rodauth-rails 0.1.0 → 0.2.1

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: d146993e77acfbe027e5cfe399cc13cfe16d2e967d73b0caf149c1363a222b9b
-  data.tar.gz: f77401bec1bfabd12cb87285e3e6a42b9b7ca7bf0fb986a32b27babba7d49d72
+  metadata.gz: 32eea791dff9c98b9e78d209ba375d08095f07ec1d0ba0e852e5af83602e2128
+  data.tar.gz: f12a2c57d4f3dee31efd10c6ba8fd211af62d8636cda5118fcc949642ded1e29
 SHA512:
-  metadata.gz: 7592679984260110c5cd702601d9c9841fc5c5e8980790aad8bb223997851d06c43045361a91ab7ad6c7bb0b113a79bd52e26e5de3a488e7269cf1e3bdf2ecaa
-  data.tar.gz: 70fa3b31cffff7cecb98cf2951a35bd2dd4f6ca65cd4d9b49494d94be0858e73aa5d292d2292053d1b847921f05212b8c8d3b0b2ffd81aed4e191916749d4249
+  metadata.gz: c722443088524cfedbffa17336de213dbcb004fe0866cb418f9bdc27a4a3a4b3af0ccd954a991bdc4d5e100278bd4738fc2a17b58a43555ddc725dcc49cca21b
+  data.tar.gz: a97951dd6653c70af6397633b6628450779497a80be7b7dd294fbd09c8f91b4d82fe722190911d7324af7a3ff2c4b9ff274dd55adde8c8983fbc513e5c81d12d

data/CHANGELOG.md

@@ -0,0 +1,36 @@
+## 0.2.1 (2020-07-26)
+
+* Fix incorrect JDBC connect syntax in `sequel.rb` template on JRuby (@janko)
+
+## 0.2.0 (2020-07-26)
+
+* Drop support for Rodauth 1.x (@janko)
+
+* Change `rodauth_app.rb` template to send emails in the background after transaction commit (@janko)
+
+* Bump `sequel-activerecord_connection` dependency to `~> 0.3` (@janko)
+
+* Use the JDBC adapter in sequel.rb initializer when on JRuby (@janko)
+
+## 0.1.3 (2020-07-04)
+
+* Remove insecure MFA integration with remember feature suggestion in `lib/rodauth_app.rb` (@janko, @nicolas-besnard)
+
+* Use correct password autocomplete value on Rodauth 2.1+ (@janko)
+
+* Enable skipping CSRF protection on Rodauth 2.1+ by overriding `#check_csrf?` (@janko)
+
+* Don't generate Sequel initializer if Sequel connection exists (@janko)
+
+* Fix typo in remember view template (@nicolas-besnard)
+
+* Fix some more typos in `lib/rodauth_app.rb` (@janko)
+
+## 0.1.2 (2020-05-14)
+
+* Fix some typos in comment suggestions in `lib/rodauth_app.rb` (@janko)
+
+## 0.1.1 (2020-05-09)
+
+* Include view templates in the gem (@janko)
+* Use `Login` labels to be consistent with Rodauth (@janko)

data/README.md

@@ -13,7 +13,7 @@ Provides Rails integration for the [Rodauth] authentication framework.
 Add the gem to your Gemfile:
 
 ```rb
-gem "rodauth-rails", "~> 0.1"
+gem "rodauth-rails", "~> 0.2"
 ```
 
 Then run `bundle install`.
@@ -160,7 +160,7 @@ page:
 
 These links are fully functional, feel free to visit them and interact with the
 pages. The templates that ship with Rodauth aim to provide a complete
-authentication experience, and the forms use [Boostrap] markup.
+authentication experience, and the forms use [Bootstrap] markup.
 
 Let's also add the `#current_account` method for retrieving the account of the
 the authenticated session:
@@ -358,23 +358,31 @@ class RodauthApp < Rodauth::Rails::App
   configure do
     # ...
     send_reset_password_email do
-      RodauthMailer.reset_password(email_to, password_reset_email_link).deliver_now
+      mailer_send(:reset_password, email_to, reset_password_email_link)
     end
     send_verify_account_email do
-      RodauthMailer.verify_account(email_to, verify_account_email_link).deliver_now
+      mailer_send(:verify_account, email_to, verify_account_email_link)
     end
     send_verify_login_change_email do |login|
-      RodauthMailer.verify_login_change(login, verify_login_change_old_login, verify_login_change_new_login, verify_login_change_email_link).deliver_now
+      mailer_send(:verify_login_change, login, verify_login_change_old_login, verify_login_change_new_login, verify_login_change_email_link)
     end
     send_password_changed_email do
-      RodauthMailer.password_changed(email_to).deliver_now
+      mailer_send(:password_changed, email_to)
     end
     # send_email_auth_email do
-    #   RodauthMailer.email_auth(email_to, email_auth_email_link).deliver_now
+    #   mailer_send(:email_auth, email_to, email_auth_email_link)
     # end
     # send_unlock_account_email do
-    #   RodauthMailer.unlock_account(email_to, unlock_account_email_link).deliver_now
+    #   mailer_send(:unlock_account, email_to, unlock_account_email_link)
     # end
+    auth_class_eval do
+      # queue email delivery on the mailer after the transaction commits
+      def mailer_send(type, *args)
+        db.after_commit do
+          RodauthMailer.public_send(type, *args).deliver_later
+        end
+      end
+    end
     # ...
   end
 end
@@ -399,7 +407,7 @@ The Rodauth app stores the `Rodauth::Auth` instance in the Rack env hash, which
 is then available in your Rails app:
 
 ```rb
-request.env["rodauth"] #=> #<Rodauth::Auth>
+request.env["rodauth"]           #=> #<Rodauth::Auth>
 request.env["rodauth.secondary"] #=> #<Rodauth::Auth> (if using multiple configurations)
 ```
 
@@ -409,13 +417,13 @@ and controllers:
 ```rb
 class MyController < ApplicationController
   def my_action
-    rodauth #=> #<Rodauth::Auth>
+    rodauth             #=> #<Rodauth::Auth>
     rodauth(:secondary) #=> #<Rodauth::Auth> (if using multiple configurations)
   end
 end
 ```
 ```erb
-<% rodauth #=> #<Rodauth::Auth> %>
+<% rodauth             #=> #<Rodauth::Auth> %>
 <% rodauth(:secondary) #=> #<Rodauth::Auth> (if using multiple configurations) %>
 ```
 
@@ -431,11 +439,11 @@ integration for Rodauth:
 * uses ActionMailer for sending emails
 
 The `configure { ... }` method wraps configuring the Rodauth plugin, forwarding
-any additional [options].
+any additional [plugin options].
