rodauth-rails 0.9.0 → 0.9.1

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 60fda35b195285a7c9cc14e07153d80faa9e939cf2944fbb04e1360baf30e306
-  data.tar.gz: 1f89bcfff28e6d08287fa67a9fe9228a2d61f15a8a9cdecb9fcf138137d72c47
+  metadata.gz: b8f8aec1dbdc745a530aabec0d63bc2681499dd36f8185faed9ea09e7184636e
+  data.tar.gz: fbc5a75976a922978a6e37fee3bef8e7f04bb0a9a324066afdf79172b33f00e9
 SHA512:
-  metadata.gz: 8e4ed3afbe7a114ba36f19541d1c8c8ee62de07526400230b1386f027b05876cd78ad88bdb40cae9767e74f83d1532d4939d97d03657662933f81d7086df34d9
-  data.tar.gz: cae1fc15a86f1b2e2423a8e54f36b844f610ba23ff74fd9ced132200e9816260028682c0efea1dcf19cf8a722a7ae49882c8d31c670e268e229117b4f6fb84f2
+  metadata.gz: 89d2f6ad377ba8e3f18bc747c3bfdf53e97c1a29f2731036987e5f7c1fde14db89732cda2d09026a153d81eabe26e51e021a129f02517d4d5582fcaf392876ca
+  data.tar.gz: 648b1297a9569b436113b5921a9ae37944d808ed42a03ef57a75452a74143dcc493e7d9c34a12f31f780745db5d2b1365d5a7b602dfa303571961730566852f4

data/CHANGELOG.md

@@ -1,3 +1,9 @@
+## 0.9.1 (2021-02-10)
+
+* Fix flash integration being loaded for API-only apps and causing an error (@dmitryzuev)
+
+* Change account status column default to `unverified` in migration to match Rodauth's default (@basabin54)
+
 ## 0.9.0 (2021-02-07)
 
 * Load Roda's JSON support by default, so that enabling `json`/`jwt` feature is all that's needed (@janko)

data/README.md

@@ -729,6 +729,24 @@ class RodauthApp < Rodauth::Rails::App
 end
 ```
 
+If you need Cross-Origin Resource Sharing and/or JWT refresh tokens, enable the
+corresponding Rodauth features and create the necessary tables:
+
+```sh
+$ rails generate rodauth:migration jwt_refresh
+$ rails db:migrate
+```
+```rb
+# app/lib/rodauth_app.rb
+class RodauthApp < Rodauth::Rails::App
+  configure do
+    # ...
+    enable :jwt, :jwt_cors, :jwt_refresh
+    # ...
+  end
+end
+```
+
 ## OmniAuth
 
 While Rodauth doesn't yet come with [OmniAuth] integration, we can build one
@@ -821,7 +839,7 @@ class RodauthController < ApplicationController
 
     # create new account if it doesn't exist
     unless account
-      account = Account.create!(email: auth["info"]["email"])
+      account = Account.create!(email: auth["info"]["email"], status: rodauth.account_open_status_value)
     end
 
     # create new identity if it doesn't exist
@@ -873,17 +891,19 @@ end
 
 When developing custom extensions for Rodauth inside your Rails project, it's
 better to use plain modules (at least in the beginning), because Rodauth
-feature API doesn't yet support Zeitwerk reloading well.
+feature design doesn't yet support Zeitwerk reloading well. Here is
+an example of an LDAP authentication extension that uses the
+[simple_ldap_authenticator] gem.
 
 ```rb
-# app/lib/rodauth_argon2.rb
-module RodauthArgon2
-  def password_hash(password)
-    Argon2::Password.create(password, t_cost: password_hash_cost, m_cost: password_hash_cost)
+# app/lib/rodauth_ldap.rb
+module RodauthLdap
+  def require_bcrypt?
+    false
   end
 
-  def password_hash_match?(hash, password)
-    Argon2::Password.verify_password(password, hash)
+  def password_match?(password)
+    SimpleLdapAuthenticator.valid?(account[:email], password)
   end
 end
 ```
@@ -893,7 +913,7 @@ class RodauthApp < Rodauth::Rails::App
   configure do
     # ...
     auth_class_eval do
-      include RodauthArgon2
+      include RodauthLdap
     end
     # ...
   end
@@ -1064,3 +1084,4 @@ conduct](https://github.com/janko/rodauth-rails/blob/master/CODE_OF_CONDUCT.md).
 [session_expiration]: http://rodauth.jeremyevans.net/rdoc/files/doc/session_expiration_rdoc.html
 [single_session]: http://rodauth.jeremyevans.net/rdoc/files/doc/single_session_rdoc.html
 [account_expiration]: http://rodauth.jeremyevans.net/rdoc/files/doc/account_expiration_rdoc.html
+[simple_ldap_authenticator]: https://github.com/jeremyevans/simple_ldap_authenticator

data/lib/generators/rodauth/migration/base.erb

@@ -5,11 +5,11 @@ enable_extension "citext"
 create_table :accounts<%= primary_key_type %> do |t|
 <% case activerecord_adapter -%>
 <% when "postgresql" -%>
-  t.citext :email, null: false, index: { unique: true, where: "status IN ('verified', 'unverified')" }
+  t.citext :email, null: false, index: { unique: true, where: "status IN ('unverified', 'verified')" }
 <% else -%>
   t.string :email, null: false, index: { unique: true }
 <% end -%>
-  t.string :status, null: false, default: "verified"
+  t.string :status, null: false, default: "unverified"
 end
 
 # Used if storing password hashes in a separate table (default)

data/lib/rodauth/rails/app.rb

@@ -12,7 +12,7 @@ module Rodauth
       plugin :hooks
       plugin :render, layout: false
 
-      if defined?(ActionDispatch::Flash) # not in API-only mode
+      unless Rodauth::Rails.api_only?
         require "rodauth/rails/app/flash"
         plugin Flash
       end

data/lib/rodauth/rails/version.rb

@@ -1,5 +1,5 @@
 module Rodauth
   module Rails
-    VERSION = "0.9.0"
+    VERSION = "0.9.1"
   end
 end

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: rodauth-rails
 version: !ruby/object:Gem::Version
-  version: 0.9.0
+  version: 0.9.1
 platform: ruby
 authors:
 - Janko Marohnić
 autorequire:
 bindir: bin
 cert_chain: []
-date: 2021-02-07 00:00:00.000000000 Z
+date: 2021-02-10 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: railties