devise-twilio-verify 0.1.0

data/app/controllers/devise/devise_twilio_verify_controller.rb

@@ -0,0 +1,183 @@
+class Devise::DeviseTwilioVerifyController < DeviseController
+  prepend_before_action :find_resource, :only => [
+    :request_sms
+  ]
+  prepend_before_action :find_resource_and_require_password_checked, :only => [
+    :GET_verify_twilio_verify, :POST_verify_twilio_verify
+  ]
+
+  prepend_before_action :check_resource_not_twilio_verify_enabled, :only => [
+    :GET_verify_twilio_verify_installation, :POST_verify_twilio_verify_installation
+  ]
+
+  prepend_before_action :authenticate_scope!, :only => [
+    :GET_enable_twilio_verify, :POST_enable_twilio_verify, :GET_verify_twilio_verify_installation,
+    :POST_verify_twilio_verify_installation, :POST_disable_twilio_verify
+  ]
+
+  include Devise::Controllers::Helpers
+
+  def GET_verify_twilio_verify
+    render :verify_twilio_verify
+  end
+
+  # verify 2fa
+  def POST_verify_twilio_verify
+    if @resource.mobile_phone.blank? || params[:token].blank?
+      return handle_invalid_token :verify_twilio_verify, :invalid_token
+    end
+
+    begin
+      verification_check = TwilioVerifyService.verify_sms_token(@resource.mobile_phone, params[:token])
+      verification_check = verification_check.status == 'approved'
+    rescue Twilio::REST::RestError
+      verification_check = false
+    end
+
+    # Hack to reproduce authy functionality of being able to verify 2FA via SMS or TOTP
+    # not ideal as there could be network delays, but there is currently no alternative
+    if !verification_check && @resource.twilio_totp_factor_sid.present?
+      verification_check = TwilioVerifyService.verify_totp_token(@resource, params[:token])
+      verification_check = verification_check.status == 'approved'
+    end
+
+    if verification_check
+      remember_device(@resource.id) if params[:remember_device].to_i == 1
+      remember_user
+      record_twilio_verify_authentication
+      respond_with resource, :location => after_sign_in_path_for(@resource)
+    else
+      handle_invalid_token :verify_twilio_verify, :invalid_token
+    end
+  end
+
+  # enable 2fa
+  def POST_enable_twilio_verify
+    if resource.update(twilio_verify_enabled: true)
+      redirect_to [resource_name, :verify_twilio_verify_installation] and return
+    else
+      set_flash_message(:error, :not_enabled)
+      redirect_to after_twilio_verify_enabled_path_for(resource) and return
+    end
+  end
+
+  # Disable 2FA
+  def POST_disable_twilio_verify
+    resource.assign_attributes(twilio_verify_enabled: false)
+    resource.save(:validate => false)
+    redirect_to after_twilio_verify_disabled_path_for(resource)
+  end
+
+  def GET_verify_twilio_verify_installation
+    if resource_class.twilio_verify_enable_qr_code
+      #response = Authy::API.request_qr_code(id: resource.authy_id)
+      #@twilio_verify_qr_code = response.qr_code
+    end
+    render :verify_twilio_verify_installation
+  end
+
+  def POST_verify_twilio_verify_installation
+    if @resource.mobile_phone.blank? || params[:token].blank?
+      return handle_invalid_token :verify_twilio_verify_installation, :not_enabled
+    end
+
+    verification_check = TwilioVerifyService.verify_sms_token(@resource.mobile_phone, params[:token])
+
+    self.resource.twilio_verify_enabled = token.ok?
+
+    if token.ok? && self.resource.save
+      remember_device(@resource.id) if params[:remember_device].to_i == 1
+      record_twilio_verify_authentication
+      set_flash_message(:notice, :enabled)
+      redirect_to after_twilio_verify_verified_path_for(resource)
+    else
+      if resource_class.twilio_verify_enable_qr_code
+        #response = Authy::API.request_qr_code(id: resource.authy_id)
+        #@twilio_verify_qr_code = response.qr_code
+      end
+      handle_invalid_token :verify_twilio_verify_installation, :not_enabled
+    end
+  end
+
+  def request_sms
+    if @resource.blank? || @resource.mobile_phone.blank?
+      render :json => {:sent => false, :message => "User couldn't be found."}
+      return
+    end
+
+    verification = TwilioVerifyService.send_sms_token(@resource.mobile_phone)
+    success = verification.status == 'pending'
+
+    render json: {
+      sent: success,
+      message: success ? 'Token was sent.' : 'Token was not sent, please try again.'
+    }
+  end
+
+  private
+
+  def authenticate_scope!
+    send(:"authenticate_#{resource_name}!", :force => true)
+    self.resource = send("current_#{resource_name}")
+    @resource = resource
+  end
+
+  def find_resource
+    @resource = send("current_#{resource_name}")
+
+    if @resource.nil?
+      @resource = resource_class.find_by_id(session["#{resource_name}_id"])
+    end
+  end
+
+  def find_resource_and_require_password_checked
+    find_resource
+
+    if @resource.nil? || session[:"#{resource_name}_password_checked"].to_s != "true"
+      redirect_to invalid_resource_path
+    end
+  end
+
+  def check_resource_not_twilio_verify_enabled
+    if resource.twilio_verify_enabled
+      redirect_to after_twilio_verify_verified_path_for(resource)
+    end
+  end
+
+  protected
+
+  def after_twilio_verify_enabled_path_for(resource)
+    root_path
+  end
+
+  def after_twilio_verify_verified_path_for(resource)
+    after_twilio_verify_enabled_path_for(resource)
+  end
+
+  def after_twilio_verify_disabled_path_for(resource)
+    root_path
+  end
+
+  def invalid_resource_path
+    root_path
+  end
+
+  def handle_invalid_token(view, error_message)
+    if @resource.respond_to?(:invalid_twilio_verify_attempt!) && @resource.invalid_twilio_verify_attempt!
+      after_account_is_locked
+    else
+      set_flash_message(:error, error_message)
+      render view
+    end
+  end
+
+  def after_account_is_locked
+    sign_out_and_redirect @resource
+  end
+
+  def remember_user
+    if session.delete("#{resource_name}_remember_me") == true && @resource.respond_to?(:remember_me=)
+      @resource.remember_me = true
+    end
+  end
+end

