google-authenticator-rails 1.6.0 → 1.6.1

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA1:
-  metadata.gz: 19391728ca506273484c8691492ba1a09b2024ae
-  data.tar.gz: 57e4b1ce9b77074db2be9212b73a6a8f6f43ee02
+  metadata.gz: 1b4d33cb46c087f9315de98ad520bdfed5d00827
+  data.tar.gz: 76e15144dc492f42822ebd9fef02f0685e7e712e
 SHA512:
-  metadata.gz: e87812aca056ca5be5474fd3384bc7851104254db7b325949988e16fa3ac12546b6581f8394d301a8b3f800a6a305404dcb766f16d609756a285ee3806ed7b04
-  data.tar.gz: d13dd058fb08ab3dba40d126daabaaf2e52ad0c8c59124f099cab59dac30437268f01b3315443c5bf0b8a294d3c3b0bb01a99eecd0910a1c7a1a3f4ce9114e8a
+  metadata.gz: 7bfc4dcca348c1b11e6c9e1147c7a3447024d5dfd87a8dbf0ae2ae922c7ebaa69b75e3489784d641032e0c2f72bf42bc719dd8e34515ae0ef0fa8d8e16ea302f
+  data.tar.gz: 9f453df41489951b4926ec42d33728e163524fc75098a8c9f18a4ed9f955fbdc5aa65dc26220966e86a2c86a2ea7a37e6115655887858ced4e839664513af006

data/Gemfile.lock

@@ -1,7 +1,7 @@
 PATH
   remote: .
   specs:
-    google-authenticator-rails (1.6.0)
+    google-authenticator-rails (1.6.1)
       actionpack
       activerecord
       google-qr

data/lib/google-authenticator-rails/version.rb

@@ -1,3 +1,3 @@
 module GoogleAuthenticatorRails
-  VERSION = "1.6.0"
+  VERSION = "1.6.1"
 end

data/lib/tasks/google_authenticator.rake

@@ -0,0 +1,55 @@
+namespace :google_authenticator do
+
+  def do_encrypt(args, already_encrypted, op_name)
+    model_names = if args[:optional_model_list]
+                    args.extras.unshift(args[:optional_model_list])
+                  else
+                    # Adapted from https://stackoverflow.com/a/8248849/7478194
+                    Dir[Rails.root.join('app/models/*.rb').to_s].map { |filename| File.basename(filename, '.rb').camelize }
+                  end
+    
+    ActiveRecord::Base.transaction do
+      match_op = " = #{already_encrypted ? 138 : 16}"
+      model_names.each do |model_name|
+        klass = model_name.constantize
+        next unless klass.ancestors.include?(ActiveRecord::Base) && klass.try(:google_secrets_encrypted)
+        print "#{op_name}ing model #{klass.name.inspect} (table #{klass.table_name.inspect}): "
+        count = 0
+        klass.where("LENGTH(#{klass.google_secret_column})#{match_op}").find_each do |record|
+          yield record
+          count += 1
+        end
+        puts "#{count} #{'secret'.pluralize(count)} #{op_name}ed"
+      end
+    end
+  end
+  
+  desc 'Encrypt all secret columns (add the :encrypt_secrets options *before* running)'
+  task :encrypt_secrets, [:optional_model_list] => :environment do |_t, args|
+    do_encrypt(args, false, 'Encrypt') { |record| record.encrypt_google_secret! }
+  end
+
+  desc 'Re-encrypt all secret columns from old_secret_key_base to secret_key_base'
+  task :reencrypt_secrets, [:optional_model_list] => :environment do |_t, args|
+    if Rails.application.secrets.old_secret_key_base.blank?
+      puts 'old_secret_key_base is not set in config/secrets.yml'
+    else
+      secret_encryptor = GoogleAuthenticatorRails::ActiveRecord::Helpers.get_google_secret_encryptor
+      Rails.application.secrets[:secret_key_base] = Rails.application.secrets.old_secret_key_base
+      Rails.application.instance_eval { @caching_key_generator = nil }
+      old_secret_encryptor = GoogleAuthenticatorRails::ActiveRecord::Helpers.get_google_secret_encryptor
+      do_encrypt(args, true, 'Re-encrypt') do |record|
+        GoogleAuthenticatorRails.secret_encryptor = old_secret_encryptor
+        plain_secret = record.google_secret_value
+        GoogleAuthenticatorRails.secret_encryptor = secret_encryptor
+        record.send(:change_google_secret_to!, plain_secret)
+      end
+    end
+  end
+  
+  desc 'Decrypt all secret columns (remove the :encrypt_secrets options *after* running)'
+  task :decrypt_secrets, [:optional_model_list] => :environment do |_t, args|
+    do_encrypt(args, true, 'Decrypt') { |record| record.send(:change_google_secret_to!, record.google_secret_value, false) }
+  end  
+
+end

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: google-authenticator-rails
 version: !ruby/object:Gem::Version
-  version: 1.6.0
+  version: 1.6.1
 platform: ruby
 authors:
 - Jared McFarland
 autorequire: 
 bindir: bin
 cert_chain: []
-date: 2018-05-02 00:00:00.000000000 Z
+date: 2018-05-10 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: rotp
@@ -177,6 +177,7 @@ files:
 - lib/google-authenticator-rails/session/base.rb
 - lib/google-authenticator-rails/session/persistence.rb
 - lib/google-authenticator-rails/version.rb
+- lib/tasks/google_authenticator.rake
 - spec/action_controller/integration_spec.rb
 - spec/action_controller/rails_adapter_spec.rb
 - spec/google_authenticator_spec.rb