devise-2fa 0.1.1 → 0.2.0

data/spec/system/persistence_spec.rb

@@ -0,0 +1,59 @@
+# frozen_string_literal: true
+
+require 'spec_helper'
+
+RSpec.describe 'Persistence' do
+  subject (:user) { User.create(email: 'mb@geemail.com', password: 'iwantabigmac1') }
+
+  it 'requests the the otp challenge every log in' do
+    enable_otp_and_sign_in user
+    otp_challenge_for user
+
+    visit user_token_path
+
+    expect(current_path).to eq(user_token_path)
+
+    sign_out user
+    sign_in_user user
+
+    expect(current_path).to eq(user_credential_path)
+  end
+
+  it 'a user should be able to set their browser as trusted' do
+    # log in 1fa
+    enable_otp_and_sign_in user
+    otp_challenge_for user
+
+    visit user_token_path
+    expect(current_path).to eq(user_token_path)
+
+    click_link('Trust this browser')
+
+    expect(page).to have_content 'This browser is trusted'
+    sign_out user
+
+    sign_in_user user
+
+    expect(current_path).to eq(root_path)
+  end
+
+  it 'trusted status should expire' do
+    User.otp_trust_persistence = 1
+    user.reload
+    enable_otp_and_sign_in user
+    otp_challenge_for user
+
+    visit user_token_path
+    expect(current_path).to eq(user_token_path)
+
+    click_link('Trust this browser')
+    expect(page).to have_content 'This browser is trusted'
+
+    sign_out user
+    sleep User.otp_trust_persistence.to_i
+
+    sign_in_user user
+
+    expect(current_path).to eq(user_credential_path)
+  end
+end

data/spec/system/refresh_spec.rb

@@ -0,0 +1,100 @@
+# frozen_string_literal: true
+
+require 'spec_helper'
+
+RSpec.describe 'Refresh' do
+  subject (:user) { User.create(email: 'mb@geemail.com', password: 'iwantabigmac1') }
+  @old_refresh = User.otp_credentials_refresh
+  User.otp_credentials_refresh = 1.second
+  
+  it 'should be able to access their OTP settings without refreshing' do
+    sign_in_user user
+    visit user_token_path
+
+    expect(current_path).to eq(user_token_path)
+  end
+
+  it 'should be prompted for credentials when the credentials_refresh time is expired' do
+    sign_in_user user
+    visit user_token_path
+
+    expect(current_path).to eq(user_token_path)
+
+    sleep(2)
+    visit user_token_path
+    
+    expect(current_path).to eq(refresh_user_credential_path)
+  end
+
+  it 'a user should be able to access their OTP settings after refreshing' do
+    sign_in_user user
+    visit user_token_path
+    expect(current_path).to eq(user_token_path)
+
+    sleep(2)
+
+    visit user_token_path
+    expect(current_path).to eq(refresh_user_credential_path)
+
+    fill_in 'user_refresh_password', with: user.password
+    click_button 'Continue'
+    expect(current_path).to eq(user_token_path)
+  end
+
+  it 'a user should NOT be able to access their OTP settings unless refreshing' do
+    sign_in_user user
+    visit user_token_path
+    expect(current_path).to eq(user_token_path)
+
+    sleep(2)
+
+    visit user_token_path
+    expect(current_path).to eq(refresh_user_credential_path)
+
+    fill_in 'user_refresh_password', with: 'wrong password'
+    click_button 'Continue'
+
+    expect(current_path).to eq(refresh_user_credential_path)
+  end
+
+  it 'should ask for their OTP challenge in order to refresh, if they have OTP' do
+    enable_otp_and_sign_in_with_otp user
+
+    sleep(2)
+    visit user_token_path
+    expect(current_path).to eq(refresh_user_credential_path)
+
+    fill_in 'user_refresh_password', with: user.password
+    click_button 'Continue'
+
+    expect(current_path).to eq(refresh_user_credential_path)
