passkeys-rails 0.1.1 → 0.1.3

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: e23ace0ad232fd6a7a54c8f69ff05178b15cbd518bd06228430cd9fde0fdb496
-  data.tar.gz: 5f7f5e08e273e0192e036b0015f3d3d27fa42181af2c5394a267b937fc29a197
+  metadata.gz: 84469b812d394ac75533be6f935292932f43fceab669d0842be1daa077abe7ee
+  data.tar.gz: 8430b3679760bc10af93da66835b549646e50bca94bb25fc008ec067a37e32b0
 SHA512:
-  metadata.gz: a669fc055ae57baa578661cda651ea6938e7d77d6d294d8edbb4fc4c9662bfcbb44d385901bb3e891251b5b137d83f1d6ea304d16eb73b2c238f7ef306cf313e
-  data.tar.gz: b1b6334a3a2e586458394aae70d3da78c2b00126b1a52dfebc709311e22673207b47ce44a519168ca8252e18337b02cfd9b0f338ac748613c7fceb62d5675a44
+  metadata.gz: 654a20573b11dae74154bc3b8576f7204d2694218732ec88fdb80004286d20dc8ef0426fbf2f186efc33645ff9ce8604e32cdf59cae9b77712af271255807103
+  data.tar.gz: cb5380598b67e0969ec619570729cea1e534a8e100942adbb9d4389ce9b1eba0937e35d359dd3d8eb2646965e5343519c5404eccefbe606fed1f5a25d9ca6b08

data/CHANGELOG.md

@@ -0,0 +1,20 @@
+### 0.1.3
+
+* More restructuring and fixed issue where autoloading failed
+  during client app initialization.
+
+### 0.1.2
+
+* Restructured lib directory.
+
+* Fixed naming convention for gem/gemspec.
+
+* Fixed exception handling.
+
+### 0.1.1
+
+* Fixed dependency
+
+### 0.1.0
+
+* Initial release - looking for feedback

data/README.md

@@ -1,12 +1,13 @@
+[![Gem Version](https://badge.fury.io/rb/passkeys-rails.svg?cachebust=1)](https://badge.fury.io/rb/passkeys-rails)
 [![Build Status](https://app.travis-ci.com/alliedcode/passkeys-rails.svg?branch=main)](https://travis-ci.org/alliedcode/passkeys-rails)
 [![codecov](https://codecov.io/gh/alliedcode/passkeys-rails/branch/main/graph/badge.svg?token=UHSNJDUL21)](https://codecov.io/gh/alliedcode/passkeys-rails)
 
-# PasskeysRails
+# Passkeys::Rails
 Devise is awesome, but we don't need all that UI/UX for PassKeys.  This gem is to make it easy to provide a back end that authenticates a mobile front end with PassKeys.
 
 ## Usage
 rails passkeys-rails::install
-PasskeysRails maintains an Agent model and related Passeys.  If you have a user model, add `include PasskeysRails::Authenticatable` to your model and include the name of that class (e.g. "User") in the authenticatable_class param when calling the register API.
+Passkeys::Rails maintains an Agent model and related Passeys.  If you have a user model, add `include Passkeys::Rails::Authenticatable` to your model and include the name of that class (e.g. "User") in the authenticatable_class param when calling the register API.
 
 ## Installation
 Add this line to your application's Gemfile:
@@ -25,6 +26,20 @@ Or install it yourself as:
 $ gem install passkeys_rails
 ```
 
+Depending on your application's configuration some manual setup may be required:
+
+  1. Add a before_action to all controllers that require authentication to use.
+
+     For example:
+
+        before_action :authenticate_passkey!, except: [:index]
+
+  2. Optionally include Passkeys::Rails::Authenticatable to the model(s) you are using as
+     your user model(s).  For example, the User model.
+
+  3. See the reference mobile applications for how to use passkeys-rails for passkey
+     authentication.
+
 ## Contributing
 Contribution directions go here.
 

data/app/controllers/concerns/passkeys/rails/authentication.rb

@@ -0,0 +1,29 @@
+module Passkeys::Rails
+  module Authentication
+    extend ActiveSupport::Concern
+
+    included do
+      rescue_from Passkeys::Rails::Error do |e|
+        render json: e.to_h, status: :unauthorized
+      end
+    end
+
+    def current_agent
+      return nil if request.headers['HTTP_X_AUTH'].blank?
