passkeys-rails 0.1.3 → 0.1.5

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 84469b812d394ac75533be6f935292932f43fceab669d0842be1daa077abe7ee
-  data.tar.gz: 8430b3679760bc10af93da66835b549646e50bca94bb25fc008ec067a37e32b0
+  metadata.gz: c1967aeb595e4864973402bf8108fe5a56b668678b8ed56aafbc403b164c628d
+  data.tar.gz: c96c2cd39bedbc138c1cd35248432d9cf7626c5a96007b91981741eb6f56e478
 SHA512:
-  metadata.gz: 654a20573b11dae74154bc3b8576f7204d2694218732ec88fdb80004286d20dc8ef0426fbf2f186efc33645ff9ce8604e32cdf59cae9b77712af271255807103
-  data.tar.gz: cb5380598b67e0969ec619570729cea1e534a8e100942adbb9d4389ce9b1eba0937e35d359dd3d8eb2646965e5343519c5404eccefbe606fed1f5a25d9ca6b08
+  metadata.gz: 3eb9182122196e3c94b5ebb78b0984785c39fb194b6d7f5f95432eb63e53482be0190fe24bc2af914a38377ee1a82df80932b11c16f918d155fdbaa731b5a052
+  data.tar.gz: e16475967c805796248fb3188667456e31fd833f841b98d16c28a6b5964e59170d349a018580a5e1ab312f18f7a9f7f16693b612d70d97f6ce91a5a77a9e5db4

data/CHANGELOG.md

@@ -1,3 +1,7 @@
+### 0.1.4
+
+* Changed namespace from Passkeys::Rails to PasskeysRails
+
 ### 0.1.3
 
 * More restructuring and fixed issue where autoloading failed

data/README.md

@@ -1,13 +1,13 @@
-[![Gem Version](https://badge.fury.io/rb/passkeys-rails.svg?cachebust=1)](https://badge.fury.io/rb/passkeys-rails)
+[![Gem Version](https://badge.fury.io/rb/passkeys-rails.svg?cachebust=5)](https://badge.fury.io/rb/passkeys-rails)
 [![Build Status](https://app.travis-ci.com/alliedcode/passkeys-rails.svg?branch=main)](https://travis-ci.org/alliedcode/passkeys-rails)
 [![codecov](https://codecov.io/gh/alliedcode/passkeys-rails/branch/main/graph/badge.svg?token=UHSNJDUL21)](https://codecov.io/gh/alliedcode/passkeys-rails)
 
-# Passkeys::Rails
+# PasskeysRails
 Devise is awesome, but we don't need all that UI/UX for PassKeys.  This gem is to make it easy to provide a back end that authenticates a mobile front end with PassKeys.
 
 ## Usage
 rails passkeys-rails::install
-Passkeys::Rails maintains an Agent model and related Passeys.  If you have a user model, add `include Passkeys::Rails::Authenticatable` to your model and include the name of that class (e.g. "User") in the authenticatable_class param when calling the register API.
+PasskeysRails maintains an Agent model and related Passeys.  If you have a user model, add `include PasskeysRails::Authenticatable` to your model and include the name of that class (e.g. "User") in the authenticatable_class param when calling the register API.
 
 ## Installation
 Add this line to your application's Gemfile:
@@ -34,7 +34,7 @@ Depending on your application's configuration some manual setup may be required:
 
         before_action :authenticate_passkey!, except: [:index]
 
-  2. Optionally include Passkeys::Rails::Authenticatable to the model(s) you are using as
+  2. Optionally include PasskeysRails::Authenticatable to the model(s) you are using as
      your user model(s).  For example, the User model.
 
