lesli_shield 1.1.6 → 1.1.7

data/app/views/lesli_shield/profiles/_password-form.html.erb

@@ -0,0 +1,68 @@
+<div id="shield-profile-password-form" class="max-w-2xl">
+    <p class="mb-6 text-sm leading-6 text-slate-600">
+        <%= I18n.t("lesli_shield.profiles.password_description") %>
+    </p>
+
+    <%= form_with(
+        model: user,
+        url: profile_password_path,
+        method: :patch,
+        builder: LesliView::Forms::Builder
+    ) do |form| %>
+        <%= form.fieldset do %>
+            <%= form.field_control_password(
+                :current_password,
+                label: I18n.t("lesli_shield.profiles.current_password"),
+                message: user.errors[:current_password].to_sentence.presence,
+                category: user.errors[:current_password].any? ? :danger : nil,
+                icon: "lock",
+                required: true,
+                autocomplete: "current-password",
+                value: ""
+            ) %>
+
+            <%= form.field_control_password(
+                :password,
+                label: I18n.t("lesli_shield.profiles.new_password"),
+                message: user.errors[:password].to_sentence.presence ||
+                    I18n.t(
+                        "lesli_shield.profiles.password_hint",
+                        minimum: Devise.password_length.min,
+                        maximum: Devise.password_length.max
+                    ),
+                category: user.errors[:password].any? ? :danger : nil,
+                icon: "key",
+                required: true,
+                autocomplete: "new-password",
+                minlength: Devise.password_length.min,
+                maxlength: Devise.password_length.max,
+                value: ""
+            ) %>
+
+            <%= form.field_control_password(
+                :password_confirmation,
+                label: I18n.t("lesli_shield.profiles.password_confirmation"),
+                message: user.errors[:password_confirmation].to_sentence.presence,
+                category: user.errors[:password_confirmation].any? ? :danger : nil,
+                icon: "key",
+                required: true,
+                autocomplete: "new-password",
+                minlength: Devise.password_length.min,
+                maxlength: Devise.password_length.max,
+                value: ""
+            ) %>
+
+            <%= form.field_control_button(
+                I18n.t("lesli_shield.profiles.change_password"),
+                {
+                    data: {
+                        turbo_submits_with: I18n.t(
+                            "lesli_shield.profiles.changing_password"
+                        )
+                    }
+                },
+                icon: "key"
+            ) %>
+        <% end %>
+    <% end %>
+</div>

data/app/views/lesli_shield/profiles/show.html.erb

@@ -0,0 +1,29 @@
+<%= render LesliView::Layout::Container.new("shield-profile-show") do %>
+    <%= render "lesli_shield/users/information-card" %>
+
+    <%= render LesliView::Components::Tabs.new(
+        active_tab: @active_profile_tab.presence || params[:tab].presence_in(%w[information security]) || "information"
+    ) do |tabs| %>
+        <% tabs.with_tab(
+            id: "information",
+            title: I18n.t("lesli_shield.profiles.information"),
+            icon: "info"
+        ) do %>
+            <%= render(
+                "lesli_shield/users/information-form",
+                form_url: profile_path
+            ) %>
+        <% end %>
+
+        <% tabs.with_tab(
+            id: "security",
+            title: I18n.t("lesli_shield.profiles.security"),
+            icon: "lock"
+        ) do %>
+            <%= render(
+                "lesli_shield/profiles/password-form",
+                user: @user
+            ) %>
+        <% end %>
+    <% end %>
+<% end %>

data/app/views/lesli_shield/users/_information-form.html.erb

@@ -1,4 +1,12 @@
-<%= form_with(model: @user, builder: LesliView::Forms::Builder) do |form| %>
+<%
+    form_options = {
+        model: @user,
+        builder: LesliView::Forms::Builder
+    }
+    form_options[:url] = local_assigns[:form_url] if local_assigns[:form_url]
+%>
+
+<%= form_with(**form_options) do |form| %>
     <%= form.fieldset do %>
         <%= form.field_control(:alias) %>
         <%= form.field_control(:title) %>

