simple_auth 3.1.2 → 3.1.4

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 3d766e5009401ad9ed59c71e123f83046e23ea750ed8cc1f0aa7d3d3953f4185
-  data.tar.gz: fefbd6744a260ded45f3cb53db8fb5d407b0b4c8ac1fac606a9d49ce3321379c
+  metadata.gz: f49f3b991fd189a65c444c7fe0bbf4b6312ad268d15d09718554b17abede88de
+  data.tar.gz: 4b89cc2082720e7b13c778393cbd353737855e913417a55f520443cbcbbafd25
 SHA512:
-  metadata.gz: 2b07279571d5d771fe036f2102a4c9c0333aea5eb8c87816a37c5c1742fd365b60926dd59dfe5e9cd265019a99035b41d250a2d939d711836ce50d50dfcc1ba0
-  data.tar.gz: 896be7f120ffe8154a7b3cdf7b90b4782b9b2f5914454ed8745051c9b1e612180afd0929cb2cd6c5f1286a6179b92e766a697e77b17fab3905e470ec9589d5ab
+  metadata.gz: 3bc6961ef9d45a04f41988e5f1abaa47784edec75d74f49655fdc214285c16c63c2d0aca6d80aa669e7d21fad74434c5f0a570ba1a557a9c14e1d0822063154e
+  data.tar.gz: a23600ef945fb6675390133b84b6219edafa10a11ab524856a6535162ee8726ad007b5d0613af48706b461d8e4318a632170425533ebb8c2b6cd56af46145792

data/.github/CODEOWNERS

@@ -0,0 +1,4 @@
+# You can read more about CODEOWNERS at
+# https://help.github.com/github/creating-cloning-and-archiving-repositories/about-code-owners
+
+* @fnando

data/.github/FUNDING.yml

@@ -0,0 +1,4 @@
+# These are supported funding model platforms
+---
+github: [fnando]
+custom: ["https://paypal.me/nandovieira/🍕"]

data/.github/ISSUE_TEMPLATE/bug_report.md

@@ -0,0 +1,41 @@
+---
+name: "🐛 Bug Report"
+about: Report a reproducible bug or regression.
+title: 'Bug: '
+labels: 'Status: Unconfirmed'
+
+---
+
+<!--
+  - Please provide a clear and concise description of what the bug is.
+  - If possible, add an example reproducing your issue.
+  - Please test using the latest version of simple_auth
+    to make sure your issue has not already been fixed.
+-->
+
+## Description
+
+[Add bug description here]
+
+## How to reproduce
+
+[Add steps on how to reproduce this issue]
+
+## What do you expect
+
+[Describe what do you expect to happen]
+
+## What happened instead
+
+[Describe the actual results]
+
+## Software:
+
+- Gem version: [Add gem version here]
+- Ruby version: [Add version here]
+
+## Full backtrace
+
+```text
+[Paste full backtrace here]
+```

data/.github/ISSUE_TEMPLATE/config.yml

@@ -0,0 +1,5 @@
+---
+contact_links:
+  - name: "🤨 Q&A"
+    url: https://github.com/fnando/simple_auth/discussions/new?category=q-a
+    about: Have a question? Ask it away here!

data/.github/ISSUE_TEMPLATE/feature_request.md

@@ -0,0 +1,23 @@
+---
+name: "💡 Feature request"
+about: Have an idea that may be useful? Make a suggestion!
+title: 'Feature Request: '
+labels: 'Feature request'
+
+---
+
+## Description
+
+_A clear and concise description of what the problem is._
+
+## Describe the solution
+
+_A clear and concise description of what you want to happen._
+
+## Alternatives you considered
+
+_A clear and concise description of any alternative solutions or features you've considered._
+
+## Additional context
+
+_Add any other context, screenshots, links, etc about the feature request here._

