masks 0.4.0 → 0.6.0

data/app/views/masks/one_time_code/new.html.erb

@@ -1,167 +0,0 @@
-<div data-controller="one_time_code">
-  <div class="flex items-center gap-4">
-    <div class="flex flex-col">
-      <h3 class="font-bold">
-        <%= t(".heading") %>
-      </h3>
-      <span class="text-xs">
-        <%= t(".tfa") %>
-        —
-        <span class="italic">
-          <%= @actor.totp_secret ? t(".enabled") : t(".disabled") %>
-        </span>
-      </span>
-    </div>
-  </div>
-
-  <% if !@actor.totp_secret %>
-    <div class='divider my-2 mb-4'></div>
-    <div class="">
-      <div>
-        <div class="flex gap-4 mb-3">
-          <div class="w-[125px] h-[125px]  overflow-hidden">
-            <%= totp_svg(@actor.totp_uri, module_size: 2.25, fill: "fff", offset: 5) %>
-          </div>
-          <div class="max-w-[175px] max-w-[250px] space-y-3 mb-2">
-            <div>
-              <%= t(".enable_qr") %>
-            </div>
-            <div class="text-sm">
-              <%= t(".enable_manual") %>
-            </div>
-          </div>
-        </div>
-
-        <div class="text-sm flex items-center gap-3 mt-3">
-          <span class="font-bold text-xs">
-            <%= t(".secret") %>
-          </span>
-          <span class="flex-grow">
-            <input
-              class="input input-xs w-full"
-              name="secret"
-              value="<%= @actor.random_totp_secret %>">
-          </span>
-        </div>
-        <div class='divider mt-3 mb-2 text-xs'></div>
-      </div>
-      <div class="mb-4 flex items-center">
-        next, enter your password and the one-time code shown in your
-        authenticator app.
-      </div>
-
-      <% if flash[:errors]&.any? %>
-        <div role="alert" class="alert mb-2">
-          <div class="flex items-center gap-4">
-            <%= lucide_icon("x", class: "stroke-error") %>
-            <span><%= flash[:errors][0] %></span>
-          </div>
-        </div>
-      <% end %>
-
-      <%= form_with url: one_time_code_path, method: :post, class: 'pt-2 flex flex-col gap-2', data: { one_time_code_target: 'add' } do |form| %>
-        <input
-          type="hidden"
-          name="one_time_code[secret]"
-          value="<%= @actor.random_totp_secret %>">
-        <label class="flex gap-3 items-center w-full flex-grow input input-bordered" data-controller="password-visibility">
-          <%= lucide_icon("shield-check") %>
-
-          <input
-            type="password"
-            data-one-time-password-target="password"
-            data-action="one_time_code#updatePassword"
-            data-password-visibility-target="input"
-            spellcheck="false"
-            placeholder="<%= t('.placeholder.password') %>"
-            name="session[password]"
-            class="w-full flex-grow">
-
-          <button data-action="password-visibility#toggle" type="button" class="btn btn-sm btn-ghost -mr-2">
-            <span data-password-visibility-target="icon"><%= lucide_icon('eye') %></span>
-            <span data-password-visibility-target="icon" class="hidden"><%= lucide_icon('eye-off') %></span>
-          </button>
-        </label>
-        <div class="flex items-center gap-2">
-          <label class="flex gap-3 items-center input input-bordered flex-grow" data-controller="password-visibility">
