decidim-core 0.32.1 → 0.32.2

data/lib/decidim/core/version.rb

@@ -4,7 +4,7 @@ module Decidim
   # This holds the decidim-core version.
   module Core
     def self.version
-      "0.32.1"
+      "0.32.2"
     end
   end
 end

data/lib/decidim/core.rb

@@ -447,6 +447,15 @@ module Decidim
   # Time window in which the throttling is applied.
   mattr_accessor :throttling_period, default: Decidim::Env.new("DECIDIM_THROTTLING_PERIOD", "1").to_i.minutes
 
+  # Max failed attempts for verification code confirmation before lockout.
+  mattr_accessor :verification_max_failed_attempts, default: Decidim::Env.new("DECIDIM_VERIFICATION_MAX_FAILED_ATTEMPTS", "5").to_i
+
+  # Time window after which a locked verification is automatically unlocked.
+  mattr_accessor :verification_unlock_in, default: Decidim::Env.new("DECIDIM_VERIFICATION_UNLOCK_IN", "30").to_i.minutes
+
+  # Time window (in minutes) after which a verification code expires (SMS only).
+  mattr_accessor :verification_code_expiry_minutes, default: Decidim::Env.new("DECIDIM_VERIFICATION_CODE_EXPIRY_MINUTES", "10").to_i
+
   # Time window were users can access the website even if their email is not confirmed.
   mattr_accessor :unconfirmed_access_for, default: Decidim::Env.new("DECIDIM_UNCONFIRMED_ACCESS_FOR", "0").to_i.days
 

data/lib/decidim/form_builder.rb

@@ -886,12 +886,20 @@ module Decidim
         upload_dialog_selector: "##{upload_options[:modal_id]}"
       }.transform_keys { |key| key.to_s.camelize(:lower) }
 
-      editor_options[:mention] = options.delete(:mentionable)
+      mentionable = options.delete(:mentionable)
+      editor_options[:mention] = mention_options(mentionable) if mentionable
       editor_options[:emoji] = options.delete(:emojiable)
 
       { editor: editor_options, upload: upload_options }
     end
 
+    def mention_options(mentionable)
+      mention_options = mentionable.is_a?(Hash) ? mentionable.dup : {}
+      mention_options[:searchPromptMessage] ||= I18n.t("decidim.shared.mentions.search_prompt")
+
+      mention_options
+    end
+
     # Private: creates an upload modal for the editor that we use to dynamically
     # upload the images to the editor.
     def editor_upload(editor_image, options = {})

data/lib/decidim/has_upload_validations.rb

@@ -15,6 +15,7 @@ module Decidim
           file_size: { less_than_or_equal_to: max_size },
           organization_present: true,
           uploader_content_type: true,
+          uploader_image_content: true,
           uploader_image_dimensions: true
         )
 

data/lib/decidim/legacy_form_builder.rb

@@ -32,6 +32,10 @@ module Decidim
         options[:data][:controller] ||= ""
         options[:data][:controller] += " date-picker"
 
+        if (default_time = options.delete(:default_time))
+          options[:data][:default_time] = default_time
+        end
+
         field(attribute, options) do |opts|
           super(attribute, opts)
         end

