standard_id 0.26.1 → 0.26.2
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
checksums.yaml
CHANGED
|
@@ -1,7 +1,7 @@
|
|
|
1
1
|
---
|
|
2
2
|
SHA256:
|
|
3
|
-
metadata.gz:
|
|
4
|
-
data.tar.gz:
|
|
3
|
+
metadata.gz: dde5f52a936c2e51f795216d21fa5bf700f897f55ef5cd843ac15cb42f7ddf0c
|
|
4
|
+
data.tar.gz: 106311d1a7228cf3686669cb5588b9db9b0e2b17fdb53247e715275bfd5db7ec
|
|
5
5
|
SHA512:
|
|
6
|
-
metadata.gz:
|
|
7
|
-
data.tar.gz:
|
|
6
|
+
metadata.gz: dcdc4eb6ac8a332ec8ffc9fcb56baee4b3205fb23133192d9c4500497f92f9403212b429e0616dafb8accd62491ee4e09621928e97244ff95c7098f33cfdf144
|
|
7
|
+
data.tar.gz: 9f4ea2218791b46ef44d6866de2bf85c3d3dfece82c64141a1f70895c1dc976e82c3c61dae0bbade82c2279d72466a10fe3da7bb212a70f6c90e421e0e56d556
|
|
@@ -0,0 +1,18 @@
|
|
|
1
|
+
module StandardId
|
|
2
|
+
# Mailer delivery job that suppresses ActiveJob argument logging.
|
|
3
|
+
#
|
|
4
|
+
# The gem's mailers carry sensitive data in their params — the passwordless
|
|
5
|
+
# OTP code (PasswordlessMailer) and the password-reset URL/token
|
|
6
|
+
# (PasswordResetMailer). `deliver_later` serializes those params as the
|
|
7
|
+
# delivery job's arguments, and ActiveJob's log subscriber prints job
|
|
8
|
+
# arguments in plaintext on enqueue/perform — so the OTP/token would land in
|
|
9
|
+
# the application logs (readable by anyone with log access).
|
|
10
|
+
#
|
|
11
|
+
# Setting `log_arguments = false` keeps the arguments out of the logs without
|
|
12
|
+
# changing delivery behaviour. (The params still travel inside the serialized
|
|
13
|
+
# job payload until the job runs — a far higher access bar than logs, and
|
|
14
|
+
# short-lived — but they never reach the log stream.)
|
|
15
|
+
class SecureMailDeliveryJob < ActionMailer::MailDeliveryJob
|
|
16
|
+
self.log_arguments = false
|
|
17
|
+
end
|
|
18
|
+
end
|
|
@@ -1,5 +1,10 @@
|
|
|
1
1
|
module StandardId
|
|
2
2
|
class ApplicationMailer < ActionMailer::Base
|
|
3
|
+
# Use a delivery job that doesn't log its arguments — the gem's mailers pass
|
|
4
|
+
# sensitive params (OTP code, password-reset token) that ActiveJob would
|
|
5
|
+
# otherwise print in plaintext. Applies to all StandardId mailers.
|
|
6
|
+
self.delivery_job = StandardId::SecureMailDeliveryJob
|
|
7
|
+
|
|
3
8
|
default from: "from@example.com"
|
|
4
9
|
layout "mailer"
|
|
5
10
|
end
|
data/lib/standard_id/version.rb
CHANGED
metadata
CHANGED
|
@@ -1,7 +1,7 @@
|
|
|
1
1
|
--- !ruby/object:Gem::Specification
|
|
2
2
|
name: standard_id
|
|
3
3
|
version: !ruby/object:Gem::Version
|
|
4
|
-
version: 0.26.
|
|
4
|
+
version: 0.26.2
|
|
5
5
|
platform: ruby
|
|
6
6
|
authors:
|
|
7
7
|
- Jaryl Sim
|
|
@@ -169,6 +169,7 @@ files:
|
|
|
169
169
|
- app/jobs/standard_id/cleanup_expired_refresh_tokens_job.rb
|
|
170
170
|
- app/jobs/standard_id/cleanup_expired_sessions_job.rb
|
|
171
171
|
- app/jobs/standard_id/password_reset_delivery_job.rb
|
|
172
|
+
- app/jobs/standard_id/secure_mail_delivery_job.rb
|
|
172
173
|
- app/mailers/standard_id/application_mailer.rb
|
|
173
174
|
- app/mailers/standard_id/password_reset_mailer.rb
|
|
174
175
|
- app/mailers/standard_id/passwordless_mailer.rb
|