   3. See the reference mobile applications for how to use passkeys-rails for passkey

data/app/controllers/concerns/passkeys_rails/authentication.rb

@@ -0,0 +1,30 @@
+module PasskeysRails
+  module Authentication
+    extend ActiveSupport::Concern
+
+    included do
+      rescue_from PasskeysRails::Error do |e|
+        render json: e.to_h, status: :unauthorized
+      end
+    end
+
+    def current_agent
+      @current_agent ||= (request.headers['HTTP_X_AUTH'].present? &&
+                         passkey_authentication_result.success? &&
+                         passkey_authentication_result.agent.registered? &&
+                         passkey_authentication_result.agent) || nil
+    end
+
+    def authenticate_passkey!
+      return if current_agent.present?
+
+      raise PasskeysRails::Error.new(:authentication,
+                                     code: :unauthorized,
+                                     message: "You are not authorized to access this resource.")
+    end
+
+    def passkey_authentication_result
+      @passkey_authentication_result ||= PasskeysRails::ValidateAuthToken.call(auth_token: request.headers['HTTP_X_AUTH'])
+    end
+  end
+end

data/app/controllers/passkeys_rails/application_controller.rb

@@ -0,0 +1,22 @@
+module PasskeysRails
+  class ApplicationController < ActionController::Base
+    rescue_from ::Interactor::Failure, with: :handle_interactor_failure
+    rescue_from ActionController::ParameterMissing, with: :handle_missing_parameter
+
+    protected
+
+    def handle_missing_parameter(error)
+      render_error(:authentication, 'missing_parameter', error.message)
+    end
+
+    def handle_interactor_failure(failure)
+      render_error(:authentication, failure.context.code, failure.context.message)
+    end
+
+    private
+
+    def render_error(context, code, message, status: :unprocessable_entity)
+      render json: { error: { context:, code:, message: } }, status:
+    end
+  end
+end

data/app/controllers/passkeys_rails/passkeys_controller.rb

@@ -0,0 +1,61 @@
+module PasskeysRails
+  class PasskeysController < ApplicationController
+    def challenge
+      result = PasskeysRails::BeginChallenge.call!(username: challenge_params[:username])
+
+      # Store the challenge so we can verify the future register or authentication request
+      session[:passkeys_rails] = result.session_data
+
+      render json: result.response.as_json
+    end
+
+    def register
+      result = PasskeysRails::FinishRegistration.call!(credential: attestation_credential_params.to_h,
+                                                       authenticatable_class:,
+                                                       username: session.dig(:passkeys_rails, :username),
+                                                       challenge: session.dig(:passkeys_rails, :challenge))
+
+      render json: { username: result.username, auth_token: result.auth_token }
+    end
+
+    def authenticate
+      result = PasskeysRails::FinishAuthentication.call!(credential: authentication_params.to_h,
+                                                         challenge: session.dig(:passkeys_rails, :challenge))
+
+      render json: { username: result.username, auth_token: result.auth_token }
+    end
+
+    def refresh
+      result = PasskeysRails::RefreshToken.call!(token: refresh_params[:auth_token])
+      render json: { username: result.username, auth_token: result.auth_token }
+    end
+
+    protected
+
+    def challenge_params
+      params.permit(:username)
+    end
+
+    def attestation_credential_params
+      credential = params.require(:credential)
+      credential.require(%i[id rawId type response])
+      credential.require(:response).require(%i[attestationObject clientDataJSON])
+      credential.permit(:id, :rawId, :type, { response: %i[attestationObject clientDataJSON] })
+    end
+
+    def authenticatable_class
+      params[:authenticatable_class]
+    end
+
+    def authentication_params
+      params.require(%i[id rawId type response])
+      params.require(:response).require(%i[authenticatorData clientDataJSON signature userHandle])
+      params.permit(:id, :rawId, :type, { response: %i[authenticatorData clientDataJSON signature userHandle] })
+    end
+
+    def refresh_params
+      params.require(:auth_token)
+      params.permit(:auth_token)
+    end
+  end
+end

data/app/interactors/{passkeys/rails → passkeys_rails}/begin_authentication.rb

@@ -1,4 +1,4 @@
-module Passkeys::Rails
+module PasskeysRails
   class BeginAuthentication
     include Interactor
 

data/app/interactors/{passkeys/rails → passkeys_rails}/begin_challenge.rb

@@ -1,4 +1,4 @@
-module Passkeys::Rails
+module PasskeysRails
   class BeginChallenge
     include Interactor
 

data/app/interactors/{passkeys/rails → passkeys_rails}/begin_registration.rb

@@ -1,18 +1,20 @@
-module Passkeys::Rails
+module PasskeysRails
   class BeginRegistration
     include Interactor
 