+
+      @current_agent ||= validated_auth_token&.success? && validated_auth_token&.agent
+    end
+
+    def authenticate_passkey!
+      return if validated_auth_token.success?
+
+      raise Passkeys::Rails::Error.new(:authentication,
+                                       code: :unauthorized,
+                                       message: "You are not authorized to access this resource.")
+    end
+
+    def validated_auth_token
+      @validated_auth_token ||= Passkeys::Rails::ValidateAuthToken.call(auth_token: request.headers['HTTP_X_AUTH'])
+    end
+  end
+end

data/app/controllers/passkeys/rails/application_controller.rb

@@ -0,0 +1,24 @@
+module Passkeys
+  module Rails
+    class ApplicationController < ActionController::Base
+      rescue_from ::Interactor::Failure, with: :handle_interactor_failure
+      rescue_from ActionController::ParameterMissing, with: :handle_missing_parameter
+
+      protected
+
+      def handle_missing_parameter(error)
+        render_error(:authentication, 'missing_parameter', error.message)
+      end
+
+      def handle_interactor_failure(failure)
+        render_error(:authentication, failure.context.code, failure.context.message)
+      end
+
+      private
+
+      def render_error(context, code, message, status: :unprocessable_entity)
+        render json: { error: { context:, code:, message: } }, status:
+      end
+    end
+  end
+end

data/app/controllers/passkeys/rails/passkeys_controller.rb

@@ -0,0 +1,63 @@
+module Passkeys
+  module Rails
+    class PasskeysController < ApplicationController
+      def challenge
+        result = Passkeys::Rails::BeginChallenge.call!(username: challenge_params[:username])
+
+        # Store the challenge so we can verify the future register or authentication request
+        session[:passkeys_rails] = result.session_data
+
+        render json: result.response.as_json
+      end
+
+      def register
+        result = Passkeys::Rails::FinishRegistration.call!(credential: attestation_credential_params.to_h,
+                                                           authenticatable_class:,
+                                                           username: session.dig(:passkeys_rails, :username),
+                                                           challenge: session.dig(:passkeys_rails, :challenge))
+
+        render json: { username: result.username, auth_token: result.auth_token }
+      end
+
+      def authenticate
+        result = Passkeys::Rails::FinishAuthentication.call!(credential: authentication_params.to_h,
+                                                             challenge: session.dig(:passkeys_rails, :challenge))
+
+        render json: { username: result.username, auth_token: result.auth_token }
+      end
+
+      def refresh
+        result = Passkeys::Rails::RefreshToken.call!(token: refresh_params[:auth_token])
+        render json: { username: result.username, auth_token: result.auth_token }
+      end
+
+      protected
+
+      def challenge_params
+        params.permit(:username)
+      end
+
+      def attestation_credential_params
+        credential = params.require(:credential)
+        credential.require(%i[id rawId type response])
+        credential.require(:response).require(%i[attestationObject clientDataJSON])
+        credential.permit(:id, :rawId, :type, { response: %i[attestationObject clientDataJSON] })
+      end
+
+      def authenticatable_class
+        params[:authenticatable_class]
+      end
+
+      def authentication_params
+        params.require(%i[id rawId type response])
+        params.require(:response).require(%i[authenticatorData clientDataJSON signature userHandle])
+        params.permit(:id, :rawId, :type, { response: %i[authenticatorData clientDataJSON signature userHandle] })
+      end
+
+      def refresh_params
+        params.require(:auth_token)
+        params.permit(:auth_token)
+      end
+    end
+  end
+end

data/app/interactors/{passkeys_rails → passkeys/rails}/begin_authentication.rb

@@ -1,4 +1,4 @@
-module PasskeysRails
+module Passkeys::Rails
   class BeginAuthentication
     include Interactor
 

data/app/interactors/{passkeys_rails → passkeys/rails}/begin_challenge.rb

@@ -1,4 +1,4 @@
-module PasskeysRails
+module Passkeys::Rails
   class BeginChallenge
     include Interactor
 

data/app/interactors/{passkeys_rails → passkeys/rails}/begin_registration.rb

