masks 0.2.0

data/masks.json

@@ -0,0 +1,274 @@
+{
+  "name": "masks",
+  "url": "http://localhost:3000",
+  "title": "masks",
+  "signups": true,
+  "nickname": {
+    "format": "^[\\w]+$",
+    "length": { "min": 5, "max": 36 }
+  },
+  "password": {
+    "length": { "min": 8, "max": 128 }
+  },
+  "masks": [
+    {
+      "skip": true,
+      "request": {
+        "method": "get",
+        "path": ["/assets/*", "/debug"]
+      }
+    },
+    {
+      "type": "anon",
+      "request": {
+        "method": "get",
+        "path": "/anon"
+      },
+      "anon": true,
+      "fail": false
+    },
+    {
+      "type": "api",
+      "request": {
+        "path": ["*"],
+        "header": "Authorization"
+      }
+    },
+    {
+      "type": "authenticate",
+      "request": {
+        "method": "post",
+        "path": "/session"
+      },
+      "fail": false
+    },
+    {
+      "type": "session",
+      "request": {
+        "method": ["get", "delete"],
+        "path": "/session"
+      },
+      "fail": false
+    },
+    {
+      "type": "recovery",
+      "request": {
+        "method": ["get", "post"],
+        "path": ["/recovery", "/recover"]
+      },
+      "fail": false
+    },
+    {
+      "type": "sudo",
+      "request": {
+        "method": ["post"],
+        "path": "/emails"
+      },
+      "fail": false
+    },
+    {
+      "type": "session",
+      "request": {
+        "method": ["delete", "patch"],
+        "path": "/emails"
+      },
+      "fail": false
+    },
+    {
+      "type": "session",
+      "request": {
+        "method": "get",
+        "path": "/email/*/verify"
+      },
+      "fail": false
+    },
+    {
+      "type": "sudo",
+      "request": {
+        "method": ["post", "delete"],
+        "path": "/one-time-codes"
+      },
+      "fail": false
+    },
+    {
+      "type": "sudo",
+      "request": {
+        "method": ["post"],
+        "path": "/backup-codes"
+      },
+      "fail": false
+    },
+    {
+      "type": "session",
+      "access": ["actor.password"],
+      "request": {
+        "method": ["get"],
+        "path": "/password"
+      }
+    },
+    {
+      "type": "sudo",
+      "access": ["actor.password"],
+      "request": {
+        "method": ["post"],
+        "path": "/password"
+      },
+      "fail": false
+    },
+    {
+      "type": "session",
+      "request": {
+        "path": "/cable",
+        "method": "get"
+      }
+    },
+    {
+      "type": "session",
+      "request": {
+        "path": "/private"
+      }
+    },
+    {
+      "type": "sudo",
+      "request": {
+        "method": "patch",
+        "path": "/actor"
+      }
+    },
+    {
+      "type": "sudo",
+      "request": {
+        "method": "post",
+        "path": "/session",
+        "param": "sudo"
+      }
+    },
+    {
+      "type": "manage",
+      "request": {
+        "path": ["/actors", "/actors/*"]
+      },
+      "fail": false
+    },
+    {
+      "type": "session",
+      "request": {
+        "path": "*"
+      },
+      "fail": "/session"
+    },
+    {
+      "name": "cli",
+      "type": "masquerade",
+      "access": ["actor.signup", "actor.password", "actor.scopes"]
+    },
+    {
+      "access": "actor.signup"
+    },
+    {
+      "access": "actor.password"
+    }
+  ],
+  "types": {
+    "anon": {
+      "checks": null,
+      "credentials": null
+    },
+    "public": {
+      "checks": {
+        "actor": {
+          "lifetime": "P1M",
+          "optional": true
+        }
+      },
+      "credentials": ["Session"]
+    },
+    "authenticate": {
+      "checks": {
+        "actor": {
+          "lifetime": "PT12H"
+        },
+        "password": {
+          "lifetime": "PT12H"
+        },
+        "factor2": {
+          "lifetime": "PT12H",
+          "optional": true
+        },
+        "device": {}
+      },
+      "credentials": [
+        "Email",
+        "Nickname",
+        "Session",
+        "Password",
+        "BackupCode",
+        "OneTimeCode",
+        "LastLogin",
+        "Device"
+      ]
+    },
+    "sudo": {
+      "checks": {
+        "actor": {
+          "lifetime": "PT12H"
+        },
+        "password": {},
+        "device": {}
+      },
+      "credentials": ["Session", "Password", "Device"]
+    },
+    "session": {
+      "checks": {
+        "actor": {
+          "lifetime": "PT12H"
+        },
+        "password": {
+          "lifetime": "PT12H"
+        },
+        "factor2": {
+          "lifetime": "PT12H",
+          "optional": true
+        },
+        "device": {}
+      },
+      "credentials": ["Session", "Device"]
+    },
+    "manage": {
+      "checks": {
+        "actor": {
+          "lifetime": "PT12H"
+        },
+        "password": {
+          "lifetime": "PT12H"
+        },
+        "factor2": {
+          "lifetime": "PT12H",
+          "optional": true
+        },
+        "device": {}
+      },
+      "credentials": ["Session", "Device"],
+      "scopes": "masks:manager"
+    },