data/.github/PULL_REQUEST_TEMPLATE.md

@@ -0,0 +1,38 @@
+<!--
+If you're making a doc PR or something tiny where the below is irrelevant,
+delete this template and use a short description, but in your description aim to
+include both what the change is, and why it is being made, with enough context
+for anyone to understand.
+-->
+
+<details>
+  <summary>PR Checklist</summary>
+
+### PR Structure
+
+- [ ] This PR has reasonably narrow scope (if not, break it down into smaller
+      PRs).
+- [ ] This PR avoids mixing refactoring changes with feature changes (split into
+      two PRs otherwise).
+- [ ] This PR's title starts is concise and descriptive.
+
+### Thoroughness
+
+- [ ] This PR adds tests for the most critical parts of the new functionality or
+      fixes.
+- [ ] I've updated any docs, `.md` files, etc… affected by this change.
+
+</details>
+
+### What
+
+[TODO: Short statement about what is changing.]
+
+### Why
+
+[TODO: Why this change is being made. Include any context required to understand
+the why.]
+
+### Known limitations
+
+[TODO or N/A]

data/.github/dependabot.yml

@@ -0,0 +1,15 @@
+---
+# Documentation:
+# https://help.github.com/github/administering-a-repository/configuration-options-for-dependency-updates
+
+version: 2
+updates:
+  - package-ecosystem: "github-actions"
+    directory: "/"
+    schedule:
+      interval: "daily"
+
+  - package-ecosystem: bundler
+    directory: "/"
+    schedule:
+      interval: "daily"

data/.github/workflows/ruby-tests.yml

@@ -0,0 +1,74 @@
+---
+name: ruby-tests
+
+on:
+  pull_request_target:
+  push:
+    branches:
+      - main
+  workflow_dispatch:
+    inputs: {}
+
+jobs:
+  build:
+    name: Tests with Ruby ${{ matrix.ruby }} and ${{ matrix.gemfile }}
+    runs-on: "ubuntu-latest"
+    if: |
+      github.actor == 'dependabot[bot]' && github.event_name == 'pull_request_target' ||
+      github.actor != 'dependabot[bot]'
+    strategy:
+      fail-fast: false
+      matrix:
+        ruby: ["2.7", "3.0", "3.1"]
+        gemfile:
+          - Gemfile
+          - gemfiles/rails_7_0.gemfile
+          - gemfiles/rails_6_1.gemfile
+          - gemfiles/rails_6_0.gemfile
+
+    services:
+      postgres:
+        image: postgres:11.5
+        ports: ["5432:5432"]
+        options:
+          --health-cmd pg_isready --health-interval 10s --health-timeout 5s
+          --health-retries 5
+
+    steps:
+      - uses: actions/checkout@v3
+
+      - uses: actions/cache@v3
+        with:
+          path: vendor/bundle
+          key: >
+            ${{ runner.os }}-${{ matrix.ruby }}-gems-${{
+            hashFiles(matrix.gemfile) }}
+
+      - name: Set up Ruby
+        uses: ruby/setup-ruby@v1
+        with:
+          ruby-version: ${{ matrix.ruby }}
+
+      - name: Install PostgreSQL client
+        env:
+          PGHOST: localhost
+          PGUSER: postgres
+        run: |
+          sudo apt-get -yqq install libpq-dev
+          psql -U postgres -c "create database test"
+
+      - name: Install gem dependencies
+        env:
+          BUNDLE_GEMFILE: ${{ matrix.gemfile }}
+        run: |
+          gem install bundler
+          bundle config path vendor/bundle
+          bundle update --jobs 4 --retry 3
+
+      - name: Run Tests
+        env:
+          BUNDLE_GEMFILE: ${{ matrix.gemfile }}
+          PGHOST: localhost
+          PGUSER: postgres
+        run: |
+          bundle exec rake

