yaag 0.0.1 → 0.0.11

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 5392a92361ab06888e9a382e419a2fd2a9c2eb550073476aa255ebafae4093a3
-  data.tar.gz: d3783baaf6d30da9bf568c7ce585824880c1ca25e6f62f98758f57e7bc0ad47f
+  metadata.gz: 2da4ef8b96e8631b9e35d8ffa355325a3f0a0a0dc3c59a439c39e47e624e5e16
+  data.tar.gz: 40e8a8882b657f30850118b72a132b9e61296381df6b52c908eaf71022c46cdb
 SHA512:
-  metadata.gz: ccfec1abfd5f86d6be13cef7b367fe8f774cfa9e8f00cf94d20ab595dc3a9577a51163cf71070470d79b3773c4efdde016a906e4cb62ba4391b14b7ae08e01a2
-  data.tar.gz: 45aa07c8b3c8cac0f0063604f4350aaabc43ddf81dc7a2d3e7c43c63177ae136e021df87b0fcf53ead546400b0d992c6a65171c5e412428bf48c56b640a791a1
+  metadata.gz: ca92370e1389ed19923f99a192aa3c87a54c0fd6551620b0ea52edef322a9fa6995aafc6d01ea27044326313f988f884488eac4abae50d9803d24ec790a262b0
+  data.tar.gz: 1e220e7aa4138f589a274f6a80f4173372087e2fbdf5f7c56dc02683e9951b42f5fefb12a1fd76741a714194c6066c225c6447df32c9737ec68d3ed21d81da9f

data/LICENSE.txt

@@ -1,6 +1,6 @@
 The MIT License (MIT)
 
-Copyright (c) 2025 TODO: Write your name
+Copyright (c) 2025 nu12
 
 Permission is hereby granted, free of charge, to any person obtaining a copy
 of this software and associated documentation files (the "Software"), to deal

data/lib/generators/yaag/USAGE

@@ -0,0 +1,5 @@
+Description:
+    Generates a basic passwordless authentication system with users and sessions.
+
+Example:
+    `bin/rails generate yaag:install`

data/lib/generators/yaag/install_generator.rb

@@ -0,0 +1,64 @@
+# frozen_string_literal: true
+
+require "rails/generators/bundle_helper"
+
+module Yaag
+  module Generators
+    class InstallGenerator < Rails::Generators::Base # :nodoc:
+      include Rails::Generators::BundleHelper
+      source_root File.expand_path("../templates", __FILE__)
+
+      class_option :api, type: :boolean,
+        desc: "Generate API-only controllers and models, with no view templates"
+
+      # hook_for :template_engine do |template_engine|
+        #invoke template_engine unless options.api?
+      # end
+      
+      def create_authentication_files
+        
+        template "app/models/session.rb"
+        template "app/models/user.rb"
+        template "app/models/current.rb"
+
+        template "app/controllers/signins_controller.rb"
+        template "app/controllers/sessions_controller.rb"
+        template "app/controllers/concerns/authentication.rb"
+
+        template "app/channels/application_cable/connection.rb" # if defined?(ActionCable::Engine)
+
+        copy_file "app/views/sessions/new.html.erb"
+        copy_file "app/views/signins/new.html.erb"
+        
+        #if defined?(ActionMailer::Railtie)
+        template "app/mailers/signins_mailer.rb"
+
+        copy_file "app/views/signins_mailer/token.html.erb"
+        copy_file "app/views/signins_mailer/token.text.erb"
+        #end
+
+        template "active_model/passwordless_login.rb", "lib/active_model/passwordless_login.rb" 
+      end
+
+      def configure_application_controller
+        inject_into_class "app/controllers/application_controller.rb", "ApplicationController", "  include Authentication\n" # if File.exist? "app/controllers/application_controller.rb"
+      end
+
+      def configure_authentication_routes
+        route "resource :signin, only: [:new, :create]"  # if File.exist? "config/routes.rb"
+        route "resource :session, only: [:new, :destroy] do\n  get \"/:token/create\" => \"sessions#create\", as: :create\nend" # if File.exist? "config/routes.rb"
+      end
+
+      def add_migrations
+        generate "migration", "CreateUsers", "email_address:string!:uniq", "--force"
+        generate "migration", "CreateSessions", "user:references ip_address:string user_agent:string", "--force"
+      end
+
+      def show_readme
+        readme "README" if behavior == :invoke
+      end
+
+      #hook_for :test_framework
+    end
+  end
+end

data/lib/generators/yaag/templates/README

@@ -0,0 +1 @@
+===============================================================================

