no_password_auth 0.2.1

checksums.yaml

@@ -0,0 +1,7 @@
+---
+SHA256:
+  metadata.gz: 21b0742b67d08d1694998ce4a0cb4c5460eaa07d28b4481bd2f081580dfe2cad
+  data.tar.gz: 2148a8faa5cccc2d52f33708d862f116d69b832a1043dfc18aa9900d1c9a0ae3
+SHA512:
+  metadata.gz: 395f222367f5bfe903e1947e2fb4246ecad6c11c904679dc78ed3dc43e0a751066aa6cce9f016d2fd6e6aca396321898d240775ba1348a43aa1716c11fcdb1a3
+  data.tar.gz: d8beccec2e849f9a407ddfd27850e4a2c1568f4189564424578e669d5030c39f1b25653f324c157c93a4cab5daffa4908a59e5042ae04ac3213bdba11a5bcca0

data/MIT-LICENSE

@@ -0,0 +1,20 @@
+Copyright 2021 armando escalier
+
+Permission is hereby granted, free of charge, to any person obtaining
+a copy of this software and associated documentation files (the
+"Software"), to deal in the Software without restriction, including
+without limitation the rights to use, copy, modify, merge, publish,
+distribute, sublicense, and/or sell copies of the Software, and to
+permit persons to whom the Software is furnished to do so, subject to
+the following conditions:
+
+The above copyright notice and this permission notice shall be
+included in all copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND,
+EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF
+MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND
+NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE
+LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION
+OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION
+WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.

