maquina-generators 0.7.0 → 0.8.0

data/test/tmp/app/controllers/sessions_controller.rb

@@ -0,0 +1,56 @@
+class SessionsController < ApplicationController
+  allow_unauthenticated_access only: %i[new create]
+  rate_limit to: 10, within: 3.minutes, only: :create, with: -> { redirect_to new_session_path, alert: t("flash.general.rate_limited") }
+
+  # GET /session/new
+  def new
+  end
+
+  # POST /session
+  def create
+    email = params[:email_address]&.downcase&.strip
+    user = User.find_by(email_address: email)
+
+    # Check cooldown regardless of user existence
+    recent_verification = EmailVerification.for_email(email).recent.first
+    if recent_verification
+      session[:pending_verification_id] = recent_verification.id
+      session[:pending_login_email] = email
+      redirect_to new_session_verification_path,
+        notice: t("flash.sessions.code_already_sent", minutes: recent_verification.minutes_until_resend)
+      return
+    end
+
+    if user && !user.blocked?
+      # User exists and not blocked - send verification
+      verification = EmailVerification.create!(
+        email: email,
+        code: SecureRandom.hex(3).upcase,
+        verification_type: "login",
+        locale: user.locale || I18n.default_locale.to_s,
+        expires_at: 15.minutes.from_now
+      )
+
+      Rails.logger.info "[AUTH] Verification code sent for login #{email} from #{request.remote_ip}"
+      VerificationMailer.verification_code(verification).deliver_later
+      session[:pending_verification_id] = verification.id
+    else
+      # No user OR blocked - don't send email, but show same UI
+      if user&.blocked?
+        Rails.logger.info "[AUTH] Login attempted for blocked user #{email} from #{request.remote_ip}"
+      else
+        Rails.logger.info "[AUTH] Login attempted for non-existent email #{email} from #{request.remote_ip}"
+      end
+      session[:pending_login_email] = email
+    end
+
+    redirect_to new_session_verification_path
+  end
+
+  # DELETE /session
+  def destroy
+    Rails.logger.info "[AUTH] Logout for user #{Current.session.user.email_address} from #{request.remote_ip}"
+    terminate_session
+    redirect_to new_session_path, notice: t("flash.sessions.destroy.success"), status: :see_other
+  end
+end

data/test/tmp/app/helpers/authentication_helper.rb

@@ -0,0 +1,20 @@
+module AuthenticationHelper
+  # Masks an email address for privacy display
+  # "mario@example.com" -> "ma***@example.com"
+  # "jo@example.com" -> "j*@example.com"
+  # "a@example.com" -> "a@example.com"
+  def mask_email(email)
+    return "" if email.blank?
+
+    local, domain = email.split("@")
+    return email if local.nil? || domain.nil?
+
+    masked_local = if local.length <= 2
+      local[0] + "*" * (local.length - 1)
+    else
+      local[0..1] + "*" * (local.length - 2)
+    end
+
+    "#{masked_local}@#{domain}"
+  end
+end

data/test/tmp/app/jobs/authentication_cleanup_job.rb

@@ -0,0 +1,13 @@
+class AuthenticationCleanupJob < ApplicationJob
+  queue_as :default
+
+  def perform
+    # Delete email verifications older than 24 hours
+    old_verifications_count = EmailVerification.where("created_at < ?", 24.hours.ago).delete_all
+    Rails.logger.info "AuthenticationCleanupJob: Deleted #{old_verifications_count} old email verifications"
+
+    # Delete expired sessions
+    expired_sessions_count = Session.cleanup_expired!
+    Rails.logger.info "AuthenticationCleanupJob: Deleted #{expired_sessions_count} expired sessions"
+  end
+end

