rodauth 2.19.0 → 2.20.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (7) hide show
  1. checksums.yaml +4 -4
  2. data/CHANGELOG +6 -0
  3. data/doc/release_notes/2.20.0.txt +10 -0
  4. data/lib/rodauth/features/active_sessions.rb +1 -0
  5. data/lib/rodauth/features/webauthn.rb +1 -1
  6. data/lib/rodauth/version.rb +1 -1
  7. metadata +5 -3
checksums.yaml CHANGED
@@ -1,7 +1,7 @@
1
1
  ---
2
2
  SHA256:
3
- metadata.gz: 0defa94cb0c58b317997853eda1775694a8b0bb89e3bb75f8de50af57a2223fe
4
- data.tar.gz: 977738446cb7d8ac53a7edeab2587c07e7a9b9407d2584daa80fe6d47147f395
3
+ metadata.gz: 534a50718fe362e695a9fbd8043d1ce05ca211de2049b1351207bd5d11cbf962
4
+ data.tar.gz: 9afd5a7d79dde11005b090ca18591661c55c2647387a151b0d732ef97f51f633
5
5
  SHA512:
6
- metadata.gz: 0e8833fc2ac01f3a917b8c267642b92472969531df33dc90dcae6e90d5b62befbf2f948ca75cafcd84353b4b9d629f1dec8d70e3e77cc2387cc0791cee551773
7
- data.tar.gz: 03ff22811e9679b26f1dc83c676ca19145c762d26c216a9aafae816d3bad67cd39a68430fbd72c55f17e77117fbcd65690eb6d71f3b05f72860833a2205f2fe7
6
+ metadata.gz: f10082d21fad4783ad6193dc7e1dfe55bc5f57c98b33e1b6f6583dbaa0e921f4d40025e935f93aef9706078232956bcde2fec4e8838b1c2ee4f49a8885c22520
7
+ data.tar.gz: 8ca004055be7ee660a37f2657d6752dbe2318b30100204e8eb68c514229422158db3f513a1d9e90eb532535bdbdf5854f66834212cc43fb81f8f9b8872221af5
data/CHANGELOG CHANGED
@@ -1,3 +1,9 @@
1
+ === 2.20.0 (2022-01-24)
2
+
3
+ * Change the default implementation of webauth_rp_id to not include the port (jeremyevans) (#203)
4
+
5
+ * Make logout of all sessions in active_sessions plugin also remove remember key if using remember plugin (jeremyevans)
6
+
1
7
  === 2.19.0 (2021-12-22)
2
8
 
3
9
  * Add login_maximum_bytes, setting the maximum number of bytes in a login, 255 by default (jeremyevans)
data/doc/release_notes/2.20.0.txt ADDED
@@ -0,0 +1,10 @@
1
+ = Improvements
2
+
3
+ * When using the active_sessions and remember features together,
4
+ doing a global logout will automatically remove the remember key for
5
+ the account, so the account will no longer be able to automatically
6
+ create new sessions using the remember key.
7
+
8
+ * The default value of webauthn_rp_id now removes the port from the
9
+ origin if it exists, since the WebAuthn spec does not allow ports
10
+ in the relying party identifier.
data/lib/rodauth/features/active_sessions.rb CHANGED
@@ -123,6 +123,7 @@ module Rodauth
123
123
 
124
124
  def before_logout
125
125
  if param_or_nil(global_logout_param)
126
+ remove_remember_key(session_value) if respond_to?(:remove_remember_key)
126
127
  remove_all_active_sessions
127
128
  else
128
129
  remove_current_session
data/lib/rodauth/features/webauthn.rb CHANGED
@@ -334,7 +334,7 @@ module Rodauth
334
334
  end
335
335
 
336
336
  def webauthn_rp_id
337
- webauthn_origin.sub(/\Ahttps?:\/\//, '')
337
+ webauthn_origin.sub(/\Ahttps?:\/\//, '').sub(/:\d+\z/, '')
338
338
  end
339
339
 
340
340
  def webauthn_rp_name
data/lib/rodauth/version.rb CHANGED
@@ -6,7 +6,7 @@ module Rodauth
6
6
  MAJOR = 2
7
7
 
8
8
  # The minor version of Rodauth, updated for new feature releases of Rodauth.
9
- MINOR = 19
9
+ MINOR = 20
10
10
 
11
11
  # The patch version of Rodauth, updated only for bug fixes from the last
12
12
  # feature release.
metadata CHANGED
@@ -1,14 +1,14 @@
1
1
  --- !ruby/object:Gem::Specification
2
2
  name: rodauth
3
3
  version: !ruby/object:Gem::Version
4
- version: 2.19.0
4
+ version: 2.20.0
5
5
  platform: ruby
6
6
  authors:
7
7
  - Jeremy Evans
8
8
  autorequire:
9
9
  bindir: bin
10
10
  cert_chain: []
11
- date: 2021-12-22 00:00:00.000000000 Z
11
+ date: 2022-01-24 00:00:00.000000000 Z
12
12
  dependencies:
13
13
  - !ruby/object:Gem::Dependency
14
14
  name: sequel
@@ -334,6 +334,7 @@ extra_rdoc_files:
334
334
  - doc/release_notes/2.18.0.txt
335
335
  - doc/release_notes/2.19.0.txt
336
336
  - doc/release_notes/2.2.0.txt
337
+ - doc/release_notes/2.20.0.txt
337
338
  - doc/release_notes/2.3.0.txt
338
339
  - doc/release_notes/2.4.0.txt
339
340
  - doc/release_notes/2.5.0.txt
@@ -440,6 +441,7 @@ files:
440
441
  - doc/release_notes/2.18.0.txt
441
442
  - doc/release_notes/2.19.0.txt
442
443
  - doc/release_notes/2.2.0.txt
444
+ - doc/release_notes/2.20.0.txt
443
445
  - doc/release_notes/2.3.0.txt
444
446
  - doc/release_notes/2.4.0.txt
445
447
  - doc/release_notes/2.5.0.txt
@@ -594,7 +596,7 @@ required_rubygems_version: !ruby/object:Gem::Requirement
594
596
  - !ruby/object:Gem::Version
595
597
  version: '0'
596
598
  requirements: []
597
- rubygems_version: 3.2.32
599
+ rubygems_version: 3.3.3
598
600
  signing_key:
599
601
  specification_version: 4
600
602
  summary: Authentication and Account Management Framework for Rack Applications