+  end
+
+  it 'user should be finally be able to access their settings, if they provide both a password and a valid OTP token' do
+    enable_otp_and_sign_in_with_otp user
+
+    sleep(2)
+    visit user_token_path
+    expect(current_path).to eq(refresh_user_credential_path)
+
+    fill_in 'user_refresh_password', with: user.password
+    fill_in 'user_token', with: ROTP::TOTP.new(user.otp_auth_secret).at(Time.now)
+    click_button 'Continue'
+
+    expect(current_path).to eq(user_token_path)
+  end
+
+  it 'and rejected when the token is blank or null' do
+    enable_otp_and_sign_in_with_otp user
+
+    sleep(2)
+    visit user_token_path
+    expect(current_path).to eq(refresh_user_credential_path)
+
+    fill_in 'user_refresh_password', with: user.password
+    fill_in 'user_token', with: ''
+    click_button 'Continue'
+
+    expect(current_path).to eq(refresh_user_credential_path)
+  end
+end

data/spec/system/token_spec.rb

@@ -0,0 +1,41 @@
+# frozen_string_literal: true
+
+require 'spec_helper'
+
+RSpec.describe 'Tokens' do
+  subject (:user) { User.create(email: 'mb@geemail.com', password: 'iwantabigmac1') }
+
+  it 'can be disabled by a user after successfully enabling' do
+    enable_otp_and_sign_in user
+
+    fill_in 'user_token', with: ROTP::TOTP.new(user.otp_auth_secret).at(Time.now)
+    click_button 'Submit Token'
+
+    expect(current_path).to eq(root_path)
+
+    disable_otp
+    sign_out user
+    sign_in_user user
+
+    expect(current_path).to eq(root_path)
+  end
+
+  xit 'cannot be reused' do
+    enable_otp_and_sign_in user
+
+    prev_token = ROTP::TOTP.new(user.otp_auth_secret).at(Time.now)
+
+    fill_in 'user_token', with: prev_token
+    click_button 'Submit Token'
+
+    expect(current_path).to eq(root_path)
+
+    sign_out user
+    sign_in_user user
+
+    fill_in 'user_token', with: prev_token
+    click_button 'Submit Token'
+
+    expect(current_path).to eq(new_user_session_path)
+  end
+end

data/spec/system/users_spec.rb

@@ -0,0 +1,98 @@
+# frozen_string_literal: true
+
+require 'spec_helper'
+
+RSpec.describe 'Users' do
+  describe 'signing up' do
+    it 'can sign up' do
+      visit '/users/sign_up'
+      fill_in 'user_email', with: 'mb@geemail.com'
+      fill_in 'user_password', with: 'iwantabigmac1'
+      fill_in 'user_password_confirmation', with: 'iwantabigmac1'
+
+      click_button('Sign up')
+
+      expect(page).to have_content 'Welcome! You have signed up successfully.'
+    end
+  end
+
+  describe 'logging in' do
+    subject (:user) { User.create(email: 'mb@geemail.com', password: 'iwantabigmac1') }
+
+    it 'can login without using a token' do
+      sign_in_user(user)
+
+      expect(page).to have_content 'Signed in successfully'
+    end
+
+    context 'enabling otp' do
+      before(:each) do
+        sign_in user
+      end
+
+      it 'can enable otp and are prompted for its token' do
+        visit user_token_path
+
+        fill_in 'user_refresh_password', with: user.password
+        click_on 'Continue'
+        check 'user_otp_enabled'
+        click_on 'Continue'
+
+        user.reload
+        expect(user.otp_enabled).to be true
+      end
+    end
+
+    context 'with otp enabled' do
+      it 'can login with the correct code' do
+        enable_otp_and_sign_in user
+        fill_in 'user_token', with: ROTP::TOTP.new(user.otp_auth_secret).at(Time.now)
+        click_button 'Submit Token'
+
+        expect(current_path).to eq(root_path)
+      end
+
+      it 'fails with an incorrect code' do
