katalyst-koi 5.8.3 → 5.10.0

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: katalyst-koi
 version: !ruby/object:Gem::Version
-  version: 5.8.3
+  version: 5.10.0
 platform: ruby
 authors:
 - Katalyst Interactive
@@ -79,6 +79,20 @@ dependencies:
     - - ">="
       - !ruby/object:Gem::Version
         version: '0'
+- !ruby/object:Gem::Dependency
+  name: jwt
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: '3.0'
+  type: :runtime
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: '3.0'
 - !ruby/object:Gem::Dependency
   name: rotp
   requirement: !ruby/object:Gem::Requirement
@@ -196,9 +210,6 @@ dependencies:
   requirement: !ruby/object:Gem::Requirement
     requirements:
     - - ">="
-      - !ruby/object:Gem::Version
-        version: 1.28.0
-    - - "<"
       - !ruby/object:Gem::Version
         version: '2'
   type: :runtime
@@ -206,9 +217,6 @@ dependencies:
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - ">="
-      - !ruby/object:Gem::Version
-        version: 1.28.0
-    - - "<"
       - !ruby/object:Gem::Version
         version: '2'
 - !ruby/object:Gem::Dependency
@@ -330,13 +338,11 @@ files:
 - app/assets/stylesheets/koi/forms/checkboxes.css
 - app/assets/stylesheets/koi/forms/combobox.css
 - app/assets/stylesheets/koi/forms/date-input.css
-- app/assets/stylesheets/koi/forms/document-field.css
 - app/assets/stylesheets/koi/forms/errors.css
 - app/assets/stylesheets/koi/forms/fieldset.css
 - app/assets/stylesheets/koi/forms/file-upload.css
 - app/assets/stylesheets/koi/forms/form-group.css
 - app/assets/stylesheets/koi/forms/hint.css
-- app/assets/stylesheets/koi/forms/image-field.css
 - app/assets/stylesheets/koi/forms/index.css
 - app/assets/stylesheets/koi/forms/input.css
 - app/assets/stylesheets/koi/forms/label.css
@@ -373,6 +379,7 @@ files:
 - app/components/koi/tables/cells/link_component.rb
 - app/components/koi/tables/table_component.rb
 - app/controllers/admin/active_storage/direct_uploads_controller.rb
+- app/controllers/admin/admin_roles_controller.rb
 - app/controllers/admin/admin_users_controller.rb
 - app/controllers/admin/application_controller.rb
 - app/controllers/admin/background_jobs_controller.rb
@@ -380,11 +387,11 @@ files:
 - app/controllers/admin/credentials_controller.rb
 - app/controllers/admin/dashboards_controller.rb
 - app/controllers/admin/device_authorizations_controller.rb
-- app/controllers/admin/device_tokens_controller.rb
 - app/controllers/admin/feature_flags_controller.rb
 - app/controllers/admin/otps_controller.rb
 - app/controllers/admin/profiles_controller.rb
 - app/controllers/admin/recurring_tasks_controller.rb
+- app/controllers/admin/sessions/tokens_controller.rb
 - app/controllers/admin/sessions_controller.rb
 - app/controllers/admin/tokens_controller.rb
 - app/controllers/admin/url_rewrites_controller.rb
@@ -425,6 +432,7 @@ files:
 - app/models/admin/collection.rb
 - app/models/admin/credential.rb
 - app/models/admin/device_authorization.rb
+- app/models/admin/role.rb
 - app/models/admin/session.rb
 - app/models/admin/user.rb
 - app/models/application_record.rb
@@ -433,9 +441,16 @@ files:
 - app/models/concerns/koi/model/otp.rb
 - app/models/feature_flag.rb
 - app/models/koi/current.rb
+- app/models/koi/identity.rb
+- app/models/koi/identity/assertion.rb
+- app/models/koi/identity/member.rb
+- app/models/koi/identity/principal.rb
+- app/models/koi/identity/provider.rb
 - app/models/recurring_task.rb
 - app/models/url_rewrite.rb
 - app/models/well_known.rb
+- app/views/admin/admin_roles/index.html.erb
+- app/views/admin/admin_roles/show.html.erb
 - app/views/admin/admin_users/_form.html.erb
 - app/views/admin/admin_users/archived.html.erb
 - app/views/admin/admin_users/edit.html.erb
@@ -469,12 +484,12 @@ files:
 - app/views/admin/sessions/new.html.erb
 - app/views/admin/sessions/otp.html.erb
 - app/views/admin/sessions/password.html.erb
+- app/views/admin/sessions/tokens/create.turbo_stream.erb
+- app/views/admin/sessions/tokens/show.html.erb
 - app/views/admin/shared/icons/_close.html.erb
 - app/views/admin/shared/icons/_cross.html.erb
 - app/views/admin/shared/icons/_menu.html.erb
 - app/views/admin/shared/icons/_refresh.html.erb
-- app/views/admin/tokens/create.turbo_stream.erb
-- app/views/admin/tokens/show.html.erb
 - app/views/admin/url_rewrites/_form.html.erb
 - app/views/admin/url_rewrites/edit.html.erb
 - app/views/admin/url_rewrites/index.html.erb
@@ -521,6 +536,9 @@ files:
 - db/migrate/20260501000000_add_last_sign_out_at_to_admin_users.rb
 - db/migrate/20260525041029_create_admin_sessions.rb
 - db/migrate/20260525111759_clean_up_admin_user_timestamps.rb
+- db/migrate/20260721000001_create_admin_roles.rb
+- db/migrate/20260721000002_add_admin_role_to_admin_device_authorizations.rb
+- db/migrate/20260721000003_add_principal_to_admin_device_authorizations.rb
 - db/seeds.rb
 - lib/generators/koi/admin/USAGE
 - lib/generators/koi/admin/admin_generator.rb
@@ -558,6 +576,7 @@ files:
 - lib/koi/middleware/url_redirect.rb
 - lib/koi/release.rb
 - spec/factories/admin_device_authorizations.rb
+- spec/factories/admin_roles.rb
 - spec/factories/admin_sessions.rb
 - spec/factories/admins.rb
 - spec/factories/url_rewrites.rb
@@ -581,7 +600,7 @@ required_rubygems_version: !ruby/object:Gem::Requirement
     - !ruby/object:Gem::Version
       version: '0'
 requirements: []
-rubygems_version: 4.0.10
+rubygems_version: 4.0.16
 specification_version: 4
 summary: Koi CMS admin framework
 test_files: []

