volcano-sdk 0.5.3 → 0.6.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 939a91c580dbb07f0cc04f6930c2ea4be62ca7ab7f0106e93b8862d0a310d7b5
-  data.tar.gz: f577bff2cca54ae9fbb5b2375cc45c1671f17fe8372b5f087273251929488ce8
+  metadata.gz: e1c358710803cb0542775a53699fda168e00aa0292d6fe0861287d4175373ecb
+  data.tar.gz: a1e9f5146e6fd06d956ff7a505f391a72eef8b65cc3a4cf39ae4599a9e1346a5
 SHA512:
-  metadata.gz: 5df58a522d1c82cea769ff810620b9837247781a8e13c25add391d9287fd1bee253ddd672508606f2c59eb93988790d5c68cda418b66a90cb8527a8afb5bac97
-  data.tar.gz: c742eaa7aec57e3f151cb650a10fe1fc10641f862196158c259b6cc9c5cad439df908a4603b4c7d7818b1bcdd5aa0ebbca685cd0c75c78188958a2176921955f
+  metadata.gz: e5a1dd2cf0df583e5b02d954aeaaa9c63f4d122658605dbf78dac8a4d6f9fade33422742fc54c6f8dae6d22b4019d91aac73519beb2de83913bc4a27cfe160a9
+  data.tar.gz: 6939426bd9514b8fe97c8e413c61c04acb1559efbcc33afbcf8e6102ac6b09aa96ecc7369859465b1b8f897ce4fe47d8d329ea4ea6fcdaf5aeaa7f52915e444e

data/README.md

@@ -69,6 +69,17 @@ raise "session changed" unless current_session == session
 `current_session` reads immutable local state. It does not refresh or validate
 the token.
 
+Sessions returned by authentication retain the user payload in `session.user`,
+including metadata. The snapshot is deeply immutable and available without a
+request. It is cached data, not proof of authentication; use `auth.user` to fetch
+the server-validated profile. Existing three-field `Session` construction still
+works, with `user: nil`. An adopted snapshot must have the same user ID.
+Snapshots contain deeply frozen JSON data. Plain `Time` timestamps become UTC
+ISO8601 strings with nanosecond precision; symbols become strings. Custom objects,
+container/string/time subclasses, non-finite numbers, duplicate JSON keys, and
+structures deeper than 100 levels raise `TypeError`. Use the typed `auth.user`
+profile when you need Ruby `Time` values.
+
 ### Get the current user
 
 ```ruby

data/lib/volcano/auth.rb

@@ -86,14 +86,21 @@ module Volcano
       owned_session(
         access_token: payload.fetch('access_token'),
         refresh_token: payload.fetch('refresh_token'),
-        user_id: payload.fetch('user').fetch('id')
+        user_id: payload.fetch('user').fetch('id'),
+        user: payload.fetch('user')
       )
     end
 
     def complete_session?(session)
       return false unless session.is_a?(Session)
 
-      session.to_h.values.all? { |value| value.is_a?(String) && !value.strip.empty? }
+      values = [session.access_token, session.refresh_token, session.user_id]
+      values.all? { |value| value.is_a?(String) && !value.strip.empty? } &&
+        matching_session_user?(session)
+    end
+
+    def matching_session_user?(session)
+      session.user.nil? || (session.user.is_a?(Hash) && session.user['id'] == session.user_id)
     end
 
     def owned_complete_session(session)
@@ -102,11 +109,12 @@ module Volcano
       owned_session(**session.to_h)
     end
 
-    def owned_session(access_token:, refresh_token:, user_id:)
+    def owned_session(access_token:, refresh_token:, user_id:, user: nil)
       Session.new(
         access_token: access_token.dup.freeze,
         refresh_token: refresh_token.dup.freeze,
-        user_id: user_id.dup.freeze
+        user_id: user_id.dup.freeze,
+        user: user
       )
     end
   end

data/lib/volcano/models.rb

@@ -1,7 +1,6 @@
 # frozen_string_literal: true
 
 module Volcano
-  Session = Data.define(:access_token, :refresh_token, :user_id)
   AUTH_SESSION_ATTRIBUTES = %i[
     id user_id provider expires_at is_active is_current user_agent ip_address last_ip_address
     last_activity_at session_started_at created_at updated_at

data/lib/volcano/session.rb

@@ -0,0 +1,26 @@
+# frozen_string_literal: true
+
+require 'json'
+require 'time'
+
+module Volcano
+  SESSION_USER_CODER = JSON::Coder.new(freeze: true, allow_duplicate_key: false) do |value|
+    value.instance_of?(Time) ? Time.at(value.to_r).utc.iso8601(9) : value
+  end
+  private_constant :SESSION_USER_CODER
+
+  # In-memory credentials with an optional, unverified local user snapshot.
+  Session = Data.define(:access_token, :refresh_token, :user_id, :user) do
+    def initialize(access_token:, refresh_token:, user_id:, user: nil)
+      super(access_token:, refresh_token:, user_id:, user: immutable_user(user))
+    end
+
+    private
+
+    def immutable_user(value)
+      SESSION_USER_CODER.load(SESSION_USER_CODER.dump(value))
+    rescue JSON::GeneratorError, JSON::NestingError
+      raise TypeError, 'Session user snapshot must contain JSON values or timestamps', cause: nil
+    end
+  end
+end

data/lib/volcano/version.rb

@@ -1,5 +1,5 @@
 # frozen_string_literal: true
 
 module Volcano
-  VERSION = '0.5.3'
+  VERSION = '0.6.0'
 end

data/lib/volcano.rb

@@ -3,6 +3,7 @@
 require_relative 'volcano/version'
 require_relative 'volcano/connection_string'
 require_relative 'volcano/models'
+require_relative 'volcano/session'
 require_relative 'volcano/function_response'
 require_relative 'volcano/log_responses'
 require_relative 'volcano/storage_models'

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: volcano-sdk
 version: !ruby/object:Gem::Version
-  version: 0.5.3
+  version: 0.6.0
 platform: ruby
 authors:
 - Kong
@@ -65,6 +65,20 @@ dependencies:
     - - "~>"
       - !ruby/object:Gem::Version
         version: '0.2'
+- !ruby/object:Gem::Dependency
+  name: json
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '2.17'
+  type: :runtime
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '2.17'
 - !ruby/object:Gem::Dependency
   name: logger
   requirement: !ruby/object:Gem::Requirement
@@ -560,6 +574,7 @@ files:
 - lib/volcano/realtime/protocol_recovery_position.rb
 - lib/volcano/realtime/reconnect.rb
 - lib/volcano/redaction.rb
+- lib/volcano/session.rb
 - lib/volcano/sign_up_result.rb
 - lib/volcano/storage.rb
 - lib/volcano/storage_models.rb