-            <%= lucide_icon("key-square") %>
-
-            <input
-              type="password"
-              data-one-time-password-target="code"
-              data-action="one_time_code#updateCode"
-              placeholder="<%= t('.placeholder.otp') %>"
-              data-password-visibility-target="input"
-              spellcheck="false"
-              name="one_time_code[code]"
-              class="w-full flex-grow">
-
-            <button data-action="password-visibility#toggle" type="button" class="btn btn-sm btn-ghost -mr-2">
-              <span data-password-visibility-target="icon"><%= lucide_icon('eye') %></span>
-              <span data-password-visibility-target="icon" class="hidden"><%= lucide_icon('eye-off') %></span>
-            </button>
-          </label>
-          <%= form.submit t(".submit"),
-                      class: "btn btn-secondary",
-                      data: {
-                        one_time_code_target: "submit",
-                      } %>
-        </div>
-      <% end %>
-    </div>
-  <% else %>
-    <div class="join join-vertical">
-      <div class="join-item alert bg-neutral mt-4">
-        <%= lucide_icon("check", class: "stroke-success") %>
-        <h3>
-          after login you will be asked to enter a one-time code, a backup
-          code, or use a different secondary credential.
-        </h3>
-      </div>
-      <div
-        class="join-item card bg-base-100 pt-2 pb-3 px-4 w-full text-right"
-        role="alert">
-        <a href="<%= backup_codes_path %>" class="text-sm underline">
-          <%= t(@actor.should_save_backup_codes? ? ".backup_codes" : ".reset_codes") %>
-        </a>
-      </div>
-    </div>
-
-    <div class='divider my-4 text-xs'><%= t(".delete_div") %></div>
-
-    <%= form_with url: one_time_code_path, method: :delete, class: '', data: { one_time_code_target: 'add' } do |form| %>
-      <input
-        type="hidden"
-        name="one_time_code[secret]"
-        value="<%= @actor.random_totp_secret %>">
-
-      <div class="flex gap-2">
-        <label class="flex gap-3 items-center flex-grow input input-sm input-bordered" data-controller="password-visibility">
-          <%= lucide_icon("shield-check") %>
-          <input
-            type="password"
-            data-one-time-password-target="password"
-            data-action="one_time_code#updatePassword"
-            data-password-visibility-target="input"
-            spellcheck="false"
-            placeholder="<%= t('.placeholder.delete') %>"
-            name="session[password]"
-            class="w-full flex-grow">
-
-          <button data-action="password-visibility#toggle" type="button" class="btn btn-xs btn-ghost -mr-2">
-            <span data-password-visibility-target="icon"><%= lucide_icon('eye', size: 16) %></span>
-            <span data-password-visibility-target="icon" class="hidden"><%= lucide_icon('eye-off', size: 16) %></span>
-          </button>
-        </label>
-
-        <div>
-          <%= form.submit t(".delete"),
-                      class: "btn hover:btn-error btn-outline btn-sm",
-                      data: {
-                        one_time_code_target: "submit",
-                      } %>
-        </div>
-      </div>
-    <% end %>
-  <% end %>
-</div>