data/README-ES.md

@@ -0,0 +1,230 @@
+# NoPassword
+
+NoPassword es una gema de Ruby on Rails que realiza autenticación de sesiones a través de token o link mágico enviado a correo electrónico de usuario, no se necesitan contraseñas.
+
+## Tabla de contenido
+
+- [Requerimientos](#requerimientos)
+- [Instalación](#instalación)
+- [Configuración](#configuración)
+    - [Inicializador](#configurar-inicializador)
+    - [Configurar idiomas](#configurar-idiomas)
+    - [Configuración para emails](#configuración-para-emails)
+    - [Personalización de vistas](#personalización-de-vistas)
+- [Uso de NoPassword](#uso-de-nopassword)
+  - [Filtros de controlador](#filtros-de-controlador)
+  - [Helper methods](#helper-methods)
+  - [Callback](#callback)
+- [Generadores](#generadores)
+- [Desarrollo y pruebas de la gema](#desarrollo-y-pruebas-de-la-gema)
+- [Licencia](#licencia)
+
+## Requerimientos
+
+NoPassword es un Rails Engine que requiere de Ruby on Rails 7.0 o mejor, así como Ruby 3.0.2 o mejor para funcionar.
+NoPassword tiene dos vistas, una para solicitar un token o código y otra para ingresar el token. Las dos vistas hacen uso de TailwindCSS via la gema [tailwindcss-rails](https://github.com/rails/tailwindcss-rails) y de StimulusJS a través de Importmaps.
+
+En caso de requieras personalizar la forma en como se sirven los assets, por ejemplo, con Webpacker o los Bundlings de Rails, entonces puedes realizar la [Personalización de vistas](#personalización-de-vistas) para ajustarlas a tus necesidades.
+
+## Instalación
+
+Para instalar NoPassword solamente hay que añadir la gema a tu `Gemfile`.
+```ruby
+gem "no_password_auth", require: "no_password"
+```
+También puedes instalar la gema directamente desde el repositorio de github con:
+```ruby
+gem "no_password_auth", git: "https://github.com/creditario/nopassword.git", require: "no_password"
+```
+
+En ambos casos hay que ejecutar `bundle` para instalar la dependencia.
+
+El siguente paso consiste en instalar las migraciones y el archivo inicializador de NoPassword.
+
+```bash
+$ bin/rails no_password:install
+```
+Recuerda ejecutar las migraciones antes de continuar.
+```bash
+$ bin/rails db:migrate
+```
+
+En la siguiente sección se explicará las opciones de configuración de NoPassword mediante su inicializador.
+
+## Configuración
+Al instalar NoPassword automáticamente el Engine se monta en `/p` dentro del archivo `config/routes.rb`.
+
+### Configurar inicializador
+NoPassword provee un inicializador en `config/initializers/no_password.rb`. Aquí es posible cambiar el comportamiento de la expiración de la sesión después de haber iniciado, por omisión expira después de dos horas `session_expiration`. Otra opción disponible es indicar en cuanto tiempo expira un token que no ha sido reclamado, por omisión expira en 15 minutos `token_expiration`.
+
+`secret_key` permite configurar la llave que firma las URLs de los links mágicos para iniciar sesión. Si el valor es nulo, entonces hace uso del `secret_key` de Ruby on Rails.
+
+```ruby
+NoPassword.configure do |config|
+  # Session expiration time
+  # config.session_expiration = 2.hours
+  #
+  # Token expiration time
+  # config.token_expiration = 15.minutes
+  #
+  # Secret key to cypher tokens, if none, then Rails secret key is used
+  # config.secret_key = nil
+end
+```
+
+### Configurar idiomas
+NoPassword cuenta con archivos de traducción para español (`:es`) e inglés (`:en`). El idioma en que se muestre dependederá de la configuración en tu `config/application.rb`. Ejemplo.
+
+```ruby
+config.i18n.default_locale = :es
+config.i18n.available_locales = [:en, :es]
+```
+
+### Configuración para emails
+ActionMailer es utilizado por la gema para enviar el correo electrónico con el token y el link mágico. Los correos se envian con la ayuda de ActiveJob cuando existe alguna estrategía configurada para este como caso, por ejemplo [Sidekiq](https://sidekiq.org).
+
+Recuerda en producción configurar correctamente `default_url_options` y `asset_host` en tu archivo `config/enviroments/production.rb`.
+
+```ruby
+config.action_mailer.default_url_options = { host: "my-domain.com" }
+config.action_mailer.asset_host = "https://my-domain.com"
+```
+
+En modo de desarrollo es útil contar con una gema como [letter opener](https://github.com/ryanb/letter_opener) que evite el envío de correos electrónicos y que en su lugar los abra en línea. Para este caso agrega la gema a tu `Gemfile` y ejecuta el comando `bundle`.
+
+```ruby
+gem "letter_opener", group: :development
+```
+
+Abre tu archivo `config/enviroments/development.rb` y configurala de la siguiente forma:
+
+```ruby
+  config.action_mailer.delivery_method = :letter_opener
+  config.action_mailer.perform_deliveries = true
+```
+
+### Personalización de vistas
+Este paso no es necesario, con los pasos anteriores se obtienen las vistas default de la gema, pero si así lo requieres puedes personalizar las vistas de la gema, utiliza este comando que copia las vistas del engine dentro de tu aplicación. Los archivos se generan dentro de `views/no_password` y `views/layouts/no_password`.
+
+```bash
+$ rails no_password:install:copy_templates
+```
+
+## Uso de NoPassword
+Después de instalar NoPassword para utilizarla en tu aplicación se proporcionan filtros y **helpers** que te permiten conocer si existe una sesión activa o no, y en su defecto, enviar al usuario a crear una sesión antes de continuar.
+
+### Filtros de controlador
+El filtro `authenticate_session!` se incluye en el módulo `NoPassword::ControllerHelpers`. Este filtro es utilizado en un `before_action` para determinar en un controlador si existe una sesión activa o no. En el caso de no existir, el usuario es redirigido a la sección de NoPassword donde podrá solicitar un token de acceso.
