devise-two-factor 6.3.1 → 6.4.1

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 8c8c0b83a23b936ca746191eb4b4f5882f136fc5eb2bacccc8258fb59c3976fe
-  data.tar.gz: 890cd4b59a3de3439be85b0b0aa60f793c1351c94c217d17be6623eb5e6f98ef
+  metadata.gz: 117e9dee5b111c62c34a41cb965eb96c9cb7a05fc46adc8da8d6a23f157117a5
+  data.tar.gz: bfcecb1015658147320108493635e563e3d001e5a0a56949be00039a7d5b23c4
 SHA512:
-  metadata.gz: c2de9aed179973655dac200930a0fcff2b415c7facbd19f539e3c153cd2db5c5e5389dbeed9359580add8af0ea8170e7185705d6c40ee6dd9c53d7de684d0772
-  data.tar.gz: 6e09b8cf78abd714cf945757b57002a4548c6621fbc4cd3752a45a6cc2552da7516629a340ebfce44561f4bac86e38f80cf58cb56ab68c769068376e13a48db5
+  metadata.gz: 6f5564cbc19e08811adc66d2a8c1fadc7a8c0188d4ee4eae116c3c6695248ec3e31be992573e8a6621bdf8ef9605435bf703fcaf8d6fae212a256b2866a2f17e
+  data.tar.gz: 601cb2883ee69a0308b89b4ea2b21f30af835c3288b23fa4fe46a5e066bf19e30fcc378fb86fc136a4513f85a65f1495598f15628ed21fd25cb540f7ac7b0926

data/.github/ISSUE_TEMPLATE/config.yml

@@ -0,0 +1,5 @@
+blank_issues_enabled: true
+contact_links:
+  - name: Dosu Chat
+    url: https://app.dosu.dev/cdb5d875-cc9e-4c3e-97fb-9fa463b07767/ask
+    about: Read documentation, and ask questions here.

data/.github/workflows/ci.yml

@@ -12,11 +12,8 @@ jobs:
       fail-fast: false
       matrix:
         # Due to https://github.com/actions/runner/issues/849, we should quote versions
-        ruby: ['3.2', '3.3', '3.4', 'truffleruby-head']
-        rails: ['7.0', '7.1', '7.2', '8.0', '8.1']
-        exclude:
-          - ruby: '3.4'
-            rails: '7.0'
+        ruby: ['3.2', '3.3', '3.4', '4.0', 'truffleruby-head']
+        rails: ['7.2', '8.0', '8.1']
 
     name: Ruby ${{ matrix.ruby }}, Rails ${{ matrix.rails }}
     env: # $BUNDLE_GEMFILE must be set at the job level, so it is set for all steps

data/.github/workflows/push.yml

@@ -21,8 +21,10 @@ jobs:
       - name: Set up Ruby
         uses: ruby/setup-ruby@v1
         with:
-          bundler-cache: true
           ruby-version: ruby
 
+      - name: Install dependencies
+        run: bundle install
+
       # Release
       - uses: rubygems/release-gem@v1

data/Appraisals

@@ -1,13 +1,3 @@
-appraise "rails-7.0" do
-  gem 'railties', '~> 7.0.0'
-  gem 'activesupport', '~> 7.0.0'
-end
-
-appraise "rails-7.1" do
-  gem 'railties', '~> 7.1.0'
-  gem 'activesupport', '~> 7.1.0'
-end
-
 appraise "rails-7.2" do
   gem 'railties', '~> 7.2.0'
   gem 'activesupport', '~> 7.2.0'

data/CHANGELOG.md

@@ -2,6 +2,19 @@
 
 ## Unreleased
 
+# 6.4.1
+
+- Update gem spec metadata sourcecode URI
+
+## 6.4.0
+
+- Remove upper limit on Devise version (allows v5) from gemspec
+
+## 6.3.1
+
+- Fix DB-adapter-specific integration issue with backupable shared example
+- Drop support for EOL Rails versions 7.0 and 7.1
+
 ## 6.3.0
 
 - Fixed timing to be consistent when Devise paranoid mode is active.
@@ -33,20 +46,24 @@
 - Rails 7 is now required.
 