data/app/views/masks/openid/authorizations/error.html.erb

@@ -1,23 +0,0 @@
-  <div class="hero">
-    <div class="hero-content text-left">
-      <div>
-        <div class="flex items-center gap-4 mb-4 justify-center">
-          <span class="text-warning pt-1">
-            <%= lucide_icon('alert-triangle', size: 28) %>
-          </span>
-
-          <h1 class="text-3xl font-bold text-black dark:text-white">
-            <%= t('.title') %>
-          </h1>
-        </div>
-        <p class="mb-6 text-center">
-          <%= t('.description') %>
-        </p>
-        <div class="flex items-center gap-4 justify-center">
-          <a href="/" class="btn btn-primary btn-sm">
-            <%= t('.home') %>
-          </a>
-        </div>
-      </div>
-    </div>
-  </div>

data/app/views/masks/openid/authorizations/new.html.erb

@@ -1,46 +0,0 @@
-<div>
-  <%= form_with url: request.url, method: :post, data: { turbo: false } do |form| %>
-    <div class="hero">
-      <div class="hero-content text-left">
-        <div class="">
-          <h1 class="text-4xl font-bold mb-4 text-black dark:text-white">
-            <%= t(".authorize_client", name: @authorization.client.name) %>
-          </h1>
-
-          <p class="mb-4 text-left">
-            <% if @authorization.scopes.any? %>
-              <%= t('.authorize_scoped', name: @authorization.client.name) %>
-            <% else %>
-              <%= t('.authorize_account', name: @authorization.client.name) %>
-            <% end %>
-          </p>
-
-          <% if @authorization.scopes.any? %>
-            <div class="divider my-0"></div>
-
-            <table class="table">
-              <tbody>
-                <% @authorization.scopes.each do |scope| %>
-                  <tr>
-                    <th><%= t("scope.#{scope}_name") %></td>
-                    <td>
-                      <%= t("scope.#{scope}_desc") %>
-                    </td>
-                  </tr>
-                <% end %>
-              </tbody>
-            </table>
-
-            <div class="divider mt-0 mb-4"></div>
-          <% end %>
-
-          <div class="flex items-center gap-4 justify-center">
-            <input type="submit" name="approve" value="<%= t('.approve') %>" class="btn btn-success btn-sm">
-            <span>or</span>
-            <input type="submit" name="deny" value="<%= t('.deny') %>" class="btn btn-error btn-sm">
-          </div>
-        </div>
-      </div>
-    </div>
-  <% end %>
-</div>

data/app/views/masks/passwords/edit.html.erb

@@ -1,71 +0,0 @@
-<div class="space-y-3">
-  <div class="flex flex-col">
-    <span class="font-bold">
-      your password
-    </span>
-    <span class="text-xs">
-      last changed
-      <% if @actor.changed_password_at %>
-        <%= time_ago_in_words(@actor.changed_password_at) %>
-        ago
-      <% else %>
-        <span class="italic">
-          never
-        </span>
-      <% end %>
-    </span>
-  </div>
-  <% if flash[:errors]&.any? %>
-    <div role="alert" class="alert mb-2">
-      <div class="flex items-center gap-4">
-        <%= lucide_icon("x", class: "stroke-error") %>
-        <span><%= flash[:errors][0] %></span>
-      </div>
-    </div>
-  <% end %>
-
-  <%= form_with url: password_path, method: :post, class: 'pt-2 flex flex-col gap-2', data: { password_target: 'add' } do |form| %>
-    <label class="flex gap-3 items-center input input-bordered" data-controller="password-visibility">
-      <%= lucide_icon("shield-plus") %>
-      <input
-        type="password"
-        data-password-target="code"
-        data-action="password#updateChanged"
-        data-password-visibility-target="input"
-        spellcheck="false"
-        placeholder="<%= t('.placeholder.change') %>"
-        name="password[change]"
-        class="w-full">
-
-      <button data-action="password-visibility#toggle" type="button" class="btn btn-sm btn-ghost -mr-2">
-        <span data-password-visibility-target="icon"><%= lucide_icon('eye') %></span>
-        <span data-password-visibility-target="icon" class="hidden"><%= lucide_icon('eye-off') %></span>
-      </button>
-    </label>
-    <div class="flex items-center gap-2" data-controller="password-visibility">
-      <label class="flex gap-3 items-center w-full flex-grow input input-bordered">
-        <%= lucide_icon("shield-check") %>
-
-        <input
-          type="password"
-          data-password-target="password"
-          data-action="password#updatePassword"
-          data-password-visibility-target="input"
-          spellcheck="false"
-          placeholder="<%= t('.placeholder.password') %>"
-          name="session[password]"
-          class="w-full flex-grow">
-
-        <button data-action="password-visibility#toggle" type="button" class="btn btn-sm btn-ghost -mr-2">
-          <span data-password-visibility-target="icon"><%= lucide_icon('eye') %></span>
-          <span data-password-visibility-target="icon" class="hidden"><%= lucide_icon('eye-off') %></span>
-        </button>
-      </label>
-      <%= form.submit t(".submit"),
-                  class: "btn btn-secondary",
-                  data: {
-                    password_target: "submit",
-                  } %>
-    </div>
-  <% end %>
-</div>

