standard_id 0.55.0 → 0.55.1

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 1b6e3c72dcbb1a915c4927a4f0607b13d6f66c791240e20825698b490b0f13a1
-  data.tar.gz: 9606c37fbf368616167772d7a32fdadc7b4abb16758c9041b7041694b697ffb4
+  metadata.gz: 79b115262b448690a7d1429716da8b36e6422be79e9406868684a3744e0cf3e8
+  data.tar.gz: a43dc5ed9ea2ff5bd5317809f79c9326d1df14a2115f63e631090a7fe15042cd
 SHA512:
-  metadata.gz: b31012a34cc04b983d754b506f13d227a046dd5a33a53774b071d2822e4d51aba4745d685a25f0d84c7c55b7c37e79378351a4efbc556b91831368095282d7d4
-  data.tar.gz: e0ad4c58dfeb705e5824da097c12b6a00b6d60450f0c248a3f0a1874fe912f5549ecebfdbd1dd199aa6810af6668fea7f8562c6ee7dad0b076f29635e36ffd44
+  metadata.gz: a184a92b4a8f865db6e4fd4f05cbaa9e44d1156407ed61d30530ee6379269cc9cc3da0d9f64b800c7fc44461abc28d2df44ebe2d4562a6dbde96d0f69a106ec7
+  data.tar.gz: abc3fe5d187c94408406cfeba9e27a699f5542b30a1979c268c7b5fe7d2986ea29b56dcb6d4b8399b8e0df3a7ed56271951a49eec9a25076d5cd568a1a30b9c5

data/CHANGELOG.md

@@ -7,6 +7,19 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 
 ## [Unreleased]
 
+## [0.55.1] - 2026-10-23
+
+### Fixed
+
+- **`credential.password.reset_completed` from `POST /auth/password/reset` carries a
+  loaded credential again.** The reset's row lock dropped the preloaded
+  `credential → identifier → account`, so under strict loading a subscriber that walked
+  `event[:credential].credential.identifier` raised, silently, since the publish is
+  rescued. The chain is now preloaded again before the event is published.
+- **A `reset_completed` subscriber that raises is now reported via `Rails.error`**
+  (`handled: true, source: "standard_id"`) as well as logged, on both the API reset and
+  the web reset form, so it reaches the host's error tracker. The reset still succeeds.
+
 ## [0.55.0] - 2026-10-22
 
 ### Added

data/app/forms/standard_id/web/reset_password_confirm_form.rb

@@ -46,7 +46,7 @@ module StandardId
       private
 
       # The reset has already happened, so a failing subscriber must not turn
-      # it into an error page; log and carry on, as Session does for
+      # it into an error page; report and carry on, as Session does for
       # SESSION_REVOKED.
       def publish_reset_completed(account)
         StandardId::Events.publish(
@@ -55,6 +55,7 @@ module StandardId
           account: account
         )
       rescue StandardError => e
+        Rails.error.report(e, handled: true, source: "standard_id")
         logger = StandardId.logger
         return unless logger.respond_to?(:error)
 

data/lib/standard_id/email_password/password_reset.rb

@@ -95,11 +95,14 @@ module StandardId
 
         private
 
+        CREDENTIAL_ASSOCIATIONS = { credential: { identifier: :account } }.freeze
+        private_constant :CREDENTIAL_ASSOCIATIONS
+
         def find_credential(token)
           return nil if token.blank?
 
           StandardId::PasswordCredential
-            .includes(credential: { identifier: :account })
+            .includes(CREDENTIAL_ASSOCIATIONS)
             .find_by_token_for(:password_reset, token.to_s)
         end
 
@@ -126,14 +129,23 @@ module StandardId
         end
 
         # The reset has already happened, so a failing subscriber must not turn
-        # it into an error; log and carry on, as Web::ResetPasswordConfirmForm does.
+        # it into an error; report and carry on, as Web::ResetPasswordConfirmForm
+        # does.
+        #
+        # lock! reloaded the credential, dropping what find_credential
+        # preloaded, so load it again: under strict loading a subscriber that
+        # walks credential.identifier would otherwise raise.
         def publish_reset_completed(account, password_credential)
+          ActiveRecord::Associations::Preloader.new(
+            records: [password_credential], associations: CREDENTIAL_ASSOCIATIONS
+          ).call
           StandardId::Events.publish(
             StandardId::Events::CREDENTIAL_PASSWORD_RESET_COMPLETED,
             credential: password_credential,
             account: account
           )
         rescue StandardError => e
+          Rails.error.report(e, handled: true, source: "standard_id")
           logger = StandardId.logger
           return unless logger.respond_to?(:error)
 

data/lib/standard_id/version.rb

@@ -1,3 +1,3 @@
 module StandardId
-  VERSION = "0.55.0"
+  VERSION = "0.55.1"
 end

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: standard_id
 version: !ruby/object:Gem::Version
-  version: 0.55.0
+  version: 0.55.1
 platform: ruby
 authors:
 - Jaryl Sim