has_secure_passkey 0.2.3 → 0.2.5

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 2a34b7c6d4ffc77b13aacd463668ca6c79c21b056121096623afdbdd4807dba8
-  data.tar.gz: e79dc7f12cdc8ccad5b146f0c66ee309eb14c344b2753c9d14dda0d709ed94f7
+  metadata.gz: 7ccdf8261cd320cfb939e4d91622c9e78b5fb945302730aaf6c1ecdad9743f3a
+  data.tar.gz: 90d3a5c8ff281779a23d8e90089de5c3aeb7deefb98cb76adce0c70629101e46
 SHA512:
-  metadata.gz: a1d6994dbacce740e0d60ca49abea80b11502b01cea37db931d97e7359b698aef98316930a1d94b415dca0bae716f4a855d291e108bf027ac219d66fbe61bc0f
-  data.tar.gz: f1fe81cc4733432980055924d86f8c8c0f601cf0fa6754caeb8febf5374a668de509880e6d814b1c4787261c104176be012abd94751bc8c1add8ad3f1a34727a
+  metadata.gz: 9a778a01b57d312da2433bd3e115ad2adaecaed5dfc49cb987eb8412312c436cab2bfcef4ab75bdb7920670c41d9027ca70e325d38a5794a390e4f96e91951c1
+  data.tar.gz: d577280dc42bed522794e3301e5b68da79d598f6d03d27bd9ca8b81139f5e0905a16d4df38b80478624ff7499e4bdab4bb70fccb031e00e2dea14f11f7910322

data/app/assets/javascripts/components/web_authn.js

@@ -1,5 +1,5 @@
-import * as WebAuthnJSON from "../@github--webauthn-json"
-import { post } from "../@rails--request"
+import * as WebAuthnJSON from "@github/webauthn-json"
+import { post } from "@rails/request"
 
 export default class WebAuthn extends HTMLElement {
   static observedAttributes = ["action", "callback", "options"];
@@ -10,7 +10,6 @@ export default class WebAuthn extends HTMLElement {
 
   connectedCallback() {
     this.progressBar = Turbo.navigator.delegate.adapter.progressBar
-    this.style.display = "none"
     this.setAttribute("data-turbo-temporary", 1)
     this.setAttribute("data-turbo-track", "reload")
     this.run()

