plutonium 0.26.10 → 0.26.11

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
checksums.yaml CHANGED
@@ -1,7 +1,7 @@
1
1
  ---
2
2
  SHA256:
3
- metadata.gz: 4441eabd9ec9d152f322de4fe09917b97494eee1ad2143b299b3e10ff94deff3
4
- data.tar.gz: 393e2c289473fd4850886191caae8985db870c5ec5b26615fa188aed53237c11
3
+ metadata.gz: e10062c979c0a1928e52aa93f22693aae2eb398cb5435301883b0de4212d12b7
4
+ data.tar.gz: c72b315aa37c784b7d9502ba084a080b71b06e02cdeb9a9bdf5555b921e2b89c
5
5
  SHA512:
6
- metadata.gz: 612670270d17986b0f01a91ab3e834d2a6542764e63dba7884375e3c863feafe57ad712eb3f165e7caf6014891eb2c6af62548eb1605cf2188b823706a976a8f
7
- data.tar.gz: a654de0904072cc6f994f270909ddbd6785afcca4649c7bdf63a608ecb0f0ad4a66ebfd733470f2451f1c14794a4dd5bbe66bb1b30e01da156ee340bfa919e54
6
+ metadata.gz: ad63980d8dafd43aaea7ecd69434aba8667f1b33a6b28cd753c37bb7bdf3b7607b4c182a0bcc1d4b7cb123eb245ae76b844c2f498d4eaa4ec40609324bac2760
7
+ data.tar.gz: 73a2186b8e61124260b3eefd856a7a93f0cf53069221d22bd39022e8375b6fb0a108a01fc2226694da3b7fad0fd5a0ed7cd29a943c20e55586ef216c6f097ad9
@@ -246,6 +246,9 @@ class <%= account_path.classify %>RodauthPlugin < RodauthPlugin
246
246
  remember_cookie_key "_<%= table_prefix %>_remember"
247
247
  <% end -%>
248
248
 
249
+ # Session security
250
+ session_key "_<%= table_prefix %>_session"
251
+
249
252
  # ==> Hooks
250
253
 
251
254
  # Validate custom fields in the create account form.
@@ -147,13 +147,13 @@ module Plutonium
147
147
 
148
148
  url = case preferred_action_after_submit
149
149
  when "show"
150
- resource_url_for(resource_record!) if current_policy.allowed_to? :show?
150
+ resource_url_for(resource_record!) if resource_record? && current_policy.allowed_to?(:show?, resource_record!)
151
151
  when "edit"
152
- resource_url_for(resource_record!, action: :edit) if current_policy.allowed_to? :edit?
152
+ resource_url_for(resource_record!, action: :edit) if resource_record? && current_policy.allowed_to?(:edit?, resource_record!)
153
153
  when "new"
154
- resource_url_for(resource_class, action: :new) if current_policy.allowed_to? :new?
154
+ resource_url_for(resource_class, action: :new) if current_policy.allowed_to?(:new?, resource_class)
155
155
  when "index"
156
- resource_url_for(resource_class) if current_policy.allowed_to? :index?
156
+ resource_url_for(resource_class) if current_policy.allowed_to?(:index?, resource_class)
157
157
  else
158
158
  # ensure we have a valid value
159
159
  session[:action_after_submit_preference] = "show"
@@ -1,5 +1,5 @@
1
1
  module Plutonium
2
- VERSION = "0.26.10"
2
+ VERSION = "0.26.11"
3
3
  NEXT_MAJOR_VERSION = VERSION.split(".").tap { |v|
4
4
  v[1] = v[1].to_i + 1
5
5
  v[2] = 0
metadata CHANGED
@@ -1,14 +1,14 @@
1
1
  --- !ruby/object:Gem::Specification
2
2
  name: plutonium
3
3
  version: !ruby/object:Gem::Version
4
- version: 0.26.10
4
+ version: 0.26.11
5
5
  platform: ruby
6
6
  authors:
7
7
  - Stefan Froelich
8
8
  autorequire:
9
9
  bindir: exe
10
10
  cert_chain: []
11
- date: 2025-09-30 00:00:00.000000000 Z
11
+ date: 2025-10-28 00:00:00.000000000 Z
12
12
  dependencies:
13
13
  - !ruby/object:Gem::Dependency
14
14
  name: zeitwerk