data/.rubocop.yml

@@ -3,7 +3,7 @@ inherit_gem:
   rubocop-fnando: .rubocop.yml
 
 AllCops:
-  TargetRubyVersion: 2.6
-
-Metrics/AbcSize:
-  Enabled: false
+  TargetRubyVersion: 2.7
+  Exclude:
+    - gemfiles/**/*
+    - vendor/**/*

data/CHANGELOG.md

@@ -1,41 +1,51 @@
-# v3.1.2
+# Changelog
+
+## v3.1.4
+
+- Add `authenticate(scope, condition, &block)`, so you can restrict routes
+  directly from the routes definition.
+
+## v3.1.3
+
+- Remove session[:return_to] after using it.
+
+## v3.1.2
 
 - Make flash message key configurable via
   `SimpleAuth::Config#flash_message_key`.
 
-# v3.1.1
+## v3.1.1
 
 - Catch exceptions related to record not found when session tries to load a
   record from session. You can customize the recognized exceptions by adding the
   error class to `SimpleAuth::Session.record_not_found_exceptions`.
 
-# v3.1.0
+## v3.1.0
 
 - SimpleAuth now uses [GlobalID](https://github.com/rails/globalid) as the
   identification that's saved on the session. This should be a seamless
   migration (users will only have to re-login). This allows using any objects
   that respond to `#to_gid`, including namespaced models and POROs.
 
-# v3.0.0
+## v3.0.0
 
 - Reimplemented library.
 - Add support for scoped authentication (e.g. user and admin).
 
-# v2.0.3
+## v2.0.3
 
 - Assign the raw password/confirmation, so we can apply validations on the raw
   value.
 
-# v2.0.2
+## v2.0.2
 
 - The compat wasn't validating fields correctly.
 
-# v2.0.1
+## v2.0.1
 
 - The compat mode wasn't generating the `password_digest`.
 
-# v2.0.0
+## v2.0.0
 
-- Released version 2.0.0. This version removes support for MongoDB
-  and switches to `has_secure_password` encryption method. This
-  change requires Rails 3.1.0+.
+- Released version 2.0.0. This version removes support for MongoDB and switches
+  to `has_secure_password` encryption method. This change requires Rails 3.1.0+.

data/CODE_OF_CONDUCT.md

@@ -0,0 +1,74 @@
+# Contributor Covenant Code of Conduct
+
+## Our Pledge
+
+In the interest of fostering an open and welcoming environment, we as
+contributors and maintainers pledge to making participation in our project and
+our community a harassment-free experience for everyone, regardless of age, body
+size, disability, ethnicity, gender identity and expression, level of experience,
+nationality, personal appearance, race, religion, or sexual identity and
+orientation.
+
+## Our Standards
+
+Examples of behavior that contributes to creating a positive environment
+include:
+
+* Using welcoming and inclusive language
+* Being respectful of differing viewpoints and experiences
+* Gracefully accepting constructive criticism
+* Focusing on what is best for the community
+* Showing empathy towards other community members
+
+Examples of unacceptable behavior by participants include:
+
+* The use of sexualized language or imagery and unwelcome sexual attention or
+advances
+* Trolling, insulting/derogatory comments, and personal or political attacks
+* Public or private harassment
+* Publishing others' private information, such as a physical or electronic
+  address, without explicit permission
+* Other conduct which could reasonably be considered inappropriate in a
+  professional setting
+
+## Our Responsibilities
+
+Project maintainers are responsible for clarifying the standards of acceptable
+behavior and are expected to take appropriate and fair corrective action in
+response to any instances of unacceptable behavior.
+
+Project maintainers have the right and responsibility to remove, edit, or
+reject comments, commits, code, wiki edits, issues, and other contributions
+that are not aligned to this Code of Conduct, or to ban temporarily or
+permanently any contributor for other behaviors that they deem inappropriate,
+threatening, offensive, or harmful.
+
+## Scope
+
+This Code of Conduct applies both within project spaces and in public spaces
+when an individual is representing the project or its community. Examples of
+representing a project or community include using an official project e-mail
+address, posting via an official social media account, or acting as an appointed
+representative at an online or offline event. Representation of a project may be
+further defined and clarified by project maintainers.
+
+## Enforcement
+
+Instances of abusive, harassing, or otherwise unacceptable behavior may be
+reported by contacting the project team at me@fnando.com. All
+complaints will be reviewed and investigated and will result in a response that
+is deemed necessary and appropriate to the circumstances. The project team is
+obligated to maintain confidentiality with regard to the reporter of an incident.
+Further details of specific enforcement policies may be posted separately.
+
+Project maintainers who do not follow or enforce the Code of Conduct in good
+faith may face temporary or permanent repercussions as determined by other
+members of the project's leadership.
+
+## Attribution
+
+This Code of Conduct is adapted from the [Contributor Covenant][homepage], version 1.4,
+available at [https://contributor-covenant.org/version/1/4][version]
+
+[homepage]: https://contributor-covenant.org
+[version]: https://contributor-covenant.org/version/1/4/

