gemstack-auth 0.2.3 → 0.2.5
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- checksums.yaml +4 -4
- data/CHANGELOG.md +8 -0
- data/lib/gemstack/auth/controller.rb +1 -1
- data/lib/gemstack/auth/password.rb +1 -1
- data/lib/gemstack/auth.rb +1 -1
- data/lib/gemstack/policy.rb +1 -1
- metadata +11 -11
checksums.yaml
CHANGED
|
@@ -1,7 +1,7 @@
|
|
|
1
1
|
---
|
|
2
2
|
SHA256:
|
|
3
|
-
metadata.gz:
|
|
4
|
-
data.tar.gz:
|
|
3
|
+
metadata.gz: cb05aae71c145178395007d3ae03cdea187268632a8894424a4aefa3e261067a
|
|
4
|
+
data.tar.gz: fed5a24cdac9c6c26cd646fd71f3f04498a80566b6753b4189cbd2cf6f259ac1
|
|
5
5
|
SHA512:
|
|
6
|
-
metadata.gz:
|
|
7
|
-
data.tar.gz:
|
|
6
|
+
metadata.gz: e82989e029485bd6f79982fdc3b8be4e4454af8831d2161f764fdbe62a043d32d12a35d7ce2fc0a4d2958b68a2a7739e54b394565b7bb0edeb8c4bc077f7542b
|
|
7
|
+
data.tar.gz: 13fe83fc5beffb9fecc1afcf522d0e695a9021e5a1f6d44232da9614e234ed031057abd9165278bde949ce4024b4457955f581a566133e5c9ef9e351e7cdb6e3
|
data/CHANGELOG.md
CHANGED
|
@@ -1,5 +1,13 @@
|
|
|
1
1
|
# Changelog
|
|
2
2
|
|
|
3
|
+
## 0.2.5
|
|
4
|
+
|
|
5
|
+
See the [GemStack changelog](https://github.com/gemstack-rb/gemstack/blob/main/CHANGELOG.md).
|
|
6
|
+
|
|
7
|
+
## 0.2.4
|
|
8
|
+
|
|
9
|
+
See the [GemStack changelog](https://github.com/gemstack-rb/gemstack/blob/main/CHANGELOG.md).
|
|
10
|
+
|
|
3
11
|
## 0.2.3
|
|
4
12
|
|
|
5
13
|
See the [GemStack changelog](https://github.com/gemstack-rb/gemstack/blob/main/CHANGELOG.md).
|
|
@@ -20,7 +20,7 @@ module GemStack
|
|
|
20
20
|
# DELETE) from other sites are refused with 403 unless the origin is in
|
|
21
21
|
# config.auth.trusted_origins. Browsers label every request with
|
|
22
22
|
# Sec-Fetch-Site / Origin; clients that send neither (curl, servers) are
|
|
23
|
-
# not browsers and can't carry a victim's cookie
|
|
23
|
+
# not browsers and can't carry a victim's cookie.
|
|
24
24
|
module Controller
|
|
25
25
|
SAFE_METHODS = %w[GET HEAD OPTIONS].freeze
|
|
26
26
|
|
|
@@ -4,7 +4,7 @@ require "argon2"
|
|
|
4
4
|
|
|
5
5
|
module GemStack
|
|
6
6
|
module Auth
|
|
7
|
-
# Password hashing with Argon2id
|
|
7
|
+
# Password hashing with Argon2id. Hashes from other
|
|
8
8
|
# systems in bcrypt format still verify (add gem "bcrypt") and are
|
|
9
9
|
# upgraded to Argon2id on the next successful login.
|
|
10
10
|
module Password
|
data/lib/gemstack/auth.rb
CHANGED
|
@@ -9,7 +9,7 @@ require "gemstack/db"
|
|
|
9
9
|
require "gemstack/mail"
|
|
10
10
|
|
|
11
11
|
module GemStack
|
|
12
|
-
# Authentication
|
|
12
|
+
# Authentication: Argon2id passwords, database
|
|
13
13
|
# sessions in an HttpOnly cookie for the Next.js frontend, and bearer API
|
|
14
14
|
# tokens for scripts and other services. `gemstack add auth` generates the
|
|
15
15
|
# tables, the User model, the controllers, the emails and the Next.js pages
|
data/lib/gemstack/policy.rb
CHANGED
metadata
CHANGED
|
@@ -1,7 +1,7 @@
|
|
|
1
1
|
--- !ruby/object:Gem::Specification
|
|
2
2
|
name: gemstack-auth
|
|
3
3
|
version: !ruby/object:Gem::Version
|
|
4
|
-
version: 0.2.
