reputable 0.1.7 → 0.1.8

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: c5ea31e6c135265677697ac1411fb0d9308f6d4454f23a3d1558018eddfccb4a
-  data.tar.gz: 0aea9d057b70a2ca763f5e1f5e6b024d25d07d783feee0447bd311526a189574
+  metadata.gz: 0b987ffa68c839c4a7d7a288fbe89f530eebeed3ba7f793ae7f9dc99ffa09063
+  data.tar.gz: 4d83e36696d0b1164958dc32be975f4b18dbdc9e2d67e25e586cbdced3c690f3
 SHA512:
-  metadata.gz: f9621074b650d78f8ba44014f5df9880ee8431065f88a9cd6e3da467aef4885da7230851de5cfe316ef3d8162317bd43cba10fd943d87affbbb2ae11046901c9
-  data.tar.gz: 59c4953b9caaf151b3b8a97d057d90b9dab88bdfe71809460a588f35cc8ddc903dacc6805bb9b14ba39d70d203e7622331bbd469e7b870be1da968a8b74b3f77
+  metadata.gz: a89be2adeabee55f6ef8599dff51e6fbdff659de9cc7657b1d82ae61e14d61a52985533f067939500f89b19e36b844be4baf9b882d2926f29c7d899b5da6fa1a
+  data.tar.gz: bb16577e080d26d0ba106e8dbbc777b48b030c1bdc83bae5fba75df56f06db46557a0aa92318e9e82e7f04722065e0f3b7fb28adcf80dd400b9f3810e14b84a2

data/README.md

@@ -305,6 +305,31 @@ rep = current_ip_reputation
 # => { status: 'trusted_verified', reason: 'payment', ... }
 ```
 
+### Verification Redirect Helpers
+
+```ruby
+class SessionsController < ApplicationController
+  def new
+    require_reputable_verification!
+    # If verified, continue
+  end
+end
+```
+
+Optional args:
+- `return_url` (default: `request.original_url`)
+- `failure_url` (default: API `/verify/failure` page)
+- `session_id` (default: `session.id`)
+- `force_challenge` (default: `false`)
+- `session_key` (default: `:reputable_verified_at`)
+
+You can check or clear the session flag:
+
+```ruby
+reputable_verified?
+clear_reputable_verification!
+```
+
 ---
 
 ## Manual API Usage
@@ -391,7 +416,7 @@ end
 
 **Options:**
 - `return_url` (required): Where to redirect after successful verification
-- `failure_url` (optional): Where to redirect on failure (defaults to return_url)
+- `failure_url` (optional): Where to redirect on failure (defaults to API `/verify/failure` page)
 - `session_id` (optional): Bind verification to a specific session
 - `force_challenge` (optional): If `true`, always show CAPTCHA even for trusted users. Useful for testing the challenge flow.
 

data/lib/reputable/rails.rb

@@ -7,6 +7,10 @@ module Reputable
     module ControllerHelpers
       extend ActiveSupport::Concern
 
+      included do
+        helper_method :reputable_verified? if respond_to?(:helper_method)
+      end
+
       # Track the current request with optional extra tags
       def track_reputable_request(tags: [], **options)
         Reputable::Tracker.track_request(
@@ -81,6 +85,74 @@ module Reputable
       def current_ip_status
         Reputable::Reputation.lookup_ip(request.remote_ip)
       end
+
+      # ========================================
+      # Verification redirect helpers
+      # ========================================
+
+      # Check if the current session has already passed verification
+      # @param session_key [Symbol]
+      # @return [Boolean]
+      def reputable_verified?(session_key: :reputable_verified_at)
+        session[session_key].present?
+      end
+
+      # Clear verification status for the current session
+      # @param session_key [Symbol]
+      def clear_reputable_verification!(session_key: :reputable_verified_at)
+        session.delete(session_key)
+      end
+
+      # Enforce verification redirect flow.
+      # - If already verified in this session, returns immediately.
+      # - If returning with signature, validates and marks session.
+      # - Otherwise redirects to verification URL.
+      #
+      # @param return_url [String] URL to return to after verification
+      # @param failure_url [String] URL to return to on failure/invalid token
+      # @param session_id [String] Optional session id to link
+      # @param force_challenge [Boolean] Force challenge even if trusted
+      # @param session_key [Symbol] Session key used to store verified state
+      def require_reputable_verification!(
+        return_url: request.original_url,
+        failure_url: nil,
+        session_id: session.id,
+        force_challenge: false,
+        session_key: :reputable_verified_at
+      )
+        return if reputable_verified?(session_key: session_key)
+
+        if params[:reputable_signature]
+          if Reputable.verify_redirect_return(params)
+            if params[:reputable_status] == "pass"
+              session[session_key] = Time.now.to_i
+              return
+            end
+
+            redirect_to failure_url and return
+          else
+            render plain: "Verification failed", status: 403 and return
+          end
+        end
+
+        redirect_to reputable_verification_url(
+          return_url: return_url,
+          failure_url: failure_url,
+          session_id: session_id,
+          force_challenge: force_challenge
+        ) and return
+      end
+
+      private
+
+      def reputable_verification_url(return_url:, failure_url:, session_id:, force_challenge:)
+        Reputable.verification_url(
+          return_url: return_url,
+          failure_url: failure_url,
+          session_id: session_id,
+          force_challenge: force_challenge
+        )
+      end
     end
 
     # Railtie for automatic Rails integration (only defined when Rails is present)

data/lib/reputable/version.rb

@@ -1,5 +1,5 @@
 # frozen_string_literal: true
 
 module Reputable
-  VERSION = "0.1.7"
+  VERSION = "0.1.8"
 end

data/lib/reputable.rb

@@ -145,6 +145,7 @@ module Reputable
       # Ensure base_url doesn't have a trailing slash, then append the verify path
       base_url = base_url.chomp("/")
       verify_url = "#{base_url}/_reputable/verify"
+      failure_url ||= "#{base_url}/_reputable/verify/failure"
 
       # JWT Header
       header = { alg: "HS256", typ: "JWT" }

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: reputable
 version: !ruby/object:Gem::Version
-  version: 0.1.7
+  version: 0.1.8
 platform: ruby
 authors:
 - Reputable