veri 2.0.3 → 2.1.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 90c72152f71aea2555de8f7788b356e8b957d94df73a0bfc826ee79b1087fed7
-  data.tar.gz: f552a61efc8b704a9065bca3d785dcb8cd4046299ee94e05dc0cb08b381511e4
+  metadata.gz: 703094a8e90e3fde6888629b9702406548122bed4ab199e1a02eac174c68ee07
+  data.tar.gz: 337701b97ed23c8cffd7b8ffb6d649e3e520c09bc61de6ed69e7c9d8b1905462
 SHA512:
-  metadata.gz: 1947901336055c81c82f36c18c6abdeadc76d6d1ce47564de69bd83cb98a75d14e433276df5be08c24506277571121d81eaf6c3c0805c5d1041f8d9272821d31
-  data.tar.gz: eb186110a8816965a3ae0c7f396fdd8b0fd212ce281602139268e55cf466e3ad7589e0838383840e629c2b6259ab027c1beb343b5f4338b778717a3b5670eaae
+  metadata.gz: e717d0cf3a4a8d9c673919548c739820ed15b42e7ab7140c9a95cd0f4740cd20a1678cf2a9dfbbcbaeb1257b60f9b8b2a28c2030d9b893fbf382a309e90b1445
+  data.tar.gz: 515e5fee62f96f4ddf4982419207565a905faa00246b5d1b483581ba86fd1063e0bbe06eaa253274c6e73d69395b1f8afd296210afd8aed3c067e264d872d7a4

data/CHANGELOG.md

@@ -1,3 +1,15 @@
+## v2.1.0
+
+### Features
+
+- Added `Veri::Session#switch_tenant` method to move a session to another tenant
+- Added `password_set?` method to check whether a user has a password
+
+### Bugs
+
+- Fixed `log_in` using the previous tenant when `current_tenant` changes within the same request
+- Fixed `Veri::Session.in_tenant` raising an error without a message when given an invalid tenant
+
 ## v2.0.3
 
 ### Bugs

data/README.md

@@ -93,6 +93,9 @@ user.update_password("password")
 
 # Verify a password
 user.verify_password("password")
+
+# Check if a password is set
+user.password_set?
 ```
 Changing a password does not automatically terminate existing sessions. If you want to invalidate the user's sessions after a password change, do so explicitly:
 
@@ -398,6 +401,40 @@ user.sessions.in_tenant(tenant)
 user.sessions.in_tenant(tenant).terminate_all
 ```
 
+### Switching Tenants
+
+A session belongs to one tenant, and a browser holds one session per host. A user is therefore logged in to one tenant at a time, unless your tenants live on separate subdomains, where each subdomain keeps its own session.
+
+To move a user to another tenant, call `switch_tenant` on their session and make `current_tenant` return the new tenant from then on:
+
+```rb
+class ApplicationController < ActionController::Base
+  include Veri::Authentication
+
+  with_authentication
+
+  private
+
+  def current_tenant
+    # This example keeps the tenant in a cookie; your app can keep it anywhere
+    Company.find_by(id: cookies.signed[:company_id])
+  end
+end
+
+class CompaniesController < ApplicationController
+  def switch
+    company = current_user.companies.find(params[:id])
+
+    current_session.switch_tenant(company)
+    cookies.signed[:company_id] = company.id
+
+    redirect_to root_path, notice: "Switched to #{company.name}"
+  end
+end
+```
+
+The user stays logged in and the session keeps its expiration.
+
 ### User Impersonation with Tenants
 
 When using user impersonation in a multi-tenant setup, Veri allows cross-tenant shapeshifting while preserving the original tenant context:
@@ -418,18 +455,12 @@ All other session methods work the same way in multi-tenant applications as in s
 
 When a tenant object is deleted from your database, its associated sessions become orphaned.
 
-To clean up orphaned sessions, use:
+Ideally, the application should be designed so that this doesn't happen: whenever a tenant object is deleted, its sessions are terminated as part of the same operation. However, if that wasn't done, you can clean up the orphaned sessions as a fallback:
 
 ```rb
 Veri::Session.prune
 ```
 
-Or, for a specific user:
-
-```rb
-user.sessions.prune
-```
-
 ### Tenant Migrations
 
 When you rename or remove models used as tenants, you need to update Veri's stored data accordingly. Use these irreversible data migrations:

data/lib/veri/controllers/concerns/authentication.rb

@@ -33,10 +33,7 @@ module Veri
     end
 
     def log_in(authenticatable)
-      processed_authenticatable = Veri::Inputs::Authenticatable.new(
-        authenticatable,
-        message: "Expected an instance of #{Veri::Configuration.user_model_name}, got `#{authenticatable.inspect}`"
-      ).process
+      processed_authenticatable = Veri::Inputs::Authenticatable.new(authenticatable).process
 
       return false if processed_authenticatable.locked?
 