data/config/initializers/devise.rb

@@ -1,337 +1,61 @@
 # frozen_string_literal: true
 
-# Assuming you have not yet modified this file, each configuration option below
-# is set to its default value. Note that some are commented out while others
-# are not: uncommented lines are intended to protect your configuration from
-# breaking changes in upgrades (i.e., in the event that future versions of
-# Devise change the default values for those options).
-#
-# Use this hook to configure devise mailer, warden hooks and so forth.
-# Many of these configuration options can be set straight in your model.
-Devise.setup do |config|
-  # The secret key used by Devise. Devise uses this key to generate
-  # random tokens. Changing this key will render invalid all existing
-  # confirmation, reset password and unlock tokens in the database.
-  # Devise will use the `secret_key_base` as its `secret_key`
-  # by default. You can change it below and use your own secret key.
-  # config.secret_key = 'c1d5eb2ef2f445f993dc75916ef80b2fda4c8e6c4b5348dd04aa42be5d1bb3018346749691e6ae1e964def916d4c4eb35171109ce0b0e1cb681bd32260a2e729'
-
-  # ==> Controller configuration
-  # Configure the parent class to the devise controllers.
-  # config.parent_controller = 'DeviseController'
-
-  # ==> Mailer Configuration
-  # Configure the e-mail address which will be shown in Devise::Mailer,
-  # note that it will be overwritten if you use your own mailer class
-  # with default "from" parameter.
-  config.mailer_sender = 'please-change-me-at-config-initializers-devise@example.com'
-
-  # Configure the class responsible to send e-mails.
-  # config.mailer = 'Devise::Mailer'
-
-  # Configure the parent class responsible to send e-mails.
-  # config.parent_mailer = 'ActionMailer::Base'
-
-  # ==> ORM configuration
-  # Load and configure the ORM. Supports :active_record (default) and
-  # :mongoid (bson_ext recommended) by default. Other ORMs may be
-  # available as additional gems.
-  require 'devise/orm/active_record'
-
-  # ==> Configuration for any authentication mechanism
-  # Configure which keys are used when authenticating a user. The default is
-  # just :email. You can configure it to use [:username, :subdomain], so for
-  # authenticating a user, both parameters are required. Remember that those
-  # parameters are used only when authenticating and not when retrieving from
-  # session. If you need permissions, you should implement that in a before filter.
-  # You can also supply a hash where the value is a boolean determining whether
-  # or not authentication should be aborted when the value is not present.
-  # config.authentication_keys = [:email]
-
-  # Configure parameters from the request object used for authentication. Each entry
-  # given should be a request method and it will automatically be passed to the
-  # find_for_authentication method and considered in your model lookup. For instance,
-  # if you set :request_keys to [:subdomain], :subdomain will be used on authentication.
-  # The same considerations mentioned for authentication_keys also apply to request_keys.
-  # config.request_keys = []
-
-  # Configure which authentication keys should be case-insensitive.
-  # These keys will be downcased upon creating or modifying a user and when used
-  # to authenticate or find a user. Default is :email.
-  config.case_insensitive_keys = [:email]
-
-  # Configure which authentication keys should have whitespace stripped.
-  # These keys will have whitespace before and after removed upon creating or
-  # modifying a user and when used to authenticate or find a user. Default is :email.
-  config.strip_whitespace_keys = [:email]
-
-  # Tell if authentication through request.params is enabled. True by default.
-  # It can be set to an array that will enable params authentication only for the
-  # given strategies, for example, `config.params_authenticatable = [:database]` will
-  # enable it only for database (email + password) authentication.
-  # config.params_authenticatable = true
-
-  # Tell if authentication through HTTP Auth is enabled. False by default.
-  # It can be set to an array that will enable http authentication only for the
-  # given strategies, for example, `config.http_authenticatable = [:database]` will
-  # enable it only for database authentication.
-  # For API-only applications to support authentication "out-of-the-box", you will likely want to
-  # enable this with :database unless you are using a custom strategy.
-  # The supported strategies are:
-  # :database      = Support basic authentication with authentication key + password
-  # config.http_authenticatable = false
-
-  # If 401 status code should be returned for AJAX requests. True by default.
-  # config.http_authenticatable_on_xhr = true
-
-  # The realm used in Http Basic Authentication. 'Application' by default.
-  # config.http_authentication_realm = 'Application'
-
-  # It will change confirmation, password recovery and other workflows
-  # to behave the same regardless if the e-mail provided was right or wrong.
-  # Does not affect registerable.
-  # config.paranoid = true
-
-  # By default Devise will store the user in session. You can skip storage for
-  # particular strategies by setting this option.
-  # Notice that if you are skipping storage for all authentication paths, you