+
+Para hacer uso del filtro hay que incluir el módulo en el controlador deseado y agregar el `before_action`.
+
+```ruby
+  include NoPassword::ControllerHelpers
+  before_action :authenticate_session!
+```
+
+### Helper methods
+El módulo `NoPassword::ControllerHelpers` incluye los métodos `signed_in_session?` y `current_session` para consultar si existe una sesión activa y obtener más información de la sesión, respectivamente. Cuando el módulo de incluye en un controlador estos métodos se exponen en el contexto de las vistas.
+
+Ejemplo de uso en una vista.
+
+```erb
+<% if signed_in_session? %>
+  <%= current_session.email %>
+  <%= button_to "Sign out", no_password.session_path(current_session.id), method: :delete %>
+<% else %>
+  <%= link_to "Sign in", no_password.new_session_path %>
+<% end %>
+```
+
+### Callback
+El flujo normal para iniciar sesión consta de dos pasos, una página donde se introduce el correo electrónico para solicitar un código y/o el link mágico, otra página donde se introduce el código, sin embargo pueden existir casos que se salgan de esta flujo propuesto por NoPassword. Para situaciones donde se desea forzar a donde dirigir al usuario después de iniciar sesión o cuando el link mágico es inválido, o simular **Single Page Application** tenemos a nuestra disposición el callback `after_sign_in!`.
+
+![Aoorora Demo page](docs/aoorora-demo.gif)
+
+Este callback va a ser llamado en cada intento de iniciar sesión, ya sea con código o con link mágico, independientemente de si el inicio de sesión es exitoso o no.
+```ruby
+after_sign_in!(signed_in, by_url, return_url)
+```
+El callback recibe 3 parámetros.
+- `signed_in`: indica si fue exitoso el inicio de sesión o no, su valor es booleano.
+- `by_url`: indica como se inentó iniciar sesión, ya sea por el link mágico o con el código introducido manualmente, su valor es booleano.
+- `return_url`: Contiene la URL a donde redireccionar al usuario en caso de que el inicio de sesión sea exitoso, su valor es una cadena de texto.
+
+El controlador `SessionConfirmationsController` espera como respuesta del callback los siguientes posibles valores:
+- `nil`: con el cual se indica que se ejecutó el callback y que regresa el control del flujo al controlador.
+- `render` o `redirect_to`: en este caso le indicamos al controlador que el callback toma el control del flujo.
+
+Podemos implementar el callback `after_sign_in!` creando el archivo `app/controllers/no_password/session_confirmations_controller.rb` en nuestra aplicación principal,
+donde cargamos el controlador original desde el engine de NoPassword y con `class_eval` le inyectamos el método.
+
+```ruby
+load NoPassword::Engine.root.join("app", "controllers", "no_password", "session_confirmations_controller.rb")
+
+NoPassword::SessionConfirmationsController.class_eval do
+  def after_sign_in!(signed_in, by_url)
+    return do_something_different if signed_in # Do something different if user signed in successfully
+    return nil if !by_url # Return control if failed to sign in with magic link
+
+    flash[:alert] = "Your code is not valid"
+    redirect_to main_app.demo_path # Redirect somewhere else if token is invalid
+  end
+end
+```
+
+## Generadores
+La gema NoPassword cuenta con 4 generadores de Ruby on Rails, el primero de ellos es el que se encarga de realizar la instalación y realiza las siguientes acciones.
+
+- Crea el archivo de inicialización
+- Monta el engine en las rutas de aplicación
+- Incluye los **helpers** de la gema en `ApplicationController`.
+- Copia las migraciones de NoPassword a la aplicación.
+- Genera el archivo de CSS de la gema.
+
+```bash
+$ rails no_password:install
+```
+Para los casos de requerir personalizar las vistas de la gema, el generador `copy_templates` se encarga de copiar **layouts**, vistas y plantillas de **mailers** a `app/views`, colocando los archivos donde corresponden bajo el directorio `no_password`.
+
+```bash
+$ rails no_password:install:copy_templates
+```
+
+El generador `migrations` se encarga de copiar las migraciones desde la gema hacia la aplicación.
+
+```bash
+$ rails no_password:install:migrations
+```
+
+Los generadores `tailwindcss::build` y `tailwindcss:watch` trabajan en conjunto para generar el CSS basado en Tailwind desde la gema y exponerlo a la aplicación, en ambos casos se generar un archivo `tailwind.config.js` específico para la gema y que Tailwind utiliza para generar el CSS necesario.
+```bash
+$ rails no_password:tailwindcss:build
+```
+Este generador `tailwindcss::build` se conecta automática al proceso de compilación de assets en modo de producción.
+
+```bash
+$ rails no_password:tailwindcss:watch
+```
+El generador `tailwindcss:watch` se usa en modo de desarrollo y se puede agregar al `Procfile.dev` ejecutar el proceso y monitorear posibles cambios al CSS de la gema.
+
+```ruby
+no_password_css: bin/rails app:no_password:tailwindcss:watch
+```
+
+## Desarrollo y pruebas de la gema
+Para generar un ambiente de desarrollo de la gema, primero es necesario clonar este repositorio. Una vez clonado, el script `bin/setup` se encarga de instalar la dependencias y migrar la base de datos. Además supone que [Overmind](https://github.com/DarthSim/overmind) está instalado por lo que usa la configuración del archivo `Procfile.dev` para iniciar la aplicación de prueba en el puerto 3090.
+
+```bash
+$ bin/setup
+```
+
+![Aoorora Demo page](docs/dummy-app.png)
+
+Para ejecutar la pruebas de la gema y ejecutar los linters se puede hacer uso del script `bin/ci`.
+
+```bash
+$ bin/ci
+```
+
+## Licencia
+The gem is available as open source under the terms of the [MIT License](https://opensource.org/licenses/MIT).

