standard_id 0.2.1 → 0.2.2

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: acbf22ea3a73945fedbcc5d26da84954f4b4e04de00cf2bac51eb59374231a09
-  data.tar.gz: 063d9c263aa7ca6910602a1a570676ee96348a88b1265a2c2ac5d8c11dacf076
+  metadata.gz: ff3da0872b1957015180ea523a6ece07c7e5182415627edefd1b7cb204123555
+  data.tar.gz: 1b18e14597e237f2a6082df2210174f97b05f4febd02a729cad2509ffaf9dd60
 SHA512:
-  metadata.gz: 8a3e58978c5525de51c16ad46e563567a93790a7ad5a99aeea1d43d3068c01df9120ccc5d0a5694a5e3531fe916906bcc811f2a2dcbce25ec42228ca7ddfa4e5
-  data.tar.gz: 2f3d4beee53b0fa961ed8648eb433a65e751f63c8f20fa10153e10c16bfce50440a5714bbd9b8a8cc4fefe98ff806804c6f49e6e3a79362b10e9780a55d49fce
+  metadata.gz: 258469a8242bd871aef309f677077daca3c5e36cb6c62c748d698dc420b5997738adefe404da90928e2e98514d775f2fc1caf7f71ee1f40d3fa1228ac5346dc8
+  data.tar.gz: 41e96e5bf1aec93e33f36f3a97b81ba26609d2c854e3cc4887186c6cd4717dd8fb2fe73eaf0ac57c03a0097fc47381494bec33497cff8880e3a55ba822fc75ac

data/README.md

@@ -101,6 +101,26 @@ class ApiController < ActionController::API
 end
 ```
 
+### 5. Action Cable Authentication
+
+- Include in Your Connection Class
+```ruby
+module ApplicationCable
+  class Connection < ActionCable::Connection::Base
+    include StandardId::CableAuthentication
+  end
+end
+```
+
+- Access Current Account in Channels
+```ruby
+class ChatChannel < ApplicationCable::Channel
+  def subscribed
+    stream_for current_account
+  end
+end
+```
+
 ## Configuration
 
 ### Basic Configuration

data/app/channels/concerns/standard_id/cable_authentication.rb

@@ -0,0 +1,33 @@
+module StandardId
+  module CableAuthentication
+    extend ActiveSupport::Concern
+
+    included do
+      identified_by :current_account
+    end
+
+    def connect
+      self.current_account = find_verified_account
+    end
+
+    private
+
+    def find_verified_account
+      if verified_account = find_account_from_session_token
+        verified_account
+      else
+        reject_unauthorized_connection
+      end
+    end
+
+    def find_account_from_session_token
+      session_token = cookies.encrypted[:session_token] || request.session[:session_token]
+      return nil if session_token.blank?
+
+      browser_session = StandardId::BrowserSession.eager_load(:account).by_token(session_token).first
+      return nil unless browser_session&.active?
+
+      browser_session.account
+    end
+  end
+end

data/lib/standard_id/version.rb

@@ -1,3 +1,3 @@
 module StandardId
-  VERSION = "0.2.1"
+  VERSION = "0.2.2"
 end

data/lib/standard_id/web/session_manager.rb

@@ -21,7 +21,10 @@ module StandardId
       def sign_in_account(account)
         emit_session_creating(account, "browser")
         token_manager.create_browser_session(account).tap do |browser_session|
+          # Store in both session and encrypted cookie for backward compatibility
+          # Action Cable will use the encrypted cookie
           session[:session_token] = browser_session.token
+          cookies.encrypted[:session_token] = browser_session.token
           Current.session = browser_session
           emit_session_created(browser_session, account, "browser")
         end
@@ -39,6 +42,7 @@ module StandardId
       def clear_session!
         # TODO: make token key names configurable
         session.delete(:session_token)
+        cookies.encrypted[:session_token] = nil
         cookies.delete(:remember_token)
 
         Current.session = nil
@@ -65,7 +69,9 @@ module StandardId
       end
 
       def load_session_from_session_token
-        StandardId::BrowserSession.eager_load(:account).by_token(session[:session_token]).first
+        # Try encrypted cookie first (for Action Cable), then fall back to session (for backward compatibility)
+        session_token = cookies.encrypted[:session_token] || session[:session_token]
+        StandardId::BrowserSession.eager_load(:account).by_token(session_token).first
       end
 
       def load_session_from_remember_token
@@ -73,7 +79,9 @@ module StandardId
         return if password_credential.blank?
 
         token_manager.create_browser_session(password_credential.account, remember_me: true).tap do |browser_session|
+          # Store in both session and encrypted cookie for backward compatibility
           session[:session_token] = browser_session.token
+          cookies.encrypted[:session_token] = browser_session.token
           cookies[:remember_token] = token_manager.create_remember_token(password_credential)
         end
       end

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: standard_id
 version: !ruby/object:Gem::Version
-  version: 0.2.1
+  version: 0.2.2
 platform: ruby
 authors:
 - Jaryl Sim
@@ -64,6 +64,7 @@ files:
 - README.md
 - Rakefile
 - app/assets/stylesheets/standard_id/application.css
+- app/channels/concerns/standard_id/cable_authentication.rb
 - app/controllers/concerns/standard_id/api_authentication.rb
 - app/controllers/concerns/standard_id/inertia_rendering.rb
 - app/controllers/concerns/standard_id/inertia_support.rb