volcano-sdk 0.6.0 → 0.7.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: e1c358710803cb0542775a53699fda168e00aa0292d6fe0861287d4175373ecb
-  data.tar.gz: a1e9f5146e6fd06d956ff7a505f391a72eef8b65cc3a4cf39ae4599a9e1346a5
+  metadata.gz: a36dee9d50b8138335752de5e3fdb5007ecd5dfa66547150190de691a048052d
+  data.tar.gz: 97edb400526abafd980ec19278304f80cff3ead5010d7704da7b55128390879e
 SHA512:
-  metadata.gz: e5a1dd2cf0df583e5b02d954aeaaa9c63f4d122658605dbf78dac8a4d6f9fade33422742fc54c6f8dae6d22b4019d91aac73519beb2de83913bc4a27cfe160a9
-  data.tar.gz: 6939426bd9514b8fe97c8e413c61c04acb1559efbcc33afbcf8e6102ac6b09aa96ecc7369859465b1b8f897ce4fe47d8d329ea4ea6fcdaf5aeaa7f52915e444e
+  metadata.gz: 5c3e7ed134b563780e8c1d64ba26f30f7ae9563d7c2ac219a265dabbf6aa04544600ef1a963abd09f9aa3f4efc2a6e32da0adeaf9a2a45905bd793daffd4101d
+  data.tar.gz: c2abfe5361e2ccff60f6f76a77aa4e2eedc0a033d1ef7649a63c5a6fa8f1edf0996c8141cc5eede6c08e5848e24fa8159e5a550b12edc5a32d16ea6dbf4311aa

data/README.md

@@ -78,7 +78,10 @@ Snapshots contain deeply frozen JSON data. Plain `Time` timestamps become UTC
 ISO8601 strings with nanosecond precision; symbols become strings. Custom objects,
 container/string/time subclasses, non-finite numbers, duplicate JSON keys, and
 structures deeper than 100 levels raise `TypeError`. Use the typed `auth.user`
-profile when you need Ruby `Time` values.
+profile when you need Ruby `Time` values. Successful `user`, `update_user`,
+`convert_anonymous`, and `confirm_email_change` calls update this snapshot
+without changing credentials or emitting an authentication-state event.
+Previously returned sessions remain unchanged.
 
 ### Get the current user
 
@@ -89,8 +92,8 @@ raise "wrong user" unless user.id == session.user_id
 
 `user` sends the active access token to Volcano and returns an immutable,
 server-validated `Volcano::User`. The SDK recursively freezes its strings and
-metadata, but does not cache the profile or replace the session. A session
-change while the request is in flight raises
+metadata and updates `current_session.user`. A session change while the request
+is in flight raises
 `Volcano::Error::SessionChangedError` instead of returning a stale profile.
 `get_user` is available as a cross-SDK alias.
 
@@ -106,8 +109,8 @@ raise "wrong user" unless user.id == session.user_id
 
 `update_user` changes the current user's password, metadata, or both. Metadata
 is a shallow patch: omitted keys remain unchanged, and a `nil` value removes
-that key. The method returns an immutable `Volcano::User` without replacing the
-active session. It rejects a response if another authentication operation
+that key. The method returns an immutable `Volcano::User` and updates the local
+user snapshot. It rejects a response if another authentication operation
 replaces the session while the request is in flight.
 