data/README.md

@@ -0,0 +1,230 @@
+# NoPassword
+
+NoPassword is a Ruby on Rails gem that allows session authentication with a token or a magic link via an email sent to the user; there is no need for a password.
+
+## Table of contents
+
+- [Requirements](#requirements)
+- [Installation](#instalation)
+- [Configuration](#configuration)
+    - [Initializer](#initializer)
+    - [Locales](#locales)
+    - [Email configuration](#email-configuration)
+    - [Custom views](#custom-views)
+- [Usage](#usage)
+  - [Action filter](#action-filter)
+  - [Helper methods](#helper-methods)
+  - [Callback](#callback)
+- [Generators](#generator)
+- [Develooment and tests](#development-and-tests)
+- [License](#license)
+
+## Requirements
+
+NoPassword is a Rails Engine that needs Ruby on Rails 7.0 or better and Ruby 3.0.2 o better.
+NoPassword flow is composed of two views for the user to enter an email, and the received token. The engine uses TailwindCSS via [tailwindcss-rails](https://github.com/rails/tailwindcss-rails) and StimulusJS served with the browser's Importmaps.
+
+Customization for CSS and Javascript is possible; refer to [Views personalization](#views-personalization) to learn how to extract gem templates.
+
+## Installation
+
+Add NoPassword gem reference to your application's `Gemfile`.
+```ruby
+gem "no_password_auth", require: "no_password"
+```
+Or add gem reference from its Github repository.
+```ruby
+gem "no_password_auth", git: "https://github.com/creditario/nopassword.git", require: "no_password"
+```
+
+In any case, execute `bundle` to install the gem.
+Next, use the gem installer to install migrations and the gem initializer.
+
+```bash
+$ bin/rails no_password:install
+```
+Don't forget to execute database migration after this step.
+```bash
+$ bin/rails db:migrate
+```
+
+The following section explains configuration options for the NoPassword gem with its initializer file.
+
+## Configuration
+After installing the NoPassword gem, the engine is mounted at the `/p` path inside the `config/routes.rb` file.
+
+### Initializer
+After installing the NoPassword gem, the engine is mounted at the `/p` path inside the `config/routes.rb` file.
+
+NoPassword initializer is located at `config/initializers/no_password.rb`. The gem provides three configuration options. Session expiration by default is set to two hours after a new session is started. To adjust this time, use `session_expiration` attribute to set a new value.
+Token expiration is set by default to 15 minutes. Update `token_expiration` increase or decrease this time.
+
+`secret_key` is the key used to sign magic links URLs; if this value is `nil`, then Ruby on Rails  `secret_key` is used for this cryptographic task.
+
+```ruby
+NoPassword.configure do |config|
+  # Session expiration time
+  # config.session_expiration = 2.hours
+  #
+  # Token expiration time
+  # config.token_expiration = 15.minutes
+  #
+  # Secret key to cypher tokens, if none, then Rails secret key is used
+  # config.secret_key = nil
+end
+```
+
+### Locales
+NoPassword gem includes locales for Spanish and English languages. Set your language configuration at the main application `config/application.rb`.
+
+```ruby
+config.i18n.default_locale = :es
+config.i18n.available_locales = [:en, :es]
+```
+
+### Email configuration
+NoPassword uses ActionMailer to email the user its token and magic link. If a background strategy is setup for ActiveJob, like [Sidekiq](https://sidekiq.org) then emails are sent in the background.
+
+Remember to configure `default_url_options` and `asset_host` inside `config/enviroments/production.rb` file.
+
+```ruby
+config.action_mailer.default_url_options = { host: "my-domain.com" }
+config.action_mailer.asset_host = "https://my-domain.com"
+```
+
+In development mode, having a tool like [letter opener](https://github.com/ryanb/letter_opener) helps to open emails inline, preventing sending emails. Add letter opener gem reference to your `Gemfile` and run `bundle` to install it.
+
+```ruby
+gem "letter_opener", group: :development
+```
+
+Configure the letter opener by opening `config/enviroments/development.rb` and adding the following configuration.
+
+```ruby
+  config.action_mailer.delivery_method = :letter_opener
+  config.action_mailer.perform_deliveries = true
+```
+
+### Custom views
+This step is necessary only if you plan to customize the views provided by NoPassword. The following generator copies all engine views into `views/no_password` and `views/layouts/no_password`.
+
+```bash
+$ rails no_password:install:copy_templates
+```
+
+## Usage
+After installing NoPassword, you can use the filters and **helpers** provided by the gem to query if there is an active session or to send the user to the sign in process.
+
+### Action filter
+The filter `authenticate_session!` is defined when the module `NoPassword::ControllerHelpers` is included in a controller. This filter is used with a `before_action` to secure a controller or controller action. When a user reaches a controller protected by this filter, and there is no active session, the user is redirected to the sign-in process.
