lato 3.25.0 → 3.26.1

data/config/locales/en.yml

@@ -1,5 +1,29 @@
 en:
   lato:
+    close: "Close"
+    notice_title: "Notification"
+    alert_title: "Error"
+    sort_ascending: "Sort by %{column} ascending"
+    sort_descending: "Sort by %{column} descending"
+    pagination_label: "Pagination: %{name}"
+    password_requirements: "At least %{count} characters."
+    too_many_requests: "Too many requests, please wait %{minutes} minutes to retry."
+    hcaptcha_missing: "Please complete the captcha verification."
+    hcaptcha_failed: "Captcha verification failed, please retry."
+    security_confirmation_required: "Confirm your current password and enabled second factor to continue."
+    current_password: "Current password"
+    current_authenticator_code: "Current authenticator code"
+    security_key_confirmation_help: "Confirm with your registered security key when submitting."
+    confirm_authenticator_code: "Confirm authenticator code"
+    authenticator_qr_code_alt: "Authenticator enrollment QR code"
+    authenticator_manual_key: "Or enter this key manually in your authenticator app"
+    connecting: "Connecting..."
+    back_to_account: "Back to your account"
+    network_offline: "You are offline"
+    network_online: "You are online"
+    toggle_sidebar: "Toggle sidebar"
+    skip_to_content: "Skip to main content"
+    copied: "Copied to clipboard"
     account: Account
     signout: Logout
     signin: Login
@@ -144,6 +168,7 @@ en:
               credentials_not_correct: Email or password not correct
               privacy_policy_invalid: To accept the privacy policy you must select the confirmation checkbox
               terms_and_conditions_invalid: To accept the terms and conditions you must select the confirmation checkbox
+              invitation_invalid: Invalid invitation
               web3_address_invalid: The address you send is not corretly signed
               web3_connection_error: Impossible to connect the wallet
               authenticator_code_invalid: The code you inserted is not correct
@@ -153,6 +178,8 @@ en:
               webauthn_authentication_failed: Passkey authentication failed. Please try again or use another method.
             password:
               not_correct: not correct
+            password_confirmation:
+              confirmation: does not match the password
             email:
               taken: already used with another account
               not_registered: not registered
@@ -163,8 +190,14 @@ en:
               inclusion: not accepted
             web3_address:
               not_correct: not correct
+        lato/operation:
+          attributes:
+            base:
+              start_error: "Unable to start the job"
         lato/invitation:
           attributes:
+            email:
+              taken: "already used by another user"
             base:
               already_accepted: Invitation already accepted
               email_sending_error:  Unable to send mail

data/config/locales/fr.yml

@@ -2,6 +2,30 @@
 
 fr:
   lato:
+    close: "Fermer"
+    notice_title: "Notification"
+    alert_title: "Erreur"
+    sort_ascending: "Trier par %{column} croissant"
+    sort_descending: "Trier par %{column} d\u00E9croissant"
+    pagination_label: "Pagination : %{name}"
+    password_requirements: "Au moins %{count} caract\u00E8res."
+    too_many_requests: "Trop de requ\u00EAtes, veuillez attendre %{minutes} minutes avant de r\u00E9essayer."
+    hcaptcha_missing: "Veuillez compl\u00E9ter la v\u00E9rification captcha."
+    hcaptcha_failed: "La v\u00E9rification captcha a \u00E9chou\u00E9, veuillez r\u00E9essayer."
+    security_confirmation_required: "Confirmez votre mot de passe actuel et le second facteur activ\u00E9 pour continuer."
+    current_password: "Mot de passe actuel"
+    current_authenticator_code: "Code authenticator actuel"
+    security_key_confirmation_help: "Confirmez avec votre cl\u00E9 de s\u00E9curit\u00E9 enregistr\u00E9e lors de l'envoi."
+    confirm_authenticator_code: "Confirmer le code authenticator"
+    authenticator_qr_code_alt: "QR code de configuration de l'authenticator"
+    authenticator_manual_key: "Ou saisissez cette cl\u00E9 manuellement dans votre application authenticator"
+    connecting: "Connexion en cours..."
+    back_to_account: "Retour \u00E0 votre compte"
+    network_offline: "Vous \u00EAtes hors ligne"
+    network_online: "Vous \u00EAtes en ligne"
+    toggle_sidebar: "Afficher/masquer la barre lat\u00E9rale"
+    skip_to_content: "Aller au contenu principal"
+    copied: "Copi\u00E9 dans le presse-papiers"
     account: Compte
     signout: Déconnexion
     signin: Connexion
@@ -173,8 +197,14 @@ fr:
               inclusion: non acceptées
             web3_address:
               not_correct: incorrect
+        lato/operation:
+          attributes:
+            base:
+              start_error: "Impossible de lancer le job"
         lato/invitation:
           attributes:
+            email:
+              taken: "d\u00E9j\u00E0 utilis\u00E9e par un autre utilisateur"
             base:
               already_accepted: Invitation déjà acceptée par l'utilisateur
               email_sending_error: Impossible d'envoyer l'e-mail

