yes-auth 1.3.0 → 2.2.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: b55d0e7c3a35defc7b58ebf46d159eab04a6a02174815c32d5018d69bfdb919a
-  data.tar.gz: e7a53f73a14be0931b6095d0a18133fd0ec2cb1383b85e2e761d54ca6f692417
+  metadata.gz: f82bf0d2cfe44a9db4cbb50d00bdb688ef59e6d0dc0bb0602bc26c4c7f54821e
+  data.tar.gz: b5d1bbdd8994ecd3417f3125dd6bf32130a7947b5167b414201f0da4d4974214
 SHA512:
-  metadata.gz: 76c9f484431fb793846f91e1fc330eee3040e4e221f00e7d2e98deb69a8fc978aa0bc82021e5f0a1979d4893f3a7cbf2bd895225a6fef2eeb442789528a485ba
-  data.tar.gz: 2e56a30c5e6345c3b245b1864dfd2083daa9576e4a6de546054a3341d2ae6e8e88b3e7df825130a2f88586aa6fdf55a19f6dc5956a0b3760383db16e6f9a80fe
+  metadata.gz: f78cd81ef54c5ca5d467cf888fdea42579c605e86c2b0239203f586d1cff47ce38fda1b207f7dce908041bed137043f3c5893c352f54d76e6c5ba3779d2f0349
+  data.tar.gz: cbabfbdeb1afefccebe6f6d9a9f04411b3f0a22bef458ea45b82f884fade8b55466e179573b8d609e85144bb186dcafdb4d93972036d7970a4950908e72c263f

data/CHANGELOG.md

@@ -1,5 +1,17 @@
 # Changelog
 
+## [2.2.0] - 2026-09-01
+
+- See root CHANGELOG.md for details.
+
+## [1.4.0] - 2026-06-24
+
+- See root CHANGELOG.md for details.
+
+## [1.3.1] - 2026-06-16
+
+- See root CHANGELOG.md for details.
+
 ## [1.3.0] - 2026-05-18
 
 - See root CHANGELOG.md for details.

data/lib/yes/auth/read_models/principals/read_resource_access/on_read_resource_access_restored.rb

@@ -0,0 +1,24 @@
+# frozen_string_literal: true
+
+module Yes
+  module Auth
+    module ReadModels
+      module Principals
+        module ReadResourceAccess
+          # Rebuilds the mirror row after the aggregate was restored.
+          #
+          # The row was hard-deleted by {OnReadResourceAccessRemoved}; the
+          # builder recreates it blank during read-model resolution, and the
+          # stream replay fills the attributes back in (see {RestoreReplay}).
+          class OnReadResourceAccessRestored < Yes::Core::ReadModel::EventHandler
+            # @param event [Yes::Core::Event]
+            # @return [void]
+            def call(_event)
+              RestoreReplay.new(builder: Builder.new, stream_name: 'ReadResourceAccess').call(read_model)
+            end
+          end
+        end
+      end
+    end
+  end
+end

data/lib/yes/auth/read_models/principals/restore_replay.rb

@@ -0,0 +1,46 @@
+# frozen_string_literal: true
+
+module Yes
+  module Auth
+    module ReadModels
+      module Principals
+        # Rebuilds a hard-deleted principals mirror row after an
+        # `Authorization::...Restored` event.
+        #
+        # The `On...Removed` handlers delete mirror rows, and `Restored`
+        # events carry no state snapshot. The aggregate's stream is replayed
+        # through the builder's regular per-field event handlers to
+        # reconstruct the row instead. Lifecycle events are excluded from the
+        # replay: a `Removed` would delete (and freeze) the row mid-replay,
+        # a `Restored` would recurse.
+        class RestoreReplay
+          CONTEXT = 'Authorization'
+          LIFECYCLE_EVENT_TYPES = /(?:Removed|Restored)\z/
+
+          # @param builder [Yes::Core::ReadModel::Builder] builder whose handlers replay the events
+          # @param stream_name [String] aggregate stream name, e.g. 'WriteResourceAccess'
+          def initialize(builder:, stream_name:)
+            @builder = builder
+            @stream_name = stream_name
+          end
+
+          # @param read_model [ActiveRecord::Base] the freshly (re)created mirror row
+          # @param eventstore [PgEventstore::Client]
+          # @return [void]
+          def call(read_model, eventstore: PgEventstore.client)
+            stream = PgEventstore::Stream.new(
+              context: CONTEXT, stream_name: @stream_name, stream_id: read_model.id
+            )
+            eventstore.read_paginated(stream, options: { resolve_link_tos: true }).each do |events|
+              events.each do |event|
+                next if event.type.match?(LIFECYCLE_EVENT_TYPES)
+
+                @builder.call(event, read_model:)
+              end
+            end
+          end
+        end
+      end
+    end
+  end
+end

data/lib/yes/auth/read_models/principals/write_resource_access/on_write_resource_access_restored.rb