@@ -1,4 +1,4 @@
-module PasskeysRails
+module Passkeys::Rails
   class BeginRegistration
     include Interactor
 

data/app/interactors/{passkeys_rails → passkeys/rails}/finish_authentication.rb

@@ -1,5 +1,5 @@
 # Finish authentication ceremony
-module PasskeysRails
+module Passkeys::Rails
   class FinishAuthentication
     include Interactor
 

data/app/interactors/{passkeys_rails → passkeys/rails}/finish_registration.rb

@@ -1,5 +1,5 @@
 # Finish registration ceremony
-module PasskeysRails
+module Passkeys::Rails
   class FinishRegistration
     include Interactor
 

data/app/interactors/{passkeys_rails → passkeys/rails}/generate_auth_token.rb

@@ -1,4 +1,4 @@
-module PasskeysRails
+module Passkeys::Rails
   class GenerateAuthToken
     include Interactor
 
@@ -12,12 +12,12 @@ module PasskeysRails
 
     def generate_auth_token
       JWT.encode(jwt_payload,
-                 PasskeysRails.auth_token_secret,
-                 PasskeysRails.auth_token_algorithm)
+                 Passkeys::Rails.auth_token_secret,
+                 Passkeys::Rails.auth_token_algorithm)
     end
 
     def jwt_payload
-      expiration = (Time.current + PasskeysRails.auth_token_expires_in).to_i
+      expiration = (Time.current + Passkeys::Rails.auth_token_expires_in).to_i
 
       payload = { agent_id: agent.id }
       payload[:exp] = expiration unless expiration.zero?

data/app/interactors/{passkeys_rails → passkeys/rails}/refresh_token.rb

@@ -1,5 +1,5 @@
 # Finish authentication ceremony
-module PasskeysRails
+module Passkeys::Rails
   class RefreshToken
     include Interactor
 

data/app/interactors/{passkeys_rails → passkeys/rails}/validate_auth_token.rb

@@ -1,4 +1,4 @@
-module PasskeysRails
+module Passkeys::Rails
   class ValidateAuthToken
     include Interactor
 
@@ -21,9 +21,9 @@ module PasskeysRails
 
     def payload
       JWT.decode(auth_token,
-                 PasskeysRails.auth_token_secret,
+                 Passkeys::Rails.auth_token_secret,
                  true,
-                 { required_claims: %w[exp agent_id], algorithm: PasskeysRails.auth_token_algorithm }).first
+                 { required_claims: %w[exp agent_id], algorithm: Passkeys::Rails.auth_token_algorithm }).first
     rescue JWT::ExpiredSignature
       context.fail!(code: :expired_token, message: "The token has expired")
     rescue StandardError => e

data/app/models/concerns/{passkeys_rails → passkeys/rails}/authenticatable.rb

@@ -1,6 +1,6 @@
 require 'active_support/concern'
 
-module PasskeysRails
+module Passkeys::Rails
   module Authenticatable
     extend ActiveSupport::Concern
 

data/app/models/{passkeys_rails → passkeys/rails}/agent.rb

@@ -1,4 +1,4 @@
-module PasskeysRails
+module Passkeys::Rails
   class Agent < ApplicationRecord
     belongs_to :authenticatable, polymorphic: true, optional: true
     has_many :passkeys

data/app/models/{passkeys_rails → passkeys/rails}/application_record.rb

@@ -1,4 +1,4 @@
-module PasskeysRails
+module Passkeys::Rails
   class ApplicationRecord < ActiveRecord::Base
     self.abstract_class = true
   end

data/app/models/{passkeys_rails → passkeys/rails}/error.rb

@@ -1,4 +1,4 @@
-module PasskeysRails
+module Passkeys::Rails
   class Error < StandardError
     attr_reader :hash
 

data/app/models/{passkeys_rails → passkeys/rails}/passkey.rb

@@ -1,4 +1,4 @@
-module PasskeysRails
+module Passkeys::Rails
   class Passkey < ApplicationRecord
     belongs_to :agent
     validates :identifier, presence: true, uniqueness: true

data/config/initializers/application_controller.rb

@@ -0,0 +1,12 @@
+# These should be autoloaded, but if these aren't required here, apps using this
+# gem will throw an exception that Passkeys::Rails::Authentication can't be found
+require_relative '../../app/controllers/concerns/passkeys/rails/authentication'
+require_relative '../../app/models/passkeys/rails/error'
+
+class ActionController::Base
+  include Passkeys::Rails::Authentication
+end
+
+class ActionController::API
+  include Passkeys::Rails::Authentication
+end

data/config/routes.rb

@@ -1,4 +1,4 @@
-PasskeysRails::Engine.routes.draw do
+Passkeys::Rails::Engine.routes.draw do
   post 'passkeys/challenge'
   post 'passkeys/register'
   post 'passkeys/authenticate'

data/lib/generators/passkeys_rails/USAGE

@@ -1,5 +1,5 @@
 Description:
-    Creates a PasskeysRails config file, updates the routes and adds migrations.