data/lib/generators/yaag/templates/active_model/passwordless_login.rb

@@ -0,0 +1,51 @@
+# frozen_string_literal: true
+
+module ActiveModel
+  module PasswordlessLogin
+    extend ActiveSupport::Concern
+
+    DEFAULT_LOGIN_TOKEN_EXPIRES_IN = 15.minutes
+
+    class << self    
+    end
+  
+    module ClassMethods
+      def has_passwordless_login(attribute = :email_address)        
+        include InstanceMethodsOnActivation.new(attribute)
+
+        if respond_to?(:generates_token_for)
+          login_token_expires_in = DEFAULT_LOGIN_TOKEN_EXPIRES_IN
+
+          silence_redefinition_of_method(:"#{attribute}_login_token_expires_in")
+          define_method(:"#{attribute}_login_token_expires_in") { login_token_expires_in }
+
+          generates_token_for :"#{attribute}_login", expires_in: login_token_expires_in do
+            public_send(:"#{attribute}")&.first(10)
+          end
+
+          class_eval <<-RUBY, __FILE__, __LINE__ + 1
+            silence_redefinition_of_method :find_by_#{attribute}_login_token
+            def self.find_by_#{attribute}_login_token(token)
+              find_by_token_for(:#{attribute}_login, token)
+            end
+
+            silence_redefinition_of_method :find_by_#{attribute}_login_token!
+            def self.find_by_#{attribute}_login_token!(token)
+              find_by_token_for!(:#{attribute}_login, token)
+            end
+          RUBY
+        end
+      end
+    end
+
+    class InstanceMethodsOnActivation < Module
+      def initialize(attribute)
+        attr_reader attribute
+        
+        define_method("#{attribute}_login_token") do
+          generate_token_for(:"#{attribute}_login")
+        end
+      end
+    end
+  end
+end

data/lib/generators/yaag/templates/app/channels/application_cable/connection.rb

@@ -0,0 +1,16 @@
+module ApplicationCable
+  class Connection < ActionCable::Connection::Base
+    identified_by :current_user
+
+    def connect
+      set_current_user || reject_unauthorized_connection
+    end
+
+    private
+      def set_current_user
+        if session = Session.find_by(id: cookies.signed[:session_id])
+          self.current_user = session.user
+        end
+      end
+  end
+end

data/lib/generators/yaag/templates/app/controllers/concerns/authentication.rb

@@ -0,0 +1,52 @@
+module Authentication
+  extend ActiveSupport::Concern
+
+  included do
+    before_action :require_authentication
+    helper_method :authenticated?
+  end
+
+  class_methods do
+    def allow_unauthenticated_access(**options)
+      skip_before_action :require_authentication, **options
+    end
+  end
+
+  private
+    def authenticated?
+      resume_session
+    end
+
+    def require_authentication
+      resume_session || request_authentication
+    end
+
+    def resume_session
+      Current.session ||= find_session_by_cookie
+    end
+
+    def find_session_by_cookie
+      Session.find_by(id: cookies.signed[:session_id]) if cookies.signed[:session_id]
+    end
+
+    def request_authentication
+      session[:return_to_after_authenticating] = request.url
+      redirect_to new_signin_path
+    end
+
+    def after_authentication_url
+      session.delete(:return_to_after_authenticating) || root_url
+    end
+
+    def start_new_session_for(user)
+      user.sessions.create!(user_agent: request.user_agent, ip_address: request.remote_ip).tap do |session|
+        Current.session = session
+        cookies.signed.permanent[:session_id] = { value: session.id, httponly: true, same_site: :lax }
+      end
+    end
+
+    def terminate_session
+      Current.session.destroy
+      cookies.delete(:session_id)
+    end
+end

data/lib/generators/yaag/templates/app/controllers/sessions_controller.rb

@@ -0,0 +1,24 @@
+class SessionsController < ApplicationController
+  allow_unauthenticated_access only: %i[ new create ]
+  before_action :set_user_by_token, only: %i[ create ]
+  rate_limit to: 10, within: 3.minutes, only: :create, with: -> { redirect_to new_session_path, alert: "Try again later." }
+
+  def new
+  end
+
+  def create
+    start_new_session_for @user
+    redirect_to after_authentication_url
+  end
+
+  def destroy
+    terminate_session
+    redirect_to new_signin_path, status: :see_other
+  end
+  private
+    def set_user_by_token
+      @user = User.find_by_email_address_login_token!(params[:token])
+    rescue ActiveSupport::MessageVerifier::InvalidSignature
+      redirect_to new_signin_path, alert: "Signin link is invalid or has expired."
+    end
+end

data/lib/generators/yaag/templates/app/controllers/signins_controller.rb

@@ -0,0 +1,12 @@
+class SigninsController < ApplicationController
+  allow_unauthenticated_access
+  rate_limit to: 10, within: 3.minutes, only: :create, with: -> { redirect_to new_signin_path, alert: "Try again later." }
+  def new
+  end
+
+  def create
+    user = User.find_or_create_by(email_address: params[:email_address])
+    SigninsMailer.token(user).deliver_now
+    redirect_to new_session_path, notice: "Sign in address sent to provided e-mail."
+  end
+end