data/app/assets/javascripts/has_secure_passkey.js

@@ -12,28 +12,12 @@ var __export = (target, all) => {
 // app/assets/javascripts/@github--webauthn-json.js
 var exports__github_webauthn_json = {};
 __export(exports__github_webauthn_json, {
-  supported: () => {
-    {
-      return supported;
-    }
-  },
-  schema: () => {
-    {
-      return c;
-    }
-  },
-  get: () => {
-    {
-      return get;
-    }
-  },
-  create: () => {
-    {
-      return create;
-    }
-  }
+  supported: () => supported,
+  schema: () => c,
+  get: () => get,
+  create: () => create
 });
-var base64urlToBuffer = function(e) {
+function base64urlToBuffer(e) {
   const r = "==".slice(0, (4 - e.length % 4) % 4);
   const t = e.replace(/-/g, "+").replace(/_/g, "/") + r;
   const n = atob(t);
@@ -42,8 +26,8 @@ var base64urlToBuffer = function(e) {
   for (let e2 = 0;e2 < n.length; e2++)
     o[e2] = n.charCodeAt(e2);
   return i;
-};
-var bufferToBase64url = function(e) {
+}
+function bufferToBase64url(e) {
   const r = new Uint8Array(e);
   let t = "";
   for (const e2 of r)
@@ -51,63 +35,40 @@ var bufferToBase64url = function(e) {
   const n = btoa(t);
   const i = n.replace(/\+/g, "-").replace(/\//g, "_").replace(/=/g, "");
   return i;
-};
-var convert = function(t, n, i) {
+}
+var e = "copy";
+var r = "convert";
+function convert(t, n, i) {
   if (n === e)
     return i;
   if (n === r)
     return t(i);
   if (n instanceof Array)
-    return i.map((e) => convert(t, n[0], e));
+    return i.map((e2) => convert(t, n[0], e2));
   if (n instanceof Object) {
-    const e = {};
-    for (const [r, o] of Object.entries(n)) {
+    const e2 = {};
+    for (const [r2, o] of Object.entries(n)) {
       if (o.derive) {
-        const e2 = o.derive(i);
-        e2 !== undefined && (i[r] = e2);
+        const e3 = o.derive(i);
+        e3 !== undefined && (i[r2] = e3);
       }
-      if (r in i)
-        i[r] != null ? e[r] = convert(t, o.schema, i[r]) : e[r] = null;
+      if (r2 in i)
+        i[r2] != null ? e2[r2] = convert(t, o.schema, i[r2]) : e2[r2] = null;
       else if (o.required)
-        throw new Error(`Missing key: ${r}`);
+        throw new Error(`Missing key: ${r2}`);
     }
-    return e;
+    return e2;
   }
-};
-var derived = function(e, r) {
-  return { required: true, schema: e, derive: r };
-};
-var required = function(e) {
-  return { required: true, schema: e };
-};
-var optional = function(e) {
-  return { required: false, schema: e };
-};
-var createRequestFromJSON = function(e) {
-  return convert(base64urlToBuffer, o, e);
-};
-var createResponseToJSON = function(e) {
-  return convert(bufferToBase64url, a, e);
-};
-async function create(e) {
-  const r = await navigator.credentials.create(createRequestFromJSON(e));
-  return createResponseToJSON(r);
 }
-var getRequestFromJSON = function(e) {
-  return convert(base64urlToBuffer, u, e);
-};
-var getResponseToJSON = function(e) {
-  return convert(bufferToBase64url, s, e);
-};
-async function get(e) {
-  const r = await navigator.credentials.get(getRequestFromJSON(e));
-  return getResponseToJSON(r);
+function derived(e2, r2) {
+  return { required: true, schema: e2, derive: r2 };
+}
+function required(e2) {
+  return { required: true, schema: e2 };
+}
+function optional(e2) {
+  return { required: false, schema: e2 };
 }
-var supported = function() {
-  return !!(navigator.credentials && navigator.credentials.create && navigator.credentials.get && window.PublicKeyCredential);
-};
-var e = "copy";
-var r = "convert";
 var t = { type: required(e), id: required(r), transports: optional(e) };
 var n = { appid: optional(e), appidExclude: optional(e), credProps: optional(e) };
 var i = { appid: optional(e), appidExclude: optional(e), credProps: optional(e) };
@@ -119,46 +80,31 @@ var a = { type: required(e), id: required(e), rawId: required(r), authenticatorA
 var u = { mediation: optional(e), publicKey: required({ challenge: required(r), timeout: optional(e), rpId: optional(e), allowCredentials: optional([t]), userVerification: optional(e), extensions: optional(n) }), signal: optional(e) };
 var s = { type: required(e), id: required(e), rawId: required(r), authenticatorAttachment: optional(e), response: required({ clientDataJSON: required(r), authenticatorData: required(r), signature: required(r), userHandle: required(r) }), clientExtensionResults: derived(i, (e2) => e2.getClientExtensionResults()) };
 var c = { credentialCreationOptions: o, publicKeyCredentialWithAttestation: a, credentialRequestOptions: u, publicKeyCredentialWithAssertion: s };
+function createRequestFromJSON(e2) {
+  return convert(base64urlToBuffer, o, e2);
+}
+function createResponseToJSON(e2) {
+  return convert(bufferToBase64url, a, e2);
+}
+async function create(e2) {
+  const r2 = await navigator.credentials.create(createRequestFromJSON(e2));
+  return createResponseToJSON(r2);
+}
+function getRequestFromJSON(e2) {
+  return convert(base64urlToBuffer, u, e2);
+}
+function getResponseToJSON(e2) {
+  return convert(bufferToBase64url, s, e2);
+}
+async function get(e2) {
+  const r2 = await navigator.credentials.get(getRequestFromJSON(e2));
+  return getResponseToJSON(r2);
+}
+function supported() {
+  return !!(navigator.credentials && navigator.credentials.create && navigator.credentials.get && window.PublicKeyCredential);
+}
 
