devise-passwordless 1.0.1 → 1.0.2

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 37620b7f1717ecebc7a916630c58430fe97f76676c3dfe2e3fb05c037ab10609
-  data.tar.gz: ecd157b06c356f94c4d9e027bde90d6523e17154ba6ec559f24ffb7864323dce
+  metadata.gz: 897ecbae9b1eab423447003362253109504478955ae120b2fb81602e78d83d0a
+  data.tar.gz: 892716d7fe7fda88cb153ed9eb561b47272081e066f34720a3a567812c653435
 SHA512:
-  metadata.gz: b28efcfb87f0f5de6e56cb4de25fbf72fa683bb75790a7f34bd60122439e572815486fea408b4abeb2504f7c5550375f2291b8ac5dcf94d955085ec59030f6e5
-  data.tar.gz: df62efa3059f6f2737ca57a91e31fa4c71029e938198fa8fe9fd01bbb1a1032ed0a67f27d7bd593eeb3a6cc6ce2bb38bdd853208c8531ea82088fc70dab8fdf2
+  metadata.gz: 4cd0fe91740b1fdd19b68de208ed790c46336e87ead4515ba71775e214edd4b25ee46ca62e311f6573e93be44f7ef644811cf5ed9b66081a24eb76690db7dde7
+  data.tar.gz: 44bb12db02ea4d0fcf9867edbce48a93a5f836df0e15ec89aa2fd71a9b5fd9070d42dc8300b7a9c6ab5251bad68a95676997667cf0c0b33a422181262b21fc78

data/README.md

@@ -119,9 +119,10 @@ config.passwordless_tokenizer = "SignedGlobalIDTokenizer"
 # generate your own secret value with e.g. `rake secret`
 # config.passwordless_secret_key = nil
 
-# When using the :trackable module, set to true to consider magic link tokens
-# generated before the user's current sign in time to be expired. In other words,
-# each time you sign in, all existing magic links will be considered invalid.
+# When using the :trackable module and MessageEncryptorTokenizer, set to true to 
+# consider magic link tokens generated before the user's current sign in time to 
+# be expired. In other words, each time you sign in, all existing magic links 
+# will be considered invalid.
 # config.passwordless_expire_old_tokens_on_sign_in = false
 ```
 
@@ -233,12 +234,12 @@ you can write something like this:
 
 ```ruby
 class ApplicationController < ActionController::Base
-  def after_magic_link_sent_path_for(resource)
-    case resource.class
-    when FooUser
-      happy_path
-    when BarUser
-      sad_path
+  def after_magic_link_sent_path_for(resource_or_scope)
+    case Devise::Mapping.find_scope!(resource_or_scope)
+    when :user
+      some_path
+    when :admin
+      some_other_path
     end
   end
 end

data/app/mailers/devise/passwordless/mailer.rb

@@ -7,6 +7,7 @@ if defined?(ActionMailer)
         def magic_link(record, token, remember_me, opts = {})
           @token = token
           @remember_me = remember_me
+          @opts = opts
           devise_mail(record, :magic_link, opts)
         end
       end

data/lib/devise/hooks/magic_link_authenticatable.rb

@@ -2,7 +2,7 @@
 
 # Deny user access when magic link authentication is disabled
 Warden::Manager.after_set_user do |record, warden, options|
-  if record && record.respond_to?(:active_for_magic_link_authentication?) && !record.active_for_magic_link_authentication?
+  if record && record.respond_to?(:active_for_magic_link_authentication?) && !record.active_for_magic_link_authentication? && warden.winning_strategy.is_a?(Devise::Strategies::MagicLinkAuthenticatable)
     scope = options[:scope]
     warden.logout(scope)
     throw :warden, scope: scope, message: record.magic_link_inactive_message

data/lib/devise/passwordless/version.rb

@@ -2,6 +2,6 @@
 
 module Devise
   module Passwordless
-    VERSION = "1.0.1"
+    VERSION = "1.0.2"
   end
 end

data/lib/generators/devise/passwordless/install_generator.rb

@@ -33,9 +33,10 @@ module Devise::Passwordless
           # generate your own secret value with e.g. `rake secret`
           # config.passwordless_secret_key = nil
 
-          # When using the :trackable module, set to true to consider magic link tokens
-          # generated before the user's current sign in time to be expired. In other words,
-          # each time you sign in, all existing magic links will be considered invalid.
+          # When using the :trackable module and MessageEncryptorTokenizer, set to true to
+          # consider magic link tokens generated before the user's current sign in time to
+          # be expired. In other words, each time you sign in, all existing magic links
+          # will be considered invalid.
           # config.passwordless_expire_old_tokens_on_sign_in = false
         CONFIG
         end

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: devise-passwordless
 version: !ruby/object:Gem::Version
-  version: 1.0.1
+  version: 1.0.2
 platform: ruby
 authors:
 - Abe Voelker
 autorequire: 
 bindir: bin
 cert_chain: []
-date: 2023-09-18 00:00:00.000000000 Z
+date: 2024-04-27 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: devise
@@ -101,7 +101,7 @@ required_rubygems_version: !ruby/object:Gem::Requirement
     - !ruby/object:Gem::Version
       version: '0'
 requirements: []
-rubygems_version: 3.4.10
+rubygems_version: 3.4.19
 signing_key: 
 specification_version: 4
 summary: Passwordless (email-only) login strategy for Devise