rodauth-rails 1.7.0 → 1.7.1

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: '09013a1bf694e549fa97b25df4490342da804f04a4b390e3c443130b2ae6d39c'
-  data.tar.gz: 9c8a721619b16280d7892fe35ec6d0368d3bef2dd9eb0a26edddd5f65f87f5cb
+  metadata.gz: 8a0e7a34f68cd9914ad148799dcc5b83c5f8509d6d3278f57a26ebd497a8460c
+  data.tar.gz: bfacb6b1ee374c5c0c1178d1a3b22a08bdb78626c1c91f3997a3c8572a8ede85
 SHA512:
-  metadata.gz: 3710f7d71bff102f6a4564542575a75798df2063df3217a01574b04a541def22fb1ca04cf529fdfb1709e5f6c334f3ddda7027dce639f7b1d47ba4f71ba421df
-  data.tar.gz: b36c22fdd2e297058ac576d5c064ccb3a982370c0d0d70d2651a1b271ec2e0be4af7a8844dec098bfb839de90d5f3149d88987ed58c1728a4a7ecb039e874a4e
+  metadata.gz: eb5ff0efa4e19d89f864eea1e5d2e7541b2a198cff6af02ec281904e660bac5124d59842f602527e988ac958913724c54225fceb02ca834f1ee03cbf6a975f24
+  data.tar.gz: 13350871f426602595dfa738b1a2016372f589788dfdd5d06ad5e915d351d2d5a4f3cec18c45871337153106c1f524ab27bae7f4c7f30c7e9fb2dbe02025c77d

data/CHANGELOG.md

@@ -1,3 +1,19 @@
+## 1.7.1 (2023-01-25)
+
+* Make internal_request integration work on Rack 3.x (@janko)
+
+* Add missing Tailwind templates for WebAuthn feature (@janko)
+
+* Use renamed `webauthn_credential_options_for_get` method in generated `webauthn_auth` template (@janko)
+
+* Fix generated `webauthn_setup` template not working with webauthn_verify_account feature (@janko)
+
+* Hide text fields in generated `webauthn_{setup,auth}` templates (@janko)
+
+* Fix loading JavaScript for WebAuthn in generated `webauthn_{setup,auth}` templates (@janko)
+
+* Make built-in mailer work in Rails 6.x on Ruby 3.2 (@janko)
+
 ## 1.7.0 (2022-12-21)
 
 * Add Tailwind CSS templates to `rodauth:views` generator via the `--css=tailwind` option (@benkoshy, @janko)

data/LICENSE.txt

@@ -1,6 +1,6 @@
 The MIT License (MIT)
 
-Copyright (c) 2020-2022 Janko Marohnić
+Copyright (c) 2020-2023 Janko Marohnić
 
 Permission is hereby granted, free of charge, to any person obtaining a copy
 of this software and associated documentation files (the "Software"), to deal

data/lib/generators/rodauth/templates/app/views/rodauth/tailwind/webauthn_auth.html.erb

@@ -0,0 +1,13 @@
+<% cred = rodauth.webauthn_credential_options_for_get %>
+
+<%= form_with url: rodauth.webauthn_auth_form_path, method: :post, id: "webauthn-auth-form", data: { credential_options: cred.as_json.to_json, turbo: false }, class: "w-full max-w-sm" do |form| %>
+  <%= form.hidden_field rodauth.login_param, value: params[rodauth.login_param] %>
+  <%= form.hidden_field rodauth.webauthn_auth_challenge_param, value: cred.challenge %>
+  <%= form.hidden_field rodauth.webauthn_auth_challenge_hmac_param, value: rodauth.compute_hmac(cred.challenge) %>
+  <%= form.text_field rodauth.webauthn_auth_param, value: "", id: "webauthn-auth", class: "hidden", aria: { hidden: "true" } %>
+  <div id="webauthn-auth-button">
+    <%= form.submit rodauth.webauthn_auth_button, class: "w-full px-8 py-3 cursor-pointer font-semibold text-sm rounded-md text-white bg-blue-600 hover:bg-blue-700 focus:outline-none focus:ring-2 focus:ring-offset-2 focus:ring-blue-600 dark:bg-emerald-400 dark:hover:bg-emerald-500 dark:text-gray-900 dark:focus:ring-emerald-400 dark:focus:ring-offset-current" %>
+  </div>
+<% end %>
+
+<%= javascript_include_tag rodauth.webauthn_auth_js_path, extname: false %>

data/lib/generators/rodauth/templates/app/views/rodauth/tailwind/webauthn_remove.html.erb

