quo_vadis 2.1.3 → 2.1.6

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 707a011642d93c975b94f1c99c157decdec10c8138edf4e3b4dcf884438abac8
-  data.tar.gz: 8b5e4a2396909660b86ff6de1cee25dd574fe6ca1d10ccf1831c51381e61a2e4
+  metadata.gz: 7ae53bae73aaf968a8edec5148304394b411eace9c0df39069c6b240e90a6ea9
+  data.tar.gz: 4980707b8a6670298f0d99f7f1a554767c12323055d5103057c3028837da49af
 SHA512:
-  metadata.gz: c1aa7cb7ee6c63886f3a8c322f98bb14ea54a4c997d74103e2f4db9f787c65fd3853eb8d771cc7b85c6ea99a1c1a92ee5a7c7db10b29f8d1d1d88f4682f3e8b7
-  data.tar.gz: 88f33eb05eafc2746bc8295f9606f441d99aa24edd422f9a800909008dca1eaded9800d86ec9dbe9b292449b7ec24b8458ec478257885d6f0ea0853ea6e2744c
+  metadata.gz: 00f025682cb8623ff02713e15bf25fdcc8c2a2964273bbc9f450f562375d18dd508ae1e729657cfa2275f2cb92672ef75b278edf8dbebd75cb2d6064d6c974b9
+  data.tar.gz: c017aa443847c3d62dd17e8e384f50db13e11f63189008787be7d896ebc80a362318328139537859d8613a240607362ef2bd81c5022a99a358086f77d079bedf

data/CHANGELOG.md

@@ -4,6 +4,23 @@
 ## HEAD
 
 
+## 2.1.6 (30 May 2022)
+
+* Fix typo in session scope.
+
+
+## 2.1.5 (27 May 2022)
+
+* Order sessions list and display more information.
+* Set status 303 See Other on destroy redirects.
+* Streamline bundler instructions.
+
+
+## 2.1.4 (2 October 2021)
+
+* Allow metadata for login log.
+
+
 ## 2.1.3 (30 September 2021)
 
 * Pass IP and timestamp as paramenters to mailer.

data/README.md

@@ -37,11 +37,9 @@ Simple to integrate into your application.  The main task is customising the exa
 Add the gem to your Gemfile:
 
 ```ruby
-gem 'quo_vadis', '~> 2.0'
+bundle add 'quo_vadis'
 ```
 