     delegate :username, to: :context
 
     def call
-      agent = create_unregistered_agent
+      agent = create_or_replace_unregistered_agent
 
       context.options = WebAuthn::Credential.options_for_create(user: { id: agent.webauthn_identifier, name: agent.username })
     end
 
     private
 
-    def create_unregistered_agent
+    def create_or_replace_unregistered_agent
+      Agent.unregistered.where(username:).destroy_all
+
       agent = Agent.create(username:, webauthn_identifier: WebAuthn.generate_user_id)
 
       context.fail!(code: :validation_errors, message: agent.errors.full_messages.to_sentence) unless agent.valid?

data/app/interactors/{passkeys/rails → passkeys_rails}/finish_authentication.rb

@@ -1,5 +1,5 @@
 # Finish authentication ceremony
-module Passkeys::Rails
+module PasskeysRails
   class FinishAuthentication
     include Interactor
 

data/app/interactors/{passkeys/rails → passkeys_rails}/finish_registration.rb

@@ -1,5 +1,5 @@
 # Finish registration ceremony
-module Passkeys::Rails
+module PasskeysRails
   class FinishRegistration
     include Interactor
 

data/app/interactors/{passkeys/rails → passkeys_rails}/generate_auth_token.rb

@@ -1,4 +1,4 @@
-module Passkeys::Rails
+module PasskeysRails
   class GenerateAuthToken
     include Interactor
 
@@ -12,12 +12,12 @@ module Passkeys::Rails
 
     def generate_auth_token
       JWT.encode(jwt_payload,
-                 Passkeys::Rails.auth_token_secret,
-                 Passkeys::Rails.auth_token_algorithm)
+                 PasskeysRails.auth_token_secret,
+                 PasskeysRails.auth_token_algorithm)
     end
 
     def jwt_payload
-      expiration = (Time.current + Passkeys::Rails.auth_token_expires_in).to_i
+      expiration = (Time.current + PasskeysRails.auth_token_expires_in).to_i
 
       payload = { agent_id: agent.id }
       payload[:exp] = expiration unless expiration.zero?

data/app/interactors/{passkeys/rails → passkeys_rails}/refresh_token.rb

@@ -1,5 +1,5 @@
 # Finish authentication ceremony
-module Passkeys::Rails
+module PasskeysRails
   class RefreshToken
     include Interactor
 

data/app/interactors/{passkeys/rails → passkeys_rails}/validate_auth_token.rb

@@ -1,4 +1,4 @@
-module Passkeys::Rails
+module PasskeysRails
   class ValidateAuthToken
     include Interactor
 
@@ -21,9 +21,9 @@ module Passkeys::Rails
 
     def payload
       JWT.decode(auth_token,
-                 Passkeys::Rails.auth_token_secret,
+                 PasskeysRails.auth_token_secret,
                  true,
-                 { required_claims: %w[exp agent_id], algorithm: Passkeys::Rails.auth_token_algorithm }).first
+                 { required_claims: %w[exp agent_id], algorithm: PasskeysRails.auth_token_algorithm }).first
     rescue JWT::ExpiredSignature
       context.fail!(code: :expired_token, message: "The token has expired")
     rescue StandardError => e

data/app/models/concerns/{passkeys/rails → passkeys_rails}/authenticatable.rb

@@ -1,6 +1,6 @@
 require 'active_support/concern'
 
-module Passkeys::Rails
+module PasskeysRails
   module Authenticatable
     extend ActiveSupport::Concern
 

data/app/models/{passkeys/rails → passkeys_rails}/agent.rb

@@ -1,4 +1,4 @@
-module Passkeys::Rails
+module PasskeysRails
   class Agent < ApplicationRecord
     belongs_to :authenticatable, polymorphic: true, optional: true
     has_many :passkeys

data/app/models/{passkeys/rails → passkeys_rails}/application_record.rb

@@ -1,4 +1,4 @@
-module Passkeys::Rails
+module PasskeysRails
   class ApplicationRecord < ActiveRecord::Base
     self.abstract_class = true
   end

