rodauth 2.16.0 → 2.17.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 03b165b6104e72c5c2ea6d76b3b0bf53380d4eacd90cbdab80b9fd655d80f1c4
-  data.tar.gz: af12c12c4bdf9aa47ffd0a34bd7df2858c006edcafa257e60ddd28c962d62630
+  metadata.gz: 59e6db4541ac9a7ad8c00cf690d757d6e25b3cbf787b273d4415cc5236add6aa
+  data.tar.gz: dacd42d02a586b2ab34e9dbaa916fb77e365fd436d7be60dbe2a2f32074d25e8
 SHA512:
-  metadata.gz: d11f3050e692d426c409a061c4f23489208618613868653a59fad982fd66b62ec4c9fe5b320b390f3789b5fc3d704d2d3ac99d9105bc54f9ee33dcfaa690dfd2
-  data.tar.gz: 811fb60b3f055d59866cf3b262ab197e8cf80a1ca7291724e756c58a99f1cdaddf994a73a500cdcff03f600fd1333e49cf3d1830cc9f10d01af641648c9fd930
+  metadata.gz: ed735a0beee837826544608e9f79fefc4421b311b0a75724a390d1368fe4ae8e68f5b6960085c45f3ba546e7c0faec034dc19023e1c5da70c0abfab5c75a4116
+  data.tar.gz: 8acc037e30b6c7528d7ac6d5c153cdb9f243473ed8a870cf75deff01ae185c0b5bb269f54f2a369e4246c17abe0deff27b576ea207b595cf8eef0cf1d07b8ca5

data/CHANGELOG

@@ -1,3 +1,9 @@
+=== 2.17.0 (2021-09-24)
+
+* Make jwt_refresh work correctly with verify_account_grace_period (jeremyevans)
+
+* Use 4xx status code when attempting to login to or create an unverified account (janko) (#177, #178)
+
 === 2.16.0 (2021-08-23)
 
 * Add Rodauth.lib for using Rodauth as a library (jeremyevans)

data/doc/release_notes/2.17.0.txt

@@ -0,0 +1,10 @@
+= Improvements
+
+* The jwt_refresh feature now works for unverified accounts when using
+  the verify_account_grace_period feature.
+
+* When trying to create an account that already exists but is
+  unverified, Rodauth now returns a 4xx response.
+
+* When trying to login to an unverified account, Rodauth now returns a
+  4xx response.

data/lib/rodauth/features/jwt_refresh.rb

@@ -98,7 +98,7 @@ module Rodauth
           # JWT is invalid for other reasons.  Make sure the expiration is the
           # only reason the JWT isn't valid before treating this as an expired token.
           JWT.decode(jwt_token, jwt_secret, true, Hash[jwt_decode_opts].merge!(:verify_expiration=>false, :algorithm=>jwt_algorithm))[0]
-        rescue => e
+        rescue
         else
           json_response[json_response_error_key] = expired_jwt_access_token_message
           response.status ||= expired_jwt_access_token_status
@@ -120,7 +120,7 @@ module Rodauth
       end
 
       ds = account_ds(id)
-      ds = ds.where(account_status_column=>account_open_status_value) unless skip_status_checks?
+      ds = ds.where(account_session_status_filter) unless skip_status_checks?
       ds.first
     end
 

data/lib/rodauth/features/verify_account.rb

@@ -196,8 +196,7 @@ module Rodauth
 
     def new_account(login)
       if account_from_login(login) && allow_resending_verify_account_email?
-        set_redirect_error_status(unopen_account_error_status)
-        set_error_reason :already_an_unverified_account_with_this_login
+        set_response_error_reason_status(:already_an_unverified_account_with_this_login, unopen_account_error_status)
         set_error_flash attempt_to_create_unverified_account_error_flash
         response.write resend_verify_account_view
         request.halt
@@ -274,8 +273,7 @@ module Rodauth
 
     def before_login_attempt
       unless open_account?
-        set_redirect_error_status(unopen_account_error_status)
-        set_error_reason :unverified_account
+        set_response_error_reason_status(:unverified_account, unopen_account_error_status)
         set_error_flash attempt_to_login_to_unverified_account_error_flash
         response.write resend_verify_account_view
         request.halt

data/lib/rodauth/version.rb

@@ -6,7 +6,7 @@ module Rodauth
   MAJOR = 2
 
   # The minor version of Rodauth, updated for new feature releases of Rodauth.
-  MINOR = 16
+  MINOR = 17
 
   # The patch version of Rodauth, updated only for bug fixes from the last
   # feature release.

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: rodauth
 version: !ruby/object:Gem::Version
-  version: 2.16.0
+  version: 2.17.0
 platform: ruby
 authors:
 - Jeremy Evans
 autorequire: 
 bindir: bin
 cert_chain: []
-date: 2021-08-23 00:00:00.000000000 Z
+date: 2021-09-24 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: sequel
@@ -330,6 +330,7 @@ extra_rdoc_files:
 - doc/release_notes/2.14.0.txt
 - doc/release_notes/2.15.0.txt
 - doc/release_notes/2.16.0.txt
+- doc/release_notes/2.17.0.txt
 - doc/release_notes/2.2.0.txt
 - doc/release_notes/2.3.0.txt
 - doc/release_notes/2.4.0.txt
@@ -431,6 +432,7 @@ files:
 - doc/release_notes/2.14.0.txt
 - doc/release_notes/2.15.0.txt
 - doc/release_notes/2.16.0.txt
+- doc/release_notes/2.17.0.txt
 - doc/release_notes/2.2.0.txt
 - doc/release_notes/2.3.0.txt
 - doc/release_notes/2.4.0.txt