foobara-auth 0.0.12 → 0.0.13

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 371e579335275b2c6d8d695aea7b14784f6ecf95d1df4742b38eb251ba941a6a
-  data.tar.gz: 12354ce1c4b44cdb8ce1c398b7334ac6ce0f6a4a3ee619e698b5c94e114df528
+  metadata.gz: ec416a90f775b81c196934c7e9db2dfb4b8da390dc2133c737a889ef5aaacede
+  data.tar.gz: 0b24c1e2b94652a74e8bb27eacafabfffe6141022b86b1e233b566ed3feec4ae
 SHA512:
-  metadata.gz: 7d79b81bd382733037b66f464552e5401c69801355bc78c00354f22ca60b8db43d4066b012476a1b7bcdd854d03b39e854847b6cbf5bdc39543f7dc80e832cac
-  data.tar.gz: 2cbd1f530b358e94eb0dd161640828e69473ede06f9d0d56204ece3ecc17efc974a3b283b902344709c2932077b777c9a400357b8c712d9b31e0df8e5bd79faa
+  metadata.gz: 51e2a3098e111be28f582c9870e525840d769d3ae617918364b51a65ae122674b19fcaca27e140d16364cf1550549b07422a9f9480d32cebfa4f132b23259eaa
+  data.tar.gz: 634134b416bdcd9c97f21ad7fabfeaadfe04851cd7fe28226664d5ef6af23c43d03ec44f575605d25699b7d849629964a4c33fa47b16d0616016afd3a2e742d5

data/CHANGELOG.md

@@ -1,3 +1,7 @@
+## [0.0.13] - 2025-05-13
+
+- Allow logout to work even if refresh token is deleted/invalid
+
 ## [0.0.12] - 2025-05-05
 
 - Do not explode when refresh token doesn't exist

data/src/logout.rb

@@ -1,11 +1,6 @@
 module Foobara
   module Auth
     class Logout < Foobara::Command
-      class InvalidRefreshTokenError < Foobara::RuntimeError
-        context refresh_token_id: :string
-        message "Invalid refresh token"
-      end
-
       depends_on VerifyToken
       depends_on_entity Types::Token
       depends_on_entity Types::User
@@ -21,15 +16,18 @@ module Foobara
         if refresh_token?
           determine_refresh_token_id_and_secret
           load_refresh_token_record
-          verify_refresh_token
-          # Delete it instead maybe?
-          mark_refresh_token_as_used
+
+          if refresh_token_record?
+            verify_refresh_token
+            # Delete it instead maybe?
+            mark_refresh_token_as_used
+          end
         end
 
         nil
       end
 
-      attr_accessor :refresh_token_record, :refresh_token_id, :refresh_token_secret
+      attr_accessor :refresh_token_record, :refresh_token_id, :refresh_token_secret, :token_verified
 
       def refresh_token?
         !!refresh_token
@@ -41,16 +39,18 @@ module Foobara
 
       def load_refresh_token_record
         self.refresh_token_record = Types::Token.load(refresh_token_id)
+      rescue Foobara::Entity::NotFoundError
+        nil
+      end
+
+      def refresh_token_record?
+        refresh_token_record
       end
 
       def verify_refresh_token
         valid = run_subcommand!(VerifyToken, token_string: refresh_token)
 
-        unless valid[:verified]
-          # :nocov:
-          add_runtime_error(InvalidRefreshTokenError.new(context: { refresh_token_id: }))
-          # :nocov:
-        end
+        self.token_verified = valid[:verified]
       end
 
       def mark_refresh_token_as_used

data/src/verify_token.rb

@@ -18,6 +18,11 @@ module Foobara
         message "Token is expired"
       end
 
+      class TokenDoesNotExistError < Foobara::RuntimeError
+        context({})
+        message "Token does not exist"
+      end
+
       inputs do
         # TODO: we should add a processor that flags an attribute as sensitive so we can scrub
         token_string :string, :required, :sensitive
@@ -62,7 +67,8 @@ module Foobara
 
       def load_token_record
         self.token_record_to_verify_against = Types::Token.load(token_id)
-        # TODO: handle no record found...
+      rescue Entity::NotFoundError
+        add_runtime_error(TokenDoesNotExistError)
       end
 
       def verify_hashed_secret_against_token_record

metadata

@@ -1,13 +1,13 @@
 --- !ruby/object:Gem::Specification
 name: foobara-auth
 version: !ruby/object:Gem::Version
-  version: 0.0.12
+  version: 0.0.13
 platform: ruby
 authors:
 - Miles Georgi
 bindir: bin
 cert_chain: []
-date: 2025-05-05 00:00:00.000000000 Z
+date: 2025-05-14 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: argon2