rails_base 0.72.1 → 0.73.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: c96ef922f5d84008526225d5a218a10800cd8afb6141e978f3b6f440525da39b
-  data.tar.gz: bd5ddc3de729b5145cb7120406b42f19ce23f9fd2ac45371f73591425ced48b2
+  metadata.gz: f8de850cb0df7c1bc3333d307757ac8d2603026afb92346437e09c79d0695305
+  data.tar.gz: fcd5689dd0cab40652930dee01b373eeedd59fc03289a635145c10d4a22f635b
 SHA512:
-  metadata.gz: 43e770e791e132c8c08889b2ebed4a853fc8f277cba8d95f41323ff35bc8e9a51bc4600f14cafd4c83b75edf33ab9b7d87fd6703b573b900ac975541627c4f2b
-  data.tar.gz: aa0b6b20a68300ecd74a800402c50d0cb23ab056a620513de7b1dc483754e3c746871797a269f8165f561743bdc20fe62a315080eb60195138b0ab68013bbd66
+  metadata.gz: a39b89c8cd5783fbb2481b52431c73ba8d3ef3fc7b048b71b219d6062e6415ca97b731aa6e47efc4e5268a6b1a3323cd6e0f7e40573b4841a179d28a4676c2e2
+  data.tar.gz: e4e6eba8328362df615548a312c935ca70ca6146d4385eea708138964a7b6a7abcc227f7c6d967722de384aeb2c6b3b913ab1cc2304af4a6db767cd942ceca8c

data/app/helpers/rails_base/user_field_validators.rb

@@ -86,7 +86,7 @@ module RailsBase::UserFieldValidators
 
 		number_count = password.scan(/\d/).join('').length
 		char_count = password.scan(/[a-zA-Z]/).join('').length
-		unacceptable_chars = password.scan(/\W/).join('')
+		non_standard_chars = password.scan(/\W/)
 
 		if char_count < RailsBase::Authentication::Constants::MP_MIN_ALPHA
 			log(level: :warn, msg: "User password does not have enough numbers. Req: #{RailsBase::Authentication::Constants::MP_MIN_ALPHA}. Given: #{char_count}")
@@ -98,9 +98,10 @@ module RailsBase::UserFieldValidators
 			return { status: false, msg: "Password must contain at least #{RailsBase::Authentication::Constants::MP_MIN_NUMS} numbers [0-9]" }
 		end
 
+    unacceptable_chars = non_standard_chars - RailsBase.config.auth.password_allowed_special_chars.split("")
 		if unacceptable_chars.length > 0
-			log(level: :warn, msg: "User password contains unacceptable_chars. Received: #{unacceptable_chars}")
-			return { status: false, msg: "Unaccepted characters received. Characters must be in [0-9a-zA-Z] exclusively. Received #{unacceptable_chars}" }
+			log(level: :warn, msg: "User password contains unacceptable_chars special chars. Received: #{unacceptable_chars}")
+			return { status: false, msg: "Unaccepted characters received. Characters must be in [0-9a-zA-Z] and [#{RailsBase.config.auth.password_allowed_special_chars}] exclusively. Received #{unacceptable_chars}" }
 		end
 
 		{ status: true }

data/app/services/rails_base/authentication/constants.rb

@@ -35,13 +35,10 @@ module RailsBase::Authentication
 		SSOVE_PURPOSE = :verify_email
 
 		# modify password
-		MP_MIN_LENGTH = 7
-		MP_MIN_NUMS = 1
-		MP_MIN_ALPHA = 6
-		var = []
-		var << "contain at least #{MP_MIN_NUMS} numerics [0-9]" if MP_MIN_NUMS > 0
-		var << "contain at least #{MP_MIN_ALPHA} letters [a-z,A-Z]" if MP_MIN_NUMS > 0
-		MP_REQ_MESSAGE = "Password must #{var.join(' and ')}. Minimum length is #{MP_MIN_LENGTH} and contain [1-9a-zA-Z] only"
+		MP_MIN_LENGTH = RailsBase.config.auth.password_min_length
+		MP_MIN_NUMS = RailsBase.config.auth.password_min_numeric
+		MP_MIN_ALPHA = RailsBase.config.auth.password_min_alpha
+		MP_REQ_MESSAGE = RailsBase.config.auth.password_message
 
