clowk 0.1.0 → 0.3.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 56e3503c335ec716e89e49428b66a0c4157be9cb6ff19c46095117062f4c7848
-  data.tar.gz: 1db10f568e025bc52ea97e255f9e4cdc8064507ace6adf83e74d78d20d5b5d9e
+  metadata.gz: f3298d33abdf85d08387832031c8bbdb6efa36785b73c59ece84a3dec4deb064
+  data.tar.gz: b533eb6930465ea11188d0f2f8e23758575f113972d9aea81d5bdcb87a21af32
 SHA512:
-  metadata.gz: 3ed1c6bb69c0644f5476374f8004ce865c1661aeec3729b42a59442ee453e6e431c23583d603ccf49b9e045ae2c0d7e9733f2482a040ef3418c069e6f88ef531
-  data.tar.gz: 393ed6db1f3777cc402731fe16e0874d64c842ab3b5118aa49c9a79e5b208f38a660b4bbcca45ee349eccf1f1be030ac35ff6e235310edbc9e14d57cd730a24b
+  metadata.gz: 486ff44e3a9e781cad6c87584d40079ca43724c113432a76513078525b8df9a8d64a82c593a4be9bb7db87dc9c3bce7a6ec611c14fbefe2d7074904d8901b758
+  data.tar.gz: e06afce3a59cbb24d8c388837b51582c30d2597dec2e9e08337343040ca9cbe1041b2442c573436faa2c958adf3bd6b15ac3170d82447189ae235386a16a5fd6

data/lib/clowk/authenticable.rb

@@ -12,6 +12,8 @@ module Clowk
       authenticate_method = :"authenticate_#{scope}!"
       signed_in_method = :"#{scope}_signed_in?"
 
+      enforce_session_method = :"#{scope}_enforce_session!"
+
       base.class_eval do
         define_method(current_method) do
           clowk_current_resource
@@ -25,6 +27,10 @@ module Clowk
           clowk_current_resource.present?
         end
 
+        define_method(enforce_session_method) do
+          clowk_enforce_session!
+        end
+
         helper_method current_method, authenticate_method, signed_in_method, :current_token if respond_to?(:helper_method)
       end
     end
@@ -48,6 +54,33 @@ module Clowk
       clowk_current_resource.present?
     end
 
+    def clowk_session_status
+      @clowk_session_status ||= resolve_session_status
+    end
+
+    def clowk_session_active?
+      clowk_session_status&.dig(:status) == 'active'
+    end
+
+    def clowk_enforce_session!
+      return if clowk_session_active?
+
+      session_info = clowk_session_status
+      callback = Clowk.config.on_session_expired
+
+      if callback.respond_to?(:call)
+        callback.call(self, session_info)
+
+        return
+      end
+
+      if request.format.json?
+        render json: { error: 'Session expired or inactive' }, status: :unauthorized
+      else
+        redirect_to clowk_sign_in_path(return_to: request.fullpath)
+      end
+    end
+
     def clowk_authenticate!
       return clowk_current_resource if clowk_signed_in?
 
@@ -96,7 +129,7 @@ module Clowk
 
     def persist_clowk_session(token, payload)
       session[Clowk.config.session_key] = {
-        token: token,
+        token:,
         user: payload,
         signed_in_at: Time.now.to_i
       }
@@ -108,5 +141,24 @@ module Clowk
         secure: request.ssl?
       }
     end
+
+    def resolve_session_status
+      cached = stored_session&.dig('session_status') || stored_session&.dig(:session_status)
+
+      return cached&.deep_symbolize_keys if cached
+
+      resource = clowk_current_resource
+
+      return unless resource&.session_id
+      return unless Clowk.config.secret_key.present?
+
+      client = Clowk::SDK::Client.new(secret_key: Clowk.config.secret_key)
+      result = client.tokens.verify_with_session(token: current_token)
+      status = result&.dig(:session)
+
+      session[Clowk.config.session_key] = stored_session.merge('session_status' => status) if status && stored_session
+
+      status
+    end
   end
 end

data/lib/clowk/configuration.rb

@@ -2,7 +2,6 @@
 
 module Clowk
   class Configuration
-    attr_accessor :api_base_url
     attr_accessor :app_base_url
     attr_accessor :after_sign_in_path
     attr_accessor :after_sign_out_path
@@ -22,9 +21,10 @@ module Clowk
     attr_accessor :session_key
     attr_accessor :subdomain_url
     attr_accessor :token_param
+    attr_accessor :enforce_active_session
+    attr_accessor :on_session_expired
 
     def initialize
-      @api_base_url = 'https://api.clowk.dev/client/v1'
       @app_base_url = 'https://app.clowk.in'
       @after_sign_in_path = '/'
       @after_sign_out_path = '/'
@@ -41,6 +41,8 @@ module Clowk
       @session_key = :clowk
       @prefix_by = :clowk
       @token_param = :token
+      @enforce_active_session = false
+      @on_session_expired = nil
     end
   end
 end

data/lib/clowk/current.rb

@@ -36,6 +36,10 @@ module Clowk
       attributes[:app_id]
     end
 
+    def session_id
+      attributes[:session_id]
+    end
+
     def [](key)
       attributes[key.to_sym]
     end

