sequel_secure_password 0.1.0
Sign up to get free protection for your applications and to get access to all the features.
- data/.gitignore +17 -0
- data/.rspec +3 -0
- data/.travis.yml +7 -0
- data/Gemfile +4 -0
- data/LICENSE.txt +22 -0
- data/README.md +54 -0
- data/Rakefile +2 -0
- data/lib/sequel_secure_password/version.rb +3 -0
- data/lib/sequel_secure_password.rb +40 -0
- data/sequel_secure_password.gemspec +34 -0
- data/spec/secure_password_spec.rb +44 -0
- data/spec/spec_helper.rb +31 -0
- metadata +141 -0
data/.gitignore
ADDED
data/.rspec
ADDED
data/.travis.yml
ADDED
data/Gemfile
ADDED
data/LICENSE.txt
ADDED
@@ -0,0 +1,22 @@
|
|
1
|
+
Copyright (c) 2012 Mateusz Lenik
|
2
|
+
|
3
|
+
MIT License
|
4
|
+
|
5
|
+
Permission is hereby granted, free of charge, to any person obtaining
|
6
|
+
a copy of this software and associated documentation files (the
|
7
|
+
"Software"), to deal in the Software without restriction, including
|
8
|
+
without limitation the rights to use, copy, modify, merge, publish,
|
9
|
+
distribute, sublicense, and/or sell copies of the Software, and to
|
10
|
+
permit persons to whom the Software is furnished to do so, subject to
|
11
|
+
the following conditions:
|
12
|
+
|
13
|
+
The above copyright notice and this permission notice shall be
|
14
|
+
included in all copies or substantial portions of the Software.
|
15
|
+
|
16
|
+
THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND,
|
17
|
+
EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF
|
18
|
+
MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND
|
19
|
+
NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE
|
20
|
+
LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION
|
21
|
+
OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION
|
22
|
+
WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.
|
data/README.md
ADDED
@@ -0,0 +1,54 @@
|
|
1
|
+
# Sequel secure_password [![Build Status](https://secure.travis-ci.org/mlen/sequel_secure_password.png)](http://travis-ci.org/mlen/sequel_secure_password)
|
2
|
+
|
3
|
+
Plugin adds BCrypt authentication and password hashing to Sequel models.
|
4
|
+
Model using this plugin should have `password_digest` field.
|
5
|
+
|
6
|
+
This plugin was created by extracting `has_secure_password` strategy from rails.
|
7
|
+
|
8
|
+
## Installation
|
9
|
+
|
10
|
+
Add this line to your application's Gemfile:
|
11
|
+
|
12
|
+
gem 'sequel_secure_password'
|
13
|
+
|
14
|
+
And then execute:
|
15
|
+
|
16
|
+
$ bundle
|
17
|
+
|
18
|
+
Or install it yourself as:
|
19
|
+
|
20
|
+
$ gem install sequel_secure_password
|
21
|
+
|
22
|
+
## Usage
|
23
|
+
|
24
|
+
Plugin should be used in subclasses of `Sequel::Model`. The model should have
|
25
|
+
`password_digest` attribute in database.
|
26
|
+
__Always__ call super in `validate` method of your model, otherwise password
|
27
|
+
validations won't be executed.
|
28
|
+
It __does not__ `set_allowed_columns` and mass assignment policy must be managed
|
29
|
+
separately.