data/app/models/{passkeys/rails → passkeys_rails}/error.rb

@@ -1,4 +1,4 @@
-module Passkeys::Rails
+module PasskeysRails
   class Error < StandardError
     attr_reader :hash
 

data/app/models/{passkeys/rails → passkeys_rails}/passkey.rb

@@ -1,4 +1,4 @@
-module Passkeys::Rails
+module PasskeysRails
   class Passkey < ApplicationRecord
     belongs_to :agent
     validates :identifier, presence: true, uniqueness: true

data/config/initializers/application_controller.rb

@@ -1,12 +1,12 @@
 # These should be autoloaded, but if these aren't required here, apps using this
-# gem will throw an exception that Passkeys::Rails::Authentication can't be found
-require_relative '../../app/controllers/concerns/passkeys/rails/authentication'
-require_relative '../../app/models/passkeys/rails/error'
+# gem will throw an exception that PasskeysRails::Authentication can't be found
+require_relative '../../app/controllers/concerns/passkeys_rails/authentication'
+require_relative '../../app/models/passkeys_rails/error'
 
 class ActionController::Base
-  include Passkeys::Rails::Authentication
+  include PasskeysRails::Authentication
 end
 
 class ActionController::API
-  include Passkeys::Rails::Authentication
+  include PasskeysRails::Authentication
 end

data/config/routes.rb

@@ -1,4 +1,4 @@
-Passkeys::Rails::Engine.routes.draw do
+PasskeysRails::Engine.routes.draw do
   post 'passkeys/challenge'
   post 'passkeys/register'
   post 'passkeys/authenticate'

data/lib/generators/passkeys_rails/USAGE

@@ -1,5 +1,5 @@
 Description:
-    Creates a Passkeys::Rails config file, updates the routes and adds migrations.
+    Creates a PasskeysRails config file, updates the routes and adds migrations.
 
 Example:
     bin/rails generate passkeys-rails:install

data/lib/generators/passkeys_rails/install_generator.rb

@@ -1,22 +1,20 @@
 require 'rails/generators'
 
-module Passkeys
-  module Rails
-    module Generators
-      class InstallGenerator < ::Rails::Generators::Base
-        source_root File.expand_path("templates", __dir__)
+module PasskeysRails
+  module Generators
+    class InstallGenerator < ::Rails::Generators::Base
+      source_root File.expand_path("templates", __dir__)
 
-        def copy_config
-          template 'passkeys_rails_config.rb', "config/initializers/passkeys_rails.rb"
-        end
+      def copy_config
+        template 'passkeys_rails_config.rb', "config/initializers/passkeys_rails.rb"
+      end
 
-        def add_routes
-          route 'mount Passkeys::Rails::Engine => "/passkeys_rails"'
-        end
+      def add_routes
+        route 'mount PasskeysRails::Engine => "/passkeys_rails"'
+      end
 
-        def show_readme
-          readme "README" if behavior == :invoke
-        end
+      def show_readme
+        readme "README" if behavior == :invoke
       end
     end
   end

data/lib/generators/passkeys_rails/templates/README

@@ -8,7 +8,7 @@ Depending on your application's configuration some manual setup may be required:
 
         before_action :authenticate_passkey!, except: [:index]
 
-  2. Optionally include Passkeys::Rails::Authenticatable to the model(s) you are using as
+  2. Optionally include PasskeysRails::Authenticatable to the model(s) you are using as
      your user model(s).  For example, the User model.
 
   3. See the reference mobile applications for how to use passkeys-rails for passkey

data/lib/generators/passkeys_rails/templates/passkeys_rails_config.rb

@@ -1,6 +1,6 @@
 require 'passkeys-rails'
 
-Passkeys::Rails.config do |c|
+PasskeysRails.config do |c|
   # Secret used to encode the auth token.
   # Changing this value will invalidate all tokens that have been fetched
   # through the API.

data/lib/passkeys-rails.rb

@@ -1,36 +1,34 @@
 # rubocop:disable Naming/FileName
-require 'passkeys/rails/engine'
-require 'passkeys/rails/version'
+require 'passkeys_rails/engine'
+require 'passkeys_rails/version'
 require_relative "generators/passkeys_rails/install_generator"
 