+    "recovery": {
+      "checks": {
+        "recovery": {}
+      },
+      "credentials": ["Session", "Recovery", "Device"]
+    },
+    "api": {
+      "checks": {
+        "key": {},
+        "device": {}
+      },
+      "credentials": ["Key", "Device"]
+    },
+    "masquerade": {
+      "checks": {
+        "actor": {}
+      },
+      "credentials": ["Masquerade"]
+    }
+  }
+}

metadata

@@ -0,0 +1,416 @@
+--- !ruby/object:Gem::Specification
+name: masks
+version: !ruby/object:Gem::Version
+  version: 0.2.0
+platform: ruby
+authors:
+- geiger-to
+autorequire:
+bindir: bin
+cert_chain: []
+date: 2024-02-20 00:00:00.000000000 Z
+dependencies:
+- !ruby/object:Gem::Dependency
+  name: alba
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: '0'
+  type: :runtime
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: '0'
+- !ruby/object:Gem::Dependency
+  name: bcrypt
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '3.1'
+  type: :runtime
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '3.1'
+- !ruby/object:Gem::Dependency
+  name: cssbundling-rails
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '1.3'
+  type: :runtime
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '1.3'
+- !ruby/object:Gem::Dependency
+  name: device_detector
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: '0'
+  type: :runtime
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: '0'
+- !ruby/object:Gem::Dependency
+  name: fuzzyurl
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: 0.9.0
+  type: :runtime
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: 0.9.0
+- !ruby/object:Gem::Dependency
+  name: jsbundling-rails
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '1.2'
+  type: :runtime
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '1.2'
+- !ruby/object:Gem::Dependency
+  name: pagy
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: '0'
+  type: :runtime
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: '0'
+- !ruby/object:Gem::Dependency
+  name: phonelib
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: '0'
+  type: :runtime
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: '0'
+- !ruby/object:Gem::Dependency
+  name: premailer-rails
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '1'
+  type: :runtime
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '1'
+- !ruby/object:Gem::Dependency
+  name: rails
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: 7.1.2
+  type: :runtime
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: 7.1.2
+- !ruby/object:Gem::Dependency
+  name: recursive-open-struct
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: '0'
+  type: :runtime
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: '0'
+- !ruby/object:Gem::Dependency
+  name: rotp
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: '0'
+  type: :runtime
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: '0'
+- !ruby/object:Gem::Dependency
+  name: rqrcode
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: '0'
+  type: :runtime
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: '0'
+- !ruby/object:Gem::Dependency
+  name: sprockets-rails
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: '0'
+  type: :runtime
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: '0'
+- !ruby/object:Gem::Dependency
+  name: stimulus-rails
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '1.3'
+  type: :runtime
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '1.3'
+- !ruby/object:Gem::Dependency
+  name: turbo-rails
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: '1.5'
+    - - "<"
+      - !ruby/object:Gem::Version
+        version: '3.0'
+  type: :runtime
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: '1.5'
+    - - "<"
+      - !ruby/object:Gem::Version
+        version: '3.0'
+- !ruby/object:Gem::Dependency
+  name: valid_email
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: '0'
+  type: :runtime
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: '0'
+description: masks is a ruby library and rails engine that adds simple, extensible
+  auth to most applications.
+email:
+- git@geiger.to
+executables: []
+extensions: []
+extra_rdoc_files: []
+files:
+- MIT-LICENSE
+- README.md
+- Rakefile
+- app/assets/builds/application.css
+- app/assets/builds/application.js
+- app/assets/builds/application.js.map
+- app/assets/builds/masks/application.css
+- app/assets/builds/masks/application.js
+- app/assets/builds/masks/application.js.map
+- app/assets/images/masks.png
+- app/assets/javascripts/application.js
+- app/assets/javascripts/controllers/application.js
+- app/assets/javascripts/controllers/emails_controller.js
+- app/assets/javascripts/controllers/index.js
+- app/assets/javascripts/controllers/keys_controller.js
+- app/assets/javascripts/controllers/recover_controller.js
+- app/assets/javascripts/controllers/recover_password_controller.js
+- app/assets/javascripts/controllers/session_controller.js
+- app/assets/manifest.js
+- app/assets/masks_manifest.js