data/LICENSE.md

@@ -0,0 +1,20 @@
+(The MIT License)
+
+Copyright (c) 2010 Nando Vieira
+
+Permission is hereby granted, free of charge, to any person obtaining a copy of
+this software and associated documentation files (the 'Software'), to deal in
+the Software without restriction, including without limitation the rights to
+use, copy, modify, merge, publish, distribute, sublicense, and/or sell copies of
+the Software, and to permit persons to whom the Software is furnished to do so,
+subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED 'AS IS', WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS
+FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR
+COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER
+IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN
+CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.

data/README.md

@@ -1,10 +1,9 @@
 # Simple Auth
 
-[![Travis-CI](https://travis-ci.org/fnando/simple_auth.svg)](https://travis-ci.org/fnando/simple_auth)
-[![Code Climate](https://codeclimate.com/github/fnando/simple_auth/badges/gpa.svg)](https://codeclimate.com/github/fnando/simple_auth)
-[![Test Coverage](https://codeclimate.com/github/fnando/simple_auth/badges/coverage.svg)](https://codeclimate.com/github/fnando/simple_auth/coverage)
+[![Tests](https://github.com/fnando/simple_auth/workflows/ruby-tests/badge.svg)](https://github.com/fnando/simple_auth)
 [![Gem](https://img.shields.io/gem/v/simple_auth.svg)](https://rubygems.org/gems/simple_auth)
 [![Gem](https://img.shields.io/gem/dt/simple_auth.svg)](https://rubygems.org/gems/simple_auth)
+[![MIT License](https://img.shields.io/:License-MIT-blue.svg)](https://tldrlegal.com/license/mit-license)
 
 SimpleAuth is an authentication library to be used when everything else is just
 too complicated.
@@ -136,11 +135,27 @@ current_#{scope}       # e.g. current_user    (available in controller & views)
 #{scope}_session       # e.g. user_session    (available in controller & views)
 ```
 
+#### From your routes file
+
+You can also restrict routes directly from your routes:
+
+```ruby
+Rails.application.routes.draw do
+  authenticate :admin, ->(user) { user.admin? } do
+    mount Sidekiq::Web, at: "sidekiq"
+  end
+end
+```
+
+In this case, `:admin` is the scope and the lambda will only be called whenever
+there's a valid record associated with that record.
+
 ### Translations
 
 These are the translations you'll need:
 
 ```yaml
+---
 en:
   simple_auth:
     user:
@@ -154,6 +169,7 @@ To display the error message, use something like `<%= flash[:alert] %>`. If you
 want to use a custom key, say `:error`, use the configuration file
 `config/initializers/simple_auth.rb` to define the new key:
 
+```ruby
 # config/initializers/simple_auth.rb
 SimpleAuth.setup do |config|
   # ...
@@ -166,27 +182,25 @@ end
 
 ## Maintainer
 
-* Nando Vieira (<http://nandovieira.com>)
+- [Nando Vieira](https://github.com/fnando)
+
+## Contributors
+
+- https://github.com/fnando/simple_auth/contributors
+
+## Contributing
 
-## License:
+For more details about how to contribute, please read
+https://github.com/fnando/simple_auth/blob/main/CONTRIBUTING.md.
 
