wowsql-sdk 3.9.1 → 3.9.3

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 9d46c9cb43ff0d1ff729ee19c2384dec05476d286c4d5fb74041429fd4b5fc09
-  data.tar.gz: edb308e3ffa9e0be0ca4d7e7f54639da839c137f7eb52ce2eb977f8c9b7eae3b
+  metadata.gz: 733ca78817394f358256715fd17bc810bb62d575cd3bac9a8371f6cd080dee3e
+  data.tar.gz: f66dcf05b1d189946aec2a2d107572170e7d7aac62864176fa8675d59e01e9e9
 SHA512:
-  metadata.gz: 24d72bdaedce237c50ed1fcd43326d9cb54a013ee541569ae49a1aa422896b10583d04af7c01a8bb512a11044012ea8865ce5a671c8364891dad7ecb36d320e3
-  data.tar.gz: 9ff8164572fbf57cb644c83c9345b74d18ba1763e91c49e372980a550854837777e7b1122414e8afea08f7873ad2e1b254f08402f66f8f6b31e25db870e955e6
+  metadata.gz: cb99407286c0edf67ce68faf420c7d2535eca07fc7d597c41d5064afeac5e7a8fb7f42848ea797b979fb83b09686a8714a24bd99f6a6bc7adfc99d5f001684f1
+  data.tar.gz: 49c5a291fdacd15bccf7b17f0a4dfc7f639d32275605ec2e91a38e53e2df0b44e65290aedc6adcbf472b46ad83c603a8ffef71d70c551b3199b65ef9da9d1ca0

data/CHANGELOG.md

@@ -5,11 +5,22 @@ All notable changes to the WowSQL Ruby SDK will be documented in this file.
 The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/),
 and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
 
-## [3.9.1] - 2026-10-07
-
-### Added - Phone OTP (SMS)
-- `sendOtp` / `verifyOtp` (and language equivalents) accept either **email** or **phone** (exactly one)
-- Existing email OTP call sites remain backward compatible
+## [3.9.3] - 2026-10-10
+
+### Docs - CAPTCHA bring-your-own widget
+- README: create a Cloudflare Turnstile widget for your app domain and paste site key + secret in Attack Protection. WoWSQL does not provide a shared widget. `GET /auth/v1/settings` returns your `captcha.site_key`.
+
+## [3.9.2] - 2026-10-10
+
+### Added - Optional Turnstile captcha
+- Optional captcha token on signup, login, forgot password, OTP send, magic link, and resend verification
+- Existing calls without a token remain unchanged
+
+## [3.9.1] - 2026-10-07
+
+### Added - Phone OTP (SMS)
+- `sendOtp` / `verifyOtp` (and language equivalents) accept either **email** or **phone** (exactly one)
+- Existing email OTP call sites remain backward compatible
 
 
 ## [3.9.0] - 2026-08-20

data/README.md

@@ -406,6 +406,21 @@ puts response.session.access_token
 puts response.session.refresh_token
 ```
 
+### CAPTCHA (Turnstile)
+
+Optional. Only required when dashboard **Attack Protection → Turnstile** is enabled.
+
+Create a Cloudflare Turnstile widget for **your** app domain at [dash.cloudflare.com/turnstile](https://dash.cloudflare.com/turnstile) and paste the **site key** and **secret** in Attack Protection. WoWSQL does not provide a shared widget — each project must use its own keys bound to that hostname. `GET /auth/v1/settings` returns your `captcha.site_key`. Render Turnstile with that key, then pass the token. Omit it when captcha is off — existing calls without `captcha_token` are unchanged.
+
+```ruby
+auth.sign_up(email: "alice@example.com", password: "SecurePass123!", captcha_token: turnstile_token)
+auth.sign_in(email: "alice@example.com", password: "SecurePass123!", captcha_token: turnstile_token)
+auth.forgot_password(email: "alice@example.com", captcha_token: turnstile_token)
+auth.send_otp(email: "alice@example.com", captcha_token: turnstile_token)
+auth.send_magic_link(email: "alice@example.com", captcha_token: turnstile_token)
+auth.resend_verification(email: "alice@example.com", captcha_token: turnstile_token)
+```
+
 ### get_user
 