data/test/tmp/app/mailers/verification_mailer.rb

@@ -0,0 +1,15 @@
+class VerificationMailer < ApplicationMailer
+  default from: "App <noreply@example.com>"
+
+  def verification_code(email_verification)
+    @verification = email_verification
+    locale = email_verification.locale || I18n.default_locale.to_s
+
+    I18n.with_locale(locale) do
+      mail(
+        to: email_verification.email,
+        subject: I18n.t("verification_mailer.verification_code.subject")
+      )
+    end
+  end
+end

data/test/tmp/app/models/account.rb

@@ -0,0 +1,5 @@
+class Account < ApplicationRecord
+  has_many :users, dependent: :destroy
+
+  validates :name, allow_blank: true, length: { maximum: 100 }
+end

data/test/tmp/app/models/current.rb

@@ -0,0 +1,5 @@
+class Current < ActiveSupport::CurrentAttributes
+  attribute :session
+  delegate :user, to: :session, allow_nil: true
+  delegate :account, to: :user, allow_nil: true
+end

data/test/tmp/app/models/email_verification.rb

@@ -0,0 +1,58 @@
+class EmailVerification < ApplicationRecord
+  VERIFICATION_TYPES = %w[signup login].freeze
+  COOLDOWN_MINUTES = 15
+  MAX_ATTEMPTS = 5
+
+  validates :email, presence: true, format: {with: URI::MailTo::EMAIL_REGEXP}
+  validates :code, presence: true
+  validates :verification_type, presence: true, inclusion: {in: VERIFICATION_TYPES}
+  validates :expires_at, presence: true
+
+  normalizes :email, with: ->(email) { email.strip.downcase }
+  normalizes :code, with: ->(code) { code.strip.upcase }
+
+  # Encrypted at rest, not digested: the mail goes out through deliver_later,
+  # whose job reloads this row by GlobalID and must read the code back.
+  encrypts :code
+
+  scope :pending, -> { where(verified_at: nil) }
+  scope :expired, -> { where("expires_at < ?", Time.current) }
+  scope :active, -> { pending.where("expires_at >= ?", Time.current) }
+  scope :for_email, ->(email) { where("LOWER(email) = ?", email.to_s.downcase) }
+  scope :recent, -> { pending.where("created_at > ?", COOLDOWN_MINUTES.minutes.ago) }
+
+  def expired?
+    expires_at < Time.current
+  end
+
+  # A code is single-use against a bounded number of guesses: once the wrong-code
+  # count hits the ceiling the record is dead regardless of how many IPs an
+  # attacker rotates through, since each code only ever maps to one row.
+  def locked?
+    attempts >= MAX_ATTEMPTS
+  end
+
+  # Constant-time, so response timing reveals nothing about how close a guess
+  # came. Normalized the same way the stored code is.
+  def code_matches?(candidate)
+    ActiveSupport::SecurityUtils.secure_compare(code, candidate.to_s.strip.upcase)
+  end
+
+  def verified?
+    verified_at.present?
+  end
+
+  def can_resend?
+    created_at <= COOLDOWN_MINUTES.minutes.ago
+  end
+
+  def minutes_until_resend
+    return 0 if can_resend?
+
+    ((created_at + COOLDOWN_MINUTES.minutes - Time.current) / 60).ceil
+  end
+
+  def mark_verified!
+    update!(verified_at: Time.current)
+  end
+end

data/test/tmp/app/models/session.rb

@@ -0,0 +1,18 @@
+class Session < ApplicationRecord
+  belongs_to :user
+
+  scope :active, -> { where("expires_at > ? OR expires_at IS NULL", Time.current) }
+  scope :expired, -> { where("expires_at <= ? AND expires_at IS NOT NULL", Time.current) }
+
+  def self.cleanup_expired!
+    expired.delete_all
+  end
+
+  def expired?
+    expires_at.present? && expires_at < Time.current
+  end
+
+  def active?
+    !expired?
+  end
+end