data/lib/generators/yaag/templates/app/mailers/signins_mailer.rb

@@ -0,0 +1,6 @@
+class SigninsMailer < ApplicationMailer
+  def token(user)
+    @user = user
+    mail subject: "Sign in link", to: user.email_address
+  end
+end

data/lib/generators/yaag/templates/app/models/current.rb

@@ -0,0 +1,4 @@
+class Current < ActiveSupport::CurrentAttributes
+  attribute :session
+  delegate :user, to: :session, allow_nil: true
+end

data/lib/generators/yaag/templates/app/models/session.rb

@@ -0,0 +1,3 @@
+class Session < ApplicationRecord
+  belongs_to :user
+end

data/lib/generators/yaag/templates/app/models/user.rb

@@ -0,0 +1,7 @@
+class User < ApplicationRecord
+  include ActiveModel::PasswordlessLogin
+  has_passwordless_login
+  has_many :sessions, dependent: :destroy
+
+  normalizes :email_address, with: ->(e) { e.strip.downcase }
+end

data/lib/generators/yaag/templates/app/views/sessions/new.html.erb

@@ -0,0 +1,2 @@
+<%= tag.div(flash[:alert], style: "color:red") if flash[:alert] %>
+<%= tag.div(flash[:notice], style: "color:green") if flash[:notice] %>

data/lib/generators/yaag/templates/app/views/signins/new.html.erb

@@ -0,0 +1,8 @@
+<%= tag.div(flash[:alert], style: "color:red") if flash[:alert] %>
+<%= tag.div(flash[:notice], style: "color:green") if flash[:notice] %>
+
+<%= form_with url: signin_path do |form| %>
+  <%= form.email_field :email_address, required: true, autofocus: true, autocomplete: "username", placeholder: "Enter your email address", value: params[:email_address] %><br>
+  <%= form.submit "Sign in" %>
+<% end %>
+<br>

data/lib/generators/yaag/templates/app/views/signins_mailer/token.html.erb

@@ -0,0 +1,8 @@
+<% if @user %>
+  <p>
+    You can reset your password on
+    <%= link_to "this password reset page", create_session_url(@user.email_address_login_token) %>.
+
+    This link will expire in <%= distance_of_time_in_words(0, @user.email_address_login_token_expires_in) %>.
+  </p>
+<% end %>

data/lib/generators/yaag/templates/app/views/signins_mailer/token.text.erb

@@ -0,0 +1,6 @@
+<% if @user %>
+    You can reset your password on
+    <%= create_session_url(@user.email_address_login_token) %>
+
+    This link will expire in <%= distance_of_time_in_words(0, @user.email_address_login_token_expires_in) %>.
+<% end %>

data/lib/yaag/engine.rb

@@ -0,0 +1,5 @@
+module Yaag
+  class Engine < ::Rails::Engine
+    isolate_namespace Yaag
+  end
+end

data/lib/yaag/version.rb

@@ -1,5 +1,5 @@
 # frozen_string_literal: true
 
 module Yaag
-  VERSION = "0.0.1"
+  VERSION = "0.0.11"
 end

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: yaag
 version: !ruby/object:Gem::Version
-  version: 0.0.1
+  version: 0.0.11
 platform: ruby
 authors:
 - nu12
 autorequire:
 bindir: exe
 cert_chain: []
-date: 2025-12-27 00:00:00.000000000 Z
+date: 2026-01-06 00:00:00.000000000 Z
 dependencies: []
 description: Passwordless authentication.
 email:
@@ -21,7 +21,24 @@ files:
 - LICENSE.txt
 - README.md
 - Rakefile
+- lib/generators/yaag/USAGE
+- lib/generators/yaag/install_generator.rb
+- lib/generators/yaag/templates/README
+- lib/generators/yaag/templates/active_model/passwordless_login.rb
+- lib/generators/yaag/templates/app/channels/application_cable/connection.rb
+- lib/generators/yaag/templates/app/controllers/concerns/authentication.rb
+- lib/generators/yaag/templates/app/controllers/sessions_controller.rb
+- lib/generators/yaag/templates/app/controllers/signins_controller.rb
+- lib/generators/yaag/templates/app/mailers/signins_mailer.rb
+- lib/generators/yaag/templates/app/models/current.rb
+- lib/generators/yaag/templates/app/models/session.rb
+- lib/generators/yaag/templates/app/models/user.rb
+- lib/generators/yaag/templates/app/views/sessions/new.html.erb
+- lib/generators/yaag/templates/app/views/signins/new.html.erb
+- lib/generators/yaag/templates/app/views/signins_mailer/token.html.erb
+- lib/generators/yaag/templates/app/views/signins_mailer/token.text.erb
 - lib/yaag.rb
+- lib/yaag/engine.rb
 - lib/yaag/version.rb
 - mise.toml
 - sig/yaag.rbs