+
+```ruby
+  include NoPassword::ControllerHelpers
+  before_action :authenticate_session!
+```
+
+### Helper methods
+The module `NoPassword::ControllerHelpers` includes methods `signed_in_session?` and `current_session` to query if there is an active session or to get more information about an active session. These methods are also exposed as helpers in the Rails view context.
+
+```erb
+<% if signed_in_session? %>
+  <%= current_session.email %>
+  <%= button_to "Sign out", no_password.session_path(current_session.id), method: :delete %>
+<% else %>
+  <%= link_to "Sign in", no_password.new_session_path %>
+<% end %>
+```
+
+### Callback
+NoPassword sign in flow has two pages; the first one receives the user email, creates a token and a magic link, and then sends it via email. The second page accepts the token and decides whether the user can have a session.
+However, an application may require a different flow, which is why the callback `after_sign_in!` exists.
+
+This is an example of a custom flow that mimics a Single Page flow.
+
+![Aoorora Demo page](docs/aoorora-demo.gif)
+
+The callback is called on every intent to start a session, whether the sign was successful or not.
+```ruby
+after_sign_in!(signed_in, by_url, return_url)
+```
+It receives three parameters.
+- `signed_in`: A boolean value that indicates if the user succeeded in getting a session.
+- `by_url`: A boolean value that indicates if the login happens with the magic link or entered token manually.
+- `return_url`: A string value with the return path if the user succeeded in getting a session.
+
+The `SessionConfirmationsController` controller expects any of the following possible values from the callback.
+- `nil`: indicates callback was executed but is returning flow control to the controller.
+- `render` o `redirect_to`: indicates callback was executed and is taking over sign in flow.
+
+`after_sign_in!` callback is implemented by creating a `app/controllers/no_password/session_confirmations_controller.rb`  file in your application. The original controller from NoPassword engine is loaded, and then the callback is added with a `class_eval`.
+
+```ruby
+load NoPassword::Engine.root.join("app", "controllers", "no_password", "session_confirmations_controller.rb")
+
+NoPassword::SessionConfirmationsController.class_eval do
+  def after_sign_in!(signed_in, by_url)
+    return do_something_different if signed_in # Do something different if user signed in successfully
+    return nil if !by_url # Return control if failed to sign in with magic link
+
+    flash[:alert] = "Your code is not valid"
+    redirect_to main_app.demo_path # Redirect somewhere else if token is invalid
+  end
+end
+```
+
+## Generators
+NoPassword gem has four Ruby on Rails generators. The first one is the installer which performs the following actions.
+
+- Creates the gem initializer.
+- Mount the engine in the routes file.
+- Adds the gem Helpers into `ApplicationController`.
+- Copy NoPassword migrations to the application.
+- Generates the Tailwind config file and generates de CSS for NoPassword.
+
+```bash
+$ rails no_password:install
+```
+`copy_templates` generator copies gem templates to the application to allow views customization. Files are copied to `app/views` inside a `no_password` folder.
+
+```bash
+$ rails no_password:install:copy_templates
+```
+
+`migrations` generator copies the gem migrations to the application.
+
+```bash
+$ rails no_password:install:migrations
+```
+
+`tailwindcss::build` and `tailwindcss:watch` generators work together to generate de Tailwind CSS for gem views. Both generate a `tailwind.config.js` file that needs to be added to `.gitignore` file.
+```bash
+$ rails no_password:tailwindcss:build
+```
+`tailwindcss::build` generator connects automatically to the assets compilation process in production to generate the Tailwind CSS for the gem.
+
+```bash
+$ rails no_password:tailwindcss:watch
+```
+`tailwindcss:watch` generator is used in development to generate the Tailwind CSS for the gem. Add it to `Procfile.dev` file to ensure that CSS is generated in development when using Foreman or Overmind.
+
+```ruby
+no_password_css: bin/rails app:no_password:tailwindcss:watch
+```
+
+## Development and tests
+A development environment for this gem is easy to create, clone the repository and run the script `bin/setup` to install dependencies and prepare a database (Postgresql). The script assumes that you have [Overmind](https://github.com/DarthSim/overmind) installed, which used the `Procfile.dev` to start the sample application on port 3090.
+
+```bash
+$ bin/setup
+```
+
+![Aoorora Demo page](docs/dummy-app.png)
+
+To execute the gem tests, use the script `bin/ci`, which also runs the linters.
+
+```bash
+$ bin/ci
+```
+
+## License
+The gem is available as open source under the terms of the [MIT License](https://opensource.org/licenses/MIT).

