rodauth-select-account 0.1.2 → 0.1.4

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 90895ef37a108c15a07ad95b7e7e834a792e495dfc6a5b00e95f5cba0e8f5641
-  data.tar.gz: e9e436f0e30f7a96e296c9ddb6059cfcf23ad4b1ea0a764d9345669cf82633a7
+  metadata.gz: 05f7798e665c9094487ad294b51c0f248477c5141eda29e779c97f1b97e20da0
+  data.tar.gz: ad8d11bb6eaabbe37560cd1fa986cc8f82194f421a7004999d930d4237321fb0
 SHA512:
-  metadata.gz: 6f27e0dec0e492dfb2de6b50edb469d10a913702a86e823428b5db7e37e9bc01884cc7f8c9f36d81158fec1514f8953b74a07ea646c40b727c80f5cdd3b839da
-  data.tar.gz: 6e79144222edfd09428c7f679036a4306d9ee51a03cd9e40ce2892908066ab60f7f6c59cb06fd9625391bbfd189a68ed0d828bda4b9282f04ee12878be721ea1
+  metadata.gz: fc463cbc75d2be5c303d98b903459dd9cf4537d64ceba01626327342b3a1a4913da0ff1cc09ba7f3b6d103ebbce9d0ace1b1c742c078e619ee14aae23d242a9c
+  data.tar.gz: 1dc2fc5d70455e4426ec90ca30603605af8c061707c2a977c313264ce984dc4ce4f78535b2973c93f36a6570ef0d080333dfa0203ead39fc272d3e084d8fb0a3

data/CHANGELOG.md

@@ -2,6 +2,14 @@
 
 ## master
 
+## 0.1.4
+
+* Fixes compatibility with security-focused changes introduced in rodauth 2.46.
+
+## 0.1.3
+
+* allow setting `require_selected_account_cookie_interval` and `accounts_cookie_interval` to `nil` in order to set the managed cookies as "Session Cookies" (i.e. getting wiped out on browser close).
+
 ## 0.1.2
 
 point release to update project links in rubygems.

data/doc/select_account.rdoc

@@ -0,0 +1,47 @@
+= Documentation for Select Account
+
+The +select_account+ feature allows for maintaining and switching across multiple accounts in the same session.
+
+== Auth Value Methods
+
+selected_account_key :: session key where the selected account state is stored.
+accounts_key :: session key where the logged-in accounts state is stored.
+add_account_redirect_session_key :: session key where the url to redirect to after adding an account is stored.
+select_account_redirect_session_key :: session key where the url to redirect to after selecting an account is stored.
+require_selected_account_cookie_key :: cookie key storing whether a selected account is required.
+require_selected_account_cookie_interval :: duration for the require selected account cookie (5 minutes by default); can be set to <tt>nil</tt> in order not to set cookie "Expires".
+accounts_cookie_key :: cookie key where the selected accounts are stored.
+accounts_cookie_options :: cookie options for the selected accounts cookie
+accounts_cookie_interval :: duration for the selected accounts cookie (14 days by default); can be set to <tt>nil</tt> in order not to set cookie "Expires".
+no_account_error_status :: http status code for the response when the account to switch to does not exist anymore.
+select_account_required_error_status :: http status code for the response when a selected account is required.
+add_account_required_error_status :: http status code for the response when addig an account is required.
+no_account_message :: error description when no account was found, <tt>"could not select account"</tt> by default.
+
+
+add_account_button :: Label of add account button.
+add_account_error_flash :: The flash error message to display when there was an error adding an account.
+add_account_notice_flash :: The flash success message to display after adding an account.
+require_add_account_error_flash ::  he flash error message to display when adding an account is required.
+add_account_page_title :: Title for the Add Account form.
+add_account_redirect :: URL to redirect to after adding an account.
+add_account_route :: the route for adding an account, +add-account+ by default.
+
+select_account_error_flash :: The flash error message to display when there was an error selecting an account.
+select_account_notice_flash :: The flash success message to display after selecting an account.
+require_select_account_error_flash ::  he flash error message to display when selecting an account is required.
+select_account_page_title :: Title for the Select Account form.
+select_account_redirect :: URL to redirect to after selecting an account.
+select_account_route :: the route for selecting an account, +select-account+ by default.
+
+
+== Auth Methods
+
+add_account_view :: The HTML template of the Add Account form.
+before_add_account_route :: Run arbitrary code before the add account route.
+before_add_account :: Run arbitrary code before adding an account.
+after_add_account :: Run arbitrary code after adding an account.
+select_account_view :: The HTML template of the Select Account form.
+before_select_account_route :: Run arbitrary code before the add account route.
+before_select_account :: Run arbitrary code before selecting an account.
+after_select_account :: Run arbitrary code after selecting an account.