-(The MIT License)
+## License
 
-Permission is hereby granted, free of charge, to any person obtaining
-a copy of this software and associated documentation files (the
-'Software'), to deal in the Software without restriction, including
-without limitation the rights to use, copy, modify, merge, publish,
-distribute, sublicense, and/or sell copies of the Software, and to
-permit persons to whom the Software is furnished to do so, subject to
-the following conditions:
+The gem is available as open source under the terms of the
+[MIT License](https://opensource.org/licenses/MIT). A copy of the license can be
+found at https://github.com/fnando/simple_auth/blob/main/LICENSE.md.
 
-The above copyright notice and this permission notice shall be
-included in all copies or substantial portions of the Software.
+## Code of Conduct
 
-THE SOFTWARE IS PROVIDED 'AS IS', WITHOUT WARRANTY OF ANY KIND,
-EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF
-MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT.
-IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY
-CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION OF CONTRACT,
-TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION WITH THE
-SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.
+Everyone interacting in the simple_auth project's codebases, issue trackers,
+chat rooms and mailing lists is expected to follow the
+[code of conduct](https://github.com/fnando/simple_auth/blob/main/CODE_OF_CONDUCT.md).

data/gemfiles/rails_6_1.gemfile

@@ -0,0 +1,6 @@
+# frozen_string_literal: true
+
+source "https://rubygems.org"
+gemspec path: ".."
+
+gem "rails", "~> 6.1.0"

data/gemfiles/rails_7_0.gemfile

@@ -0,0 +1,6 @@
+# frozen_string_literal: true
+
+source "https://rubygems.org"
+gemspec path: ".."
+
+gem "rails", "~> 7.0.0"

data/lib/simple_auth/action_controller.rb

@@ -16,16 +16,25 @@ module SimpleAuth
         end
       end
 
-      def install_simple_auth_scope(scope) # rubocop:disable Metrics/MethodLength
+      def install_simple_auth_scope(scope)
         class_eval <<-RUBY, __FILE__, __LINE__ + 1
+          # def user_session
+          #   @user_session ||= Session.create(scope: :user, session: session)
+          # end
           def #{scope}_session
             @#{scope}_session ||= Session.create(scope: :#{scope}, session: session)
           end
 
+          # def current_user
+          #   user_session.record
+          # end
           def current_#{scope}
             #{scope}_session.record
           end
 
+          # def user_logged_in?
+          #   current_user.present?
+          # end
           def #{scope}_logged_in?
             current_#{scope}.present?
           end
@@ -50,7 +59,7 @@ module SimpleAuth
     end
 
     private def return_to(url)
-      session[:return_to] || url
+      session.delete(:return_to) || url
     end
 
     private def simple_auth_require_logged_scope(scope)

data/lib/simple_auth/routing_mapper.rb

@@ -0,0 +1,29 @@
+# frozen_string_literal: true
+
+module SimpleAuth
+  module RoutingMapper
+    class Matcher
+      attr_reader :scope, :condition
+
+      def initialize(scope:, condition:)
+        @scope = scope
+        @condition = condition
+      end
+
+      def call(request)
+        session = Session.create(scope: scope, session: request.session)
+        record = session.record
+
+        record && condition.call(record)
+      end
+    end
+
+    def authenticate(scope, condition, &block)
+      with_options(
+        constraints: Matcher.new(scope: scope, condition: condition)
+      ) do
+        instance_eval(&block)
+      end
+    end
+  end
+end