data/Rakefile

@@ -0,0 +1,18 @@
+require "bundler/setup"
+
+APP_RAKEFILE = File.expand_path("test/dummy/Rakefile", __dir__)
+load "rails/tasks/engine.rake"
+
+load "rails/tasks/statistics.rake"
+
+require "bundler/gem_tasks"
+
+require "rake/testtask"
+
+Rake::TestTask.new(:test) do |t|
+  t.libs << "test"
+  t.pattern = "test/**/*_test.rb"
+  t.verbose = false
+end
+
+task default: :test

data/app/assets/config/no_password/manifest.js

@@ -0,0 +1,4 @@
+//= link_directory ../../stylesheets/no_password .css
+//= link_tree ../../images/no_password
+
+//= link_tree ../../javascripts/no_password .js

data/app/assets/config/no_password/tailwind.config.js

@@ -0,0 +1,61 @@
+const defaultTheme = require('tailwindcss/defaultTheme')
+
+function withOpacityValue(variableName) {
+  return ({opacityValue}) => {
+    opacityValue = opacityValue ?? 1;
+    return `rgba(var(${variableName}), ${opacityValue})`
+  }
+};
+
+module.exports = {
+  content: [
+  '/Users/marioch/Development/creditario/nopassword/app/views/**/*',
+'/Users/marioch/Development/creditario/nopassword/app/helpers/**/*',
+'/Users/marioch/Development/creditario/nopassword/app/controllers/**/*',
+'/Users/marioch/Development/creditario/nopassword/app/javascript/**/*.js',
+'/Users/marioch/Development/creditario/nopassword/app/assets/**/application.tailwind.css'
+  ],
+  theme: {
+    extend: {
+      fontFamily: {
+        sans: ['Inter var', ...defaultTheme.fontFamily.sans],
+      },
+      textColor: {
+        skin: {
+          inverted: withOpacityValue('--color-inverted'),
+          accented: withOpacityValue('--color-accented'),
+          'accented-hover': withOpacityValue('--color-accented-hover'),
+          base: withOpacityValue('--color-base'),
+          muted: withOpacityValue('--color-muted'),
+          dimmed: withOpacityValue('--color-dimmed'),
+          error: withOpacityValue('--color-error'),
+        }
+      },
+      backgroundColor: {
+        skin: {
+          'button-accented': withOpacityValue('--color-accented'),
+          'button-accented-hover': withOpacityValue('--color-accented-hover'),
+          'button-inverted': withOpacityValue('--color-inverted'),
+          'button-inverted-hover': withOpacityValue('--color-inverted-hover'),
+          muted: withOpacityValue('--color-muted'),
+          dimmed: withOpacityValue('--color-dimmed'),
+          accent: withOpacityValue('--color-accent'),
+        }
+      },
+      ringColor: {
+        skin: {
+          accented: withOpacityValue('--color-border-accented'),
+        }
+      },
+      borderColor: {
+        skin: {
+          base: withOpacityValue('--color-border-base'),
+          accented: withOpacityValue('--color-border-accented'),
+        }
+      }
+    },
+  },
+  plugins: [
+    require('@tailwindcss/forms')
+  ],
+}

