thecore_auth_commons 3.2.2 → 3.3.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 77d175fb8de34406d076515673bca031991b42fac0e5562a3b4c01d7b207baac
-  data.tar.gz: 58e37efaf6e443e55c8af1c556703ea6e47cfa16721f712280667c15492c0e2f
+  metadata.gz: c8907d856764c6dd40d87e0ed599bc85b55f213dbb25a0b112d0aa90605bfbc4
+  data.tar.gz: 6d14fc2c60062b4c3a1d64f68e72e096ccc5059b3ac7c226667ca98d51c54d18
 SHA512:
-  metadata.gz: ef223878f5bb30c360529e0fcdd6ce9db2e6425660fb6a6a4ce9813f7e0cb73f3882e2e09d1971bbf9e217dfcbeb0bac1570a43ce8bcc07503ff8c101987e66d
-  data.tar.gz: ded1ed3a1b67e21eaf01c063096ac15ce7ed1b53d7f84f116573fcdfc08fa780689701431a7710ed86a97d72364cfb6564a2b758fd3b06d68e118de896635c5d
+  metadata.gz: b7760e5a2998c8fa4325f54ae9be8f8010c90c7df4b98272d8277da3252b2a80e2c230771a6fdbd17a1764797c5ed711b41103da36ef305efff2cd6f9125e0f9
+  data.tar.gz: c912d733c2160b9699abad8d76a339406eb82c398beedd9245204197e79dac35334901f42845f72251f76a7a438e9a41b49ab97c9e897b43b5ee84c11da259fe

data/README.md

@@ -1 +1,6 @@
 This is part of Thecore framework: https://github.com/gabrieletassoni/thecore/tree/release/3
+
+It exposes two Env vars to chage the behaviour of Devise at startup:
+
+- MIN_PASSWORD_LENGTH: the minimum length of the password (default: 8)
+- SESSION_TIMEOUT_IN_MINUTES: the session timeout in minutes (default: 30)

data/app/models/user.rb

@@ -1,3 +1,4 @@
 class User < ApplicationRecord
-  devise :database_authenticatable, :rememberable, :validatable
+    # Get the minimum password length from the Environemnt or set it to 8
+    devise :database_authenticatable, :rememberable, :trackable, :timeoutable, :validatable, password_length: ENV.fetch('MIN_PASSWORD_LENGTH', 8).to_i..128, timeout_in: ENV.fetch('SESSION_TIMEOUT_IN_MINUTES', 31).to_i.minutes
 end

data/config/initializers/after_initialize.rb

@@ -3,6 +3,9 @@ Rails.application.configure do
         # In development be sure to load all the namespaces
         # in order to have working reflection
         Zeitwerk::Loader.eager_load_all if Rails.env.development?
+
+        # Devise.timeout_in = ENV.fetch('SESSION_TIMEOUT_IN_MINUTES', 31).to_i.minutes
+        # Devise.password_length = ENV.fetch('MIN_PASSWORD_LENGTH', 8).to_i..128
         
         Ability.send(:include, ThecoreAuthCommonsCanCanCanConcern)
         User.send(:include, ThecoreAuthCommonsUserConcern)

data/config/initializers/concern_user.rb

@@ -10,6 +10,10 @@ module ThecoreAuthCommonsUserConcern
     validates :password, presence: true, on: :create
     validates :password_confirmation, presence: true, on: :create
     validate :check_password_and_confirmation_equal
+    validates_each :password do |record, attr, value|
+      # Password must contain at least one uppercase letter, one lowercase letter, one number, and one special character or be blank
+      record.errors.add(attr, I18n.t("validation.errors.password_must_contain_uppercase_lowercase_number_special_character")) unless value.blank? || (value =~ /[A-Z]/ && value =~ /[a-z]/ && value =~ /[0-9]/ && value =~ /[^A-Za-z0-9]/)
+    end
     validates_each :admin do |record, attr, value|
       # Don't want admin == false if the current user is the only admin
       record.errors.add(attr, I18n.t("validation.errors.cannot_unadmin_last_admin")) if record.admin_changed? && record.admin_was == true && User.where(admin: true).count == 1