 
 ```rb
 configure { ... }             # defining default Rodauth configuration
-configure(json: true)         # passing options to the Rodauth plugin
+configure(json: true) { ... } # passing options to the Rodauth plugin
 configure(:secondary) { ... } # defining multiple Rodauth configurations
 ```
 
@@ -485,6 +493,20 @@ Rodauth::Rails.configure do |config|
 end
 ```
 
+## Working with JWT
+
+To use Rodauth's [JWT feature], you'll need to load Roda's JSON support:
+
+```rb
+# lib/rodauth_app.rb
+class RodauthApp < Rodauth::Rails::App
+  configure(json: true) do
+    enable :jwt
+    # your configuration
+  end
+end
+```
+
 ## Testing
 
 If you're writing system tests, it's generally better to go through the actual
@@ -535,7 +557,7 @@ rodauth-rails changes some of the default Rodauth settings for easier setup:
 
 ### Database functions
 
-By default on PostgreSQL, MySQL, and Microsoft SQL Server, Rodauth uses
+By default, on PostgreSQL, MySQL, and Microsoft SQL Server Rodauth uses
 database functions to access password hashes, with the user running the
 application unable to get direct access to password hashes. This reduces the
 risk of an attacker being able to access password hashes and use them to attack
@@ -546,7 +568,11 @@ to reason about, as it requires having two different database users and making
 sure the correct migration is run for the correct user.
 
 To keep with Rails' "convention over configuration" doctrine, rodauth-rails
-disables the use of database functions, though it can still be turned back on.
+disables the use of database functions, though you can always turn it back on.
+
+```rb
+use_database_authentication_functions? true
+```
 
 ### Account statuses
 
@@ -560,8 +586,32 @@ tests by default, but it's also commonly done in development.
 
 To address this, rodauth-rails modifies the setup to store account status text
 directly in the accounts table. If you're worried about invalid status values
-creeping in, you may use enums instead. Alternatively, you can still go back to
-the setup recommended by Rodauth.
+creeping in, you may use enums instead. Alternatively, you can always go back
+to the setup recommended by Rodauth.
+
+```rb
+# in the migration:
+create_table :account_statuses do |t|
+  t.string :name, null: false, unique: true
+end
+execute "INSERT INTO account_statuses (id, name) VALUES (1, 'Unverified'), (2, 'Verified'), (3, 'Closed')"
+
+create_table :accounts do |t|
+  # ...
+  t.references :status, foreign_key: { to_table: :account_statuses }, null: false, default: 1
+  # ...
+end
+```
+```diff
+configure do
+  # ...
+- account_status_column :status
+- account_unverified_status_value "unverified"
+- account_open_status_value "verified"
+- account_closed_status_value "closed"
+  # ...
+end
+```
 
 ## License
 
@@ -578,12 +628,11 @@ conduct](https://github.com/janko/rodauth-rails/blob/master/CODE_OF_CONDUCT.md).
 [Sequel]: https://github.com/jeremyevans/sequel
 [rendering views outside of controllers]: https://blog.bigbinary.com/2016/01/08/rendering-views-outside-of-controllers-in-rails-5.html
 [feature documentation]: http://rodauth.jeremyevans.net/documentation.html
-[Rodauth plugin]: https://github.com/jeremyevans/rodauth/#label-Plugin+Options
+[JWT feature]: http://rodauth.jeremyevans.net/rdoc/files/doc/jwt_rdoc.html
 [Bootstrap]: https://getbootstrap.com/
 [Roda]: http://roda.jeremyevans.net/
 [HMAC]: http://rodauth.jeremyevans.net/rdoc/files/README_rdoc.html#label-HMAC
 [database authentication functions]: http://rodauth.jeremyevans.net/rdoc/files/README_rdoc.html#label-Password+Hash+Access+Via+Database+Functions
-[multiple configurations]: http://rodauth.jeremyevans.net/rdoc/files/README_rdoc.html#label-With+Multiple+Configurations
-[views]: /app/views/rodauth
 [Rodauth migration]: http://rodauth.jeremyevans.net/rdoc/files/README_rdoc.html#label-Creating+tables
 [sequel-activerecord_connection]: https://github.com/janko/sequel-activerecord_connection
+[plugin options]: http://rodauth.jeremyevans.net/rdoc/files/README_rdoc.html#label-Plugin+Options

data/lib/generators/rodauth/install_generator.rb

@@ -1,7 +1,6 @@
 require "rails/generators/base"
 require "rails/generators/migration"
 require "rails/generators/active_record"
-require "rodauth/version"
 
 module Rodauth
   module Rails
@@ -24,7 +23,8 @@ module Rodauth
 
         def create_sequel_initializer
           return unless defined?(ActiveRecord::Base)
-          return unless %w[postgresql mysql2 sqlite3].include?(adapter)
+          return unless %w[postgresql mysql2 sqlite3].include?(activerecord_adapter)
+          return if defined?(Sequel) && !Sequel::DATABASES.empty?
 
           template "config/initializers/sequel.rb"
         end
@@ -56,7 +56,25 @@ module Rodauth
           end
         end
 
-        def adapter
+        if RUBY_ENGINE == "jruby"
+          def sequel_adapter
+            case activerecord_adapter
+            when "postgresql" then "postgresql"
+            when "mysql2"     then "mysql"
+            when "sqlite3"    then "sqlite"
+            end
+          end
+        else
+          def sequel_adapter
+            case activerecord_adapter
+            when "postgresql" then "postgres"
+            when "mysql2"     then "mysql2"
+            when "sqlite3"    then "sqlite"
+            end
+          end
+        end
+
+        def activerecord_adapter
           ActiveRecord::Base.connection_config.fetch(:adapter)
         end
       end

data/lib/generators/rodauth/mailer_generator.rb

@@ -1,5 +1,4 @@
 require "rails/generators/base"
-require "rodauth/version"
 
 module Rodauth
   module Rails

data/lib/generators/rodauth/templates/app/views/rodauth/_email_auth_request_form.html.erb

@@ -0,0 +1,4 @@
+<%%= form_tag rodauth.email_auth_request_path, method: :post do %>
+  <%%= render "login_hidden_field" %>
+  <%%= render "submit", value: "Send Login Link Via Email" %>
+<%% end %>

data/lib/generators/rodauth/templates/app/views/rodauth/_field.html.erb

@@ -0,0 +1,10 @@
+<%%= text_field_tag name, local_assigns[:value] || params[name],
+  type: local_assigns[:type] || "text",
+  id: local_assigns[:id],
+  autocomplete: local_assigns[:autocomplete],