-module Passkeys
-  module Rails
-    # Secret used to encode the auth token.
-    # Rails.application.secret_key_base is used if none is defined here.
-    # Changing this value will invalidate all tokens that have been fetched
-    # through the API.
-    mattr_accessor(:auth_token_secret)
+module PasskeysRails
+  # Secret used to encode the auth token.
+  # Rails.application.secret_key_base is used if none is defined here.
+  # Changing this value will invalidate all tokens that have been fetched
+  # through the API.
+  mattr_accessor(:auth_token_secret)
 
-    # Algorithm used to generate the auth token.
-    # Changing this value will invalidate all tokens that have been fetched
-    # through the API.
-    mattr_accessor :auth_token_algorithm, default: "HS256"
+  # Algorithm used to generate the auth token.
+  # Changing this value will invalidate all tokens that have been fetched
+  # through the API.
+  mattr_accessor :auth_token_algorithm, default: "HS256"
 
-    # How long the auth token is valid before requiring a refresh or new login.
-    # Set it to 0 for no expiration (not recommended in production).
-    mattr_accessor :auth_token_expires_in, default: 30.days
+  # How long the auth token is valid before requiring a refresh or new login.
+  # Set it to 0 for no expiration (not recommended in production).
+  mattr_accessor :auth_token_expires_in, default: 30.days
 
-    class << self
-      def config
-        yield self
-      end
+  class << self
+    def config
+      yield self
     end
-
-    require 'passkeys/rails/railtie' if defined?(Rails)
   end
+
+  require 'passkeys_rails/railtie' if defined?(Rails)
 end
 
 ActiveSupport.on_load(:before_initialize) do
-  Passkeys::Rails.auth_token_secret ||= Rails.application.secret_key_base
+  PasskeysRails.auth_token_secret ||= Rails.application.secret_key_base
 end
 # rubocop:enable Naming/FileName

data/lib/{passkeys/rails → passkeys_rails}/engine.rb

@@ -6,9 +6,9 @@ require "interactor"
 require "jwt"
 require "webauthn"
 
-module Passkeys::Rails
+module PasskeysRails
   class Engine < ::Rails::Engine
-    isolate_namespace Passkeys::Rails
+    isolate_namespace PasskeysRails
 
     config.generators do |g|
       g.test_framework :rspec

data/lib/passkeys_rails/railtie.rb

@@ -0,0 +1,17 @@
+require 'passkeys-rails'
+require 'rails'
+
+module PasskeysRails
+  class Railtie < ::Rails::Railtie
+    railtie_name :passkeys_rails
+
+    rake_tasks do
+      path = File.expand_path(__dir__)
+      Dir.glob("#{path}/tasks/**/*.rake").each { |f| load f }
+    end
+
+    generators do
+      require "generators/passkeys_rails/install_generator"
+    end
+  end
+end