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: decidim-core
 version: !ruby/object:Gem::Version
-  version: 0.32.1
+  version: 0.32.2
 platform: ruby
 authors:
 - Josep Jaume Rey Peroy
@@ -913,28 +913,28 @@ dependencies:
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 0.32.1
+        version: 0.32.2
   type: :development
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 0.32.1
+        version: 0.32.2
 - !ruby/object:Gem::Dependency
   name: decidim-dev
   requirement: !ruby/object:Gem::Requirement
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 0.32.1
+        version: 0.32.2
   type: :development
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 0.32.1
+        version: 0.32.2
 description: Adds core features so other engines can hook into the framework.
 email:
 - josepjaume@gmail.com
@@ -1657,6 +1657,7 @@ files:
 - app/packs/src/decidim/attachments/file_or_link_tabs.js
 - app/packs/src/decidim/attachments/index.js
 - app/packs/src/decidim/callout.js
+- app/packs/src/decidim/callout.test.js
 - app/packs/src/decidim/confirm.js
 - app/packs/src/decidim/confirm.test.js
 - app/packs/src/decidim/controllers/.keep
@@ -1666,6 +1667,7 @@ files:
 - app/packs/src/decidim/controllers/account_form/controller.js
 - app/packs/src/decidim/controllers/assign_role/assign_role.test.js
 - app/packs/src/decidim/controllers/assign_role/controller.js
+- app/packs/src/decidim/controllers/autofocus/controller.js
 - app/packs/src/decidim/controllers/breadcrumb_truncate/breadcrumb_truncate.test.js
 - app/packs/src/decidim/controllers/breadcrumb_truncate/controller.js
 - app/packs/src/decidim/controllers/character_counter/controller.js
@@ -1808,6 +1810,8 @@ files:
 - app/packs/src/decidim/map/provider/default.js
 - app/packs/src/decidim/map/provider/here.js
 - app/packs/src/decidim/notifications.js
+- app/packs/src/decidim/refactor/implementation/autofocus.js
+- app/packs/src/decidim/refactor/implementation/autofocus.test.js
 - app/packs/src/decidim/refactor/implementation/configuration.js
 - app/packs/src/decidim/refactor/implementation/external_domain_warning.js
 - app/packs/src/decidim/refactor/implementation/external_link.js
@@ -2035,6 +2039,7 @@ files:
 - app/services/decidim/send_push_notification.rb
 - app/services/decidim/settings_change.rb
 - app/services/decidim/static_map_generator.rb
+- app/services/decidim/svg_content_validator.rb
 - app/services/decidim/tokenizer.rb
 - app/services/decidim/traceability.rb
 - app/uploaders/decidim/application_uploader.rb
@@ -2062,6 +2067,7 @@ files:
 - app/validators/translatable_presence_validator.rb
 - app/validators/translated_etiquette_validator.rb
 - app/validators/uploader_content_type_validator.rb
+- app/validators/uploader_image_content_validator.rb
 - app/validators/uploader_image_dimensions_validator.rb
 - app/validators/url_validator.rb
 - app/views/decidim/account/_account_notification.js.erb
@@ -2610,6 +2616,7 @@ files:
 - db/migrate/20260208201407_remove_user_group_organizations.rb
 - db/migrate/20260217152425_remove_enable_participatory_space_filters_from_decidim_organizations.rb
 - db/migrate/20260314081619_add_index_on_decidim_members.rb
+- db/migrate/20260909000000_add_failed_attempts_and_locked_at_to_decidim_authorizations.rb
 - db/seeds.rb
 - db/seeds/Exampledocument.pdf
 - db/seeds/avatars/001.jpg
@@ -2859,7 +2866,6 @@ files:
 - lib/decidim/content_parsers.rb
 - lib/decidim/content_parsers/base_parser.rb
 - lib/decidim/content_parsers/blob_parser.rb
-- lib/decidim/content_parsers/inline_images_parser.rb
 - lib/decidim/content_parsers/link_parser.rb
 - lib/decidim/content_parsers/mention_resource_parser.rb
 - lib/decidim/content_parsers/newline_parser.rb
@@ -3179,7 +3185,6 @@ files:
 - lib/tasks/decidim_taxonomies.rake
 - lib/tasks/upgrade/clean.rake
 - lib/tasks/upgrade/decidim_action_log_valuation_assignment.rake
-- lib/tasks/upgrade/decidim_active_storage_migration_tasks.rake
 - lib/tasks/upgrade/decidim_attachments.rake
 - lib/tasks/upgrade/decidim_change_valuator_tasks.rake
 - lib/tasks/upgrade/decidim_content_blocks_tasks.rake

data/lib/decidim/content_parsers/inline_images_parser.rb

@@ -1,68 +0,0 @@
-# frozen_string_literal: true
-
-module Decidim
-  module ContentParsers
-    # A parser that searches for inline images in an html content and
-    # replaces them with EditorImage attachments. Note that rewrite method may
-    # create EditorImage instances
-    #
-    # @see BaseParser Examples of how to use a content parser
-    class InlineImagesParser < BaseParser
-      # @return [String] the content with the inline images replaced.
-      def rewrite
-        return content unless inline_images?
-
-        replace_inline_images
-        parsed_content.to_html
-      end
-
-      def inline_images?
-        parsed_content.search(:img).find do |image|
-          image.attr(:src).start_with?(%r{data:image/[a-z]{3,4};base64,})
-        end
-      end
-
-      private
-
-      def parsed_content
-        @parsed_content ||= Nokogiri::HTML(content)
-      end
-
-      def replace_inline_images
-        parsed_content.search(:img).each do |image|
-          next unless image.attr(:src).start_with?(%r{data:image/[a-z]{3,4};base64,})
-
-          file = base64_tempfile(image.attr(:src))
-          editor_image = EditorImage.create!(
-            decidim_author_id: context[:user]&.id,
-            organization: context[:user].organization,
-            file:
-          )
-
-          image.set_attribute(:src, editor_image.attached_uploader(:file).path)
-        end
-      end
-
-      def base64_tempfile(base64_data, filename = nil)
-        return base64_data unless base64_data.is_a? String
-
-        start_regex = %r{data:image/[a-z]{3,4};base64,}
-        filename ||= SecureRandom.hex
-
-        regex_result = start_regex.match(base64_data)
-
-        return unless base64_data && regex_result
-
-        start = regex_result.to_s
-        tempfile = Tempfile.new(filename)
-        tempfile.binmode
-        tempfile.write(Base64.decode64(base64_data[start.length..-1]))
-        ActionDispatch::Http::UploadedFile.new(
-          tempfile:,
-          filename:,
-          original_filename: filename
-        )
-      end
-    end
-  end
-end