-  # may want to disable generating routes to Devise's sessions controller by
-  # passing skip: :sessions to `devise_for` in your config/routes.rb
-  config.skip_session_storage = [:http_auth]
-
-  # By default, Devise cleans up the CSRF token on authentication to
-  # avoid CSRF token fixation attacks. This means that, when using AJAX
-  # requests for sign in and sign up, you need to get a new CSRF token
-  # from the server. You can disable this option at your own risk.
-  # config.clean_up_csrf_token_on_authentication = true
-
-  # When false, Devise will not attempt to reload routes on eager load.
-  # This can reduce the time taken to boot the app but if your application
-  # requires the Devise mappings to be loaded during boot time the application
-  # won't boot properly.
-  # config.reload_routes = true
-
-  # ==> Configuration for :database_authenticatable
-  # For bcrypt, this is the cost for hashing the password and defaults to 12. If
-  # using other algorithms, it sets how many times you want the password to be hashed.
-  # The number of stretches used for generating the hashed password are stored
-  # with the hashed password. This allows you to change the stretches without
-  # invalidating existing passwords.
-  #
-  # Limiting the stretches to just one in testing will increase the performance of
-  # your test suite dramatically. However, it is STRONGLY RECOMMENDED to not use
-  # a value less than 10 in other environments. Note that, for bcrypt (the default
-  # algorithm), the cost increases exponentially with the number of stretches (e.g.
-  # a value of 20 is already extremely slow: approx. 60 seconds for 1 calculation).
-  config.stretches = Rails.env.test? ? 1 : 12
-
-  # Set up a pepper to generate the hashed password.
-  # config.pepper = '8eac13c07f5041ea04bd54e18e3388a1c7091ddb5fe41b8f9d40e5fab94e9eeaa09ce0bdcfe56129d0e082a0505d980d4b3215535141c2f777ca278cfd9fd501'
-
-  # Send a notification to the original email when the user's email is changed.
-  # config.send_email_changed_notification = false
-
-  # Send a notification email when the user's password is changed.
-  # config.send_password_change_notification = false
-
-  # ==> Configuration for :confirmable
-  # A period that the user is allowed to access the website even without
-  # confirming their account. For instance, if set to 2.days, the user will be
-  # able to access the website for two days without confirming their account,
-  # access will be blocked just in the third day.
-  # You can also set it to nil, which will allow the user to access the website
-  # without confirming their account.
-  # Default is 0.days, meaning the user cannot access the website without
-  # confirming their account.
-  # config.allow_unconfirmed_access_for = 2.days
-
-  # A period that the user is allowed to confirm their account before their
-  # token becomes invalid. For example, if set to 3.days, the user can confirm
-  # their account within 3 days after the mail was sent, but on the fourth day
-  # their account can't be confirmed with the token any more.
-  # Default is nil, meaning there is no restriction on how long a user can take
-  # before confirming their account.
-  # config.confirm_within = 3.days
-
-  # If true, requires any email changes to be confirmed (exactly the same way as
-  # initial account confirmation) to be applied. Requires additional unconfirmed_email
-  # db field (see migrations). Until confirmed, new email is stored in
-  # unconfirmed_email column, and copied to email column on successful confirmation.
-  # Also, when used in conjunction with `send_email_changed_notification`,
-  # the notification is sent to the original email when the change is requested,
-  # not when the unconfirmed email is confirmed.
-  config.reconfirmable = true
-
-  # Defines which key will be used when confirming an account
-  # config.confirmation_keys = [:email]
-
-  # ==> Configuration for :rememberable
-  # The time the user will be remembered without asking for credentials again.
-  # config.remember_for = 2.weeks
-
-  # Invalidates all the remember me tokens when the user signs out.
-  config.expire_all_remember_me_on_sign_out = true
-
-  # If true, extends the user's remember period when remembered via cookie.
-  # config.extend_remember_period = false
-
-  # Options to be passed to the created cookie. For instance, you can set
-  # secure: true in order to force SSL only cookies.
-  # config.rememberable_options = {}
-
-  # ==> Configuration for :validatable
-  # Range for password length.
-  config.password_length = 6..128
-
-  # Email regex used to validate email formats. It simply asserts that
-  # one (and only one) @ exists in the given string. This is mainly
-  # to give user feedback and not to assert the e-mail validity.
-  config.email_regexp = /\A[^@\s]+@[^@\s]+\z/
-
-  # ==> Configuration for :timeoutable
-  # The time you want to timeout the user session without activity. After this
-  # time the user will be asked for credentials again. Default is 30 minutes.
-  # config.timeout_in = 30.minutes
-
-  # ==> Configuration for :lockable
-  # Defines which strategy will be used to lock an account.
-  # :failed_attempts = Locks an account after a number of failed attempts to sign in.
-  # :none            = No lock strategy. You should handle locking by yourself.
