devise_jwt_auth 0.1.2 → 0.1.3

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 7a06bae3070382b9905364b56303bf4d376da0437477e866a7a4ac58cfabb5c3
-  data.tar.gz: e894ad6a70d6a44d8aaa83cc4d1b0b5e82ad1a7f145915136394bf96b473db68
+  metadata.gz: 7330fe7fcd262dea525c6716fdee30c1c2f1361e00b708a4b848281350555fd4
+  data.tar.gz: 01f87c1814dbcd8d51fe800ebb091941a9e0d0b768e40b14a784d7c546ba3acc
 SHA512:
-  metadata.gz: 3da140cf6afd0bf79e0b39a360b40e85e27b56baa2a66f8893776559f4b67d47d8381b868bcee2807d944ee0806e37ac8e7e3d2dd083ecb7766d36ae3aeb207c
-  data.tar.gz: 187054dab5d7c21e0571c7f4a8720caabd45717401edb299dffe302eac57433ffe2eff25b8e7edaef092611d04a55f92de75fb22a817873fdafdcd8856fc37c7
+  metadata.gz: 4e729775d51fa3e5c7871c2d0d9d56d5efd88a42d8dbbc72af572c7953e64d184eab735103da2f2fbb869bb329de120041010f2e4c2bb05f04e32821ad8b555b
+  data.tar.gz: e942baa694e185efa7bf1a5ccfc9e462a28a636dbbc61f768c13baa7cb81332582fdd398c159e56132d6f970c8375f64caddab467dc9a1a38abe2952c29fe47b

data/README.md

@@ -2,11 +2,11 @@
 
 A JWT-based port of [Devise Token Auth](https://github.com/lynndylanhurley/devise_token_auth) with silent refresh support.
 
-If you're building SPA or a mobile app, this library takes an JWT token approach to authentication. If you're new to how JWTs (pronounced 'jot') work, you can read up on them [here](https://jwt.io/introduction/). This library is designed with an access/refresh token model in mind.
+If you're building SPA or a mobile app, this library takes an JWT approach to authentication. If you're new to how JWTs (pronounced 'jot') work, you can read up on them [here](https://jwt.io/introduction/). This library is designed with an access/refresh token authentication model in mind.
 
 ## How does silent refresh authentication work?
 
-When a user is authenticated, an access token is sent in the response and usually in the body in the form of JSON data. These tokens are designed to last a "short" time - only about 15 minutes. What you do with these tokens is up to you, but the best practice is to keep these tokens in memory and NOT to store them as cookies or in local storage. That way they cannot be used in XSS or CSRF attacks. The access tokens are then sent as headers in requests when an authenticated user is required to access protected resources.
+When a user is authenticated, an access token is sent in the response and usually in the body in the form of JSON data. These tokens are designed to last a "short" time - only about 15 minutes. What you do with these tokens is up to you, but the best practice is to keep these tokens in memory and NOT to store them as cookies or in local storage. That way they cannot be used in [XSS](https://en.wikipedia.org/wiki/Cross-site_scripting) or [CSRF](https://en.wikipedia.org/wiki/Cross-site_request_forgery) attacks. The access tokens are then sent as headers in requests when an authenticated user is required to access protected resources.
 
 The downside here is that the user will need to reauthenticate themselves frequently and if the user reloads their browser, the access token disappears and the user is no longer authenticated. This is where refresh tokens come into play.
 

data/lib/devise_jwt_auth/version.rb

@@ -1,5 +1,5 @@
 # frozen_string_literal: true
 
 module DeviseJwtAuth
-  VERSION = '0.1.2'.freeze
+  VERSION = '0.1.3'.freeze
 end

data/lib/generators/devise_jwt_auth/templates/devise_jwt_auth.rb

@@ -5,38 +5,38 @@ DeviseJwtAuth.setup do |config|
   # user. To receive new access tokens, you should either reauthenticate or
   # use the HTTP only refresh cookie that is sent during the authentication
   # process and make refresh token requests.
-  # self.send_new_access_token_on_each_request = false
+  # config.send_new_access_token_on_each_request = false
   
