foobara-auth 0.0.12 → 0.1.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 371e579335275b2c6d8d695aea7b14784f6ecf95d1df4742b38eb251ba941a6a
-  data.tar.gz: 12354ce1c4b44cdb8ce1c398b7334ac6ce0f6a4a3ee619e698b5c94e114df528
+  metadata.gz: 868223dc8a31d7809c6171e29ad115f95c0ac94492a0c3c0bd796018c7bb7381
+  data.tar.gz: 7fe650602a7e14240beab2bdbb1a38f9d756947fd5e8c4fe77a665fc00abed8d
 SHA512:
-  metadata.gz: 7d79b81bd382733037b66f464552e5401c69801355bc78c00354f22ca60b8db43d4066b012476a1b7bcdd854d03b39e854847b6cbf5bdc39543f7dc80e832cac
-  data.tar.gz: 2cbd1f530b358e94eb0dd161640828e69473ede06f9d0d56204ece3ecc17efc974a3b283b902344709c2932077b777c9a400357b8c712d9b31e0df8e5bd79faa
+  metadata.gz: 1779710b7f67ab3982b4c06875bc60c91068efd1e1ad0a7393c0da3a881006b5a725ffdee15233d8e5cf6c1d376ec3fdacb5ad944c4cf5e99b61bc1878f65ae1
+  data.tar.gz: 124db35580d5409e11d59a418db86c5bd630601ef465f49ee9c21320ffb3a5c3230f8b71fe734efa341fa1439e58a15509cd0945e8ae38ed40a09a20dc18f62a

data/CHANGELOG.md

@@ -1,3 +1,11 @@
+## [0.1.0] - 2025-08-22
+
+- Mark as compatible with Foobara 0.1.0
+
+## [0.0.13] - 2025-05-13
+
+- Allow logout to work even if refresh token is deleted/invalid
+
 ## [0.0.12] - 2025-05-05
 
 - Do not explode when refresh token doesn't exist

data/src/login.rb

@@ -53,7 +53,7 @@ module Foobara
           rescue Halt
             # I'm a bit nervous about rescuing Halt and clearing the errors, but I'm more nervous bout
             # introducing a #run_subcommand method.
-            if error_collection.size == 1 && error_collection.errors.first.is_a?(FindUser::UserNotFoundError) &&
+            if error_collection.size == 1 && error_collection.first.is_a?(FindUser::UserNotFoundError) &&
                username_or_email.include?("@")
               error_collection.clear
               self.user_to_login = run_subcommand!(FindUser, email: username_or_email)

data/src/logout.rb

@@ -1,11 +1,6 @@
 module Foobara
   module Auth
     class Logout < Foobara::Command
-      class InvalidRefreshTokenError < Foobara::RuntimeError
-        context refresh_token_id: :string
-        message "Invalid refresh token"
-      end
-
       depends_on VerifyToken
       depends_on_entity Types::Token
       depends_on_entity Types::User
@@ -21,15 +16,18 @@ module Foobara
         if refresh_token?
           determine_refresh_token_id_and_secret
           load_refresh_token_record
-          verify_refresh_token
-          # Delete it instead maybe?
-          mark_refresh_token_as_used
+
+          if refresh_token_record?
+            verify_refresh_token
+            # Delete it instead maybe?
+            mark_refresh_token_as_used
+          end
         end
 
         nil
       end
 
-      attr_accessor :refresh_token_record, :refresh_token_id, :refresh_token_secret
+      attr_accessor :refresh_token_record, :refresh_token_id, :refresh_token_secret, :token_verified
 
       def refresh_token?
         !!refresh_token
@@ -41,16 +39,18 @@ module Foobara
 
       def load_refresh_token_record
         self.refresh_token_record = Types::Token.load(refresh_token_id)
+      rescue Foobara::Entity::NotFoundError
+        nil
+      end
+
+      def refresh_token_record?
+        refresh_token_record
       end
 
       def verify_refresh_token
         valid = run_subcommand!(VerifyToken, token_string: refresh_token)
 
-        unless valid[:verified]
-          # :nocov:
-          add_runtime_error(InvalidRefreshTokenError.new(context: { refresh_token_id: }))
-          # :nocov:
-        end
+        self.token_verified = valid[:verified]
       end
 
       def mark_refresh_token_as_used

data/src/verify_password.rb

@@ -16,21 +16,17 @@ module Foobara
         # TODO: result in error if no password set yet?
         check_for_valid_password
 
-        valid_password?
+        is_valid_password
       end
 
-      attr_accessor :valid_password
-
-      def valid_password?
-        !!valid_password
-      end
+      attr_accessor :is_valid_password
 
       def check_for_valid_password
         hashed_secret = user.password_secret.hashed_secret
 
-        self.valid_password = if hashed_secret
-                                run_subcommand!(VerifySecret, secret: plaintext_password, hashed_secret:)
-                              end
+        self.is_valid_password = if hashed_secret
+                                   run_subcommand!(VerifySecret, secret: plaintext_password, hashed_secret:)
+                                 end
       end
     end
   end

data/src/verify_secret.rb

@@ -13,17 +13,13 @@ module Foobara
       def execute
         verify_secret_against_hashed_secret
 
-        verified?
+        is_verified
       end
 
-      attr_accessor :verified
-
-      def verified?
-        !!verified
-      end
+      attr_accessor :is_verified
 
       def verify_secret_against_hashed_secret
-        self.verified = Argon2::Password.verify_password(secret, hashed_secret)
+        self.is_verified = Argon2::Password.verify_password(secret, hashed_secret)
       end
     end
   end

data/src/verify_token.rb

@@ -18,6 +18,11 @@ module Foobara
         message "Token is expired"
       end
 
+      class TokenDoesNotExistError < Foobara::RuntimeError
+        context({})
+        message "Token does not exist"
+      end
+
       inputs do
         # TODO: we should add a processor that flags an attribute as sensitive so we can scrub
         token_string :string, :required, :sensitive
@@ -62,7 +67,8 @@ module Foobara
 
       def load_token_record
         self.token_record_to_verify_against = Types::Token.load(token_id)
-        # TODO: handle no record found...
+      rescue Entity::NotFoundError
+        add_runtime_error(TokenDoesNotExistError)
       end
 
       def verify_hashed_secret_against_token_record

metadata

@@ -1,13 +1,13 @@
 --- !ruby/object:Gem::Specification
 name: foobara-auth
 version: !ruby/object:Gem::Version
-  version: 0.0.12
+  version: 0.1.0
 platform: ruby
 authors:
 - Miles Georgi
 bindir: bin
 cert_chain: []
-date: 2025-05-05 00:00:00.000000000 Z
+date: 1980-01-02 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: argon2
@@ -41,16 +41,22 @@ dependencies:
   name: foobara
   requirement: !ruby/object:Gem::Requirement
     requirements:
-    - - "~>"
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: 0.1.1
+    - - "<"
       - !ruby/object:Gem::Version
-        version: 0.0.1
+        version: 2.0.0
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
-    - - "~>"
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: 0.1.1
+    - - "<"
       - !ruby/object:Gem::Version
-        version: 0.0.1
+        version: 2.0.0
 email:
 - azimux@gmail.com
 executables: []
@@ -112,7 +118,7 @@ required_rubygems_version: !ruby/object:Gem::Requirement
     - !ruby/object:Gem::Version
       version: '0'
 requirements: []
-rubygems_version: 3.6.2
+rubygems_version: 3.6.9
 specification_version: 4
 summary: Provides various auth domain commands and models
 test_files: []