@@ -0,0 +1,21 @@
+<%= form_with url: rodauth.webauthn_remove_path, method: :post, id: "webauthn-remove-form", data: { turbo: false }, class: "w-full max-w-sm" do |form| %>
+  <% if rodauth.two_factor_modifications_require_password? %>
+    <div class="mb-6">
+      <%= form.label "password", rodauth.password_label, class: "block text-sm font-semibold" %>
+      <%= form.password_field rodauth.password_param, value: "", id: "password", autocomplete: rodauth.password_field_autocomplete_value, required: true, class: "mt-2 text-sm w-full px-3 py-2 border rounded-md dark:bg-gray-900 dark:text-gray-100 dark:focus:bg-gray-800 #{rodauth.field_error(rodauth.password_param) ? "border-red-600 focus:ring-red-600 focus:border-red-600 dark:border-red-400 dark:focus:ring-red-400" : "border-gray-300 dark:border-gray-700 dark:focus:border-emerald-400 dark:focus:ring-emerald-400" }", aria: ({ invalid: true, describedby: "password_error_message" } if rodauth.field_error(rodauth.password_param)) %>
+      <%= content_tag(:span, rodauth.field_error(rodauth.password_param), class: "block mt-1 text-red-600 text-xs dark:text-red-400", id: "password_error_message") if rodauth.field_error(rodauth.password_param) %>
+    </div>
+  <% end %>
+
+  <fieldset class="mb-6">
+    <% (usage = rodauth.account_webauthn_usage).each do |id, last_use| %>
+      <div class="flex items-center space-x-2">
+        <%= form.radio_button rodauth.webauthn_remove_param, id, id: "webauthn-remove-#{id}", class: "dark:bg-gray-900 dark:border-gray-600 dark:checked:bg-current dark:checked:border-current dark:checked:text-emerald-400 dark:focus:ring-emerald-400 dark:focus:ring-offset-gray-900" %>
+        <%= form.label "webauthn-remove-#{id}", "Last use: #{last_use}", class: "text-sm" %>
+        <%= content_tag(:span, rodauth.field_error(rodauth.webauthn_remove_param), class: "block mt-1 text-red-600 text-xs dark:text-red-400", id: "webauthn_remove_error_message") if rodauth.field_error(rodauth.webauthn_remove_param) && id == usage.keys.last %>
+      </div>
+    <% end %>
+  </fieldset>
+
+  <%= form.submit rodauth.webauthn_remove_button, class: "w-full px-8 py-3 cursor-pointer font-semibold text-sm rounded-md text-white bg-blue-600 hover:bg-blue-700 focus:outline-none focus:ring-2 focus:ring-offset-2 focus:ring-blue-600 dark:bg-emerald-400 dark:hover:bg-emerald-500 dark:text-gray-900 dark:focus:ring-emerald-400 dark:focus:ring-offset-current" %>
+<% end %>

data/lib/generators/rodauth/templates/app/views/rodauth/tailwind/webauthn_setup.html.erb