+    Creates a Passkeys::Rails config file, updates the routes and adds migrations.
 
 Example:
     bin/rails generate passkeys-rails:install

data/lib/generators/passkeys_rails/install_generator.rb

@@ -1,20 +1,22 @@
 require 'rails/generators'
 
-module PasskeysRails
-  module Generators
-    class InstallGenerator < Rails::Generators::Base
-      source_root File.expand_path("templates", __dir__)
+module Passkeys
+  module Rails
+    module Generators
+      class InstallGenerator < ::Rails::Generators::Base
+        source_root File.expand_path("templates", __dir__)
 
-      def copy_config
-        template 'passkeys_rails_config.rb', "config/initializers/passkeys_rails.rb"
-      end
+        def copy_config
+          template 'passkeys_rails_config.rb', "config/initializers/passkeys_rails.rb"
+        end
 
-      def add_routes
-        route 'mount PasskeysRails::Engine => "/passkeys_rails"'
-      end
+        def add_routes
+          route 'mount Passkeys::Rails::Engine => "/passkeys_rails"'
+        end
 
-      def show_readme
-        readme "README" if behavior == :invoke
+        def show_readme
+          readme "README" if behavior == :invoke
+        end
       end
     end
   end

data/lib/generators/passkeys_rails/templates/README

@@ -6,9 +6,9 @@ Depending on your application's configuration some manual setup may be required:
 
      For example:
 
-        before_action :authitencate_passkey!, except: [:index]
+        before_action :authenticate_passkey!, except: [:index]
 
-  2. Optionally include PasskeysRails::Authenticatable to the model(s) you are using as
+  2. Optionally include Passkeys::Rails::Authenticatable to the model(s) you are using as
      your user model(s).  For example, the User model.
 
   3. See the reference mobile applications for how to use passkeys-rails for passkey

data/lib/generators/passkeys_rails/templates/passkeys_rails_config.rb

@@ -1,6 +1,6 @@
-require 'passkeys_rails'
+require 'passkeys-rails'
 
-PasskeysRails.config do |c|
+Passkeys::Rails.config do |c|
   # Secret used to encode the auth token.
   # Changing this value will invalidate all tokens that have been fetched
   # through the API.

data/lib/passkeys/rails/engine.rb

@@ -0,0 +1,21 @@
+require "rails"
+require "active_support/core_ext/numeric/time"
+require "active_support/dependencies"
+
+require "interactor"
+require "jwt"
+require "webauthn"
+
+module Passkeys::Rails
+  class Engine < ::Rails::Engine
+    isolate_namespace Passkeys::Rails
+
+    config.generators do |g|
+      g.test_framework :rspec
+      g.fixture_replacement :factory_bot
+      g.factory_bot dir: 'spec/factories'
+      g.assets false
+      g.helper false
+    end
+  end
+end

data/lib/passkeys/rails/railtie.rb

@@ -0,0 +1,19 @@
+require 'passkeys-rails'
+require 'rails'
+
+module Passkeys
+  module Rails
+    class Railtie < ::Rails::Railtie
+      railtie_name :passkeys_rails
+
+      rake_tasks do
+        path = File.expand_path(__dir__)
+        Dir.glob("#{path}/tasks/**/*.rake").each { |f| load f }
+      end
+
+      generators do
+        require "generators/passkeys_rails/install_generator"
+      end
+    end
+  end
+end

data/lib/passkeys/rails/version.rb

@@ -0,0 +1,5 @@
+module Passkeys
+  module Rails
+    VERSION = "0.1.3".freeze
+  end
+end

data/lib/passkeys-rails.rb

@@ -0,0 +1,36 @@
+# rubocop:disable Naming/FileName
+require 'passkeys/rails/engine'
+require 'passkeys/rails/version'
+require_relative "generators/passkeys_rails/install_generator"
+
+module Passkeys
+  module Rails
+    # Secret used to encode the auth token.
