katalyst-koi 5.8.2 → 5.9.0

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: katalyst-koi
 version: !ruby/object:Gem::Version
-  version: 5.8.2
+  version: 5.9.0
 platform: ruby
 authors:
 - Katalyst Interactive
@@ -79,6 +79,20 @@ dependencies:
     - - ">="
       - !ruby/object:Gem::Version
         version: '0'
+- !ruby/object:Gem::Dependency
+  name: jwt
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: '3.0'
+  type: :runtime
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: '3.0'
 - !ruby/object:Gem::Dependency
   name: rotp
   requirement: !ruby/object:Gem::Requirement
@@ -265,6 +279,7 @@ files:
 - app/assets/builds/katalyst/koi.js
 - app/assets/builds/katalyst/koi.min.js
 - app/assets/builds/katalyst/koi.min.js.map
+- app/assets/builds/koi/admin.css
 - app/assets/config/koi.js
 - app/assets/fonts/koi/inconsolata-license.txt
 - app/assets/fonts/koi/inconsolata-v37-latin-regular.woff2
@@ -373,6 +388,7 @@ files:
 - app/components/koi/tables/cells/link_component.rb
 - app/components/koi/tables/table_component.rb
 - app/controllers/admin/active_storage/direct_uploads_controller.rb
+- app/controllers/admin/admin_roles_controller.rb
 - app/controllers/admin/admin_users_controller.rb
 - app/controllers/admin/application_controller.rb
 - app/controllers/admin/background_jobs_controller.rb
@@ -380,11 +396,11 @@ files:
 - app/controllers/admin/credentials_controller.rb
 - app/controllers/admin/dashboards_controller.rb
 - app/controllers/admin/device_authorizations_controller.rb
-- app/controllers/admin/device_tokens_controller.rb
 - app/controllers/admin/feature_flags_controller.rb
 - app/controllers/admin/otps_controller.rb
 - app/controllers/admin/profiles_controller.rb
 - app/controllers/admin/recurring_tasks_controller.rb
+- app/controllers/admin/sessions/tokens_controller.rb
 - app/controllers/admin/sessions_controller.rb
 - app/controllers/admin/tokens_controller.rb
 - app/controllers/admin/url_rewrites_controller.rb
@@ -425,6 +441,7 @@ files:
 - app/models/admin/collection.rb
 - app/models/admin/credential.rb
 - app/models/admin/device_authorization.rb
+- app/models/admin/role.rb
 - app/models/admin/session.rb
 - app/models/admin/user.rb
 - app/models/application_record.rb
@@ -433,9 +450,16 @@ files:
 - app/models/concerns/koi/model/otp.rb
 - app/models/feature_flag.rb
 - app/models/koi/current.rb
+- app/models/koi/identity.rb
+- app/models/koi/identity/assertion.rb
+- app/models/koi/identity/member.rb
+- app/models/koi/identity/principal.rb
+- app/models/koi/identity/provider.rb
 - app/models/recurring_task.rb
 - app/models/url_rewrite.rb
 - app/models/well_known.rb
+- app/views/admin/admin_roles/index.html.erb
+- app/views/admin/admin_roles/show.html.erb
 - app/views/admin/admin_users/_form.html.erb
 - app/views/admin/admin_users/archived.html.erb
 - app/views/admin/admin_users/edit.html.erb
@@ -469,12 +493,12 @@ files:
 - app/views/admin/sessions/new.html.erb
 - app/views/admin/sessions/otp.html.erb
 - app/views/admin/sessions/password.html.erb
+- app/views/admin/sessions/tokens/create.turbo_stream.erb
+- app/views/admin/sessions/tokens/show.html.erb
 - app/views/admin/shared/icons/_close.html.erb
 - app/views/admin/shared/icons/_cross.html.erb
 - app/views/admin/shared/icons/_menu.html.erb
 - app/views/admin/shared/icons/_refresh.html.erb
-- app/views/admin/tokens/create.turbo_stream.erb
-- app/views/admin/tokens/show.html.erb
 - app/views/admin/url_rewrites/_form.html.erb
 - app/views/admin/url_rewrites/edit.html.erb
 - app/views/admin/url_rewrites/index.html.erb
@@ -521,6 +545,9 @@ files:
 - db/migrate/20260501000000_add_last_sign_out_at_to_admin_users.rb
 - db/migrate/20260525041029_create_admin_sessions.rb
 - db/migrate/20260525111759_clean_up_admin_user_timestamps.rb
+- db/migrate/20260721000001_create_admin_roles.rb
+- db/migrate/20260721000002_add_admin_role_to_admin_device_authorizations.rb
+- db/migrate/20260721000003_add_principal_to_admin_device_authorizations.rb
 - db/seeds.rb
 - lib/generators/koi/admin/USAGE
 - lib/generators/koi/admin/admin_generator.rb
@@ -558,6 +585,7 @@ files:
 - lib/koi/middleware/url_redirect.rb
 - lib/koi/release.rb
 - spec/factories/admin_device_authorizations.rb
+- spec/factories/admin_roles.rb
 - spec/factories/admin_sessions.rb
 - spec/factories/admins.rb
 - spec/factories/url_rewrites.rb
@@ -581,7 +609,7 @@ required_rubygems_version: !ruby/object:Gem::Requirement
     - !ruby/object:Gem::Version
       version: '0'
 requirements: []
-rubygems_version: 4.0.10
+rubygems_version: 4.0.16
 specification_version: 4
 summary: Koi CMS admin framework
 test_files: []

data/app/controllers/admin/device_tokens_controller.rb

@@ -1,18 +0,0 @@
-# frozen_string_literal: true
-
-module Admin
-  class DeviceTokensController < ApplicationController
-    GRANT_TYPE = "urn:ietf:params:oauth:grant-type:device_code"
-
-    rate_limit to: 20, within: 1.minute, only: :create
-    skip_before_action :verify_authenticity_token, only: :create
-
-    def create
-      return render(json: { error: "invalid_request" }, status: :bad_request) unless params[:grant_type] == GRANT_TYPE
-
-      render json: Admin::DeviceAuthorization.issue_access_token!(device_code: params[:device_code])
-    rescue Admin::DeviceAuthorization::TokenError => e
-      render json: { error: e.code }, status: :bad_request
-    end
-  end
-end