data/test/tmp/app/models/user.rb

@@ -0,0 +1,37 @@
+class User < ApplicationRecord
+  belongs_to :account
+  has_many :sessions, dependent: :destroy
+
+  enum :role, {member: "member", admin: "admin"}, default: "member"
+
+  normalizes :email_address, with: ->(e) { e.strip.downcase }
+
+  validates :email_address, uniqueness: true
+  validates :name, allow_blank: true, length: { maximum: 100 }
+  validate :email_cannot_contain_plus
+
+  scope :active, -> { where(blocked_at: nil) }
+  scope :blocked, -> { where.not(blocked_at: nil) }
+
+  def blocked?
+    blocked_at.present?
+  end
+
+  def block!(reason: nil)
+    update!(blocked_at: Time.current, blocked_reason: reason)
+  end
+
+  def unblock!
+    update!(blocked_at: nil, blocked_reason: nil)
+  end
+
+  private
+
+  def email_cannot_contain_plus
+    return if email_address.blank?
+
+    if email_address.include?("+")
+      errors.add(:email_address, :plus_not_allowed)
+    end
+  end
+end

data/test/tmp/config/locales/clave.en.yml

@@ -0,0 +1,102 @@
+en:
+  flash:
+    sessions:
+      create:
+        success: "You have signed in successfully."
+      destroy:
+        success: "You have signed out successfully."
+      code_sent: "We sent you a verification code."
+      invalid_code: "The code is incorrect. Please try again."
+      code_expired: "The code has expired. Request a new one."
+      code_locked: "Too many incorrect tries. Request a new code to keep going."
+      code_resent: "We sent you a new code."
+      cooldown: "You must wait %{minutes} minutes before requesting another code."
+      code_already_sent: "We already sent you a code. Check your email (including spam). You can request a new one in %{minutes} minutes."
+    registrations:
+      create:
+        success: "Your account has been created. Welcome!"
+      code_sent: "We sent a verification code to your email."
+      email_plus_not_allowed: "Email addresses with '+' are not allowed. Use your main email without aliases."
+      email_taken: "An account with this email already exists. Would you like to sign in?"
+      invalid_code: "The code is incorrect. Please try again."
+      code_expired: "The code has expired. Request a new one."
+      code_locked: "Too many incorrect tries. Request a new code to keep going."
+      code_resent: "We sent you a new code."
+      cooldown: "You must wait %{minutes} minutes before requesting another code."
+      code_already_sent: "We already sent you a code. Check your email (including spam). You can request a new one in %{minutes} minutes."
+    general:
+      unauthorized: "You must sign in to access this page."
+      forbidden: "You are not authorized to perform this action."
+      not_found: "The resource you're looking for doesn't exist."
+      rate_limited: "Too many attempts. Please wait a few minutes and try again."
+
+  sessions:
+    new:
+      title: "Sign in"
+      email: "Email address"
+      email_placeholder: "you@example.com"
+      email_instructions: "Enter your email and we'll send you a 6-digit code."
+      spam_note: "Check your spam folder if you don't receive the email."
+      submit: "Send code"
+      no_account: "Don't have an account?"
+      sign_up: "Sign up"
+
+  session:
+    verifications:
+      new:
+        title: "Verify your identity"
+        sent_to: "If you have an account, we sent a code to %{email}"
+        enter_code: "Enter the code"
+        submit: "Sign in"
+        check_spam: "Check your spam folder."
+        didnt_receive: "Didn't receive the code?"
+        resend: "Resend code"
+
+  registrations:
+    new:
+      title: "Create account"
+      email: "Email address"
+      email_placeholder: "you@example.com"
+      email_instructions: "Enter your email address. We'll send you a 6-digit code to verify your account."
+      spam_note: "Check your spam folder if you don't receive the email."
+      submit: "Send code"
+      have_account: "Already have an account?"
+      sign_in: "Sign in"
+
+  registration:
+    verifications:
+      new:
+        title: "Verify your email"
+        sent_to: "We sent a 6-digit code to %{email}"
+        enter_code: "Enter the code"
+        submit: "Verify"
+        check_spam: "Check your spam folder if you don't receive it."
+        didnt_receive: "Didn't receive the code?"
+        resend: "Resend code"
+
+  verification_mailer:
+    verification_code:
+      subject: "Your verification code"
+      title: "Verification code"
+      instructions: "Enter this code to continue:"
+      expires_in: "This code expires in 15 minutes."
+      ignore_if_not_you: "If you didn't request this code, you can ignore this email."
+
+  activerecord:
+    models:
+      user:
+        one: "User"
+        other: "Users"
+    attributes:
+      user:
+        email_address: "Email address"
+        name: "Name"
+        locale: "Language"
+        blocked_at: "Blocked at"
+        blocked_reason: "Blocked reason"
+    errors:
+      models:
+        user:
+          attributes:
+            email_address:
+              plus_not_allowed: "Email addresses with '+' are not allowed. Please use your main email without aliases."