data/lib/passkeys_rails/version.rb

@@ -0,0 +1,3 @@
+module PasskeysRails
+  VERSION = "0.1.5".freeze
+end

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: passkeys-rails
 version: !ruby/object:Gem::Version
-  version: 0.1.3
+  version: 0.1.5
 platform: ruby
 authors:
 - Troy Anderson
 autorequire:
 bindir: bin
 cert_chain: []
-date: 2023-07-23 00:00:00.000000000 Z
+date: 2023-07-24 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: rails
@@ -351,25 +351,22 @@ files:
 - MIT-LICENSE
 - README.md
 - Rakefile
-- app/assets/config/passkeys_rails_manifest.js
-- app/assets/stylesheets/passkeys_rails/application.css
-- app/controllers/concerns/passkeys/rails/authentication.rb
-- app/controllers/passkeys/rails/application_controller.rb
-- app/controllers/passkeys/rails/passkeys_controller.rb
-- app/interactors/passkeys/rails/begin_authentication.rb
-- app/interactors/passkeys/rails/begin_challenge.rb
-- app/interactors/passkeys/rails/begin_registration.rb
-- app/interactors/passkeys/rails/finish_authentication.rb
-- app/interactors/passkeys/rails/finish_registration.rb
-- app/interactors/passkeys/rails/generate_auth_token.rb
-- app/interactors/passkeys/rails/refresh_token.rb
-- app/interactors/passkeys/rails/validate_auth_token.rb
-- app/models/concerns/passkeys/rails/authenticatable.rb
-- app/models/passkeys/rails/agent.rb
-- app/models/passkeys/rails/application_record.rb
-- app/models/passkeys/rails/error.rb
-- app/models/passkeys/rails/passkey.rb
-- app/views/layouts/passkeys/rails/application.html.erb
+- app/controllers/concerns/passkeys_rails/authentication.rb
+- app/controllers/passkeys_rails/application_controller.rb
+- app/controllers/passkeys_rails/passkeys_controller.rb
+- app/interactors/passkeys_rails/begin_authentication.rb
+- app/interactors/passkeys_rails/begin_challenge.rb
+- app/interactors/passkeys_rails/begin_registration.rb
+- app/interactors/passkeys_rails/finish_authentication.rb
+- app/interactors/passkeys_rails/finish_registration.rb
+- app/interactors/passkeys_rails/generate_auth_token.rb
+- app/interactors/passkeys_rails/refresh_token.rb
+- app/interactors/passkeys_rails/validate_auth_token.rb
+- app/models/concerns/passkeys_rails/authenticatable.rb
+- app/models/passkeys_rails/agent.rb
+- app/models/passkeys_rails/application_record.rb
+- app/models/passkeys_rails/error.rb
+- app/models/passkeys_rails/passkey.rb
 - config/initializers/application_controller.rb
 - config/routes.rb
 - db/migrate/20230620012530_create_passkeys_rails_agents.rb
@@ -379,9 +376,9 @@ files:
 - lib/generators/passkeys_rails/templates/README
 - lib/generators/passkeys_rails/templates/passkeys_rails_config.rb
 - lib/passkeys-rails.rb
-- lib/passkeys/rails/engine.rb
-- lib/passkeys/rails/railtie.rb
-- lib/passkeys/rails/version.rb
+- lib/passkeys_rails/engine.rb
+- lib/passkeys_rails/railtie.rb
+- lib/passkeys_rails/version.rb
 - lib/tasks/passkeys_rails_tasks.rake
 homepage: https://github.com/alliedcode/passkeys-rails
 licenses:

data/app/assets/config/passkeys_rails_manifest.js

@@ -1 +0,0 @@
-//= link_directory ../stylesheets/passkeys_rails .css

data/app/assets/stylesheets/passkeys_rails/application.css

@@ -1,15 +0,0 @@
-/*
- * This is a manifest file that'll be compiled into application.css, which will include all the files
- * listed below.
- *
- * Any CSS and SCSS file within this directory, lib/assets/stylesheets, vendor/assets/stylesheets,
- * or any plugin's vendor/assets/stylesheets directory can be referenced here using a relative path.
- *
- * You're free to add application-wide styles to this file and they'll appear at the bottom of the
- * compiled file so the styles you add here take precedence over styles defined in any other CSS/SCSS
- * files in this directory. Styles in this file should be added after the last require_* statement.
- * It is generally better to create a new file per style scope.
- *
- *= require_tree .
- *= require_self
- */

data/app/controllers/concerns/passkeys/rails/authentication.rb

@@ -1,29 +0,0 @@
-module Passkeys::Rails
-  module Authentication
-    extend ActiveSupport::Concern
-
-    included do
-      rescue_from Passkeys::Rails::Error do |e|
-        render json: e.to_h, status: :unauthorized
-      end
-    end
-
-    def current_agent
-      return nil if request.headers['HTTP_X_AUTH'].blank?
-
-      @current_agent ||= validated_auth_token&.success? && validated_auth_token&.agent
-    end
-
-    def authenticate_passkey!
-      return if validated_auth_token.success?
-
-      raise Passkeys::Rails::Error.new(:authentication,
-                                       code: :unauthorized,
-                                       message: "You are not authorized to access this resource.")
-    end
-
-    def validated_auth_token
-      @validated_auth_token ||= Passkeys::Rails::ValidateAuthToken.call(auth_token: request.headers['HTTP_X_AUTH'])
-    end
-  end
-end

