petergate 3.0.1 → 3.1.1

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 03b0b048bf5f3fa47709ea1ee62839a0a4fb793eaa5cd054435a4765f39d5529
-  data.tar.gz: 6252d26aa0f3009ceb36b7f77070920a58b4f8f16dc7d345c4ed5b8a151efe73
+  metadata.gz: acd5072223d85700246df5acd1445b292a918cf85a3b51b4ee42ae03c3648630
+  data.tar.gz: d084364761c8234ac5db4cc4434e88337913f07dea42cf7d2d3fdc15b3b8261d
 SHA512:
-  metadata.gz: 530ffc1078e0999fef2fd48d0041c8754fd4f7b6e95ed2d55ea187dc4affd1d7257071f28e3997d4b42457b090fe4f94f04ae8049bf5bfe6ec322e9cedfd3447
-  data.tar.gz: cf64dfce82b8358c162555a5c5bdde118520b4308d09f382c21b9a72a17b805e4a01b665644a6edb9006f17d886dd1a45ed772847b007f1f8dbb6a9cdca2f5af
+  metadata.gz: ffef6582b1bcd3d55d01c4655dff65a7d12ee47fbefeb32ba2339911db89827923a05e876396261c00849f966ecb36b3470247c057eb99dc60cf0822c8ee26f5
+  data.tar.gz: 9c4e7e84b9e07811651f6cd172f4b32b92540bd47a24a2ec986f028d64b7a3786d3a800aefe879f9d81f04700360a05f007d36148a22dea8b80b5456cc2d938e

data/.gitignore

@@ -6,8 +6,6 @@ Gemfile.lock
 /doc/
 /pkg/
 /spec/reports/
-dummy/log/*
-dummy/tmp/*
 *.sqlite3
 *.bundle
 *.so
@@ -16,3 +14,5 @@ dummy/tmp/*
 mkmf.log
 *.gem
 .DS_Store
+/tmp/
+gemfiles/*.lock

data/.ruby-version

@@ -1 +1 @@
-3.4.2
+3.2.0

data/Gemfile

@@ -1,43 +1,16 @@
-source 'https://rubygems.org'
-ruby '3.2.0'
+source "https://rubygems.org"
 
-# Specify your gem's dependencies in petergate.gemspec
+# Declares the runtime dependencies.
 gemspec
-# Bundle edge Rails instead: gem 'rails', github: 'rails/rails'
-gem 'rails', '~> 6.0.3.4'
-
-# Use sqlite3 as the database for Active Record
-gem 'sqlite3'
-# Use SCSS for stylesheets
-gem 'sass-rails', '~> 5.0.4'
-# Use Uglifier as compressor for JavaScript assets
-gem 'uglifier', '>= 1.3.0'
-# See https://github.com/sstephenson/execjs#readme for more supported runtimes
-# gem 'therubyracer',  platforms: :ruby
-
-# Use jquery as the JavaScript library
-gem 'jquery-rails'
-# Turbolinks makes following links in your web application faster. Read more: https://github.com/rails/turbolinks
-gem 'turbolinks'
-gem "minitest-rails", "~> 6.0.1"
-gem "minitest-reporters"
-# Build JSON APIs with ease. Read more: https://github.com/rails/jbuilder
-gem 'jbuilder', '~> 2.0'
-# bundle exec rake doc:rails generates the API under doc/api.
-gem 'sdoc', '~> 0.4.0',          group: :doc
-
-# Spring speeds up development by keeping your application running in the background. Read more: https://github.com/rails/spring
-gem 'devise'
-
-# Use ActiveModel has_secure_password
-# gem 'bcrypt', '~> 3.1.7'
-
-# Use unicorn as the app server
-# gem 'unicorn'
-
-# Use Capistrano for deployment
-# gem 'capistrano-rails', group: :development
-
-# Use debugger
-# gem 'debugger', group: [:development, :test]
 