data/app/controllers/devise_twilio_verify/passwords_controller.rb

@@ -0,0 +1,30 @@
+class DeviseTwilioVerify::PasswordsController < Devise::PasswordsController
+  ##
+  # In the passwords controller a user can update their password using a
+  # recovery token. If `Devise.sign_in_after_reset_password` is `true` then the
+  # user is signed in immediately with the
+  # `Devise::Controllers::SignInOut#sign_in` method. However, if the user has
+  # 2FA enabled they should enter their second factor before they are signed in.
+  #
+  # This method overrides `Devise::Controllers::SignInOut#sign_in` but only
+  # within the `Devise::PasswordsController`. If the user needs to verify 2FA
+  # then `sign_in` returns `true`. This short circuits the method before it can
+  # call `warden.set_user` and log the user in.
+  #
+  # The user is redirected to `after_resetting_password_path_for(user)` at which
+  # point, since the user is not logged in, redirects again to sign in.
+  #
+  # This doesn't retain the expected behaviour of
+  # `Devise.sign_in_after_reset_password`, but is forgivable because this
+  # shouldn't be an avenue to bypass 2FA.
+  def sign_in(resource_or_scope, *args)
+    resource = args.last || resource_or_scope
+
+    if resource.respond_to?(:with_twilio_verify_authentication?) && resource.with_twilio_verify_authentication?(request)
+      # Do nothing. Because we need verify the 2FA
+      true
+    else
+      super
+    end
+  end
+end