data/lib/rodauth/features/select_account.rb

@@ -37,6 +37,13 @@ module Rodauth
     auth_value_method :add_account_required_error_status, 403
     translatable_method :no_account_message, "could not select account"
 
+    if respond_to?(:uses_instance_variables)
+      uses_instance_variables(
+        :@accounts_in_session,
+        :@valid_login_entered
+      )
+    end
+
     def accounts_in_session
       @accounts_in_session ||= _get_accounts_in_session
     end
@@ -62,7 +69,7 @@ module Rodauth
       end
 
       opts[:value] = true
-      opts[:expires] = Time.now + require_selected_account_cookie_interval
+      opts[:expires] = Time.now + require_selected_account_cookie_interval if require_selected_account_cookie_interval
       opts[:httponly] = true unless opts.key?(:httponly)
       opts[:secure] = true unless opts.key?(:secure) || !request.ssl?
 
@@ -177,7 +184,7 @@ module Rodauth
 
       opts = Hash[accounts_cookie_options]
       opts[:value] = accounts_cookie.join(",")
-      opts[:expires] = Time.now + accounts_cookie_interval
+      opts[:expires] = Time.now + accounts_cookie_interval if accounts_cookie_interval
       opts[:path] = "/" unless opts.key?(:path)
       opts[:httponly] = true unless opts.key?(:httponly)
       opts[:secure] = true unless opts.key?(:secure) || !request.ssl?
@@ -244,7 +251,7 @@ module Rodauth
 
         catch_error do
           # this instruction will load the new account
-          unless account_from_login(param(login_param))
+          unless (@account = _account_from_login(param(login_param)))
             throw_error_status(no_matching_login_error_status, login_param, no_matching_login_message)
           end
 

data/lib/rodauth/select-account/version.rb

@@ -2,6 +2,6 @@
 
 module Rodauth
   module SelectAccount
-    VERSION = "0.1.2"
+    VERSION = "0.1.4"
   end
 end

metadata

@@ -1,14 +1,13 @@
 --- !ruby/object:Gem::Specification
 name: rodauth-select-account
 version: !ruby/object:Gem::Version
-  version: 0.1.2
+  version: 0.1.4
 platform: ruby
 authors:
 - Tiago Cardoso
-autorequire:
 bindir: bin
 cert_chain: []
-date: 2022-11-10 00:00:00.000000000 Z
+date: 1980-01-02 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: rodauth
@@ -30,13 +29,15 @@ email:
 executables: []
 extensions: []
 extra_rdoc_files:
+- CHANGELOG.md
 - LICENSE.txt
 - README.md
-- CHANGELOG.md
+- doc/select_account.rdoc
 files:
 - CHANGELOG.md
 - LICENSE.txt
 - README.md
+- doc/select_account.rdoc
 - lib/rodauth/features/select_account.rb
 - lib/rodauth/select-account.rb
 - lib/rodauth/select-account/version.rb
@@ -48,8 +49,10 @@ homepage: https://gitlab.com/os85/rodauth-select-account
 licenses:
 - Apache 2.0
 metadata:
+  homepage_uri: https://gitlab.com/os85/rodauth-select-account
+  source_code_uri: https://gitlab.com/os85/rodauth-select-account
+  changelog_uri: https://gitlab.com/os85/rodauth-select-account/-/blob/master/CHANGELOG.md
   rubygems_mfa_required: 'true'
-post_install_message:
 rdoc_options: []
 require_paths:
 - lib
@@ -64,8 +67,7 @@ required_rubygems_version: !ruby/object:Gem::Requirement
     - !ruby/object:Gem::Version
       version: '0'
 requirements: []
-rubygems_version: 3.2.32
-signing_key:
+rubygems_version: 4.0.16
 specification_version: 4
 summary: Multiple authenticated accounts per session in rodauth.
 test_files: []