+  inputmode: local_assigns[:inputmode],
+  required: local_assigns[:required] != false,
+  class: "#{local_assigns[:class] || "form-control"} #{"is-invalid" if rodauth.field_error(name)}",
+  aria: ({ invalid: "true", describedby: "#{name}_error_message" } if rodauth.field_error(name)) %>
+
+<%%= render "field_error", name: name unless local_assigns[:skip_error_message] %>

data/lib/generators/rodauth/templates/app/views/rodauth/_field_error.html.erb

@@ -0,0 +1,3 @@
+<%% if rodauth.field_error(name) %>
+  <div class="invalid-feedback" id="<%%= name %>_error_message"><%%= rodauth.field_error(name) %></div>
+<%% end %>

data/lib/generators/rodauth/templates/app/views/rodauth/_global_logout_field.html.erb

@@ -0,0 +1,6 @@
+<div class="form-group">
+  <div class="form-check">
+    <%%= check_box_tag rodauth.global_logout_param, "t", false, id: "global-logout", class: "form-check-input" %>
+    <%%= label_tag "global-logout", "Logout all Logged In Sessons?", class: "form-check-label" %>
+  </div>
+</div>

data/lib/generators/rodauth/templates/app/views/rodauth/_login_confirm_field.html.erb

@@ -0,0 +1,4 @@
+<div class="form-group">
+  <%%= label_tag "login-confirm", "Confirm Login" %>
+  <%%= render "field", name: rodauth.login_confirm_param, id: "login-confirm", type: :email, autocomplete: "email" %>
+</div>

data/lib/generators/rodauth/templates/app/views/rodauth/_login_display.html.erb

@@ -0,0 +1,4 @@
+<div class="form-group">
+  <%%= label_tag "login", "Login" %>
+  <%%= email_field_tag rodauth.login_param, params[rodauth.login_param], id: "login", readonly: true, class: "form-control-plaintext" %>
+</div>

data/lib/generators/rodauth/templates/app/views/rodauth/_login_field.html.erb

@@ -0,0 +1,4 @@
+<div class="form-group">
+  <%%= label_tag "login", "Login" %>
+  <%%= render "field", name: rodauth.login_param, id: "login", type: :email, autocomplete: "email" %>
+</div>

data/lib/generators/rodauth/templates/app/views/rodauth/_login_form.html.erb

@@ -0,0 +1,9 @@
+<%%= form_tag rodauth.login_path, method: :post do %>
+  <%% if rodauth.skip_login_field_on_login? %>
+    <%%= render "login_display" %>
+  <%% else %>
+    <%%= render "login_field" %>
+  <%% end %>
+  <%%= render "password_field" unless rodauth.skip_password_field_on_login? %>
+  <%%= render "submit", value: "Login" %>
+<%% end %>

data/lib/generators/rodauth/templates/app/views/rodauth/_login_form_footer.html.erb

@@ -0,0 +1,8 @@
+<%% unless rodauth.login_form_footer_links.empty? %>
+  <h2>Other Options</h2>
+  <ul>
+    <%% rodauth.login_form_footer_links.sort.each do |_, link, text| %>
+      <li><%%= link_to text, link %></li>
+    <%% end %>
+  </ul>
+<%% end %>

data/lib/generators/rodauth/templates/app/views/rodauth/_login_form_header.html.erb

@@ -0,0 +1,3 @@
+<%% if rodauth.field_error("password") && rodauth.features.include?(:reset_password) %>
+  <%%= render template: "<%= options[:directory] %>/reset_password_request", layout: false %>
+<%% end %>

data/lib/generators/rodauth/templates/app/views/rodauth/_login_hidden_field.html.erb

@@ -0,0 +1 @@
+<%%= hidden_field_tag rodauth.login_param, params[rodauth.login_param] %>

data/lib/generators/rodauth/templates/app/views/rodauth/_new_password_field.html.erb

@@ -0,0 +1,4 @@
+<div class="form-group">
+  <%%= label_tag "new-password", "New Password" %>
+  <%%= render "field", name: rodauth.new_password_param, id: "new-password", type: "password", value: "", autocomplete: "new-password" %>
+</div>

data/lib/generators/rodauth/templates/app/views/rodauth/_otp_auth_code_field.html.erb

@@ -0,0 +1,8 @@
+<div class="form-group">
+  <%%= label_tag "otp-auth-code", "Authentication Code" %>
+  <div class="row">
+    <div class="col-sm-3">
+      <%%= render "field", name: rodauth.otp_auth_param, id: "otp-auth-code", value: "", autocomplete: "off", inputmode: "numeric" %>
+    </div>
+  </div>
+</div>

data/lib/generators/rodauth/templates/app/views/rodauth/_password_confirm_field.html.erb

@@ -0,0 +1,4 @@
+<div class="form-group">
+  <%%= label_tag "password-confirm", "Confirm Password" %>
+  <%%= render "field", name: rodauth.password_confirm_param, id: "password-confirm", type: :password, value: "", autocomplete: "new-password" %>
+</div>

data/lib/generators/rodauth/templates/app/views/rodauth/_password_field.html.erb

@@ -0,0 +1,4 @@
+<div class="form-group">
+  <%%= label_tag "password", "Password" %>
+  <%%= render "field", name: rodauth.password_param, id: "password", type: :password, value: "", autocomplete: rodauth.password_field_autocomplete_value %>
+</div>

data/lib/generators/rodauth/templates/app/views/rodauth/_recovery_code_field.html.erb

@@ -0,0 +1,4 @@
+<div class="form-group">
+  <%%= label_tag "recovery_code", "Recovery Code" %>
+  <%%= render "field", name: rodauth.recovery_codes_param, id: "recovery_code", value: "", autocomplete: "off" %>
+</div>

data/lib/generators/rodauth/templates/app/views/rodauth/_recovery_codes_form.html.erb

@@ -0,0 +1,6 @@
+<%%= form_tag rodauth.recovery_codes_path, method: :post do %>
+  <%%= render "password_field" if rodauth.two_factor_modifications_require_password? %>
+  <%%= render "submit",
+    value: rodauth.recovery_codes_button || "View Authentication Recovery Codes",
+    name: (rodauth.add_recovery_codes_param if rodauth.recovery_codes_button) %>
+<%% end %>

data/lib/generators/rodauth/templates/app/views/rodauth/_sms_code_field.html.erb

@@ -0,0 +1,8 @@
+<div class="form-group">
+  <%%= label_tag "sms-code", "SMS Code" %>
+  <div class="row">
+    <div class="col-sm-3">
+      <%%= render "field", name: rodauth.sms_code_param, id: "sms-code", value: "", autocomplete: "one-time-code", inputmode: "numeric" %>
+    </div>
+  </div>
+</div>

data/lib/generators/rodauth/templates/app/views/rodauth/_sms_phone_field.html.erb

@@ -0,0 +1,8 @@
+<div class="form-group">
+  <%%= label_tag "sms-phone", "Phone Number" %>
+  <div class="row">
+    <div class="col-sm-3">
+      <%%= render "field", name: rodauth.sms_phone_param, id: "sms-phone", type: :tel, autocomplete: "tel" %>
+    </div>
+  </div>
+</div>

data/lib/generators/rodauth/templates/app/views/rodauth/_submit.html.erb

