devise-webauthn 0.5.0 → 0.5.1

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 2c1fc0044f5c2bf947d79fd3db30ea05907980dac2abeacd4d43af55c7fc8fc3
-  data.tar.gz: d9513c05eaad396f2d6f8764a8f8964086678fa03e55b98375406e1de7303b67
+  metadata.gz: c039d53d50190463a09e6d200c50d48674db9545daee3836f450a86c1e094877
+  data.tar.gz: fb01adaaa26d0c9680d306c1b8e57d93f8a39f924f5ecf418f0f644ab292ed33
 SHA512:
-  metadata.gz: 53c013359a84a25616c4a4778a4e0c766916665d7c31192b74feab1f471f36ffe4867ef1ed74f82f80119c1bdde16c996df2e2782df1b4c3de3ac67e49ce9f60
-  data.tar.gz: afdd185b69e7208bcc489c6f707c2d3c77a3a44447f27650db5f985958dd2856b7ce117a684ba2273639d469bf4c39d02a0abe523d7d943b22b1c438d3e076c6
+  metadata.gz: a9480a0988fae9eea243d01671261fd1bff0b788e4c5c34ffd956efa949fee9523c6687cb83d8663ee77aafb487038c5bd030e4d6a12e73267018941b66b15f6
+  data.tar.gz: d38062d34035350897ecae267fc5eedcffd1a9d0230d6d9d6407ae3d572aaa828b718635e1517af7f16c92a2183123e78c98de8c51dac6ede44330a74c7f8421

data/.ruby-version

@@ -1 +1 @@
-3.4.4
+3.4.12

data/Appraisals

@@ -14,12 +14,16 @@ end
 
 appraise "rails-7_2" do
   gem "rails", "~> 7.2.x"
+
+  # ActiveSupport 7.x passes `quirks_mode` to JSON.generate, which json 3 rejects.
+  gem "json", "< 3"
 end
 
 appraise "rails-7_1" do
   gem "rails", "~> 7.1.x"
 
   gem "capybara", "~> 3.39"
+  gem "json", "< 3"
   gem "importmap-rails", "~> 2.0"
   gem "pry-byebug", "~> 3.10"
   gem "rack", "~> 2.2"
@@ -37,6 +41,9 @@ appraise "devise-5_0" do
   install_if "-> { RUBY_VERSION < \"3.0\" }" do
     gem "rack", "~> 2.2"
   end
+  install_if "-> { RUBY_VERSION < \"3.2\" }" do
+    gem "json", "< 3"
+  end
   gem "rspec-rails", ">= 7.1"
   gem "sqlite3", ">= 1.6", "!= 1.7.0", "!= 1.7.1", "!= 1.7.2", "!= 1.7.3"
 end

data/CHANGELOG.md

@@ -2,6 +2,12 @@
 
 ## Unreleased
 
+## [v0.5.1](https://github.com/cedarcode/devise-webauthn/compare/v0.5.0...v0.5.1/) - 2026-11-04
+
+### Fixed
+
+- The passkey and security key controllers show the failure alert when the credential is not saved, such as when its name is blank. Before, they showed the success notice. Overrides of `verify_and_save_passkey` and `verify_and_save_security_key` must return the credential record. [#172](https://github.com/cedarcode/devise-webauthn/pull/172) [@RenzoMinelli]
+
 ## [v0.5.0](https://github.com/cedarcode/devise-webauthn/compare/v0.4.0...v0.5.0/) - 2026-07-13
 
 ### Added

data/Gemfile.lock

@@ -1,7 +1,7 @@
 PATH
   remote: .
   specs:
-    devise-webauthn (0.5.0)
+    devise-webauthn (0.5.1)
       devise (>= 4.9)
       webauthn (~> 3.0)
 
@@ -172,7 +172,7 @@ GEM
     nokogiri (1.18.9)
       mini_portile2 (~> 2.8.2)
       racc (~> 1.4)
-    openssl (3.3.0)
+    openssl (3.3.3)
     openssl-signature_algorithm (1.3.0)
       openssl (> 2.0)
     orm_adapter (0.5.0)

data/app/controllers/devise/passkeys_controller.rb

@@ -8,8 +8,9 @@ module Devise
 
     def create
       passkey_from_params = WebAuthn::Credential.from_create(JSON.parse(params[:public_key_credential]))
+      passkey = verify_and_save_passkey(passkey_from_params)
 
-      if verify_and_save_passkey(passkey_from_params)
+      if passkey.persisted?
         set_flash_message! :notice, :passkey_created
       else
         set_flash_message! :alert, :passkey_verification_failed, scope: :"devise.failure"

data/app/controllers/devise/second_factor_webauthn_credentials_controller.rb

@@ -8,8 +8,9 @@ module Devise
 
     def create
       security_key_from_params = WebAuthn::Credential.from_create(JSON.parse(params[:public_key_credential]))
+      security_key = verify_and_save_security_key(security_key_from_params)
 
-      if verify_and_save_security_key(security_key_from_params)
+      if security_key.persisted?
         set_flash_message! :notice, :security_key_created
       else
         set_flash_message! :alert, :webauthn_credential_verification_failed, scope: :"devise.failure"

data/gemfiles/devise_5_0.gemfile

@@ -23,4 +23,8 @@ install_if -> { RUBY_VERSION < "3.0" } do
   gem "rack", "~> 2.2"
 end
 
+install_if -> { RUBY_VERSION < "3.2" } do
+  gem "json", "< 3"
+end
+
 gemspec path: "../"

data/gemfiles/rails_7_1.gemfile

@@ -18,6 +18,7 @@ gem "rubocop-rails", "~> 2.32"
 gem "rubocop-rspec", "~> 3.6"
 gem "selenium-webdriver"
 gem "sqlite3", "~> 1.7"
+gem "json", "< 3"
 gem "rack", "~> 2.2"
 
 gemspec path: "../"

data/gemfiles/rails_7_2.gemfile

@@ -18,5 +18,6 @@ gem "rubocop-rails", "~> 2.32"
 gem "rubocop-rspec", "~> 3.6"
 gem "selenium-webdriver"
 gem "sqlite3", "~> 2.7"
+gem "json", "< 3"
 
 gemspec path: "../"

data/lib/devise/webauthn/version.rb

@@ -2,6 +2,6 @@
 
 module Devise
   module Webauthn
-    VERSION = "0.5.0"
+    VERSION = "0.5.1"
   end
 end

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: devise-webauthn
 version: !ruby/object:Gem::Version
-  version: 0.5.0
+  version: 0.5.1
 platform: ruby
 authors:
 - Cedarcode
@@ -134,7 +134,7 @@ required_rubygems_version: !ruby/object:Gem::Requirement
     - !ruby/object:Gem::Version
       version: '0'
 requirements: []
-rubygems_version: 3.6.7
+rubygems_version: 3.6.9
 specification_version: 4
 summary: Devise extension to support WebAuthn.
 test_files: []