rails_simple_auth 1.0.3 → 1.0.4

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 5fb876e2f8ec9c1f40ed2dbb8d97fdd984e7e5927e11c56be6a2ac4b2aa593a4
-  data.tar.gz: 29a914c7c8f77a85199d6f7188ce77ab24460554ca90421b22b38646f15464f5
+  metadata.gz: fd84335df56b3bc4fbb386f841bfb66bc74eadae1dc3864873bcda904a946cd2
+  data.tar.gz: 00d31290be4bdccf36c5f9a326896e9506936f6b122f9298f53fabc0aadcd8a3
 SHA512:
-  metadata.gz: 8a7d0926e4e1e3a8c7da6ec9ab4de80768ae98a1316a32b6d9bf6aa790f266fc494598344b9a47444bfac1241ab55ea6d11c4c89a56bb2d270cff816a0bb3178
-  data.tar.gz: b9ea5fa54ad39f51e86dae6852df477760bfb8c28a3c002cae421c40d44e5d3fb74e0ecfaa6ab6d65705cb3ba579d72e4c47061aa2b06d848d5f4639ca9f1eaf
+  metadata.gz: 2c0cf144576a950a1aff4a1958197b9ef93a3edc405bf1de36339f3effed3c09087158b821f6e2c7617af9b9ae9b3ef184783b08c9428da0df65d79ac5a2ba3e
+  data.tar.gz: 0cc8bd3f8ce5094910f25daf12496f1efe6f447d3ee22f3744ad47d7ff4b65ad46209ecd2004fe9024f2fcad85c38efb6478261bd408251f728aad1c2fc89824

data/CHANGELOG.md

@@ -7,6 +7,24 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 
 ## [Unreleased]
 
+## [1.0.4] - 2025-01-19
+
+### Added
+
+- **`authenticates_with` DSL** - Cleaner model setup inspired by Devise syntax
+  ```ruby
+  # Before
+  include RailsSimpleAuth::Models::Concerns::Authenticatable
+  include RailsSimpleAuth::Models::Concerns::Confirmable
+
+  # After
+  authenticates_with :confirmable, :magic_linkable, :oauth, :temporary
+  ```
+- **Devise comparison article** - Comprehensive comparison at `docs/devise-comparison.md`
+- **Admin Users documentation** - Guide for implementing admin functionality
+- **Rate Limiting documentation** - Default limits and customization guide
+- **Session Management documentation** - Expiration, querying, and cleanup
+
 ## [1.0.3] - 2025-01-19
 
 ### Added

data/README.md

@@ -2,6 +2,8 @@
 
 Simple, secure authentication for Rails 8+ applications. Built on Rails primitives with no magic.
 
+**Coming from Devise?** Read our [detailed comparison](docs/devise-comparison.md).
+
 ## Features
 
 - [**Email/Password authentication**](#installation) - secure session-based auth
@@ -36,20 +38,31 @@ rails generate rails_simple_auth:install
 rails db:migrate
 ```
 
-Add concerns to your User model:
+Add authentication to your User model:
 
 ```ruby
 class User < ApplicationRecord
-  include RailsSimpleAuth::Models::Concerns::Authenticatable
-  include RailsSimpleAuth::Models::Concerns::Confirmable      # optional
-  include RailsSimpleAuth::Models::Concerns::MagicLinkable    # optional
-  include RailsSimpleAuth::Models::Concerns::OAuthConnectable # optional
+  authenticates_with :confirmable, :magic_linkable, :oauth, :temporary
 
   # Your custom fields and validations
   validates :company_name, presence: true
 end
 ```
 
+Available modules:
+- `:confirmable` - Email confirmation for new accounts
+- `:magic_linkable` - Passwordless sign-in via email
+- `:oauth` - OAuth provider support (Google, GitHub, etc.)
+- `:temporary` - Guest accounts that convert to permanent
+
+For basic email/password auth only:
+
+```ruby
+class User < ApplicationRecord
+  authenticates_with
+end
+```
+
 Protect your routes:
 
 ```ruby
@@ -228,12 +241,11 @@ rails generate rails_simple_auth:temporary_users
 rails db:migrate
 ```
 
-2. Add the concern to your User model:
+2. Add the `:temporary` module to your User model:
 