-  # config.lock_strategy = :failed_attempts
-
-  # Defines which key will be used when locking and unlocking an account
-  # config.unlock_keys = [:email]
-
-  # Defines which strategy will be used to unlock an account.
-  # :email = Sends an unlock link to the user email
-  # :time  = Re-enables login after a certain amount of time (see :unlock_in below)
-  # :both  = Enables both strategies
-  # :none  = No unlock strategy. You should handle unlocking by yourself.
-  # config.unlock_strategy = :both
-
-  # Number of authentication tries before locking an account if lock_strategy
-  # is failed attempts.
-  # config.maximum_attempts = 20
-
-  # Time interval to unlock the account if :time is enabled as unlock_strategy.
-  # config.unlock_in = 1.hour
-
-  # Warn on the last attempt before the account is locked.
-  # config.last_attempt_warning = true
-
-  # ==> Configuration for :recoverable
-  #
-  # Defines which key will be used when recovering the password for an account
-  # config.reset_password_keys = [:email]
-
-  # Time interval you can reset your password with a reset password key.
-  # Don't put a too small interval or your users won't have the time to
-  # change their passwords.
-  config.reset_password_within = 6.hours
-
-  # When set to false, does not sign a user in automatically after their password is
-  # reset. Defaults to true, so a user is signed in automatically after a reset.
-  # config.sign_in_after_reset_password = true
-
-  # ==> Configuration for :encryptable
-  # Allow you to use another hashing or encryption algorithm besides bcrypt (default).
-  # You can use :sha1, :sha512 or algorithms from others authentication tools as
-  # :clearance_sha1, :authlogic_sha512 (then you should set stretches above to 20
-  # for default behavior) and :restful_authentication_sha1 (then you should set
-  # stretches to 10, and copy REST_AUTH_SITE_KEY to pepper).
-  #
-  # Require the `devise-encryptable` gem when using anything other than bcrypt
-  # config.encryptor = :sha512
-
-  # ==> Scopes configuration
-  # Turn scoped views on. Before rendering "sessions/new", it will first check for
-  # "users/sessions/new". It's turned off by default because it's slower if you
-  # are using only default views.
-  # config.scoped_views = false
-
-  # Configure the default scope given to Warden. By default it's the first
-  # devise role declared in your routes (usually :user).
-  # config.default_scope = :user
-
-  # Set this configuration to false if you want /users/sign_out to sign out
-  # only the current scope. By default, Devise signs out all scopes.
-  # config.sign_out_all_scopes = true
-
-  # ==> Navigation configuration
-  # Lists the formats that should be treated as navigational. Formats like
-  # :html should redirect to the sign in page when the user does not have
-  # access, but formats like :xml or :json, should return 401.
-  #
-  # If you have any extra navigational formats, like :iphone or :mobile, you
-  # should add them to the navigational formats lists.
-  #
-  # The "*/*" below is required to match Internet Explorer requests.
-  # config.navigational_formats = ['*/*', :html, :turbo_stream]
-
-  # The default HTTP method used to sign out a resource. Default is :delete.
-  config.sign_out_via = :delete
-
-  # ==> OmniAuth
-  # Add a new OmniAuth provider. Check the wiki for more information on setting
-  # up on your models and hooks.
-  # config.omniauth :github, 'APP_ID', 'APP_SECRET', scope: 'user,public_repo'
-
-  # ==> Warden configuration
-  # If you want to use other strategies, that are not supported by Devise, or
-  # change the failure app, you can configure them inside the config.warden block.
-  #
-  # config.warden do |warden_config|
-  #   warden_config.intercept_401 = false
-  #   warden_config.default_strategies(scope: :user).unshift :some_external_strategy
-  # end
-
-  # ==> Mountable engine configurations
-  # When using Devise inside an engine, let's call it `MyEngine`, and this engine
-  # is mountable, there are some extra configurations to be taken into account.
-  # The following options are available, assuming the engine is mounted as:
-  #
-  #     mount MyEngine, at: '/my_engine'
-  #
-  # The router that invoked `devise_for`, in the example above, would be:
-  # config.router_name = :my_engine
-  #
-  # When using OmniAuth, Devise cannot automatically set OmniAuth path,
-  # so you need to do it manually. For the users scope, it would be:
-  # config.omniauth_path_prefix = '/my_engine/users/auth'
-
-  # ==> Hotwire/Turbo configuration
-  # When using Devise with Hotwire/Turbo, the http status for error responses
-  # and some redirects must match the following. The default in Devise for existing
-  # apps is `200 OK` and `302 Found` respectively, but new apps are generated with
-  # these new defaults that match Hotwire/Turbo behavior.
-  # Note: These might become the new default in future versions of Devise.
-  config.responder.error_status = :unprocessable_content
-  config.responder.redirect_status = :see_other
-
-  # ==> Configuration for :registerable
-
-  # When set to false, does not sign a user in automatically after their password is
-  # changed. Defaults to true, so a user is signed in automatically after changing a password.
-  # config.sign_in_after_change_password = true
-end
+require "devise/orm/active_record"
 