data/app/services/twilio_verify_service.rb

@@ -0,0 +1,66 @@
+class TwilioVerifyService
+  attr_reader :twilio_client, :twilio_account_sid, :twilio_auth_token, :twilio_verify_service_sid
+
+  def self.send_sms_token(phone_number)
+    new.twilio_verify_service.verifications.create(to: e164_format(phone_number), channel: 'sms')
+  end
+
+  def self.verify_sms_token(phone_number, token)
+    new.twilio_verify_service.verification_checks.create(to: e164_format(phone_number), code: token)
+  end
+
+  def self.verify_totp_token(user, token)
+    new.twilio_verify_service_v2
+      .entities([Rails.env, user.id].join('-'))
+      .challenges
+      .create(auth_payload: token, factor_sid: user.twilio_totp_factor_sid)
+  end
+
+  def self.setup_totp_service(user)
+    new_factor = new.twilio_verify_service_v2
+      .entities([Rails.env, user.id].join('-'))
+      .new_factors
+      .create(friendly_name: user.to_s, factor_type: 'totp')
+
+    user.update(twilio_totp_factor_sid: new_factor.sid)
+
+    # Now in your app, take the new_factor.binding.uri
+    # and generate a qr code to present to the user to scan to add the app to their authenticator app
+    new_factor
+  end
+
+  def self.register_totp_service(user, token)
+    # After user adds the app to their authenticator app, register the user by having them confirm a token
+    # if this returns factor.status == 'verified', the user has been properly setup
+    new.twilio_verify_service_v2
+      .entities([Rails.env, user.id].join('-'))
+      .factors(user.twilio_totp_factor_sid)
+      .update(auth_payload: token)
+  end
+
+  def self.e164_format(phone_number)
+    "+1#{phone_number.gsub(/[^0-9a-z\\s]/i, '')}"
+  end
+
+  def initialize
+    @twilio_account_sid = Rails.application.credentials.twilio_account_sid || ENV['TWILIO_ACCOUNT_SID']
+    @twilio_auth_token = Rails.application.credentials.twilio_auth_token || ENV['TWILIO_AUTH_TOKEN']
+    @twilio_verify_service_sid = Rails.application.credentials.twilio_verify_service_sid || ENV['TWILIO_VERIFY_SERVICE_SID']
+
+    raise 'Missing Twilio credentials' unless @twilio_account_sid && @twilio_auth_token && @twilio_verify_service_sid
+
+    @twilio_client = Twilio::REST::Client.new(@twilio_account_sid, @twilio_auth_token)
+  end
+
+  def twilio_verify_service
+    twilio_client.verify.services(twilio_verify_service_sid)
+  end
+
+  def twilio_verify_service_v2
+    twilio_client.verify.v2.services(twilio_verify_service_sid)
+  end
+
+  def e164_format(phone_number)
+    self.class.e164_format(phone_number)
+  end
+end

data/app/views/devise/enable_twilio_verify.html.erb

@@ -0,0 +1,7 @@
+<h2><%= I18n.t('twilio_verify_register_title', scope: 'devise') %></h2>
+
+<%= enable_twilio_verify_form do %>
+  <%= text_field_tag :country_code, '', :autocomplete => :off, :placeholder => I18n.t('devise.country'), :id => "twilio-verify-countries"%>
+  <%= text_field_tag :cellphone, '', :autocomplete => :off, :placeholder => I18n.t('devise.cellphone'), :id => "twilio-verify-cellphone"%>
+  <p><%= submit_tag I18n.t('enable_twilio_verify', scope: 'devise') %></p>
+<% end %>