@@ -0,0 +1,3 @@
+<div class="form-group">
+  <%%= submit_tag local_assigns[:value], name: local_assigns[:name], class: local_assigns[:class] || "btn btn-primary" %>
+</div>

data/lib/generators/rodauth/templates/app/views/rodauth/add_recovery_codes.html.erb

@@ -0,0 +1,6 @@
+<pre id="recovery-codes"><%%= rodauth.recovery_codes.map { |s| h(s) }.join("\n\n") %></pre>
+
+<%% if rodauth.can_add_recovery_codes? %>
+  <h2>Add Additional Recovery Codes</h2>
+  <%%= render "recovery_codes_form" %>
+<%% end %>

data/lib/generators/rodauth/templates/app/views/rodauth/change_login.html.erb

@@ -0,0 +1,6 @@
+<%%= form_tag rodauth.change_login_path, method: :post do %>
+  <%%= render "login_field" %>
+  <%%= render "login_confirm_field" if rodauth.require_login_confirmation? %>
+  <%%= render "password_field" if rodauth.change_login_requires_password? %>
+  <%%= render "submit", value: "Change Login" %>
+<%% end %>

data/lib/generators/rodauth/templates/app/views/rodauth/change_password.html.erb

@@ -0,0 +1,6 @@
+<%%= form_tag rodauth.change_password_path, method: :post do %>
+  <%%= render "password_field" if rodauth.change_password_requires_password? %>
+  <%%= render "new_password_field" %>
+  <%%= render "password_confirm_field" if rodauth.require_password_confirmation? %>
+  <%%= render "submit", value: "Change Password" %>
+<%% end %>

data/lib/generators/rodauth/templates/app/views/rodauth/close_account.html.erb

@@ -0,0 +1,4 @@
+<%%= form_tag rodauth.close_account_path, method: :post do %>
+  <%%= render "password_field" if rodauth.close_account_requires_password? %>
+  <%%= render "submit", value: "Close Account", class: "btn btn-danger" %>
+<%% end %>

data/lib/generators/rodauth/templates/app/views/rodauth/confirm_password.html.erb

@@ -0,0 +1,4 @@
+<%%= form_tag rodauth.confirm_password_path, method: :post do %>
+  <%%= render "password_field" %>
+  <%%= render "submit", value: "Confirm Password" %>
+<%% end %>

data/lib/generators/rodauth/templates/app/views/rodauth/create_account.html.erb

@@ -0,0 +1,7 @@
+<%%= form_tag rodauth.create_account_path, method: :post do %>
+  <%%= render "login_field" %>
+  <%%= render "login_confirm_field" if rodauth.require_login_confirmation? %>
+  <%%= render "password_field" if rodauth.create_account_set_password? %>
+  <%%= render "password_confirm_field" if rodauth.create_account_set_password? && rodauth.require_password_confirmation? %>
+  <%%= render "submit", value: "Create Account" %>
+<%% end %>

data/lib/generators/rodauth/templates/app/views/rodauth/email_auth.html.erb

@@ -0,0 +1,3 @@
+<%%= form_tag rodauth.email_auth_path, method: :post do %>
+  <%%= render "submit", value: "Login" %>
+<%% end %>

data/lib/generators/rodauth/templates/app/views/rodauth/login.html.erb

@@ -0,0 +1,3 @@
+<%%= render "login_form_header" %>
+<%%= render "login_form" %>
+<%%= render "login_form_footer" %>

data/lib/generators/rodauth/templates/app/views/rodauth/logout.html.erb

@@ -0,0 +1,4 @@
+<%%= form_tag rodauth.logout_path, method: :post do %>
+  <%%= render "global_logout_field" if rodauth.features.include?(:active_sessions) %>
+  <%%= render "submit", value: "Logout", class: "btn btn-warning" %>
+<%% end %>

data/lib/generators/rodauth/templates/app/views/rodauth/multi_phase_login.html.erb

@@ -0,0 +1,3 @@
+<%%= render "login_form_header" %>
+<%%= rodauth.render_multi_phase_login_forms.html_safe %>
+<%%= render "login_form_footer" %>

data/lib/generators/rodauth/templates/app/views/rodauth/otp_auth.html.erb

@@ -0,0 +1,4 @@
+<%%= form_tag rodauth.otp_auth_path, method: :post do %>
+  <%%= render "otp_auth_code_field" %>
+  <%%= render "submit", value: "Authenticate Using TOTP" %>
+<%% end %>

data/lib/generators/rodauth/templates/app/views/rodauth/otp_disable.html.erb

@@ -0,0 +1,4 @@
+<%%= form_tag rodauth.otp_disable_path, method: :post do %>
+  <%%= render "password_field" if rodauth.two_factor_modifications_require_password? %>
+  <%%= render "submit", value: "Disable TOTP Authentication", class: "btn btn-warning" %>
+<%% end %>

data/lib/generators/rodauth/templates/app/views/rodauth/otp_setup.html.erb

@@ -0,0 +1,23 @@
+<%%= form_tag rodauth.otp_setup_path, method: :post do %>
+  <%%= hidden_field_tag rodauth.otp_setup_param, rodauth.otp_user_key, id: "otp-key" %>
+  <%%= hidden_field_tag rodauth.otp_setup_raw_param, rodauth.otp_key, id: "otp-hmac-secret" if rodauth.otp_keys_use_hmac? %>
+
+  <div class="form-group">
+    <p>Secret: <%%= rodauth.otp_user_key %></p>
+    <p>Provisioning URL: <%%= rodauth.otp_provisioning_uri %></p>
+  </div>
+
+  <div class="row">
+    <div class="col-lg-6 col-lg">
+      <div class="form-group">
+        <p><%%= rodauth.otp_qr_code.html_safe %></p>
+      </div>
+    </div>
+
+    <div class="col-lg-6 col-lg">
+      <%%= render "password_field" if rodauth.two_factor_modifications_require_password? %>
+      <%%= render "otp_auth_code_field" %>
+      <%%= render "submit", value: "Setup TOTP Authentication" %>
+    </div>
+  </div>
+<%% end %>

data/lib/generators/rodauth/templates/app/views/rodauth/recovery_auth.html.erb

@@ -0,0 +1,4 @@
+<%%= form_tag rodauth.recovery_auth_path, method: :post do %>
+  <%%= render "recovery_code_field" %>
+  <%%= render "submit", value: "Authenticate via Recovery Code" %>
+<%% end %>

data/lib/generators/rodauth/templates/app/views/rodauth/recovery_codes.html.erb

@@ -0,0 +1 @@
+<%%= render "recovery_codes_form" %>

data/lib/generators/rodauth/templates/app/views/rodauth/remember.html.erb

@@ -0,0 +1,19 @@
+<%%= form_tag rodauth.remember_path, method: :post do %>
+  <fieldset class="form-group">
+    <div class="form-check">
+      <%%= radio_button_tag rodauth.remember_param, rodauth.remember_remember_param_value, false, id: "remember-remember", class: "form-check-input" %>
+      <%%= label_tag "remember-remember", "Remember Me", class: "form-check-label" %>
+    </div>
+
+    <div class="form-check">
+      <%%= radio_button_tag rodauth.remember_param, rodauth.remember_forget_param_value, false, id: "remember-forget", class: "form-check-input" %>
+      <%%= label_tag "remember-forget", "Forget Me", class: "form-check-label" %>
+    </div>
+