+# LesliShield is one possible authentication provider for Lesli. Because this
+# provider selects Devise, all settings required by that implementation live
+# here rather than in the framework core.
 Devise.setup do |config|
-
-    config.mailer = "LesliShield::DeviseMailer"
-
-    # Mount devise through Lesli engine
-    config.router_name = :lesli_shield
-
-    # ==> Controller configuration
-    # Configure the parent class to the devise controllers.
+    # Controllers, routes, and mail delivery
     config.parent_controller = "Lesli::ApplicationDeviseController"
+    config.mailer_sender = (
+        ENV["LESLI_MAILER_FROM"].presence ||
+        Rails.application.config.action_mailer.default_options&.dig(:from).presence ||
+        "no-reply@lesli.dev"
+    )
+    config.mailer = "LesliShield::DeviseMailer"
+    # Authentication routes are intentionally mounted in the host application
+    # so every Lesli engine shares the same login. Devise must therefore build
+    # its URLs through main_app, not through LesliShield's isolated router.
+    config.router_name = :main_app
+
+    # Authentication keys
+    config.case_insensitive_keys = [:email]
+    config.strip_whitespace_keys = [:email]
+
+    # Authentication, recovery, and lock responses must not reveal whether the
+    # submitted email belongs to an account.
+    config.paranoid = true
+
+    # Session behavior
+    config.skip_session_storage = [:http_auth]
+    config.expire_all_remember_me_on_sign_out = true
+    config.http_authenticatable_on_xhr = false
+    config.navigational_formats = [:html, :json]
 