data/app/assets/images/no_password/aoo.svg

@@ -0,0 +1 @@
+<svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 343.07 89.83"><defs><style>.cls-1{fill:#504689;}</style></defs><g id="Layer_2" data-name="Layer 2"><g id="Layer_1-2" data-name="Layer 1"><path class="cls-1" d="M148.41,29.06h6.85V60.77h-6.85V56.2c-2.6,3.62-6.28,5.39-11.1,5.39a14.83,14.83,0,0,1-11.16-4.82,16.49,16.49,0,0,1-4.63-11.85,16.39,16.39,0,0,1,4.63-11.86,14.83,14.83,0,0,1,11.16-4.82c4.82,0,8.5,1.77,11.1,5.32Zm-10,26a9.79,9.79,0,0,0,7.17-2.85,10.06,10.06,0,0,0,2.85-7.29,9.84,9.84,0,0,0-2.85-7.24,10.29,10.29,0,0,0-14.34,0,9.84,9.84,0,0,0-2.85,7.24,10.06,10.06,0,0,0,2.85,7.29A9.79,9.79,0,0,0,138.39,55.06Z"/><path class="cls-1" d="M165,56.77a16.12,16.12,0,0,1-4.88-11.85,16.74,16.74,0,1,1,33.48,0A16.82,16.82,0,0,1,165,56.77Zm11.86-1.84a9.57,9.57,0,0,0,7-2.85,9.75,9.75,0,0,0,2.85-7.16,9.75,9.75,0,0,0-2.85-7.17,10.09,10.09,0,0,0-14.08,0A9.75,9.75,0,0,0,167,44.92a9.75,9.75,0,0,0,2.85,7.16A9.57,9.57,0,0,0,176.86,54.93Z"/><path class="cls-1" d="M201.51,56.77a16.12,16.12,0,0,1-4.88-11.85,16.75,16.75,0,1,1,33.49,0,16.82,16.82,0,0,1-28.61,11.85Zm11.86-1.84a9.57,9.57,0,0,0,7-2.85,9.76,9.76,0,0,0,2.86-7.16,9.76,9.76,0,0,0-2.86-7.17,10.09,10.09,0,0,0-14.08,0,9.75,9.75,0,0,0-2.85,7.17,9.75,9.75,0,0,0,2.85,7.16A9.57,9.57,0,0,0,213.37,54.93Z"/><path class="cls-1" d="M241.79,34.39c1.71-3.94,5-5.9,9.76-5.9v7.42a9.91,9.91,0,0,0-6.85,1.9c-2,1.4-2.91,3.74-2.91,7v16h-6.85V29.06h6.85Z"/><path class="cls-1" d="M257.83,56.77a16.09,16.09,0,0,1-4.89-11.85,16.75,16.75,0,1,1,33.49,0,16.82,16.82,0,0,1-28.6,11.85Zm11.85-1.84a9.55,9.55,0,0,0,7-2.85,9.72,9.72,0,0,0,2.86-7.16,9.72,9.72,0,0,0-2.86-7.17,10.08,10.08,0,0,0-14.07,0,9.72,9.72,0,0,0-2.86,7.17,9.72,9.72,0,0,0,2.86,7.16A9.55,9.55,0,0,0,269.68,54.93Z"/><path class="cls-1" d="M298.1,34.39c1.71-3.94,5-5.9,9.77-5.9v7.42a9.88,9.88,0,0,0-6.85,1.9c-2,1.4-2.92,3.74-2.92,7v16h-6.85V29.06h6.85Z"/><path class="cls-1" d="M336.22,29.06h6.85V60.77h-6.85V56.2c-2.6,3.62-6.28,5.39-11.1,5.39A14.81,14.81,0,0,1,314,56.77a16.49,16.49,0,0,1-4.63-11.85A16.39,16.39,0,0,1,314,33.06a14.81,14.81,0,0,1,11.16-4.82c4.82,0,8.5,1.77,11.1,5.32Zm-10,26a9.75,9.75,0,0,0,7.16-2.85,10,10,0,0,0,2.86-7.29,9.8,9.8,0,0,0-2.86-7.24,10.28,10.28,0,0,0-14.33,0,9.84,9.84,0,0,0-2.85,7.24A10.06,10.06,0,0,0,319,52.21,9.75,9.75,0,0,0,326.2,55.06Z"/><path class="cls-1" d="M35,31.82l.1-.2A5,5,0,0,1,39.5,29H50.32a5,5,0,0,1,4.42,2.67l.1.2a8.89,8.89,0,0,0,7.85,4.74H89a45.48,45.48,0,0,0-1.6-6.12H57.27a5,5,0,0,1-4.42-2.67A9.14,9.14,0,0,0,46.62,23a8.3,8.3,0,0,0-1.71-.15,8.39,8.39,0,0,0-1.72.15A9.1,9.1,0,0,0,37,27.77a5,5,0,0,1-4.42,2.67H2.39A44.06,44.06,0,0,0,.78,36.56H27.13A8.86,8.86,0,0,0,35,31.82Z"/><path class="cls-1" d="M42.36,18.08a3.63,3.63,0,0,1,5.09,0,12.13,12.13,0,0,0,8.66,3.26h27a45.46,45.46,0,0,0-4.53-6.12H11.22a45.46,45.46,0,0,0-4.53,6.12h27A12.11,12.11,0,0,0,42.36,18.08Z"/><path class="cls-1" d="M44.91,89.83a44.73,44.73,0,0,0,22.63-6.12H22.28A44.67,44.67,0,0,0,44.91,89.83Z"/><path class="cls-1" d="M44.91,0A44.67,44.67,0,0,0,22.28,6.12H67.54A44.73,44.73,0,0,0,44.91,0Z"/><path class="cls-1" d="M65.25,45.66A5,5,0,0,1,60.82,43l-.1-.19a8.83,8.83,0,0,0-7.82-4.74h-16a8.85,8.85,0,0,0-7.83,4.74L29,43a5,5,0,0,1-4.42,2.68H0a45.56,45.56,0,0,0,.53,6.12H19.17A8.83,8.83,0,0,0,27,47l.1-.2a5,5,0,0,1,4.42-2.67h26.8a5,5,0,0,1,4.41,2.67l.1.2a8.84,8.84,0,0,0,7.83,4.74H89.29a45.54,45.54,0,0,0,.52-6.12Z"/><path class="cls-1" d="M68.8,58.21l-.1-.2a8.85,8.85,0,0,0-7.83-4.74H29A8.86,8.86,0,0,0,21.11,58l-.1.2a5,5,0,0,1-4.42,2.67H2.93A44.22,44.22,0,0,0,5.8,67h5.38A8.85,8.85,0,0,0,19,62.26l.11-.2a5,5,0,0,1,4.42-2.67H66.28a5,5,0,0,1,4.42,2.67l.1.2A8.86,8.86,0,0,0,78.64,67H84a45.47,45.47,0,0,0,2.88-6.12H73.22A5,5,0,0,1,68.8,58.21Z"/><path class="cls-1" d="M67,68.49H22.79c-4.5,0-6.89,0-10.7,6.12H77.72C73.91,68.49,71.53,68.49,67,68.49Z"/></g></g></svg>