+    <div class="form-check">
+      <%%= radio_button_tag rodauth.remember_param, rodauth.remember_disable_param_value, false, id: "remember-disable", class: "form-check-input" %>
+      <%%= label_tag "remember-disable", "Disable Remember Me", class: "form-check-label" %>
+    </div>
+  </fieldset>
+  <%%= render "submit", value: "Change Remember Setting" %>
+<%% end %>

data/lib/generators/rodauth/templates/app/views/rodauth/reset_password.html.erb

@@ -0,0 +1,5 @@
+<%%= form_tag rodauth.reset_password_path, method: :post do %>
+  <%%= render "password_field" %>
+  <%%= render "password_confirm_field" if rodauth.require_password_confirmation? %>
+  <%%= render "submit", value: "Reset Password" %>
+<%% end %>

data/lib/generators/rodauth/templates/app/views/rodauth/reset_password_request.html.erb

@@ -0,0 +1,9 @@
+<%%= form_tag rodauth.reset_password_request_path, method: :post do %>
+  <p>If you have forgotten your password, you can request a password reset:</p>
+  <%% if params[rodauth.login_param] && !rodauth.field_error(rodauth.login_param) %>
+    <%%= render "login_hidden_field" %>
+  <%% else %>
+    <%%= render "login_field" %>
+  <%% end %>
+  <%%= render "submit", value: "Request Password Reset" %>
+<%% end %>

data/lib/generators/rodauth/templates/app/views/rodauth/sms_auth.html.erb

@@ -0,0 +1,4 @@
+<%%= form_tag rodauth.sms_auth_path, method: :post do %>
+  <%%= render "sms_code_field" %>
+  <%%= render "submit", value: "Authenticate via SMS Code" %>
+<%% end %>

data/lib/generators/rodauth/templates/app/views/rodauth/sms_confirm.html.erb

@@ -0,0 +1,4 @@
+<%%= form_tag rodauth.sms_confirm_path, method: :post do %>
+  <%%= render "sms_code_field" %>
+  <%%= render "submit", value: "Confirm SMS Backup Number" %>
+<%% end %>

data/lib/generators/rodauth/templates/app/views/rodauth/sms_disable.html.erb

@@ -0,0 +1,4 @@
+<%%= form_tag rodauth.sms_disable_path, method: :post do %>
+  <%%= render "password_field" if rodauth.two_factor_modifications_require_password? %>
+  <%%= render "submit", value: "Disable Backup SMS Authentication" %>
+<%% end %>

data/lib/generators/rodauth/templates/app/views/rodauth/sms_request.html.erb

@@ -0,0 +1,3 @@
+<%%= form_tag rodauth.sms_request_path, method: :post do %>
+  <%%= render "submit", value: "Send SMS Code" %>
+<%% end %>

data/lib/generators/rodauth/templates/app/views/rodauth/sms_setup.html.erb

@@ -0,0 +1,5 @@
+<%%= form_tag rodauth.sms_setup_path, method: :post do %>
+  <%%= render "password_field" if rodauth.two_factor_modifications_require_password? %>
+  <%%= render "sms_phone_field" %>
+  <%%= render "submit", value: "Setup SMS Backup Number" %>
+<%% end %>

data/lib/generators/rodauth/templates/app/views/rodauth/two_factor_auth.html.erb

@@ -0,0 +1,5 @@
+<ul>
+  <%% rodauth.two_factor_auth_links.sort.each do |_, link, text| %>
+    <li><%%= link_to text, link %></li>
+  <%% end %>
+</ul>

data/lib/generators/rodauth/templates/app/views/rodauth/two_factor_disable.html.erb

@@ -0,0 +1,4 @@
+<%%= form_tag rodauth.two_factor_disable_path, method: :post do %>
+  <%%= render "password_field" if rodauth.two_factor_modifications_require_password? %>
+  <%%= render "submit", value: "Remove All Multifactor Authentication Methods" %>
+<%% end %>

data/lib/generators/rodauth/templates/app/views/rodauth/two_factor_manage.html.erb

@@ -0,0 +1,22 @@
+<%% if rodauth.two_factor_setup_links.any? %>
+  <h2>Setup Multifactor Authentication</h2>
+
+  <ul>
+    <%% rodauth.two_factor_setup_links.sort.each do |_, link, text| %>
+      <li><%%= link_to text, link %></li>
+    <%% end %>
+  </ul>
+<%% end %>
+
+<%% if rodauth.two_factor_remove_links.any? %>
+  <h2>Remove Multifactor Authentication</h2>
+
+  <ul>
+    <%% rodauth.two_factor_remove_links.sort.each do |_, link, text| %>
+      <li><%%= link_to text, link %></li>
+    <%% end %>
+    <%% if rodauth.two_factor_remove_links.length > 1 %>
+      <li><%%= link_to "Remove All Multifactor Authentication Methods", rodauth.two_factor_disable_path %></li>
+    <%% end %>
+  </ul>
+<%% end %>

data/lib/generators/rodauth/templates/app/views/rodauth/unlock_account.html.erb

@@ -0,0 +1,5 @@
+<%%= form_tag rodauth.unlock_account_path, method: :post do %>
+  <p>This account is currently locked out.  You can unlock the account:</p>
+  <%%= render "password_field" if rodauth.unlock_account_requires_password? %>
+  <%%= render "submit", value: "Unlock Account" %>
+<%% end %>

data/lib/generators/rodauth/templates/app/views/rodauth/unlock_account_request.html.erb

@@ -0,0 +1,5 @@
+<%%= form_tag rodauth.unlock_account_request_path, method: :post do %>
+  <p>This account is currently locked out.  You can request that the account be unlocked:</p>
+  <%%= render "login_hidden_field" %>
+  <%%= render "submit", value: "Request Account Unlock" %>
+<%% end %>

data/lib/generators/rodauth/templates/app/views/rodauth/verify_account.html.erb

@@ -0,0 +1,5 @@
+<%%= form_tag rodauth.verify_account_path, method: :post do %>
+  <%%= render "password_field" if rodauth.verify_account_set_password? %>
+  <%%= render "password_confirm_field" if rodauth.verify_account_set_password? && rodauth.require_password_confirmation? %>
+  <%%= render "submit", value: "Verify Account" %>
+<%% end %>

data/lib/generators/rodauth/templates/app/views/rodauth/verify_account_resend.html.erb

@@ -0,0 +1,9 @@
+<%%= form_tag rodauth.verify_account_resend_path, method: :post do %>
+  <p>If you no longer have the email to verify the account, you can request that it be resent to you:</p>
+  <%% if params[rodauth.login_param] %>
+    <%%= render "login_hidden_field" %>
+  <%% else %>
+    <%%= render "login_field" %>
+  <%% end %>
+  <%%= render "submit", value: "Send Verification Login Again" %>
+<%% end %>

data/lib/generators/rodauth/templates/app/views/rodauth/verify_login_change.html.erb

@@ -0,0 +1,3 @@
+<%%= form_tag rodauth.verify_login_change_path, method: :post do %>
+  <%%= render "submit", value: "Verify Login Change" %>
+<%% end %>

data/lib/generators/rodauth/templates/app/views/rodauth/webauthn_auth.html.erb

@@ -0,0 +1,13 @@
+<%% cred = rodauth.webauth_credential_options_for_get %>
+