data/config/locales/en.thecore_auth_commons.yml

@@ -1,4 +1,15 @@
 en:
+  error:
+    messages:
+      password_requires_letters_and_numbers: "must contain at least one letter and one number"
+      password_requires_special_characters: "must contain at least one special character"
+  validation:
+    errors:
+      password_must_contain_uppercase_lowercase_number_special_character: "must contain at least one uppercase letter, one lowercase letter, one number and one special character"
+      cannot_unadmin_last_admin: "at least one user must be an administrator"
+      cannot_unlock_last_admin: "at least one user must be unlocked"
+      cannot_delete_last_admin: "at least one user must be an administrator"
+      cannot_delete_last_role: "at least one role must exist"
   activerecord:
     models:
       user:

data/config/locales/it.thecore_auth_commons.yml

@@ -1,4 +1,15 @@
 it:
+  error:
+    messages:
+      password_requires_letters_and_numbers: "deve contenere almeno una lettera e un numero"
+      password_requires_special_characters: "deve contenere almeno un carattere speciale"
+  validation:
+    errors:
+      password_must_contain_uppercase_lowercase_number_special_character: "deve contenere almeno una lettera maiuscola, una lettera minuscola, un numero e un carattere speciale"
+      cannot_unadmin_last_admin: "almeno un utente deve essere un amministratore"
+      cannot_unlock_last_admin: "almeno un utente deve essere sbloccato"
+      cannot_delete_last_admin: "almeno un utente deve essere un amministratore"
+      cannot_delete_last_role: "deve esistere almeno un ruolo"
   activerecord:
     models:
       user:

data/db/seeds.rb

@@ -4,7 +4,7 @@ puts "Loading ThecoreAuthCommons seeds"
 Zeitwerk::Loader.eager_load_all
 
 email = "admin@#{ENV["BASE_DOMAIN"].presence || "example.com"}"
-psswd = ENV["ADMIN_PASSWORD"].presence || "changeme"
+psswd = ENV["ADMIN_PASSWORD"].presence || "Change#1"
 
 unless User.where(admin: true).exists?
     u = User.find_or_initialize_by(email: email)

data/lib/thecore_auth_commons/version.rb

@@ -1,3 +1,3 @@
 module ThecoreAuthCommons
-  VERSION = "3.2.2".freeze
+  VERSION = "3.3.0".freeze
 end

metadata

@@ -1,14 +1,13 @@
 --- !ruby/object:Gem::Specification
 name: thecore_auth_commons
 version: !ruby/object:Gem::Version
-  version: 3.2.2
+  version: 3.3.0
 platform: ruby
 authors:
 - Gabriele Tassoni
-autorequire: 
 bindir: bin
 cert_chain: []
-date: 2024-09-11 00:00:00.000000000 Z
+date: 2025-02-12 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: devise
@@ -73,6 +72,9 @@ dependencies:
     - - "~>"
       - !ruby/object:Gem::Version
         version: '3.0'
+    - - ">"
+      - !ruby/object:Gem::Version
+        version: 3.0.5
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
@@ -80,6 +82,9 @@ dependencies:
     - - "~>"
       - !ruby/object:Gem::Version
         version: '3.0'
+    - - ">"
+      - !ruby/object:Gem::Version
+        version: 3.0.5
 - !ruby/object:Gem::Dependency
   name: simplecov
   requirement: !ruby/object:Gem::Requirement
@@ -212,7 +217,6 @@ metadata:
   homepage_uri: https://github.com/gabrieletassoni/thecore_auth_commons
   source_code_uri: https://github.com/gabrieletassoni/thecore_auth_commons
   changelog_uri: https://github.com/gabrieletassoni/thecore_auth_commons/blob/master/CHANGELOG.md
-post_install_message: 
 rdoc_options: []
 require_paths:
 - lib
@@ -227,8 +231,7 @@ required_rubygems_version: !ruby/object:Gem::Requirement
     - !ruby/object:Gem::Version
       version: '0'
 requirements: []
-rubygems_version: 3.5.16
-signing_key: 
+rubygems_version: 3.6.2
 specification_version: 4
 summary: Common Auth methods and models to be used in thecore components.
 test_files: []