@@ -0,0 +1,21 @@
+<% cred = rodauth.new_webauthn_credential %>
+
+<%= form_with url: request.path, method: :post, id: "webauthn-setup-form", data: { credential_options: cred.as_json.to_json, turbo: false }, class: "w-full max-w-sm" do |form| %>
+  <%= form.hidden_field rodauth.webauthn_setup_challenge_param, value: cred.challenge %>
+  <%= form.hidden_field rodauth.webauthn_setup_challenge_hmac_param, value: rodauth.compute_hmac(cred.challenge) %>
+  <%= form.text_field rodauth.webauthn_setup_param, value: "", id: "webauthn-setup", class: "hidden", aria: { hidden: "true" } %>
+
+  <% if rodauth.two_factor_modifications_require_password? %>
+    <div class="mb-6">
+      <%= form.label "password", rodauth.password_label, class: "block text-sm font-semibold" %>
+      <%= form.password_field rodauth.password_param, value: "", id: "password", autocomplete: rodauth.password_field_autocomplete_value, required: true, class: "mt-2 text-sm w-full px-3 py-2 border rounded-md dark:bg-gray-900 dark:text-gray-100 dark:focus:bg-gray-800 #{rodauth.field_error(rodauth.password_param) ? "border-red-600 focus:ring-red-600 focus:border-red-600 dark:border-red-400 dark:focus:ring-red-400" : "border-gray-300 dark:border-gray-700 dark:focus:border-emerald-400 dark:focus:ring-emerald-400" }", aria: ({ invalid: true, describedby: "password_error_message" } if rodauth.field_error(rodauth.password_param)) %>
+      <%= content_tag(:span, rodauth.field_error(rodauth.password_param), class: "block mt-1 text-red-600 text-xs dark:text-red-400", id: "password_error_message") if rodauth.field_error(rodauth.password_param) %>
+    </div>
+  <% end %>
+
+  <div id="webauthn-setup-button">
+    <%= form.submit rodauth.webauthn_setup_button, class: "w-full px-8 py-3 cursor-pointer font-semibold text-sm rounded-md text-white bg-blue-600 hover:bg-blue-700 focus:outline-none focus:ring-2 focus:ring-offset-2 focus:ring-blue-600 dark:bg-emerald-400 dark:hover:bg-emerald-500 dark:text-gray-900 dark:focus:ring-emerald-400 dark:focus:ring-offset-current" %>
+  </div>
+<% end %>
+
+<%= javascript_include_tag rodauth.webauthn_setup_js_path, extname: false %>

data/lib/generators/rodauth/templates/app/views/rodauth/webauthn_auth.html.erb

@@ -1,10 +1,10 @@
-<% cred = rodauth.webauth_credential_options_for_get %>
+<% cred = rodauth.webauthn_credential_options_for_get %>
 
 <%= form_with url: rodauth.webauthn_auth_form_path, method: :post, id: "webauthn-auth-form", data: { credential_options: cred.as_json.to_json, turbo: false } do |form| %>
   <%= form.hidden_field rodauth.login_param, value: params[rodauth.login_param] %>
   <%= form.hidden_field rodauth.webauthn_auth_challenge_param, value: cred.challenge %>
   <%= form.hidden_field rodauth.webauthn_auth_challenge_hmac_param, value: rodauth.compute_hmac(cred.challenge) %>
-  <%= form.text_field rodauth.webauthn_auth_param, value: "", id: "webauthn-auth", aria: { hidden: "true" } %>
+  <%= form.text_field rodauth.webauthn_auth_param, value: "", id: "webauthn-auth", class: "d-none", aria: { hidden: "true" } %>
   <div id="webauthn-auth-button">
     <div class="form-group mb-3">
       <%= form.submit rodauth.webauthn_auth_button, class: "btn btn-primary" %>
@@ -12,4 +12,4 @@
   </div>
 <% end %>
 
-<%= javascript_include_tag rodauth.webauthn_auth_js_path %>
+<%= javascript_include_tag rodauth.webauthn_auth_js_path, extname: false %>

data/lib/generators/rodauth/templates/app/views/rodauth/webauthn_setup.html.erb

@@ -1,9 +1,9 @@
 <% cred = rodauth.new_webauthn_credential %>
 
-<%= form_with url: rodauth.webauthn_setup_path, method: :post, id: "webauthn-setup-form", data: { credential_options: cred.as_json.to_json, turbo: false } do |form| %>
+<%= form_with url: request.path, method: :post, id: "webauthn-setup-form", data: { credential_options: cred.as_json.to_json, turbo: false } do |form| %>
   <%= form.hidden_field rodauth.webauthn_setup_challenge_param, value: cred.challenge %>
   <%= form.hidden_field rodauth.webauthn_setup_challenge_hmac_param, value: rodauth.compute_hmac(cred.challenge) %>
-  <%= form.text_field rodauth.webauthn_setup_param, value: "", id: "webauthn-setup", aria: { hidden: "true" } %>
+  <%= form.text_field rodauth.webauthn_setup_param, value: "", id: "webauthn-setup", class: "d-none", aria: { hidden: "true" } %>
 