|
30
|
+
|
31
|
+
Example model:
|
32
|
+
|
33
|
+
class User < Sequel::Model
|
34
|
+
plugin :secure_password
|
35
|
+
end
|
36
|
+
|
37
|
+
user = User.new
|
38
|
+
user.password = "foo"
|
39
|
+
user.password_confirmation = "bar"
|
40
|
+
user.valid? # => false
|
41
|
+
|
42
|
+
user.password_confirmation = "foo"
|
43
|
+
user.valid? # => true
|
44
|
+
|
45
|
+
user.authenticate("foo") # => user
|
46
|
+
user.authenticate("bar") # => nil
|
47
|
+
|
48
|
+
## Contributing
|
49
|
+
|
50
|
+
1. Fork it
|
51
|
+
2. Create your feature branch (`git checkout -b my-new-feature`)
|
52
|
+
3. Commit your changes (`git commit -am 'Add some feature'`)
|
53
|
+
4. Push to the branch (`git push origin my-new-feature`)
|
54
|
+
5. Create new Pull Request
|
data/Rakefile
ADDED
@@ -0,0 +1,40 @@
|
|
1
|
+
require "sequel_secure_password/version"
|
2
|
+
require "bcrypt"
|
3
|
+
|
4
|
+
module Sequel
|
5
|
+
module Plugins
|
6
|
+
module SecurePassword
|
7
|
+
module InstanceMethods
|
8
|
+
attr_accessor :password_confirmation
|
9
|
+
attr_reader :password
|
10
|
+
|
11
|
+
def password=(unencrypted)
|
12
|
+
@password = unencrypted
|
13
|
+
unless blank? unencrypted
|
14
|
+
self.password_digest = BCrypt::Password.create(unencrypted)
|
15
|
+
end
|
16
|
+
end
|
17
|
+
|
18
|
+
def authenticate(unencrypted)
|
19
|
+
if BCrypt::Password.new(password_digest) == unencrypted
|
20
|
+
self
|
21
|
+
end
|
22
|
+
end
|
23
|
+
|
24
|
+
def validate
|
25
|
+
super
|
26
|
+
|
27
|
+
errors.add :password_digest, 'is not present' if blank? password_digest
|
28
|
+
errors.add :password, 'has no confirmation' if password != password_confirmation
|
29
|
+
end
|
30
|
+
|
31
|
+
private
|
32
|
+
def blank?(string)
|
33
|
+
string.nil? or string == /\A\s*\z/
|
34
|
+
end
|
35
|
+
|
36
|
+
end
|
37
|
+
end
|
38
|
+
end
|
39
|
+
end
|
40
|
+
|
@@ -0,0 +1,34 @@
|
|
1
|
+
# -*- encoding: utf-8 -*-
|
2
|
+
lib = File.expand_path('../lib', __FILE__)
|
3
|
+
$LOAD_PATH.unshift(lib) unless $LOAD_PATH.include?(lib)
|
4
|
+
require 'sequel_secure_password/version'
|
5
|
+
|
6
|
+
Gem::Specification.new do |gem|
|
7
|
+
gem.name = "sequel_secure_password"
|
8
|
+
gem.version = SequelSecurePassword::VERSION
|
9
|
+
gem.authors = ["Mateusz Lenik"]
|
10
|
+
gem.email = ["mt.lenik@gmail.com"]
|
11
|
+
gem.description = %q{Plugin adds authentication methods to Sequel models using BCrypt library.}
|
12
|
+
gem.summary = <<EOF
|
13
|
+
Plugin adds BCrypt authentication and password hashing to Sequel models.
|
14
|
+
Model using this plugin should have 'password_digest' field.
|
15
|
+
|
16
|
+
This plugin was created by extracting has_secure_password strategy from rails.
|
17
|
+
EOF
|
18
|
+
gem.homepage = "http://github.com/mlen/sequel_secure_password"
|
19
|
+
|
20
|
+
gem.files = `git ls-files`.split($/)
|
21
|
+
gem.test_files = gem.files.grep(%r{^(test|spec|features)/})
|
22
|
+
gem.require_paths = ["lib"]
|
23
|
+
|
24
|
+
gem.add_dependency 'bcrypt-ruby', '~> 3.0.0'
|
25
|
+
gem.add_dependency 'sequel', '~> 3.40.0'
|
26
|
+
|
27
|
+
gem.add_development_dependency 'rspec', '~> 2.11.0'
|
28
|
+
gem.add_development_dependency 'rake', '~> 0.9.0'
|
29
|
+
if RUBY_PLATFORM == "java"
|
30
|
+
gem.add_development_dependency 'jdbc-sqlite3', '~> 3.7.2'
|
31
|
+
else
|
32
|
+
gem.add_development_dependency 'sqlite3', '~> 1.3.0'