data/app/controllers/passkeys/rails/application_controller.rb

@@ -1,24 +0,0 @@
-module Passkeys
-  module Rails
-    class ApplicationController < ActionController::Base
-      rescue_from ::Interactor::Failure, with: :handle_interactor_failure
-      rescue_from ActionController::ParameterMissing, with: :handle_missing_parameter
-
-      protected
-
-      def handle_missing_parameter(error)
-        render_error(:authentication, 'missing_parameter', error.message)
-      end
-
-      def handle_interactor_failure(failure)
-        render_error(:authentication, failure.context.code, failure.context.message)
-      end
-
-      private
-
-      def render_error(context, code, message, status: :unprocessable_entity)
-        render json: { error: { context:, code:, message: } }, status:
-      end
-    end
-  end
-end

data/app/controllers/passkeys/rails/passkeys_controller.rb

@@ -1,63 +0,0 @@
-module Passkeys
-  module Rails
-    class PasskeysController < ApplicationController
-      def challenge
-        result = Passkeys::Rails::BeginChallenge.call!(username: challenge_params[:username])
-
-        # Store the challenge so we can verify the future register or authentication request
-        session[:passkeys_rails] = result.session_data
-
-        render json: result.response.as_json
-      end
-
-      def register
-        result = Passkeys::Rails::FinishRegistration.call!(credential: attestation_credential_params.to_h,
-                                                           authenticatable_class:,
-                                                           username: session.dig(:passkeys_rails, :username),
-                                                           challenge: session.dig(:passkeys_rails, :challenge))
-
-        render json: { username: result.username, auth_token: result.auth_token }
-      end
-
-      def authenticate
-        result = Passkeys::Rails::FinishAuthentication.call!(credential: authentication_params.to_h,
-                                                             challenge: session.dig(:passkeys_rails, :challenge))
-
-        render json: { username: result.username, auth_token: result.auth_token }
-      end
-
-      def refresh
-        result = Passkeys::Rails::RefreshToken.call!(token: refresh_params[:auth_token])
-        render json: { username: result.username, auth_token: result.auth_token }
-      end
-
-      protected
-
-      def challenge_params
-        params.permit(:username)
-      end
-
-      def attestation_credential_params
-        credential = params.require(:credential)
-        credential.require(%i[id rawId type response])
-        credential.require(:response).require(%i[attestationObject clientDataJSON])
-        credential.permit(:id, :rawId, :type, { response: %i[attestationObject clientDataJSON] })
-      end
-
-      def authenticatable_class
-        params[:authenticatable_class]
-      end
-
-      def authentication_params
-        params.require(%i[id rawId type response])
-        params.require(:response).require(%i[authenticatorData clientDataJSON signature userHandle])
-        params.permit(:id, :rawId, :type, { response: %i[authenticatorData clientDataJSON signature userHandle] })
-      end
-
-      def refresh_params
-        params.require(:auth_token)
-        params.permit(:auth_token)
-      end
-    end
-  end
-end

data/app/views/layouts/passkeys/rails/application.html.erb

@@ -1,15 +0,0 @@
-<!DOCTYPE html>
-<html>
-<head>
-  <title>Mobile pass</title>
-  <%= csrf_meta_tags %>
-  <%= csp_meta_tag %>
-
-  <%= stylesheet_link_tag "passkeys_rails/application", media: "all" %>
-</head>
-<body>
-
-<%= yield %>
-
-</body>
-</html>

data/lib/passkeys/rails/railtie.rb

@@ -1,19 +0,0 @@
-require 'passkeys-rails'
-require 'rails'
-
-module Passkeys
-  module Rails
-    class Railtie < ::Rails::Railtie
-      railtie_name :passkeys_rails
-
-      rake_tasks do
-        path = File.expand_path(__dir__)
-        Dir.glob("#{path}/tasks/**/*.rake").each { |f| load f }
-      end
-
-      generators do
-        require "generators/passkeys_rails/install_generator"
-      end
-    end
-  end
-end

data/lib/passkeys/rails/version.rb

@@ -1,5 +0,0 @@
-module Passkeys
-  module Rails
-    VERSION = "0.1.3".freeze
-  end
-end