devise-api 0.0.0 → 0.1.1

data/lib/devise/api/token.rb

@@ -0,0 +1,88 @@
+# frozen_string_literal: true
+
+require 'active_record'
+
+module Devise
+  module Api
+    class Token < ::ActiveRecord::Base
+      self.table_name = 'devise_api_tokens'
+
+      # associations
+      belongs_to :resource_owner,
+                 polymorphic: true,
+                 optional: false
+      belongs_to :previous_refresh,
+                 class_name: Devise.api.config.base_token_model,
+                 foreign_key: :previous_refresh_token,
+                 primary_key: :refresh_token,
+                 optional: true
+      has_many :refreshes,
+               class_name: Devise.api.config.base_token_model,
+               foreign_key: :previous_refresh_token,
+               primary_key: :refresh_token
+
+      # validations
+      validates :access_token, presence: true, uniqueness: true
+      validates :refresh_token,
+                presence: true,
+                uniqueness: true,
+                if: -> { Devise.api.config.refresh_token.enabled }
+      validates :expires_in,
+                presence: true,
+                numericality: { greater_than: 0 },
+                unless: -> { Devise.api.config.access_token.expires_in_infinite.call(resource_owner) }
+
+      def revoked?
+        revoked_at.present?
+      end
+
+      def active?
+        !inactive?
+      end
+
+      def inactive?
+        revoked? && expired?
+      end
+
+      def expired?
+        return false if Devise.api.config.access_token.expires_in_infinite.call(resource_owner)
+
+        !!(expires_in && Time.now.utc > expires_at)
+      end
+
+      def refresh_token_expired?
+        return false unless Devise.api.config.refresh_token.expires_in_infinite.call(resource_owner)
+
+        Time.now.utc > refresh_token_expires_at
+      end
+
+      def self.generate_uniq_access_token(resource_owner)
+        loop do
+          token = Devise.api.config.access_token.generator.call(resource_owner)
+
+          break token unless Devise.api.config.base_token_model.constantize.exists?(access_token: token)
+        end
+      end
+
+      def self.generate_uniq_refresh_token(resource_owner)
+        return nil unless Devise.api.config.refresh_token.enabled
+
+        loop do
+          token = Devise.api.config.refresh_token.generator.call(resource_owner)
+
+          break token unless Devise.api.config.base_token_model.constantize.exists?(refresh_token: token)
+        end
+      end
+
+      private
+
+      def expires_at
+        created_at + expires_in.seconds
+      end
+
+      def refresh_token_expires_at
+        created_at + Devise.api.config.refresh_token.expires_in.seconds
+      end
+    end
+  end
+end

data/lib/devise/api/version.rb

@@ -2,6 +2,6 @@
 
 module Devise
   module Api
-    VERSION = '0.0.0'
+    VERSION = '0.1.1'
   end
 end

data/lib/devise/api.rb

@@ -1,10 +1,51 @@
 # frozen_string_literal: true
 
+require 'devise'
+require 'active_support/concern'
+require_relative 'api/configuration'
 require_relative 'api/version'
+require_relative 'api/controllers/helpers'
+require_relative 'api/responses/error_response'
+require_relative 'api/responses/token_response'
+require_relative 'api/generators/install_generator'
 
+# rubocop:disable Style/ClassVars
 module Devise
-  module Api
-    class Error < StandardError; end
-    # Your code goes here...
+  mattr_accessor :api
+  @@api = Devise::Api::Configuration.new
+
+  module Models
+    module Api
+      extend ActiveSupport::Concern
+
+      included do
+        has_many :access_tokens,
+                 class_name: Devise.api.config.base_token_model,
+                 dependent: :destroy,
+                 as: :resource_owner
+      end
+
+      class_methods do
+        def supported_devise_modules
+          devise_modules.inquiry
+        end
+      end
+    end
   end
+
+  module Api; end
+
+  add_module :api,
+             strategy: false,
+             controller: :tokens,
+             route: { api: %i[revoke refresh sign_up sign_in info] }
+end
+# rubocop:enable Style/ClassVars
+
+ActiveSupport.on_load(:action_controller) do
+  include Devise::Api::Controllers::Helpers
 end
+
+require_relative 'api/token'
+require_relative 'api/rails/engine'
+require_relative 'api/rails/routes'

