katalyst-koi 5.11.5 → 5.13.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: c9152c315e534ac8308874565166fca173df77f919af3104e17a3ae198b5d66c
-  data.tar.gz: 4d54135239dc294bdc334b9be7aaa6df8d3db2c216c6079fddd8b83baa0713b8
+  metadata.gz: f39d7b4aa5841a4c242e269f6e908b8466c7c3e5b5b9af1ee5dba6b10e58c88e
+  data.tar.gz: b5e485e8822fdcb8481b544860087b05df67ebb6585bb462f5130c8d58dfc4c8
 SHA512:
-  metadata.gz: f089a059a9fc1b36e266e37c604eb7d5cc563eb6f118a2e04da2bd0d89f0281982757b49474d017e0793f755010ee894e97bfd786c6cf8ce892fb3ce5bba1113
-  data.tar.gz: ec2a37f520c6ade602c86aa091760735bec7f268be858189d9d9dde8ec01aa5720336a8a4ded36201bbb97bc270e26e3592fcd9006fbf492e9c29ebe8d6e22ee
+  metadata.gz: d84c371479be399360ed3695b571991fbf9d39ddce5b1a8c3e9bba4f0b194b9cfaf06676fe6ac3374b22debeac200eddbd1ced1eda17ed99df9871091b9af789
+  data.tar.gz: 61d466a7f1f4aa3a93b8625c56d95bdfed9b5bb37e013ff6df4ee56b6d6927f4a92caf3a7cfd1e1fa43f5449db9ac09ee54c9c0a0a137c8a6fcf1dd47e918dec

data/app/controllers/concerns/koi/controller/has_webauthn.rb

@@ -49,8 +49,11 @@ module Koi
       def webauthn_authenticate!(response)
         return if response.blank?
 
+        credential = JSON.parse(response)
+        return false unless credential.is_a?(Hash)
+
         webauthn_credential, stored_credential = webauthn_relying_party.verify_authentication(
-          JSON.parse(response),
+          credential,
           session.delete(:authentication_challenge),
         ) do |credential|
           Admin::Credential.find_by!(external_id: credential.id)
@@ -62,7 +65,7 @@ module Koi
         )
 
         stored_credential.admin
-      rescue ActiveRecord::RecordNotFound, WebAuthn::VerificationError
+      rescue ActiveRecord::RecordNotFound, WebAuthn::VerificationError, JSON::ParserError
         false
       end
 

data/app/helpers/koi/header_helper.rb

@@ -75,8 +75,8 @@ module Koi
     # @param model [ActiveRecord::Base] The record to create an archive/delete link for
     # @param archive_text [String] Text to display for archive link (default: "Archive")
     # @param delete_text [String] Text to display for delete link (default: "Delete")
-    # @param confirm [String] Confirmation message for delete action (default: "Are you sure?")
-    # @param url [String] Target url for delete actions (defaults to admin_<record>_path)
+    # @param confirm [String] Confirmation message for archive and delete actions (default: "Are you sure?")
+    # @param url [String] Target url for archive and delete actions (defaults to admin_<record>_path)
     # @param ** Additional HTML attributes to pass to the link
     # @return [String, nil] Returns the HTML link element, or nil if record is not persisted
     #
@@ -97,7 +97,7 @@ module Koi
       if model.archived?
         link_to(delete_text, url, data: { turbo_method: :delete, turbo_confirm: confirm }, **)
       else
-        link_to(archive_text, url, data: { turbo_method: :delete }, **)
+        link_to(archive_text, url, data: { turbo_method: :delete, turbo_confirm: confirm }, **)
       end
     end
 

data/lib/koi/engine.rb

@@ -118,10 +118,5 @@ module Koi
         )
       end
     end
-
-    # Koi uses table_query_with() which requires a capture patch for form and view_component interoperability
-    initializer "koi.view_component", before: "view_component.enable_capture_patch" do |app|
-      app.config.view_component.enable_capture_patch = true
-    end
   end
 end

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: katalyst-koi
 version: !ruby/object:Gem::Version
-  version: 5.11.5
+  version: 5.13.0
 platform: ruby
 authors:
 - Katalyst Interactive
@@ -183,14 +183,14 @@ dependencies:
     requirements:
     - - ">="
       - !ruby/object:Gem::Version
-        version: '0'
+        version: '4.0'
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - ">="
       - !ruby/object:Gem::Version
-        version: '0'
+        version: '4.0'
 - !ruby/object:Gem::Dependency
   name: katalyst-content
   requirement: !ruby/object:Gem::Requirement