+        enable_otp_and_sign_in user
+        fill_in 'user_token', with: '123456'
+        click_button 'Submit Token'
+
+        expect(current_path).to eq(new_user_session_path)
+      end
+
+      it 'is prompted for its token immediately after signing in' do
+        enable_otp_and_sign_in user
+
+        expect(current_path).to eq(user_credential_path)
+      end
+
+      it 'fails with a blank code' do
+        enable_otp_and_sign_in user
+        fill_in 'user_token', with: ''
+        click_button 'Submit Token'
+
+        expect(current_path).to eq(user_credential_path)
+      end
+
+      it 'fail when the challenge times out' do
+        enable_otp_and_sign_in user
+
+        fill_in 'user_token', with: ROTP::TOTP.new(user.otp_auth_secret).at(1000.seconds.from_now)
+        click_button 'Submit Token'
+
+        expect(current_path).to eq(new_user_session_path)
+      end
+    end
+
+    context 'unsuccessfully' do
+      it 'fails with an invalid user' do
+        visit '/users/sign_in'
+        fill_in 'user_email', with: 'user@email.invalid'
+        fill_in 'user_password', with: '12345678'
+        click_button('Log in')
+
+        expect(page).to have_content 'Invalid Email or password'
+      end
+    end
+  end
+end

metadata

@@ -1,15 +1,29 @@
 --- !ruby/object:Gem::Specification
 name: devise-2fa
 version: !ruby/object:Gem::Version
-  version: 0.1.1
+  version: 0.2.0
 platform: ruby
 authors:
 - William A. Todd
 autorequire: 
 bindir: bin
 cert_chain: []
-date: 2016-04-28 00:00:00.000000000 Z
+date: 2019-04-29 00:00:00.000000000 Z
 dependencies:
+- !ruby/object:Gem::Dependency
+  name: rails
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '5.0'
+  type: :runtime
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '5.0'
 - !ruby/object:Gem::Dependency
   name: devise
   requirement: !ruby/object:Gem::Requirement
@@ -58,39 +72,109 @@ dependencies:
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: '3.8'
+        version: 4.2.0
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: '3.8'
+        version: 4.2.0
 - !ruby/object:Gem::Dependency
   name: sqlite3
   requirement: !ruby/object:Gem::Requirement
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: '0'
+        version: 1.3.6
   type: :development
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - "~>"
+      - !ruby/object:Gem::Version
+        version: 1.3.6
+- !ruby/object:Gem::Dependency
+  name: selenium-webdriver
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: '0'
+  type: :development
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: '0'
+- !ruby/object:Gem::Dependency
+  name: rspec-rails
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: '0'
+  type: :development
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: '0'
+- !ruby/object:Gem::Dependency
+  name: capybara
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: '0'
+  type: :development
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: '0'
+- !ruby/object:Gem::Dependency
+  name: rspec
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: '0'
+  type: :development
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: '0'
+- !ruby/object:Gem::Dependency
+  name: pry
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: '0'
+  type: :development
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - ">="
       - !ruby/object:Gem::Version
         version: '0'
 description: Time Based OTP/rfc6238 authentication for Devise
 email:
-- info@investinwaffles.com
+- info@rockcreek.io
 executables: []