data/app/views/masks/recoveries/new.html.erb

@@ -1,69 +0,0 @@
-<div data-controller="recover">
-  <% if flash[:recovery] %>
-    <div role="alert" class="alert alert-success shadow-lg mb-4 flex items-center gap-4 text-left">
-      <%= lucide_icon('check') %>
-      <div>
-        <h3 class="font-bold"><%= t('.submitted.heading') %></h3>
-        <div class="text-xs"><%= t('.submitted.description') %></div>
-      </div>
-    </div>
-  <% else %>
-  <div role="alert" class="alert mb-4 text-left">
-    <div class="flex flex-col">
-      <div class="flex items-center gap-4">
-        <%= lucide_icon("shield-question", class: "stroke-info") %>
-        <span class="flex-grow"><%= t(".heading") %></span>
-        <div class="dropdown dropdown-bottom dropdown-end">
-          <div tabindex="0" role="button" class="btn btn-xs text-sm -mr-2"><%= t(".help_button") %></div>
-          <div
-            tabindex="0"
-            class="
-              dropdown-content z-[1] mt-4 card card-compact w-[275px] px-2 pb-2 shadow bg-info
-              text-info-content
-            ">
-            <div class="card-body">
-              <h4 class="card-title"><%= t(".help_title") %></h4>
-              <span><%= t(".help_body") %></span>
-              <% if t('.support_url', default: false) %>
-                <span class="italic">
-                  <%= t(".help_more") %>
-                  <a class="not-italic underline" href="<%= t('.support_url') %>"><%= t(".help_contact") %></a>
-                </span>
-              <% end %>
-            </div>
-          </div>
-        </div>
-      </div>
-      <div class="divider my-1 -mr-4"></div>
-      <div class="text-sm -mr-2">
-        <%= t(".subheading") %>
-      </div>
-    </div>
-  </div>
-  <% end %>
-  <%= form_with url: recover_path, method: :post do |form| %>
-    <div class="flex flex-col gap-4">
-      <label class="form-control w-full">
-        <input
-          type="text"
-          data-recover-target="input"
-          data-action="recover#updateInput"
-          placeholder="<%= t('.placeholder') %>"
-          name="recover[value]"
-          class="input input-bordered w-full">
-      </label>
-      <div class="flex items-center gap-4">
-        <%= form.submit t(".submit"),
-                    class: "btn btn-active btn-info",
-                    data: {
-                      recover_target: "submit",
-                    },
-                    disabled: true %>
-        <div class="text-xs opacity-60">
-          or
-          <a href="<%= Masks.configuration.site_links[:login] %>" class="underline"><%= t(".back") %></a>
-        </div>
-      </div>
-    </div>
-  <% end %>
-</div>

data/app/views/masks/recoveries/password.html.erb

@@ -1,63 +0,0 @@
-<% if @recovery %>
-  <div data-controller="recover-password">
-    <div role="alert" class="alert mb-4">
-      <div class="flex flex-col">
-        <div class="flex items-center gap-4">
-          <%= lucide_icon("rotate-cw", class: "stroke-warning") %>
-          <span class="flex-grow font-bold"><%= t(".heading") %></span>
-        </div>
-        <div class="divider my-1 -mr-4"></div>
-        <div class="text-sm -mr-4">
-          <%= t(".subheading") %>
-        </div>
-      </div>
-    </div>
-    <% if flash[:errors]&.any? %>
-      <div role="alert" class="alert alert-error mb-4">
-        <%= lucide_icon("x") %>
-        <%= flash[:errors][0] %>
-      </div>
-    <% end %>
-
-    <%= form_with url: recover_password_path, method: :post do |form| %>
-      <div class="flex flex-col gap-4">
-        <div class="flex items-center gap-4">
-          <input type="hidden" name="token" value="<%= @recovery.token %>">
-          <input
-            type="text"
-            data-recover-password-target="password"
-            data-action="recover-password#updatePassword"
-            placeholder="<%= t('.placeholder') %>"
-            name="recover[password]"
-            class="input input-bordered w-full">
-          <%= form.submit t(".submit"),
-                      class: "btn btn-warning btn-info",
-                      data: {
-                        recover_password_target: "submit",
-                      } %>
-        </div>
-      </div>
-    <% end %>
-  </div>
-<% else %>
-  <div role="alert" class="alert mb-4">
-    <div class="flex flex-col">
-      <div class="flex items-center gap-4">
-        <%= lucide_icon(
-          flash[:reset] ? "rotate-cw" : "x",
-          class: flash[:reset] ? "stroke-success" : "stroke-error",
-        ) %>
-        <span class="flex-grow font-bold"><%= flash[:reset] ? t(".heading_success") : t(".heading_expired") %></span>
-      </div>
-      <div class="divider my-1 -mr-4"></div>
-      <div class="text-sm -mr-4">
-        <%= flash[:reset] ? t(".subheading_success") : t(".subheading_expired") %>
-      </div>
-      <% if flash[:reset] %>
-        <div class="text-sm -mr-4 mt-3">
-          <a href="<%= Masks.configuration.site_links[:login] %>" class="underline"><%= t(".login") %></a>
-        </div>
-      <% end %>
-    </div>
-  </div>
-<% end %>