+    # Rails.application.secret_key_base is used if none is defined here.
+    # Changing this value will invalidate all tokens that have been fetched
+    # through the API.
+    mattr_accessor(:auth_token_secret)
+
+    # Algorithm used to generate the auth token.
+    # Changing this value will invalidate all tokens that have been fetched
+    # through the API.
+    mattr_accessor :auth_token_algorithm, default: "HS256"
+
+    # How long the auth token is valid before requiring a refresh or new login.
+    # Set it to 0 for no expiration (not recommended in production).
+    mattr_accessor :auth_token_expires_in, default: 30.days
+
+    class << self
+      def config
+        yield self
+      end
+    end
+
+    require 'passkeys/rails/railtie' if defined?(Rails)
+  end
+end
+
+ActiveSupport.on_load(:before_initialize) do
+  Passkeys::Rails.auth_token_secret ||= Rails.application.secret_key_base
+end
+# rubocop:enable Naming/FileName

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: passkeys-rails
 version: !ruby/object:Gem::Version
-  version: 0.1.1
+  version: 0.1.3
 platform: ruby
 authors:
 - Troy Anderson
@@ -338,7 +338,7 @@ dependencies:
     - - "~>"
       - !ruby/object:Gem::Version
         version: 2.22.0
-description: Devise is awesome, but we don't need all that UI/UX for PassKeys.  This
+description: Devise is awesome, but we don't need all that UI/UX for PassKeys. This
   gem is to make it easy to provide a back end that authenticates a mobile front end
   with PassKeys.
 email:
@@ -347,29 +347,30 @@ executables: []
 extensions: []
 extra_rdoc_files: []
 files:
+- CHANGELOG.md
 - MIT-LICENSE
 - README.md
 - Rakefile
 - app/assets/config/passkeys_rails_manifest.js
 - app/assets/stylesheets/passkeys_rails/application.css
-- app/controllers/passkeys_rails/application_controller.rb
-- app/controllers/passkeys_rails/passkeys_controller.rb
-- app/helpers/passkeys_rails/application_helper.rb
-- app/helpers/passkeys_rails/passkeys_helper.rb
-- app/interactors/passkeys_rails/begin_authentication.rb
-- app/interactors/passkeys_rails/begin_challenge.rb
-- app/interactors/passkeys_rails/begin_registration.rb
-- app/interactors/passkeys_rails/finish_authentication.rb
-- app/interactors/passkeys_rails/finish_registration.rb
-- app/interactors/passkeys_rails/generate_auth_token.rb
-- app/interactors/passkeys_rails/refresh_token.rb
-- app/interactors/passkeys_rails/validate_auth_token.rb
-- app/models/concerns/passkeys_rails/authenticatable.rb
-- app/models/passkeys_rails/agent.rb
-- app/models/passkeys_rails/application_record.rb
-- app/models/passkeys_rails/error.rb
-- app/models/passkeys_rails/passkey.rb
-- app/views/layouts/passkeys_rails/application.html.erb
+- app/controllers/concerns/passkeys/rails/authentication.rb
+- app/controllers/passkeys/rails/application_controller.rb
+- app/controllers/passkeys/rails/passkeys_controller.rb
+- app/interactors/passkeys/rails/begin_authentication.rb
+- app/interactors/passkeys/rails/begin_challenge.rb
+- app/interactors/passkeys/rails/begin_registration.rb
+- app/interactors/passkeys/rails/finish_authentication.rb
+- app/interactors/passkeys/rails/finish_registration.rb
+- app/interactors/passkeys/rails/generate_auth_token.rb
+- app/interactors/passkeys/rails/refresh_token.rb
+- app/interactors/passkeys/rails/validate_auth_token.rb
+- app/models/concerns/passkeys/rails/authenticatable.rb
+- app/models/passkeys/rails/agent.rb
+- app/models/passkeys/rails/application_record.rb
+- app/models/passkeys/rails/error.rb
+- app/models/passkeys/rails/passkey.rb
+- app/views/layouts/passkeys/rails/application.html.erb
+- config/initializers/application_controller.rb
 - config/routes.rb
 - db/migrate/20230620012530_create_passkeys_rails_agents.rb
 - db/migrate/20230620012600_create_passkeys_rails_passkeys.rb
@@ -377,11 +378,10 @@ files:
 - lib/generators/passkeys_rails/install_generator.rb
 - lib/generators/passkeys_rails/templates/README
 - lib/generators/passkeys_rails/templates/passkeys_rails_config.rb
-- lib/passkeys_rails.rb