   # By default, refresh token HTTP Only cookies last for 2 weeks. These tokens
   # are used for requesting shorter-lived acccess tokens.
-  # self.refresh_token_lifespan = 2.weeks
+  # config.refresh_token_lifespan = 2.weeks
 
   # By default, access tokens last for 15 minutes. These tokens are used to
   # access protected resources. When these tokens expire, you need to
   # reauthenticate the user or use a refresh token cookie to get a new access
   # token.
-  # self.access_token_lifespan = 15.minutes
+  # config.access_token_lifespan = 15.minutes
 
   # This is the name of the HTTP Only cookie that will be sent to the client
   # for the purpose of requesting new access tokens.
-  # self.refresh_token_name = 'refresh-token'
+  # config.refresh_token_name = 'refresh-token'
 
   # This is the name of the token that will be sent in the JSON responses used
   # for accessing protected resources. NEVER store this token in a cookie or
   # any form of local storage on the client. Save it in memory as a javascript
   # variable or in some kind of context manager like Redux. Send it in your
   # request headers when you want to be authenticated.
-  # self.access_token_name = 'access-token'
+  # config.access_token_name = 'access-token'
 
   # This is the refresh token encryption key. You should set this in an
   # environment variable or secret key base that isn't store in a repository.
   # Also, its a good idea to NOT use the same key for access tokens.
-  self.refresh_token_encryption_key = 'your-refresh-token-secret-key-here'
+  config.refresh_token_encryption_key = 'your-refresh-token-secret-key-here'
   
   # This is the refresh token encryption key. You should set this in an
   # environment variable or secret key base that isn't store in a repository.
   # Also, its a good idea to NOT use the same key for access tokens.
-  self.access_token_encryption_key = 'your-access-token-secret-key-here'
+  config.access_token_encryption_key = 'your-access-token-secret-key-here'
 
   # This route will be the prefix for all oauth2 redirect callbacks. For
   # example, using the default '/omniauth', the github oauth2 provider will
@@ -64,11 +64,11 @@ DeviseJwtAuth.setup do |config|
   # config.send_confirmation_email = true
 
   # TODO: Document these settings
-  # self.default_confirm_success_url               = nil
-  # self.default_password_reset_url                = nil
-  # self.redirect_whitelist                        = nil
-  # self.update_token_version_after_password_reset = true
-  # self.bypass_sign_in                            = true
-  # self.require_client_password_reset_token       = false
+  # config.default_confirm_success_url               = nil
+  # config.default_password_reset_url                = nil
+  # config.redirect_whitelist                        = nil
+  # config.update_token_version_after_password_reset = true
+  # config.bypass_sign_in                            = true
+  # config.require_client_password_reset_token       = false
 
 end

data/test/dummy/tmp/generators/app/models/mang.rb

@@ -0,0 +1,9 @@
+# frozen_string_literal: true
+
+class Mang < ActiveRecord::Base
+  # Include default devise modules. Others available are:
+  # :confirmable, :lockable, :timeoutable and :omniauthable
+  devise :database_authenticatable, :registerable,
+         :recoverable, :rememberable, :trackable, :validatable
+  include DeviseJwtAuth::Concerns::User
+end

data/test/dummy/tmp/generators/config/routes.rb

@@ -0,0 +1,9 @@
+            Rails.application.routes.draw do
+  mount_devise_jwt_auth_for 'Azpire::V1::HumanResource::User', at: 'auth'
+
+  mount_devise_jwt_auth_for 'Mang', at: 'mangs'
+  as :mang do
+    # Define routes for Mang within this block.
+  end
+              patch '/chong', to: 'bong#index'
+            end

data/test/dummy/tmp/generators/db/migrate/20200209225557_devise_jwt_auth_create_mangs.rb