|
|
4
|
+
version: 0.2.5
|
|
5
5
|
platform: ruby
|
|
6
6
|
authors:
|
|
7
7
|
- Adware Technologies
|
|
@@ -30,70 +30,70 @@ dependencies:
|
|
|
30
30
|
requirements:
|
|
31
31
|
- - '='
|
|
32
32
|
- !ruby/object:Gem::Version
|
|
33
|
-
version: 0.2.
|
|
33
|
+
version: 0.2.5
|
|
34
34
|
type: :runtime
|
|
35
35
|
prerelease: false
|
|
36
36
|
version_requirements: !ruby/object:Gem::Requirement
|
|
37
37
|
requirements:
|
|
38
38
|
- - '='
|
|
39
39
|
- !ruby/object:Gem::Version
|
|
40
|
-
version: 0.2.
|
|
40
|
+
version: 0.2.5
|
|
41
41
|
- !ruby/object:Gem::Dependency
|
|
42
42
|
name: gemstack-core
|
|
43
43
|
requirement: !ruby/object:Gem::Requirement
|
|
44
44
|
requirements:
|
|
45
45
|
- - '='
|
|
46
46
|
- !ruby/object:Gem::Version
|
|
47
|
-
version: 0.2.
|
|
47
|
+
version: 0.2.5
|
|
48
48
|
type: :runtime
|
|
49
49
|
prerelease: false
|
|
50
50
|
version_requirements: !ruby/object:Gem::Requirement
|
|
51
51
|
requirements:
|
|
52
52
|
- - '='
|
|
53
53
|
- !ruby/object:Gem::Version
|
|
54
|
-
version: 0.2.
|
|
54
|
+
version: 0.2.5
|
|
55
55
|
- !ruby/object:Gem::Dependency
|
|
56
56
|
name: gemstack-db
|
|
57
57
|
requirement: !ruby/object:Gem::Requirement
|
|
58
58
|
requirements:
|
|
59
59
|
- - '='
|
|
60
60
|
- !ruby/object:Gem::Version
|
|
61
|
-
version: 0.2.
|
|
61
|
+
version: 0.2.5
|
|
62
62
|
type: :runtime
|
|
63
63
|
prerelease: false
|
|
64
64
|
version_requirements: !ruby/object:Gem::Requirement
|
|
65
65
|
requirements:
|
|
66
66
|
- - '='
|
|
67
67
|
- !ruby/object:Gem::Version
|
|
68
|
-
version: 0.2.
|
|
68
|
+
version: 0.2.5
|
|
69
69
|
- !ruby/object:Gem::Dependency
|
|
70
70
|
name: gemstack-http
|
|
71
71
|
requirement: !ruby/object:Gem::Requirement
|
|
72
72
|
requirements:
|
|
73
73
|
- - '='
|
|
74
74
|
- !ruby/object:Gem::Version
|
|
75
|
-
version: 0.2.
|
|
75
|
+
version: 0.2.5
|
|
76
76
|
type: :runtime
|
|
77
77
|
prerelease: false
|
|
78
78
|
version_requirements: !ruby/object:Gem::Requirement
|
|
79
79
|
requirements:
|
|
80
80
|
- - '='
|
|
81
81
|
- !ruby/object:Gem::Version
|
|
82
|
-
version: 0.2.
|
|
82
|
+
version: 0.2.5
|
|
83
83
|
- !ruby/object:Gem::Dependency
|
|
84
84
|
name: gemstack-mail
|
|
85
85
|
requirement: !ruby/object:Gem::Requirement
|
|
86
86
|
requirements:
|
|
87
87
|
- - '='
|
|
88
88
|
- !ruby/object:Gem::Version
|
|
89
|
-
version: 0.2.
|
|
89
|
+
version: 0.2.5
|
|
90
90
|
type: :runtime
|
|
91
91
|
prerelease: false
|
|
92
92
|
version_requirements: !ruby/object:Gem::Requirement
|
|
93
93
|
requirements:
|
|
94
94
|
- - '='
|
|
95
95
|
- !ruby/object:Gem::Version
|
|
96
|
-
version: 0.2.
|
|
96
|
+
version: 0.2.5
|
|
97
97
|
email:
|
|
98
98
|
- gemstack26@gmail.com
|
|
99
99
|
executables: []
|