_branch" ]; then
+  echo "Not on a git branch, aborting..." >&2
+  exit 1
+fi
+remote_head=$(git ls-remote $first_remote --tags $current_branch | cut -f1)
+if [ -z "$remote_head" ]; then
+  echo "Branch not pushed to remote, aborting..." >&2
+  exit 1
+fi
+if [ "$KAMAL_VERSION" != "$remote_head" ]; then
+  echo "Version ($KAMAL_VERSION) does not match remote HEAD ($remote_head), aborting..." >&2
+  exit 1
+fi
+exit 0

data/apps/rails-api/.kamal/hooks/pre-connect.sample ADDED Viewed

@@ -0,0 +1,47 @@
+#!/usr/bin/env ruby
+# A sample pre-connect check
+#
+# Warms DNS before connecting to hosts in parallel
+#
+# These environment variables are available:
+# KAMAL_RECORDED_AT
+# KAMAL_PERFORMER
+# KAMAL_VERSION
+# KAMAL_HOSTS
+# KAMAL_ROLE (if set)
+# KAMAL_DESTINATION (if set)
+# KAMAL_RUNTIME
+hosts = ENV["KAMAL_HOSTS"].split(",")
+results = nil
+max = 3
+elapsed = Benchmark.realtime do
+  results = hosts.map do |host|
+    Thread.new do
+      tries = 1
+      begin
+        Socket.getaddrinfo(host, 0, Socket::AF_UNSPEC, Socket::SOCK_STREAM, nil, Socket::AI_CANONNAME)
+      rescue SocketError
+        if tries < max
+          puts "Retrying DNS warmup: #{host}"
+          tries += 1
+          sleep rand
+          retry
+        else
+          puts "DNS warmup failed: #{host}"
+          host
+        end
+      end
+      tries
+    end
+  end.map(&:value)
+end
+retries = results.sum - hosts.size
+nopes = results.count { |r| r == max }
+puts "Prewarmed %d DNS lookups in %.2f sec: %d retries, %d failures" % [ hosts.size, elapsed, retries, nopes ]

data/apps/rails-api/.kamal/hooks/pre-deploy.sample ADDED Viewed

@@ -0,0 +1,109 @@
+#!/usr/bin/env ruby
+# A sample pre-deploy hook
+#
+# Checks the Github status of the build, waiting for a pending build to complete for up to 720 seconds.
+#
+# Fails unless the combined status is "success"
+#
+# These environment variables are available:
+# KAMAL_RECORDED_AT
+# KAMAL_PERFORMER
+# KAMAL_VERSION
+# KAMAL_HOSTS
+# KAMAL_COMMAND
+# KAMAL_SUBCOMMAND
+# KAMAL_ROLE (if set)
+# KAMAL_DESTINATION (if set)
+# Only check the build status for production deployments
+if ENV["KAMAL_COMMAND"] == "rollback" || ENV["KAMAL_DESTINATION"] != "production"
+  exit 0
+end
+require "bundler/inline"
+# true = install gems so this is fast on repeat invocations
+gemfile(true, quiet: true) do
+  source "https://rubygems.org"
+  gem "octokit"
+  gem "faraday-retry"
+end
+MAX_ATTEMPTS = 72
+ATTEMPTS_GAP = 10
+def exit_with_error(message)
+  $stderr.puts message
+  exit 1
+end
+class GithubStatusChecks
+  attr_reader :remote_url, :git_sha, :github_client, :combined_status
+  def initialize
+    @remote_url = `git config --get remote.origin.url`.strip.delete_prefix("https://github.com/")
+    @git_sha = `git rev-parse HEAD`.strip
+    @github_client = Octokit::Client.new(access_token: ENV["GITHUB_TOKEN"])
+    refresh!
+  end
+  def refresh!
+    @combined_status = github_client.combined_status(remote_url, git_sha)
+  end
+  def state
+    combined_status[:state]
+  end
+  def first_status_url
+    first_status = combined_status[:statuses].find { |status| status[:state] == state }
+    first_status && first_status[:target_url]
+  end
+  def complete_count
+    combined_status[:statuses].count { |status| status[:state] != "pending"}
+  end
+  def total_count
+    combined_status[:statuses].count
+  end
+  def current_status
+    if total_count > 0
+      "Completed #{complete_count}/#{total_count} checks, see #{first_status_url} ..."
+    else
+      "Build not started..."
+    end
+  end
+end
+$stdout.sync = true
+puts "Checking build status..."
+attempts = 0
+checks = GithubStatusChecks.new
+begin
+  loop do
+    case checks.state
+    when "success"
+      puts "Checks passed, see #{checks.first_status_url}"
+      exit 0
+    when "failure"
+      exit_with_error "Checks failed, see #{checks.first_status_url}"
+    when "pending"
+      attempts += 1
+    end
+    exit_with_error "Checks are still pending, gave up after #{MAX_ATTEMPTS * ATTEMPTS_GAP} seconds" if attempts == MAX_ATTEMPTS
+    puts checks.current_status
+    sleep(ATTEMPTS_GAP)
+    checks.refresh!
+  end
+rescue Octokit::NotFound
+  exit_with_error "Build status could not be found"
+end

