devise-passwordless 1.0.1 → 1.0.3

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 37620b7f1717ecebc7a916630c58430fe97f76676c3dfe2e3fb05c037ab10609
-  data.tar.gz: ecd157b06c356f94c4d9e027bde90d6523e17154ba6ec559f24ffb7864323dce
+  metadata.gz: 87feb45c34ca9664c8bd5658e6a4672be4fff2f42cefa63a0b461ac8c0d379bb
+  data.tar.gz: e1b082164084eb153a38e15d2bf89906bbf8aec0e3aa683a60a5e23d1ca811a9
 SHA512:
-  metadata.gz: b28efcfb87f0f5de6e56cb4de25fbf72fa683bb75790a7f34bd60122439e572815486fea408b4abeb2504f7c5550375f2291b8ac5dcf94d955085ec59030f6e5
-  data.tar.gz: df62efa3059f6f2737ca57a91e31fa4c71029e938198fa8fe9fd01bbb1a1032ed0a67f27d7bd593eeb3a6cc6ce2bb38bdd853208c8531ea82088fc70dab8fdf2
+  metadata.gz: 5662b42412c7eb3bcaabb5b38990b1fff94e5e97a45726e9e68542e775d806b4f0b84b0e55a55cfb129284991de878140f977f5f0a9816752dbae10ed28949f3
+  data.tar.gz: a2989bd93174338c3f21293a3606d3d0a9b36104db645260b037c216bdcf7482ef2593590a7a801a59b13e32895c8b1192125c35606f88ce7f33b1c035eaeb05

data/README.md

@@ -119,9 +119,10 @@ config.passwordless_tokenizer = "SignedGlobalIDTokenizer"
 # generate your own secret value with e.g. `rake secret`
 # config.passwordless_secret_key = nil
 
-# When using the :trackable module, set to true to consider magic link tokens
-# generated before the user's current sign in time to be expired. In other words,
-# each time you sign in, all existing magic links will be considered invalid.
+# When using the :trackable module and MessageEncryptorTokenizer, set to true to 
+# consider magic link tokens generated before the user's current sign in time to 
+# be expired. In other words, each time you sign in, all existing magic links 
+# will be considered invalid.
 # config.passwordless_expire_old_tokens_on_sign_in = false
 ```
 
@@ -233,12 +234,12 @@ you can write something like this:
 
 ```ruby
 class ApplicationController < ActionController::Base
-  def after_magic_link_sent_path_for(resource)
-    case resource.class
-    when FooUser
-      happy_path
-    when BarUser
-      sad_path
+  def after_magic_link_sent_path_for(resource_or_scope)
+    case Devise::Mapping.find_scope!(resource_or_scope)
+    when :user
+      some_path
+    when :admin
+      some_other_path
     end
   end
 end
@@ -589,9 +590,38 @@ Other Ruby libraries that offer passwordless authentication:
 * [passwordless](https://github.com/mikker/passwordless)
 * [magic-link](https://github.com/dvanderbeek/magic-link)
 
+## Gem development
+
+### Running tests
+
+To run the set of basic gem tests, do:
+
+```
+$ bundle
+$ bundle exec rake
+```
+
+The more important and more thorough tests utilize a "dummy" Rails application.
+
+To run this full suite of dummy app tests across all supported versions of Ruby and Rails,
+you can use [nektos/act][] to run the same tests that run in our GitHub Workflow CI:
+
+```
+$ act -W .github/workflows/test.yml -P ubuntu-latest=ghcr.io/catthehacker/ubuntu:act-latest --no-cache-server
+```
+
+To run only against specific versions of Ruby or Rails, you can use the `--matrix` flag of `act`:
+
+```
+$ act -W .github/workflows/test.yml -P ubuntu-latest=ghcr.io/catthehacker/ubuntu:act-latest --no-cache-server --matrix ruby-version:3.2 --matrix rails-version:7 --matrix rails-version:6.1
+```
+
+The above example will only run the tests for Rails 7 and Rails 6.1 using Ruby 3.2.
+
 ## License
 
 The gem is available as open source under the terms of the [MIT License](https://opensource.org/licenses/MIT).
 
