killbill-aviate 1.1.0.pre.4 → 1.1.0.pre.5

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 2637a800931a97b96e7627862ec03523466f2783aa47dc3802baaa3adf41d0c6
-  data.tar.gz: 74c7af1583e51fa00d1ac2c6f3dd2f47aafa1f69ee215d61a57ee54e84ef1b24
+  metadata.gz: f80c0ac4a5aebd20024637e6db468fc097cfc2446a9fdd9dc7410a918263039d
+  data.tar.gz: 62371a45706e77cf5c34fe8dad425a33f62b08900d4f63fb6706a45e67c33a9b
 SHA512:
-  metadata.gz: f0d80352daf4ea71f30584f8ce56a7386bd49bf3150c7214e8b61ecfbbbb5f5d4fc9d47e5482d63e18271c1fbb74b16737ef2f3601668845dfd365b10c68cb29
-  data.tar.gz: 7426986c49bce980ebbbf53974a19c2d650577b675b873e4fac0dc612b22c15f865c6695302dccdc307a7367b1019f33f3533e8f5f5483b1b743863b8444b298
+  metadata.gz: f0b39b235144075c36ace2437d197febc254fe2e7fcd0904bae8ae54bfe00d43b04acb63e191c4f813e557ed507048430842c43c9c26711cfedd83f7ff1afcb0
+  data.tar.gz: 1a8b182ad6efd8d377c9e731c42d68bad7dfe8e6b8f74fe75b5c805aa6ab8d9ed33e8fd6203e2d52d56e2d8517c14e768bd3bf6b7c93b9ef6df7022463022d5f

data/app/controllers/aviate/configuration_controller.rb

@@ -3,6 +3,8 @@
 require 'aviate/client'
 module Aviate
   class ConfigurationController < Aviate::EngineController
+    before_action :cleanup_expired_jwt
+    
     def index
       @available = Killbill::Aviate::AviateClient.aviate_plugin_available?(options_for_klient).first
     end
@@ -12,16 +14,33 @@ module Aviate
       email = params[:aviate_email]
       password = params[:aviate_password]
       response = Killbill::Aviate::AviateClient.authenticate(email, password, cached_options_for_klient)
-      if response['token']
-        cookies.encrypted[:jwt_token] = {
-          value: response['token'],
-          httponly: true,
-          secure: Rails.env.production?,
-          same_site: :strict,
-          expires: 1.hour.from_now
-        }
+      
+      if response.is_a?(Hash) && response['token']
+        # Store JWT in server-side session instead of cookies to avoid header size limits
+        session[:aviate_jwt_token] = response['token']
+        session[:aviate_jwt_expires_at] = 1.hour.from_now.to_i
+        flash[:notice] = "Successfully authenticated with Aviate"
+      else
+        flash[:error] = "Authentication failed. Please check your credentials."
       end
+      
       redirect_to aviate_root_path
     end
+
+    def session_destroy
+      session.delete(:aviate_jwt_token)
+      session.delete(:aviate_jwt_expires_at)
+      flash[:notice] = "Successfully logged out from Aviate"
+      redirect_to aviate_root_path
+    end
+
+    private
+
+    def cleanup_expired_jwt
+      if session[:aviate_jwt_expires_at] && session[:aviate_jwt_expires_at] < Time.current.to_i
+        session.delete(:aviate_jwt_token)
+        session.delete(:aviate_jwt_expires_at)
+      end
+    end
   end
 end

data/app/views/aviate/configuration/index.html.erb

@@ -11,7 +11,13 @@
       </h5>
       <% if @available %>
         <div class="alert alert-success" role="alert">
-        <%= t('aviate.configuration.authentication_success') %>
+          <%= t('aviate.configuration.authentication_success') %>
+        </div>
+        <div class="d-flex justify-content-end">
+          <%= link_to "Logout", aviate_session_destroy_path, 
+                      method: :delete, 
+                      class: "btn btn-outline-secondary",
+                      confirm: "Are you sure you want to logout from Aviate?" %>
         </div>
       <% else %>
         <div class="configuration-form">

data/config/routes.rb

@@ -5,6 +5,7 @@ Aviate::Engine.routes.draw do
 
   scope '/configuration' do
     match '/session_create' => 'configuration#session_create', :via => :post, :as => 'aviate_session_create'
+    match '/session_destroy' => 'configuration#session_destroy', :via => :delete, :as => 'aviate_session_destroy'
   end
 
   resources :accounts, param: :account_id do

data/lib/aviate/version.rb

@@ -1,5 +1,5 @@
 # frozen_string_literal: true
 
 module Aviate
-  VERSION = '1.1.0.pre.4'
+  VERSION = '1.1.0.pre.5'
 end

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: killbill-aviate
 version: !ruby/object:Gem::Version
-  version: 1.1.0.pre.4
+  version: 1.1.0.pre.5
 platform: ruby
 authors:
 - Kill Bill core team
 autorequire:
 bindir: bin
 cert_chain: []
-date: 2025-10-15 00:00:00.000000000 Z
+date: 2025-10-16 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: killbill-assets-ui