data/app/assets/stylesheets/koi/forms/document-field.css

@@ -1,84 +0,0 @@
-.govuk-document-field {
-  display: grid;
-  grid-template-areas:
-    "label"
-    "hint"
-    "error"
-    "preview"
-    "file"
-    "supplemental";
-  grid-template-columns: auto;
-  grid-auto-rows: auto;
-
-  label {
-    grid-area: label;
-  }
-
-  .govuk-hint {
-    grid-area: hint;
-  }
-
-  .govuk-error-message {
-    grid-area: error;
-  }
-
-  input {
-    grid-area: file;
-
-    &::file-selector-button {
-      color: var(--color-dark);
-      background: var(--color-tint);
-      border: var(--stroke-input);
-      border-radius: var(--input-radius);
-    }
-  }
-
-  .preview-file {
-    grid-area: preview;
-    position: relative;
-    overflow: visible;
-    background-color: var(--color-tint);
-    border: var(--stroke-input);
-    border-radius: var(--input-radius);
-    margin-bottom: var(--space-2xs);
-    padding: var(--space-3xs);
-    line-height: var(--leading-standard);
-    align-items: start;
-    margin-right: auto;
-
-    &:not([hidden]) {
-      display: inline-flex;
-    }
-
-    .preview-filename {
-      line-height: unset;
-    }
-
-    .file-destroy {
-      appearance: none;
-      color: black;
-      border: none;
-      background: none;
-      display: inline-block;
-      margin-left: 0.2rem;
-      padding: 0;
-
-      &::after {
-        content: "×";
-        display: block;
-        position: relative;
-        width: 21px;
-        line-height: 21px;
-        font-size: 21px;
-      }
-    }
-  }
-
-  > div:last-child {
-    grid-area: supplemental;
-
-    > * + * {
-      margin-top: var(--flow-space, var(--space-2xs));
-    }
-  }
-}

data/app/assets/stylesheets/koi/forms/image-field.css

@@ -1,96 +0,0 @@
-.govuk-image-field {
-  display: grid;
-  grid-template-areas:
-    "label preview"
-    "hint preview"
-    "error preview"
-    "file preview"
-    "supplemental supplemental";
-  grid-template-columns: 1fr auto;
-  grid-template-rows: auto auto auto 1fr auto;
-  gap: 0 1rem;
-
-  label {
-    grid-area: label;
-  }
-
-  .govuk-hint {
-    grid-area: hint;
-  }
-
-  .govuk-error-message {
-    grid-area: error;
-  }
-
-  input {
-    grid-area: file;
-    align-self: start;
-
-    &::file-selector-button {
-      color: var(--color-dark);
-      background: var(--color-tint);
-      border: var(--stroke-input);
-      border-radius: var(--input-radius);
-    }
-  }
-
-  .preview-image {
-    grid-area: preview;
-    position: relative;
-    display: grid;
-    overflow: visible;
-    align-self: start;
-    align-items: center;
-    justify-items: center;
-    background-color: var(--color-tint);
-    border: var(--stroke-input);
-    border-radius: var(--input-radius);
-
-    min-width: calc(8em + 2 * var(--stroke-input-width));
-    aspect-ratio: 1;
-
-    .image-thumbnail {
-      max-width: 8em;
-      max-height: 8em;
-    }
-  }
-
-  .file-destroy {
-    appearance: none;
-    position: absolute;
-    background-color: var(--color-tint);
-    color: var(--color-dark);
-    border-radius: var(--input-radius);
-    border: var(--stroke-input);
-    display: block;
-    padding: 0;
-    top: calc(-1 * var(--stroke-input-width));
-    right: calc(-1 * var(--stroke-input-width));
-
-    &::after {
-      content: "×";
-      display: block;
-      position: relative;
-      width: 21px;
-      line-height: 21px;
-      font-size: 21px;
-      top: -1px;
-    }
-  }
-
-  > div:last-child {
-    grid-area: supplemental;
-
-    > * + * {
-      margin-top: var(--flow-space, var(--space-2xs));
-    }
-  }
-
-  .preview-image[hidden] {
-    display: block !important;
-
-    .file-destroy {
-      display: none;
-    }
-  }
-}

data/app/controllers/admin/device_tokens_controller.rb

@@ -1,18 +0,0 @@
-# frozen_string_literal: true
-
-module Admin
-  class DeviceTokensController < ApplicationController
-    GRANT_TYPE = "urn:ietf:params:oauth:grant-type:device_code"
-
-    rate_limit to: 20, within: 1.minute, only: :create
-    skip_before_action :verify_authenticity_token, only: :create
-
-    def create
-      return render(json: { error: "invalid_request" }, status: :bad_request) unless params[:grant_type] == GRANT_TYPE
-
-      render json: Admin::DeviceAuthorization.issue_access_token!(device_code: params[:device_code])
-    rescue Admin::DeviceAuthorization::TokenError => e
-      render json: { error: e.code }, status: :bad_request
-    end
-  end
-end