wowsql-sdk 3.9.2 → 3.10.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: d95459a8c529ff5a62a4dc8c370041f1c77827bfc55069e562efeb5dcb9ba00a
-  data.tar.gz: 6f05ecb7c8da142eab17f92dd449fbc1761e3e4cb1c33c15028b6e00b8733762
+  metadata.gz: f82d49575289a354df9f59f3aad8c78f8bba8fd5e27f600e598e1fc6fa873bb4
+  data.tar.gz: 2b6674f1ddc575cc348e2c46ed7b9caadeccc3e902aa54f34b751d6b7c9f9773
 SHA512:
-  metadata.gz: 398dc67a4528c3699f110e5371395896734fb97eb6ef78aa9cef63ea810150e07a77980e63011af8c5c4b04a55551caf1688972c888f71be08e6a9f322723f83
-  data.tar.gz: 8c2e796cdcea0191470e0277201b91222f6fbe51d796698bbff6f50dd2a22a2371fef0e4fcc9d7dfaf07b4170f532d381560a431d1dec67a0d44267b1ee52b3b
+  metadata.gz: deae84274b76b8881975b657de53a6841be12719ed04af9bc3aecf5c87b1e3ab4f87509ac6b1e7b8d9af54971ebcc5864bd9192bda8882eac502d7e962ba62d7
+  data.tar.gz: aa60076d325d857bc62781d5fde34b7edcfdf51705083360b348a07a491b634b0bf419dafb34d91c90f3d59fc59afda359f9be903954ccf91957449498b6a49e

data/CHANGELOG.md

@@ -4,6 +4,23 @@ All notable changes to the WowSQL Ruby SDK will be documented in this file.
 
 The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/),
 and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
+
+## [3.10.0] - 2026-10-18
+
+### Fixed
+- Send `apikey` on database, auth, and storage calls (Bearer-only keys were 401 on project hosts).
+- Session refresh uses `POST /refresh-token`.
+- Storage public URLs use `/storage/v1/object/public/{bucket}/{path}`.
+- Upload folder is the `folder` query parameter.
+- Login replies with `requires_2fa` no longer store empty sessions.
+
+### Added
+- TOTP 2FA: status, setup, enable, disable, recovery codes, and `verifyTwoFactorLogin`.
+
+## [3.9.3] - 2026-10-10
+
+### Docs - CAPTCHA bring-your-own widget
+- README: create a Cloudflare Turnstile widget for your app domain and paste site key + secret in Attack Protection. WoWSQL does not provide a shared widget. `GET /auth/v1/settings` returns your `captcha.site_key`.
 