+# The default development target. gemfiles/ holds the CI matrix across the
+# supported Rails versions. The suite boots a minimal Rails app instead of a
+# dummy app, so it needs the full framework plus a database to talk to.
+gem "rails",   "~> 8.1"
+gem "sqlite3", "~> 2.0"
+gem "rake",    ">= 13.0"
+
+# Devise is not a dependency of the gem -- petergate only needs the three
+# authentication methods the README documents. It is here so one test can prove
+# a real Devise app satisfies that contract.
+gem "devise"

data/README.md

@@ -1,15 +1,19 @@
-[![Petergate](https://github.com/elorest/petergate/blob/master/dummy/public/petergate.png)](https://github.com/elorest/petergate)
+[![Petergate](https://raw.githubusercontent.com/elorest/petergate/master/assets/petergate.png)](https://github.com/elorest/petergate)
 
-[![Build Status](https://travis-ci.org/elorest/petergate.svg)](https://travis-ci.org/dburnsii/petergate)
-[![Gitter](https://badges.gitter.im/Join%20Chat.svg)](https://gitter.im/isaacsloan/petergate?utm_source=badge&utm_medium=badge&utm_campaign=pr-badge&utm_content=badge)
+[![CI](https://github.com/elorest/petergate/actions/workflows/ci.yml/badge.svg)](https://github.com/elorest/petergate/actions/workflows/ci.yml)
 [![Gem Version](https://badge.fury.io/rb/petergate.svg)](http://badge.fury.io/rb/petergate)
 
 
 
-> If you like the straight forward and effective nature of [Strong Parameters](https://github.com/rails/strong_parameters) and suspect that [cancan](https://github.com/ryanb/cancan) might be overkill for your project then you'll love [Petergate's](https://github.com/isaacsloan/petergate) easy to use and read action and content based authorizations."
+> If you like the straight forward and effective nature of [Strong Parameters](https://github.com/rails/strong_parameters) and suspect that [cancan](https://github.com/ryanb/cancan) might be overkill for your project then you'll love [Petergate's](https://github.com/elorest/petergate) easy to use and read action and content based authorizations.
 >
 > -- <cite>1 Peter 3:41</cite>
 
+Requirements
+------
+Rails 7.1 through 8.1 on Ruby 3.2 through 3.4 are covered by CI. Older Rails
+versions are permitted by the gemspec but are not verified.
+
 Installation
 ------
 ##### Get the gem
@@ -27,16 +31,19 @@ Or install it yourself as:
 
 ##### Prerequisites: Setup Authentication (Devise)
 
-Make sure your user model is defined in
-    app/models/user.rb
-and called User.
+The generator writes into `app/models/user.rb`, so a model named `User` is the
+supported setup.
 
-If you're using [devise](https://github.com/plataformatec/devise) you're in luck, otherwise you'll have to add following methods to your project:
+If you're using [devise](https://github.com/heartcombo/devise) you're in luck,
+otherwise you'll have to add the following methods to your project:
 
     current_user
     after_sign_in_path_for(current_user)
     authenticate_user!
 
+You also need a `root` route: a refused visitor who isn't signed in is sent
+there.
+
 ##### Run the generators
 
     rails g petergate:install
@@ -60,18 +67,32 @@ petergate(roles: [:admin, :editor], multiple: false)
 ############################################################################################
 ```
 
+With `multiple: false` the role is stored in the column as a plain string. With
+`multiple: true` the roles are stored as a YAML array, so query them through the
+generated scopes below rather than by matching the column directly.
+
 ##### Instance Methods
 
 ```ruby
 user.role => :editor
 user.roles => [:editor, :user]
 user.roles=(v) #sets roles
-user.available_roles => [:admin, :editor]
-user.has_roles?(:admin, :editors) # returns true if user is any of roles passed in as params.
+user.available_roles => [:admin, :editor, :user]
+user.has_roles?(:admin, :editor) # true if the user has any of the roles passed in
+user.has_role?(:admin)           # alias of has_roles?
 ```
 ##### Class Methods
 
-`User.#{role}_editors => #list of editors. Method is created for all roles. Roles [admin, :teacher] will have corresponding methods role_admins, role_teachers, etc.`
+A scope is defined for each configured role, named `role_` plus the pluralized
+role name:
+
+```ruby
+User.role_admins   # => users holding :admin
+User.role_editors  # => users holding :editor
+```
+
+So `petergate(roles: [:admin, :teacher])` gives you `User.role_admins` and
+`User.role_teachers`.
 
 #### Controllers
 
@@ -84,26 +105,54 @@ access all: [:show, :index], user: {except: [:destroy]}, company_admin: :all
 access [:all, :user] => [:show, :index]
 ```
 