data/lib/tasks/upgrade/decidim_active_storage_migration_tasks.rake

@@ -1,79 +0,0 @@
-# frozen_string_literal: true
-
-namespace :decidim do
-  namespace :upgrade do
-    namespace :active_storage_migrations do
-      desc "Migrates inline images to ActiveStorage editor_image attachments"
-      task :migrate_inline_images_to_active_storage, [:admin_email] => :environment do |_t, args|
-        user = Decidim::User.find_by(email: args[:admin_email])
-
-        raise "Invalid admin. Please, provide the email of an admin with permissions to create editor images" unless user&.admin? && user.admin_terms_accepted?
-
-        inline_images_available_attributes.each do |model, attributes|
-          puts "=== Updating model #{model.name} (attributes: #{attributes.join(", ")})..."
-          model.all.each do |item|
-            attributes.each do |attribute|
-              item.update(attribute => rewrite_value(item.send(attribute), user))
-            end
-          end
-          puts "=== Finished update of model #{model.name}\n\n"
-        end
-      end
-
-      def rewrite_value(value, user)
-        if value.is_a?(Hash)
-          value.transform_values do |nested_value|
-            rewrite_value(nested_value, user)
-          end
-        else
-          parser = Decidim::ContentParsers::InlineImagesParser.new(value, user:)
-          parser.rewrite
-        end
-      end
-
-      def inline_images_available_attributes
-        {
-          "Decidim::Accountability::Result" => %w(description),
-          "Decidim::Proposals::Proposal" => %w(body answer cost_report execution_period),
-          "Decidim::Votings::Voting" => %w(description),
-          "Decidim::Elections::Question" => %w(description),
-          "Decidim::Elections::Answer" => %w(description),
-          "Decidim::Elections::Election" => %w(description),
-          "Decidim::Initiative" => %w(description answer),
-          "Decidim::InitiativesType" => %w(description extra_fields_legal_information),
-          "Decidim::Assembly" => %w(short_description description purpose_of_action composition internal_organisation announcement closing_date_reason special_features),
-          "Decidim::Forms::Questionnaire" => %w(description tos),
-          "Decidim::Forms::Question" => %w(description),
-          "Decidim::Organization" => %w(
-            welcome_notification_body
-            admin_terms_of_use_body
-            admin_terms_of_service_body
-            description
-            highlighted_content_banner_short_description
-            id_documents_explanation_text
-          ),
-          "Decidim::StaticPage" => %w(content),
-          "Decidim::ContextualHelpSection" => %w(content),
-          "Decidim::Category" => %w(description),
-          "Decidim::Blogs::Post" => %w(body),
-          "Decidim::Pages::Page" => %w(body),
-          "Decidim::Debates::Debate" => %w(description instructions information_updates conclusions),
-          "Decidim::Budgets::Budget" => %w(description),
-          "Decidim::Budgets::Project" => %w(description),
-          "Decidim::ConferenceSpeaker" => %w(short_bio),
-          "Decidim::Conferences::RegistrationType" => %w(description),
-          "Decidim::Conference" => %w(short_description description objectives registration_terms),
-          "Decidim::ParticipatoryProcessGroup" => %w(description),
-          "Decidim::ParticipatoryProcess" => %w(short_description description announcement),
-          "Decidim::ParticipatoryProcessStep" => %w(description),
-          "Decidim::Meetings::AgendaItem" => %w(description),
-          "Decidim::Meetings::Meeting" => %w(registration_terms description registration_email_custom_content closing_report)
-        }.each_with_object({}) do |(main_model, attributes), hash|
-          hash[main_model.constantize] = attributes
-        rescue NameError
-          hash
-        end
-      end
-    end
-  end
-end