data/test/tmp/config/locales/clave.es.yml

@@ -0,0 +1,102 @@
+es:
+  flash:
+    sessions:
+      create:
+        success: "Has iniciado sesion correctamente."
+      destroy:
+        success: "Has cerrado sesion correctamente."
+      code_sent: "Te enviamos un codigo de verificacion."
+      invalid_code: "El codigo es incorrecto. Por favor, intenta de nuevo."
+      code_expired: "El codigo ha expirado. Solicita uno nuevo."
+      code_locked: "Demasiados intentos incorrectos. Solicita un codigo nuevo para continuar."
+      code_resent: "Te enviamos un nuevo codigo."
+      cooldown: "Debes esperar %{minutes} minutos antes de solicitar otro codigo."
+      code_already_sent: "Ya te enviamos un codigo. Revisa tu correo (incluyendo spam). Podras solicitar uno nuevo en %{minutes} minutos."
+    registrations:
+      create:
+        success: "Tu cuenta ha sido creada. Bienvenido!"
+      code_sent: "Te enviamos un codigo de verificacion a tu correo."
+      email_plus_not_allowed: "No se permiten correos con '+'. Usa tu direccion principal sin alias."
+      email_taken: "Ya existe una cuenta con este correo. Quieres iniciar sesion?"
+      invalid_code: "El codigo es incorrecto. Por favor, intenta de nuevo."
+      code_expired: "El codigo ha expirado. Solicita uno nuevo."
+      code_locked: "Demasiados intentos incorrectos. Solicita un codigo nuevo para continuar."
+      code_resent: "Te enviamos un nuevo codigo."
+      cooldown: "Debes esperar %{minutes} minutos antes de solicitar otro codigo."
+      code_already_sent: "Ya te enviamos un codigo. Revisa tu correo (incluyendo spam). Podras solicitar uno nuevo en %{minutes} minutos."
+    general:
+      unauthorized: "Debes iniciar sesion para acceder a esta pagina."
+      forbidden: "No tienes permiso para realizar esta accion."
+      not_found: "El recurso que buscas no existe."
+      rate_limited: "Demasiados intentos. Por favor, espera unos minutos e intenta de nuevo."
+
+  sessions:
+    new:
+      title: "Iniciar sesion"
+      email: "Correo electronico"
+      email_placeholder: "tu@correo.com"
+      email_instructions: "Ingresa tu correo y te enviaremos un codigo de 6 digitos."
+      spam_note: "Revisa tu carpeta de spam si no recibes el correo."
+      submit: "Enviar codigo"
+      no_account: "No tienes cuenta?"
+      sign_up: "Registrate"
+
+  session:
+    verifications:
+      new:
+        title: "Verifica tu identidad"
+        sent_to: "Si tienes cuenta, enviamos un codigo a %{email}"
+        enter_code: "Ingresa el codigo"
+        submit: "Iniciar sesion"
+        check_spam: "Revisa tu carpeta de spam."
+        didnt_receive: "No recibiste el codigo?"
+        resend: "Reenviar codigo"
+
+  registrations:
+    new:
+      title: "Crear cuenta"
+      email: "Correo electronico"
+      email_placeholder: "tu@correo.com"
+      email_instructions: "Ingresa tu correo electronico. Te enviaremos un codigo de 6 digitos para verificar tu cuenta."
+      spam_note: "Revisa tu carpeta de spam si no recibes el correo."
+      submit: "Enviar codigo"
+      have_account: "Ya tienes cuenta?"
+      sign_in: "Inicia sesion"
+
+  registration:
+    verifications:
+      new:
+        title: "Verifica tu correo"
+        sent_to: "Enviamos un codigo de 6 digitos a %{email}"
+        enter_code: "Ingresa el codigo"
+        submit: "Verificar"
+        check_spam: "Revisa tu carpeta de spam si no lo recibes."
+        didnt_receive: "No recibiste el codigo?"
+        resend: "Reenviar codigo"
+
+  verification_mailer:
+    verification_code:
+      subject: "Tu codigo de verificacion"
+      title: "Codigo de verificacion"
+      instructions: "Ingresa este codigo para continuar:"
+      expires_in: "Este codigo expira en 15 minutos."
+      ignore_if_not_you: "Si no solicitaste este codigo, puedes ignorar este correo."
+
+  activerecord:
+    models:
+      user:
+        one: "Usuario"
+        other: "Usuarios"
+    attributes:
+      user:
+        email_address: "Correo electronico"
+        name: "Nombre"
+        locale: "Idioma"
+        blocked_at: "Bloqueado en"
+        blocked_reason: "Razon de bloqueo"
+    errors:
+      models:
+        user:
+          attributes:
+            email_address:
+              plus_not_allowed: "No se permiten direcciones con '+'. Por favor, usa tu correo principal sin alias."