+The key is a role, or an array of roles. `all` covers everyone, including
+visitors who aren't signed in. The value is one of:
+
+| Value | Meaning |
+| --- | --- |
+| `[:show, :index]` | just those actions |
+| `:all` | every action on the controller |
+| `{except: [:destroy]}` | every action except those |
+
+`:root_admin` is not a rule you write -- a user holding it bypasses the rules
+entirely.
+
+Rules declared on a parent controller are inherited by its subclasses, so a
+single `access` line on `ApplicationController` can cover a whole app.
+
+`access` works the same way in an `ActionController::API` controller. There a
+refused request answers with a bare `403`, and an unauthenticated one with
+`401`, instead of redirecting.
+
 Inside your views you can use logged_in?(:admin, :customer, :etc) to show or hide content.
 
 ```erb
 <%= link_to "destroy", destroy_listing_path(listing) if logged_in?(:admin, :customer, :etc) %>
 ```
 
+`logged_in?` tests roles. To ask only whether anyone is signed in, without
+caring which role they hold, use `user_logged_in?`.
+
 If you need to access available roles within your project you can by calling:
 
 ```ruby
-User::ROLES
-# or from an instance
-User.first.available_roles
-# ROLES is a CONSTANT and will still work from within the User model instance methods
-# like in this default setter:
-
-def roles=(v)
-  self[:roles] = v.map(&:to_sym).to_a.select{|r| r.size > 0 && ROLES.include?(r)}
-end
+User::ROLES              # => [:admin, :editor, :user]
+User.first.available_roles # the same list, from an instance
+```
+
+`ROLES` is a constant on the model, so it is also reachable from your own
+instance methods. A subclass shares its parent's roles.
+
+#### Denying access yourself
+
+Two helpers are available in controllers and in views:
+
+```ruby
+forbidden!     # refuse someone who is signed in
+unauthorized!  # send a visitor to authentication, via authenticate_user!
 ```
-If you need to deny access you can use the forbidden! method:
+
+`forbidden!` is the one you want in your own filters:
 
 ```ruby
 before_action :check_active_user
@@ -112,16 +161,39 @@ def check_active_user
   forbidden! unless current_user.active
 end
 ```
-If you want to change the `permission denied` message you can add to the access line:
+
+Both answer a `js`, `json` or `xml` request with a bare `403` or `401` rather
+than a redirect, and do the same in an `ActionController::API` controller,
+which has no format negotiation to offer.
+
+##### The denial message
+
+`forbidden!` takes one for a single call, and `access` sets a default for the
+whole controller:
 
 ```ruby
+forbidden! "Your account is suspended"
+
 access user: [:show, :index], message: "You shall not pass"
 ```
 
+The message is resolved in this order, first match winning:
+
+| | Source |
+| --- | --- |
+| 1 | the argument passed to `forbidden!` |
+| 2 | an `msg` request header |
+| 3 | the `message:` option on `access` |
+| 4 | `"Permission Denied"` |
+
+Note the second entry: the `msg` header is read off the request, so a caller
+can replace a message you set with `message:`. It is undocumented legacy
+behaviour rather than something to rely on.
+
 #### User Admin Example Form for Multiple Roles
 
 ```slim
-= form_for @user do |f| 
+= form_with model: @user do |f| 
   - if @user.errors.any? 
     #error_explanation 
       h2 = "#{pluralize(@user.errors.count, "error")} prohibited this user from being saved:" 
@@ -135,10 +207,10 @@ access user: [:show, :index], message: "You shall not pass"
   - if @user.new_record? || params[:passwd] 
     .field 
       = f.label :password 
-      = f.text_field :password 
+      = f.password_field :password 
     .field 
       = f.label :password_confirmation 
-      = f.text_field :password_confirmation 
+      = f.password_field :password_confirmation 
   .field 
     = f.label :roles 
     = f.select :roles, @user.available_roles, {}, {multiple: true} 
@@ -148,7 +220,7 @@ access user: [:show, :index], message: "You shall not pass"
 #### User Admin Example Form for Single Role Mode
 