data/app/views/devise/enable_twilio_verify.html.haml

@@ -0,0 +1,5 @@
+%h2= I18n.t('twilio_verify_register_title', scope: 'devise')
+= enable_twilio_verify_form do
+  = text_field_tag :country_code, '', :autocomplete => :off, :placeholder => I18n.t('devise.country'), :id => "twilio-verify-countries"
+  = text_field_tag :cellphone, '', :autocomplete => :off, :placeholder => I18n.t('devise.cellphone'), :id => "twilio-verify-cellphone"
+  %p= submit_tag I18n.t('enable_twilio_verify', scope: 'devise')

data/app/views/devise/verify_twilio_verify.html.erb

@@ -0,0 +1,16 @@
+<h2>
+  <%= I18n.t('submit_token_title', scope: 'devise') %>
+</h2>
+
+<%= verify_twilio_verify_form do %>
+  <legend><%= I18n.t('submit_token_title', scope: 'devise') %></legend>
+  <%= label_tag 'twilio-verify-token' %>
+  <%= text_field_tag :token, "", :autocomplete => "one-time-code", :inputmode => "numeric", :pattern => "[0-9]*", :id => 'twilio-verify-token' %>
+  <label>
+    <%= check_box_tag :remember_device %>
+    <span><%= I18n.t('remember_device', scope: 'devise') %></span>
+  </label>
+
+  <%= twilio_verify_request_sms_link %>
+  <%= submit_tag I18n.t('submit_token', scope: 'devise'), :class => 'btn' %>
+<% end %>

data/app/views/devise/verify_twilio_verify.html.haml

@@ -0,0 +1,13 @@
+%h2= I18n.t('twilio_verify_register_title', scope: 'devise')
+
+= verify_twilio_verify_form do
+  %legend= I18n.t('submit_token_title', scope: 'devise')
+  = hidden_field_tag :"#{resource_name}_id", @resource.id
+  = label_tag 'twilio-verify-token'
+  = text_field_tag :token, "", :autocomplete => "one-time-code", :inputmode => "numeric", :pattern => "[0-9]*", :id => 'twilio-verify-token'
+  %label
+    = check_box_tag :remember_device
+    %span= I18n.t('remember_device', scope: 'devise')
+
+  = twilio_verify_request_sms_link
+  = submit_tag I18n.t('submit_token', scope: 'devise'), :class => 'btn'

data/app/views/devise/verify_twilio_verify_installation.html.erb

@@ -0,0 +1,18 @@
+<h2><%= I18n.t('twilio_verify_verify_installation_title', scope: 'devise') %></h2>
+
+<% if @twilio_verify_qr_code %>
+  <%= image_tag @twilio_verify_qr_code, :size => '256x256', :alt => I18n.t('twilio_verify_qr_code_alt', scope: 'devise') %>
+  <p><%= I18n.t('twilio_verify_qr_code_instructions', scope: 'devise') %></p>
+<% end %>
+
+<%= verify_twilio_verify_installation_form do %>
+  <legend><%= I18n.t('submit_token_title', scope: 'devise') %></legend>
+  <%= label_tag :token %>
+  <%= text_field_tag :token, "", :autocomplete => "one-time-code", :inputmode => "numeric", :pattern => "[0-9]*", :id => 'twilio-verify-token' %>
+  <label>
+    <%= check_box_tag :remember_device %>
+    <span><%= I18n.t('remember_device', scope: 'devise') %></span>
+  </label>
+  <%= twilio_verify_request_sms_link %>
+  <%= submit_tag I18n.t('enable_my_account', scope: 'devise'), :class => 'btn' %>
+<% end %>

data/app/views/devise/verify_twilio_verify_installation.html.haml

@@ -0,0 +1,16 @@
+%h2= I18n.t('twilio_verify_verify_installation_title', scope: 'devise')
+
+- if @twilio_verify_qr_code
+  = image_tag @twilio_verify_qr_code, :size => '256x256', :alt => I18n.t('twilio_verify_qr_code_alt', scope: 'devise')
+  %p= I18n.t('twilio_verify_qr_code_instructions', scope: 'devise')
+
+= verify_twilio_verify_installation_form do
+  %legend= I18n.t('submit_token_title', scope: 'devise')
+  = label_tag :token
+  = text_field_tag :token, "", :autocomplete => "one-time-code", :inputmode => "numeric", :pattern => "[0-9]*", :id => 'twilio-verify-token'
+  %label
+    = check_box_tag :remember_device
+    %span= I18n.t('remember_device', scope: 'devise')
+  = twilio_verify_request_sms_link
+  = submit_tag I18n.t('enable_my_account', scope: 'devise'), :class => 'btn'
+