 ### Request a password reset email
@@ -170,8 +173,8 @@ user = client.auth.confirm_email_change(token: "email-change-token")
 puts user.email
 ```
 
-The method returns the immutable updated user without replacing the active
-session. A successful stale response is rejected if another authentication
+The method returns the immutable updated user and updates the local user
+snapshot. A successful stale response is rejected if another authentication
 operation replaces that session in flight.
 
 ### List sessions

data/lib/volcano/auth_anonymous.rb

@@ -20,10 +20,7 @@ module Volcano
         anonymous_conversion_response(current.access_token, email, password, metadata),
         200
       )
-      user = build_user(user_payload(payload))
-      raise Error::SessionChangedError unless @client.capture_session.first == generation
-
-      user
+      cache_current_user(payload, generation)
     end
 
     private

data/lib/volcano/auth_email_change.rb

@@ -30,10 +30,7 @@ module Volcano
       raise Error::AuthenticationError, 'No active session' unless current
 
       payload = Transport.body(confirm_email_change_response(current.access_token, token), 200)
-      user = build_user(user_payload(payload))
-      raise Error::SessionChangedError unless @client.capture_session.first == generation
-
-      user
+      cache_current_user(payload, generation)
     end
 
     private

data/lib/volcano/auth_get_user.rb

@@ -19,16 +19,21 @@ module Volcano
       raise Error::AuthenticationError, 'No active session' unless current
 
       payload = Transport.body(get_user_response(current.access_token), 200)
-      user = build_user(user_payload(payload))
-      raise Error::SessionChangedError unless @client.capture_session.first == generation
-
-      user
+      cache_current_user(payload, generation)
     end
 
     alias get_user user
 
     private
 
+    def cache_current_user(payload, generation)
+      profile = user_payload(payload)
+      user = build_user(profile)
+      raise Error::SessionChangedError unless @client.update_session_user_if_current?(profile, generation)
+
+      user
+    end
+
     def get_user_response(access_token)
       Transport.invoke do
         @transport.auth_get_user(authorization: access_token)

data/lib/volcano/auth_state.rb

@@ -50,10 +50,9 @@ module Volcano
 
     def store_if_current?(session, generation, event: :signed_in, notifications: nil)
       dispatch = @mutex.synchronize do
-        callbacks = replace_if_current(session, generation, event)
-        return false unless callbacks
+        return false unless generation == @generation
 
-        enqueue_notification(callbacks, event, session)
+        enqueue_notification(replace(session, event), event, session)
       end
       return true unless dispatch
 
@@ -61,6 +60,16 @@ module Volcano
       true
     end
 
+    def update_user_if_current?(user, generation)
+      @mutex.synchronize do
+        return false unless generation == @generation && @session
+        raise Error::AuthenticationError, 'Profile belongs to a different user' unless user['id'] == @session.user_id
+
+        @session = Session.new(**@session.to_h, user: user)
+        true
+      end
+    end
+
     def subscribe(&callback)
       callback_id, dispatch = @mutex.synchronize do
         id, current = register(callback)
@@ -79,12 +88,6 @@ module Volcano
       @callbacks.keys
     end
 
-    def replace_if_current(session, generation, event)
-      return unless generation == @generation
-
-      replace(session, event)
-    end
-
     def register(callback)
       callback_id = @next_callback_id
       @next_callback_id += 1
@@ -130,7 +133,7 @@ module Volcano
     def notify(callback_ids, event, session)
       failure = nil
       callback_ids.each do |callback_id|
-        notify_callback(callback_id, event, session)
+        @mutex.synchronize { @callbacks[callback_id] }&.call(event, session)
       rescue StandardError => e
         Warning.warn("Volcano auth-state callback failed (#{e.class})\n")
       rescue *CALLBACK_FAILURES => e
@@ -139,10 +142,5 @@ module Volcano
       end
       failure
     end
-
-    def notify_callback(callback_id, event, session)
-      callback = @mutex.synchronize { @callbacks[callback_id] }
-      callback&.call(event, session)
-    end
   end
 end

data/lib/volcano/auth_update_user.rb

@@ -11,10 +11,7 @@ module Volcano
         update_user_response(current.access_token, password:, metadata:),
         200
       )
-      user = build_user(user_payload(payload))
-      raise Error::SessionChangedError unless @client.capture_session.first == generation
-
-      user
+      cache_current_user(payload, generation)
     end
 
     private

data/lib/volcano/client.rb

@@ -89,6 +89,10 @@ module Volcano
       @auth_state.subscribe(...)
     end
 
+    def update_session_user_if_current?(...)
+      @auth_state.update_user_if_current?(...)
+    end
+
     private
 
     def database_with_token(name, token)

data/lib/volcano/version.rb

@@ -1,5 +1,5 @@
 # frozen_string_literal: true
 
 module Volcano
-  VERSION = '0.6.0'
+  VERSION = '0.7.0'
 end

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: volcano-sdk
 version: !ruby/object:Gem::Version
-  version: 0.6.0
+  version: 0.7.0
 platform: ruby
 authors:
 - Kong