strongmind-auth 1.1.84 → 1.1.86

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: '0680e50f86a18727bbcd427f91f8444e159c0e386a482ad078b85d2ed6980eb9'
-  data.tar.gz: 0174f01ef4647c60c9548d8285ef86c12e2c1d0d97d7a585eb43e508b959e148
+  metadata.gz: 0726b64bdd92646f5321f5f6050ea0d097752e7407bb4a1b87b3c1352703c0a8
+  data.tar.gz: ece8fc306bfcaf1d89a8cbdc02271a99c47bb85851d65d0883e2d70cf99187d6
 SHA512:
-  metadata.gz: 76d8f814aed0c739396f651ce9bf9b3087cf556911eb2d10cea24b87deb2c686b3245c492ac2154eb4749406481b15cf8817da67137e3197358416cb7dfe3081
-  data.tar.gz: e8e564fbe9f96f4ef4d9e78bb79069eaca1b329f9d33040e159d5a7b8b0e348b277597c9c95fcf840ec93d397df7931cae8508ee46d9ea85b1021d659e2f21d9
+  metadata.gz: '02497ab7508a71d2f538825d09a6e94439c75030d3df1a92a42083f3bc8c8bc5b9f94e2d26384de3c8ed5d6f84ab23c99163c4081d7dcb557d66bf1840a0b658'
+  data.tar.gz: 2e4fa4e9de34ca86ca779c38968136f46ce81dcc07b1ab7620cb0814cfb264bee2a04acbf7756247b23b42d8a7aab660d6a45b257beb7a4efb282885c3038819

data/README.md

@@ -6,6 +6,18 @@ Ruby gem for authentication in a rails app
 
 1. Use [Repository Dashboard](https://repository-dashboard.strongmind.com/repositories/new) to create a new repository
    with the rails-template.
+   1. If you **did not** use the rails-template from Repository Dashboard, you will need to add the following to your Gemfile:
+      ```ruby
+      gem "strongmind-platform-sdk"
+      gem 'font-awesome-rails'
+      gem 'devise'
+      gem 'omniauth'
+      gem 'omniauth_openid_connect'
+      gem 'omniauth-rails_csrf_protection'
+      gem 'dotenv-rails'
+      gem 'sentry-rails'
+      ```
+   1. If you want to use the common navbar you will also need to go to [section 5 and 6 in the existing application doc](https://github.com/StrongMind/rails-auth/blob/main/docs/adding-to-an-existing-app.md) and follow the instructions there after running the generator in step 2.
 1. Navigate to the repo folder in a terminal and execute `rails g strongmind:install`
 1. Move app root to authenticated root in routes. Should look like this:
     ```ruby
@@ -13,6 +25,7 @@ Ruby gem for authentication in a rails app
       root to: 'home#index' # or whatever makes sense for your app
     end
     ```
-1. Create a new client in identity server and `IDENTITY_CLIENT_ID` and `IDENTITY_CLIENT_SECRET` values to .env file.
+1. Create a [new client in stage identity server](https://devlogin.strongmind.com/Clients/Create) and `IDENTITY_CLIENT_ID` and `IDENTITY_CLIENT_SECRET` values to .env file.
+1. Create a [new client in prod identity server](https://login.strongmind.com/Clients/Create) and `IDENTITY_CLIENT_ID` and `IDENTITY_CLIENT_SECRET` values to .env file.
 1. Execute `rails dev:cache` to turn on caching in development.
 1. Execute `bin/dev`

data/app/controllers/concerns/strong_mind_nav.rb

@@ -6,7 +6,8 @@ module StrongMindNav
 
   def fetch_common_nav
     begin
-      navbar = Strongmind::CommonNavFetcher.new(current_user, request).retrieve(menu_items)
+      authenticity_token = form_authenticity_token
+      navbar = Strongmind::CommonNavFetcher.new(current_user, request).retrieve(menu_items, authenticity_token)
 
       @top_navbar_html = navbar[:top_navbar_html]
       @bottom_navbar_html = navbar[:bottom_navbar_html]

data/lib/strongmind/auth/version.rb

@@ -1,5 +1,5 @@
 module Strongmind
   module Auth
-    VERSION = "1.1.84"
+    VERSION = "1.1.86"
   end
 end

data/lib/strongmind/common_nav_fetcher.rb

@@ -27,8 +27,8 @@ module Strongmind
       )
     end
 
-    def retrieve(menu_items)
-      response = fetch_navbar_data(build_nav_items(menu_items))
+    def retrieve(menu_items, authenticity_token)
+      response = fetch_navbar_data(build_nav_items(menu_items), authenticity_token)
       parse_navbar(response)
     end
 
@@ -47,11 +47,12 @@ module Strongmind
       path_to_compare.include?(sanitized_path) || path_to_compare.include?(sanitized_path.pluralize)
     end
 
-    def fetch_navbar_data(nav_items)
+    def fetch_navbar_data(nav_items, authenticity_token)
       session = refresh_session
       access_token = session[:access_token]
 
-      connection.post(navbar_endpoint, nav_items.to_json, 'Authorization' => "Bearer #{access_token}")
+      payload = nav_items.merge(authenticity_token: ).to_json
+      connection.post(navbar_endpoint, payload, 'Authorization' => "Bearer #{access_token}")
     end
 
     def connection

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: strongmind-auth
 version: !ruby/object:Gem::Version
-  version: 1.1.84
+  version: 1.1.86
 platform: ruby
 authors:
 - Team Belding
 autorequire: 
 bindir: bin
 cert_chain: []
-date: 2024-04-18 00:00:00.000000000 Z
+date: 2024-05-06 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: rails