+<%%= form_tag rodauth.webauthn_auth_form_path, method: :post, id: "webauthn-auth-form", data: { credential_options: cred.as_json.to_json } do %>
+  <%%= render "login_hidden_field" if params[rodauth.login_param] %>
+  <%%= hidden_field_tag rodauth.webauthn_auth_challenge_param, cred.challenge %>
+  <%%= hidden_field_tag rodauth.webauthn_auth_challenge_hmac_param, rodauth.compute_hmac(cred.challenge) %>
+  <%%= text_field_tag rodauth.webauthn_auth_param, "", id: "webauthn-auth", aria: { hidden: "true" } %>
+  <div id="webauthn-auth-button">
+    <%%= render "submit", value: "Authenticate Using WebAuthn" %>
+  </div>
+<%% end %>
+
+<%%= javascript_include_tag rodauth.webauthn_auth_js_path %>

data/lib/generators/rodauth/templates/app/views/rodauth/webauthn_remove.html.erb

@@ -0,0 +1,13 @@
+<%%= form_tag rodauth.webauthn_remove_path, method: :post, id: "webauthn-remove-form" do %>
+  <%%= render "password_field" if rodauth.two_factor_modifications_require_password? %>
+  <fieldset class="form-group">
+    <%% (usage = rodauth.account_webauthn_usage).each do |id, last_use| %>
+      <div class="form-check">
+        <%%= render "field", name: rodauth.webauthn_remove_param, id: "webauthn-remove-#{id}", type: :radio, class: "form-check-input", skip_error_message: true, value: id, required: false %>
+        <%%= label_tag "webauthn-remove-#{id}", "Last use: #{last_use}", class: "form-check-label" %>
+        <%%= render "field_error", name: rodauth.webauthn_remove_param if id == usage.keys.last %>
+      </div>
+    <%% end %>
+  </fieldset>
+  <%%= render "submit", value: "Remove WebAuthn Authenticator" %>
+<%% end %>

data/lib/generators/rodauth/templates/app/views/rodauth/webauthn_setup.html.erb

@@ -0,0 +1,13 @@
+<%% cred = rodauth.new_webauthn_credential %>
+
+<%%= form_tag rodauth.webauthn_setup_path, method: :post, id: "webauthn-setup-form", data: { credential_options: cred.as_json.to_json } do %>
+  <%%= hidden_field_tag rodauth.webauthn_setup_challenge_param, cred.challenge %>
+  <%%= hidden_field_tag rodauth.webauthn_setup_challenge_hmac_param, rodauth.compute_hmac(cred.challenge) %>
+  <%%= text_field_tag rodauth.webauthn_setup_param, "", id: "webauthn-setup", aria: { hidden: "true" } %>
+  <%%= render "password_field" if rodauth.two_factor_modifications_require_password? %>
+  <div id="webauthn-setup-button"> 
+    <%%= render "submit", value: "Setup WebAuthn Authentication" %>
+  </div>
+<%% end %>
+
+<%%= javascript_include_tag rodauth.webauthn_setup_js_path %>

data/lib/generators/rodauth/templates/app/views/rodauth_mailer/email_auth.text.erb

@@ -0,0 +1,5 @@
+Someone has requested a login link for the account with this email
+address.  If you did not request a login link, please ignore this
+message.  If you requested a login link, please go to
+<%%= @email_link %>
+to login to this account.

data/lib/generators/rodauth/templates/app/views/rodauth_mailer/password_changed.text.erb

@@ -0,0 +1,2 @@
+Someone (hopefully you) has changed the password for the account
+associated to this email address.

data/lib/generators/rodauth/templates/app/views/rodauth_mailer/reset_password.text.erb

@@ -0,0 +1,5 @@
+Someone has requested a password reset for the account with this email
+address.  If you did not request a password reset, please ignore this
+message.  If you requested a password reset, please go to
+<%%= @email_link %>
+to reset the password for the account.

data/lib/generators/rodauth/templates/app/views/rodauth_mailer/unlock_account.text.erb

@@ -0,0 +1,5 @@
+Someone has requested a that the account with this email be unlocked.
+If you did not request the unlocking of this account, please ignore this
+message.  If you requested the unlocking of this account, please go to
+<%%= @email_link %>
+to unlock this account.

data/lib/generators/rodauth/templates/app/views/rodauth_mailer/verify_account.text.erb

@@ -0,0 +1,4 @@
+Someone has created an account with this email address.  If you did not create
+this account, please ignore this message.  If you created this account, please go to
+<%%= @email_link %>
+to verify the account.

data/lib/generators/rodauth/templates/app/views/rodauth_mailer/verify_login_change.text.erb

@@ -0,0 +1,10 @@
+Someone with an account has requested their login be changed to this email address:
+
+Old email: <%%= @old_login %>
+
+New email: <%%= @new_login %>
+
+If you did not request this login change, please ignore this message.  If you
+requested this login change, please go to
+<%%= @email_link %>
+to verify the login change.

data/lib/generators/rodauth/templates/config/initializers/sequel.rb

@@ -1,13 +1,10 @@
 require "sequel/core"
 
 # initialize the appropriate Sequel adapter without creating a connection
-<% case adapter -%>
-<% when "postgresql" -%>
-DB = Sequel.postgres(test: false)
-<% when "mysql2" -%>
-DB = Sequel.mysql2(test: false)
-<% when "sqlite3" -%>
-DB = Sequel.sqlite(test: false)
+<%- if RUBY_ENGINE == "jruby" -%>
+DB = Sequel.connect("jdbc:<%= sequel_adapter %>://", test: false)
+<% else -%>
+DB = Sequel.<%= sequel_adapter %>(test: false)
 <% end -%>
 # have Sequel use ActiveRecord's connection for database interaction
 DB.extension :activerecord_connection

data/lib/generators/rodauth/templates/db/migrate/create_rodauth.rb

@@ -1,11 +1,11 @@
 class CreateRodauth < ActiveRecord::Migration<%= migration_version %>
   def change
-<% if adapter == "postgresql" -%>
+<% if activerecord_adapter == "postgresql" -%>
     enable_extension "citext"
 
 <% end -%>
     create_table :accounts do |t|
-<% case adapter -%>
+<% case activerecord_adapter -%>
 <% when "postgresql" -%>
       t.citext :email, null: false, index: { unique: true, where: "status IN ('verified', 'unverified')" }
 <% else -%>
@@ -56,7 +56,7 @@ class CreateRodauth < ActiveRecord::Migration<%= migration_version %>
     #   t.references :account, null: false
     #   t.datetime :at, null: false, default: -> { "CURRENT_TIMESTAMP" }
     #   t.text :message, null: false
-<% case adapter -%>
+<% case activerecord_adapter -%>
 <% when "postgresql" -%>
     #   t.jsonb :metadata
 <% when "sqlite3", "mysql2" -%>

data/lib/generators/rodauth/templates/lib/rodauth_app.rb