 extensions: []
 extra_rdoc_files: []
 files:
+- ".circleci/config.yml"
 - ".gitignore"
 - ".hound.yml"
 - ".ruby-style.yml"
-- ".travis.yml"
 - Gemfile
 - LICENSE
 - README.md
@@ -104,8 +188,10 @@ files:
 - app/views/devise/tokens/recovery.html.erb
 - app/views/devise/tokens/recovery_codes.text.erb
 - app/views/devise/tokens/show.html.erb
+- bin/rspec
+- bin/setup
 - config/locales/en.yml
-- devise-2fa.gemspec
+- devise_2fa.gemspec
 - lib/devise-2fa.rb
 - lib/devise-2fa/version.rb
 - lib/devise_two_factorable/controllers/helpers.rb
@@ -117,69 +203,71 @@ files:
 - lib/devise_two_factorable/mapping.rb
 - lib/devise_two_factorable/models/two_factorable.rb
 - lib/devise_two_factorable/routes.rb
-- lib/devise_two_factorable/two_factorable.rb
 - lib/generators/active_record/devise_two_factor_generator.rb
 - lib/generators/active_record/templates/migration.rb
 - lib/generators/devise_two_factor/devise_two_factor_generator.rb
 - lib/generators/devise_two_factor/install_generator.rb
 - lib/generators/devise_two_factor/views_generator.rb
 - lib/generators/mongoid/devise_two_factor_generator.rb
-- test/dummy/README.rdoc
-- test/dummy/Rakefile
-- test/dummy/app/assets/javascripts/application.js
-- test/dummy/app/assets/stylesheets/application.css
-- test/dummy/app/controllers/application_controller.rb
-- test/dummy/app/controllers/posts_controller.rb
-- test/dummy/app/helpers/application_helper.rb
-- test/dummy/app/helpers/posts_helper.rb
-- test/dummy/app/mailers/.gitkeep
-- test/dummy/app/models/post.rb
-- test/dummy/app/models/user.rb
-- test/dummy/app/views/layouts/application.html.erb
-- test/dummy/app/views/posts/_form.html.erb
-- test/dummy/app/views/posts/edit.html.erb
-- test/dummy/app/views/posts/index.html.erb
-- test/dummy/app/views/posts/new.html.erb
-- test/dummy/app/views/posts/show.html.erb
-- test/dummy/config.ru
-- test/dummy/config/application.rb
-- test/dummy/config/boot.rb
-- test/dummy/config/database.yml
-- test/dummy/config/environment.rb
-- test/dummy/config/environments/development.rb
-- test/dummy/config/environments/production.rb
-- test/dummy/config/environments/test.rb
-- test/dummy/config/initializers/backtrace_silencers.rb
-- test/dummy/config/initializers/devise.rb
-- test/dummy/config/initializers/inflections.rb
-- test/dummy/config/initializers/mime_types.rb
-- test/dummy/config/initializers/secret_token.rb
-- test/dummy/config/initializers/session_store.rb
-- test/dummy/config/initializers/wrap_parameters.rb
-- test/dummy/config/locales/en.yml
-- test/dummy/config/routes.rb
-- test/dummy/db/migrate/20130125101430_create_users.rb
-- test/dummy/db/migrate/20130131092406_add_devise_to_users.rb
-- test/dummy/db/migrate/20130131142320_create_posts.rb
-- test/dummy/db/migrate/20130131160351_devise_otp_add_to_users.rb
-- test/dummy/lib/assets/.gitkeep
-- test/dummy/public/404.html
-- test/dummy/public/422.html
-- test/dummy/public/500.html
-- test/dummy/public/favicon.ico
-- test/dummy/script/rails
-- test/integration/persistence_test.rb
-- test/integration/refresh_test.rb
-- test/integration/sign_in_test.rb
-- test/integration/token_test.rb
-- test/integration_tests_helper.rb
-- test/model_tests_helper.rb
-- test/models/two_factorable_test.rb
-- test/orm/active_record.rb
-- test/orm/mongoid.rb
-- test/support/mongoid.yml
-- test/support/symmetric_encryption.yml
-- test/test_helper.rb
+- spec/dummy/Rakefile
+- spec/dummy/app/assets/images/.keep
+- spec/dummy/app/assets/javascripts/application.js
+- spec/dummy/app/assets/javascripts/channels/.keep