data/app/assets/javascripts/no_password/application.js

@@ -0,0 +1,4 @@
+// Configure your import map in config/importmap.rb. Read more: https://github.com/rails/importmap-rails
+import "@hotwired/turbo-rails"
+
+import "controllers"

data/app/assets/javascripts/no_password/controllers/alert_controller.js

@@ -0,0 +1,31 @@
+import { Controller } from "@hotwired/stimulus"
+import { useTransition } from "stimulus-use"
+
+/**
+ * Alert Controller
+ *
+ * Este controlador funciona con el template _notification.html.erb que es utilizado
+ * en el layout NoPassword.
+ * Cuando hay información en el objeto Flash de Rails se muestra con una animación
+ * el mensaje y desaparece solo después de 10 segundos o cerrándolo con la X.
+ */
+
+export default class extends Controller {
+  static targets = ["notification"];
+
+  connect() {
+    let element = this.element;
+    if (this.hasNotificationTarget) {
+      element = this.notificationTarget
+    }
+    useTransition(this, { element: element })
+
+    this.enter()
+
+    setTimeout(this.close.bind(this), 10000)
+  }
+
+  close() {
+    this.leave()
+  }
+}

data/app/assets/javascripts/no_password/controllers/application.js

@@ -0,0 +1,10 @@
+import { Application } from "@hotwired/stimulus"
+
+const application = Application.start()
+
+// Configure Stimulus development experience
+application.warnings = true
+application.debug    = false
+window.Stimulus      = application
+
+export { application }

data/app/assets/javascripts/no_password/controllers/index.js

@@ -0,0 +1,11 @@
+// Import and register all your controllers from the importmap under controllers/*
+
+import { application } from "controllers/application"
+
+// Eager load all controllers defined in the import map under controllers/**/*_controller
+import { eagerLoadControllersFrom } from "@hotwired/stimulus-loading"
+eagerLoadControllersFrom("controllers", application)
+
+// Lazy load controllers as they appear in the DOM (remember not to preload controllers in import map!)
+// import { lazyLoadControllersFrom } from "@hotwired/stimulus-loading"
+// lazyLoadControllersFrom("controllers", application)

data/app/assets/stylesheets/no_password/application.css

@@ -0,0 +1,15 @@
+/*
+ * This is a manifest file that'll be compiled into application.css, which will include all the files
+ * listed below.
+ *
+ * Any CSS and SCSS file within this directory, lib/assets/stylesheets, vendor/assets/stylesheets,
+ * or any plugin's vendor/assets/stylesheets directory can be referenced here using a relative path.
+ *
+ * You're free to add application-wide styles to this file and they'll appear at the bottom of the
+ * compiled file so the styles you add here take precedence over styles defined in any other CSS/SCSS
+ * files in this directory. Styles in this file should be added after the last require_* statement.
+ * It is generally better to create a new file per style scope.
+ *
+ *= require_tree .
+ *= require_self
+ */