@@ -42,26 +42,31 @@ class RodauthApp < Rodauth::Rails::App
     # ==> Emails
     # Uncomment the lines below once you've imported mailer views.
     # send_reset_password_email do
-    #   RodauthMailer.reset_password(email_to, password_reset_email_link).deliver_now
+    #   mailer_send(:reset_password, email_to, reset_password_email_link)
     # end
     # send_verify_account_email do
-    #   RodauthMailer.verify_account(email_to, verify_account_email_link).deliver_now
+    #   mailer_send(:verify_account, email_to, verify_account_email_link)
     # end
     # send_verify_login_change_email do |login|
-    #   RodauthMailer.verify_login_change(login, verify_login_change_old_login, verify_login_change_new_login, verify_login_change_email_link).deliver_now
+    #   mailer_send(:verify_login_change, login, verify_login_change_old_login, verify_login_change_new_login, verify_login_change_email_link)
     # end
     # send_password_changed_email do
-    #   RodauthMailer.password_changed(email_to).deliver_now
+    #   mailer_send(:password_changed, email_to)
     # end
     # # send_email_auth_email do
-    # #   RodauthMailer.email_auth(email_to, email_auth_email_link).deliver_now
+    # #   mailer_send(:email_auth, email_to, email_auth_email_link)
     # # end
     # # send_unlock_account_email do
-<% if Rodauth::MAJOR == 1 -%>
-    # #   @unlock_account_key_value = get_unlock_account_key
-<% end -%>
-    # #   RodauthMailer.unlock_account(email_to, unlock_account_email_link).deliver_now
+    # #   mailer_send(:unlock_account, email_to, unlock_account_email_link)
     # # end
+    # auth_class_eval do
+    #   # queue email delivery on the mailer after the transaction commits
+    #   def mailer_send(type, *args)
+    #     db.after_commit do
+    #       RodauthMailer.public_send(type, *args).deliver_later
+    #     end
+    #   end
+    # end
 
     # In the meantime you can tweak settings for emails created by Rodauth
     # email_subject_prefix "[MyApp] "
@@ -76,7 +81,7 @@ class RodauthApp < Rodauth::Rails::App
 
     # Override default flash messages.
     # create_account_notice_flash "Your account has been created. Please verify your account by visiting the confirmation link sent to your email address."
-    # login_error_flash "Login is required for accessing this page"
+    # require_login_error_flash "Login is required for accessing this page"
     # login_notice_flash nil
 
     # ==> Validation
@@ -99,9 +104,6 @@ class RodauthApp < Rodauth::Rails::App
     # Extend user's remember period when remembered via a cookie
     extend_remember_deadline? true
 
-    # Consider remembered users to be multifactor-authenticated (if using MFA).
-    # after_load_memory { two_factor_update_session("totp") if two_factor_authentication_setup? }
-
     # ==> Hooks
     # Validate custom fields in the create account form.
     # before_create_account do
@@ -134,19 +136,6 @@ class RodauthApp < Rodauth::Rails::App
     # reset_password_deadline_interval Hash[hours: 6]
     # verify_login_change_deadline_interval Hash[days: 2]
     # remember_deadline_interval Hash[days: 30]
-
-    # ==> Extending
-    # Define any additional methods you want for the Rodauth object.
-    # auth_class_eval do
-    #   def my_send_email(name, *args)
-    #     AuthenticationMailer.public_send(name, *args).deliver_later
-    #   end
-    # end
-    #
-    # Then use the new custom method in configuration blocks.
-    # send_password_reset_email do
-    #   my_send_email(:password_reset, email_to, password_reset_email_link)
-    # end
   end
 
   # ==> Multiple configurations

data/lib/generators/rodauth/views_generator.rb

@@ -1,5 +1,4 @@
 require "rails/generators/base"
-require "rodauth/version"
 
 module Rodauth
   module Rails
@@ -104,14 +103,6 @@ module Rodauth
             list |= VIEWS[DEPENDENCIES[feature]] || []
           end
 
-          if Rodauth::MAJOR == 1
-            views -= %w[
-              multi_phase_login _global_logout_field
-              two_factor_manage two_factor_auth two_factor_disable
-              webauthn_setup webauthn_auth webauthn_remove
-            ]
-          end
-
           views.each do |view|
             template "app/views/rodauth/#{view}.html.erb",
               "app/views/#{options[:directory].underscore}/#{view}.html.erb"

data/lib/rodauth/rails.rb

@@ -1,3 +1,4 @@
+require "rodauth/version"
 require "rodauth/rails/railtie"
 
 module Rodauth

data/lib/rodauth/rails/feature.rb

@@ -28,6 +28,16 @@ module Rodauth
         super
     end
 
+    # Verify Rails' authenticity token.
+    def check_csrf
+      rails_check_csrf!
+    end
+
+    # Have Rodauth call #check_csrf automatically.
+    def check_csrf?
+      true
+    end
+
     # Render Rails CSRF tags in Rodauth templates.
     def csrf_tag(*)
       rails_csrf_tag
@@ -40,12 +50,6 @@ module Rodauth
 
     private
 
-    # Verify Rails' authenticity token before each Rodauth route.
-    def before_rodauth
-      rails_check_csrf!