data/app/views/masks/sessions/new.html.erb

@@ -1,152 +0,0 @@
-<div data-controller="session">
-  <%= form_with url: session_path, method: :post do |form| %>
-    <div role="alert" class="alert mb-4 text-left" data-session-target="flash">
-      <% if flash[:errors]&.any? && !factor2_required? %>
-        <div class="flex items-center gap-4">
-          <%= lucide_icon("shield-x", class: "stroke-error") %>
-          <span><%= flash[:errors][0] %></span>
-        </div>
-      <% elsif logged_in? %>
-        <div class="flex items-center gap-4">
-          <%= lucide_icon("check", class: "stroke-success") %>
-          <span><%= t(".logged_in") %></span>
-        </div>
-      <% else %>
-        <div data-flash="enter-factor2" class="hidden flex items-center gap-4">
-          <%= lucide_icon("key-square", class: "stroke-warning") %>
-          <span><%= t(".enter_factor2") %></span>
-        </div>
-        <div data-flash="enter-credentials" class="flex items-center gap-4">
-          <%= lucide_icon("shield-alert", class: "stroke-warning") %>
-          <span><%= t(".enter_credentials") %></span>
-        </div>
-        <div data-flash="enter-password" class="hidden flex items-center gap-4">
-          <%= lucide_icon("shield-ellipsis", class: "stroke-warning") %>
-          <span><%= t(".enter_password") %></span>
-        </div>
-        <div data-flash="continue" class="hidden flex items-center gap-4">
-          <%= lucide_icon("shield-question", class: "stroke-accent") %>
-          <span><%= t(".continue") %></span>
-        </div>
-      <% end %>
-    </div>
-
-    <% if factor2_required? %>
-      <div class="w-full">
-        <div role="tablist" class="tabs tabs-bordered mb-4">
-          <% if @actor.totp_secret %>
-            <input
-              checked
-              name="factor2"
-              type="radio"
-              role="tab"
-              class="tab whitespace-nowrap"
-              aria-label="<%= t('.tab.one_time_code') %>">
-            <div role="tabpanel" class="tab-content p-4 bg-base-100 rounded-b">
-              <p class="flex items-center gap-4 text-sm mb-4">
-                <%= lucide_icon("qr-code") %>
-                <%= t(".one_time_code") %>
-              </p>
-              <label class="form-control w-full">
-                <input
-                  type="text"
-                  data-action="session#updateCode"
-                  data-session-target="oneTimeCode"
-                  placeholder="<%= t('.placeholder.one_time_code') %>"
-                  name="session[one_time_code]"
-                  class="input input-bordered w-full">
-              </label>
-            </div>
-          <% end %>
-
-          <% if @actor.saved_backup_codes? %>
-            <input
-              type="radio"
-              name="factor2"
-              role="tab"
-              class="tab whitespace-nowrap"
-              aria-label="<%= t('.tab.backup_code') %>">
-            <div role="tabpanel" class="tab-content p-4 bg-base-100 rounded-b">
-              <p class="flex items-center gap-4 text-sm mb-4">
-                <%= lucide_icon("rotate-cw") %>
-                <%= t(".backup_code") %>
-              </p>
-              <label class="form-control w-full">
-                <input
-                  type="text"
-                  data-action="session#updateCode"
-                  data-session-target="backupCode"
-                  placeholder="<%= t('.placeholder.backup_code') %>"
-                  name="session[backup_code]"
-                  class="input input-bordered w-full">
-              </label>
-            </div>
-          <% end %>
-        </div>
-      </div>
-    <% elsif !logged_in? %>
-      <div class="flex flex-col gap-2">
-        <label class="form-control w-full">
-          <input
-            type="text"
-            data-action="session#updateNickname"
-            data-session-target="nickname"
-            placeholder="<%= t('.placeholder.nickname') %>"
-            name="session[nickname]"
-            class="input input-bordered w-full">
-        </label>
-        <label class="form-control input input-bordered w-full flex flex-row items-center gap-2" data-controller="password-visibility">
-          <input
-            type="password"
-            data-action="session#updatePassword"
-            data-session-target="password"
-            data-password-visibility-target="input"
-            spellcheck="false"
-            placeholder="<%= t('.placeholder.password') %>"
-            name="session[password]"
-            class="flex-grow">
-
-          <button data-action="password-visibility#toggle" type="button" class="btn btn-sm btn-ghost -mr-2">
-            <span data-password-visibility-target="icon"><%= lucide_icon('eye') %></span>
-            <span data-password-visibility-target="icon" class="hidden"><%= lucide_icon('eye-off') %></span>
-          </button>
-        </label>
-        <% if @config.site_links[:recover] %>
-          <div class="label">
-            <span class="label-text-alt opacity-60 hover:opacity-100"><a
-                class="hover:underline"
-                href="<%= @config.site_links[:recover] %>"><%= t(".recover_credentials") %></a></span>
-          </div>
-        <% end %>
-      </div>
-    <% end %>
-
-    <% unless logged_in? %>
-    <div class="flex items-center gap-4">
-      <%= form.submit t(".submit"),
-                  class: "btn btn-active",
-                  data: {
-                    session_target: "submit",
-                  } %>
-      <div class="form-control" data-session-target="remember">
-        <label class="label cursor-pointer">
-          <input type="checkbox" name="session[remember_me]" class="toggle toggle-sm">
-          <span class="label-text pl-2"><%= t(".remember_me") %></span>
-        </label>
-      </div>
-    </div>
-    <% end %>
-  <% end %>
-
-  <% if factor2_required? %>
-    <div class="mt-2 opacity-60 hover:opacity-100">
-      <%= form_with url: session_path, method: :delete do |form| %>
-        <span class="text-xs">
-          <%= t(".start_over.text") %>
-          <%= form.submit t(".start_over.link"), class: "cursor-pointer underline" %>
-        </span>
-
-      <% end %>
-    </div>
-  <% end %>
-</div>