data/test/tmp/config/routes.rb

@@ -1,3 +1,12 @@
 Rails.application.routes.draw do
-  root "home#index"
+  # Authentication routes (generated by maquina:clave)
+  resource :session, only: [:new, :create, :destroy] do
+    resource :verification, only: [:new, :create], controller: "session/verifications"
+    resource :verification_resend, only: [:create], controller: "session/verification_resends"
+  end
+
+  resource :registration, only: [:new, :create] do
+    resource :verification, only: [:new, :create], controller: "registration/verifications"
+    resource :verification_resend, only: [:create], controller: "registration/verification_resends"
+  end
 end

data/test/tmp/db/migrate/20261014212613_create_accounts.rb

@@ -0,0 +1,9 @@
+class CreateAccounts < ActiveRecord::Migration[8.1]
+  def change
+    create_table :accounts do |t|
+      t.string :name, null: false
+
+      t.timestamps
+    end
+  end
+end

data/test/tmp/db/migrate/20261014212614_create_users.rb

@@ -0,0 +1,17 @@
+class CreateUsers < ActiveRecord::Migration[8.1]
+  def change
+    create_table :users do |t|
+      t.references :account, null: false, foreign_key: true
+      t.string :email_address, null: false
+      t.string :name
+      t.string :role, null: false, default: "member"
+      t.string :locale
+      t.datetime :blocked_at
+      t.text :blocked_reason
+
+      t.timestamps
+    end
+
+    add_index :users, :email_address, unique: true
+  end
+end

data/test/tmp/db/migrate/20261014212615_create_sessions.rb

@@ -0,0 +1,12 @@
+class CreateSessions < ActiveRecord::Migration[8.1]
+  def change
+    create_table :sessions do |t|
+      t.references :user, null: false, foreign_key: true
+      t.string :ip_address
+      t.string :user_agent
+      t.datetime :expires_at
+
+      t.timestamps
+    end
+  end
+end

data/test/tmp/db/migrate/20261014212616_create_email_verifications.rb

@@ -0,0 +1,17 @@
+class CreateEmailVerifications < ActiveRecord::Migration[8.1]
+  def change
+    create_table :email_verifications do |t|
+      t.string :email, null: false
+      t.string :code, null: false
+      t.string :verification_type, null: false
+      t.datetime :expires_at, null: false
+      t.datetime :verified_at
+      t.integer :attempts, default: 0
+      t.string :locale
+
+      t.timestamps
+    end
+
+    add_index :email_verifications, [:email, :created_at]
+  end
+end

