securial 0.6.1 → 0.8.0

data/lib/securial/middleware/request_logger_tag.rb

@@ -1,18 +0,0 @@
-module Securial
-  module Middleware
-    class RequestLoggerTag
-      def initialize(app)
-        @app = app
-      end
-
-      def call(env)
-        request = ActionDispatch::Request.new(env)
-        request_id = request.request_id || SecureRandom.uuid
-
-        Securial::ENGINE_LOGGER.tagged("Securial", "RequestID:#{request_id}") do
-          @app.call(env)
-        end
-      end
-    end
-  end
-end

data/lib/securial/middleware/transform_request_keys.rb

@@ -1,33 +0,0 @@
-# lib/securial/middleware/transform_request_keys.rb
-require "json"
-
-module Securial
-  module Middleware
-    class TransformRequestKeys
-      def initialize(app)
-        @app = app
-      end
-
-      def call(env)
-        if env["CONTENT_TYPE"]&.include?("application/json") && Securial.configuration.response_keys_format != :snake_case
-          req = Rack::Request.new(env)
-          if (req.body&.size || 0) > 0
-            raw = req.body.read
-            req.body.rewind
-            begin
-              parsed = JSON.parse(raw)
-              transformed = Securial::KeyTransformer.deep_transform_keys(parsed) do |key|
-                Securial::KeyTransformer.underscore(key)
-              end
-              env["rack.input"] = StringIO.new(JSON.dump(transformed))
-              env["rack.input"].rewind
-            rescue JSON::ParserError
-              # noop
-            end
-          end
-        end
-        @app.call(env)
-      end
-    end
-  end
-end

data/lib/securial/middleware/transform_response_keys.rb

@@ -1,45 +0,0 @@
-# lib/securial/middleware/transform_response_keys.rb
-require "json"
-
-module Securial
-  module Middleware
-    class TransformResponseKeys
-      def initialize(app)
-        @app = app
-      end
-
-      def call(env)
-        status, headers, response = @app.call(env)
-
-        if json_response?(headers)
-          body = extract_body(response)
-
-          if body.present?
-            format = Securial.configuration.response_keys_format
-            transformed = KeyTransformer.deep_transform_keys(JSON.parse(body)) do |key|
-              KeyTransformer.camelize(key, format)
-            end
-
-            new_body = [JSON.generate(transformed)]
-            headers["Content-Length"] = new_body.first.bytesize.to_s
-            return [status, headers, new_body]
-          end
-        end
-
-        [status, headers, response]
-      end
-
-      private
-
-      def json_response?(headers)
-        headers["Content-Type"]&.include?("application/json")
-      end
-
-      def extract_body(response)
-        response_body = ""
-        response.each { |part| response_body << part }
-        response_body
-      end
-    end
-  end
-end

data/lib/securial/rack_attack.rb

@@ -1,48 +0,0 @@
-Rails.application.config.to_prepare do
-  class Rack::Attack
-    limit = Securial.configuration.rate_limit_requests_per_minute
-    resp_status = Securial.configuration.rate_limit_response_status
-    resp_message = Securial.configuration.rate_limit_response_message
-
-    ### Throttle login attempts by IP ###
-    throttle("securial/logins/ip", limit: limit, period: 1.minute) do |req|
-      if req.path.include?("sessions/login") && req.post?
-        req.ip
-      end
-    end
-
-    ### Throttle login attempts by username ###
-    throttle("securial/logins/email", limit: 5, period: 1.minute) do |req|
-      if req.path.include?("sessions/login") && req.post?
-        req.params["email_address"].to_s.downcase.strip
-      end
-    end
-
-    ### TODO: Add throttling for other endpoints as needed ###
-    # Example: Throttle password reset requests by email
-    throttle("securial/password_resets/ip", limit: 5, period: 1.minute) do |req|
-      if req.path.include?("password/forgot") && req.post?
-        req.ip
-      end
-    end
-
-    throttle("securial/password_resets/email", limit: 5, period: 1.minute) do |req|
-      if req.path.include?("password/forgot") && req.post?
-        req.params["email_address"].to_s.downcase.strip
-      end
-    end
-
-    ### Custom response ###
-    self.throttled_responder = lambda do |request|
-      retry_after = (request.env["rack.attack.match_data"] || {})[:period]
-      [
-        resp_status,
-        {
-          "Content-Type" => "application/json",
-          "Retry-After" => retry_after.to_s,
-        },
-        [{ error: resp_message }.to_json]
-      ]
-    end
-  end
-end