 ## 4.1.0 / 4.1.1
+
 - Add support for attr_encrypted v4
 
 ## 4.0.2
+
 - Add Rails 7.0 support
 - Renew signing certificate
 - Use `after` option of TOTP#verify for additional timestamp verification
 
 ## 4.0.1
+
 - Convert CI from Travis CI to Github Actions ([#198](https://github.com/tinfoil/devise-two-factor/pull/198))
 - Fix ActiveSupport::Testing::TimeHelpers require in shared examples ([#191](https://github.com/tinfoil/devise-two-factor/pull/191))
 - Accept whitespace in provided codes ([#195](https://github.com/tinfoil/devise-two-factor/pull/195))
 - Add Truffleruby head to CI ([#200](https://github.com/tinfoil/devise-two-factor/pull/200))
 
 ## 4.0.0
+
 - [breaking] Drop support for Ruby <= 2.2
 - Update ROTP
 - Add Rails 6.1 support
@@ -55,20 +72,25 @@
 - Bugfixes & cleanup
 
 ## 3.1.0
+
 - Add Rails 6.0 support
 - New gem signing certificate
 - Fix paranoid-mode being ignored
 
 ## 3.0.3
+
 - Add Rails 5.2 support
 
 ## 3.0.2
+
 - Add Rails 5.1 support
 
 ## 3.0.1
+
 - Qualify call to rspec shared_examples
 
 ## 3.0.0
+
 See `UPGRADING.md` for specific help with breaking changes from 2.x to 3.0.0.
 
 - Adds support for Devise 4.
@@ -76,33 +98,41 @@ See `UPGRADING.md` for specific help with breaking changes from 2.x to 3.0.0.
 - Blocks the use of attr_encrypted 2.x. There was a significant vulnerability in the encryption implementation in attr_encrypted 2.x, and that version of the gem should not be used.
 
 ## 2.2.0
+
 - Use 192 bits, not 1024, as a secret key length. RFC 4226 recommends a minimum length of 128 bits and a recommended length of 160 bits. Google Authenticator doesn't accept 160 bit keys.
 
 ## 2.1.0
+
 - Return false if OTP value is nil, instead of an ROTP exception.
 
 ## 2.0.1
+
 No user-facing changes.
 
 ## 2.0.0
+
 See `UPGRADING.md` for specific help with breaking changes from 1.x to 2.0.0.
 
 - Replace `valid_otp?` method with `validate_and_consume_otp!`.
 - Disallow subsequent OTPs once validated via timesteps.
 
 ## 1.1.0
+
 - Removes runtimez activemodel dependency.
 - Uses `Devise::Encryptor` instead of `Devise.bcrypt`, which is deprecated.
 - Bump `rotp` dependency to 2.x.
 
 ## 1.0.2
+
 - Makes Railties the only requirement for Rails generators.
 - Explicitly check that the `otp_attempt` param is not nil in order to avoid 'ROTP only verifies strings' exceptions.
 - Adding warning about recoverable devise strategy and automatic `sign_in` after a password reset.
 - Loosen dependency version requirements for rotp, devise, and attr_encrypted.
 
 ## 1.0.1
+
 - Add version requirements for dependencies.
 
 ## 1.0.0
+
 - Initial release.

data/SECURITY.md

@@ -2,4 +2,4 @@
 
 ## Reporting a Vulnerability
 
-Please report any vulnerabilities to the [Black Duck PSIRT](psirt@blackduck.com).
+Please report any vulnerabilities to the [Black Duck PSIRT](mailto:psirt@blackduck.com).

data/devise-two-factor.gemspec

@@ -8,6 +8,7 @@ Gem::Specification.new do |s|
   s.license     = 'MIT'
   s.summary     = 'Barebones two-factor authentication with Devise'
   s.homepage    = 'https://github.com/devise-two-factor/devise-two-factor'
+  s.metadata['source_code_uri'] = s.homepage
   s.description = 'Devise-Two-Factor is a minimalist extension to Devise which offers support for two-factor authentication through the TOTP scheme.'
   s.authors     = ['Quinn Wilton']
 
@@ -15,9 +16,9 @@ Gem::Specification.new do |s|
   s.test_files    = `git ls-files -- spec/*`.split("\n")
   s.require_paths = ['lib']
 
-  s.add_runtime_dependency 'railties',       '>= 7.0', '< 8.2'
-  s.add_runtime_dependency 'activesupport',  '>= 7.0', '< 8.2'
-  s.add_runtime_dependency 'devise',         '>= 4.0', '< 5.0'
+  s.add_runtime_dependency 'railties',       '>= 7.2', '< 8.2'
+  s.add_runtime_dependency 'activesupport',  '>= 7.2', '< 8.2'
+  s.add_runtime_dependency 'devise',         '>= 4.0', '< 6.0'
   s.add_runtime_dependency 'rotp',           '~> 6.0'
 
   s.add_development_dependency 'activemodel'

data/lib/devise_two_factor/models/two_factor_authenticatable.rb

@@ -91,7 +91,7 @@ module Devise
                                     :otp_encrypted_attribute_options,
                                     :otp_secret_encryption_key)
 