 ```slim
-= form_for @user do |f| 
+= form_with model: @user do |f| 
   - if @user.errors.any? 
     #error_explanation 
       h2 = "#{pluralize(@user.errors.count, "error")} prohibited this user from being saved:" 
@@ -162,24 +234,35 @@ access user: [:show, :index], message: "You shall not pass"
   - if @user.new_record? || params[:passwd] 
     .field 
       = f.label :password 
-      = f.text_field :password 
+      = f.password_field :password 
     .field 
       = f.label :password_confirmation 
-      = f.text_field :password_confirmation 
+      = f.password_field :password_confirmation 
   .field 
     = f.label :role 
     = f.select :role, @user.available_roles
   .actions = f.submit 
 ```
+Development
+-------
+
+    bundle install
+    bundle exec rake test
+
+The suite boots a small Rails application in memory rather than carrying a
+dummy app. To run it against a specific Rails version:
+
+    BUNDLE_GEMFILE=gemfiles/rails_7_1.gemfile bundle exec rake test
+
 Credits
 -------
 
-PeterGate is written and maintaned by Isaac Sloan and friends.
+PeterGate is written and maintained by Isaac Sloan and friends.
 
 
 ## Contributing
 
-1. Fork it ( https://github.com/isaacsloan/petergate/fork )
+1. Fork it ( https://github.com/elorest/petergate/fork )
 2. Create your feature branch (`git checkout -b my-new-feature`)
 3. Commit your changes (`git commit -am 'Add some feature'`)
 4. Push to the branch (`git push origin my-new-feature`)

data/Rakefile

@@ -1,9 +1,12 @@
 require "bundler/gem_tasks"
-require 'rake/testtask'
+require "rake/testtask"
 
 Rake::TestTask.new(:test) do |t|
-  t.pattern = 'dummy/test/**/*_test.rb'
+  t.libs << "lib"
+  t.libs << "test"
+  t.pattern = "test/**/*_test.rb"
   t.verbose = false
+  t.warning = false
 end
 
 task default: :test

data/lib/generators/petergate/install_generator.rb

@@ -5,7 +5,6 @@ module Petergate
     class InstallGenerator < Rails::Generators::Base
       include Rails::Generators::Migration
       source_root File.expand_path("../templates", __FILE__)
-      class_option :orm
 
       desc "Sets up rails project for Petergate Authorizations"
       def self.next_migration_number(path)

data/lib/petergate/action_controller/base.rb

@@ -1,3 +1,6 @@
+# Included into ActionController::Base *and* ActionController::API: Rails runs
+# the :action_controller load hook for both. See the hook at the bottom of this
+# file for why that hook rather than the Base/API-specific pair.
 module Petergate
   module ActionController
     module Base
@@ -63,7 +66,7 @@ module Petergate
 
       def self.included(base)
         base.extend(ClassMethods)
-        base.helper_method :logged_in?, :forbidden!, :unauthorized!
+        base.helper_method :logged_in?, :forbidden!, :unauthorized! if base.respond_to?(:helper_method)
       end
 
       def parse_permission_rules(rules)
@@ -107,6 +110,10 @@ module Petergate
       end
 
       def unauthorized!
+        # ActionController::API has no MimeResponds, so no respond_to; a bare
+        # status is the right answer for an API caller regardless.
+        return head(:unauthorized) if is_a?(::ActionController::API)
+
         respond_to do |format|
           format.any(:js, :json, :xml) do 
             head(:unauthorized)
@@ -118,13 +125,24 @@ module Petergate
       end
 
       def forbidden!(msg = nil)
+        # See unauthorized! -- API controllers cannot respond_to.
+        return head(:forbidden) if is_a?(::ActionController::API)
+
         respond_to do |format|
           format.any(:js, :json, :xml) do 
             head(:forbidden)
           end
           format.html do
-            destination = current_user.present? ? request.headers['Referrer'] || after_sign_in_path_for(current_user) : root_path
-            redirect_to destination, notice: (msg || request.headers['msg'] || custom_message)