data/lib/clowk/sdk/client.rb

@@ -6,7 +6,7 @@ module Clowk
   module SDK
     class Client
       def initialize(options = {})
-        @api_base_url = options.fetch(:api_base_url, Clowk.config.api_base_url)
+        @api_base_url = options.fetch(:api_base_url, nil).presence || derive_api_base_url
         @secret_key = options.fetch(:secret_key, Clowk.config.secret_key)
         @publishable_key = options.fetch(:publishable_key, Clowk.config.publishable_key)
       end
@@ -65,6 +65,13 @@ module Clowk
 
       attr_reader :api_base_url, :publishable_key, :secret_key
 
+      def derive_api_base_url
+        base = Clowk.config.subdomain_url.to_s.strip
+        return if base.empty?
+
+        "#{base.sub(%r{/$}, '')}/api/v1"
+      end
+
       def http
         @http ||= Clowk::Http.new(
           base_url: api_base_url,

data/lib/clowk/sdk/session.rb

@@ -6,6 +6,19 @@ module Clowk
       def self.resource_path
         'sessions'
       end
+
+      # @param email [String] Email to search for (ILIKE match)
+      # @return [Clowk::Http::Response]
+      def search(email:)
+        client.get("#{self.class.resource_path}/search?email=#{ERB::Util.url_encode(email)}")
+      end
+
+      # Revokes a session by its session_id (clk_session_UUID)
+      # @param session_id [String]
+      # @return [Clowk::Http::Response]
+      def revoke(session_id)
+        destroy(session_id)
+      end
     end
   end
 end

data/lib/clowk/sdk/session_config.rb

@@ -0,0 +1,17 @@
+# frozen_string_literal: true
+
+module Clowk
+  module SDK
+    class SessionConfig < Resource
+      def self.resource_path
+        'session_config'
+      end
+
+      def fetch
+        response = client.get(self.class.resource_path)
+
+        response.body_parsed&.deep_symbolize_keys
+      end
+    end
+  end
+end

data/lib/clowk/sdk/token.rb

@@ -10,6 +10,13 @@ module Clowk
       def verify(token:)
         client.post("#{self.class.resource_path}/verify", { token: token })
       end
+
+      def verify_with_session(token:)
+        response = verify(token:)
+        data = response.body_parsed&.dig('data') || response.body_parsed
+
+        data&.deep_symbolize_keys
+      end
     end
   end
 end

data/lib/clowk/subdomain.rb

@@ -4,6 +4,7 @@ require 'uri'
 
 module Clowk
   class Subdomain
+    API_BASE_URL = 'https://api.clowk.dev/api/v1'
     CACHE_TTL = 60
     DEFAULT_SUBDOMAIN_BASE = 'clowk.dev'
 
@@ -42,7 +43,6 @@ module Clowk
 
     def initialize(options = {})
       @publishable_key = options.fetch(:publishable_key, Clowk.config.publishable_key)
-      @api_base_url = options.fetch(:api_base_url, Clowk.config.api_base_url)
       @subdomain_url = options.fetch(:subdomain_url, Clowk.config.subdomain_url)
     end
 
@@ -55,7 +55,7 @@ module Clowk
 
     private
 
-    attr_reader :api_base_url, :publishable_key, :subdomain_url
+    attr_reader :publishable_key, :subdomain_url
 
     def resolve_from_key
       cached = self.class.read_cache(cache_key)
@@ -77,8 +77,14 @@ module Clowk
     def extract_url_from_instance(payload)
       return if payload.blank?
 
-      instance = payload.is_a?(Hash) ? payload : {}
-      instance_data = instance['instance'].is_a?(Hash) ? instance['instance'] : instance
+      root = payload.is_a?(Hash) ? payload : {}
+      instance_data = if root['instance'].is_a?(Hash)
+                        root['instance']
+                      elsif root['data'].is_a?(Hash)
+                        root['data']
+                      else
+                        root
+                      end
 
       explicit_url = instance_data['url'] || instance_data['subdomain_url'] || instance_data['instance_url']
       return normalize_url(explicit_url) if explicit_url.present?
@@ -114,7 +120,7 @@ module Clowk
     end
 
     def client
-      @client ||= Clowk::SDK::Client.new
+      @client ||= Clowk::SDK::Client.new(api_base_url: API_BASE_URL)
     end
   end
 end

data/lib/clowk/version.rb

@@ -1,5 +1,5 @@
 # frozen_string_literal: true
 
 module Clowk
-  VERSION = '0.1.0'
+  VERSION = '0.3.0'
 end

data/lib/clowk.rb

@@ -44,6 +44,7 @@ require_relative 'clowk/sdk/user'
 require_relative 'clowk/sdk/session'
 require_relative 'clowk/sdk/subdomain'
 require_relative 'clowk/sdk/token'
+require_relative 'clowk/sdk/session_config'
 require_relative 'clowk/sdk/client'
 require_relative 'clowk/subdomain'
 require_relative 'clowk/jwt_verifier'

metadata

@@ -1,13 +1,13 @@
 --- !ruby/object:Gem::Specification
 name: clowk
 version: !ruby/object:Gem::Version
-  version: 0.1.0
+  version: 0.3.0
 platform: ruby
 authors:
 - Clowk
 bindir: bin
 cert_chain: []
-date: 2026-03-23 00:00:00.000000000 Z
+date: 2026-03-27 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: activesupport
@@ -106,6 +106,7 @@ files:
 - lib/clowk/sdk/client.rb
 - lib/clowk/sdk/resource.rb
 - lib/clowk/sdk/session.rb
+- lib/clowk/sdk/session_config.rb
 - lib/clowk/sdk/subdomain.rb
 - lib/clowk/sdk/token.rb
 - lib/clowk/sdk/user.rb