standard_id 0.1.0 → 0.1.2

data/lib/standard_id/oauth/passwordless_otp_flow.rb

@@ -7,12 +7,12 @@ module StandardId
       def authenticate!
         validate_client_secret!(params[:client_id], params[:client_secret]) if params[:client_secret].present?
 
-        raise StandardId::InvalidGrantError, "Invalid or expired verification code" if passwordless_challenge.blank?
+        raise StandardId::InvalidGrantError, "Invalid or expired verification code" if code_challenge.blank?
         raise StandardId::InvalidGrantError, "Unable to authenticate user" if account.blank?
 
         validate_requested_scope!
 
-        passwordless_challenge.use!
+        code_challenge.use!
       end
 
       private
@@ -41,14 +41,11 @@ module StandardId
         true
       end
 
-      def token_expiry
-        1.hour
-      end
-
-      def passwordless_challenge
-        @passwordless_challenge ||= StandardId::PasswordlessChallenge.active.find_by(
-          connection_type: params[:connection],
-          username: params[:username],
+      def code_challenge
+        @code_challenge ||= StandardId::CodeChallenge.active.find_by(
+          realm: "authentication",
+          channel: params[:connection],
+          target: params[:username],
           code: params[:otp]
         )
       end

data/lib/standard_id/oauth/token_grant_flow.rb

@@ -62,7 +62,7 @@ module StandardId
       end
 
       def token_expiry
-        1.hour
+        TokenLifetimeResolver.access_token_for(token_lifetime_key)
       end
 
       def supports_refresh_token?
@@ -80,7 +80,11 @@ module StandardId
       end
 
       def refresh_token_expiry
-        30.days
+        TokenLifetimeResolver.refresh_token_lifetime
+      end
+
+      def token_lifetime_key
+        grant_type&.to_sym
       end
 
       def subject_id

data/lib/standard_id/oauth/token_lifetime_resolver.rb

@@ -0,0 +1,50 @@
+module StandardId
+  module Oauth
+    class TokenLifetimeResolver
+      class << self
+        DEFAULT_ACCESS_TOKEN_LIFETIME = 1.hour.to_i
+        DEFAULT_REFRESH_TOKEN_LIFETIME = 30.days.to_i
+
+        def access_token_for(flow_key)
+          configured = lookup_token_lifetime(flow_key)
+          positive_seconds(configured, default_access_token_lifetime)
+        end
+
+        def refresh_token_lifetime
+          positive_seconds(oauth_config.refresh_token_lifetime, DEFAULT_REFRESH_TOKEN_LIFETIME)
+        end
+
+        private
+
+        def default_access_token_lifetime
+          positive_seconds(oauth_config.default_token_lifetime, DEFAULT_ACCESS_TOKEN_LIFETIME)
+        end
+
+        def lookup_token_lifetime(flow_key)
+          config = oauth_config
+          return nil unless config.respond_to?(:token_lifetimes)
+
+          lifetimes = config.token_lifetimes || {}
+          lifetimes[flow_key.to_sym] || lifetimes[flow_key.to_s] if flow_key
+        end
+
+        def positive_seconds(value, fallback_value)
+          normalized_value = case value
+          when ActiveSupport::Duration
+            value.to_i
+          when Numeric, String
+            value.to_i
+          else
+            0
+          end
+
+          (normalized_value.positive? ? normalized_value : fallback_value).seconds
+        end
+
+        def oauth_config
+          StandardId.config.oauth
+        end
+      end
+    end
+  end
+end

data/lib/standard_id/passwordless/base_strategy.rb

@@ -24,14 +24,18 @@ module StandardId
       protected
 
       def create_challenge!(username)
-        StandardId::PasswordlessChallenge.create!(
-          connection_type: connection_type,
-          username: username,
-          code: generate_otp_code,
+        code = generate_otp_code
+
+        cc = StandardId::CodeChallenge.create!(
+          realm: "authentication",
+          channel: connection_type,
+          target: username,
+          code: code,
           expires_at: 10.minutes.from_now,
           ip_address: request.remote_ip,
           user_agent: request.user_agent
         )
+        cc
       end
 
       def generate_otp_code

data/lib/standard_id/version.rb

@@ -1,3 +1,3 @@
 module StandardId
-  VERSION = "0.1.0"
+  VERSION = "0.1.2"
 end

data/lib/standard_id.rb

@@ -2,7 +2,7 @@ require "standard_id/version"
 require "standard_id/engine"
 require "standard_id/web_engine"
 require "standard_id/api_engine"
-require "standard_id/config"
+require "standard_id/config/schema"
 require "standard_id/errors"
 require "standard_id/jwt_service"
 require "standard_id/web/session_manager"
@@ -12,6 +12,7 @@ require "standard_id/api/session_manager"
 require "standard_id/api/token_manager"
 require "standard_id/api/authentication_guard"
 require "standard_id/oauth/base_request_flow"
+require "standard_id/oauth/token_lifetime_resolver"
 require "standard_id/oauth/token_grant_flow"
 require "standard_id/oauth/client_credentials_flow"
 require "standard_id/oauth/authorization_code_flow"
@@ -30,12 +31,16 @@ require "standard_id/passwordless/sms_strategy"
 
 module StandardId
   class << self
-    def configure
-      yield config
+    def configure(&block)
+      StandardConfig.configure(&block)
+    end
+
+    def register(scope_name, resolver_proc)
+      StandardConfig.config.register(scope_name, resolver_proc)
     end
 
     def config
-      @config ||= StandardId::Config.new
+      StandardConfig.config
     end
 
     def cache_store
@@ -45,5 +50,9 @@ module StandardId
     def logger
       @logger ||= config.logger || Rails.logger
     end
+
+    def account_class
+      config.account_class_name.constantize
+    end
   end
 end

