minimalist_authentication 3.2.1 → 3.2.2

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 4b81e23298baa784d92be34aa1b6b372f585c5ea8bba51d953a85ee39ec44db5
-  data.tar.gz: 2cad820418a3869931fad968063d3f97e7302686b1fd534daf3a1c9f0d5dda15
+  metadata.gz: c1755b9e403888ec8c63f8e41fd9a1286a45a983a7860e2e929bae4b8f2743cf
+  data.tar.gz: b8463c45d6240b16fff848d553050c14c8d3c3ddc3a2d6520e67860a1b59bf5d
 SHA512:
-  metadata.gz: 3b5cd0f9f672f3084884b5385d333705d21d9835738e0b79ba8bc10853bc8bf5cbec88451ff07db26844a601fc69e685fe3f5e3961c5dbcd3616033d9cfe781a
-  data.tar.gz: 183194ef85c0ed224f9550c95779ecc5d37b6437ea0b05cd2e2cc32c43785d6718639bc1e4b74997df0fedf93432366e7240bc1e1d6b440008210ce64f277134
+  metadata.gz: 6cffe51b8c6d48b71241e390fa79c46ec45fba7ee4cca744c079f6f6db0be88f5311424f0f615d183b6aec9bb685e25a5c2135360bec5e19d35cc23374dda27a
+  data.tar.gz: 10a06e82b2fdb2a22f59842221959408b49b43d7df801560d741179884beb192bde9c6d78e7972ecf30b2ee5f8ea603235d2f561c8913d2646ffc1e0fc0a3355

data/README.md

@@ -26,6 +26,13 @@ bin/rails generate model user active:boolean username:string password_digest:str
 