+            notice = msg || request.headers['msg'] || custom_message
+
+            # The Referer is deliberately not consulted. The original line read
+            # request.headers['Referrer'] -- a misspelling of the HTTP header --
+            # so it was always nil and this always resolved to the signed-in
+            # destination. Honouring the real header now would change where
+            # every existing app sends a refused user, and would hand the
+            # redirect target to the caller.
+            destination = current_user.present? ? after_sign_in_path_for(current_user) : root_path
+            redirect_to destination, notice: notice
           end
         end
       end
@@ -132,6 +150,14 @@ module Petergate
   end
 end
 
-class ActionController::Base
+# Hook in lazily rather than reopening ActionController::Base at require time:
+# eager reopening forces ActionPack to load during boot, and it misses API
+# controllers entirely.
+#
+# :action_controller rather than the newer :action_controller_base and
+# :action_controller_api pair. Rails runs this one for both Base and API, and
+# it predates the other two (added in 5.2) -- so on an older Rails the pair
+# would simply never fire and petergate would silently stop working.
+ActiveSupport.on_load(:action_controller) do
   include Petergate::ActionController::Base
 end

data/lib/petergate/active_record/base.rb

@@ -1,3 +1,5 @@
+# Included into ActiveRecord::Base, through the load hook at the bottom of
+# this file.
 module Petergate
   module ActiveRecord
     module Base
@@ -19,7 +21,10 @@ module Petergate
           end
 
           instance_eval do
-            const_set('ROLES', (roles + [:user]).uniq.map(&:to_sym)) unless defined?(User::ROLES)
+            # Own constant only, so each model that calls petergate gets its own
+            # roles rather than deferring to whichever model loaded first.
+            # Configuring the same model twice keeps the first set.
+            const_set('ROLES', (roles + [:user]).uniq.map(&:to_sym)) unless const_defined?(:ROLES, false)
 
             if multiple
               roles.each do |role|
@@ -39,7 +44,7 @@ module Petergate
 
             if multiple
               def roles=(v)
-                self[:roles] = (Array(v).map(&:to_sym).select{|r| r.size > 0 && available_roles.include?(r)} + [:user]).uniq
+                self[:roles] = (Array(v).compact.map(&:to_sym).select{|r| r.size > 0 && available_roles.include?(r)} + [:user]).uniq
               end
             else
               def roles=(v)
@@ -48,8 +53,8 @@ module Petergate
                       v
                     when "Array"
                       v.first
-                    end.to_sym
-                self[:roles] = available_roles.include?(r) ? r : :user 
+                    end&.to_sym
+                self[:roles] = available_roles.include?(r) ? r : :user
               end
             end
 
@@ -82,6 +87,8 @@ module Petergate
   end
 end
 
-class ActiveRecord::Base
+# Hook in lazily so ActiveRecord::Base is not forced to load during boot,
+# before the app has finished applying its own `config.active_record` settings.
+ActiveSupport.on_load(:active_record) do
   include Petergate::ActiveRecord::Base
 end

data/lib/petergate/version.rb

@@ -1,3 +1,3 @@
 module Petergate
-  VERSION = "3.0.1"
+  VERSION = "3.1.1"
 end

data/lib/templates/rails/scaffold_controller/controller.rb

@@ -1,10 +1,9 @@
-<% if namespaced? -%>
-require_dependency "<%= namespaced_file_path %>/application_controller"
-
-<% end -%>
+<%# 422 is written numerically on purpose. Rack 2.2 knows only
+    :unprocessable_entity and Rack 3.2 only :unprocessable_content, and this
+    template has to serve apps on either. -%>
 <% module_namespacing do -%>
 class <%= controller_class_name %>Controller < ApplicationController
-  before_action :set_<%= singular_table_name %>, only: [:show, :edit, :update, :destroy]
