model_driven_api 3.0.5 → 3.0.6

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 121cf90a81e77e493340b5349aead00f2511ffbb5ed9ae2ece60b1c42b5df179
-  data.tar.gz: 24eced53d7abec52c76ecd4ebf5185f3d66fc532c1c5cb08e0a84bcf71fa5916
+  metadata.gz: 1ba0922c4a172c2281c46307ba065d30ef787167503aeaa468731c939e277904
+  data.tar.gz: 9ec7f34e99684acf9f978d6fed80f8cd14cf82ae41a06366b4ee9b6ce89232c8
 SHA512:
-  metadata.gz: 4dde33d3d868f96d4f3ae77087d627fbba457190c2114075129e6ab414379b6debdd4165be69b0c8795c138da100892d063c67f7acbe5655e52367b6c9f0bce3
-  data.tar.gz: bf614a1100e17e58c1380ebbdf1422687c2e78050abe970f38366c09365c304f70b3fa2af9ff565d5a89e62c55e7628999a0bb946d5346868044868106f40ef0
+  metadata.gz: d16adf2aacce296e357c96ac4ca923850c9bb106f996bcde912d504d0df3991d7c52963fadc928fd08f86ab64f2e3aa1bee1d1c6eec243643f7854ace4495f44
+  data.tar.gz: 4333524807337ded6bb5eba120b558e6c342914450287a3fcd7867f82486c693467cbf5ebf77fa884a089a5c0b755ba6bf9a7026253949662873cc73fa8e6a51

data/README.md

@@ -480,8 +480,6 @@ Once loaded the tests inside the insomnia application, please right click on the
 
 ## TODO
 
-* Document the new feature (from version 2.3.3) to add Authentication methods which override the JWT described above. Useful for Webhooks and machine2machine trusted dialogues.
-
 ## References
 Thanks to all these people for ideas:
 

data/app/commands/authenticate_user.rb

@@ -11,8 +11,6 @@ class AuthenticateUser
         if !first_arg[:email].blank? && !first_arg[:password].blank?
             @email = first_arg[:email]
             @password = first_arg[:password]
-        elsif !first_arg[:access_token].blank?
-            @access_token = first_arg[:access_token]
         end
     end
     
@@ -30,15 +28,13 @@ class AuthenticateUser
     
     private
     
-    attr_accessor :email, :password, :access_token
+    attr_accessor :email, :password
     
     def api_user
         if !email.blank? && !password.blank?
             user = User.find_by(email: email)
             # Verify the password.
             user = nil if user.blank? || user.authenticate(password).blank?
-        elsif !access_token.blank?
-            user = User.find_by(access_token: access_token)
         end
 
         raise AccessDenied unless user.present?

data/app/controllers/api/v2/authentication_controller.rb

@@ -2,7 +2,7 @@ class Api::V2::AuthenticationController < ActionController::API
     include ::ApiExceptionManagement
 
     def authenticate
-        command = !params[:atoken].blank? && User.column_names.include?("access_token") ? AuthenticateUser.call(access_token: params[:atoken]) : AuthenticateUser.call(email: params[:auth][:email], password: params[:auth][:password])
+        command = AuthenticateUser.call(email: params[:auth][:email], password: params[:auth][:password])
         
         if command.success?
             response.headers['Token'] = command.result[:jwt]

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: model_driven_api
 version: !ruby/object:Gem::Version
-  version: 3.0.5
+  version: 3.0.6
 platform: ruby
 authors:
 - Gabriele Tassoni
 autorequire: 
 bindir: bin
 cert_chain: []
-date: 2023-02-11 00:00:00.000000000 Z
+date: 2023-02-12 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: thecore_backend_commons
@@ -121,7 +121,6 @@ files:
 - Rakefile
 - app/commands/authenticate_user.rb
 - app/commands/authorize_api_request.rb
-- app/commands/authorize_machine_2_machine.rb
 - app/controllers/api/v2/application_controller.rb
 - app/controllers/api/v2/authentication_controller.rb
 - app/controllers/api/v2/info_controller.rb

data/app/commands/authorize_machine_2_machine.rb

@@ -1,31 +0,0 @@
-class AuthorizeMachine2Machine
-    prepend SimpleCommand
-    
-    def initialize(headers = {})
-        @headers = headers
-    end
-    
-    def call
-        api_user
-    end
-    
-    private
-    
-    attr_reader :headers
-    
-    def api_user
-        token = http_auth_header
-        user = User.find_by(access_token: token) unless token.blank?
-        @api_user = user if user
-        @api_user || errors.add(:token, "Invalid token") && nil
-    end
-    
-    def http_auth_header
-        if headers['Authorization'].present?
-            return headers['Authorization'].split(' ').last
-        else
-            errors.add(:token, "Missing token")
-        end
-        nil
-    end
-end