|
33
|
+
end
|
34
|
+
end
|
@@ -0,0 +1,44 @@
|
|
1
|
+
require 'spec_helper'
|
2
|
+
|
3
|
+
describe "model with Sequel::Plugins::SecurePassword" do
|
4
|
+
subject { User.new }
|
5
|
+
|
6
|
+
it "is invalid with blank password" do
|
7
|
+
subject.password = ""
|
8
|
+
subject.should_not be_valid
|
9
|
+
end
|
10
|
+
|
11
|
+
it "is invalid with nil password" do
|
12
|
+
subject.password = nil
|
13
|
+
subject.should_not be_valid
|
14
|
+
end
|
15
|
+
|
16
|
+
it "is invalid without a password" do
|
17
|
+
subject.should_not be_valid
|
18
|
+
end
|
19
|
+
|
20
|
+
it "is valid with password matching confirmation" do
|
21
|
+
subject.password = "foo"
|
22
|
+
subject.password_confirmation = "foo"
|
23
|
+
|
24
|
+
subject.should be_valid
|
25
|
+
end
|
26
|
+
|
27
|
+
it "is invalid without password matching confirmation" do
|
28
|
+
subject.password = "foo"
|
29
|
+
subject.password_confirmation = "bar"
|
30
|
+
|
31
|
+
subject.should_not be_valid
|
32
|
+
end
|
33
|
+
|
34
|
+
it "returns user when authentication is successful" do
|
35
|
+
subject.password = "foo"
|
36
|
+
subject.authenticate("foo").should be subject
|
37
|
+
end
|
38
|
+
|
39
|
+
it "returns nil when authentication fails" do
|
40
|
+
subject.password = "foo"
|
41
|
+
subject.authenticate("bar").should be nil
|
42
|
+
end
|
43
|
+
|
44
|
+
end
|
data/spec/spec_helper.rb
ADDED
@@ -0,0 +1,31 @@
|
|
1
|
+
require 'rubygems'
|
2
|
+
require 'bundler'
|
3
|
+
Bundler.setup
|
4
|
+
require 'sequel'
|
5
|
+
require 'sequel_secure_password'
|
6
|
+
|
7
|
+
adapter = RUBY_PLATFORM == "java" ? 'jdbc:sqlite::memory:' : 'sqlite:/'
|
8
|
+
|
9
|
+
RSpec.configure do |c|
|
10
|
+
c.before :suite do
|
11
|
+
Sequel::Model.plugin(:schema)
|
12
|
+
Sequel.connect adapter
|
13
|
+
|
14
|
+
class User < Sequel::Model
|
15
|
+
set_schema do
|
16
|
+
primary_key :id
|
17
|
+
varchar :password_digest
|
18
|
+
end
|
19
|
+
|
20
|
+
plugin :secure_password
|
21
|
+
end
|
22
|
+
|
23
|
+
User.create_table!
|
24
|
+
end
|
25
|
+
|
26
|
+
c.around :each do |example|
|
27
|
+
Sequel::Model.db.transaction(:rollback => :always) { example.run }
|
28
|
+
end
|
29
|
+
end
|
30
|
+
|
31
|
+
|
metadata
ADDED
@@ -0,0 +1,141 @@
|
|
1
|
+
--- !ruby/object:Gem::Specification
|
2
|
+
name: sequel_secure_password
|
3
|
+
version: !ruby/object:Gem::Version
|
4
|
+
prerelease:
|
5
|
+
version: 0.1.0
|
6
|
+
platform: ruby
|
7
|
+
authors:
|
8
|
+
- Mateusz Lenik
|
9
|
+
autorequire:
|
10
|
+
bindir: bin
|
11
|
+
cert_chain: []
|
12
|
+
date: 2012-09-27 00:00:00.000000000 Z
|
13
|
+
dependencies:
|
14
|
+
- !ruby/object:Gem::Dependency
|
15
|
+
name: bcrypt-ruby
|
16
|
+
version_requirements: !ruby/object:Gem::Requirement
|
17
|
+
requirements:
|
18
|
+
- - ~>
|
19
|
+
- !ruby/object:Gem::Version
|
20
|
+
version: 3.0.0
|
21
|
+
none: false
|
22
|
+
requirement: !ruby/object:Gem::Requirement
|
23
|
+
requirements:
|
24
|
+
- - ~>
|
25
|
+
- !ruby/object:Gem::Version
|
26
|
+
version: 3.0.0
|
27
|
+
none: false
|
28
|
+
prerelease: false
|
29
|
+
type: :runtime
|
30
|
+
- !ruby/object:Gem::Dependency
|
31
|
+
name: sequel
|
32
|
+
version_requirements: !ruby/object:Gem::Requirement
|
33
|
+
requirements:
|
34
|
+
- - ~>
|
35
|
+
- !ruby/object:Gem::Version
|
36
|
+
version: 3.40.0
|
37
|
+
none: false
|
38
|
+