 
 ## Example
+Create a Current class that inherits from ActiveSupport::CurrentAttributes with a user attribute (app/models/current.rb)
+```ruby
+class Current < ActiveSupport::CurrentAttributes
+  attribute :user
+end
+```
+
 Include MinimalistAuthentication::User in your user model (app/models/user.rb)
 ```ruby
 class User < ApplicationRecord

data/lib/minimalist_authentication/controller.rb

@@ -5,8 +5,11 @@ module MinimalistAuthentication
     extend ActiveSupport::Concern
 
     included do
-      # Lock down everything by default
-      # use skip_before_action to open up specific actions
+      # Loads the user object from the session and assigns it to Current.user
+      before_action :load_current_user
+
+      # Requires an authorized user for all actions
+      # Use skip_before_action to allow access to specific actions
       before_action :authorization_required
 
       helper MinimalistAuthentication::ApplicationHelper
@@ -14,35 +17,47 @@ module MinimalistAuthentication
       helper_method :current_user, :logged_in?, :authorized?
     end
 
-    private
+    # Returns true if the user is logged in
+    # Override this method in your controller to customize authorization
+    def authorized?(_action = action_name, _resource = controller_name)
+      logged_in?
+    end
 
+    # Returns the current user from the client application Current class
     def current_user
-      @current_user ||= find_session_user || MinimalistAuthentication.configuration.user_model.guest
+      ::Current.user
     end
 
-    def find_session_user
-      MinimalistAuthentication.configuration.user_model.find_enabled(session_user_id)
+    # Returns true if a current user is present, otherwise returns false
+    def logged_in?
+      current_user.present?
     end
 
-    def session_user_id
-      session[MinimalistAuthentication.configuration.session_key]
+    # Logs in a user by setting the session key and updating the Current user
+    # Should only be called after a successful authentication
+    def update_current_user(user)
+      reset_session
+      session[MinimalistAuthentication.session_key] = user.id
+      ::Current.user = user
     end
 
-    def authorization_required
-      authorized? || access_denied
+    private
+
+    def access_denied
+      store_location if request.get? && !logged_in?
+      redirect_to new_session_path
     end
 
-    def authorized?(_action = action_name, _resource = controller_name)
-      logged_in?
+    def authorization_required
+      authorized? || access_denied
     end
 
-    def logged_in?
-      !current_user.guest?
+    def find_session_user
+      MinimalistAuthentication.user_model.find_enabled(session[MinimalistAuthentication.session_key])
     end
 
-    def access_denied
-      store_location if request.get? && !logged_in?
-      redirect_to new_session_path
+    def load_current_user
+      Current.user = find_session_user
     end
 
     def store_location

data/lib/minimalist_authentication/sessions.rb

@@ -42,9 +42,8 @@ module MinimalistAuthentication
 
     def log_in_user
       self.return_to = session["return_to"]
-      reset_session
+      update_current_user(authenticated_user)
       authenticated_user.logged_in
-      session[MinimalistAuthentication.configuration.session_key] = authenticated_user.id
     end
 
     def user_params

data/lib/minimalist_authentication/test_helper.rb

@@ -5,22 +5,22 @@ module MinimalistAuthentication
     PASSWORD = "test-password"
     PASSWORD_DIGEST = BCrypt::Password.create(PASSWORD, cost: BCrypt::Engine::MIN_COST)
 
-    def login_as(user_fixture_name, password = PASSWORD)
-      post session_path, params: { user: { email: users(user_fixture_name).email, password: } }
-    end
-
     def current_user
       @current_user ||= load_user_from_session
     end
 
+    def login_as(user_fixture_name, password = PASSWORD)
+      post session_path, params: { user: { email: users(user_fixture_name).email, password: } }
+    end
+
     private
 
     def load_user_from_session
-      MinimalistAuthentication.configuration.user_model.find(session_user_id) if session_user_id
+      MinimalistAuthentication.user_model.find(session_user_id) if session_user_id
     end
 
     def session_user_id
-      @request.session[MinimalistAuthentication.configuration.session_key]
+      @request.session[MinimalistAuthentication.session_key]
     end
   end
 end

data/lib/minimalist_authentication/user.rb

@@ -6,8 +6,6 @@ module MinimalistAuthentication
   module User
     extend ActiveSupport::Concern
 
-    GUEST_USER_EMAIL = "guest"
-
     included do
       has_secure_password
 
@@ -54,11 +52,6 @@ module MinimalistAuthentication
         active(false)
       end
 
-      # Returns a frozen user with the email set to GUEST_USER_EMAIL.
-      def guest
-        new(email: GUEST_USER_EMAIL).freeze
-      end
-
       # Minimum password length
       def password_minimum = 12
     end
@@ -87,9 +80,14 @@ module MinimalistAuthentication
       authenticate(password)
     end
 
-    # Check if user is a guest based on their email attribute
+    # Deprecated method to check if the user is a guest. Returns false because the guest user has been removed.
     def guest?
-      email == GUEST_USER_EMAIL
+      MinimalistAuthentication.deprecator.warn(<<-MSG.squish)
+        Calling #guest? is deprecated. Use #MinimalistAuthentication::Controller#logged_in? to
+        check for the presence of a current_user instead.
+      MSG
+
+      false
     end
 
     # Returns true if the user is not active.

data/lib/minimalist_authentication/version.rb

@@ -1,5 +1,5 @@
 # frozen_string_literal: true
 
 module MinimalistAuthentication
-  VERSION = "3.2.1"
+  VERSION = "3.2.2"
 end

data/lib/minimalist_authentication.rb

@@ -12,7 +12,7 @@ require "minimalist_authentication/test_helper"
 
 module MinimalistAuthentication
   class << self
-    delegate :user_model, to: :configuration
+    delegate :session_key, :user_model, to: :configuration
 
     def deprecator
       @deprecator ||= ActiveSupport::Deprecation.new("4.0", name)

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: minimalist_authentication
 version: !ruby/object:Gem::Version
-  version: 3.2.1
+  version: 3.2.2
 platform: ruby
 authors:
 - Aaron Baldwin
@@ -9,7 +9,7 @@ authors:
 autorequire:
 bindir: bin
 cert_chain: []
-date: 2024-11-22 00:00:00.000000000 Z
+date: 2024-12-02 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: bcrypt