+- app/assets/stylesheets/application.css
+- app/controllers/concerns/masks/controller.rb
+- app/controllers/masks/actors_controller.rb
+- app/controllers/masks/application_controller.rb
+- app/controllers/masks/backup_codes_controller.rb
+- app/controllers/masks/debug_controller.rb
+- app/controllers/masks/devices_controller.rb
+- app/controllers/masks/emails_controller.rb
+- app/controllers/masks/error_controller.rb
+- app/controllers/masks/keys_controller.rb
+- app/controllers/masks/manage/actor_controller.rb
+- app/controllers/masks/manage/actors_controller.rb
+- app/controllers/masks/manage/base_controller.rb
+- app/controllers/masks/one_time_code_controller.rb
+- app/controllers/masks/passwords_controller.rb
+- app/controllers/masks/recoveries_controller.rb
+- app/controllers/masks/sessions_controller.rb
+- app/helpers/masks/application_helper.rb
+- app/jobs/masks/application_job.rb
+- app/jobs/masks/expire_actors_job.rb
+- app/jobs/masks/expire_recoveries_job.rb
+- app/mailers/masks/actor_mailer.rb
+- app/mailers/masks/application_mailer.rb
+- app/models/concerns/masks/access.rb
+- app/models/concerns/masks/actor.rb
+- app/models/concerns/masks/adapter.rb
+- app/models/concerns/masks/role.rb
+- app/models/concerns/masks/scoped.rb
+- app/models/masks/access/actor_password.rb
+- app/models/masks/access/actor_scopes.rb
+- app/models/masks/access/actor_signup.rb
+- app/models/masks/actors/anonymous.rb
+- app/models/masks/actors/system.rb
+- app/models/masks/adapters/active_record.rb
+- app/models/masks/application_model.rb
+- app/models/masks/application_record.rb
+- app/models/masks/check.rb
+- app/models/masks/credential.rb
+- app/models/masks/credentials/backup_code.rb
+- app/models/masks/credentials/device.rb
+- app/models/masks/credentials/email.rb
+- app/models/masks/credentials/factor2.rb
+- app/models/masks/credentials/key.rb
+- app/models/masks/credentials/last_login.rb
+- app/models/masks/credentials/masquerade.rb
+- app/models/masks/credentials/nickname.rb
+- app/models/masks/credentials/one_time_code.rb
+- app/models/masks/credentials/password.rb
+- app/models/masks/credentials/recovery.rb
+- app/models/masks/credentials/session.rb
+- app/models/masks/device.rb
+- app/models/masks/error.rb
+- app/models/masks/event.rb
+- app/models/masks/mask.rb
+- app/models/masks/rails/actor.rb
+- app/models/masks/rails/actor_role.rb
+- app/models/masks/rails/device.rb
+- app/models/masks/rails/email.rb
+- app/models/masks/rails/key.rb
+- app/models/masks/rails/recovery.rb
+- app/models/masks/rails/role.rb
+- app/models/masks/rails/scope.rb
+- app/models/masks/session.rb
+- app/models/masks/sessions/access.rb
+- app/models/masks/sessions/inline.rb
+- app/models/masks/sessions/request.rb
+- app/resources/masks/actor_resource.rb
+- app/resources/masks/session_resource.rb
+- app/views/layouts/masks/application.html.erb
+- app/views/layouts/masks/mailer.html.erb
+- app/views/layouts/masks/mailer.text.erb
+- app/views/layouts/masks/manage.html.erb
+- app/views/masks/actor_mailer/recover_credentials.html.erb
+- app/views/masks/actor_mailer/recover_credentials.text.erb
+- app/views/masks/actor_mailer/verify_email.html.erb
+- app/views/masks/actor_mailer/verify_email.text.erb
+- app/views/masks/actors/current.html.erb
+- app/views/masks/application/_header.html.erb
+- app/views/masks/backup_codes/new.html.erb
+- app/views/masks/emails/new.html.erb
+- app/views/masks/emails/verify.html.erb
+- app/views/masks/keys/new.html.erb
+- app/views/masks/manage/actor/show.html.erb
+- app/views/masks/manage/actors/index.html.erb
+- app/views/masks/one_time_code/new.html.erb
+- app/views/masks/passwords/edit.html.erb
+- app/views/masks/recoveries/new.html.erb
+- app/views/masks/recoveries/password.html.erb
+- app/views/masks/sessions/new.html.erb
+- config/brakeman.ignore
+- config/locales/en.yml
+- config/routes.rb
+- db/migrate/20231205173845_create_actors.rb
+- lib/generators/masks/install/USAGE
+- lib/generators/masks/install/install_generator.rb
+- lib/generators/masks/install/templates/initializer.rb
+- lib/generators/masks/install/templates/masks.json
+- lib/masks.rb
+- lib/masks/configuration.rb
+- lib/masks/engine.rb
+- lib/masks/middleware.rb
+- lib/masks/version.rb
+- lib/tasks/masks_tasks.rake
+- masks.json
+homepage: https://masks.geiger.to
+licenses:
+- MIT
+metadata:
+  homepage_uri: https://masks.geiger.to
+  source_code_uri: https://github.com/geiger-to/masks
+  changelog_uri: https://masks.geiger.to/changelog
+  rubygems_mfa_required: 'true'
+post_install_message:
+rdoc_options: []
+require_paths:
+- lib
+required_ruby_version: !ruby/object:Gem::Requirement
+  requirements:
+  - - "~>"
+    - !ruby/object:Gem::Version
+      version: '3.1'
+required_rubygems_version: !ruby/object:Gem::Requirement
+  requirements:
+  - - ">="
+    - !ruby/object:Gem::Version
+      version: '0'
+requirements: []
+rubygems_version: 3.5.6
+signing_key:
+specification_version: 4
+summary: mask ruby applications with auth
+test_files: []