   <% if rodauth.two_factor_modifications_require_password? %>
     <div class="form-group mb-3">
@@ -13,11 +13,11 @@
     </div>
   <% end %>
 
-  <div id="webauthn-setup-button"> 
+  <div id="webauthn-setup-button">
     <div class="form-group mb-3">
       <%= form.submit rodauth.webauthn_setup_button, class: "btn btn-primary" %>
     </div>
   </div>
 <% end %>
 
-<%= javascript_include_tag rodauth.webauthn_setup_js_path %>
+<%= javascript_include_tag rodauth.webauthn_setup_js_path, extname: false %>

data/lib/rodauth/rails/feature/email.rb

@@ -22,8 +22,8 @@ module Rodauth
 
         # ActionMailer subclass for correct email delivering.
         class Mailer < ActionMailer::Base
-          def create_email(**options)
-            mail(**options)
+          def create_email(options)
+            mail(options)
           end
         end
       end

data/lib/rodauth/rails/feature/internal_request.rb

@@ -41,7 +41,7 @@ module Rodauth
         # Checks whether we're in an internal request and host was not set,
         # or the request doesn't exist such as with path_class_methods feature.
         def missing_host?
-          internal_request? && request.host == INVALID_DOMAIN || scope.nil?
+          internal_request? && (request.host.nil? || request.host == INVALID_DOMAIN) || scope.nil?
         end
 
         def rails_url_options

data/lib/rodauth/rails/version.rb

@@ -1,5 +1,5 @@
 module Rodauth
   module Rails
-    VERSION = "1.7.0"
+    VERSION = "1.7.1"
   end
 end

data/rodauth-rails.gemspec

@@ -17,7 +17,7 @@ Gem::Specification.new do |spec|
   spec.require_paths = ["lib"]
 
   spec.add_dependency "railties", ">= 4.2", "< 8"
-  spec.add_dependency "rodauth", "~> 2.25"
+  spec.add_dependency "rodauth", "~> 2.27"
   spec.add_dependency "roda", "~> 3.55"
   spec.add_dependency "sequel-activerecord_connection", "~> 1.1"
   spec.add_dependency "rodauth-model", "~> 0.2"

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: rodauth-rails
 version: !ruby/object:Gem::Version
-  version: 1.7.0
+  version: 1.7.1
 platform: ruby
 authors:
 - Janko Marohnić
 autorequire:
 bindir: bin
 cert_chain: []
-date: 2022-12-21 00:00:00.000000000 Z
+date: 2023-01-25 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: railties
@@ -36,14 +36,14 @@ dependencies:
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: '2.25'
+        version: '2.27'
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: '2.25'
+        version: '2.27'
 - !ruby/object:Gem::Dependency
   name: roda
   requirement: !ruby/object:Gem::Requirement
@@ -286,6 +286,9 @@ files:
 - lib/generators/rodauth/templates/app/views/rodauth/tailwind/verify_account.html.erb
 - lib/generators/rodauth/templates/app/views/rodauth/tailwind/verify_account_resend.html.erb
 - lib/generators/rodauth/templates/app/views/rodauth/tailwind/verify_login_change.html.erb
+- lib/generators/rodauth/templates/app/views/rodauth/tailwind/webauthn_auth.html.erb
+- lib/generators/rodauth/templates/app/views/rodauth/tailwind/webauthn_remove.html.erb
+- lib/generators/rodauth/templates/app/views/rodauth/tailwind/webauthn_setup.html.erb
 - lib/generators/rodauth/templates/app/views/rodauth/two_factor_auth.html.erb
 - lib/generators/rodauth/templates/app/views/rodauth/two_factor_disable.html.erb
 - lib/generators/rodauth/templates/app/views/rodauth/two_factor_manage.html.erb
@@ -349,7 +352,7 @@ required_rubygems_version: !ruby/object:Gem::Requirement
     - !ruby/object:Gem::Version
       version: '0'
 requirements: []
-rubygems_version: 3.3.3
+rubygems_version: 3.4.4
 signing_key:
 specification_version: 4
 summary: Provides Rails integration for Rodauth.