 // app/assets/javascripts/@rails--request.js
-var getCookie = function(t2) {
-  const e2 = document.cookie ? document.cookie.split("; ") : [];
-  const n2 = `${encodeURIComponent(t2)}=`;
-  const s2 = e2.find((t3) => t3.startsWith(n2));
-  if (s2) {
-    const t3 = s2.split("=").slice(1).join("=");
-    if (t3)
-      return decodeURIComponent(t3);
-  }
-};
-var compact = function(t2) {
-  const e2 = {};
-  for (const n2 in t2) {
-    const s2 = t2[n2];
-    s2 !== undefined && (e2[n2] = s2);
-  }
-  return e2;
-};
-var metaContent = function(t2) {
-  const e2 = document.head.querySelector(`meta[name="${t2}"]`);
-  return e2 && e2.content;
-};
-var stringEntriesFromFormData = function(t2) {
-  return [...t2].reduce((t3, [e2, n2]) => t3.concat(typeof n2 === "string" ? [[e2, n2]] : []), []);
-};
-var mergeEntries = function(t2, e2) {
-  for (const [n2, s2] of e2)
-    if (!(s2 instanceof window.File))
-      if (t2.has(n2) && !n2.includes("[]")) {
-        t2.delete(n2);
-        t2.set(n2, s2);
-      } else
-        t2.append(n2, s2);
-};
-async function post(t2, e2) {
-  const n2 = new FetchRequest("post", t2, e2);
-  return n2.perform();
-}
 class FetchResponse {
   constructor(t2) {
     this.response = t2;
@@ -233,6 +179,40 @@ class RequestInterceptor {
     this.interceptor = undefined;
   }
 }
+function getCookie(t2) {
+  const e2 = document.cookie ? document.cookie.split("; ") : [];
+  const n2 = `${encodeURIComponent(t2)}=`;
+  const s2 = e2.find((t3) => t3.startsWith(n2));
+  if (s2) {
+    const t3 = s2.split("=").slice(1).join("=");
+    if (t3)
+      return decodeURIComponent(t3);
+  }
+}
+function compact(t2) {
+  const e2 = {};
+  for (const n2 in t2) {
+    const s2 = t2[n2];
+    s2 !== undefined && (e2[n2] = s2);
+  }
+  return e2;
+}
+function metaContent(t2) {
+  const e2 = document.head.querySelector(`meta[name="${t2}"]`);
+  return e2 && e2.content;
+}
+function stringEntriesFromFormData(t2) {
+  return [...t2].reduce((t3, [e2, n2]) => t3.concat(typeof n2 === "string" ? [[e2, n2]] : []), []);
+}
+function mergeEntries(t2, e2) {
+  for (const [n2, s2] of e2)
+    if (!(s2 instanceof window.File))
+      if (t2.has(n2) && !n2.includes("[]")) {
+        t2.delete(n2);
+        t2.set(n2, s2);
+      } else
+        t2.append(n2, s2);
+}
 
 class FetchRequest {
   constructor(t2, e2, n2 = {}) {
@@ -334,6 +314,10 @@ class FetchRequest {
     return e2 && !t2 ? JSON.stringify(this.body) : this.body;
   }
 }
+async function post(t2, e2) {
+  const n2 = new FetchRequest("post", t2, e2);
+  return n2.perform();
+}
 
 // app/assets/javascripts/components/web_authn.js
 class WebAuthn extends HTMLElement {
@@ -343,7 +327,6 @@ class WebAuthn extends HTMLElement {
   }
   connectedCallback() {
     this.progressBar = Turbo.navigator.delegate.adapter.progressBar;
-    this.style.display = "none";
     this.setAttribute("data-turbo-temporary", 1);
     this.setAttribute("data-turbo-track", "reload");
     this.run();

data/lib/has_secure_passkey/options_for_create.rb

@@ -20,7 +20,7 @@ class HasSecurePasskey::OptionsForCreate
   def message
     self.class.verifier.generate(
       { challenge:, options:,
-        authenticatable: authenticatable.as_json(only: %i(email_address webauthn_id)) }.as_json
+        authenticatable: authenticatable.as_json(only: serializable_attributes) }.as_json
     )
   end
 