data/lib/simple_auth/version.rb

@@ -1,5 +1,5 @@
 # frozen_string_literal: true
 
 module SimpleAuth
-  VERSION = "3.1.2"
+  VERSION = "3.1.4"
 end

data/lib/simple_auth.rb

@@ -4,15 +4,19 @@ module SimpleAuth
   require "rails/railtie"
   require "global_id/railtie"
   require "active_support/concern"
+  require "action_dispatch/routing/mapper"
 
   require "simple_auth/version"
   require "simple_auth/config"
   require "simple_auth/railtie"
   require "simple_auth/action_controller"
+  require "simple_auth/routing_mapper"
   require "simple_auth/action_controller/require_login_action"
   require "simple_auth/session"
   require "simple_auth/generator"
 
+  ::ActionDispatch::Routing::Mapper.prepend SimpleAuth::RoutingMapper
+
   def self.setup
     yield config
   end

data/simple_auth.gemspec

@@ -11,6 +11,18 @@ Gem::Specification.new do |s|
   s.homepage    = "http://rubygems.org/gems/simple_auth"
   s.summary     = "A simple authentication system for Rails apps"
   s.description = s.summary
+  s.required_ruby_version = Gem::Requirement.new(">= 2.7.0")
+
+  github_url = "https://github.com/fnando/simple_auth"
+  github_tree_url = "#{github_url}/tree/v#{s.version}"
+
+  s.metadata["homepage_uri"] = s.homepage
+  s.metadata["bug_tracker_uri"] = "#{github_url}/issues"
+  s.metadata["source_code_uri"] = github_tree_url
+  s.metadata["changelog_uri"] = "#{github_tree_url}/CHANGELOG.md"
+  s.metadata["documentation_uri"] = "#{github_tree_url}/README.md"
+  s.metadata["license_uri"] = "#{github_tree_url}/LICENSE.md"
+  s.metadata["rubygems_mfa_required"] = "true"
 
   s.files         = `git ls-files`.split("\n")
   s.test_files    = `git ls-files -- {test,spec,features}/*`.split("\n")

data/test/controllers/pages_controller_test.rb

@@ -35,9 +35,11 @@ class PagesControllerTest < ActionController::TestCase
   test "redirects to requested url" do
     get :index
     assert_redirected_to login_path
+    assert_equal "/index", session[:return_to]
 
     get :log_in
     assert_redirected_to controller: :pages, action: :index
+    refute session.key?(:return_to)
   end
 
   test "redirects to default url" do

data/test/requests/admin_test.rb

@@ -0,0 +1,81 @@
+# frozen_string_literal: true
+
+require "test_helper"
+
+class AdminTest < ActionDispatch::IntegrationTest
+  setup do
+    User.delete_all
+  end
+
+  def create_records
+    admin = User.create!(
+      password: "test",
+      email: "admin@example.com",
+      admin: true
+    )
+    user = User.create!(
+      password: "test",
+      email: "john@example.com",
+      admin: false
+    )
+
+    [admin, user]
+  end
+
+  test "allows users with admin flag to access page" do
+    admin, _ = *create_records
+
+    get "/only/admins"
+    assert_equal 404, response.status
+
+    get "/only/admins-by-email"
+    assert_equal 404, response.status
+
+    post "/start-session", params: {scope: "admin", id: admin.id}
+    assert_equal 200, response.status
+
+    get "/only/admins"
+    assert_equal 200, response.status
+
+    get "/only/admins-by-email"
+    assert_equal 404, response.status
+  end
+
+  test "allows users with admin email to access page" do
+    admin, _ = *create_records
+
+    get "/only/admins"
+    assert_equal 404, response.status
+
+    get "/only/admins-by-email"
+    assert_equal 404, response.status
+
+    post "/start-session", params: {scope: "user", id: admin.id}
+    assert_equal 200, response.status
+
+    get "/only/admins"
+    assert_equal 404, response.status
+
+    get "/only/admins-by-email"
+    assert_equal 200, response.status
+  end
+
+  test "rejects users with non admin email" do
+    _, user = *create_records
+
+    get "/only/admins"
+    assert_equal 404, response.status
+
+    get "/only/admins-by-email"
+    assert_equal 404, response.status
+
+    post "/start-session", params: {scope: "user", id: user.id}
+    assert_equal 200, response.status
+
+    get "/only/admins"
+    assert_equal 404, response.status
+
+    get "/only/admins-by-email"
+    assert_equal 404, response.status
+  end
+end

