cookie_crypt 1.1.0 → 1.1.1

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA1:
-  metadata.gz: 79b8a44522cb81c5ce3f8f162a2b5e85f2f9066b
-  data.tar.gz: d23f608c9c30e1fa0c4bcbcdcfef8341bd219425
+  metadata.gz: cd6be403f4ffd116ee2af138abec9364b4f81a80
+  data.tar.gz: a135e2aa98c8b52251f5d000b7f6f13120c377e7
 SHA512:
-  metadata.gz: 8b0f355e9348f6422fcf4e38699d61d5a68d99bcc75d1df2f7655745e42c6bbdcd05df941451d72064a0f8ce00473e7dafea8348a578c5e5ecc468f30c9fd590
-  data.tar.gz: e0c5418dc790bc69108996cce3435338e78e719c8f51e128042d02f133601a6c61f41e17423c627f1c99cdf41c8ea20039c674b717fa9269e73874a909b453c8
+  metadata.gz: fd8b49990f3a4e3692ebb9b72fc071071064fee4dd7bd444c170dda7a46f6bacaa28e5b618260394fe79eec44a0a17aab6e06d235ae2754cd65eaf0ada130cc6
+  data.tar.gz: 834e21eb5f589775cb0b050d2e77c00e080a965a0731885d4bea9455b976b21a9674f568c499f881664f68a3ec9b8bce7883cc1c04f79e13543e8174c6ca4266

data/README.md

@@ -58,7 +58,7 @@ This process will move your data (in a dev environment) from the old system to t
 
 Assuming all files are already on the production box, run
 
-    bundle exec rake db:migrate:up
+    bundle exec rake db:migrate VERSION=(version of the FIRST migration)
 
 To go forward only to the next migration, then run
 
@@ -67,7 +67,7 @@ To go forward only to the next migration, then run
 On your model to export the security question and answer data to security_hash (nothing else will be added though it may notify you of conflicts).
 Do not overwrite the conflicting migration file. Then run
 
-    bundle exec rake db:migrate:up
+    bundle exec rake db:migrate
 
 Again to remove the old fields.
 
@@ -134,28 +134,28 @@ browser.
 ### Whats new with the 1.1 Update
 * Reworked security questions and answers to allow for more customization options
 * cookie_crypt_auth_through
-** :one_question_cyclical
-*** The default
-*** Each user must answer only one of their questions at the end of a cookie cycle to authenticate.
-*** The questions are chosen cyclically, the user will not answer the same question the next time they have to auth through two-factor
-*** This prevents users logging in on a new machine from always being shown the same questions and is more secure
-** :one_question_random
-*** The user is shown a random question that was not their previous question every time they auth through two-factor, otherwise exactly like cyclical
-** :two_questions_cyclical
-*** Exactly like one_question_cyclical except two questions must be answered every auth
-** :two_questions_random
-*** Exactly like one_question_random except two questions must be answered every auth
-** :all_questions
-*** This option is not advised, but is available. It is the old functionality the system had.
-*** The user must answer all authentication questions every auth session
+    * :one_question_cyclical
+        * The default
+        * Each user must answer only one of their questions at the end of a cookie cycle to authenticate.
+        * The questions are chosen cyclically, the user will not answer the same question the next time they have to auth through two-factor
+        * This prevents users logging in on a new machine from always being shown the same questions and is more secure
+    * :one_question_random
+        * The user is shown a random question that was not their previous question every time they auth through two-factor, otherwise exactly like cyclical
+    * :two_questions_cyclical
+        * Exactly like one_question_cyclical except two questions must be answered every auth
+    * :two_questions_random
+        * Exactly like one_question_random except two questions must be answered every auth
+    * :all_questions
+        * This option is not advised, but is available. It is the old functionality the system had.
+        * The user must answer all authentication questions every auth session
 * cookie_crypt_minimum_questions
-** Default is 3
-** Minimum number of questions and answers the user must enter into the system on their initial attempt
-** Systems upgrading from 1.0 will prompt the user to add the difference in numbers of questions and answers
+    * Default is 3
+    * Minimum number of questions and answers the user must enter into the system on their initial attempt
+    * Systems upgrading from 1.0 will prompt the user to add the difference in numbers of questions and answers
 * cycle_question_on_fail_count
-** Default is 2
-** Minimum number of failed attempts before the question(s) is(are) cycled to the next question(s)
-** Works in conjunction with max_cookie_crypt_login_attempts
+    * Default is 2
+    * Minimum number of failed attempts before the question(s) is(are) cycled to the next question(s)
+    * Works in conjunction with max_cookie_crypt_login_attempts
 * enable_custom_question_counts
-** Default is false
-** Allows users to have more than the minimum number of security question / answer pairs.
+    * Default is false
+    * Allows users to have more than the minimum number of security question / answer pairs.

data/app/controllers/devise/cookie_crypt_controller.rb

@@ -47,10 +47,11 @@ class Devise::CookieCryptController < DeviseController
     elsif (h.keys.count/2) < resource.class.cookie_crypt_minimum_questions # Need to update hash from an old install
 
       ((h.keys.count/2)+1..(params[:security].keys.count/2)+((h.keys.count/2))).each do |n|
+        puts "TESTING::#{n}"
         h["security_question_#{n}"] = sanitize(params[:security]["security_question_#{n}".to_sym])
         h["security_answer_#{n}"] = Digest::SHA512.hexdigest(sanitize(params[:security]["security_answer_#{n}".to_sym]))
       end
-
+      puts "TESTING2::#{h}"
       resource.security_hash = h.to_s
 
       resource.save

data/lib/cookie_crypt/controllers/helpers.rb

@@ -74,9 +74,10 @@ module CookieCrypt
         unless resource.class.cookie_crypt_auth_through == :all_questions
           if resource.class.cookie_crypt_auth_through == :one_question_cyclical || 
             resource.class.cookie_crypt_auth_through == :two_questions_cyclical
-            answers << h["security_answer_#{resource.security_cycle+session[:cyclemod]}"]
+
+            answers << "security_answer_#{resource.security_cycle+session[:cyclemod]}"
           else #random cyclemod case
-            answers << h["security_answer_#{session[:cyclemod]}"]
+            answers << "security_answer_#{session[:cyclemod]}"
           end
         end
 
@@ -106,7 +107,7 @@ module CookieCrypt
           end
         end
 
-        authed = true unless q_arr.include?(false)
+        authed = true unless a_arr.include?(false)
         authed
       end
 

data/lib/cookie_crypt/version.rb

@@ -1,3 +1,3 @@
 module CookieCrypt
-  VERSION = "1.1.0"
+  VERSION = "1.1.1"
 end

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: cookie_crypt
 version: !ruby/object:Gem::Version
-  version: 1.1.0
+  version: 1.1.1
 platform: ruby
 authors:
 - Dmitrii Golub