@@ -0,0 +1,24 @@
+# frozen_string_literal: true
+
+module Yes
+  module Auth
+    module ReadModels
+      module Principals
+        module WriteResourceAccess
+          # Rebuilds the mirror row after the aggregate was restored.
+          #
+          # The row was hard-deleted by {OnWriteResourceAccessRemoved}; the
+          # builder recreates it blank during read-model resolution, and the
+          # stream replay fills the attributes back in (see {RestoreReplay}).
+          class OnWriteResourceAccessRestored < Yes::Core::ReadModel::EventHandler
+            # @param event [Yes::Core::Event]
+            # @return [void]
+            def call(_event)
+              RestoreReplay.new(builder: Builder.new, stream_name: 'WriteResourceAccess').call(read_model)
+            end
+          end
+        end
+      end
+    end
+  end
+end

data/lib/yes/auth/subscriptions.rb

@@ -35,6 +35,7 @@ module Yes
             'Authorization::WriteResourceAccessRemoved',
             'Authorization::WriteResourceAccessResourceAssigned',
             'Authorization::WriteResourceAccessResourceTypeChanged',
+            'Authorization::WriteResourceAccessRestored',
             'Authorization::WriteResourceAccessRoleChanged'
           ] }
         )
@@ -46,6 +47,7 @@ module Yes
             'Authorization::ReadResourceAccessResourceTypeChanged',
             'Authorization::ReadResourceAccessRemoved',
             'Authorization::ReadResourceAccessResourceAssigned',
+            'Authorization::ReadResourceAccessRestored',
             'Authorization::ReadResourceAccessRoleChanged',
             'Authorization::ReadResourceAccessScopeChanged',
             'Authorization::ReadResourceAccessServiceChanged'

data/lib/yes/auth/version.rb

@@ -2,6 +2,6 @@
 
 module Yes
   module Auth
-    VERSION = '1.3.0'
+    VERSION = '2.2.0'
   end
 end

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: yes-auth
 version: !ruby/object:Gem::Version
-  version: 1.3.0
+  version: 2.2.0
 platform: ruby
 authors:
 - Nico Ritsche
@@ -29,14 +29,14 @@ dependencies:
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: '1.0'
+        version: '2.0'
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: '1.0'
+        version: '2.0'
 description: Provides authorization principal models (User, Role, ResourceAccess)
   and Cerbos integration for the Yes framework
 email:
@@ -75,9 +75,11 @@ files:
 - lib/yes/auth/read_models/principals/read_resource_access/on_read_resource_access_removed.rb
 - lib/yes/auth/read_models/principals/read_resource_access/on_read_resource_access_resource_assigned.rb
 - lib/yes/auth/read_models/principals/read_resource_access/on_read_resource_access_resource_type_changed.rb
+- lib/yes/auth/read_models/principals/read_resource_access/on_read_resource_access_restored.rb
 - lib/yes/auth/read_models/principals/read_resource_access/on_read_resource_access_role_changed.rb
 - lib/yes/auth/read_models/principals/read_resource_access/on_read_resource_access_scope_changed.rb
 - lib/yes/auth/read_models/principals/read_resource_access/on_read_resource_access_service_changed.rb
+- lib/yes/auth/read_models/principals/restore_replay.rb
 - lib/yes/auth/read_models/principals/role/builder.rb
 - lib/yes/auth/read_models/principals/role/on_role_name_changed.rb
 - lib/yes/auth/read_models/principals/user/builder.rb
@@ -93,6 +95,7 @@ files:
 - lib/yes/auth/read_models/principals/write_resource_access/on_write_resource_access_removed.rb
 - lib/yes/auth/read_models/principals/write_resource_access/on_write_resource_access_resource_assigned.rb
 - lib/yes/auth/read_models/principals/write_resource_access/on_write_resource_access_resource_type_changed.rb
+- lib/yes/auth/read_models/principals/write_resource_access/on_write_resource_access_restored.rb
 - lib/yes/auth/read_models/principals/write_resource_access/on_write_resource_access_role_changed.rb
 - lib/yes/auth/subscriptions.rb
 - lib/yes/auth/version.rb