data/config/locales/it.yml

@@ -2,6 +2,30 @@
 
 it:
   lato:
+    close: "Chiudi"
+    notice_title: "Notifica"
+    alert_title: "Errore"
+    sort_ascending: "Ordina per %{column} crescente"
+    sort_descending: "Ordina per %{column} decrescente"
+    pagination_label: "Paginazione: %{name}"
+    password_requirements: "Almeno %{count} caratteri."
+    too_many_requests: "Troppe richieste, attendi %{minutes} minuti prima di riprovare."
+    hcaptcha_missing: "Completa la verifica captcha."
+    hcaptcha_failed: "Verifica captcha non riuscita, riprova."
+    security_confirmation_required: "Conferma la password attuale e il secondo fattore attivo per continuare."
+    current_password: "Password attuale"
+    current_authenticator_code: "Codice authenticator attuale"
+    security_key_confirmation_help: "Conferma con la tua chiave di sicurezza registrata al momento dell'invio."
+    confirm_authenticator_code: "Conferma codice authenticator"
+    authenticator_qr_code_alt: "Codice QR per configurare l'authenticator"
+    authenticator_manual_key: "Oppure inserisci manualmente questa chiave nella tua app authenticator"
+    connecting: "Connessione in corso..."
+    back_to_account: "Torna al tuo account"
+    network_offline: "Sei offline"
+    network_online: "Sei online"
+    toggle_sidebar: "Mostra/nascondi barra laterale"
+    skip_to_content: "Vai al contenuto principale"
+    copied: "Copiato negli appunti"
     account: Account
     signout: Esci
     signin: Accedi
@@ -173,8 +197,14 @@ it:
               inclusion: non accettati
             web3_address:
               not_correct: non corretto
+        lato/operation:
+          attributes:
+            base:
+              start_error: "Impossibile eseguire il job"
         lato/invitation:
           attributes:
+            email:
+              taken: "gi\u00E0 utilizzata da un altro utente"
             base:
               already_accepted: Invito già accettato dall'utente
               email_sending_error: Impossibile inviare mail

data/config/locales/ro.yml

@@ -2,6 +2,30 @@
 
 ro:
   lato:
+    close: "\u00CEnchide"
+    notice_title: "Notificare"
+    alert_title: "Eroare"
+    sort_ascending: "Sorteaz\u0103 dup\u0103 %{column} cresc\u0103tor"
+    sort_descending: "Sorteaz\u0103 dup\u0103 %{column} descresc\u0103tor"
+    pagination_label: "Paginare: %{name}"
+    password_requirements: "Cel pu\u021Bin %{count} caractere."
+    too_many_requests: "Prea multe cereri, a\u0219tepta\u021Bi %{minutes} minute \u00EEnainte de a re\u00EEncerca."
+    hcaptcha_missing: "Completa\u021Bi verificarea captcha."
+    hcaptcha_failed: "Verificarea captcha a e\u0219uat, re\u00EEncerca\u021Bi."
+    security_confirmation_required: "Confirma\u021Bi parola curent\u0103 \u0219i al doilea factor activ pentru a continua."
+    current_password: "Parola curent\u0103"
+    current_authenticator_code: "Codul authenticator curent"
+    security_key_confirmation_help: "Confirma\u021Bi cu cheia de securitate \u00EEnregistrat\u0103 la trimitere."
+    confirm_authenticator_code: "Confirma\u021Bi codul authenticator"
+    authenticator_qr_code_alt: "Cod QR pentru configurarea authenticator"
+    authenticator_manual_key: "Sau introduce\u021Bi manual aceast\u0103 cheie \u00EEn aplica\u021Bia authenticator"
+    connecting: "Se conecteaz\u0103..."
+    back_to_account: "\u00CEnapoi la contul t\u0103u"
+    network_offline: "Sunte\u021Bi offline"
+    network_online: "Sunte\u021Bi online"
+    toggle_sidebar: "Afi\u0219eaz\u0103/ascunde bara lateral\u0103"
+    skip_to_content: "Salt la con\u021Binutul principal"
+    copied: "Copiat \u00EEn clipboard"
     account: Cont
     signout: Deconectare
     signin: Conectare
@@ -173,8 +197,14 @@ ro:
               inclusion: neacceptați
             web3_address:
               not_correct: incorect
+        lato/operation:
+          attributes:
+            base:
+              start_error: "Imposibil de pornit jobul"
         lato/invitation:
           attributes:
+            email:
+              taken: "deja folosit de alt utilizator"
             base:
               already_accepted: Invitația deja acceptată de utilizator
               email_sending_error: Imposibil să se trimită email-ul

