lato 3.25.0 → 3.26.0

data/config/locales/ro.yml

@@ -2,6 +2,29 @@
 
 ro:
   lato:
+    close: "\u00CEnchide"
+    notice_title: "Notificare"
+    alert_title: "Eroare"
+    sort_ascending: "Sorteaz\u0103 dup\u0103 %{column} cresc\u0103tor"
+    sort_descending: "Sorteaz\u0103 dup\u0103 %{column} descresc\u0103tor"
+    password_requirements: "Cel pu\u021Bin %{count} caractere."
+    too_many_requests: "Prea multe cereri, a\u0219tepta\u021Bi %{minutes} minute \u00EEnainte de a re\u00EEncerca."
+    hcaptcha_missing: "Completa\u021Bi verificarea captcha."
+    hcaptcha_failed: "Verificarea captcha a e\u0219uat, re\u00EEncerca\u021Bi."
+    security_confirmation_required: "Confirma\u021Bi parola curent\u0103 \u0219i al doilea factor activ pentru a continua."
+    current_password: "Parola curent\u0103"
+    current_authenticator_code: "Codul authenticator curent"
+    security_key_confirmation_help: "Confirma\u021Bi cu cheia de securitate \u00EEnregistrat\u0103 la trimitere."
+    confirm_authenticator_code: "Confirma\u021Bi codul authenticator"
+    authenticator_qr_code_alt: "Cod QR pentru configurarea authenticator"
+    authenticator_manual_key: "Sau introduce\u021Bi manual aceast\u0103 cheie \u00EEn aplica\u021Bia authenticator"
+    connecting: "Se conecteaz\u0103..."
+    back_to_account: "\u00CEnapoi la contul t\u0103u"
+    network_offline: "Sunte\u021Bi offline"
+    network_online: "Sunte\u021Bi online"
+    toggle_sidebar: "Afi\u0219eaz\u0103/ascunde bara lateral\u0103"
+    skip_to_content: "Salt la con\u021Binutul principal"
+    copied: "Copiat \u00EEn clipboard"
     account: Cont
     signout: Deconectare
     signin: Conectare
@@ -173,8 +196,14 @@ ro:
               inclusion: neacceptați
             web3_address:
               not_correct: incorect
+        lato/operation:
+          attributes:
+            base:
+              start_error: "Imposibil de pornit jobul"
         lato/invitation:
           attributes:
+            email:
+              taken: "deja folosit de alt utilizator"
             base:
               already_accepted: Invitația deja acceptată de utilizator
               email_sending_error: Imposibil să se trimită email-ul

data/db/migrate/20261110000000_add_second_factor_counters_to_lato_users.rb

@@ -0,0 +1,6 @@
+class AddSecondFactorCountersToLatoUsers < ActiveRecord::Migration[7.1]
+  def change
+    add_column :lato_users, :authenticator_last_used_at, :datetime
+    add_column :lato_users, :webauthn_sign_count, :integer, null: false, default: 0
+  end
+end

data/lib/lato/config.rb

@@ -15,6 +15,9 @@ module Lato
     # Max password recovery emails sent per hour across all users (nil disables the cap)
     attr_accessor :auth_recover_password_hourly_limit
 
+    # Minimum password length, checked whenever a password is set
+    attr_accessor :auth_password_min_length
+
     # Hcaptcha configs
     attr_accessor :hcaptcha_site_key, :hcaptcha_secret
 
@@ -53,6 +56,7 @@ module Lato
       @auth_disable_webauthn = false
       @auth_disable_signin_success_mail = false
       @auth_recover_password_hourly_limit = 100
+      @auth_password_min_length = 8
 
       @hcaptcha_site_key = nil
       @hcaptcha_secret = nil

data/lib/lato/engine.rb

@@ -17,6 +17,11 @@ module Lato
     end
 
     config.after_initialize do
+      # Recovery codes, verification codes and rate limits live in Rails.cache: a null store silently disables them.
+      if Rails.env.production? && Rails.cache.is_a?(ActiveSupport::Cache::NullStore)
+        Rails.logger.warn("[Lato] Rails.cache is a NullStore: password recovery, email verification and rate limiting will not work. Configure a shared cache store (Redis, Solid Cache, Memcache).")
+      end
+
       if Lato.config.webauthn_connection
         WebAuthn.configure do |config|
           config.allowed_origins = Lato.config.webauthn_origin.is_a?(Array) ? Lato.config.webauthn_origin : [Lato.config.webauthn_origin]

data/lib/lato/version.rb

@@ -1,3 +1,3 @@
 module Lato
-  VERSION = "3.25.0"
+  VERSION = "3.26.0"
 end

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: lato
 version: !ruby/object:Gem::Version
-  version: 3.25.0
+  version: 3.26.0
 platform: ruby
 authors:
 - Gregorio Galante
@@ -47,30 +47,36 @@ dependencies:
   name: bcrypt
   requirement: !ruby/object:Gem::Requirement
     requirements:
-    - - ">="
+    - - "~>"
       - !ruby/object:Gem::Version
-        version: '0'
+        version: '3.1'
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
-    - - ">="
+    - - "~>"
       - !ruby/object:Gem::Version
-        version: '0'
+        version: '3.1'
 - !ruby/object:Gem::Dependency
   name: bootstrap
   requirement: !ruby/object:Gem::Requirement
     requirements:
     - - ">="
       - !ruby/object:Gem::Version
-        version: '0'
+        version: '5.0'
+    - - "<"
+      - !ruby/object:Gem::Version
+        version: '6'
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - ">="
       - !ruby/object:Gem::Version
-        version: '0'
+        version: '5.0'
+    - - "<"
+      - !ruby/object:Gem::Version
+        version: '6'
 - !ruby/object:Gem::Dependency
   name: kaminari
   requirement: !ruby/object:Gem::Requirement
@@ -131,30 +137,30 @@ dependencies:
   name: rotp
   requirement: !ruby/object:Gem::Requirement
     requirements:
-    - - ">="
+    - - "~>"
       - !ruby/object:Gem::Version
-        version: '0'
+        version: '6.0'
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
-    - - ">="
+    - - "~>"
       - !ruby/object:Gem::Version
-        version: '0'
+        version: '6.0'
 - !ruby/object:Gem::Dependency
   name: webauthn
   requirement: !ruby/object:Gem::Requirement
     requirements:
-    - - ">="
+    - - "~>"
       - !ruby/object:Gem::Version
-        version: '0'
+        version: '3.0'
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
-    - - ">="
+    - - "~>"
       - !ruby/object:Gem::Version
-        version: '0'
+        version: '3.0'
 - !ruby/object:Gem::Dependency
   name: eth
   requirement: !ruby/object:Gem::Requirement
@@ -322,6 +328,7 @@ files:
 - db/migrate/20251206170443_add_webauthn_id_to_user.rb
 - db/migrate/20251218192614_add_logs_on_lato_operation.rb
 - db/migrate/20261024000000_create_lato_session_records.rb
+- db/migrate/20261110000000_add_second_factor_counters_to_lato_users.rb
 - lib/lato.rb
 - lib/lato/btstrap.rb
 - lib/lato/config.rb