-        # Geneartes an OTP secret of the specified length, returning it after Base32 encoding.
+        # Generates an OTP secret of the specified length, returning it after Base32 encoding.
         def generate_otp_secret(otp_secret_length = self.otp_secret_length)
           ROTP::Base32.random(otp_secret_length)
         end

data/lib/devise_two_factor/version.rb

@@ -1,3 +1,3 @@
 module DeviseTwoFactor
-  VERSION = '6.3.1'.freeze
+  VERSION = '6.4.1'.freeze
 end

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: devise-two-factor
 version: !ruby/object:Gem::Version
-  version: 6.3.1
+  version: 6.4.1
 platform: ruby
 authors:
 - Quinn Wilton
@@ -15,7 +15,7 @@ dependencies:
     requirements:
     - - ">="
       - !ruby/object:Gem::Version
-        version: '7.0'
+        version: '7.2'
     - - "<"
       - !ruby/object:Gem::Version
         version: '8.2'
@@ -25,7 +25,7 @@ dependencies:
     requirements:
     - - ">="
       - !ruby/object:Gem::Version
-        version: '7.0'
+        version: '7.2'
     - - "<"
       - !ruby/object:Gem::Version
         version: '8.2'
@@ -35,7 +35,7 @@ dependencies:
     requirements:
     - - ">="
       - !ruby/object:Gem::Version
-        version: '7.0'
+        version: '7.2'
     - - "<"
       - !ruby/object:Gem::Version
         version: '8.2'
@@ -45,7 +45,7 @@ dependencies:
     requirements:
     - - ">="
       - !ruby/object:Gem::Version
-        version: '7.0'
+        version: '7.2'
     - - "<"
       - !ruby/object:Gem::Version
         version: '8.2'
@@ -58,7 +58,7 @@ dependencies:
         version: '4.0'
     - - "<"
       - !ruby/object:Gem::Version
-        version: '5.0'
+        version: '6.0'
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
@@ -68,7 +68,7 @@ dependencies:
         version: '4.0'
     - - "<"
       - !ruby/object:Gem::Version
-        version: '5.0'
+        version: '6.0'
 - !ruby/object:Gem::Dependency
   name: rotp
   requirement: !ruby/object:Gem::Requirement
@@ -173,6 +173,7 @@ executables: []
 extensions: []
 extra_rdoc_files: []
 files:
+- ".github/ISSUE_TEMPLATE/config.yml"
 - ".github/dependabot.yml"
 - ".github/workflows/ci.yml"
 - ".github/workflows/push.yml"
@@ -189,8 +190,6 @@ files:
 - SECURITY.md
 - UPGRADING.md
 - devise-two-factor.gemspec
-- gemfiles/rails_7.0.gemfile
-- gemfiles/rails_7.1.gemfile
 - gemfiles/rails_7.2.gemfile
 - gemfiles/rails_8.0.gemfile
 - gemfiles/rails_8.1.gemfile
@@ -212,7 +211,8 @@ files:
 homepage: https://github.com/devise-two-factor/devise-two-factor
 licenses:
 - MIT
-metadata: {}
+metadata:
+  source_code_uri: https://github.com/devise-two-factor/devise-two-factor
 rdoc_options: []
 require_paths:
 - lib
@@ -227,7 +227,7 @@ required_rubygems_version: !ruby/object:Gem::Requirement
     - !ruby/object:Gem::Version
       version: '0'
 requirements: []
-rubygems_version: 4.0.3
+rubygems_version: 4.0.16
 specification_version: 4
 summary: Barebones two-factor authentication with Devise
 test_files:

data/gemfiles/rails_7.0.gemfile

@@ -1,8 +0,0 @@
-# This file was generated by Appraisal
-
-source "https://rubygems.org"
-
-gem "railties", "~> 7.0.0"
-gem "activesupport", "~> 7.0.0"
-
-gemspec path: "../"

data/gemfiles/rails_7.1.gemfile

@@ -1,8 +0,0 @@
-# This file was generated by Appraisal
-
-source "https://rubygems.org"
-
-gem "railties", "~> 7.1.0"
-gem "activesupport", "~> 7.1.0"
-
-gemspec path: "../"