killbill-aviate 1.1.0.pre.4 → 1.1.0.pre.6

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 2637a800931a97b96e7627862ec03523466f2783aa47dc3802baaa3adf41d0c6
-  data.tar.gz: 74c7af1583e51fa00d1ac2c6f3dd2f47aafa1f69ee215d61a57ee54e84ef1b24
+  metadata.gz: 237b14cde57c3e487b24109830a9fece4b0adacc7258bdaf137fc223837d2ed7
+  data.tar.gz: 39131607c8da262ac2f0a9a9c8252e5f6d4ffa7463df8b89976c5ad3d72cede3
 SHA512:
-  metadata.gz: f0d80352daf4ea71f30584f8ce56a7386bd49bf3150c7214e8b61ecfbbbb5f5d4fc9d47e5482d63e18271c1fbb74b16737ef2f3601668845dfd365b10c68cb29
-  data.tar.gz: 7426986c49bce980ebbbf53974a19c2d650577b675b873e4fac0dc612b22c15f865c6695302dccdc307a7367b1019f33f3533e8f5f5483b1b743863b8444b298
+  metadata.gz: 4aec8c79ef28c8b01c66e86addec6291948913247665dd40581c3e256aef700ba2fa6fed39712d92105e68508f2ab568f1562cd55ff25b9fc8d8bb01a4f616fb
+  data.tar.gz: 6e008e248edac89eb61fd9586357260faa5729bb1b71c5f8834e605e8caf97a0ee511686e55c411ba22869510fa538e3be5f0922b4cac2cb187dc2db3b932450

data/app/controllers/aviate/configuration_controller.rb

@@ -1,8 +1,11 @@
 # frozen_string_literal: true
 
 require 'aviate/client'
+require 'securerandom'
+
 module Aviate
   class ConfigurationController < Aviate::EngineController
+    
     def index
       @available = Killbill::Aviate::AviateClient.aviate_plugin_available?(options_for_klient).first
     end
@@ -12,15 +15,28 @@ module Aviate
       email = params[:aviate_email]
       password = params[:aviate_password]
       response = Killbill::Aviate::AviateClient.authenticate(email, password, cached_options_for_klient)
-      if response['token']
-        cookies.encrypted[:jwt_token] = {
-          value: response['token'],
-          httponly: true,
-          secure: Rails.env.production?,
-          same_site: :strict,
-          expires: 1.hour.from_now
-        }
+      
+      if response.is_a?(Hash) && response['token']
+        reference_token = SecureRandom.hex(16)
+        session[:aviate_token_ref] = reference_token
+
+        # Store actual JWT in Rails cache using the reference token
+        Rails.cache.write("aviate_jwt_#{reference_token}", response['token'], expires_in: 1.hour)
+        flash[:notice] = "Successfully authenticated with Aviate"
+      else
+        flash[:error] = "Authentication failed. Please check your credentials."
+      end
+      
+      redirect_to aviate_root_path
+    end
+
+    def session_destroy
+      if session[:aviate_token_ref].present?
+        jwt_cache_key = "aviate_jwt_#{session[:aviate_token_ref]}"
+        Rails.cache.delete(jwt_cache_key)
+        session.delete(:aviate_token_ref)
       end
+      flash[:notice] = "Successfully logged out from Aviate"
       redirect_to aviate_root_path
     end
   end

data/app/views/aviate/configuration/index.html.erb

@@ -11,7 +11,13 @@
       </h5>
       <% if @available %>
         <div class="alert alert-success" role="alert">
-        <%= t('aviate.configuration.authentication_success') %>
+          <%= t('aviate.configuration.authentication_success') %>
+        </div>
+        <div class="d-flex justify-content-end">
+          <%= link_to "Logout", aviate_session_destroy_path, 
+                      method: :delete, 
+                      class: "btn btn-outline-secondary",
+                      confirm: "Are you sure you want to logout from Aviate?" %>
         </div>
       <% else %>
         <div class="configuration-form">

data/config/routes.rb

@@ -5,6 +5,7 @@ Aviate::Engine.routes.draw do
 
   scope '/configuration' do
     match '/session_create' => 'configuration#session_create', :via => :post, :as => 'aviate_session_create'
+    match '/session_destroy' => 'configuration#session_destroy', :via => :delete, :as => 'aviate_session_destroy'
   end
 
   resources :accounts, param: :account_id do

data/lib/aviate/version.rb

@@ -1,5 +1,5 @@
 # frozen_string_literal: true
 
 module Aviate
-  VERSION = '1.1.0.pre.4'
+  VERSION = '1.1.0.pre.6'
 end

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: killbill-aviate
 version: !ruby/object:Gem::Version
-  version: 1.1.0.pre.4
+  version: 1.1.0.pre.6
 platform: ruby
 authors:
 - Kill Bill core team
 autorequire:
 bindir: bin
 cert_chain: []
-date: 2025-10-15 00:00:00.000000000 Z
+date: 2025-10-26 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: killbill-assets-ui