rails_jwt_auth 1.4.1 → 1.5.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 6dea41e10dc4a6cbed20dda27ee1c6e0f68a947c08fa83e0c617e7f2407156b8
-  data.tar.gz: b1331f29423b908ba9712c1a5ebf303dc21a13577507c27ff47ce08f6c585902
+  metadata.gz: 2c14c4018d6e871d503f3573886bdc7822a620859aef7b32f0a719a2252b5aa8
+  data.tar.gz: 4d4e2c16de9787f6c7b940274a3583e112b81cd438623528e0b4cdbc5840b6a5
 SHA512:
-  metadata.gz: 68dda6972d70400b76987eec57c1e3323eb3f7eac49c3f4eb3102a8ca0fe9d2b8e621743aa50147545ce3d4ddb17cc15d20942872fe94f077aa6094238e1afed
-  data.tar.gz: 573960c4cad77a2cce9de2e33008c2beae5210fce9f1d3b9c1fc3747a5ca18bab3a133f3055d24a85e83bd22713606564d100a134735e09d7ebade47e6b7ffea
+  metadata.gz: 6c4caceaa1fdcb313994525a8d734df570202beccd88f9f76131e5d5ba46c4c551a87ac3091261e92feb46339e6a52b3fe407c4768b62f6c834508b1193713dc
+  data.tar.gz: 427687273a0d51fc837cac6ed841363d707ef87790b1a0d52283ca33bc9a1484e16ae1c5c4691b3649687b1cd2ce9e3a83827aa61afe1757a589b416f2b1d05b

data/README.md

@@ -59,7 +59,7 @@ rails g rails_jwt_auth:migrate
 
 ## Configuration
 
-You can edit configuration options into `config/initializers/auth_token_auth.rb` file created by generator.
+You can edit configuration options into `config/initializers/rails_jwt_auth.rb` file created by generator.
 
 | Option                          | Default value     | Description                                                            |
 | ------------------------------- | ----------------- | ---------------------------------------------------------------------- |
@@ -187,6 +187,10 @@ end
 
     Return current signed-in user.
 
+-   **jwt_payload**
+
+    Return current jwt payload.
+
 -   **signed_in?**
 
     Verify if a user is signed in.
@@ -205,8 +209,8 @@ Session api is defined by `RailsJwtAuth::SessionsController`.
   method: POST,
   data: {
     session: {
-      email: "user@email.com",
-      password: "12345678"
+      email: 'user@email.com',
+      password: '12345678'
     }
   }
 }
@@ -234,8 +238,8 @@ Registration api is defined by `RailsJwtAuth::RegistrationsController`.
   method: POST,
   data: {
     user: {
-      email: "user@email.com",
-      password: "12345678"
+      email: 'user@email.com',
+      password: '12345678'
     }
   }
 }
@@ -245,6 +249,8 @@ Registration api is defined by `RailsJwtAuth::RegistrationsController`.
 
 Confirmation api is defined by `RailsJwtAuth::ConfirmationsController`.
 
+It is necessary to set a value for `confirmations_url` option into `config/initializers/rails_jwt_auth.rb`.
+
 1.  Confirm user:
 
 ```js
@@ -252,7 +258,7 @@ Confirmation api is defined by `RailsJwtAuth::ConfirmationsController`.
   url: host/confirmation,
   method: PUT
   data: {
-    confirmation_token: "token"
+    confirmation_token: 'token'
   }
 }
 ```
@@ -265,7 +271,7 @@ Confirmation api is defined by `RailsJwtAuth::ConfirmationsController`.
   method: POST,
   data: {
     confirmation: {
-      email: "user@example.com"
+      email: 'user@example.com'
     }
   }
 }
@@ -283,7 +289,7 @@ Password api is defined by `RailsJwtAuth::PasswordsController`.
   method: POST,
   data: {
     password: {
-      email: "user@example.com"
+      email: 'user@example.com'
     }
   }
 }
@@ -296,7 +302,7 @@ Password api is defined by `RailsJwtAuth::PasswordsController`.
   url: host/password,
   method: PUT,
   data: {
-    reset_password_token: "token",
+    reset_password_token: 'token',
     password: {
       password: '1234',
       password_confirmation: '1234'
@@ -317,7 +323,7 @@ Invitations api is provided by `RailsJwtAuth::InvitationsController`.
   method: POST,
   data: {
     invitation: {
-      email: "user@example.com",
+      email: 'user@example.com',
       // More fields of your user
     }
   }
@@ -426,7 +432,10 @@ class CurrentUserController < ApplicationController
 