-    # The default HTTP method used to sign out a resource. Default is :delete.
+    # The current navigation renders logout as a regular link. Retain GET until
+    # those callers are migrated to submit a DELETE request.
     config.sign_out_via = :get
 
-    # If 401 status code should be returned for AJAX requests. True by default.
-    config.http_authenticatable_on_xhr = false
-
-    # The "*/*" below is required to match Internet Explorer requests.
-    config.navigational_formats = [:html, :json]
+    # Password authentication
+    config.stretches = Rails.env.test? ? 1 : 12
+    config.password_length = 6..128
+    config.email_regexp = /\A[^@\s]+@[^@\s]+\z/
+
+    # Confirmation and password recovery
+    config.reconfirmable = true
+    config.confirm_within = 3.hours
+    config.reset_password_within = 6.hours
+
+    # Temporary account locking after repeated failed credentials.
+    config.lock_strategy = :failed_attempts
+    config.unlock_keys = [:email]
+    config.unlock_strategy = :time
+    config.maximum_attempts = 5
+    config.unlock_in = 15.minutes
+    config.last_attempt_warning = false
+
+    # Rails/Hotwire response semantics
+    config.responder.error_status = :unprocessable_content
+    config.responder.redirect_status = :see_other
 end

data/config/locales/translations.en.yml

@@ -3,17 +3,80 @@
   lesli_shield:
     devise/sessions:
       message_not_valid_credentials: Not valid credentials
+      message_too_many_attempts: Too many login attempts. Try again later.
       view_title: Welcome to Lesli
       button_log_in: Log in
+      demo_title: Demo account
+      demo_email: Email
+      demo_password: Password
       view_still_not_registered: Still not registered?
       button_create_account: Create account
     devise/registrations:
       view_title: Create an account to discover Lesli
-      view_password_requirements: 'Password needs to contain:'
-      view_password_requirements_uppercase: 'Minimum one uppercase letter '
+      view_description: Enter your email address and choose a password to create your account.
+      view_password_length: Your password must contain between %{minimum} and %{maximum} characters.
+      view_legal_notice: By creating an account, you agree to the Terms and acknowledge the Global Privacy Statement.
+      label_email: Email address
+      label_password: Password
+      label_password_confirmation: Confirm password
       button_create_account: Create account
+      button_creating_account: Creating account…
       view_already_have_an_account: Already have an account?
       button_login: Log in
+      message_registration_not_allowed: Account registration is not available.
+      message_too_many_attempts: Too many account creation attempts. Try again later.
+    devise/confirmations:
+      view_title: Resend confirmation instructions
+      view_description: Enter your email address and, if confirmation is still pending, we will send you a new confirmation link.
+      view_success_title: Account confirmed
+      view_success_description: Your email address was confirmed successfully. You can now log in.
+      field_email: Email address
+      button_send_instructions: Resend confirmation instructions
+      button_sending: Sending instructions…
+      message_confirmation_failed: We could not finish confirming your account. Please try the confirmation link again.
+      message_too_many_attempts: Too many confirmation requests. Try again later.
+      mailer_confirmation_subject: Confirm your email address
+      mailer_welcome_subject: Welcome to Lesli
+    devise/passwords:
+      view_request_title: Forgot your password?
+      view_request_description: Enter the email address associated with your account. If the account exists, we will send you a password recovery link.
+      view_update_title: Create a new password
+      view_update_description: Choose a new password for your account and enter it twice to confirm it.
+      field_email: Email address
+      field_password: New password
+      field_password_confirmation: Confirm new password
+      field_password_hint:
+        one: Use at least one character.
+        other: Use at least %{count} characters.
+      button_send_instructions: Send recovery link
+      button_sending: Sending…
+      button_update_password: Change password
+      button_updating: Updating…
+      message_too_many_attempts: Too many password recovery attempts. Try again later.
+      mailer_subject: Password reset instructions
+    devise/shared:
+      button_login: Log in
+      button_reset_password: Reset password
+      button_magic_link: Magic link
+      button_one_time_password: One-time password
     dashboards:
       view_password_requirements_symbol: One symbol
       view_password_requirements_number: One number
+    profiles:
+      information: Information
+      security: Security
+      password_description: Enter your current password to choose a new one. Changing it will sign out your other sessions.
+      current_password: Current password
+      new_password: New password
+      password_confirmation: Confirm new password
+      password_hint: Your password must contain between %{minimum} and %{maximum} characters.
+      change_password: Change password
+      changing_password: Changing password…
+      password_updated: Your password was changed successfully.
+      password_too_many_attempts: Too many password change attempts. Try again later.
+  devise:
+    confirmations:
+      confirmed: Your email address has been confirmed successfully. You can now log in.
+      send_paranoid_instructions: If your account is awaiting confirmation, you will receive a new confirmation link in a few minutes.
+    registrations:
+      signed_up_but_invalid: Account created. Check your email to continue.