data/apps/rails-api/.kamal/hooks/pre-proxy-reboot.sample ADDED Viewed

@@ -0,0 +1,3 @@
+#!/bin/sh
+echo "Rebooting kamal-proxy on $KAMAL_HOSTS..."

data/apps/rails-api/.kamal/secrets ADDED Viewed

@@ -0,0 +1,17 @@
+# Secrets defined here are available for reference under registry/password, env/secret, builder/secrets,
+# and accessories/*/env/secret in config/deploy.yml. All secrets should be pulled from either
+# password manager, ENV, or a file. DO NOT ENTER RAW CREDENTIALS HERE! This file needs to be safe for git.
+# Example of extracting secrets from 1password (or another compatible pw manager)
+# SECRETS=$(kamal secrets fetch --adapter 1password --account your-account --from Vault/Item KAMAL_REGISTRY_PASSWORD RAILS_MASTER_KEY)
+# KAMAL_REGISTRY_PASSWORD=$(kamal secrets extract KAMAL_REGISTRY_PASSWORD ${SECRETS})
+# RAILS_MASTER_KEY=$(kamal secrets extract RAILS_MASTER_KEY ${SECRETS})
+# Use a GITHUB_TOKEN if private repositories are needed for the image
+# GITHUB_TOKEN=$(gh config get -h github.com oauth_token)
+# Grab the registry password from ENV
+KAMAL_REGISTRY_PASSWORD=$KAMAL_REGISTRY_PASSWORD
+# Improve security by using a password manager. Never check config/master.key into git!
+RAILS_MASTER_KEY=$(cat config/master.key)

data/apps/rails-api/.rubocop.yml ADDED Viewed

@@ -0,0 +1,8 @@
+# Omakase Ruby styling for Rails
+inherit_gem: { rubocop-rails-omakase: rubocop.yml }
+# Overwrite or add rules to create your own house style
+#
+# # Use `[a, [b, c]]` not `[ a, [ b, c ] ]`
+# Layout/SpaceInsideArrayLiteralBrackets:
+#   Enabled: false