-Then run `bundle install`.
-
 Next, add the database tables:
 
 ```
@@ -119,7 +117,7 @@ end
 
 __`login(model, browser_session = true)`__
 
-To log in a user who has authenticated with a password, call `#login(model, browser_session = true)`.  For the `browser_session` argument, pass `true` to log in for the duration of the browser session, or `false` to log in for `QuoVadis.session_lifetime` (which could be the browser session anyway).
+To log in a user who has authenticated with a password, call `#login(model, browser_session = true, metadata: {})`.  For the `browser_session` argument, optionally pass `true` to log in for the duration of the browser session, or `false` to log in for `QuoVadis.session_lifetime` (which could be the browser session anyway).  Any metadata are stored in the log entry for the login.
 
 __`request_confirmation(model)`__
 

data/app/controllers/quo_vadis/sessions_controller.rb

@@ -9,7 +9,7 @@ module QuoVadis
 
     def index
       @qv_session = qv.session
-      @qv_sessions = @qv_session.account.sessions
+      @qv_sessions = @qv_session.account.sessions.new_to_old
     end
 
 
@@ -58,12 +58,12 @@ module QuoVadis
         current_qv_session.account.sessions.destroy params[:id]
         qv.log current_qv_session.account, Log::LOGOUT_OTHER
         flash[:notice] = QuoVadis.translate 'flash.logout.other'
-        redirect_to action: :index
+        redirect_to action: :index, status: :see_other
       else  # this session
         qv.log authenticated_model.qv_account, Log::LOGOUT
         qv.logout
         flash[:notice] = QuoVadis.translate 'flash.logout.self'
-        redirect_to main_app.root_path
+        redirect_to main_app.root_path, status: :see_other
       end
     end
 

data/app/controllers/quo_vadis/twofas_controller.rb

@@ -14,7 +14,7 @@ module QuoVadis
       account.sessions.each &:reset_authenticated_with_second_factor  # OWASP ASV v4.0, 2.8.6
       qv.log account, Log::TWOFA_DEACTIVATED
       QuoVadis.notify :twofa_deactivated_notification, email: authenticated_model.email
-      redirect_to twofa_path, notice: QuoVadis.translate('flash.2fa.invalidated')
+      redirect_to twofa_path, notice: QuoVadis.translate('flash.2fa.invalidated'), status: :see_other
     end
 
     private

data/app/models/quo_vadis/session.rb

@@ -9,6 +9,7 @@ module QuoVadis
 
     belongs_to :account
     validates :ip, presence: true
+    scope :new_to_old, -> { order created_at: :desc }
 
     attribute :last_seen_at, :datetime, default: -> { Time.now.utc }
 

data/app/views/quo_vadis/sessions/index.html.erb

@@ -3,6 +3,9 @@
 <table>
   <thead>
     <tr>
+      <th>Signed in</th>
+      <th>Last seen</th>
+      <th>2FA used</th>
       <th>IP</th>
       <th>User agent</th>
       <th></th>
@@ -11,6 +14,9 @@
   <tbody>
     <% @qv_sessions.each do |sess| %>
       <tr>
+        <td><time datetime="<%= sess.created_at.to_formatted_s(:iso_8601) %>"><%= sess.created_at.to_formatted_s('%-d %B %Y') %></time></td>
+        <td><time datetime="<%= sess.last_seen_at.to_formatted_s(:iso_8601) %>"><%= sess.last_seen_at.to_formatted_s('%-d %B %Y') %></time></td>
+        <td><%= sess.second_factor_authenticated? ? 'Yes' : 'No' %></td>
         <td><%= sess.ip %></td>
         <td><%= sess.user_agent %></td>
         <td>

data/lib/quo_vadis/controller.rb

@@ -36,8 +36,8 @@ module QuoVadis
     #
     # browser_session - true: login only for duration of browser session
     #                   false: login for QuoVadis.session_lifetime (which may be browser session anyway)
-    def login(model, browser_session = true)
-      qv.log model.qv_account, Log::LOGIN_SUCCESS
+    def login(model, browser_session = true, metadata: {})
+      qv.log model.qv_account, Log::LOGIN_SUCCESS, metadata
 
       qv.prevent_rails_session_fixation
 

data/lib/quo_vadis/version.rb

@@ -1,5 +1,5 @@
 # frozen_string_literal: true
 
 module QuoVadis
-  VERSION = '2.1.3'
+  VERSION = '2.1.6'
 end

data/quo_vadis.gemspec

@@ -8,7 +8,7 @@ Gem::Specification.new do |spec|
   spec.authors       = ['Andy Stewart']
   spec.email         = ['boss@airbladesoftware.com']
 
-  spec.summary       = 'Multifactor authentication for Rails 6.'
+  spec.summary       = 'Multifactor authentication for Rails 6 and 7.'
   spec.homepage      = 'https://github.com/airblade/quo_vadis'
   spec.license       = 'MIT'
 

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: quo_vadis
 version: !ruby/object:Gem::Version
-  version: 2.1.3
+  version: 2.1.6
 platform: ruby
 authors:
 - Andy Stewart
 autorequire:
 bindir: bin
 cert_chain: []
-date: 2021-09-30 00:00:00.000000000 Z
+date: 2022-05-30 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: rails
@@ -224,8 +224,8 @@ required_rubygems_version: !ruby/object:Gem::Requirement
     - !ruby/object:Gem::Version
       version: '0'
 requirements: []
-rubygems_version: 3.1.2
+rubygems_version: 3.2.22
 signing_key:
 specification_version: 4
-summary: Multifactor authentication for Rails 6.
+summary: Multifactor authentication for Rails 6 and 7.
 test_files: []