data/db/migrate/20261110000000_add_second_factor_counters_to_lato_users.rb

@@ -0,0 +1,6 @@
+class AddSecondFactorCountersToLatoUsers < ActiveRecord::Migration[7.1]
+  def change
+    add_column :lato_users, :authenticator_last_used_at, :datetime
+    add_column :lato_users, :webauthn_sign_count, :integer, null: false, default: 0
+  end
+end

data/lib/lato/config.rb

@@ -15,6 +15,9 @@ module Lato
     # Max password recovery emails sent per hour across all users (nil disables the cap)
     attr_accessor :auth_recover_password_hourly_limit
 
+    # Minimum password length, checked whenever a password is set
+    attr_accessor :auth_password_min_length
+
     # Hcaptcha configs
     attr_accessor :hcaptcha_site_key, :hcaptcha_secret
 
@@ -53,6 +56,7 @@ module Lato
       @auth_disable_webauthn = false
       @auth_disable_signin_success_mail = false
       @auth_recover_password_hourly_limit = 100
+      @auth_password_min_length = 8
 
       @hcaptcha_site_key = nil
       @hcaptcha_secret = nil

data/lib/lato/engine.rb

@@ -17,6 +17,11 @@ module Lato
     end
 
     config.after_initialize do
+      # Recovery codes, verification codes and rate limits live in Rails.cache: a null store silently disables them.
+      if Rails.env.production? && Rails.cache.is_a?(ActiveSupport::Cache::NullStore)
+        Rails.logger.warn("[Lato] Rails.cache is a NullStore: password recovery, email verification and rate limiting will not work. Configure a shared cache store (Redis, Solid Cache, Memcache).")
+      end
+
       if Lato.config.webauthn_connection
         WebAuthn.configure do |config|
           config.allowed_origins = Lato.config.webauthn_origin.is_a?(Array) ? Lato.config.webauthn_origin : [Lato.config.webauthn_origin]

data/lib/lato/version.rb

@@ -1,3 +1,3 @@
 module Lato
-  VERSION = "3.25.0"
+  VERSION = "3.26.1"
 end

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: lato
 version: !ruby/object:Gem::Version
-  version: 3.25.0
+  version: 3.26.1
 platform: ruby
 authors:
 - Gregorio Galante
@@ -47,30 +47,36 @@ dependencies:
   name: bcrypt
   requirement: !ruby/object:Gem::Requirement
     requirements:
-    - - ">="
+    - - "~>"
       - !ruby/object:Gem::Version
-        version: '0'
+        version: '3.1'
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
-    - - ">="
+    - - "~>"
       - !ruby/object:Gem::Version
-        version: '0'
+        version: '3.1'
 - !ruby/object:Gem::Dependency
   name: bootstrap
   requirement: !ruby/object:Gem::Requirement
     requirements:
     - - ">="
       - !ruby/object:Gem::Version
-        version: '0'
+        version: '5.0'
+    - - "<"
+      - !ruby/object:Gem::Version
+        version: '6'
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - ">="
       - !ruby/object:Gem::Version
-        version: '0'
+        version: '5.0'
+    - - "<"
+      - !ruby/object:Gem::Version
+        version: '6'
 - !ruby/object:Gem::Dependency
   name: kaminari
   requirement: !ruby/object:Gem::Requirement
@@ -131,30 +137,30 @@ dependencies:
   name: rotp
   requirement: !ruby/object:Gem::Requirement
     requirements:
-    - - ">="
+    - - "~>"
       - !ruby/object:Gem::Version
-        version: '0'
+        version: '6.0'
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
-    - - ">="
+    - - "~>"
       - !ruby/object:Gem::Version
-        version: '0'
+        version: '6.0'
 - !ruby/object:Gem::Dependency
   name: webauthn
   requirement: !ruby/object:Gem::Requirement
     requirements:
-    - - ">="
+    - - "~>"
       - !ruby/object:Gem::Version
-        version: '0'
+        version: '3.0'
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
-    - - ">="
+    - - "~>"
       - !ruby/object:Gem::Version
-        version: '0'
+        version: '3.0'
 - !ruby/object:Gem::Dependency
   name: eth
   requirement: !ruby/object:Gem::Requirement
@@ -322,6 +328,7 @@ files:
 - db/migrate/20251206170443_add_webauthn_id_to_user.rb
 - db/migrate/20251218192614_add_logs_on_lato_operation.rb
 - db/migrate/20261024000000_create_lato_session_records.rb
+- db/migrate/20261110000000_add_second_factor_counters_to_lato_users.rb
 - lib/lato.rb
 - lib/lato/btstrap.rb
 - lib/lato/config.rb