+- spec/dummy/app/assets/stylesheets/application.css
+- spec/dummy/app/controllers/application_controller.rb
+- spec/dummy/app/controllers/concerns/.keep
+- spec/dummy/app/helpers/application_helper.rb
+- spec/dummy/app/models/application_record.rb
+- spec/dummy/app/models/concerns/.keep
+- spec/dummy/app/models/user.rb
+- spec/dummy/app/views/layouts/application.html.erb
+- spec/dummy/app/views/layouts/mailer.text.erb
+- spec/dummy/bin/bundle
+- spec/dummy/bin/rails
+- spec/dummy/bin/rake
+- spec/dummy/bin/setup
+- spec/dummy/bin/update
+- spec/dummy/bin/yarn
+- spec/dummy/config.ru
+- spec/dummy/config/application.rb
+- spec/dummy/config/boot.rb
+- spec/dummy/config/database.yml
+- spec/dummy/config/environment.rb
+- spec/dummy/config/environments/development.rb
+- spec/dummy/config/environments/test.rb
+- spec/dummy/config/initializers/assets.rb
+- spec/dummy/config/initializers/backtrace_silencers.rb
+- spec/dummy/config/initializers/cookies_serializer.rb
+- spec/dummy/config/initializers/devise.rb
+- spec/dummy/config/initializers/filter_parameter_logging.rb
+- spec/dummy/config/initializers/inflections.rb
+- spec/dummy/config/initializers/mime_types.rb
+- spec/dummy/config/initializers/wrap_parameters.rb
+- spec/dummy/config/locales/devise.en.yml
+- spec/dummy/config/locales/devise.two_factor.en.yml
+- spec/dummy/config/locales/en.yml
+- spec/dummy/config/puma.rb
+- spec/dummy/config/routes.rb
+- spec/dummy/config/spring.rb
+- spec/dummy/config/storage.yml
+- spec/dummy/db/migrate/20190311184605_devise_create_users.rb
+- spec/dummy/db/migrate/20190312222952_devise_two_factor_add_to_users.rb
+- spec/dummy/db/schema.rb
+- spec/dummy/lib/assets/.keep
+- spec/dummy/package.json
+- spec/dummy/public/404.html
+- spec/dummy/public/422.html
+- spec/dummy/public/500.html
+- spec/dummy/public/apple-touch-icon-precomposed.png
+- spec/dummy/public/apple-touch-icon.png
+- spec/dummy/public/favicon.ico
+- spec/dummy/storage/.keep
+- spec/models/user_spec.rb
+- spec/spec_helper.rb
+- spec/system/persistence_spec.rb
+- spec/system/refresh_spec.rb
+- spec/system/token_spec.rb
+- spec/system/users_spec.rb
 homepage: http://www.github.com/williamatodd/devise-2fa
 licenses:
 - MIT
@@ -199,65 +287,67 @@ required_rubygems_version: !ruby/object:Gem::Requirement
     - !ruby/object:Gem::Version
       version: '0'
 requirements: []
-rubyforge_project: 
-rubygems_version: 2.6.1
+rubygems_version: 3.0.2
 signing_key: 
 specification_version: 4
 summary: Includes ActiveRecord and Mongoid ORM support
 test_files:
-- test/dummy/README.rdoc
-- test/dummy/Rakefile
-- test/dummy/app/assets/javascripts/application.js
-- test/dummy/app/assets/stylesheets/application.css
-- test/dummy/app/controllers/application_controller.rb
-- test/dummy/app/controllers/posts_controller.rb
-- test/dummy/app/helpers/application_helper.rb
-- test/dummy/app/helpers/posts_helper.rb
-- test/dummy/app/mailers/.gitkeep
-- test/dummy/app/models/post.rb
-- test/dummy/app/models/user.rb
-- test/dummy/app/views/layouts/application.html.erb
-- test/dummy/app/views/posts/_form.html.erb
-- test/dummy/app/views/posts/edit.html.erb
-- test/dummy/app/views/posts/index.html.erb
-- test/dummy/app/views/posts/new.html.erb
-- test/dummy/app/views/posts/show.html.erb
-- test/dummy/config.ru
-- test/dummy/config/application.rb
-- test/dummy/config/boot.rb
-- test/dummy/config/database.yml
-- test/dummy/config/environment.rb
-- test/dummy/config/environments/development.rb
-- test/dummy/config/environments/production.rb
-- test/dummy/config/environments/test.rb
