devise-api 0.1.3 → 0.2.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 7d47e2be72c7d15e0c0de4535943a208d8d37e7d2b801de167ccf5f5c8e3d08e
-  data.tar.gz: 87d42ee2c7784370789032608d0caa634f5a703c7c4cbb15139c82d34ca26664
+  metadata.gz: 2d86e2276841e4ca3ae7497278542d686da38368f5f5cdf76629abd463c7976f
+  data.tar.gz: 3f33438f2a503b0f1bd510e6020c0d88f61a82715aff8b701a1872a4901ffb75
 SHA512:
-  metadata.gz: 6b6045dbf6c5906a5ef70de320d39df12f79b1c7599ce91851c98e61be2449959b0f7e263ad3a795d21070d56b9a84944d4799e1a5156fee8ae90039f8c9642e
-  data.tar.gz: b92e03c4fdb2d18eb3d3cf1ca690782e9f9149362b27b4535ccae3c739dbae3e14550b9e5d4535da6a3aa7658ee25936b59e49c937a3093b90b88d9477ca0f13
+  metadata.gz: acea2091463ddb32d14df2c6b6aaf88e55549796b79ba35855ffdd08f3f78e8a5e5d9f305f48a855a2f3d17aa2cee2c8e7fce7ce07efda222af9de785a9f57cf
+  data.tar.gz: 8cecc648a297705d7d7f82420aa48fd6f4ed7d8899ba721cf0002cbae34f9f1e3fae5032877a4efa826f609c50592f894f9407adeeed6a12c7ca856b2dd9c5d2

data/Gemfile.lock

@@ -259,6 +259,7 @@ GEM
 PLATFORMS
   arm64-darwin-21
   arm64-darwin-22
+  arm64-darwin-23
 
 DEPENDENCIES
   awesome_print

data/README.md

@@ -93,6 +93,7 @@ Devise.setup do |config|
 
     # Sign up
     api.sign_up.enabled = true
+    api.sign_up.extra_fields = []
 
     # Authorization
     api.authorization.key = 'Authorization'
@@ -116,8 +117,8 @@ Devise.setup do |config|
     # Before callbacks
     api.before_sign_in = ->(_params, _request, _resource_class) { }
     api.before_sign_up = ->(_params, _request, _resource_class) { }
-    api.before_refresh = ->(_params, _request, _resource_class) { }
-    api.before_revoke = ->(_params, _request, _resource_class) { }
+    api.before_refresh = ->(_token_model, _request) { }
+    api.before_revoke = ->(_token_model, _request) { }
   end
 end
 ```
@@ -157,10 +158,12 @@ module Devise::Api::Responses::TokenResponseDecorator
 end
 ```
 
-Then you need to prepend your decorator to the response class. For example:
+Then you need to load and prepend your decorator to the response class. For example:
 
 ```ruby
 # config/initializers/devise.rb
+require 'devise/api/responses/token_response_decorator' # Either do this or autoload the lib directory
+
 Devise.setup do |config|
 end
 

data/app/controllers/devise/api/tokens_controller.rb

@@ -4,6 +4,7 @@
 module Devise
   module Api
     class TokensController < Devise.api.config.base_controller.constantize
+      wrap_parameters false
       skip_before_action :verify_authenticity_token, raise: false
       before_action :authenticate_devise_api_token!, only: %i[info]
 
@@ -122,7 +123,7 @@ module Devise
           error_response = Devise::Api::Responses::ErrorResponse.new(request, error: :revoked_token,
                                                                               resource_class: resource_class)
 
-          render json: error_response.body, status: error_response.status
+          return render json: error_response.body, status: error_response.status
         end
 
         Devise.api.config.before_refresh.call(current_devise_api_refresh_token, request)
@@ -149,7 +150,7 @@ module Devise
       private
 
       def sign_up_params
-        params.permit(*resource_class.authentication_keys,
+        params.permit(*Devise.api.config.sign_up.extra_fields, *resource_class.authentication_keys,
                       *::Devise::ParameterSanitizer::DEFAULT_PERMITTED_ATTRIBUTES[:sign_up]).to_h
       end
 

data/lib/devise/api/configuration.rb

@@ -22,6 +22,7 @@ module Devise
 
       setting :sign_up, reader: true do
         setting :enabled, default: true, reader: true
+        setting :extra_fields, default: [], reader: true
       end
 
       setting :authorization, reader: true do

data/lib/devise/api/responses/token_response.rb

@@ -41,15 +41,19 @@ module Devise
             refresh_token: Devise.api.config.refresh_token.enabled ? token.refresh_token : nil,
             expires_in: token.expires_in,
             token_type: ::Devise.api.config.authorization.scheme,
-            resource_owner: {
-              id: resource_owner.id,
-              email: resource_owner.email,
-              created_at: resource_owner.created_at,
-              updated_at: resource_owner.updated_at
-            }
+            resource_owner: default_resource_owner
           }.compact
         end
 
+        def default_resource_owner
+          keys_to_extract = %i[id email created_at updated_at]
+          if Devise.api.config.sign_up.extra_fields.present?
+            keys_to_extract |= Devise.api.config.sign_up.extra_fields.map(&:to_sym)
+          end
+
+          resource_owner.slice(*keys_to_extract)
+        end
+
         def status
           return :created if sign_up_action?
           return :no_content if revoke_action?

data/lib/devise/api/version.rb

@@ -2,6 +2,6 @@
 
 module Devise
   module Api
-    VERSION = '0.1.3'
+    VERSION = '0.2.0'
   end
 end

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: devise-api
 version: !ruby/object:Gem::Version
-  version: 0.1.3
+  version: 0.2.0
 platform: ruby
 authors:
 - nejdetkadir
 autorequire:
 bindir: exe
 cert_chain: []
-date: 2023-08-08 00:00:00.000000000 Z
+date: 2024-09-27 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: devise
@@ -166,7 +166,7 @@ required_rubygems_version: !ruby/object:Gem::Requirement
     - !ruby/object:Gem::Version
       version: '0'
 requirements: []
-rubygems_version: 3.4.12
+rubygems_version: 3.5.18
 signing_key:
 specification_version: 4
 summary: The devise-api gem is a convenient way to add authentication to your Ruby