 ```ruby

data/lib/wowsql/auth.rb

@@ -126,10 +126,11 @@ module WOWSQL
     # @param full_name [String, nil] Optional full name
     # @param user_metadata [Hash, nil] Optional user metadata
     # @return [AuthResponse]
-    def sign_up(email:, password:, full_name: nil, user_metadata: nil)
+    def sign_up(email:, password:, full_name: nil, user_metadata: nil, captcha_token: nil)
       payload = { email: email, password: password }
       payload[:full_name] = full_name if full_name
       payload[:user_metadata] = user_metadata if user_metadata
+      payload[:captcha_token] = captcha_token if captcha_token && !captcha_token.to_s.empty?
 
       data = request('POST', '/signup', nil, payload)
       session = persist_session(data)
@@ -142,8 +143,9 @@ module WOWSQL
     # @param email [String] User email
     # @param password [String] User password
     # @return [AuthResponse]
-    def sign_in(email:, password:)
+    def sign_in(email:, password:, captcha_token: nil)
       payload = { email: email, password: password }
+      payload[:captcha_token] = captcha_token if captcha_token && !captcha_token.to_s.empty?
       data = request('POST', '/login', nil, payload)
       session = persist_session(data)
       AuthResponse.new(session: session, user: nil)
@@ -219,8 +221,9 @@ module WOWSQL
     #
     # @param email [String] User's email address
     # @return [Hash]
-    def forgot_password(email:)
+    def forgot_password(email:, captcha_token: nil)
       payload = { email: email }
+      payload[:captcha_token] = captcha_token if captcha_token && !captcha_token.to_s.empty?
       data = request('POST', '/forgot-password', nil, payload)
       {
         'success' => data['success'] != false,
@@ -248,7 +251,7 @@ module WOWSQL
     # @param phone [String, nil] E.164 phone number
     # @param purpose [String] 'login', 'signup', or 'password_reset'
     # @return [Hash]
-    def send_otp(email: nil, phone: nil, purpose: 'login')
+    def send_otp(email: nil, phone: nil, purpose: 'login', captcha_token: nil)
       unless %w[login signup password_reset].include?(purpose)
         raise WOWSQLError.new("Purpose must be 'login', 'signup', or 'password_reset'")
       end
@@ -259,6 +262,7 @@ module WOWSQL
       payload = { purpose: purpose }
       payload[:email] = email unless email.to_s.empty?
       payload[:phone] = phone unless phone.to_s.empty?
+      payload[:captcha_token] = captcha_token if captcha_token && !captcha_token.to_s.empty?
 
       data = request('POST', '/otp/send', nil, payload)
       {
@@ -311,12 +315,13 @@ module WOWSQL
     # @param email [String] User's email address
     # @param purpose [String] 'login', 'signup', or 'email_verification'
     # @return [Hash]
-    def send_magic_link(email:, purpose: 'login')
+    def send_magic_link(email:, purpose: 'login', captcha_token: nil)
       unless %w[login signup email_verification].include?(purpose)
         raise WOWSQLError.new("Purpose must be 'login', 'signup', or 'email_verification'")
       end
 
       payload = { email: email, purpose: purpose }
+      payload[:captcha_token] = captcha_token if captcha_token && !captcha_token.to_s.empty?
       data = request('POST', '/magic-link/send', nil, payload)
       {
         'success' => data['success'] != false,
@@ -342,8 +347,9 @@ module WOWSQL
     #
     # @param email [String] User's email address
     # @return [Hash]
-    def resend_verification(email:)
+    def resend_verification(email:, captcha_token: nil)
       payload = { email: email }
+      payload[:captcha_token] = captcha_token if captcha_token && !captcha_token.to_s.empty?
       data = request('POST', '/resend-verification', nil, payload)
       {
         'success' => data['success'] != false,

data/lib/wowsql/version.rb

@@ -1,4 +1,4 @@
 module WOWSQL
-  VERSION = "3.9.1"
+  VERSION = "3.9.3"
 end
 

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: wowsql-sdk
 version: !ruby/object:Gem::Version
-  version: 3.9.1
+  version: 3.9.3
 platform: ruby
 authors:
 - WOWSQL Team