 ## [3.9.2] - 2026-10-10
 

data/README.md

@@ -408,12 +408,11 @@ puts response.session.refresh_token
 
 ### CAPTCHA (Turnstile)
 
-Optional. Only required when Attack Protection → Turnstile is enabled. Existing calls without `captcha_token` are unchanged.
+Optional. Only required when dashboard **Attack Protection → Turnstile** is enabled.
+
+Create a Cloudflare Turnstile widget for **your** app domain at [dash.cloudflare.com/turnstile](https://dash.cloudflare.com/turnstile) and paste the **site key** and **secret** in Attack Protection. WoWSQL does not provide a shared widget — each project must use its own keys bound to that hostname. `GET /auth/v1/settings` returns your `captcha.site_key`. Render Turnstile with that key, then pass the token. Omit it when captcha is off — existing calls without `captcha_token` are unchanged.
 
 ```ruby
-# 1. GET /auth/v1/settings → captcha.site_key
-# 2. Render Cloudflare Turnstile with that site key
-# 3. Pass the token:
 auth.sign_up(email: "alice@example.com", password: "SecurePass123!", captcha_token: turnstile_token)
 auth.sign_in(email: "alice@example.com", password: "SecurePass123!", captcha_token: turnstile_token)
 auth.forgot_password(email: "alice@example.com", captcha_token: turnstile_token)

data/lib/wowsql/auth.rb

@@ -27,11 +27,7 @@ module WOWSQL
   end
 
   # Response for signup/login requests.
-  AuthResponse = Struct.new(:session, :user, keyword_init: true) do
-    def initialize(session:, user: nil)
-      super
-    end
-  end
+  AuthResponse = Struct.new(:session, :user, :requires_2fa, :pending_token, :method, :email, keyword_init: true)
 
   # Interface for persisting tokens.
   module TokenStorage
@@ -115,6 +111,7 @@ module WOWSQL
         f.options.timeout = timeout
       end
 
+      @conn.headers['apikey'] = api_key
       @conn.headers['Authorization'] = "Bearer #{api_key}"
       @conn.headers['Content-Type'] = 'application/json'
     end
@@ -147,6 +144,14 @@ module WOWSQL
       payload = { email: email, password: password }
       payload[:captcha_token] = captcha_token if captcha_token && !captcha_token.to_s.empty?
       data = request('POST', '/login', nil, payload)
+      if data['requires_2fa']
+        return AuthResponse.new(
+          requires_2fa: true,
+          pending_token: data['pending_token'] || data['temp_token'],
+          method: data['method'],
+          email: data['email']
+        )
+      end
       session = persist_session(data)
       AuthResponse.new(session: session, user: nil)
     end
@@ -496,7 +501,45 @@ module WOWSQL
       }
     end
 
+    def verify_two_factor_login(pending_token, code: nil, backup_code: nil)
+      payload = { pending_token: pending_token, temp_token: pending_token }
+      payload[:code] = code if code
+      payload[:backup_code] = backup_code if backup_code
+      data = request('POST', '/2fa/verify-login', nil, payload)
+      session = persist_session(data)
+      AuthResponse.new(session: session)
+    end
+
+    def get_two_factor_status(access_token: nil)
+      token = access_token || @access_token || @storage.get_access_token
+      request_with_headers('GET', '/2fa/status', nil, nil, 'Authorization' => "Bearer #{token}")
+    end
+
+    def setup_totp(access_token: nil)
+      token = access_token || @access_token || @storage.get_access_token
+      request_with_headers('POST', '/2fa/setup-totp', nil, {}, 'Authorization' => "Bearer #{token}")
+    end
+
+    def enable_totp(code, access_token: nil)
+      token = access_token || @access_token || @storage.get_access_token
+      request_with_headers('POST', '/2fa/verify-and-enable', nil, { code: code, method: 'totp' }, 'Authorization' => "Bearer #{token}")
+    end
+
+    def disable_totp(code: nil, backup_code: nil, access_token: nil)
+      token = access_token || @access_token || @storage.get_access_token
+      payload = { method: 'totp' }
+      payload[:code] = code if code
+      payload[:backup_code] = backup_code if backup_code
+      request_with_headers('POST', '/2fa/disable', nil, payload, 'Authorization' => "Bearer #{token}")
+    end
+
+    def regenerate_recovery_codes(code, access_token: nil)
+      token = access_token || @access_token || @storage.get_access_token
+      request_with_headers('POST', '/2fa/recovery-codes', nil, { code: code, method: 'totp' }, 'Authorization' => "Bearer #{token}")
+    end
+
     def persist_session(data)
+      raise WOWSQLError.new('Invalid session response') unless data['access_token'] || data[:access_token]
       session = AuthSession.new(
         access_token: data['access_token'] || data[:access_token] || '',
         refresh_token: data['refresh_token'] || data[:refresh_token] || '',

data/lib/wowsql/client.rb

@@ -55,6 +55,7 @@ module WOWSQL
       end
 
       @conn.headers['apikey']       = api_key
+      @conn.headers['Authorization'] = "Bearer #{api_key}"
       @conn.headers['Content-Type'] = 'application/json'
     end
 

data/lib/wowsql/schema.rb

@@ -54,6 +54,7 @@ module WOWSQL
         f.options.timeout = timeout
       end
 
+      @conn.headers['apikey'] = service_key
       @conn.headers['Authorization'] = "Bearer #{service_key}"
       @conn.headers['Content-Type'] = 'application/json'
     end

data/lib/wowsql/storage.rb

@@ -140,6 +140,7 @@ module WOWSQL
         f.options.timeout = timeout
       end
 
+      @conn.headers['apikey'] = api_key
       @conn.headers['Authorization'] = "Bearer #{api_key}"
     end
 
@@ -318,7 +319,7 @@ module WOWSQL
     # @param file_path [String] File path within bucket
     # @return [String]
     def get_public_url(bucket_name, file_path)
-      "#{@base_url}/api/v1/storage/projects/#{@project_slug}/files/#{bucket_name}/#{file_path}"
+      "#{@base_url}/storage/v1/object/public/#{bucket_name}/#{file_path}"
     end
 
     # Get storage statistics for the project.

data/lib/wowsql/version.rb

@@ -1,4 +1,4 @@
 module WOWSQL
-  VERSION = "3.9.2"
+  VERSION = "3.10.0"
 end
 

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: wowsql-sdk
 version: !ruby/object:Gem::Version
-  version: 3.9.2
+  version: 3.10.0
 platform: ruby
 authors:
 - WOWSQL Team