-- test/dummy/config/initializers/backtrace_silencers.rb
-- test/dummy/config/initializers/devise.rb
-- test/dummy/config/initializers/inflections.rb
-- test/dummy/config/initializers/mime_types.rb
-- test/dummy/config/initializers/secret_token.rb
-- test/dummy/config/initializers/session_store.rb
-- test/dummy/config/initializers/wrap_parameters.rb
-- test/dummy/config/locales/en.yml
-- test/dummy/config/routes.rb
-- test/dummy/db/migrate/20130125101430_create_users.rb
-- test/dummy/db/migrate/20130131092406_add_devise_to_users.rb
-- test/dummy/db/migrate/20130131142320_create_posts.rb
-- test/dummy/db/migrate/20130131160351_devise_otp_add_to_users.rb
-- test/dummy/lib/assets/.gitkeep
-- test/dummy/public/404.html
-- test/dummy/public/422.html
-- test/dummy/public/500.html
-- test/dummy/public/favicon.ico
-- test/dummy/script/rails
-- test/integration/persistence_test.rb
-- test/integration/refresh_test.rb
-- test/integration/sign_in_test.rb
-- test/integration/token_test.rb
-- test/integration_tests_helper.rb
-- test/model_tests_helper.rb
-- test/models/two_factorable_test.rb
-- test/orm/active_record.rb
-- test/orm/mongoid.rb
-- test/support/mongoid.yml
-- test/support/symmetric_encryption.yml
-- test/test_helper.rb
+- spec/dummy/Rakefile
+- spec/dummy/app/assets/images/.keep
+- spec/dummy/app/assets/javascripts/application.js
+- spec/dummy/app/assets/javascripts/channels/.keep
+- spec/dummy/app/assets/stylesheets/application.css
+- spec/dummy/app/controllers/application_controller.rb
+- spec/dummy/app/controllers/concerns/.keep
+- spec/dummy/app/helpers/application_helper.rb
+- spec/dummy/app/models/application_record.rb
+- spec/dummy/app/models/concerns/.keep
+- spec/dummy/app/models/user.rb
+- spec/dummy/app/views/layouts/application.html.erb
+- spec/dummy/app/views/layouts/mailer.text.erb
+- spec/dummy/bin/bundle
+- spec/dummy/bin/rails
+- spec/dummy/bin/rake
+- spec/dummy/bin/setup
+- spec/dummy/bin/update
+- spec/dummy/bin/yarn
+- spec/dummy/config.ru
+- spec/dummy/config/application.rb
+- spec/dummy/config/boot.rb
+- spec/dummy/config/database.yml
+- spec/dummy/config/environment.rb
+- spec/dummy/config/environments/development.rb
+- spec/dummy/config/environments/test.rb
+- spec/dummy/config/initializers/assets.rb
+- spec/dummy/config/initializers/backtrace_silencers.rb
+- spec/dummy/config/initializers/cookies_serializer.rb
+- spec/dummy/config/initializers/devise.rb
+- spec/dummy/config/initializers/filter_parameter_logging.rb
+- spec/dummy/config/initializers/inflections.rb
+- spec/dummy/config/initializers/mime_types.rb
+- spec/dummy/config/initializers/wrap_parameters.rb
+- spec/dummy/config/locales/devise.en.yml
+- spec/dummy/config/locales/devise.two_factor.en.yml
+- spec/dummy/config/locales/en.yml
+- spec/dummy/config/puma.rb
+- spec/dummy/config/routes.rb
+- spec/dummy/config/spring.rb
+- spec/dummy/config/storage.yml
+- spec/dummy/db/migrate/20190311184605_devise_create_users.rb
+- spec/dummy/db/migrate/20190312222952_devise_two_factor_add_to_users.rb
+- spec/dummy/db/schema.rb
+- spec/dummy/lib/assets/.keep
+- spec/dummy/package.json
+- spec/dummy/public/404.html
+- spec/dummy/public/422.html
+- spec/dummy/public/500.html
+- spec/dummy/public/apple-touch-icon-precomposed.png
+- spec/dummy/public/apple-touch-icon.png
+- spec/dummy/public/favicon.ico
+- spec/dummy/storage/.keep
+- spec/models/user_spec.rb
+- spec/spec_helper.rb
+- spec/system/persistence_spec.rb
+- spec/system/refresh_spec.rb
+- spec/system/token_spec.rb
+- spec/system/users_spec.rb