data/test/tmp/test/test_helpers/session_test_helper.rb

@@ -0,0 +1,19 @@
+module SessionTestHelper
+  def sign_in_as(user)
+    Current.session = user.sessions.create!
+
+    ActionDispatch::TestRequest.create.cookie_jar.tap do |cookie_jar|
+      cookie_jar.signed[:session_id] = Current.session.id
+      cookies["session_id"] = cookie_jar[:session_id]
+    end
+  end
+
+  def sign_out
+    Current.session&.destroy!
+    cookies.delete("session_id")
+  end
+end
+
+ActiveSupport.on_load(:action_dispatch_integration_test) do
+  include SessionTestHelper
+end

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: maquina-generators
 version: !ruby/object:Gem::Version
-  version: 0.7.0
+  version: 0.8.0
 platform: ruby
 authors:
 - Mario Alberto Chavez
@@ -66,9 +66,9 @@ dependencies:
       - !ruby/object:Gem::Version
         version: '0.8'
 description: 'Rails generators that write standalone code into your app: passwordless
-  (clave) and password (registration) authentication, Rack::Attack rules with a Security
-  dashboard, Content Security Policy reports, Solid Errors, Mission Control Jobs,
-  Solid Queue, and a full app setup.'
+  (clave) and password (registration) authentication, passkeys, Rack::Attack rules
+  with a Security dashboard, Content Security Policy reports, Solid Errors, Mission
+  Control Jobs, Solid Queue, and a full app setup.'
 email:
 - mario.chavez@gmail.com
 executables: []
@@ -180,6 +180,26 @@ files:
 - lib/generators/maquina/mission_control_jobs/templates/app/views/mission_control/jobs/workers/index.html.erb
 - lib/generators/maquina/mission_control_jobs/templates/app/views/mission_control/jobs/workers/show.html.erb
 - lib/generators/maquina/mission_control_jobs/templates/config/initializers/mission_control.rb.tt
+- lib/generators/maquina/passkeys/USAGE
+- lib/generators/maquina/passkeys/passkeys_generator.rb
+- lib/generators/maquina/passkeys/templates/app/controllers/concerns/passkey_challenge.rb
+- lib/generators/maquina/passkeys/templates/app/controllers/concerns/passkey_reauthentication.rb
+- lib/generators/maquina/passkeys/templates/app/controllers/passkey_challenges_controller.rb
+- lib/generators/maquina/passkeys/templates/app/controllers/passkeys_controller.rb
+- lib/generators/maquina/passkeys/templates/app/controllers/session/passkey_challenges_controller.rb
+- lib/generators/maquina/passkeys/templates/app/controllers/session/passkeys_controller.rb
+- lib/generators/maquina/passkeys/templates/app/javascript/controllers/passkey_registration_controller.js
+- lib/generators/maquina/passkeys/templates/app/javascript/controllers/passkey_sign_in_controller.js
+- lib/generators/maquina/passkeys/templates/app/models/passkey.rb
+- lib/generators/maquina/passkeys/templates/app/views/passkeys/index.html.erb
+- lib/generators/maquina/passkeys/templates/app/views/sessions/_passkey.html.erb
+- lib/generators/maquina/passkeys/templates/config/initializers/webauthn.rb
+- lib/generators/maquina/passkeys/templates/config/locales/passkeys.en.yml
+- lib/generators/maquina/passkeys/templates/config/locales/passkeys.es.yml
+- lib/generators/maquina/passkeys/templates/migration_add_webauthn_id_to_users.rb.tt
+- lib/generators/maquina/passkeys/templates/migration_create_passkeys.rb.tt
+- lib/generators/maquina/passkeys/templates/test/integration/passkeys_test.rb
