sqrl-rails 0.1.1 → 0.1.2

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (4) hide show
  1. checksums.yaml +4 -4
  2. data/CHANGELOG.md +36 -4
  3. data/README.md +4 -1
  4. metadata +5 -5
checksums.yaml CHANGED
@@ -1,7 +1,7 @@
1
1
  ---
2
2
  SHA256:
3
- metadata.gz: e026261f10b567d75d64bfa15fe625ad46be435e417ab4cee2b0abf362f3d36f
4
- data.tar.gz: b84765d77b56db648587521a5476a50849624f2e83a3e5ce7a8e82992fe052b5
3
+ metadata.gz: b34d77deaad5cf092b37d4bed065e2a75b8e1292aab3cba010d9194d59fba3d9
4
+ data.tar.gz: c2e1c105bdeef26a95ada53b5af15a811a272946f54c6e5a7087e17f0d09a7bf
5
5
  SHA512:
6
- metadata.gz: 415f95dc13ef2445cf0ac92ef6f90b09ac3dab3a0c67c17e7e9b68cfb69d903825f9b73ab8c0f8903d888f30993d3c6b5fa63f5c724237711862603cd9446486
7
- data.tar.gz: 5581a3264151c588dfac7c5b53b060f28d9f4ee1e1b7b466e60baf5ce2f96a0d54abda770c5a93c3ca00efd1cac7f2e280e588882353fc9b1e255b1e666c7aaa
6
+ metadata.gz: 34014060196af2908a5d94fc168fcaa77383a1486efd2426fee990c5ff68679d29671588eb77c11d71025e532940d6d833cefc169dfbf5572e6ddf73f8d33f5f
7
+ data.tar.gz: 538d7cb8a3ddaa6089200da9675aed11f65ae77cb994b0819e7dde9a20bd343efbe18dd655c79cdc29cbc329b27d3762f55553cf212fcd69e11eda6d8b289c92
data/CHANGELOG.md CHANGED
@@ -1,14 +1,41 @@
1
1
  # Changelog
2
2
 
3
- ## 0.1.1 — 2026-10-20
3
+ All notable changes to `sqrl-rails` are documented in this file.
4
4
 
5
- - No changes. Released with sqrl-core 0.1.1, which fixes the `NoMethodError` on Ruby 3.1
6
- and 3.2; every gem in the family shares one version.
5
+ The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.1.0/), and this
6
+ project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html). Every gem in
7
+ the family shares one version number and is released in lockstep.
7
8
 
8
- ## 0.1.0 — 2026-10-20
9
+ ## [Unreleased]
10
+
11
+ ## [0.1.2] - 2026-10-21
12
+
13
+ ### Changed
14
+
15
+ - Requires sqrl-core and sqrl-rack 0.1.2. sqrl-core fixes binary S4 identity files whose
16
+ last byte is whitespace being truncated on parse and brings the server into line with
17
+ Steve Gibson's final specification (`suk=` on every command, the post-update TIF after a
18
+ re-key, `url=` on a CPS `disable`, and more). No code changes in this gem.
19
+
20
+ ### Security
21
+
22
+ - Through sqrl-rack 0.1.2, a login the SQRL client completed in CPS mode can no longer be
23
+ completed through the browser's status poll; only the browser holding the one-time
24
+ `url=` token is signed in, as the specification requires.
25
+
26
+ ## [0.1.1] - 2026-10-20
27
+
28
+ ### Changed
29
+
30
+ - Requires sqrl-core 0.1.1, which fixes the `NoMethodError` on Ruby 3.1 and 3.2. No other
31
+ changes.
32
+
33
+ ## [0.1.0] - 2026-10-20
9
34
 