 		STATIC_WAIT_FLASH = '"Check email inbox for verification email. Follow instructions to gain access"'
 

data/app/views/rails_base/shared/_password_confirm_javascript.html.erb

@@ -15,8 +15,23 @@
       return false
     }
 
-    var unknown = value.replace(/[0-9a-zA-Z]/g,'')
-    if(unknown.length > 0) {
+    var special_chars = value.replace(/[0-9a-zA-Z]/g,'')
+
+    if (special_chars.length == 0) {
+      return true
+    }
+    password_allowed_special_chars = <%= raw (RailsBase.config.auth.password_allowed_special_chars || "").split("") %>
+
+    special_chars_array = special_chars.split("")
+    unknown_chars = []
+    for (let i = 0; i < special_chars_array.length; i++) {
+      if(!password_allowed_special_chars.includes(special_chars_array[i])){
+        unknown_chars.push(special_chars_array[i])
+      }
+    }
+    console.log(`Unkown Charaters: ${unknown_chars}`)
+    console.log(`special_chars_array: ${special_chars_array}`)
+    if(unknown_chars.length > 0) {
       return false
     }
     true

data/lib/rails_base/config.rb

@@ -1,17 +1,17 @@
 require 'singleton'
+require 'rails_base/configuration/active_job'
 require 'rails_base/configuration/admin'
-require 'rails_base/configuration/mfa'
-require 'rails_base/configuration/authentication'
-require 'rails_base/configuration/redis'
-require 'rails_base/configuration/owner'
-require 'rails_base/configuration/mailer'
-require 'rails_base/configuration/exceptions_app'
 require 'rails_base/configuration/app'
 require 'rails_base/configuration/appearance'
-require 'rails_base/configuration/user'
+require 'rails_base/configuration/authentication'
+require 'rails_base/configuration/exceptions_app'
 require 'rails_base/configuration/login_behavior'
-require 'rails_base/configuration/active_job'
+require 'rails_base/configuration/mailer'
+require 'rails_base/configuration/mfa'
+require 'rails_base/configuration/owner'
+require 'rails_base/configuration/redis'
 require 'rails_base/configuration/templates'
+require 'rails_base/configuration/user'
 
 module RailsBase
   class Config

data/lib/rails_base/configuration/active_job.rb

@@ -1,3 +1,5 @@
+require 'rails_base/configuration/base'
+
 module RailsBase
   module Configuration
     class ActiveJob < Base

data/lib/rails_base/configuration/authentication.rb

@@ -8,6 +8,25 @@ module RailsBase
 
       DEFAULT_MFA_TIME = 7.day
       MIN_MFA_TIME = 1.day
+      PASSWORD_MIN_LENGTH = 8
+      PASSWORD_MIN_NUMERIC = 2
+      PASSWORD_MIN_ALPHANUMERIC = 6
+      PASSWORD_ALLOWED_SPECIAL_CHARS = "(),.\"'{}[]!@\#$%^&*_-+="
+
+      PASSWORD_MESSAGE_ON_ASSIGNMENT = Proc.new do |value, current|
+        if value.nil?
+          special_chars_str =
+            if current.password_allowed_special_chars.nil?
+              "No Special characters are allowed"
+            else
+              "Only the following special characters are allowed #{current.password_allowed_special_chars}"
+            end
+
+          current.password_message = "Password must be at least #{current.password_min_length} characters long. " \
+            "With #{current.password_min_numeric} numbers [0-9] and #{current.password_min_alpha} letters [a-zA-Z]. " \
+            "#{special_chars_str}."
+        end
+      end
 
