decidim-file_authorization_handler 0.31.6.2 → 0.31.6.3

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 6f9bfe24911c0472f08d4b8801c889913bc2faab0fbda5eaf678b9af28d6216e
-  data.tar.gz: f433053c3edb20160f3d3a793bc4b8db22fa4b3ac48f94c6dc1234ff058fe7de
+  metadata.gz: 2fde3cf7231be2ff3ac85ab43795028461a08c2bcde9697fb1ba924df92f252e
+  data.tar.gz: e6000774d125dddd928869d21c2f038510fe450c966274d7f7285caa379a4620
 SHA512:
-  metadata.gz: fc59d1bc16eb4d823ae78f69434885199a4403f1235ca05918d3fc7b109760189c90e840f3f8c4ff4770939c220fb2ff0a56f05047820e25e10cdf268d121574
-  data.tar.gz: 40b6248af89c9cce82e8078dc45815538d7c7a209566b06da90fe92498f45037be1a2a60ac5f195e2deb8f6dcf76cfb7f88f4de2972f5a1637ebfecb4012ce77
+  metadata.gz: 4f0a1aaf9e9066104e7d11960c19896e3dbee1a7c908bc50343c52930c2fa524c6e90149126d952b486e309d50a0191bdb1cff17ab7065c1e7f0b091d7d17653
+  data.tar.gz: ef1a7e004a53d7464aef6e0d82f27db2406bcfceffaa6170190ba4526fa2381943f19e5ccbea1d6bff43b313fd90a7fb493cd747bcf3befe6786619fad561793

data/README.md

@@ -17,10 +17,20 @@ It has an admin controller to upload CSV files with the information. When
 importing files all records are inserted and the duplicates are removed in a
 background job for performance reasons.
 
-To keep the plugin simple the uploaded file is processed when the file is
-uploaded.
-Uploading the file to a temporary storage system and processing it in
-background is kept out of the scope for the first release.
+To keep the plugin simple the uploaded file is processed when the file is uploaded.
+Uploading the file to a temporary storage system and processing it in background is kept out of the scope for the first release.
+
+### Ephemeral authorization handler
+
+The optional ephemeral authorization workflow can be enabled by setting the
+`ENABLE_EPHEMERAL_FILE_AUTHORIZATION_HANDLER` environment variable to `true`:
+
+```bash
+ENABLE_EPHEMERAL_FILE_AUTHORIZATION_HANDLER=true
+```
+
+The regular `file_authorization_handler` workflow is always available.
+When `ENABLE_EPHEMERAL_FILE_AUTHORIZATION_HANDLER=true`, the `ephemeral_file_authorization_handler` workflow is also registered. Ephemeral authorizations expire after one hour and can be renewed every five minutes. The option is disabled by default.
 
 ### CSV file format
 

data/app/services/ephemeral_file_authorization_handler.rb

@@ -0,0 +1,18 @@
+# frozen_string_literal: true
+
+# A subclass of FileAuthorizationHandler for ephemeral verification workflows.
+# It excludes tos_agreement from form_attributes because the verifications view
+# already renders it as a proper checkbox via the _tos_acceptance_field partial.
+#
+# The class name matches the workflow registration name (:ephemeral_file_authorization_handler)
+# so that handler_name is consistent across the hidden field, the authorization record,
+# and the permission check.
+class EphemeralFileAuthorizationHandler < FileAuthorizationHandler
+  def form_attributes
+    attributes.except(*%w(id user tos_agreement)).keys
+  end
+
+  def handler_name
+    +"ephemeral_file_authorization_handler"
+  end
+end

data/config/i18n-tasks.yml

@@ -140,6 +140,7 @@ ignore_missing:
 # - 'errors.messages.{accepted,blank,invalid,too_short,too_long}'
 # - '{devise,simple_form}.*'
 - '{activemodel,census_authorization}.*'
+- 'decidim.authorization_handlers.*'
 