@@ -46,4 +46,8 @@ class HasSecurePasskey::OptionsForCreate
       exclude: authenticatable.passkeys.pluck(:external_id)
     )
   end
+
+  def serializable_attributes
+    authenticatable.class.column_names - ["id", "created_at", "updated_at"]
+  end
 end

data/lib/has_secure_passkey/version.rb

@@ -1,3 +1,3 @@
 module HasSecurePasskey
-  VERSION = "0.2.3"
+  VERSION = "0.2.5"
 end

metadata

@@ -1,13 +1,13 @@
 --- !ruby/object:Gem::Specification
 name: has_secure_passkey
 version: !ruby/object:Gem::Version
-  version: 0.2.3
+  version: 0.2.5
 platform: ruby
 authors:
 - Nick Pezza
 bindir: bin
 cert_chain: []
-date: 2024-11-04 00:00:00.000000000 Z
+date: 2025-01-25 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: rails
@@ -46,8 +46,6 @@ files:
 - MIT-LICENSE
 - README.md
 - Rakefile
-- app/assets/javascripts/@github--webauthn-json.js
-- app/assets/javascripts/@rails--request.js
 - app/assets/javascripts/components/has_secure_passkey.js
 - app/assets/javascripts/components/web_authn.js
 - app/assets/javascripts/has_secure_passkey.js
@@ -107,7 +105,7 @@ required_rubygems_version: !ruby/object:Gem::Requirement
     - !ruby/object:Gem::Version
       version: '0'
 requirements: []
-rubygems_version: 3.6.0.dev
+rubygems_version: 3.6.2
 specification_version: 4
 summary: Add passkey support to Rails
 test_files: []

data/app/assets/javascripts/@github--webauthn-json.js

@@ -1 +0,0 @@
-function base64urlToBuffer(e){const r="==".slice(0,(4-e.length%4)%4);const t=e.replace(/-/g,"+").replace(/_/g,"/")+r;const n=atob(t);const i=new ArrayBuffer(n.length);const o=new Uint8Array(i);for(let e=0;e<n.length;e++)o[e]=n.charCodeAt(e);return i}function bufferToBase64url(e){const r=new Uint8Array(e);let t="";for(const e of r)t+=String.fromCharCode(e);const n=btoa(t);const i=n.replace(/\+/g,"-").replace(/\//g,"_").replace(/=/g,"");return i}var e="copy";var r="convert";function convert(t,n,i){if(n===e)return i;if(n===r)return t(i);if(n instanceof Array)return i.map((e=>convert(t,n[0],e)));if(n instanceof Object){const e={};for(const[r,o]of Object.entries(n)){if(o.derive){const e=o.derive(i);void 0!==e&&(i[r]=e)}if(r in i)null!=i[r]?e[r]=convert(t,o.schema,i[r]):e[r]=null;else if(o.required)throw new Error(`Missing key: ${r}`)}return e}}function derived(e,r){return{required:true,schema:e,derive:r}}function required(e){return{required:true,schema:e}}function optional(e){return{required:false,schema:e}}var t={type:required(e),id:required(r),transports:optional(e)};var n={appid:optional(e),appidExclude:optional(e),credProps:optional(e)};var i={appid:optional(e),appidExclude:optional(e),credProps:optional(e)};var o={publicKey:required({rp:required(e),user:required({id:required(r),name:required(e),displayName:required(e)}),challenge:required(r),pubKeyCredParams:required(e),timeout:optional(e),excludeCredentials:optional([t]),authenticatorSelection:optional(e),attestation:optional(e),extensions:optional(n)}),signal:optional(e)};var a={type:required(e),id:required(e),rawId:required(r),authenticatorAttachment:optional(e),response:required({clientDataJSON:required(r),attestationObject:required(r),transports:derived(e,(e=>{var r;return(null==(r=e.getTransports)?void 0:r.call(e))||[]}))}),clientExtensionResults:derived(i,(e=>e.getClientExtensionResults()))};var u={mediation:optional(e),publicKey:required({challenge:required(r),timeout:optional(e),rpId:optional(e),allowCredentials:optional([t]),userVerification:optional(e),extensions:optional(n)}),signal:optional(e)};var s={type:required(e),id:required(e),rawId:required(r),authenticatorAttachment:optional(e),response:required({clientDataJSON:required(r),authenticatorData:required(r),signature:required(r),userHandle:required(r)}),clientExtensionResults:derived(i,(e=>e.getClientExtensionResults()))};var c={credentialCreationOptions:o,publicKeyCredentialWithAttestation:a,credentialRequestOptions:u,publicKeyCredentialWithAssertion:s};function createRequestFromJSON(e){return convert(base64urlToBuffer,o,e)}function createResponseToJSON(e){return convert(bufferToBase64url,a,e)}async function create(e){const r=await navigator.credentials.create(createRequestFromJSON(e));return createResponseToJSON(r)}function getRequestFromJSON(e){return convert(base64urlToBuffer,u,e)}function getResponseToJSON(e){return convert(bufferToBase64url,s,e)}async function get(e){const r=await navigator.credentials.get(getRequestFromJSON(e));return getResponseToJSON(r)}function supported(){return!!(navigator.credentials&&navigator.credentials.create&&navigator.credentials.get&&window.PublicKeyCredential)}export{create,get,c as schema,supported};