data/config/brakeman.ignore

@@ -1,28 +0,0 @@
-{
-  "ignored_warnings": [
-    {
-      "warning_type": "Cross-Site Request Forgery",
-      "warning_code": 7,
-      "fingerprint": "2c0ec97f978f7a612f1fa0567846c86ec02c072be7784e4c707fd4ba81fe5021",
-      "check_name": "ForgerySetting",
-      "message": "`protect_from_forgery` should be called in `ApplicationController`",
-      "file": "dummy/app/controllers/application_controller.rb",
-      "line": 1,
-      "link": "https://brakemanscanner.org/docs/warning_types/cross-site_request_forgery/",
-      "code": null,
-      "render_path": null,
-      "location": {
-        "type": "controller",
-        "controller": "ApplicationController"
-      },
-      "user_input": null,
-      "confidence": "High",
-      "cwe_id": [
-        352
-      ],
-      "note": ""
-    }
-  ],
-  "updated": "2024-02-07 16:03:41 -0500",
-  "brakeman_version": "6.1.2"
-}

data/config/initializers/inflections.rb

@@ -1,5 +0,0 @@
-# frozen_string_literal: true
-ActiveSupport::Inflector.inflections(:en) do |inflect|
-  inflect.acronym "OpenID"
-  inflect.acronym "UserInfo"
-end