-      super
-    end
-
     # Create emails with ActionMailer which uses configured delivery method.
     def create_email_to(to, subject, body)
       Mailer.create_email(to: to, from: email_from, subject: "#{email_subject_prefix}#{subject}", body: body)

data/rodauth-rails.gemspec

@@ -1,6 +1,6 @@
 Gem::Specification.new do |spec|
   spec.name          = "rodauth-rails"
-  spec.version       = "0.1.0"
+  spec.version       = "0.2.1"
   spec.authors       = ["Janko Marohnić"]
   spec.email         = ["janko.marohnic@gmail.com"]
 
@@ -11,12 +11,12 @@ Gem::Specification.new do |spec|
 
   spec.required_ruby_version = ">= 2.2.0"
 
-  spec.files         = Dir["README.md", "LICENSE.txt", "CHANGELOG.md", "lib/**/*.rb", "*.gemspec"]
+  spec.files         = Dir["README.md", "LICENSE.txt", "CHANGELOG.md", "lib/**/*", "*.gemspec"]
   spec.require_paths = ["lib"]
 
   spec.add_dependency "railties", ">= 4.2", "< 7"
-  spec.add_dependency "rodauth", ">= 1.23", "< 3"
-  spec.add_dependency "sequel-activerecord_connection", "~> 0.2"
+  spec.add_dependency "rodauth", "~> 2.1"
+  spec.add_dependency "sequel-activerecord_connection", "~> 0.3"
   spec.add_dependency "tilt"
   spec.add_dependency "bcrypt"
 end

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: rodauth-rails
 version: !ruby/object:Gem::Version
-  version: 0.1.0
+  version: 0.2.1
 platform: ruby
 authors:
 - Janko Marohnić
 autorequire: 
 bindir: bin
 cert_chain: []
-date: 2020-05-06 00:00:00.000000000 Z
+date: 2020-07-26 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: railties
@@ -34,36 +34,30 @@ dependencies:
   name: rodauth
   requirement: !ruby/object:Gem::Requirement
     requirements:
-    - - ">="
-      - !ruby/object:Gem::Version
-        version: '1.23'
-    - - "<"
+    - - "~>"
       - !ruby/object:Gem::Version
-        version: '3'
+        version: '2.1'
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
-    - - ">="
-      - !ruby/object:Gem::Version
-        version: '1.23'
-    - - "<"
+    - - "~>"
       - !ruby/object:Gem::Version
-        version: '3'
+        version: '2.1'
 - !ruby/object:Gem::Dependency
   name: sequel-activerecord_connection
   requirement: !ruby/object:Gem::Requirement
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: '0.2'
+        version: '0.3'
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: '0.2'
+        version: '0.3'
 - !ruby/object:Gem::Dependency
   name: tilt
   requirement: !ruby/object:Gem::Requirement
@@ -99,6 +93,7 @@ executables: []
 extensions: []
 extra_rdoc_files: []
 files:
+- CHANGELOG.md
 - LICENSE.txt
 - README.md
 - lib/generators/rodauth/install_generator.rb
@@ -106,6 +101,66 @@ files:
 - lib/generators/rodauth/templates/app/controllers/rodauth_controller.rb
 - lib/generators/rodauth/templates/app/mailers/rodauth_mailer.rb
 - lib/generators/rodauth/templates/app/models/account.rb
+- lib/generators/rodauth/templates/app/views/rodauth/_email_auth_request_form.html.erb
+- lib/generators/rodauth/templates/app/views/rodauth/_field.html.erb
+- lib/generators/rodauth/templates/app/views/rodauth/_field_error.html.erb
+- lib/generators/rodauth/templates/app/views/rodauth/_global_logout_field.html.erb
+- lib/generators/rodauth/templates/app/views/rodauth/_login_confirm_field.html.erb
+- lib/generators/rodauth/templates/app/views/rodauth/_login_display.html.erb
+- lib/generators/rodauth/templates/app/views/rodauth/_login_field.html.erb
+- lib/generators/rodauth/templates/app/views/rodauth/_login_form.html.erb
+- lib/generators/rodauth/templates/app/views/rodauth/_login_form_footer.html.erb
+- lib/generators/rodauth/templates/app/views/rodauth/_login_form_header.html.erb
+- lib/generators/rodauth/templates/app/views/rodauth/_login_hidden_field.html.erb
+- lib/generators/rodauth/templates/app/views/rodauth/_new_password_field.html.erb
+- lib/generators/rodauth/templates/app/views/rodauth/_otp_auth_code_field.html.erb
+- lib/generators/rodauth/templates/app/views/rodauth/_password_confirm_field.html.erb
+- lib/generators/rodauth/templates/app/views/rodauth/_password_field.html.erb
+- lib/generators/rodauth/templates/app/views/rodauth/_recovery_code_field.html.erb
+- lib/generators/rodauth/templates/app/views/rodauth/_recovery_codes_form.html.erb
+- lib/generators/rodauth/templates/app/views/rodauth/_sms_code_field.html.erb
+- lib/generators/rodauth/templates/app/views/rodauth/_sms_phone_field.html.erb
+- lib/generators/rodauth/templates/app/views/rodauth/_submit.html.erb
+- lib/generators/rodauth/templates/app/views/rodauth/add_recovery_codes.html.erb
+- lib/generators/rodauth/templates/app/views/rodauth/change_login.html.erb
+- lib/generators/rodauth/templates/app/views/rodauth/change_password.html.erb
+- lib/generators/rodauth/templates/app/views/rodauth/close_account.html.erb
+- lib/generators/rodauth/templates/app/views/rodauth/confirm_password.html.erb
+- lib/generators/rodauth/templates/app/views/rodauth/create_account.html.erb
+- lib/generators/rodauth/templates/app/views/rodauth/email_auth.html.erb
+- lib/generators/rodauth/templates/app/views/rodauth/login.html.erb
+- lib/generators/rodauth/templates/app/views/rodauth/logout.html.erb
+- lib/generators/rodauth/templates/app/views/rodauth/multi_phase_login.html.erb
+- lib/generators/rodauth/templates/app/views/rodauth/otp_auth.html.erb
+- lib/generators/rodauth/templates/app/views/rodauth/otp_disable.html.erb
+- lib/generators/rodauth/templates/app/views/rodauth/otp_setup.html.erb
+- lib/generators/rodauth/templates/app/views/rodauth/recovery_auth.html.erb
+- lib/generators/rodauth/templates/app/views/rodauth/recovery_codes.html.erb
+- lib/generators/rodauth/templates/app/views/rodauth/remember.html.erb
+- lib/generators/rodauth/templates/app/views/rodauth/reset_password.html.erb
+- lib/generators/rodauth/templates/app/views/rodauth/reset_password_request.html.erb
+- lib/generators/rodauth/templates/app/views/rodauth/sms_auth.html.erb
+- lib/generators/rodauth/templates/app/views/rodauth/sms_confirm.html.erb
+- lib/generators/rodauth/templates/app/views/rodauth/sms_disable.html.erb
+- lib/generators/rodauth/templates/app/views/rodauth/sms_request.html.erb
+- lib/generators/rodauth/templates/app/views/rodauth/sms_setup.html.erb
+- lib/generators/rodauth/templates/app/views/rodauth/two_factor_auth.html.erb
+- lib/generators/rodauth/templates/app/views/rodauth/two_factor_disable.html.erb
+- lib/generators/rodauth/templates/app/views/rodauth/two_factor_manage.html.erb
+- lib/generators/rodauth/templates/app/views/rodauth/unlock_account.html.erb
+- lib/generators/rodauth/templates/app/views/rodauth/unlock_account_request.html.erb
+- lib/generators/rodauth/templates/app/views/rodauth/verify_account.html.erb
+- lib/generators/rodauth/templates/app/views/rodauth/verify_account_resend.html.erb
+- lib/generators/rodauth/templates/app/views/rodauth/verify_login_change.html.erb
+- lib/generators/rodauth/templates/app/views/rodauth/webauthn_auth.html.erb
+- lib/generators/rodauth/templates/app/views/rodauth/webauthn_remove.html.erb
+- lib/generators/rodauth/templates/app/views/rodauth/webauthn_setup.html.erb
+- lib/generators/rodauth/templates/app/views/rodauth_mailer/email_auth.text.erb
+- lib/generators/rodauth/templates/app/views/rodauth_mailer/password_changed.text.erb
+- lib/generators/rodauth/templates/app/views/rodauth_mailer/reset_password.text.erb
+- lib/generators/rodauth/templates/app/views/rodauth_mailer/unlock_account.text.erb
+- lib/generators/rodauth/templates/app/views/rodauth_mailer/verify_account.text.erb
+- lib/generators/rodauth/templates/app/views/rodauth_mailer/verify_login_change.text.erb
 - lib/generators/rodauth/templates/config/initializers/rodauth.rb
 - lib/generators/rodauth/templates/config/initializers/sequel.rb
 - lib/generators/rodauth/templates/db/migrate/create_rodauth.rb