passwordless 0.2.0 → 0.2.1

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA1:
-  metadata.gz: d3bdc9fe84110cc587576344e493cbe16a0a9a74
-  data.tar.gz: 1d7558d9be99a4764c21eb6fda029a765a9540bb
+  metadata.gz: 717a5f675e50cbb57b59ee2138833bd2847dd71c
+  data.tar.gz: 2487b137a19da048afaabc061f648a7aee659e62
 SHA512:
-  metadata.gz: 6ec72945db7eec026bd640a3116c82fc9b5eea790cea4405bf9593815ed2e02edc3d91e58c82bdc52122a6190e512eb8013e51ca198d0b47cd961491d5f471aa
-  data.tar.gz: 0ca8c6e2e4d6bed6fab0351200acef5ac9e65a1526c2cd7503d751d967da8fd96d7200d005310600af693af00fde068aee7541b185e8969612342f32155dca4a
+  metadata.gz: b72b379c9acd55088adabd5f0a0bad5a42f24c1e55c600896e6284e8ff54b1f9e21c0111037c7d112c6bf5df6bdc3c1bed43298e0d6e8c1495a9af8c573a0753
+  data.tar.gz: 6234dd6216fd0fecd79860b3d3277460a665001e657656c3023dae4a1ea72ae1619750e27e6fde6115e39d5d1ecec712155271effa3a7da7e0595efcf6ae4745

data/README.md

@@ -1,5 +1,5 @@
 <p align='center'>
-  <img src='https://s3.brnbw.com/Passwordless-title-JO71NQv7Q0.svg' alt='Passwordless' />
+  <img src='https://s3.brnbw.com/Passwordless-title-gaIVkX0sPg.svg' alt='Passwordless' />
   <br />
   <br />
 </p>
@@ -91,7 +91,7 @@ See [the bundled views](https://github.com/mikker/passwordless/tree/master/app/v
 
 ## Registering new users
 
-Because your `User` record is just any other record, you just create one like you normally would. Passwordless provides a helper method you can use to sign in the created user after it is saved like so:
+Because your `User` record is like any other record, you create one like you normally would. Passwordless provides a helper method you can use to sign in the created user after it is saved like so:
 
 ```ruby
 class UsersController < ApplicationController

data/app/controllers/passwordless/sessions_controller.rb

@@ -1,3 +1,5 @@
+require 'bcrypt'
+
 module Passwordless
   class SessionsController < ApplicationController
     include ControllerHelpers
@@ -30,6 +32,9 @@ module Passwordless
     end
 
     def show
+      # Make it "slow" on purpose to make brute-force attacks more of a hassle
+      BCrypt::Password.create(params[:token])
+
       session = Session.valid.find_by!(
         authenticatable_type: authenticatable_classname,
         token: params[:token]

data/lib/passwordless/version.rb

@@ -1,3 +1,3 @@
 module Passwordless
-  VERSION = '0.2.0'
+  VERSION = '0.2.1'
 end

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: passwordless
 version: !ruby/object:Gem::Version
-  version: 0.2.0
+  version: 0.2.1
 platform: ruby
 authors:
 - Mikkel Malmberg
 autorequire: 
 bindir: bin
 cert_chain: []
-date: 2017-11-06 00:00:00.000000000 Z
+date: 2017-11-07 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: rails
@@ -24,6 +24,20 @@ dependencies:
     - - "~>"
       - !ruby/object:Gem::Version
         version: 5.1.4
+- !ruby/object:Gem::Dependency
+  name: bcrypt
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: 3.1.11
+  type: :runtime
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: 3.1.11
 - !ruby/object:Gem::Dependency
   name: sqlite3
   requirement: !ruby/object:Gem::Requirement