+  before_action :set_<%= singular_table_name %>, only: %i[ show edit update destroy ]
   access all: [:index, :show, :new, :edit, :create, :update, :destroy], user: :all
 
   # GET <%= route_url %>
@@ -32,23 +31,23 @@ class <%= controller_class_name %>Controller < ApplicationController
     if @<%= orm_instance.save %>
       redirect_to @<%= singular_table_name %>, notice: <%= "'#{human_name} was successfully created.'" %>
     else
-      render :new
+      render :new, status: 422
     end
   end
 
   # PATCH/PUT <%= route_url %>/1
   def update
     if @<%= orm_instance.update("#{singular_table_name}_params") %>
-      redirect_to @<%= singular_table_name %>, notice: <%= "'#{human_name} was successfully updated.'" %>
+      redirect_to @<%= singular_table_name %>, notice: <%= "'#{human_name} was successfully updated.'" %>, status: :see_other
     else
-      render :edit
+      render :edit, status: 422
     end
   end
 
   # DELETE <%= route_url %>/1
   def destroy
     @<%= orm_instance.destroy %>
-    redirect_to <%= index_helper %>_url, notice: <%= "'#{human_name} was successfully destroyed.'" %>
+    redirect_to <%= index_helper %>_path, notice: <%= "'#{human_name} was successfully destroyed.'" %>, status: :see_other
   end
 
   private
@@ -57,10 +56,10 @@ class <%= controller_class_name %>Controller < ApplicationController
       @<%= singular_table_name %> = <%= orm_class.find(class_name, "params[:id]") %>
     end
 
-    # Only allow a trusted parameter "white list" through.
+    # Only allow a list of trusted parameters through.
     def <%= "#{singular_table_name}_params" %>
       <%- if attributes_names.empty? -%>
-      params[:<%= singular_table_name %>]
+      params.fetch(:<%= singular_table_name %>, {})
       <%- else -%>
       params.require(:<%= singular_table_name %>).permit(<%= attributes_names.map { |name| ":#{name}" }.join(', ') %>)
       <%- end -%>

data/petergate.gemspec

@@ -10,15 +10,38 @@ Gem::Specification.new do |spec|
   spec.email         = ["isaac@isaacsloan.com"]
   spec.summary       = %q{Authorization system allowing verbose easy read controller syntax.}
   spec.description   = %q{If you like the straight forward and effective nature of Strong Parameters and suspect that CanCan might be overkill for your project then you'll love Petergate's easy to use and read action and content based authorizations.}
-  spec.homepage      = "https://github.com/isaacsloan/petergate"
+  spec.homepage      = "https://github.com/elorest/petergate"
   spec.license       = "MIT"
+  spec.metadata      = {
+    "source_code_uri" => "https://github.com/elorest/petergate",
+    "bug_tracker_uri" => "https://github.com/elorest/petergate/issues",
+  }
 
-  spec.files         = `git ls-files -z`.split("\x0").delete_if{|p| p.include?("dummy/")}
+  # assets/ holds the README's images, which the README loads from GitHub. They
+  # are 350K of PNG that no runtime code touches, so they stay out of the gem --
+  # they only shipped at all because moving them out of dummy/, which was
+  # excluded here, put them on the default path.
+  spec.files         = `git ls-files -z`.split("\x0").reject { |p| p.start_with?("test/", "gemfiles/", ".github/", "assets/") }
   spec.executables   = spec.files.grep(%r{^bin/}) { |f| File.basename(f) }
   spec.require_paths = ["lib"]
   spec.post_install_message = "NOTICE: As of version 1.5.0, the :admin role has been changed to :root_admin."
 
   spec.add_development_dependency "bundler", "> 1.7"
-  spec.add_development_dependency "rake", "~> 12.3"
-  spec.add_dependency 'activerecord', "> 4.0.0"
+  spec.add_development_dependency "rake", ">= 12.3"
+
+  # petergate reopens ActionController (actionpack), calls String#pluralize
+  # (activesupport), and subclasses Rails::Railtie (railties), so all three are