 ```ruby
 class User < ApplicationRecord
-  include RailsSimpleAuth::Models::Concerns::Authenticatable
-  include RailsSimpleAuth::Models::Concerns::TemporaryUser  # Add this
+  authenticates_with :confirmable, :temporary
 end
 ```
 
@@ -587,6 +599,72 @@ end
 - **Account conversion**: All sessions are invalidated when a temporary user converts to permanent
 - **Sign out**: Only the current session is destroyed (other devices stay signed in)
 
+## Admin Users
+
+RailsSimpleAuth uses a single table with role-based access — the Rails way. No separate admin models or authentication flows needed.
+
+### Setup
+
+Add an admin column to your users table:
+
+```ruby
+# Migration
+add_column :users, :admin, :boolean, default: false
+```
+
+Add a helper method to your model:
+
+```ruby
+class User < ApplicationRecord
+  authenticates_with :confirmable
+
+  def admin?
+    admin == true
+  end
+end
+```
+
+### Protecting Admin Routes
+
+```ruby
+class AdminController < ApplicationController
+  before_action :require_admin
+
+  private
+
+  def require_admin
+    redirect_to root_path, alert: "Not authorized" unless current_user&.admin?
+  end
+end
+
+# Or as a concern
+module AdminAuthentication
+  extend ActiveSupport::Concern
+
+  included do
+    before_action :require_admin
+  end
+
+  private
+
+  def require_admin
+    redirect_to root_path, alert: "Not authorized" unless current_user&.admin?
+  end
+end
+```
+
+### Creating Admin Users
+
+```ruby
+# Console
+User.find_by(email: "admin@example.com").update!(admin: true)
+
+# Seeds
+User.create!(email: "admin@example.com", password: "secure123", admin: true)
+```
+
+For more complex role systems, consider adding a `role` enum or using an authorization gem like [Pundit](https://github.com/varvet/pundit).
+
 ## Security Features
 
 - **BCrypt password hashing** with salts

data/lib/rails_simple_auth/engine.rb

@@ -1,5 +1,7 @@
 # frozen_string_literal: true
 
+require 'rails_simple_auth/model'
+
 module RailsSimpleAuth
   class Engine < ::Rails::Engine
     isolate_namespace RailsSimpleAuth
@@ -14,5 +16,11 @@ module RailsSimpleAuth
         include RailsSimpleAuth::Controllers::Concerns::SessionManagement
       end
     end
+
+    initializer 'rails_simple_auth.model' do
+      ActiveSupport.on_load(:active_record) do
+        include RailsSimpleAuth::Model
+      end
+    end
   end
 end

data/lib/rails_simple_auth/model.rb

@@ -0,0 +1,49 @@
+# frozen_string_literal: true
+
+module RailsSimpleAuth
+  module Model
+    extend ActiveSupport::Concern
+
+    MODULES = {
+      confirmable: 'RailsSimpleAuth::Models::Concerns::Confirmable',
+      magic_linkable: 'RailsSimpleAuth::Models::Concerns::MagicLinkable',
+      oauth: 'RailsSimpleAuth::Models::Concerns::OAuthConnectable',
+      temporary: 'RailsSimpleAuth::Models::Concerns::TemporaryUser'
+    }.freeze
+
+    class_methods do
+      # Configure authentication for this model
+      #
+      # @example Basic authentication only
+      #   authenticates_with
+      #
+      # @example With optional modules
+      #   authenticates_with :confirmable, :magic_linkable
+      #
+      # @example Full featured
+      #   authenticates_with :confirmable, :magic_linkable, :oauth, :temporary
+      #
+      # Available modules:
+      # - :confirmable     - Email confirmation for new accounts
+      # - :magic_linkable  - Passwordless sign-in via email
+      # - :oauth           - OAuth provider support (Google, GitHub, etc.)
+      # - :temporary       - Guest accounts that convert to permanent
+      #
+      def authenticates_with(*modules)
+        # Always include base authentication
+        include RailsSimpleAuth::Models::Concerns::Authenticatable
+
+        # Include requested optional modules
+        modules.each do |mod|
+          mod_name = mod.to_sym
+          unless MODULES.key?(mod_name)
+            raise ArgumentError, "Unknown authentication module: #{mod.inspect}. " \
+                                 "Available modules: #{MODULES.keys.join(', ')}"
+          end
+
+          include MODULES[mod_name].constantize
+        end
+      end
+    end
+  end
+end

data/lib/rails_simple_auth/version.rb

@@ -1,5 +1,5 @@
 # frozen_string_literal: true
 
 module RailsSimpleAuth
-  VERSION = '1.0.3'
+  VERSION = '1.0.4'
 end

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: rails_simple_auth
 version: !ruby/object:Gem::Version
-  version: 1.0.3
+  version: 1.0.4
 platform: ruby
 authors:
 - Ivan Kuznetsov
@@ -82,6 +82,7 @@ files:
 - lib/rails_simple_auth/controllers/concerns/authentication.rb
 - lib/rails_simple_auth/controllers/concerns/session_management.rb
 - lib/rails_simple_auth/engine.rb
+- lib/rails_simple_auth/model.rb
 - lib/rails_simple_auth/models/concerns/authenticatable.rb
 - lib/rails_simple_auth/models/concerns/confirmable.rb
 - lib/rails_simple_auth/models/concerns/magic_linkable.rb