spree_core 5.4.0.beta8 → 5.4.0.beta9

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: d8297e501dfb71ba02dbd003c3f2a6fa035585a07cca4cf3f7e039eb92bb55c6
-  data.tar.gz: 87546d3659afc8573cf33cd9b3b2ceac6e351f7f8e30969626991c7c39da8773
+  metadata.gz: 47046110413017b3697dc5b8937c77dc5cb1577035ca12ed2e5c828c826457ba
+  data.tar.gz: c0318740d1a1eb2a71a4bd4a99c88d6ea7100f69d6746a3084a1c54b4e7a74d8
 SHA512:
-  metadata.gz: 8983ae8234112c480dc54e302bd7d56557b11418af19a0ca6d65aa182ed06195c828ae69dc122209c23057149febb28b4c9e410a460e9dba2b09978240788997
-  data.tar.gz: e62cdc311fe8a2a256442b38e84df024e5c145ef47dc3c2cf5981e923bf5e3558c3b6937c3a64d101eb0783f5c493fdfbc3e75db004740d45599fa9d8ddfc80a
+  metadata.gz: f306e9d832c4dcedb23306edd9a3d32b8459e04125c50139c7f77b6bc8726c2363facd9652d6b0132aef92a63b21228873349bb9a5ba812e5ab7e63f3b460240
+  data.tar.gz: 946536ad1ed9dccbb48ad8882811381449656391c3d0f05205a8bc0165380624400e9b5c58973daa71467f4e3b6384b74f4fb358bf9657bfff3de634b93cddfb

data/app/models/spree/inventory_unit.rb

@@ -1,6 +1,6 @@
 module Spree
   class InventoryUnit < Spree.base_class
-    has_prefix_id :iu
+    has_prefix_id :fi
 
     extend Spree::DisplayMoney
 

data/app/models/spree/refresh_token.rb

@@ -0,0 +1,60 @@
+module Spree
+  class RefreshToken < Spree.base_class
+    has_prefix_id :rt
+
+    belongs_to :user, polymorphic: true
+
+    has_secure_token :token
+
+    validates :user, :expires_at, presence: true
+
+    scope :active, -> { where('expires_at > ?', Time.current) }
+    scope :expired, -> { where('expires_at <= ?', Time.current) }
+
+    def expired?
+      expires_at <= Time.current
+    end
+
+    # Rotate: destroy this token and create a new one.
+    # Returns the new token.
+    def rotate!(request_env: {})
+      new_token = nil
+      transaction do
+        new_token = self.class.create!(
+          user: user,
+          expires_at: self.class.default_expiry.from_now,
+          ip_address: request_env[:ip_address] || ip_address,
+          user_agent: request_env[:user_agent] || user_agent
+        )
+        destroy!
+      end
+      new_token
+    end
+
+    # Create a refresh token for a user
+    def self.create_for(user, request_env: {})
+      create!(
+        user: user,
+        expires_at: default_expiry.from_now,
+        ip_address: request_env[:ip_address],
+        user_agent: request_env[:user_agent]
+      )
+    end
+
+    # Revoke all refresh tokens for a user (e.g., on password change)
+    def self.revoke_all_for(user)
+      where(user: user).delete_all
+    end
+
+    # Clean up expired tokens
+    def self.cleanup_expired!
+      expired.delete_all
+    end
+
+    def self.default_expiry
+      Spree::Api::Config[:refresh_token_expiry].seconds
+    rescue StandardError
+      30.days
+    end
+  end
+end

data/app/models/spree/shipment.rb

@@ -2,7 +2,7 @@ require 'ostruct'
 
 module Spree
   class Shipment < Spree.base_class
-    has_prefix_id :ship  # Spree-specific: shipment
+    has_prefix_id :ful
 
     include Spree::Core::NumberGenerator.new(prefix: 'H', length: 11)
     include Spree::NumberIdentifier

data/app/models/spree/shipping_method.rb

@@ -1,6 +1,6 @@
 module Spree
   class ShippingMethod < Spree.base_class
-    has_prefix_id :shpm  # Spree-specific: shipping method
+    has_prefix_id :dm
 
     acts_as_paranoid
     include Spree::CalculatedAdjustments

data/app/models/spree/shipping_rate.rb

@@ -1,6 +1,6 @@
 module Spree
   class ShippingRate < Spree.base_class
-    has_prefix_id :shpr  # Spree-specific: shipping rate
+    has_prefix_id :dr
 
     belongs_to :shipment, class_name: 'Spree::Shipment'
     belongs_to :tax_rate, -> { with_deleted }, class_name: 'Spree::TaxRate'

data/db/migrate/20260317000000_create_spree_refresh_tokens.rb

@@ -0,0 +1,16 @@
+class CreateSpreeRefreshTokens < ActiveRecord::Migration[7.2]
+  def change
+    create_table :spree_refresh_tokens do |t|
+      t.string :token, null: false
+      t.references :user, polymorphic: true, null: false
+      t.datetime :expires_at, null: false
+      t.string :ip_address
+      t.string :user_agent
+      t.timestamps
+    end
+
+    add_index :spree_refresh_tokens, :token, unique: true
+    add_index :spree_refresh_tokens, :expires_at
+    add_index :spree_refresh_tokens, [:user_type, :user_id], name: 'idx_refresh_tokens_user'
+  end
+end

data/lib/spree/core/version.rb

@@ -1,5 +1,5 @@
 module Spree
-  VERSION = '5.4.0.beta8'.freeze
+  VERSION = '5.4.0.beta9'.freeze
 
   def self.version
     VERSION

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: spree_core
 version: !ruby/object:Gem::Version
-  version: 5.4.0.beta8
+  version: 5.4.0.beta9
 platform: ruby
 authors:
 - Sean Schofield
@@ -10,7 +10,7 @@ authors:
 autorequire:
 bindir: bin
 cert_chain: []
-date: 2026-03-16 00:00:00.000000000 Z
+date: 2026-03-17 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: i18n-tasks
@@ -1077,6 +1077,7 @@ files:
 - app/models/spree/promotion_rule_user.rb
 - app/models/spree/prototype.rb
 - app/models/spree/prototype_taxon.rb
+- app/models/spree/refresh_token.rb
 - app/models/spree/refund.rb
 - app/models/spree/refund_reason.rb
 - app/models/spree/reimbursement.rb
@@ -1449,6 +1450,7 @@ files:
 - db/migrate/20260226100000_add_token_digest_to_spree_api_keys.rb
 - db/migrate/20260315000000_create_spree_allowed_origins.rb
 - db/migrate/20260315100000_add_product_media_support.rb
+- db/migrate/20260317000000_create_spree_refresh_tokens.rb
 - db/sample_data/customers.csv
 - db/sample_data/metafield_definitions.rb
 - db/sample_data/orders.rb
@@ -1671,9 +1673,9 @@ licenses:
 - BSD-3-Clause
 metadata:
   bug_tracker_uri: https://github.com/spree/spree/issues
-  changelog_uri: https://github.com/spree/spree/releases/tag/v5.4.0.beta8
+  changelog_uri: https://github.com/spree/spree/releases/tag/v5.4.0.beta9
   documentation_uri: https://docs.spreecommerce.org/
-  source_code_uri: https://github.com/spree/spree/tree/v5.4.0.beta8
+  source_code_uri: https://github.com/spree/spree/tree/v5.4.0.beta9
 post_install_message:
 rdoc_options: []
 require_paths: