Stanko K.R.
017bcc9ce1
- Fix indentation - Split awkward initializer into separate methods - Rename credentials to passkeys - Simplify authenticator registry loading - Flatten nested errors under ActionPack::WebAuthn - Set passkey current params only requests that use it - Inline anemic methods - Replace custom validation with ActiveModel::Validation - Rename identity to holder in Passkey - Rename credentials to passkeys in JS - Extract framework library out of controllers - Pass params hashes down to ActionPack - Attempt to simplify public interface - Push data decoding down to the classes representing the data - Introduce has_passkeys - Add CBOR bigint support - Rename ActionPack::WebAuthn::Passkey to ActionPack::Passkey - Add create_passkey_button helper - Rename public-key to creation-options - Add sign_in_with_passkey_button helper - Dispatch events for the whole Passkey lifecycle - Add ED25519 support - Prevent crash on missing meta tag - Validate resident key options - Don't clobber existing ActionPack config options - Validate cryptographic params - Move CurrentWebAuthnRequest into ActionPack::Passkey - Use ActiveModel::Attributes for Options objects - Implement expiring challanges - Add lifecycle events - Extract param helpers into Request - Add passkey_creation_options and passkey_request_options helpers - Add create_passkey_challenge to make it easier to override the create method if needed - Prefix all view helpers with passkey_ - Auto-include ActionPack::Passkey::Holder - Make the passkey challange url configurable - Add a reminder about Passkeys to the magic link email
71 lines
2.6 KiB
Ruby
71 lines
2.6 KiB
Ruby
require_relative "web_authn"
|
|
|
|
# = Action Pack Railtie
|
|
#
|
|
# Integrates the WebAuthn and Passkey subsystems into the Rails application.
|
|
# Configures default options for WebAuthn ceremonies and sets up the passkey
|
|
# challenge endpoint route.
|
|
#
|
|
# == Configuration
|
|
#
|
|
# # config/application.rb or config/initializers/passkeys.rb
|
|
# config.action_pack.web_authn.default_creation_options = { attestation: :none }
|
|
# config.action_pack.web_authn.default_request_options = { user_verification: :required }
|
|
# config.action_pack.web_authn.creation_challenge_expiration = 10.minutes
|
|
# config.action_pack.web_authn.request_challenge_expiration = 5.minutes
|
|
#
|
|
# config.action_pack.passkey.routes_prefix = "/rails/action_pack/passkey"
|
|
# config.action_pack.passkey.draw_routes = true
|
|
#
|
|
class ActionPack::Railtie < Rails::Railtie
|
|
config.action_pack = ActiveSupport::OrderedOptions.new unless config.respond_to?(:action_pack)
|
|
|
|
config.action_pack.web_authn = ActiveSupport::OrderedOptions.new
|
|
config.action_pack.web_authn.default_request_options = {}
|
|
config.action_pack.web_authn.default_creation_options = {}
|
|
config.action_pack.web_authn.creation_challenge_expiration = 10.minutes
|
|
config.action_pack.web_authn.request_challenge_expiration = 5.minutes
|
|
|
|
config.action_pack.passkey = ActiveSupport::OrderedOptions.new
|
|
config.action_pack.passkey.parent_class_name = "ApplicationRecord"
|
|
config.action_pack.passkey.routes_prefix = "/rails/action_pack/passkey"
|
|
config.action_pack.passkey.draw_routes = true
|
|
config.action_pack.passkey.challenge_url = nil
|
|
|
|
initializer "action_pack.passkey.routes" do |app|
|
|
passkey_config = config.action_pack.passkey
|
|
|
|
app.routes.prepend do
|
|
if passkey_config.draw_routes
|
|
scope passkey_config.routes_prefix, as: :passkey do
|
|
post "/challenge" => "action_pack/passkey/challenges#create", as: :challenge
|
|
end
|
|
end
|
|
end
|
|
end
|
|
|
|
initializer "action_pack.passkey.holder" do
|
|
ActiveSupport.on_load(:active_record) do
|
|
# We need this shim because Holder is namespaced under Passkey, which is an ActiveRecort
|
|
# and can't be required before ActiveRecord is loaded.
|
|
def self.has_passkeys(**options, &block)
|
|
include ActionPack::Passkey::Holder
|
|
has_passkeys(**options, &block)
|
|
end
|
|
end
|
|
end
|
|
|
|
initializer "action_pack.passkey.form_helper" do
|
|
ActiveSupport.on_load(:action_view) do
|
|
require_relative "passkey/form_helper"
|
|
include ActionPack::Passkey::FormHelper
|
|
end
|
|
end
|
|
|
|
initializer "action_pack.passkey.request" do
|
|
ActiveSupport.on_load(:action_controller) do
|
|
require_relative "passkey/request"
|
|
end
|
|
end
|
|
end
|