data/app/assets/javascripts/@rails--request.js

@@ -1,2 +0,0 @@
-class FetchResponse{constructor(t){this.response=t}get statusCode(){return this.response.status}get redirected(){return this.response.redirected}get ok(){return this.response.ok}get unauthenticated(){return this.statusCode===401}get unprocessableEntity(){return this.statusCode===422}get authenticationURL(){return this.response.headers.get("WWW-Authenticate")}get contentType(){const t=this.response.headers.get("Content-Type")||"";return t.replace(/;.*$/,"")}get headers(){return this.response.headers}get html(){return this.contentType.match(/^(application|text)\/(html|xhtml\+xml)$/)?this.text:Promise.reject(new Error(`Expected an HTML response but got "${this.contentType}" instead`))}get json(){return this.contentType.match(/^application\/.*json$/)?this.responseJson||(this.responseJson=this.response.json()):Promise.reject(new Error(`Expected a JSON response but got "${this.contentType}" instead`))}get text(){return this.responseText||(this.responseText=this.response.text())}get isTurboStream(){return this.contentType.match(/^text\/vnd\.turbo-stream\.html/)}get isScript(){return this.contentType.match(/\b(?:java|ecma)script\b/)}async renderTurboStream(){if(!this.isTurboStream)return Promise.reject(new Error(`Expected a Turbo Stream response but got "${this.contentType}" instead`));window.Turbo?await window.Turbo.renderStreamMessage(await this.text):console.warn("You must set `window.Turbo = Turbo` to automatically process Turbo Stream events with request.js")}async activeScript(){if(!this.isScript)return Promise.reject(new Error(`Expected a Script response but got "${this.contentType}" instead`));{const t=document.createElement("script");const e=document.querySelector("meta[name=csp-nonce]");const n=e&&e.content;n&&t.setAttribute("nonce",n);t.innerHTML=await this.text;document.body.appendChild(t)}}}class RequestInterceptor{static register(t){this.interceptor=t}static get(){return this.interceptor}static reset(){this.interceptor=void 0}}function getCookie(t){const e=document.cookie?document.cookie.split("; "):[];const n=`${encodeURIComponent(t)}=`;const s=e.find((t=>t.startsWith(n)));if(s){const t=s.split("=").slice(1).join("=");if(t)return decodeURIComponent(t)}}function compact(t){const e={};for(const n in t){const s=t[n];s!==void 0&&(e[n]=s)}return e}function metaContent(t){const e=document.head.querySelector(`meta[name="${t}"]`);return e&&e.content}function stringEntriesFromFormData(t){return[...t].reduce(((t,[e,n])=>t.concat(typeof n==="string"?[[e,n]]:[])),[])}function mergeEntries(t,e){for(const[n,s]of e)if(!(s instanceof window.File))if(t.has(n)&&!n.includes("[]")){t.delete(n);t.set(n,s)}else t.append(n,s)}class FetchRequest{constructor(t,e,n={}){this.method=t;this.options=n;this.originalUrl=e.toString()}async perform(){try{const t=RequestInterceptor.get();t&&await t(this)}catch(t){console.error(t)}const t=this.responseKind==="turbo-stream"&&window.Turbo?window.Turbo.fetch:window.fetch;const e=new FetchResponse(await t(this.url,this.fetchOptions));if(e.unauthenticated&&e.authenticationURL)return Promise.reject(window.location.href=e.authenticationURL);e.isScript&&await e.activeScript();const n=e.ok||e.unprocessableEntity;n&&e.isTurboStream&&await e.renderTurboStream();return e}addHeader(t,e){const n=this.additionalHeaders;n[t]=e;this.options.headers=n}sameHostname(){if(!this.originalUrl.startsWith("http:"))return true;try{return new URL(this.originalUrl).hostname===window.location.hostname}catch(t){return true}}get fetchOptions(){return{method:this.method.toUpperCase(),headers:this.headers,body:this.formattedBody,signal:this.signal,credentials:this.credentials,redirect:this.redirect}}get headers(){const t={"X-Requested-With":"XMLHttpRequest","Content-Type":this.contentType,Accept:this.accept};this.sameHostname()&&(t["X-CSRF-Token"]=this.csrfToken);return compact(Object.assign(t,this.additionalHeaders))}get csrfToken(){return getCookie(metaContent("csrf-param"))||metaContent("csrf-token")}get contentType(){return this.options.contentType?this.options.contentType:this.body==null||this.body instanceof window.FormData?void 0:this.body instanceof window.File?this.body.type:"application/json"}get accept(){switch(this.responseKind){case"html":return"text/html, application/xhtml+xml";case"turbo-stream":return"text/vnd.turbo-stream.html, text/html, application/xhtml+xml";case"json":return"application/json, application/vnd.api+json";case"script":return"text/javascript, application/javascript";default:return"*/*"}}get body(){return this.options.body}get query(){const t=(this.originalUrl.split("?")[1]||"").split("#")[0];const e=new URLSearchParams(t);let n=this.options.query;n=n instanceof window.FormData?stringEntriesFromFormData(n):n instanceof window.URLSearchParams?n.entries():Object.entries(n||{});mergeEntries(e,n);const s=e.toString();return s.length>0?`?${s}`:""}get url(){return this.originalUrl.split("?")[0].split("#")[0]+this.query}get responseKind(){return this.options.responseKind||"html"}get signal(){return this.options.signal}get redirect(){return this.options.redirect||"follow"}get credentials(){return this.options.credentials||"same-origin"}get additionalHeaders(){return this.options.headers||{}}get formattedBody(){const t=Object.prototype.toString.call(this.body)==="[object String]";const e=this.headers["Content-Type"]==="application/json";return e&&!t?JSON.stringify(this.body):this.body}}async function get(t,e){const n=new FetchRequest("get",t,e);return n.perform()}async function post(t,e){const n=new FetchRequest("post",t,e);return n.perform()}async function put(t,e){const n=new FetchRequest("put",t,e);return n.perform()}async function patch(t,e){const n=new FetchRequest("patch",t,e);return n.perform()}async function destroy(t,e){const n=new FetchRequest("delete",t,e);return n.perform()}export{FetchRequest,FetchResponse,RequestInterceptor,destroy,get,patch,post,put};
-//# sourceMappingURL=index.js.map