10
35
  First release.
11
36
 
37
+ ### Added
38
+
12
39
  - Isolated engine serving the SQRL endpoint, status poll, CPS/poll callback, login page,
13
40
  script, refresh endpoint and identity-management pages.
14
41
  - ActiveRecord stores (`sqrl_identities`, `sqrl_nuts`, `sqrl_pending_logins`) with atomic
@@ -21,3 +48,8 @@ First release.
21
48
  per-IP rate limiting; `ask` with deny button; `allowed_hosts`, hooks, `prune` task.
22
49
  - `insecure_http` testing mode; `poll_requires_ip_match` off by default.
23
50
  - Requires Ruby 3.2+ and Rails 7.1, 7.2, 8.0 or 8.1.
51
+
52
+ [Unreleased]: https://github.com/danielpclark/sqrl-ruby/compare/v0.1.2...HEAD
53
+ [0.1.2]: https://github.com/danielpclark/sqrl-ruby/compare/v0.1.1...v0.1.2
54
+ [0.1.1]: https://github.com/danielpclark/sqrl-ruby/compare/v0.1.0...v0.1.1
55
+ [0.1.0]: https://github.com/danielpclark/sqrl-ruby/releases/tag/v0.1.0
data/README.md CHANGED
@@ -27,6 +27,8 @@ The generator:
27
27
  - mounts the engine: `mount SQRL::Rails::Engine, at: "/sqrl", as: :sqrl`;
28
28
  - writes `config/initializers/sqrl.rb` (every option documented inline);
29
29
  - adds `has_many :sqrl_identities` to `app/models/user.rb`;
30
+ - includes `SQRL::Rails::PasswordPolicy::Sessions` / `::Passwords` in the generated
31
+ `SessionsController` and `PasswordsController` when they exist (see "Account policies");
30
32
  - appends `<%= sqrl_login_block %>` to `app/views/sessions/new.html.erb` when that view
31
33
  exists (the Rails 8 generated login form).
32
34
 
@@ -92,7 +94,8 @@ is an `SQRL::Server::Identity` (`idk_b64`, `user_ref`, `disabled?`, …).
92
94
  ## Helpers
93
95
 
94
96
  In views: `sqrl_login_block(return_to:, cancel_url:, link_user:, script:, **login_block_options)`,
95
- `sqrl_login_url`, `sqrl_qr_svg`, `sqrl_script_tag`, `sqrl_status_path`, `sqrl_script_path`.
97
+ `sqrl_login_url`, `sqrl_qr_svg`, `sqrl_script_tag`, `sqrl_status_path`, `sqrl_script_path`,
98
+ `sqrl_refresh_path`, `sqrl_identities_path`.
96
99
  In controllers: `current_sqrl_identity`, `sqrl_authenticated?`, `sqrl_logout!`
97
100
  (call it from your sign-out action), `sqrl_endpoint`.
98
101
 
metadata CHANGED
@@ -1,7 +1,7 @@
1
1
  --- !ruby/object:Gem::Specification
2
2
  name: sqrl-rails
3
3
  version: !ruby/object:Gem::Version
4
- version: 0.1.1
4
+ version: 0.1.2
5
5
  platform: ruby
6
6
  authors:
7
7
  - Daniel P. Clark
@@ -35,28 +35,28 @@ dependencies:
35
35
  requirements:
36
36
  - - "~>"
37
37
  - !ruby/object:Gem::Version
38
- version: 0.1.1
38
+ version: 0.1.2
39
39
  type: :runtime
40
40
  prerelease: false
41
41
  version_requirements: !ruby/object:Gem::Requirement
42
42
  requirements:
43
43
  - - "~>"
44
44
  - !ruby/object:Gem::Version
45
- version: 0.1.1
45
+ version: 0.1.2
46
46
  - !ruby/object:Gem::Dependency
47
47
  name: sqrl-rack
48
48
  requirement: !ruby/object:Gem::Requirement
49
49
  requirements:
50
50
  - - "~>"
51
51
  - !ruby/object:Gem::Version
52
- version: 0.1.1
52
+ version: 0.1.2
53
53
  type: :runtime
54
54
  prerelease: false
55
55
  version_requirements: !ruby/object:Gem::Requirement
56
56
  requirements:
57
57
  - - "~>"
58
58
  - !ruby/object:Gem::Version
59
- version: 0.1.1
59
+ version: 0.1.2
60
60
  email:
61
61
  - 6ftdan@gmail.com
62
62
  executables: []