+- lib/generators/maquina/passkeys/templates/test/test_helpers/webauthn_test_helper.rb
 - lib/generators/maquina/rack_attack/USAGE
 - lib/generators/maquina/rack_attack/rack_attack_generator.rb
 - lib/generators/maquina/rack_attack/templates/config/initializers/rack_attack.rb.tt
@@ -263,29 +283,38 @@ files:
 - test/generators/maquina/csp_reports_generator_test.rb
 - test/generators/maquina/failures_mcp_tools_test.rb
 - test/generators/maquina/mission_control_jobs_generator_test.rb
+- test/generators/maquina/passkeys_generator_test.rb
 - test/generators/maquina/rack_attack_generator_test.rb
 - test/generators/maquina/registration_generator_test.rb
 - test/generators/maquina/security_generator_test.rb
 - test/generators/maquina/solid_errors_generator_test.rb
 - test/generators/maquina/solid_queue_generator_test.rb
 - test/test_helper.rb
-- test/tmp/.gitignore
-- test/tmp/.rubocop.yml
-- test/tmp/.standard.yml
 - test/tmp/Gemfile
-- test/tmp/Procfile.dev
-- test/tmp/README.md
-- test/tmp/app/controllers/home_controller.rb
-- test/tmp/app/javascript/application.js
-- test/tmp/app/views/home/index.html.erb
-- test/tmp/app/views/layouts/application.html.erb
-- test/tmp/config/application.rb
-- test/tmp/config/database.yml
-- test/tmp/config/database.yml.example
-- test/tmp/config/environments/development.rb
-- test/tmp/config/environments/production.rb
-- test/tmp/config/initializers/generators.rb
+- test/tmp/app/controllers/application_controller.rb
+- test/tmp/app/controllers/concerns/authentication.rb
+- test/tmp/app/controllers/registration/verification_resends_controller.rb
+- test/tmp/app/controllers/registration/verifications_controller.rb
+- test/tmp/app/controllers/registrations_controller.rb
+- test/tmp/app/controllers/session/verification_resends_controller.rb
+- test/tmp/app/controllers/session/verifications_controller.rb
+- test/tmp/app/controllers/sessions_controller.rb
+- test/tmp/app/helpers/authentication_helper.rb
+- test/tmp/app/jobs/authentication_cleanup_job.rb
+- test/tmp/app/mailers/verification_mailer.rb
+- test/tmp/app/models/account.rb
+- test/tmp/app/models/current.rb
+- test/tmp/app/models/email_verification.rb
+- test/tmp/app/models/session.rb
+- test/tmp/app/models/user.rb
+- test/tmp/config/locales/clave.en.yml
+- test/tmp/config/locales/clave.es.yml
 - test/tmp/config/routes.rb
+- test/tmp/db/migrate/20261014212613_create_accounts.rb
+- test/tmp/db/migrate/20261014212614_create_users.rb
+- test/tmp/db/migrate/20261014212615_create_sessions.rb
+- test/tmp/db/migrate/20261014212616_create_email_verifications.rb
+- test/tmp/test/test_helpers/session_test_helper.rb
 homepage: https://maquina.app
 licenses:
 - MIT

data/test/tmp/.gitignore

@@ -1,5 +0,0 @@
-/log/*
-/tmp/*
-
-# Ignore database configuration
-config/database.yml

data/test/tmp/.rubocop.yml

@@ -1,11 +0,0 @@
-# standard.rb's runner bridge, not custom RuboCop rules.
-#
-# This is the entry point RuboCop (and editors/LSP) need to run the Standard
-# ruleset — all style comes from the `standard` gem via config/base.yml below.
-# Keep this file even though general guidance says "no .rubocop.yml": for
-# standard.rb this IS the runner config, not a custom rule set.
-require:
-  - standard
-
-inherit_gem:
-  standard: config/base.yml

data/test/tmp/.standard.yml

@@ -1 +0,0 @@
-ruby_version: 3.2