requirement: !ruby/object:Gem::Requirement
|
39
|
+
requirements:
|
40
|
+
- - ~>
|
41
|
+
- !ruby/object:Gem::Version
|
42
|
+
version: 3.40.0
|
43
|
+
none: false
|
44
|
+
prerelease: false
|
45
|
+
type: :runtime
|
46
|
+
- !ruby/object:Gem::Dependency
|
47
|
+
name: rspec
|
48
|
+
version_requirements: !ruby/object:Gem::Requirement
|
49
|
+
requirements:
|
50
|
+
- - ~>
|
51
|
+
- !ruby/object:Gem::Version
|
52
|
+
version: 2.11.0
|
53
|
+
none: false
|
54
|
+
requirement: !ruby/object:Gem::Requirement
|
55
|
+
requirements:
|
56
|
+
- - ~>
|
57
|
+
- !ruby/object:Gem::Version
|
58
|
+
version: 2.11.0
|
59
|
+
none: false
|
60
|
+
prerelease: false
|
61
|
+
type: :development
|
62
|
+
- !ruby/object:Gem::Dependency
|
63
|
+
name: rake
|
64
|
+
version_requirements: !ruby/object:Gem::Requirement
|
65
|
+
requirements:
|
66
|
+
- - ~>
|
67
|
+
- !ruby/object:Gem::Version
|
68
|
+
version: 0.9.0
|
69
|
+
none: false
|
70
|
+
requirement: !ruby/object:Gem::Requirement
|
71
|
+
requirements:
|
72
|
+
- - ~>
|
73
|
+
- !ruby/object:Gem::Version
|
74
|
+
version: 0.9.0
|
75
|
+
none: false
|
76
|
+
prerelease: false
|
77
|
+
type: :development
|
78
|
+
- !ruby/object:Gem::Dependency
|
79
|
+
name: jdbc-sqlite3
|
80
|
+
version_requirements: !ruby/object:Gem::Requirement
|
81
|
+
requirements:
|
82
|
+
- - ~>
|
83
|
+
- !ruby/object:Gem::Version
|
84
|
+
version: 3.7.2
|
85
|
+
none: false
|
86
|
+
requirement: !ruby/object:Gem::Requirement
|
87
|
+
requirements:
|
88
|
+
- - ~>
|
89
|
+
- !ruby/object:Gem::Version
|
90
|
+
version: 3.7.2
|
91
|
+
none: false
|
92
|
+
prerelease: false
|
93
|
+
type: :development
|
94
|
+
description: Plugin adds authentication methods to Sequel models using BCrypt library.
|
95
|
+
email:
|
96
|
+
- mt.lenik@gmail.com
|
97
|
+
executables: []
|
98
|
+
extensions: []
|
99
|
+
extra_rdoc_files: []
|
100
|
+
files:
|
101
|
+
- .gitignore
|
102
|
+
- .rspec
|
103
|
+
- .travis.yml
|
104
|
+
- Gemfile
|
105
|
+
- LICENSE.txt
|
106
|
+
- README.md
|
107
|
+
- Rakefile
|
108
|
+
- lib/sequel_secure_password.rb
|
109
|
+
- lib/sequel_secure_password/version.rb
|
110
|
+
- sequel_secure_password.gemspec
|
111
|
+
- spec/secure_password_spec.rb
|
112
|
+
- spec/spec_helper.rb
|
113
|
+
homepage: http://github.com/mlen/sequel_secure_password
|
114
|
+
licenses: []
|
115
|
+
post_install_message:
|
116
|
+
rdoc_options: []
|
117
|
+
require_paths:
|
118
|
+
- lib
|
119
|
+
required_ruby_version: !ruby/object:Gem::Requirement
|
120
|
+
requirements:
|
121
|
+
- - ! '>='
|
122
|
+
- !ruby/object:Gem::Version
|
123
|
+
version: !binary |-
|
124
|
+
MA==
|
125
|
+
none: false
|
126
|
+
required_rubygems_version: !ruby/object:Gem::Requirement
|
127
|
+
requirements:
|
128
|
+
- - ! '>='
|
129
|
+
- !ruby/object:Gem::Version
|
130
|
+
version: !binary |-
|
131
|
+
MA==
|
132
|
+
none: false
|
133
|
+
requirements: []
|
134
|
+
rubyforge_project:
|
135
|
+
rubygems_version: 1.8.24
|
136
|
+
signing_key:
|
137
|
+
specification_version: 3
|
138
|
+
summary: Plugin adds BCrypt authentication and password hashing to Sequel models. Model using this plugin should have 'password_digest' field. This plugin was created by extracting has_secure_password strategy from rails.
|
139
|
+
test_files:
|
140
|
+
- spec/secure_password_spec.rb
|
141
|
+
- spec/spec_helper.rb
|