tachiban 0.5.0 → 0.6.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
-SHA1:
-  metadata.gz: 32f1f2b6604c7cda5393b06aad44f4ea84397a0d
-  data.tar.gz: 6e6dbbb843fae38ed80dc10034071da0b669d3ef
+SHA256:
+  metadata.gz: dbed304e57a26c26e3ea5cbf31fba4695874e4dfd0fe970cb594d2f9813fd40a
+  data.tar.gz: 339c055cd0b4332209105978b80d166442afe66bdfe80010060f993a669a182c
 SHA512:
-  metadata.gz: ee08ab9357babdfef72ad367eb31f2815a1dbfffed18d2c0e526b0d9b411edee1bfc1124d5cd02052677b08cd966a4e114ac55365fa9fd2d30440e72ed0edc7b
-  data.tar.gz: 98e960466e21300d6973b405d493ecba1cb691a58e85296775468390a0c9acebe678cd8ce31665071342c025b5ecf731fbcf1b839f75b9a6283f009a427c2230
+  metadata.gz: b166459f8e81b4a8c4fb4c36748248375827039417f3c6956effa468e6d63705269f8e4398549f63ca957e4c594234a949ba435689ebcc0dd729022f42b92c37
+  data.tar.gz: d5e86dbd7e51d2529605181f498c11e0cee731782ce021e8547d4717fdd642e4fca45eafa72f8a8e4d9a1fe1eef149671fd66beea1a85f3456ac5f15937bc327

data/README.md

@@ -44,7 +44,7 @@ end
 
 ## Usage
 
-#### Prerequisites
+### Prerequisites
 Prior to logging in or authenticating the user, retrieve the entity from the
 database and assign it to the instance variable of `@user`.
 
@@ -58,9 +58,9 @@ The **password_reset_sent_at** can be used to check the reset link validity.
 The only prerequisite for the authorization is the attribute of **role** for the user entity.
 
 
-#### Usage
+### Usage
 
-###### Signup
+#### Signup
 The entity for which authentication is used must have the
 attribute `hashed_pass` to hold the generated hashed password.
 
@@ -81,7 +81,7 @@ def call(params)
 end
 ```
 
-###### Login
+#### Login
 To authenticate a user use the `authenticated?(input_password)` method and log
 them in with the `login` method. Authentication is successful if the user exists and passwords match.
 
@@ -105,12 +105,12 @@ login("You have been successfully logged in.") if authenticated?(password)
 ```
 
 
-###### Authentication
+#### Authentication
 To check whether the user is logged in use the `check_for_logged_in_user` method.
 If the user is not logged in the `logout` method takes over.
 
 
-###### Session handling
+#### Session handling
 Tachiban handles session expiration by checking if a session has
 expired and then restarts the session start time if the session
 is still valid or proceeds with the following if the session
@@ -157,7 +157,7 @@ end
 ```
 
 
-###### Password reset
+#### Password reset
 The password reset feature provides a few simple methods to generate a
 token, email subject and body. It is also possible to specify and
 check the validity of the password reset url.
@@ -189,7 +189,7 @@ password_reset_url_valid?(link_validity)
 ```
 
 
-###### Authorization
+#### Authorization
 Authorization support was setup as inspired by [this blog post](http://billpatrianakos.me/blog/2013/10/22/authorize-users-based-on-roles-and-permissions-without-a-gem/).
 
 Authorization features support the generation of policy files for each controller where authorized roles are specified for each action.
@@ -219,6 +219,19 @@ authorized?(controller, role, action)
 - Add generators for entities with required attributes.
 
 
+### Changelog
+
+#### 0.6.0
+
+Method: `Tachiban::login`
+<br>Change:
+`session[:current_user]` is not set as the user object, but as the user object id.
+***
+Method: `Tachiban::logout`
+<br>Change:
+Added `session.clear` to remove any other values upon logout.
+
+
 ## Development
 
 After checking out the repo, run `bin/setup` to install dependencies. Then, run `rake test` to run the tests. You can also run `bin/console` for an interactive prompt that will allow you to experiment.

data/lib/tachiban.rb

@@ -34,7 +34,7 @@ private
 
   # The login method can be used in combination with the authenticated? method to
   # log the user in if the authenticated? method returns true. The user is
-  # logged in by setting the user object as the session[:current_user].
+  # logged in by setting the user object id as the session[:current_user].
   # After the user is logged in the session start time is defined, which is then used
   # by the session_expired? method to determine whether the session has
   # expired or not.
@@ -43,7 +43,7 @@ private
   # login if authenticated?(input_pass)
 
     def login(flash_message)
-      session[:current_user] = @user
+      session[:current_user] = @user.id
       session[:session_start_time] = Time.now
       flash[:success_notice] = flash_message
     end
@@ -55,6 +55,7 @@ private
 
     def logout
       session[:current_user] = nil
+      session.clear
       @redirect_url ||= routes.root_path
       redirect_to @redirect_url
     end

data/lib/tachiban/version.rb

@@ -1,3 +1,3 @@
 module Tachiban
-  VERSION = "0.5.0"
+  VERSION = "0.6.0"
 end

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: tachiban
 version: !ruby/object:Gem::Version
-  version: 0.5.0
+  version: 0.6.0
 platform: ruby
 authors:
 - Sebastjan Hribar
 autorequire: 
 bindir: bin
 cert_chain: []
-date: 2017-08-22 00:00:00.000000000 Z
+date: 2018-08-15 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: bundler
@@ -209,7 +209,7 @@ required_rubygems_version: !ruby/object:Gem::Requirement
       version: '0'
 requirements: []
 rubyforge_project: 
-rubygems_version: 2.5.2
+rubygems_version: 2.7.7
 signing_key: 
 specification_version: 4
 summary: Tachiban provides simple password hashing for user authentication with bcrypt