 [Devise]: https://github.com/heartcombo/devise
 [devise-i18n]: https://github.com/heartcombo/devise#i18n
+[nektos/act]: https://github.com/nektos/act

data/app/controllers/devise/passwordless/sessions_controller.rb

@@ -1,7 +1,7 @@
 class Devise::Passwordless::SessionsController < Devise::SessionsController
   def create
-    if (self.resource = resource_class.find_by(email: create_params[:email]))
-      resource.send_magic_link(remember_me: create_params[:remember_me])
+    if (self.resource = resource_class.find_for_authentication(email: create_params[:email]))
+      send_magic_link(resource)
       if Devise.paranoid
         set_flash_message!(:notice, :magic_link_sent_paranoid)
       else
@@ -23,6 +23,10 @@ class Devise::Passwordless::SessionsController < Devise::SessionsController
 
   protected
 
+  def send_magic_link(resource)
+    resource.send_magic_link(remember_me: create_params[:remember_me])
+  end
+
   def translation_scope
     if action_name == "create"
       "devise.passwordless"

data/app/mailers/devise/passwordless/mailer.rb

@@ -7,6 +7,7 @@ if defined?(ActionMailer)
         def magic_link(record, token, remember_me, opts = {})
           @token = token
           @remember_me = remember_me
+          @opts = opts
           devise_mail(record, :magic_link, opts)
         end
       end

data/lib/devise/hooks/magic_link_authenticatable.rb

@@ -2,7 +2,7 @@
 
 # Deny user access when magic link authentication is disabled
 Warden::Manager.after_set_user do |record, warden, options|
-  if record && record.respond_to?(:active_for_magic_link_authentication?) && !record.active_for_magic_link_authentication?
+  if record && record.respond_to?(:active_for_magic_link_authentication?) && !record.active_for_magic_link_authentication? && warden.winning_strategy.is_a?(Devise::Strategies::MagicLinkAuthenticatable)
     scope = options[:scope]
     warden.logout(scope)
     throw :warden, scope: scope, message: record.magic_link_inactive_message

data/lib/devise/passwordless/version.rb

@@ -2,6 +2,6 @@
 
 module Devise
   module Passwordless
-    VERSION = "1.0.1"
+    VERSION = "1.0.3"
   end
 end

data/lib/devise/passwordless.rb

@@ -1,3 +1,4 @@
+require "devise"
 require "devise/passwordless/version"
 require "devise/monkeypatch"
 require "devise/passwordless/rails" if defined?(Rails::Engine)

data/lib/generators/devise/passwordless/install_generator.rb

@@ -33,9 +33,10 @@ module Devise::Passwordless
           # generate your own secret value with e.g. `rake secret`
           # config.passwordless_secret_key = nil
 
-          # When using the :trackable module, set to true to consider magic link tokens
-          # generated before the user's current sign in time to be expired. In other words,
-          # each time you sign in, all existing magic links will be considered invalid.
+          # When using the :trackable module and MessageEncryptorTokenizer, set to true to
+          # consider magic link tokens generated before the user's current sign in time to
+          # be expired. In other words, each time you sign in, all existing magic links
+          # will be considered invalid.
           # config.passwordless_expire_old_tokens_on_sign_in = false
         CONFIG
         end

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: devise-passwordless
 version: !ruby/object:Gem::Version
-  version: 1.0.1
+  version: 1.0.3
 platform: ruby
 authors:
 - Abe Voelker
 autorequire: 
 bindir: bin
 cert_chain: []
-date: 2023-09-18 00:00:00.000000000 Z
+date: 2024-05-01 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: devise
@@ -101,7 +101,7 @@ required_rubygems_version: !ruby/object:Gem::Requirement
     - !ruby/object:Gem::Version
       version: '0'
 requirements: []
-rubygems_version: 3.4.10
+rubygems_version: 3.4.19
 signing_key: 
 specification_version: 4
 summary: Passwordless (email-only) login strategy for Devise