data/config/locales/en.yml

@@ -0,0 +1,27 @@
+en:
+  devise:
+    submit_token: 'Check Token'
+    submit_token_title: 'Please enter your auth token:'
+    twilio_verify_register_title: 'Enable Two factor authentication'
+    enable_twilio_verify: 'Enable'
+    cellphone: 'Enter your cellphone'
+    country: 'Enter your country'
+    request_sms: 'Request SMS'
+    remember_device: 'Remember Device'
+    request_to_login: 'Request to Login'
+
+    twilio_verify_verify_installation_title: 'Verify your account'
+    enable_my_account: 'Enable my account'
+
+    twilio_verify_qr_code_alt: 'QR code for scanning with your authenticator app.'
+    twilio_verify_qr_code_instructions: 'Scan this QR code with your authenticator application and enter the code below.'
+
+    devise_twilio_verify:
+      user:
+        enabled: 'Two factor authentication was enabled'
+        not_enabled: 'Something went wrong while enabling two factor authentication'
+        disabled: 'Two factor authentication was disabled'
+        not_disabled: 'Something went wrong while disabling two factor authentication'
+        signed_in: 'Signed in with two factor authentication successfully.'
+        already_enabled: 'Two factor authentication is already enabled.'
+        invalid_token: 'The entered token is invalid'

data/config.ru

@@ -0,0 +1,9 @@
+# frozen_string_literal: true
+
+require "rubygems"
+require "bundler"
+
+Bundler.require :default, :development
+
+Combustion.initialize! :all
+run Combustion::Application

data/devise-twilio-verify.gemspec

@@ -0,0 +1,49 @@
+# frozen_string_literal: true
+
+lib = File.expand_path("../lib", __FILE__)
+$LOAD_PATH.unshift(lib) unless $LOAD_PATH.include?(lib)
+require "devise-twilio-verify/version"
+
+Gem::Specification.new do |spec|
+  spec.name          = "devise-twilio-verify"
+  spec.version       = DeviseTwilioVerify::VERSION
+  spec.authors       = ["Jay Wolff"]
+
+  spec.summary       = %q{Twilio Verify plugin to add two factor authentication to Devise.}
+  spec.description   = %q{Twilio Verify plugin to add two factor authentication to Devise. This gem is meant to make migrating from authy to twilio verify as simple as possible, please see the README for details.}
+  spec.homepage      = "https://github.com/jayywolff/twilio-verify-devise"
+  spec.license       = "MIT"
+
+  spec.metadata      = {
+    "bug_tracker_uri"   => "https://github.com/jayywolff/twilio-verify-devise/issues",
+    "change_log_uri"    => "https://github.com/jayywolff/twilio-verify-devise/blob/master/CHANGELOG.md",
+    "documentation_uri" => "https://github.com/jayywolff/twilio-verify-devise",
+    "homepage_uri"      => "https://github.com/jayywolff/twilio-verify-devise",
+    "source_code_uri"   => "https://github.com/jayywolff/twilio-verify-devise"
+  }
+
+  spec.files         = `git ls-files -z`.split("\x0").reject do |f|
+    f.match(%r{^(test|spec|features)/})
+  end
+  spec.require_paths = ["lib"]
+
+  spec.add_dependency "devise", ">= 4.0.0"
+  spec.add_dependency "twilio-ruby", "~> 5.74"
+
+  spec.add_development_dependency "appraisal", "~> 2.2"
+  spec.add_development_dependency "bundler", ">= 1.16"
+  spec.add_development_dependency "rake"
+  spec.add_development_dependency "combustion", "~> 1.1"
+  spec.add_development_dependency "rspec", "~> 3.0"
+  spec.add_development_dependency "rspec-rails"
+  spec.add_development_dependency "rails-controller-testing", "~> 1.0"
+  spec.add_development_dependency "yard", "~> 0.9.11"
+  spec.add_development_dependency "rdoc", "~> 4.3.0"
+  spec.add_development_dependency "simplecov", "~> 0.17.1"
+  spec.add_development_dependency "webmock", "~> 3.11.0"
+  spec.add_development_dependency "rails", ">= 5"
+  spec.add_development_dependency "sqlite3"
+  spec.add_development_dependency "generator_spec"
+  spec.add_development_dependency "database_cleaner", "~> 1.7"
+  spec.add_development_dependency "factory_bot_rails", "~> 5.1.1"
+end

