flightdeck 0.5.0 → 0.5.1

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: a1ca85b84ff8de470263e67d8ea54f382fb0223fa0c6dc515cf24381ba9a5fb5
-  data.tar.gz: 4a2f5f4f4c9397ce405997d26881131793c425963e956d056ed92baacdde523b
+  metadata.gz: 064d345ecfc11586c696e3e1e1386b230a87b305553c733aa1891e2cde0669ec
+  data.tar.gz: 5f756e10c2d75f90fd464ce271c35322f1d4824bd7db746e4f7f7e907deb8b2e
 SHA512:
-  metadata.gz: 598821a4f92376bde89e2559bc9925f3f1450cfdf28ccc6c86e37aa7f97cef357d154f2cb2e9efc9e42acbc125cb970542d086e1a3f6f485113ecd5412ca85de
-  data.tar.gz: 438cad3e80e881b0622d4969a56ed9f740665e5794dfc0807ec1252b82e918269cd35d69561895102c767a07a3d9c8d57ff442d64daed9183c0d1790ab3a60ce
+  metadata.gz: 639a81f396abc9732f1bab417793eaab73b3016bd346fa595f6cb05c97fb3e749e21d7120381fe5fd6da57973102cc8caa749c54fa566cce242e2de29acc44be
+  data.tar.gz: 00d08eaecb9c8746d3ea3d6243abea53f1e86c8a0c80015e23b786152d35fbcfe007d471da5160e6774ef61382ce638135b9e544e763d749e8823cf7f949ac9b

data/README.md

@@ -103,12 +103,28 @@ request, never memoized at boot.
 In **API-only** apps there is no host session for Devise to use, so use
 Flightdeck's own HTTP Basic there.
 
+### Disabling authentication entirely
+
+```ruby
+# config/initializers/flightdeck.rb
+Flightdeck.configure do |config|
+  config.skip_authentication = true
+end
+```
+
+This serves the dashboard — which can retry, discard and delete jobs — to
+anyone who can reach the mount. It exists for deployments where something
+upstream already guards it: a routing constraint, a VPN, a reverse proxy. The
+routing-constraint caveat above still applies unless you set this: without it,
+the engine answers 401 behind your constraint.
+
 ## Configuration
 
 | Option | Default | Purpose |
 | --- | --- | --- |
 | `base_controller_class` | `nil` | Controller (a String) to inherit from, to reuse your app's authentication. |
 | `http_basic` | `nil` | `{ username:, password: }` or a callable. Falls back to `ENV`, then credentials. |
+| `skip_authentication` | `false` | Serve without any authentication. For mounts guarded upstream (routing constraint, VPN, proxy). |
 | `poll_interval` | `5.seconds` | Refresh rate for list and stat panels. |
 | `chart_poll_interval` | `30.seconds` | Refresh rate for charts. |
 | `per_page` | `25` | Rows per page in job lists. |

data/app/assets/flightdeck/{flightdeck-c02e38040ddb.js → flightdeck-8fc2423da15f.js}

@@ -1,4 +1,4 @@
-/* Flightdeck 0.5.0 — bundled @hotwired/turbo + @hotwired/stimulus. Generated by `rake assets:build`; do not edit. */
+/* Flightdeck 0.5.1 — bundled @hotwired/turbo + @hotwired/stimulus. Generated by `rake assets:build`; do not edit. */
 (function(){
 /**
  * Minified by jsDelivr using Terser v5.39.0.
@@ -408,7 +408,7 @@ class ToastController extends Stimulus.Controller {
   application.register("theme", ThemeController)
   application.register("toast", ToastController)
 
-  window.Flightdeck = { application: application, version: "0.5.0" }
+  window.Flightdeck = { application: application, version: "0.5.1" }
 })()
 
 })();

data/app/assets/flightdeck/manifest.json

@@ -7,9 +7,9 @@
     "size": 118411
   },
   "flightdeck.js": {
-    "file": "flightdeck-c02e38040ddb.js",
-    "digest": "c02e38040ddb",
-    "sha256": "c02e38040ddb22871c1cb96daa7cb78242ceda0dd243c1ab3678fcf6f022d73e",
+    "file": "flightdeck-8fc2423da15f.js",
+    "digest": "8fc2423da15f",
+    "sha256": "8fc2423da15f28fd3fcfd89fa820027ab955bdb902377c58d225b7fd81617b25",
     "content_type": "text/javascript; charset=utf-8",
     "size": 150889
   }

data/app/controllers/flightdeck/application_controller.rb

@@ -33,7 +33,16 @@ module Flightdeck
              config.base_controller_class = "Admin::BaseController"
            end
 
-      Flightdeck never serves unauthenticated requests, in any environment.
+      5. If something upstream (a routing constraint, VPN, or reverse proxy)
+         already guards this mount and you accept the risk, turn Flightdeck's
+         gate off entirely:
+
+           Flightdeck.configure do |config|
+             config.skip_authentication = true
+           end
+
+      Flightdeck never serves unauthenticated requests, in any environment,
+      unless it is explicitly told to with skip_authentication.
     TEXT
 
     protect_from_forgery with: :exception if respond_to?(:protect_from_forgery)
@@ -73,7 +82,12 @@ module Flightdeck
         }.compact
       end
 
+      # Read per request, like the rest of the auth config, so nothing is
+      # resolved at boot. `skip_authentication` is the explicit opt-out for
+      # deployments that gate the mount upstream — a routing constraint, a VPN,
+      # a reverse proxy — and it wins over every other setting here.
       def authenticate_flightdeck!
+        return if Flightdeck.config.skip_authentication
         return if self.class.host_authenticated?
 
         credentials = Flightdeck.config.resolve_http_basic

data/lib/flightdeck/configuration.rb

@@ -4,6 +4,7 @@ module Flightdeck
   class Configuration
     attr_accessor :base_controller_class,
                   :http_basic,
+                  :skip_authentication,
                   :poll_interval,
                   :chart_poll_interval,
                   :per_page,
@@ -16,6 +17,7 @@ module Flightdeck
     def initialize
       @base_controller_class = nil
       @http_basic = nil
+      @skip_authentication = false
       @poll_interval = 5.seconds
       @chart_poll_interval = 30.seconds
       @per_page = 25

data/lib/flightdeck/version.rb

@@ -1,5 +1,5 @@
 # frozen_string_literal: true
 
 module Flightdeck
-  VERSION = "0.5.0"
+  VERSION = "0.5.1"
 end

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: flightdeck
 version: !ruby/object:Gem::Version
-  version: 0.5.0
+  version: 0.5.1
 platform: ruby
 authors:
 - Carl Mercier
@@ -49,7 +49,7 @@ files:
 - MIT-LICENSE
 - README.md
 - app/assets/flightdeck/flightdeck-00403457c5d9.css
-- app/assets/flightdeck/flightdeck-c02e38040ddb.js
+- app/assets/flightdeck/flightdeck-8fc2423da15f.js
 - app/assets/flightdeck/manifest.json
 - app/controllers/concerns/flightdeck/toasts.rb
 - app/controllers/flightdeck/application_controller.rb