data/apps/rails-api/.ruby-version ADDED Viewed

	@@ -0,0 +1 @@
1	+ 3.3.5

data/apps/rails-api/Dockerfile ADDED Viewed

@@ -0,0 +1,69 @@
+# syntax=docker/dockerfile:1
+# check=error=true
+# This Dockerfile is designed for production, not development. Use with Kamal or build'n'run by hand:
+# docker build -t rails_api .
+# docker run -d -p 80:80 -e RAILS_MASTER_KEY=<value from config/master.key> --name rails_api rails_api
+# For a containerized dev environment, see Dev Containers: https://guides.rubyonrails.org/getting_started_with_devcontainer.html
+# Make sure RUBY_VERSION matches the Ruby version in .ruby-version
+ARG RUBY_VERSION=3.3.5
+FROM docker.io/library/ruby:$RUBY_VERSION-slim AS base
+# Rails app lives here
+WORKDIR /rails
+# Install base packages
+RUN apt-get update -qq && \
+    apt-get install --no-install-recommends -y curl libjemalloc2 libvips sqlite3 && \
+    rm -rf /var/lib/apt/lists /var/cache/apt/archives
+# Set production environment
+ENV RAILS_ENV="production" \
+    BUNDLE_DEPLOYMENT="1" \
+    BUNDLE_PATH="/usr/local/bundle" \
+    BUNDLE_WITHOUT="development"
+# Throw-away build stage to reduce size of final image
+FROM base AS build
+# Install packages needed to build gems
+RUN apt-get update -qq && \
+    apt-get install --no-install-recommends -y build-essential git pkg-config && \
+    rm -rf /var/lib/apt/lists /var/cache/apt/archives
+# Install application gems
+COPY Gemfile Gemfile.lock ./
+RUN bundle install && \
+    rm -rf ~/.bundle/ "${BUNDLE_PATH}"/ruby/*/cache "${BUNDLE_PATH}"/ruby/*/bundler/gems/*/.git && \
+    bundle exec bootsnap precompile --gemfile
+# Copy application code
+COPY . .
+# Precompile bootsnap code for faster boot times
+RUN bundle exec bootsnap precompile app/ lib/
+# Final stage for app image
+FROM base
+# Copy built artifacts: gems, application
+COPY --from=build "${BUNDLE_PATH}" "${BUNDLE_PATH}"
+COPY --from=build /rails /rails
+# Run and own only the runtime files as a non-root user for security
+RUN groupadd --system --gid 1000 rails && \
+    useradd rails --uid 1000 --gid 1000 --create-home --shell /bin/bash && \
+    chown -R rails:rails db log storage tmp
+USER 1000:1000
+# Entrypoint prepares the database.
+ENTRYPOINT ["/rails/bin/docker-entrypoint"]
+# Start server via Thruster by default, this can be overwritten at runtime
+EXPOSE 80
+CMD ["./bin/thrust", "./bin/rails", "server"]

data/apps/rails-api/Gemfile ADDED Viewed

@@ -0,0 +1,54 @@
+source "https://rubygems.org"
+# Bundle edge Rails instead: gem "rails", github: "rails/rails", branch: "main"
+gem "rails", "~> 8.0.0"
+# Use sqlite3 as the database for Active Record
+gem "sqlite3", ">= 2.1"
+# Use the Puma web server [https://github.com/puma/puma]
+gem "puma", ">= 5.0"
+# Build JSON APIs with ease [https://github.com/rails/jbuilder]
+# gem "jbuilder"
+# Use Active Model has_secure_password [https://guides.rubyonrails.org/active_model_basics.html#securepassword]
+# gem "bcrypt", "~> 3.1.7"
+# Windows does not include zoneinfo files, so bundle the tzinfo-data gem
+gem "tzinfo-data", platforms: %i[windows jruby]
+# Use the database-backed adapters for Rails.cache, Active Job, and Action Cable
+gem "solid_cache"
+gem "solid_queue"
+gem "solid_cable"
+# Reduces boot times through caching; required in config/boot.rb
+gem "bootsnap", require: false
+# Deploy this application anywhere as a Docker container [https://kamal-deploy.org]
+gem "kamal", require: false
+# Add HTTP asset caching/compression and X-Sendfile acceleration to Puma [https://github.com/basecamp/thruster/]
+gem "thruster", require: false
+# Use Active Storage variants [https://guides.rubyonrails.org/active_storage_overview.html#transforming-images]
+# gem "image_processing", "~> 1.2"
+# Use Rack CORS for handling Cross-Origin Resource Sharing (CORS), making cross-origin Ajax possible
+# gem "rack-cors"
+path "../.." do
+  gem "clerk-sdk-ruby", require: "clerk"
+end
+group :development, :test do
+  # See https://guides.rubyonrails.org/debugging_rails_applications.html#debugging-with-the-debug-gem
+  gem "debug", platforms: %i[mri windows], require: "debug/prelude"
+  # Static analysis for security vulnerabilities [https://brakemanscanner.org/]
+  gem "brakeman", require: false
+  # Omakase Ruby styling [https://github.com/rails/rubocop-rails-omakase/]
+  gem "rubocop-rails-omakase", require: false
+end
+gem "dotenv-rails", "~> 3.1"