railspress-engine 1.3.0 → 1.3.2

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 24a6b9398ebd465a15fd0d1346127c45d2264c1f479cc9d866ebd52565ed6a7e
-  data.tar.gz: 6b410cc6ee303f2c2ef33f438517f1bab2850a695ca31c82e1ec035acbcd2e5b
+  metadata.gz: 82835798c2b73d8f15e76d9883b911bfb7c7130c2ec54ca94b7c3b306112dc33
+  data.tar.gz: 526d5a4c65204b09337e44265e0d7bfcab0aff08cbfd9e99f3094e7fec32647d
 SHA512:
-  metadata.gz: cd5cb3183c073a9b35234add1862126b62c8055faf799ff28209cb896d563c020ccf0ed6dc06e2ba8ce65a30f727e3627c237cabebae13b717630a7403ddfd73
-  data.tar.gz: dd7e0c8a24cb6b1bc7d9f32c184c3b1806b19bd68a51010c63789b639baef1b99abed3de8306ff380445bca9c3287772a749d64aa3f90cb440642881c747a42e
+  metadata.gz: 9d78ecf917f7bb2550b8dda4eda224120c53297f345f9432b6a83705d2df97461f8caf2ea5eadc06a1396fcd59bd8a8d6c9578fb9f86caeffce295792f752866
+  data.tar.gz: ebcde5bf787af266bf0439ad6a684fcad2484e5f6f800f31a1a2c0c4b09a52c0f503b419bd6648ff1a444a725ea50c88ef907e8fb6bd66f719c7eccd8d9bb343

data/lib/generators/railspress/install/templates/initializer.rb

@@ -8,6 +8,7 @@ Railspress.configure do |config|
   # config.enable_authors
   # config.author_class_name = "User"
   # config.current_author_method = :current_user
+  # config.current_author_proc = -> { Current.user }
 
   # === CMS Content Elements (opt-in) ===
   # Adds content groups, content elements, and the cms_element/cms_value
@@ -32,8 +33,12 @@ Railspress.configure do |config|
   # Requires Active Record Encryption keys in your host app config.
   # Uncomment to enable:
   # config.enable_api
+  # Optional: include a host auth concern into Railspress::Admin::BaseController.
+  # Define your concern in app/controllers/concerns/railspress_admin_auth.rb
+  # and set this to its constant name (String or Symbol).
+  # config.admin_auth_concern = "RailspressAdminAuth"
   # config.current_api_actor_method = :current_user
-  # config.current_api_actor_proc = -> { Current.user }
+  # config.current_api_actor_proc = -> { Current.user if Current.user&.admin? }
   # Optional: force a canonical public base URL in generated API instructions.
   # Falls back to Rails.application.routes.default_url_options, then request host.
   # config.public_base_url = "https://blog.example.com"

data/lib/railspress/engine.rb

@@ -41,6 +41,18 @@ module Railspress
       end
     end
 
+    # Allow host apps to inject their auth concern into the admin base controller.
+    # This keeps host auth logic in app/controllers concerns while Railspress handles reload-safe wiring.
+    initializer "railspress.admin_auth_concern" do |app|
+      app.config.to_prepare do
+        concern = Railspress.resolved_admin_auth_concern
+        next unless concern
+        next if Railspress::Admin::BaseController < concern
+
+        Railspress::Admin::BaseController.include(concern)
+      end
+    end
+
     # Configure importmap for Stimulus controllers
     initializer "railspress.importmap", before: "importmap" do |app|
       if app.respond_to?(:importmap)

data/lib/railspress/version.rb

@@ -1,3 +1,3 @@
 module Railspress
-  VERSION = "1.3.0"
+  VERSION = "1.3.2"
 end

data/lib/railspress.rb

@@ -12,6 +12,7 @@ module Railspress
                   :current_author_proc,
                   :current_api_actor_method,
                   :current_api_actor_proc,
+                  :admin_auth_concern,
                   :public_base_url,
                   :author_scope,
                   :author_display_method,
@@ -37,6 +38,7 @@ module Railspress
       @current_author_proc = nil
       @current_api_actor_method = :current_user
       @current_api_actor_proc = nil
+      @admin_auth_concern = nil
       @public_base_url = nil
       @author_scope = nil
       @author_display_method = :name
@@ -283,6 +285,28 @@ module Railspress
       configuration.current_api_actor_proc
     end
 
+    def admin_auth_concern
+      configuration.admin_auth_concern
+    end
+
+    def resolved_admin_auth_concern
+      concern = admin_auth_concern
+      return nil if concern.blank?
+
+      module_value = case concern
+      when Module then concern
+      when String, Symbol
+        concern_name = concern.to_s
+        concern_name.safe_constantize || concern_name.camelize.safe_constantize
+      end
+
+      unless module_value.is_a?(Module)
+        raise ConfigurationError, "admin_auth_concern must resolve to a Module. Got: #{concern.inspect}"
+      end
+
+      module_value
+    end
+
     def public_base_url
       configuration.public_base_url
     end

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: railspress-engine
 version: !ruby/object:Gem::Version
-  version: 1.3.0
+  version: 1.3.2
 platform: ruby
 authors:
 - Avi Flombaum