@@ -87,11 +84,7 @@ module Veri
     def current_tenant = nil
 
     def resolved_tenant
-      @resolved_tenant ||= Veri::Inputs::Tenant.new(
-        current_tenant,
-        error: Veri::InvalidTenantError,
-        message: "Expected a string, an ActiveRecord model instance, or nil, got `#{current_tenant.inspect}`"
-      ).resolve
+      Veri::Inputs::Tenant.new(current_tenant).resolve
     end
 
     def reset_memoization

data/lib/veri/inputs/authenticatable.rb

@@ -3,6 +3,8 @@ module Veri
     class Authenticatable < Veri::Inputs::Base
       private
 
+      def default_message = "Expected an instance of #{Veri::Configuration.user_model_name}, got `#{@value.inspect}`"
+
       def processor = -> { @value.is_a?(Veri::Configuration.user_model) ? @value : raise_error }
     end
   end

data/lib/veri/inputs/base.rb

@@ -1,7 +1,7 @@
 module Veri
   module Inputs
     class Base
-      def initialize(value, optional: false, error: Veri::InvalidArgumentError, message: nil)
+      def initialize(value, optional: false, error: nil, message: nil)
         @value = value
         @optional = optional
         @error = error
@@ -20,8 +20,11 @@ module Veri
         raise NotImplementedError
       end
 
+      def default_error = Veri::InvalidArgumentError
+      def default_message = nil
+
       def raise_error
-        raise @error, @message
+        raise @error || default_error, @message || default_message
       end
     end
   end

data/lib/veri/inputs/non_empty_string.rb

@@ -3,6 +3,8 @@ module Veri
     class NonEmptyString < Veri::Inputs::Base
       private
 
+      def default_message = "Expected a non-empty string, got `#{@value.inspect}`"
+
       def processor = -> { @value.is_a?(String) && !@value.empty? ? @value : raise_error }
     end
   end

data/lib/veri/inputs/tenant.rb

@@ -17,6 +17,9 @@ module Veri
 
       private
 
+      def default_error = Veri::InvalidTenantError
+      def default_message = "Expected a string, an ActiveRecord model instance, or nil, got `#{@value.inspect}`"
+
       def processor
         -> {
           return @value if @value.nil?

data/lib/veri/models/concerns/authenticatable.rb

@@ -16,16 +16,20 @@ module Veri
     def update_password(password)
       update!(
         hashed_password: hasher.create(
-          Veri::Inputs::NonEmptyString.new(password, message: "Expected a non-empty string, got `#{password.inspect}`").process
+          Veri::Inputs::NonEmptyString.new(password).process
         ),
         password_updated_at: Time.current
       )
     end
 
+    def password_set?
+      hashed_password.present?
+    end
+
     def verify_password(password)
-      processed_password = Veri::Inputs::NonEmptyString.new(password, message: "Expected a non-empty string, got `#{password.inspect}`").process
+      processed_password = Veri::Inputs::NonEmptyString.new(password).process
 
-      return false if hashed_password.blank?
+      return false unless password_set?
 
       stored_hasher = Veri::Configuration::HASHERS.values.find { _1.match?(hashed_password) }
 

data/lib/veri/models/session.rb

@@ -60,11 +60,7 @@ module Veri
     def shapeshift(user, tenant: nil)
       raise Veri::Error, "Cannot shapeshift from a shapeshifted session" if shapeshifted?
 
-      resolved_tenant = Veri::Inputs::Tenant.new(
-        tenant,
-        error: Veri::InvalidTenantError,
-        message: "Expected a string, an ActiveRecord model instance, or nil, got `#{tenant.inspect}`"
-      ).resolve
+      resolved_tenant = Veri::Inputs::Tenant.new(tenant).resolve
 
       update!(
         shapeshifted_at: Time.current,
@@ -72,10 +68,7 @@ module Veri
         original_tenant_type: tenant_type,
         original_tenant_id: tenant_id,
         **resolved_tenant,
-        authenticatable: Veri::Inputs::Authenticatable.new(
-          user,
-          message: "Expected an instance of #{Veri::Configuration.user_model_name}, got `#{user.inspect}`"
-        ).process
+        authenticatable: Veri::Inputs::Authenticatable.new(user).process
       )
     end
 
@@ -91,6 +84,10 @@ module Veri
       )
     end
 
+    def switch_tenant(tenant)
+      update!(**Veri::Inputs::Tenant.new(tenant).resolve)
+    end
+
     def tenant
       resolve_tenant(tenant_type, tenant_id) { super }
     end

data/lib/veri/version.rb

@@ -1,3 +1,3 @@
 module Veri
-  VERSION = "2.0.3".freeze
+  VERSION = "2.1.0".freeze
 end

metadata

@@ -1,13 +1,13 @@
 --- !ruby/object:Gem::Specification
 name: veri
 version: !ruby/object:Gem::Version
-  version: 2.0.3
+  version: 2.1.0
 platform: ruby
 authors:
 - enjaku4
 bindir: bin
 cert_chain: []
-date: 2026-07-19 00:00:00.000000000 Z
+date: 1980-01-02 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: argon2
@@ -147,7 +147,7 @@ required_rubygems_version: !ruby/object:Gem::Requirement
     - !ruby/object:Gem::Version
       version: '0'
 requirements: []
-rubygems_version: 4.0.3
+rubygems_version: 4.0.16
 specification_version: 4
 summary: Minimal cookie-based authentication library for Ruby on Rails
 test_files: []