+  # real runtime dependencies -- not just activerecord.
+  #
+  # 6.1 is the real floor, not a conservative one. `serialize :roles, coder:
+  # YAML` needs a serialize that accepts keywords: 6.1 and 7.0 swallow the
+  # unknown one and fall through to YAMLColumn.new(:roles, Object), and 7.1
+  # added coder: for real. On 6.0 and earlier the signature is
+  # serialize(attr_name, class_name_or_coder = Object) with no **options, so
+  # Ruby binds the hash to the positional argument and the model raises
+  # NoMethodError on load. CI covers 7.1 through 8.1.
+  spec.add_dependency "activerecord",  ">= 6.1"
+  spec.add_dependency "actionpack",    ">= 6.1"
+  spec.add_dependency "activesupport", ">= 6.1"
+  spec.add_dependency "railties",      ">= 6.1"
 end

metadata

@@ -1,13 +1,13 @@
 --- !ruby/object:Gem::Specification
 name: petergate
 version: !ruby/object:Gem::Version
-  version: 3.0.1
+  version: 3.1.1
 platform: ruby
 authors:
 - Isaac Sloan
 bindir: bin
 cert_chain: []
-date: 2025-06-20 00:00:00.000000000 Z
+date: 1980-01-02 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: bundler
@@ -27,30 +27,72 @@ dependencies:
   name: rake
   requirement: !ruby/object:Gem::Requirement
     requirements:
-    - - "~>"
+    - - ">="
       - !ruby/object:Gem::Version
         version: '12.3'
   type: :development
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
-    - - "~>"
+    - - ">="
       - !ruby/object:Gem::Version
         version: '12.3'
 - !ruby/object:Gem::Dependency
   name: activerecord
   requirement: !ruby/object:Gem::Requirement
     requirements:
-    - - ">"
+    - - ">="
       - !ruby/object:Gem::Version
-        version: 4.0.0
+        version: '6.1'
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
-    - - ">"
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: '6.1'
+- !ruby/object:Gem::Dependency
+  name: actionpack
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: '6.1'
+  type: :runtime
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: '6.1'
+- !ruby/object:Gem::Dependency
+  name: activesupport
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: '6.1'
+  type: :runtime
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: '6.1'
+- !ruby/object:Gem::Dependency
+  name: railties
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: '6.1'
+  type: :runtime
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - ">="
       - !ruby/object:Gem::Version
-        version: 4.0.0
+        version: '6.1'
 description: If you like the straight forward and effective nature of Strong Parameters
   and suspect that CanCan might be overkill for your project then you'll love Petergate's
   easy to use and read action and content based authorizations.
@@ -62,7 +104,6 @@ extra_rdoc_files: []
 files:
 - ".gitignore"
 - ".ruby-version"
-- ".travis.yml"
 - Gemfile
 - LICENSE.txt
 - README.md
@@ -76,10 +117,12 @@ files:
 - lib/petergate/version.rb
 - lib/templates/rails/scaffold_controller/controller.rb
 - petergate.gemspec
-homepage: https://github.com/isaacsloan/petergate
+homepage: https://github.com/elorest/petergate
 licenses:
 - MIT
-metadata: {}
+metadata:
+  source_code_uri: https://github.com/elorest/petergate
+  bug_tracker_uri: https://github.com/elorest/petergate/issues
 post_install_message: 'NOTICE: As of version 1.5.0, the :admin role has been changed
   to :root_admin.'
 rdoc_options: []
@@ -96,7 +139,7 @@ required_rubygems_version: !ruby/object:Gem::Requirement
     - !ruby/object:Gem::Version
       version: '0'
 requirements: []
-rubygems_version: 3.6.2
+rubygems_version: 3.6.9
 specification_version: 4
 summary: Authorization system allowing verbose easy read controller syntax.
 test_files: []

data/.travis.yml

@@ -1,5 +0,0 @@
-language: ruby
-rvm:
-  - "2.5.1"
-before_script: "bundle install && cd dummy && rake db:create && rake db:migrate"
-script: "bundle exec rake test"