 ## Consider these keys used:
 ignore_unused:
@@ -150,6 +151,7 @@ ignore_unused:
 # - 'simple_form.{error_notification,required}.:'
 - '{activemodel,census_authorization}.*'
 - 'decidim.authorization_handlers.file_authorization_handler.*'
+- 'decidim.authorization_handlers.ephemeral_file_authorization_handler.*'
 - 'decidim.file_authorization_handler.*'
 - 'decidim.verifications.authorizations.first_login.actions.file_authorization_handler'
 

data/config/locales/ca.yml

@@ -13,6 +13,12 @@ ca:
         year: Any
   decidim:
     authorization_handlers:
+      ephemeral_file_authorization_handler:
+        explanation: Autoritza el teu compte d'usuari contra el cens de la Organització
+        fields:
+          birthdate: Data de naixement
+        name: Cens Organització
+        type: CSV
       file_authorization_handler:
         explanation: Autoritza el teu compte d'usuari contra el cens de la Organització
         fields:
@@ -40,7 +46,7 @@ ca:
           data: Hi ha un total de %{count} registres carregats. La última càrrega va ser el dia %{due_date}
           empty: Encara no hi ha dades censals carregades. Utilitza el següent formulari per importar-lo utilitzant un fitxer CSV.
           import_csv: Importa CSV
-          title: Dades del cens carregat
+          title: Dades del cens carregades
       errors:
         messages:
           not_censed: No hem pogut trobar el teu document d'identitat amb aquesta data de naixement al padró municipal. Si les dades són correctes i el problema persisteix, siusplau, posa't en contacte amb un administrador.

data/config/locales/en.yml

@@ -13,6 +13,12 @@ en:
         year: Year
   decidim:
     authorization_handlers:
+      ephemeral_file_authorization_handler:
+        explanation: Authorize your user account against Organization's Census
+        fields:
+          birthdate: Birthdate
+        name: Organization's Census
+        type: CSV
       file_authorization_handler:
         explanation: Authorize your user account against Organization's Census
         fields:

data/config/locales/es.yml

@@ -13,6 +13,12 @@ es:
         year: Año
   decidim:
     authorization_handlers:
+      ephemeral_file_authorization_handler:
+        explanation: Autoriza tu cuenta de usuario contra el Censo de la Organización
+        fields:
+          birthdate: Fecha de nacimiento
+        name: Censo de la Organización
+        type: CSV
       file_authorization_handler:
         explanation: Autoriza tu cuenta de usuario contra el Censo de la Organización
         fields:

data/lib/decidim/file_authorization_handler/engine.rb

@@ -10,6 +10,17 @@ module Decidim
         Decidim::Verifications.register_workflow(:file_authorization_handler) do |workflow|
           workflow.form = "FileAuthorizationHandler"
         end
+
+        next unless ENV.fetch("ENABLE_EPHEMERAL_FILE_AUTHORIZATION_HANDLER", "false") == "true"
+
+        # Enable Ephemeral Verification
+        Decidim::Verifications.register_workflow(:ephemeral_file_authorization_handler) do |workflow|
+          workflow.ephemeral = true
+          workflow.form = "EphemeralFileAuthorizationHandler"
+          workflow.expires_in = 1.hour
+          workflow.renewable = true
+          workflow.time_between_renewals = 5.minutes
+        end
       end
     end
   end

data/lib/decidim/file_authorization_handler/version.rb

@@ -7,6 +7,6 @@ module Decidim
     # Uses the latest matching Decidim version for
     # - major, minor and patch
     # - the optional extra number is related to this module's patches
-    VERSION = "#{DECIDIM_VERSION}.2".freeze
+    VERSION = "#{DECIDIM_VERSION}.3".freeze
   end
 end

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: decidim-file_authorization_handler
 version: !ruby/object:Gem::Version
-  version: 0.31.6.2
+  version: 0.31.6.3
 platform: ruby
 authors:
 - Daniel Gómez
@@ -10,7 +10,7 @@ authors:
 autorequire:
 bindir: bin
 cert_chain: []
-date: 2026-08-05 00:00:00.000000000 Z
+date: 2026-08-27 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: decidim
@@ -72,6 +72,7 @@ files:
 - app/models/decidim/file_authorization_handler/csv_data.rb
 - app/models/decidim/file_authorization_handler/status.rb
 - app/permissions/decidim/file_authorization_handler/admin/permissions.rb
+- app/services/ephemeral_file_authorization_handler.rb
 - app/services/file_authorization_handler.rb
 - app/views/decidim/file_authorization_handler/admin/censuses/_upload_info.html.erb
 - app/views/decidim/file_authorization_handler/admin/censuses/new.html.erb