data/test/support/dummy/app/controllers/sessions_controller.rb

@@ -0,0 +1,13 @@
+# frozen_string_literal: true
+
+class SessionsController < ApplicationController
+  def create_session
+    session["#{params[:scope]}_id"] = User.find(params[:id]).to_gid.to_s
+    render plain: "", status: 200
+  end
+
+  def terminate_session
+    reset_session
+    render plain: "", status: 200
+  end
+end

data/test/support/dummy/config/routes.rb

@@ -5,6 +5,17 @@ Rails.application.routes.draw do
   get "/admin/dashboard", to: "admin/dashboard#index"
   get "/login", to: "sessions#new"
 
+  post "/start-session", to: "sessions#create_session"
+  post "/terminate-session", to: "sessions#terminate_session"
+
+  authenticate :admin, ->(u) { u.admin? } do
+    get "/only/admins", to: ->(_env) { [200, {}, ["OK"]] }
+  end
+
+  authenticate :user, ->(u) { u.email == "admin@example.com" } do
+    get "only/admins-by-email", to: ->(_env) { [200, {}, ["OK"]] }
+  end
+
   controller :dashboard do
     get :log_in
     get :not_logged

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: simple_auth
 version: !ruby/object:Gem::Version
-  version: 3.1.2
+  version: 3.1.4
 platform: ruby
 authors:
 - Nando Vieira
-autorequire: 
+autorequire:
 bindir: bin
 cert_chain: []
-date: 2020-02-20 00:00:00.000000000 Z
+date: 2023-01-09 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: globalid
@@ -172,23 +172,35 @@ executables:
 extensions: []
 extra_rdoc_files: []
 files:
+- ".github/CODEOWNERS"
+- ".github/FUNDING.yml"
+- ".github/ISSUE_TEMPLATE/bug_report.md"
+- ".github/ISSUE_TEMPLATE/config.yml"
+- ".github/ISSUE_TEMPLATE/feature_request.md"
+- ".github/PULL_REQUEST_TEMPLATE.md"
+- ".github/dependabot.yml"
+- ".github/workflows/ruby-tests.yml"
 - ".gitignore"
 - ".rubocop.yml"
-- ".travis.yml"
 - CHANGELOG.md
+- CODE_OF_CONDUCT.md
 - Gemfile
+- LICENSE.md
 - MIGRATE.md
 - README.md
 - Rakefile
 - bin/console
 - gemfiles/rails_5_2.gemfile
 - gemfiles/rails_6_0.gemfile
+- gemfiles/rails_6_1.gemfile
+- gemfiles/rails_7_0.gemfile
 - lib/simple_auth.rb
 - lib/simple_auth/action_controller.rb
 - lib/simple_auth/action_controller/require_login_action.rb
 - lib/simple_auth/config.rb
 - lib/simple_auth/generator.rb
 - lib/simple_auth/railtie.rb
+- lib/simple_auth/routing_mapper.rb
 - lib/simple_auth/session.rb
 - lib/simple_auth/templates/install/initializer.rb
 - lib/simple_auth/version.rb
@@ -197,10 +209,12 @@ files:
 - test/controllers/dashboard_controller_test.rb
 - test/controllers/pages_controller_test.rb
 - test/generators/install_test.rb
+- test/requests/admin_test.rb
 - test/support/dummy/app/controllers/admin/dashboard_controller.rb
 - test/support/dummy/app/controllers/application_controller.rb
 - test/support/dummy/app/controllers/dashboard_controller.rb
 - test/support/dummy/app/controllers/pages_controller.rb