data/gemfiles/.bundle/config

@@ -0,0 +1,2 @@
+---
+BUNDLE_RETRY: "1"

data/gemfiles/rails_5_2.gemfile

@@ -0,0 +1,14 @@
+# This file was generated by Appraisal
+
+source "https://rubygems.org"
+
+gem "rails", "~> 5.2.0"
+gem "sqlite3", "~> 1.3.13"
+
+group :development, :test do
+  gem "factory_girl_rails", require: false
+  gem "rspec-rails", "~>4.0.0.beta3", require: false
+  gem "database_cleaner", require: false
+end
+
+gemspec path: "../"

data/gemfiles/rails_6.gemfile

@@ -0,0 +1,15 @@
+# This file was generated by Appraisal
+
+source "https://rubygems.org"
+
+gem "rails", "~> 6.0.0"
+gem "sqlite3", "~> 1.4"
+gem "net-smtp"
+
+group :development, :test do
+  gem "factory_girl_rails", require: false
+  gem "rspec-rails", "~>4.0.0.beta3", require: false
+  gem "database_cleaner", require: false
+end
+
+gemspec path: "../"

data/lib/devise-twilio-verify/controllers/helpers.rb

@@ -0,0 +1,87 @@
+module DeviseTwilioVerify
+  module Controllers
+    module Helpers
+      extend ActiveSupport::Concern
+
+      included do
+        before_action :check_request_and_redirect_to_verify_token, :if => :is_signing_in?
+      end
+
+      private
+
+      def remember_device(id)
+        cookies.signed[:remember_device] = {
+          :value => {expires: Time.now.to_i, id: id}.to_json,
+          :secure => !(Rails.env.test? || Rails.env.development?),
+          :httponly => !(Rails.env.test? || Rails.env.development?),
+          :expires => resource_class.twilio_verify_remember_device.from_now
+        }
+      end
+
+      def forget_device
+        cookies.delete :remember_device
+      end
+
+      def require_token?
+        id = warden.session(resource_name)[:id]
+        cookie = cookies.signed[:remember_device]
+        return true if cookie.blank?
+
+        # require token for old cookies which just have expiration time and no id
+        return true if cookie.to_s =~ %r{\A\d+\z}
+
+        cookie = JSON.parse(cookie) rescue ""
+        return cookie.blank? || (Time.now.to_i - cookie['expires'].to_i) > \
+               resource_class.twilio_verify_remember_device.to_i || cookie['id'] != id
+      end
+
+      def is_devise_sessions_controller?
+        self.class == Devise::SessionsController || self.class.ancestors.include?(Devise::SessionsController)
+      end
+
+      def is_signing_in?
+        if devise_controller? &&
+          is_devise_sessions_controller? &&
+          self.action_name == "create"
+          return true
+        end
+
+        return false
+      end
+
+      def check_request_and_redirect_to_verify_token
+        if signed_in?(resource_name) &&
+           warden.session(resource_name)[:with_twilio_verify_authentication] &&
+           require_token?
+          # login with 2fa
+          id = warden.session(resource_name)[:id]
+
+          remember_me = (params.fetch(resource_name, {})[:remember_me].to_s == "1")
+          return_to = session["#{resource_name}_return_to"]
+          sign_out
+
+          session["#{resource_name}_id"] = id
+          # this is safe to put in the session because the cookie is signed
+          session["#{resource_name}_password_checked"] = true
+          session["#{resource_name}_remember_me"] = remember_me
+          session["#{resource_name}_return_to"] = return_to if return_to
+
+          redirect_to verify_twilio_verify_path_for(resource_name)
+          return
+        end
+      end
+
+      def verify_twilio_verify_path_for(resource_or_scope = nil)
+        scope = Devise::Mapping.find_scope!(resource_or_scope)
+        send(:"#{scope}_verify_twilio_verify_path")
+      end
+
+      def record_twilio_verify_authentication
+        @resource.update_attribute(:last_sign_in_with_twilio_verify, DateTime.now)
+        session["#{resource_name}_twilio_verify_token_checked"] = true
+        sign_in(resource_name, @resource)
+        set_flash_message(:notice, :signed_in) if is_navigational_format?
+      end
+    end
+  end
+end