-- lib/passkeys_rails/engine.rb
-- lib/passkeys_rails/error_middleware.rb
-- lib/passkeys_rails/railtie.rb
-- lib/passkeys_rails/version.rb
+- lib/passkeys-rails.rb
+- lib/passkeys/rails/engine.rb
+- lib/passkeys/rails/railtie.rb
+- lib/passkeys/rails/version.rb
 - lib/tasks/passkeys_rails_tasks.rake
 homepage: https://github.com/alliedcode/passkeys-rails
 licenses:
@@ -406,7 +406,7 @@ required_rubygems_version: !ruby/object:Gem::Requirement
     - !ruby/object:Gem::Version
       version: '0'
 requirements: []
-rubygems_version: 3.4.12
+rubygems_version: 3.4.17
 signing_key:
 specification_version: 4
 summary: PassKey authentication back end with simple API

data/app/controllers/passkeys_rails/application_controller.rb

@@ -1,22 +0,0 @@
-module PasskeysRails
-  class ApplicationController < ActionController::Base
-    rescue_from ::Interactor::Failure, with: :handle_interactor_failure
-    rescue_from ActionController::ParameterMissing, with: :handle_missing_parameter
-
-    protected
-
-    def handle_missing_parameter(error)
-      render_error(:authentication, 'missing_parameter', error.message)
-    end
-
-    def handle_interactor_failure(failure)
-      render_error(:authentication, failure.context.code, failure.context.message)
-    end
-
-    private
-
-    def render_error(context, code, message, status: :unprocessable_entity)
-      render json: { error: { context:, code:, message: } }, status:
-    end
-  end
-end

data/app/controllers/passkeys_rails/passkeys_controller.rb

@@ -1,61 +0,0 @@
-module PasskeysRails
-  class PasskeysController < ApplicationController
-    def challenge
-      result = PasskeysRails::BeginChallenge.call!(username: challenge_params[:username])
-
-      # Store the challenge so we can verify the future register or authentication request
-      session[:passkeys_rails] = result.session_data
-
-      render json: result.response.as_json
-    end
-
-    def register
-      result = PasskeysRails::FinishRegistration.call!(credential: attestation_credential_params.to_h,
-                                                       authenticatable_class:,
-                                                       username: session.dig(:passkeys_rails, :username),
-                                                       challenge: session.dig(:passkeys_rails, :challenge))
-
-      render json: { username: result.username, auth_token: result.auth_token }
-    end
-
-    def authenticate
-      result = PasskeysRails::FinishAuthentication.call!(credential: authentication_params.to_h,
-                                                         challenge: session.dig(:passkeys_rails, :challenge))
-
-      render json: { username: result.username, auth_token: result.auth_token }
-    end
-
-    def refresh
-      result = PasskeysRails::RefreshToken.call!(token: refresh_params[:auth_token])
-      render json: { username: result.username, auth_token: result.auth_token }
-    end
-
-    protected
-
-    def challenge_params
-      params.permit(:username)
-    end
-
-    def attestation_credential_params
-      credential = params.require(:credential)
-      credential.require(%i[id rawId type response])
-      credential.require(:response).require(%i[attestationObject clientDataJSON])
-      credential.permit(:id, :rawId, :type, { response: %i[attestationObject clientDataJSON] })
-    end
-
-    def authenticatable_class
-      params[:authenticatable_class]
-    end
-
-    def authentication_params
-      params.require(%i[id rawId type response])
-      params.require(:response).require(%i[authenticatorData clientDataJSON signature userHandle])
-      params.permit(:id, :rawId, :type, { response: %i[authenticatorData clientDataJSON signature userHandle] })
-    end
-
-    def refresh_params
-      params.require(:auth_token)
-      params.permit(:auth_token)
-    end
-  end
-end

data/app/helpers/passkeys_rails/application_helper.rb

@@ -1,21 +0,0 @@
-module PasskeysRails
-  module ApplicationHelper
-    def current_agent
-      return nil if request.headers['HTTP_X_AUTH'].blank?