       DEFAULT_VALUES = {
         session_timeout: {
@@ -29,9 +48,52 @@ module RailsBase
           custom: ->(val) { val.to_i > MIN_MFA_TIME },
           msg: "mfa_time_duration must be a duration. Greater than #{MIN_MFA_TIME}",
           description: 'Max time between when MFA will be required',
+        },
+        password_min_length: {
+          type: :integer,
+          default: PASSWORD_MIN_LENGTH,
+          custom: ->(val) { val >= PASSWORD_MIN_LENGTH },
+          msg: "password_min_length must be a integer greater than #{PASSWORD_MIN_LENGTH}.",
+          description: 'Min length the password can be.',
+        },
+        password_min_numeric: {
+          type: :integer,
+          default: PASSWORD_MIN_NUMERIC,
+          custom: ->(val) { val >= PASSWORD_MIN_NUMERIC },
+          msg: "password_min_numeric must be a integer greater or equal to #{PASSWORD_MIN_NUMERIC}.",
+          description: 'Min count of numerics in password.',
+        },
+        password_min_alpha: {
+          type: :integer,
+          default: PASSWORD_MIN_ALPHANUMERIC,
+          custom: ->(val) { val >= PASSWORD_MIN_ALPHANUMERIC },
+          msg: "password_min_alpha must be a integer greater or equal to #{PASSWORD_MIN_ALPHANUMERIC}.",
+          description: 'Min count of letters in password.',
+        },
+        password_allowed_special_chars: {
+          type: :string_nil,
+          default: PASSWORD_ALLOWED_SPECIAL_CHARS,
+          description: 'Allowed special characters in password.',
+        },
+        password_message: {
+          type: :string_nil,
+          default: nil,
+          description: 'Password message for users.',
+          on_assignment: PASSWORD_MESSAGE_ON_ASSIGNMENT,
         }
       }
       attr_accessor *DEFAULT_VALUES.keys
+
+      private
+
+      def custom_validations
+        enforce_password_config!
+      end
+
+      def enforce_password_config!
+        incorrectness = []
+        incorrectness << "`password_min_numeric` is not less than or equal to `password_min_length`" if password_min_numeric <= password_min_length
+      end
     end
   end
 end

data/lib/rails_base/configuration/base.rb

@@ -16,19 +16,20 @@ module RailsBase
       end
 
       ALLOWED_TYPES = {
+        array: -> (val) { [Array].include?(val.class) },
+        array_nil: -> (val) { [Array, NilClass].include?(val.class) },
         boolean: -> (val) { [TrueClass, FalseClass].include?(val.class) },
-        proc: -> (val) { [Proc].include?(val.class) },
+        duration: -> (val) { [ActiveSupport::Duration].include?(val.class) },
+        hash: -> (val) { [Hash].include?(val.class) },
         integer: -> (val) { [Integer].include?(val.class) },
+        klass: -> (_val) { true },
+        path: -> (val) { [Pathname].include?(val.class) },
+        proc: -> (val) { [Proc].include?(val.class) },
         string: -> (val) { [String].include?(val.class) },
-        symbol: -> (val) { [Symbol].include?(val.class) },
-        symbol_class: -> (val) { [Symbol].include?(val.class) || val.superclass === ActiveJob::QueueAdapters },
-        duration: -> (val) { [ActiveSupport::Duration].include?(val.class) },
         string_nil: -> (val) { [String, NilClass].include?(val.class) },
         string_proc: -> (val) { [String, Proc].include?(val.class) },
-        array: -> (val) { [Array].include?(val.class) },
-        hash: -> (val) { [Hash].include?(val.class) },
-        path: -> (val) { [Pathname].include?(val.class) },
-        klass: -> (_val) { true },
+        symbol: -> (val) { [Symbol].include?(val.class) },
+        symbol_class: -> (val) { [Symbol].include?(val.class) || val.superclass === ActiveJob::QueueAdapters },
         values: -> (_val) { true },
       }
 
@@ -116,8 +117,7 @@ module RailsBase
 
       private
 
-      def custom_validations
-      end
+      def custom_validations; end
 
       def def_convenience_methods
         self.class::DEFAULT_VALUES.each do |key, object|

data/lib/rails_base/configuration/mfa.rb

@@ -69,9 +69,9 @@ module RailsBase
       def enforce_twilio!
         return unless enable == true
 
-      return if twilio_sid.present? &&
-        twilio_auth_token.present? &&
-        twilio_from_number.present?
+        return if twilio_sid.present? &&
+          twilio_auth_token.present? &&
+          twilio_from_number.present?
 
         raise InvalidConfiguration, "twilio_sid twilio_auth_token twilio_from_number need to be present when `mfa.enabled`"
       end

data/lib/rails_base/version.rb

@@ -1,7 +1,7 @@
 module RailsBase
   MAJOR = '0'
-  MINOR = '72'
-  PATCH = '1'
+  MINOR = '73'
+  PATCH = '0'
   VERSION = "#{MAJOR}.#{MINOR}.#{PATCH}"
 
   def self.print_version

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: rails_base
 version: !ruby/object:Gem::Version
-  version: 0.72.1
+  version: 0.73.0
 platform: ruby
 authors:
 - Matt Taylor
 autorequire: 
 bindir: bin
 cert_chain: []
-date: 2022-04-30 00:00:00.000000000 Z
+date: 2022-09-03 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: rails