+- test/support/dummy/app/controllers/sessions_controller.rb
 - test/support/dummy/app/models/user.rb
 - test/support/dummy/config/application.rb
 - test/support/dummy/config/initializers/simple_auth.rb
@@ -210,8 +224,15 @@ files:
 - test/unit/session_test.rb
 homepage: http://rubygems.org/gems/simple_auth
 licenses: []
-metadata: {}
-post_install_message: 
+metadata:
+  homepage_uri: http://rubygems.org/gems/simple_auth
+  bug_tracker_uri: https://github.com/fnando/simple_auth/issues
+  source_code_uri: https://github.com/fnando/simple_auth/tree/v3.1.4
+  changelog_uri: https://github.com/fnando/simple_auth/tree/v3.1.4/CHANGELOG.md
+  documentation_uri: https://github.com/fnando/simple_auth/tree/v3.1.4/README.md
+  license_uri: https://github.com/fnando/simple_auth/tree/v3.1.4/LICENSE.md
+  rubygems_mfa_required: 'true'
+post_install_message:
 rdoc_options: []
 require_paths:
 - lib
@@ -219,15 +240,15 @@ required_ruby_version: !ruby/object:Gem::Requirement
   requirements:
   - - ">="
     - !ruby/object:Gem::Version
-      version: '0'
+      version: 2.7.0
 required_rubygems_version: !ruby/object:Gem::Requirement
   requirements:
   - - ">="
     - !ruby/object:Gem::Version
       version: '0'
 requirements: []
-rubygems_version: 3.1.2
-signing_key: 
+rubygems_version: 3.4.1
+signing_key:
 specification_version: 4
 summary: A simple authentication system for Rails apps
 test_files:
@@ -235,10 +256,12 @@ test_files:
 - test/controllers/dashboard_controller_test.rb
 - test/controllers/pages_controller_test.rb
 - test/generators/install_test.rb
+- test/requests/admin_test.rb
 - test/support/dummy/app/controllers/admin/dashboard_controller.rb
 - test/support/dummy/app/controllers/application_controller.rb
 - test/support/dummy/app/controllers/dashboard_controller.rb
 - test/support/dummy/app/controllers/pages_controller.rb
+- test/support/dummy/app/controllers/sessions_controller.rb
 - test/support/dummy/app/models/user.rb
 - test/support/dummy/config/application.rb
 - test/support/dummy/config/initializers/simple_auth.rb

data/.travis.yml

@@ -1,22 +0,0 @@
----
-sudo: false
-cache: bundler
-rvm:
-  - 2.7.0
-  - 2.6.5
-  - 2.5.7
-script: bundle exec rake
-before_script:
-  - curl -L https://codeclimate.com/downloads/test-reporter/test-reporter-latest-linux-amd64 > ./cc-test-reporter
-  - chmod +x ./cc-test-reporter
-  - "./cc-test-reporter before-build"
-after_script:
-  - "./cc-test-reporter after-build --exit-code $TRAVIS_TEST_RESULT"
-notifications:
-  email: false
-gemfile:
-  - gemfiles/rails_6_0.gemfile
-  - gemfiles/rails_5_2.gemfile
-env:
-  global:
-    secure: LglasZ2QJLCE2tSKyZ9wIZNNwDNQ/gi+QNSHlpK2olgBOYMKV1idJPZjUlSTAac7+QHTYRRGCoUVMYHWxJgLfcuo7YpXVAgqPwjVl5nbHKfh/oP/FLriELKZbqMo0TtuqZNdnqPdO8RE7zK0om37jYNoUPJ4j2mUVLC8PMZpbiM=