data/lib/devise-twilio-verify/controllers/view_helpers.rb

@@ -0,0 +1,50 @@
+module DeviseTwilioVerify
+  module Views
+    module Helpers
+      def twilio_verify_request_sms_link(opts = {})
+        title = opts.delete(:title) do
+          I18n.t('request_sms', scope: 'devise')
+        end
+        opts = {
+          :id => "twilio-verify-request-sms-link",
+          :method => :post,
+          :remote => true
+        }.merge(opts)
+
+        link_to(
+          title,
+          url_for([resource_name.to_sym, :request_sms]),
+          opts
+        )
+      end
+
+      def verify_twilio_verify_form(opts = {}, &block)
+        opts = default_opts.merge(:id => 'devise_twilio_verify').merge(opts)
+        form_tag([resource_name.to_sym, :verify_twilio_verify], opts) do
+          buffer = hidden_field_tag(:"#{resource_name}_id", @resource.id)
+          buffer << capture(&block)
+        end
+      end
+
+      def enable_twilio_verify_form(opts = {}, &block)
+        opts = default_opts.merge(opts)
+        form_tag([resource_name.to_sym, :enable_twilio_verify], opts) do
+          capture(&block)
+        end
+      end
+
+      def verify_twilio_verify_installation_form(opts = {}, &block)
+        opts = default_opts.merge(opts)
+        form_tag([resource_name.to_sym, :verify_twilio_verify_installation], opts) do
+          capture(&block)
+        end
+      end
+
+      private
+
+      def default_opts
+        { :class => 'twilio-verify-form', :method => :post }
+      end
+    end
+  end
+end

data/lib/devise-twilio-verify/hooks/twilio_verify_authenticatable.rb

@@ -0,0 +1,7 @@
+Warden::Manager.after_authentication do |user, auth, options|
+  if user.respond_to?(:with_twilio_verify_authentication?)
+    if auth.session(options[:scope])[:with_twilio_verify_authentication] = user.with_twilio_verify_authentication?(auth.request)
+      auth.session(options[:scope])[:id] = user.id
+    end
+  end
+end

data/lib/devise-twilio-verify/mapping.rb

@@ -0,0 +1,16 @@
+module DeviseTwilioVerify
+  module Mapping
+    private
+    def default_controllers(options)
+      options[:controllers] ||= {}
+      options[:controllers][:passwords] ||= "devise_twilio_verify/passwords"
+      super
+    end
+
+    def default_path_names(options)
+      options[:path_names] ||= {}
+      options[:path_names][:request_sms] ||= 'request-sms'
+      super
+    end
+  end
+end