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: standard_id
 version: !ruby/object:Gem::Version
-  version: 0.1.0
+  version: 0.1.2
 platform: ruby
 authors:
 - Jaryl Sim
@@ -83,6 +83,12 @@ files:
 - app/controllers/standard_id/web/reset_password/start_controller.rb
 - app/controllers/standard_id/web/sessions_controller.rb
 - app/controllers/standard_id/web/signup_controller.rb
+- app/controllers/standard_id/web/verify_email/base_controller.rb
+- app/controllers/standard_id/web/verify_email/confirm_controller.rb
+- app/controllers/standard_id/web/verify_email/start_controller.rb
+- app/controllers/standard_id/web/verify_phone/base_controller.rb
+- app/controllers/standard_id/web/verify_phone/confirm_controller.rb
+- app/controllers/standard_id/web/verify_phone/start_controller.rb
 - app/forms/standard_id/web/reset_password_confirm_form.rb
 - app/forms/standard_id/web/reset_password_start_form.rb
 - app/forms/standard_id/web/signup_form.rb
@@ -96,12 +102,12 @@ files:
 - app/models/standard_id/browser_session.rb
 - app/models/standard_id/client_application.rb
 - app/models/standard_id/client_secret_credential.rb
+- app/models/standard_id/code_challenge.rb
 - app/models/standard_id/credential.rb
 - app/models/standard_id/device_session.rb
 - app/models/standard_id/email_identifier.rb
 - app/models/standard_id/identifier.rb
 - app/models/standard_id/password_credential.rb
-- app/models/standard_id/passwordless_challenge.rb
 - app/models/standard_id/phone_number_identifier.rb
 - app/models/standard_id/service_session.rb
 - app/models/standard_id/session.rb
@@ -124,15 +130,20 @@ files:
 - db/migrate/20250831154635_create_standard_id_sessions.rb
 - db/migrate/20250901134520_create_standard_id_client_secret_credentials.rb
 - db/migrate/20250903063000_create_standard_id_authorization_codes.rb
-- db/migrate/20250903135906_create_standard_id_passwordless_challenges.rb
+- db/migrate/20250907090000_create_standard_id_code_challenges.rb
 - lib/generators/standard_id/install/install_generator.rb
 - lib/generators/standard_id/install/templates/standard_id.rb
+- lib/standard_config.rb
+- lib/standard_config/config.rb
+- lib/standard_config/config_provider.rb
+- lib/standard_config/manager.rb
+- lib/standard_config/schema.rb
 - lib/standard_id.rb
 - lib/standard_id/api/authentication_guard.rb
 - lib/standard_id/api/session_manager.rb
 - lib/standard_id/api/token_manager.rb
 - lib/standard_id/api_engine.rb
-- lib/standard_id/config.rb
+- lib/standard_id/config/schema.rb
 - lib/standard_id/engine.rb
 - lib/standard_id/errors.rb
 - lib/standard_id/jwt_service.rb
@@ -149,6 +160,7 @@ files:
 - lib/standard_id/oauth/subflows/social_login_grant.rb
 - lib/standard_id/oauth/subflows/traditional_code_grant.rb
 - lib/standard_id/oauth/token_grant_flow.rb
+- lib/standard_id/oauth/token_lifetime_resolver.rb
 - lib/standard_id/passwordless/base_strategy.rb
 - lib/standard_id/passwordless/email_strategy.rb
 - lib/standard_id/passwordless/sms_strategy.rb

data/db/migrate/20250903135906_create_standard_id_passwordless_challenges.rb

@@ -1,22 +0,0 @@
-class CreateStandardIdPasswordlessChallenges < ActiveRecord::Migration[8.0]
-  def change
-    create_table :standard_id_passwordless_challenges do |t|
-      t.string :connection_type, null: false
-
-      t.string :username, null: false
-      t.string :code, null: false
-
-      t.datetime :expires_at, null: false
-      t.datetime :used_at
-
-      t.string :ip_address
-      t.text :user_agent
-
-      t.timestamps
-    end
-
-    add_index :standard_id_passwordless_challenges, [:connection_type, :username, :code], name: "index_passwordless_challenges_on_lookup"
-    add_index :standard_id_passwordless_challenges, :expires_at
-    add_index :standard_id_passwordless_challenges, :used_at
-  end
-end