thecore_backend_commons 3.1.2 → 3.1.4

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 8d36b1d264e07258e473fd2cf61f416b13c1f90f824df789caf1fa59a2256a10
-  data.tar.gz: 1555f66225ca9351fb662200e2e1aae8316db72d3860efcb84e8f462df61d7df
+  metadata.gz: 7497a63c6b2cf568f786b24734477b49d8a38a8b6dbec82f370ee1c02d463038
+  data.tar.gz: 4659432eab9e8b37b37c7e412010f82d8ba0aba879eadffc1ab22d79bae33dc0
 SHA512:
-  metadata.gz: d360689783298699ad923937becd16bd2196d6c11ed003ada2ecba3d2da057d5738eed9f09afede7f12db4cce7bc9c8c0fa4f538b76d6aff52086754c1d84326
-  data.tar.gz: aa70cf87907c29a39e526f688c5f92c0fe4d1e1c9972fd8f246ac713085e904443f0962f3fcc77a47cf581e353bd135c175c268426ca8fc7c1ddf592d2a685cb
+  metadata.gz: 3da399e4ee0c80efb21447a3c50088a50e1a302531faf16d4f0fc8b0acc247b5f63968a738bc99dfd2b8b0f7ccca84f0242d0cdc2f365a9ae2d4d4c470910515
+  data.tar.gz: da3e94fa7c2c17da98d4c2aeac681a9fb59362d49738a6f17fd486ccfaa759767073e2a4dd70843ea1de1e0b04d3983a0b3fd606e8b2099276b36a75ddd00425

data/app/channels/activity_log_channel.rb

@@ -7,10 +7,7 @@ class ActivityLogChannel < ApplicationCable::Channel
     # Any cleanup needed when channel is unsubscribed
   end
 
-  # https://cableready.stimulusreflex.com/troubleshooting/#verify-actioncable
-
   def receive(data)
-    puts data["message"]
-    ActionCable.server.broadcast("messages", "ActionCable is connected")
+    ActionCable.server.broadcast("messages", {message: "ActionCable is connected and received: #{data["message"]}", topic: data["topic"].presence || "general"}) if data["namespace"] == "subscriptions"
   end
 end

data/config/initializers/application_config.rb

@@ -1,2 +1,3 @@
 Rails.application.config.active_storage.configure :Disk, root: Rails.root.join("storage")
 Rails.application.config.action_mailer.delivery_method = :smtp
+Rails.application.config.action_cable.allowed_request_origins = [ ENV["FRONTEND_URL"].presence || /http:\/\/*/, ENV["BACKEND_URL"].presence || /http:\/\/*/, "https://localhost:8100" ].uniq

data/config/initializers/concern_application_record.rb

@@ -10,15 +10,23 @@ module ApplicationRecordConcern
     after_rollback :message_ko
 
     def validation_ko
-      ActionCable.server.broadcast("messages", { topic: :record, action: detect_action, success: false, valid: false, errors: self.errors.full_messages.uniq, record: self}) if self.errors.any?
+      ActionCable.server.broadcast("messages", build_message(false, false, self.errors.full_messages.uniq)) if self.errors.any? && !is_model_forbidden
     end
 
     def message_ok
-      ActionCable.server.broadcast("messages", { topic: :record, action: detect_action, success: true, valid: true, errors: [], record: self})
+      ActionCable.server.broadcast("messages", build_message(true, true, [])) unless is_model_forbidden
     end
 
     def message_ko
-      ActionCable.server.broadcast("messages", { topic: :record, action: detect_action, success: false, valid: true, errors: [], record: self})
+      ActionCable.server.broadcast("messages", build_message(false, true, [])) unless is_model_forbidden
+    end
+
+    def is_model_forbidden
+      [ 'User', 'Role' ].include?(self.class.name)
+    end
+
+    def build_message success, valid, errors
+      { topic: :record, action: detect_action, class: self.class.name, success: success, valid: valid, errors: errors, record: self}
     end
 
     def detect_action

data/config/initializers/concern_cable_connection.rb

@@ -12,7 +12,10 @@ module CableConnectionConcern
     protected
 
     def find_verified_user # this checks whether a user is authenticated with devise
-      if verified_user = env['warden'].user
+      m = request.query_parameters["token"]
+
+      body = ::HashWithIndifferentAccess.new(::JWT.decode(m, ::Rails.application.credentials.dig(:secret_key_base).presence||ENV["SECRET_KEY_BASE"], false)[0]) rescue nil
+      if verified_user = (env['warden'].user.presence || User.find_by(id: body[:user_id]))
         verified_user
       else
         reject_unauthorized_connection

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: thecore_backend_commons
 version: !ruby/object:Gem::Version
-  version: 3.1.2
+  version: 3.1.4
 platform: ruby
 authors:
 - Gabriele Tassoni