@@ -0,0 +1,51 @@
+# frozen_string_literal: true
+
+class DeviseJwtAuthCreateMangs < ActiveRecord::Migration[6.0]
+  def change
+    
+    create_table(:mangs) do |t|
+      ## Required
+      t.string :provider, null: false, default: 'email'
+      t.string :uid, null: false, default: ''
+
+      ## Database authenticatable
+      t.string :encrypted_password, null: false, default: ''
+
+      ## Recoverable
+      t.string   :reset_password_token
+      t.datetime :reset_password_sent_at
+      t.boolean  :allow_password_change, default: false
+
+      ## Rememberable
+      t.datetime :remember_created_at
+
+      ## Confirmable
+      t.string   :confirmation_token
+      t.datetime :confirmed_at
+      t.datetime :confirmation_sent_at
+      t.string   :unconfirmed_email # Only if using reconfirmable
+
+      ## Lockable
+      # t.integer  :failed_attempts, default: 0, null: false # Only if lock strategy is :failed_attempts
+      # t.string   :unlock_token # Only if unlock strategy is :email or :both
+      # t.datetime :locked_at
+
+      ## User Info
+      t.string :name
+      t.string :nickname
+      t.string :image
+      t.string :email
+
+      ## Tokens
+      t.text :tokens
+
+      t.timestamps
+    end
+
+    add_index :mangs, :email,                unique: true
+    add_index :mangs, [:uid, :provider],     unique: true
+    add_index :mangs, :reset_password_token, unique: true
+    add_index :mangs, :confirmation_token,   unique: true
+    # add_index :mangs, :unlock_token,       unique: true
+  end
+end

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: devise_jwt_auth
 version: !ruby/object:Gem::Version
-  version: 0.1.2
+  version: 0.1.3
 platform: ruby
 authors:
 - Aaron A
 autorequire: 
 bindir: bin
 cert_chain: []
-date: 2020-02-09 00:00:00.000000000 Z
+date: 2020-02-10 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: rails
@@ -348,10 +348,12 @@ files:
 - test/dummy/db/migrate/20190924101113_devise_jwt_auth_create_confirmable_users.rb
 - test/dummy/db/schema.rb
 - test/dummy/lib/migration_database_helper.rb
-- test/dummy/tmp/generators/app/controllers/application_controller.rb
 - test/dummy/tmp/generators/app/models/azpire/v1/human_resource/user.rb
+- test/dummy/tmp/generators/app/models/mang.rb
 - test/dummy/tmp/generators/config/initializers/devise_jwt_auth.rb
-- test/dummy/tmp/generators/db/migrate/20200209222205_devise_jwt_auth_create_azpire_v1_human_resource_users.rb
+- test/dummy/tmp/generators/config/routes.rb
+- test/dummy/tmp/generators/db/migrate/20200209225557_devise_jwt_auth_create_azpire_v1_human_resource_users.rb
+- test/dummy/tmp/generators/db/migrate/20200209225557_devise_jwt_auth_create_mangs.rb
 - test/factories/users.rb
 - test/lib/devise_jwt_auth/blacklist_test.rb
 - test/lib/devise_jwt_auth/token_factory_test.rb
@@ -406,10 +408,12 @@ test_files:
 - test/test_helper.rb
 - test/dummy/lib/migration_database_helper.rb
 - test/dummy/config.ru
-- test/dummy/tmp/generators/db/migrate/20200209222205_devise_jwt_auth_create_azpire_v1_human_resource_users.rb
+- test/dummy/tmp/generators/db/migrate/20200209225557_devise_jwt_auth_create_azpire_v1_human_resource_users.rb
+- test/dummy/tmp/generators/db/migrate/20200209225557_devise_jwt_auth_create_mangs.rb
+- test/dummy/tmp/generators/config/routes.rb
 - test/dummy/tmp/generators/config/initializers/devise_jwt_auth.rb
 - test/dummy/tmp/generators/app/models/azpire/v1/human_resource/user.rb
-- test/dummy/tmp/generators/app/controllers/application_controller.rb
+- test/dummy/tmp/generators/app/models/mang.rb
 - test/dummy/db/migrate/20150708104536_devise_jwt_auth_create_unconfirmable_users.rb
 - test/dummy/db/migrate/20140916224624_add_favorite_color_to_mangs.rb
 - test/dummy/db/migrate/20140829044006_add_operating_thetan_to_user.rb

data/test/dummy/tmp/generators/app/controllers/application_controller.rb

@@ -1,6 +0,0 @@
-            class ApplicationController < ActionController::Base
-        include DeviseJwtAuth::Concerns::SetUserByToken
-              def whatever
-                'whatever'
-              end
-            end