data/config/locales/translations.es.yml

@@ -3,17 +3,80 @@
   lesli_shield:
     devise/sessions:
       message_not_valid_credentials: Credenciales no validas
+      message_too_many_attempts: Demasiados intentos de inicio de sesión. Inténtalo de nuevo más tarde.
       view_title: ":lesli_shield.devise/sessions.view_title:"
       button_log_in: Iniciar sesión
+      demo_title: Cuenta de demostración
+      demo_email: Correo electrónico
+      demo_password: Contraseña
       view_still_not_registered: "¿Aún no tienes cuenta?"
       button_create_account: Crear cuenta
     devise/registrations:
       view_title: Crea una cuenta y descubre Lesli
-      view_password_requirements: 'La contraseña debe incluir:'
-      view_password_requirements_uppercase: Una letra mayuscula
+      view_description: Ingresa tu correo electrónico y elige una contraseña para crear tu cuenta.
+      view_password_length: Tu contraseña debe contener entre %{minimum} y %{maximum} caracteres.
+      view_legal_notice: Al crear una cuenta, aceptas los Términos y reconoces la Declaración global de privacidad.
+      label_email: Correo electrónico
+      label_password: Contraseña
+      label_password_confirmation: Confirmar contraseña
       button_create_account: Crear cuenta
+      button_creating_account: Creando cuenta…
       view_already_have_an_account: "¿Ya tienes cuenta?"
       button_login: Iniciar sesión
+      message_registration_not_allowed: La creación de cuentas no está disponible.
+      message_too_many_attempts: Demasiados intentos de creación de cuenta. Inténtalo de nuevo más tarde.
+    devise/confirmations:
+      view_title: Reenviar instrucciones de confirmación
+      view_description: Ingresa tu correo electrónico y, si la confirmación sigue pendiente, te enviaremos un nuevo enlace.
+      view_success_title: Cuenta confirmada
+      view_success_description: Tu correo electrónico fue confirmado correctamente. Ya puedes iniciar sesión.
+      field_email: Correo electrónico
+      button_send_instructions: Reenviar instrucciones de confirmación
+      button_sending: Enviando instrucciones…
+      message_confirmation_failed: No pudimos terminar de confirmar tu cuenta. Intenta utilizar nuevamente el enlace de confirmación.
+      message_too_many_attempts: Demasiadas solicitudes de confirmación. Inténtalo de nuevo más tarde.
+      mailer_confirmation_subject: Confirma tu correo electrónico
+      mailer_welcome_subject: Te damos la bienvenida a Lesli
+    devise/passwords:
+      view_request_title: "¿Olvidaste tu contraseña?"
+      view_request_description: Ingresa el correo electrónico asociado con tu cuenta. Si la cuenta existe, te enviaremos un enlace de recuperación.
+      view_update_title: Crea una nueva contraseña
+      view_update_description: Elige una nueva contraseña para tu cuenta e ingrésala dos veces para confirmarla.
+      field_email: Correo electrónico
+      field_password: Nueva contraseña
+      field_password_confirmation: Confirmar nueva contraseña
+      field_password_hint:
+        one: Usa al menos un carácter.
+        other: Usa al menos %{count} caracteres.
+      button_send_instructions: Enviar enlace de recuperación
+      button_sending: Enviando…
+      button_update_password: Cambiar contraseña
+      button_updating: Actualizando…
+      message_too_many_attempts: Demasiados intentos de recuperación de contraseña. Inténtalo de nuevo más tarde.
+      mailer_subject: Instrucciones para restablecer tu contraseña
+    devise/shared:
+      button_login: Iniciar sesión
+      button_reset_password: Restablecer contraseña
+      button_magic_link: Enlace mágico
+      button_one_time_password: Contraseña de un solo uso
     dashboards:
       view_password_requirements_symbol: Un caracter especial
       view_password_requirements_number: Un número
+    profiles:
+      information: Información
+      security: Seguridad
+      password_description: Ingresa tu contraseña actual para elegir una nueva. Al cambiarla se cerrarán tus otras sesiones.
+      current_password: Contraseña actual
+      new_password: Nueva contraseña
+      password_confirmation: Confirmar nueva contraseña
+      password_hint: Tu contraseña debe contener entre %{minimum} y %{maximum} caracteres.
+      change_password: Cambiar contraseña
+      changing_password: Cambiando contraseña…
+      password_updated: Tu contraseña fue cambiada correctamente.
+      password_too_many_attempts: Demasiados intentos de cambio de contraseña. Inténtalo de nuevo más tarde.
+  devise:
+    confirmations:
+      confirmed: Tu correo electrónico fue confirmado correctamente. Ya puedes iniciar sesión.
+      send_paranoid_instructions: Si tu cuenta está pendiente de confirmación, recibirás un nuevo enlace en unos minutos.
+    registrations:
+      signed_up_but_invalid: Cuenta creada. Revisa tu correo electrónico para continuar.