securial 1.1.0 → 2.0.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: b559e8adfa838b61902e36d479c277de84381819bf7da35b8c557fbea5625069
-  data.tar.gz: 45b285b66a2289757ebda6d6f36e7816e891e58fbf08001c87ebca217ea60586
+  metadata.gz: 2cd71b4330338b3487c337e3345a294c964c21b7ac34e3e5092ebb53e09db858
+  data.tar.gz: 8869be54802c27b6f31ec6ea4cd3e8c1c304014617e35195d6864c748a4cadde
 SHA512:
-  metadata.gz: c2c65f564e8c80c6703f515281c5879adc2adf0b1fcc7df4893a5c61c57943b22095064d61c081beb7bf40b780d2c066ca2f793076a1e7e0fc6779f0ef5845d9
-  data.tar.gz: f7fe02fee4e0a7857ecaf2a6cfa52018bd044bddfa4297c4eb7107882ebe1e0955cc2a5b6504f781baefcd48a245f2d2aaf5025c356b10980f49eae7dfab91d7
+  metadata.gz: 58922b45d9f99983f45d9003f35e7236ea881010050b91ae3fc834737537fdd8e0bda7d601f9a9c6b99440b70daf2550638c92f5dddc7c8af3eb82ee5e7b5693
+  data.tar.gz: 014ed5fafc13d0d94b81c8036a8d76bcb69bf3475ff100b8198d1743a238eac7cd5f3b8662799b88d759ed6c9b3bcdf790180345b08ff44b4f2f10e3bf21637f

data/app/controllers/securial/accounts_controller.rb

@@ -26,12 +26,20 @@ module Securial
     # Shows a specific user's profile by username.
     #
     # Retrieves and displays public profile information for the requested user.
+    # Requires the `enable_other_profiles` configuration to be true.
     #
     # @param [String] params[:username] The username of the requested user profile
     # @return [void] Renders user profile with 200 OK status or 404 if not found
     def show
-      @securial_user = Securial::User.find_by(username: params.expect(:username))
-      render_user_profile
+      if Securial.configuration.enable_other_profiles
+        @securial_user = Securial::User.find_by(username: params.expect(:username))
+        render_user_profile
+      else
+        render json: {
+          errors: ["User profiles are not enabled"],
+          instructions: "Please contact support for assistance.",
+        }, status: :forbidden
+      end
     end
 
     # Registers a new user account.

data/config/routes.rb

@@ -17,7 +17,6 @@ Securial::Engine.routes.draw do
 
     scope "accounts" do
       get "me", to: "accounts#me", as: :me
-      get "account/:username", to: "accounts#show", as: :account_by_username
       post "register", to: "accounts#register", as: :register
       put "update", to: "accounts#update_profile", as: :update_profile
       # post "update_avatar", to: "accounts#update_avatar"
@@ -40,5 +39,9 @@ Securial::Engine.routes.draw do
       post "forgot", to: "passwords#forgot_password", as: :forgot_password
       put "reset", to: "passwords#reset_password", as: :reset_password
     end
+
+    scope "profiles" do
+      get ":username", to: "accounts#show", as: :profile_by_username
+    end
   end
 end

data/lib/generators/securial/install/install_generator.rb

@@ -19,7 +19,7 @@ module Securial
         securial_log = log_dir.join("securial-#{Rails.env}.log")
 
         FileUtils.mkdir_p(log_dir) unless File.directory?(log_dir)
-        FileUtils.touch(securial_log) unless File.exist?(securial_log)
+        FileUtils.touch(securial_log)
       end
 
       def install_migrations

data/lib/generators/securial/install/templates/securial_initializer.erb

@@ -244,4 +244,13 @@ Securial.configure do |config|
   # the rate limit. The default is "Too many requests, please try again later."
   # This is only applied if `rate_limiting_enabled` is set to true.
   config.rate_limit_response_message = "Too many requests, please try again later."
-end
+
+  ## Set whether to enable other user profiles
+  # This allows users to view other users' profiles by their username.
+  # If this is set to true, users can access profiles of other users
+  # by visiting the URL `/profiles/:username`, where `:username` is the username
+  # of the user whose profile they want to view.
+  # If this is set to false, users can only view their own profile
+  # by visiting the URL `/accounts/me`.
+  config.enable_other_profiles = false
+end

data/lib/securial/config/signature.rb

@@ -211,6 +211,7 @@ module Securial
           rate_limit_requests_per_minute: { type: Numeric, required: "rate_limiting_enabled", default: 60 },
           rate_limit_response_status: { type: Numeric, required: "rate_limiting_enabled", default: 429 },
           rate_limit_response_message: { type: String, required: "rate_limiting_enabled", default: "Too many requests, please try again later." },
+          enable_other_profiles: { type: [TrueClass, FalseClass], required: true, default: false },
         }
       end
     end

data/lib/securial/error/base_securial_error.rb

@@ -42,7 +42,7 @@ module Securial
       # @return [String, nil] The current default message for this error class
       #
       def self.default_message(message = nil)
-        self._default_message = message if message
+        self._default_message = message
         self._default_message
       end
 

data/lib/securial/middleware/transform_response_keys.rb

@@ -44,10 +44,7 @@ module Securial
       #
       # @example
       #   middleware = TransformResponseKeys.new(app)
-      #
-      # @deprecated Use `Securial.configuration.response_keys_format` instead of format parameter
-      #
-      def initialize(app, format: :lowerCamelCase)
+      def initialize(app)
         @app = app
       end
 

data/lib/securial/version.rb

@@ -6,5 +6,5 @@ module Securial
   #
   # @see https://semver.org/ Semantic Versioning 2.0.0
   # @return [String] the current version in the format "major.minor.patch"
-  VERSION = "1.1.0".freeze
+  VERSION = "2.0.0".freeze
 end

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: securial
 version: !ruby/object:Gem::Version
-  version: 1.1.0
+  version: 2.0.0
 platform: ruby
 authors:
 - Aly Badawy