   def update
     if update_params[:password]
-      current_user.update_with_password(update_params)
+      # update password and remove other sessions tokens
+      current_user.update_with_password(
+        update_params.merge(auth_tokens: [jwt_payload['auth_token']])
+      )
     else
       current_user.update_attributes(update_params)
     end
@@ -471,7 +480,7 @@ require 'rails_jwt_auth/spec_helpers'
 ...
 RSpec.configure do |config|
   ...
-  config.include RailsJwtAuth::SpecHelpers, :type => :controller
+  config.include RailsJwtAuth::SpecHelpers, type: :controller
 end
 ```
 
@@ -479,11 +488,11 @@ And then we can just call sign_in(user) to sign in as a user:
 
 ```ruby
 describe ExampleController
-  it "blocks unauthenticated access" do
-    expect { get :index }.to raise_error(RailsJwtAuth::Errors::NotAuthorized)
+  it 'blocks unauthenticated access' do
+    expect { get :index }.to raise_error(RailsJwtAuth::NotAuthorized)
   end
 
-  it "allows authenticated access" do
+  it 'allows authenticated access' do
     sign_in user
     get :index
     expect(response).to be_success

data/app/controllers/concerns/rails_jwt_auth/authenticable_helper.rb

@@ -6,18 +6,22 @@ module RailsJwtAuth
       @current_user
     end
 
+    def jwt_payload
+      @jwt_payload
+    end
+
     def signed_in?
       !current_user.nil?
     end
 
     def authenticate!
       begin
-        payload = RailsJwtAuth::JwtManager.decode_from_request(request).first
+        @jwt_payload = RailsJwtAuth::JwtManager.decode_from_request(request).first
       rescue JWT::ExpiredSignature, JWT::VerificationError, JWT::DecodeError
         unauthorize!
       end
 
-      if !@current_user = RailsJwtAuth.model.from_token_payload(payload)
+      if !@current_user = RailsJwtAuth.model.from_token_payload(@jwt_payload)
         unauthorize!
       elsif @current_user.respond_to? :update_tracked_fields!
         @current_user.update_tracked_fields!(request)
@@ -26,8 +30,8 @@ module RailsJwtAuth
 
     def authenticate
       begin
-        payload = RailsJwtAuth::JwtManager.decode_from_request(request).first
-        @current_user = RailsJwtAuth.model.from_token_payload(payload)
+        @jwt_payload = RailsJwtAuth::JwtManager.decode_from_request(request).first
+        @current_user = RailsJwtAuth.model.from_token_payload(@jwt_payload)
       rescue JWT::ExpiredSignature, JWT::VerificationError, JWT::DecodeError
         @current_user = nil
       end

data/app/models/concerns/rails_jwt_auth/recoverable.rb

@@ -14,7 +14,10 @@ module RailsJwtAuth
         validate :validate_reset_password_token, if: :password_digest_changed?
 
         before_update do
-          self.reset_password_token = nil if password_digest_changed? && reset_password_token
+          if password_digest_changed? && reset_password_token
+            self.reset_password_token = nil
+            self.auth_tokens = []
+          end
         end
       end
     end

data/lib/rails_jwt_auth/version.rb

@@ -1,3 +1,3 @@
 module RailsJwtAuth
-  VERSION = '1.4.1'
+  VERSION = '1.5.0'
 end

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: rails_jwt_auth
 version: !ruby/object:Gem::Version
-  version: 1.4.1
+  version: 1.5.0
 platform: ruby
 authors:
 - rjurado
 autorequire: 
 bindir: bin
 cert_chain: []
-date: 2019-12-11 00:00:00.000000000 Z
+date: 2020-02-06 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: bcrypt