-
-      @current_agent ||= validated_auth_token&.success? && validated_auth_token&.agent
-    end
-
-    def authenticate!
-      return if validated_auth_token.success?
-
-      raise PasskeysRails::Error.new(:authentication,
-                                     code: :unauthorized,
-                                     message: "You are not authorized to access this resource.")
-    end
-
-    def validated_auth_token
-      @validated_auth_token ||= ValidateAuthToken.call(auth_token: request.headers['HTTP_X_AUTH'])
-    end
-  end
-end

data/app/helpers/passkeys_rails/passkeys_helper.rb

@@ -1,4 +0,0 @@
-module PasskeysRails
-  module PasskeysHelper
-  end
-end

data/lib/passkeys_rails/engine.rb

@@ -1,24 +0,0 @@
-require_relative 'error_middleware'
-module PasskeysRails
-  class Engine < ::Rails::Engine
-    isolate_namespace PasskeysRails
-
-    config.generators do |g|
-      g.test_framework :rspec
-      g.fixture_replacement :factory_bot
-      g.factory_bot dir: 'spec/factories'
-      g.assets false
-      g.helper false
-    end
-
-    config.to_prepare do
-      # include our helper methods in the host application's ApplicationController
-      ::ApplicationController.include ApplicationHelper
-    end
-
-    # provide a way to bail out of the render flow if needed
-    initializer 'passkeys_rails.configure.middleware' do |app|
-      app.middleware.use ErrorMiddleware
-    end
-  end
-end

data/lib/passkeys_rails/error_middleware.rb

@@ -1,17 +0,0 @@
-module PasskeysRails
-  class ErrorMiddleware
-    def initialize(app)
-      @app = app
-    end
-
-    def call(env)
-      begin
-        response = @app.call(env)
-      rescue Error => e
-        return [401, { 'Content-Type' => 'application/json' }, e.to_h.to_json]
-      end
-
-      response
-    end
-  end
-end

data/lib/passkeys_rails/railtie.rb

@@ -1,17 +0,0 @@
-require 'passkeys_rails'
-require 'rails'
-
-module PasskeysRails
-  class Railtie < Rails::Railtie
-    railtie_name :passkeys_rails
-
-    rake_tasks do
-      path = File.expand_path(__dir__)
-      Dir.glob("#{path}/tasks/**/*.rake").each { |f| load f }
-    end
-
-    generators do
-      require "generators/passkeys_rails/install_generator"
-    end
-  end
-end

data/lib/passkeys_rails/version.rb

@@ -1,3 +0,0 @@
-module PasskeysRails
-  VERSION = "0.1.1".freeze
-end

data/lib/passkeys_rails.rb

@@ -1,38 +0,0 @@
-require_relative "passkeys_rails/version"
-require_relative "passkeys_rails/engine"
-require_relative "generators/passkeys_rails/install_generator"
-require "rails"
-require "active_support/core_ext/numeric/time"
-require "active_support/dependencies"
-require "interactor"
-require "jwt"
-require "webauthn"
-
-module PasskeysRails
-  # Secret used to encode the auth token.
-  # Rails.application.secret_key_base is used if none is defined here.
-  # Changing this value will invalidate all tokens that have been fetched
-  # through the API.
-  mattr_accessor(:auth_token_secret)
-
-  # Algorithm used to generate the auth token.
-  # Changing this value will invalidate all tokens that have been fetched
-  # through the API.
-  mattr_accessor :auth_token_algorithm, default: "HS256"
-
-  # How long the auth token is valid before requiring a refresh or new login.
-  # Set it to 0 for no expiration (not recommended in production).
-  mattr_accessor :auth_token_expires_in, default: 30.days
-
-  class << self
-    def config
-      yield self
-    end
-  end
-
-  require 'passkeys_rails/railtie' if defined?(Rails)
-end
-
-ActiveSupport.on_load(:before_initialize) do
-  PasskeysRails.auth_token_secret ||= Rails.application.secret_key_base
-end