metadata

@@ -1,52 +1,119 @@
 --- !ruby/object:Gem::Specification
 name: devise-api
 version: !ruby/object:Gem::Version
-  version: 0.0.0
+  version: 0.1.1
 platform: ruby
 authors:
 - nejdetkadir
 autorequire:
 bindir: exe
 cert_chain: []
-date: 2023-01-08 00:00:00.000000000 Z
+date: 2023-01-14 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
-  name: rails
+  name: devise
   requirement: !ruby/object:Gem::Requirement
     requirements:
     - - ">="
       - !ruby/object:Gem::Version
-        version: 6.0.0
+        version: 4.7.2
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - ">="
       - !ruby/object:Gem::Version
-        version: 6.0.0
+        version: 4.7.2
 - !ruby/object:Gem::Dependency
-  name: devise
+  name: dry-configurable
   requirement: !ruby/object:Gem::Requirement
     requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '1.0'
     - - ">="
       - !ruby/object:Gem::Version
-        version: 4.7.2
+        version: 1.0.1
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '1.0'
     - - ">="
       - !ruby/object:Gem::Version
-        version: 4.7.2
-description: It provides support for access tokens and refresh tokens, which allow
-  you to authenticate API requests and keep the user's session active for a longer
-  period of time.
+        version: 1.0.1
+- !ruby/object:Gem::Dependency
+  name: dry-initializer
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: 3.1.1
+  type: :runtime
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: 3.1.1
+- !ruby/object:Gem::Dependency
+  name: dry-monads
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: 1.6.0
+  type: :runtime
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: 1.6.0
+- !ruby/object:Gem::Dependency
+  name: dry-types
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: 1.7.0
+  type: :runtime
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: 1.7.0
+- !ruby/object:Gem::Dependency
+  name: rails
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: 6.0.0
+  type: :runtime
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: 6.0.0
+description: The devise-api gem is a convenient way to add authentication to your
+  Ruby on Rails application using the devise gem. It provides support for access tokens
+  and refresh tokens, which allow you to authenticate API requests and keep the user's
+  session active for a longer period of time on the client side. It can be installed
+  by adding the gem to your Gemfile, running migrations, and adding the :api module
+  to your devise model. The gem is fully configurable, allowing you to set things
+  like token expiration times and token generators.
 email:
 - nejdetkadir.550@gmail.com
 executables: []
 extensions: []
 extra_rdoc_files: []
 files:
+- ".rspec"
 - ".rubocop.yml"
 - CHANGELOG.md
 - CODE_OF_CONDUCT.md
@@ -55,8 +122,26 @@ files:
 - LICENSE
 - README.md
 - Rakefile
+- app/controllers/devise/api/tokens_controller.rb
+- app/services/devise/api/base_service.rb
+- app/services/devise/api/resource_owner_service/authenticate.rb
+- app/services/devise/api/resource_owner_service/sign_in.rb
+- app/services/devise/api/resource_owner_service/sign_up.rb
+- app/services/devise/api/tokens_service/create.rb
+- app/services/devise/api/tokens_service/refresh.rb
+- app/services/devise/api/tokens_service/revoke.rb
+- config/locales/en.yml
 - devise-api.gemspec
 - lib/devise/api.rb
+- lib/devise/api/configuration.rb
+- lib/devise/api/controllers/helpers.rb
+- lib/devise/api/generators/install_generator.rb
+- lib/devise/api/generators/templates/migration.rb.erb
+- lib/devise/api/rails/engine.rb
+- lib/devise/api/rails/routes.rb
+- lib/devise/api/responses/error_response.rb
+- lib/devise/api/responses/token_response.rb
+- lib/devise/api/token.rb
 - lib/devise/api/version.rb
 - sig/devise/api.rbs
 homepage: https://github.com/nejdetkadir/devise-api
@@ -81,10 +166,14 @@ required_rubygems_version: !ruby/object:Gem::Requirement
     - !ruby/object:Gem::Version
       version: '0'
 requirements: []
-rubygems_version: 3.4.3
+rubygems_version: 3.3.3
 signing_key:
 specification_version: 4
-summary: It provides support for access tokens and refresh tokens, which allow you
-  to authenticate API requests and keep the user's session active for a longer period
-  of time.
+summary: The devise-api gem is a convenient way to add authentication to your Ruby
+  on Rails application using the devise gem. It provides support for access tokens
+  and refresh tokens, which allow you to authenticate API requests and keep the user's
+  session active for a longer period of time on the client side. It can be installed
+  by adding the gem to your Gemfile, running migrations, and adding the :api module
+  to your devise model. The gem is fully configurable, allowing you to set things
+  like token expiration times and token generators.
 test_files: []