Commit graph

805 commits

Author SHA1 Message Date
Zach Daniel
ec8e1eb979
improvement: set confirmed field to nil, for reconfirmation (#136)
* improvement: set confirmed field to `nil`, for reconfirmation

* chore: format

* improvement: only change `confirmed_at_field` if its not changing, and only on updates
2023-01-15 20:28:13 +13:00
github-actions
161c8ab7e8 chore: release version v3.6.0 2023-01-13 04:28:27 +00:00
Zach Daniel
f0aa2e7a93
fix: don't call hash_provider.valid? on nil values (#135)
fix: use configured hashed_password_field
2023-01-13 17:22:40 +13:00
James Harton
948298ac1c
improvement(TokenResource)!: Store the token subject in the token resource. (#133)
* improvement(TokenResource)!: Store the token subject in the token resource.

This is a breaking change because you may have to delete tokens in your database so that you can avoid the non-null constraint on subject.

* docs: Add upgrading documentation.
2023-01-13 17:21:57 +13:00
James Harton
53d221aa6f
docs: Add a small warning about defining the failure template. (#134)
* docs: Add a small warning about defining the failure template.

Closes #118.

* Update documentation/tutorials/integrating-ash-authentication-and-phoenix.md

Co-authored-by: Zach Daniel <zach@zachdaniel.dev>

Co-authored-by: Zach Daniel <zach@zachdaniel.dev>
2023-01-13 17:21:37 +13:00
github-actions
f16960f018 chore: release version v3.5.3 2023-01-13 00:48:41 +00:00
James Harton
085d640c44
fix(Confirmation): send the original changeset to confirmation senders. (#132)
Changes the behaviour of the `ConfirmationHookChange` to pass the original, unmodified changeset in the sender options so that senders can account for inhibited changes.
2023-01-13 13:30:58 +13:00
dependabot[bot]
0bc98800c0
chore(deps): bump spark from 0.3.4 to 0.3.5 (#131)
Bumps [spark](https://github.com/ash-project/spark) from 0.3.4 to 0.3.5.
- [Release notes](https://github.com/ash-project/spark/releases)
- [Changelog](https://github.com/ash-project/spark/blob/main/CHANGELOG.md)
- [Commits](https://github.com/ash-project/spark/compare/v0.3.4...v0.3.5)

---
updated-dependencies:
- dependency-name: spark
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-01-13 13:26:56 +13:00
github-actions
4b1da2fe73 chore: release version v3.5.2 2023-01-12 22:33:22 +00:00
Zach Daniel
3413260659
improvement: add user context when creating tokens (#129) 2023-01-13 11:26:39 +13:00
dependabot[bot]
a4d272718d
chore(deps): bump ash from 2.5.1 to 2.5.2 (#127)
Bumps [ash](https://github.com/ash-project/ash) from 2.5.1 to 2.5.2.
- [Release notes](https://github.com/ash-project/ash/releases)
- [Changelog](https://github.com/ash-project/ash/blob/main/CHANGELOG.md)
- [Commits](https://github.com/ash-project/ash/compare/v2.5.1...v2.5.2)

---
updated-dependencies:
- dependency-name: ash
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-01-13 08:52:34 +13:00
github-actions
cce4d87995 chore: release version v3.5.1 2023-01-12 05:02:37 +00:00
James Harton
63aaea6871
fix: missing icons in OAuth2 strategies. (#126) 2023-01-12 17:55:40 +13:00
github-actions
6c093788b8 chore: release version v3.5.0 2023-01-12 04:29:57 +00:00
James Harton
4129aa969a
feat(GitHub)!: Add GitHub authentication strategy. (#125) 2023-01-12 17:23:40 +13:00
github-actions
3885ab609f chore: release version v3.4.2 2023-01-12 02:40:38 +00:00
Zach Daniel
999bec00ee
improvement: add policy utilities and accompanying guide (#119)
* improvement: add policy utilities and accompanying guide
fix: improve some error message/validation logic

* chore: update castore & fix check definition

* improvement: fix build/warnings/dialyzer/format

* chore: add private context to new `get_token` action.

* chore: fix build.

I'd rather have the warning than a build failure.

Co-authored-by: James Harton <james@harton.nz>
2023-01-12 15:34:41 +13:00
github-actions
178867852a chore: release version v3.4.1 2023-01-12 00:55:55 +00:00
James Harton
500ea353a8
fix(Confirmation): correctly generate confirmation token subjects. (#124) 2023-01-12 13:49:48 +13:00
dependabot[bot]
947a4c7283
chore(deps-dev): bump ash_postgres from 1.2.6 to 1.3.1 (#121)
Bumps [ash_postgres](https://github.com/ash-project/ash_postgres) from 1.2.6 to 1.3.1.
- [Release notes](https://github.com/ash-project/ash_postgres/releases)
- [Changelog](https://github.com/ash-project/ash_postgres/blob/main/CHANGELOG.md)
- [Commits](https://github.com/ash-project/ash_postgres/compare/v1.2.6...v1.3.1)

---
updated-dependencies:
- dependency-name: ash_postgres
  dependency-type: direct:development
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-01-12 10:12:07 +13:00
dependabot[bot]
226568cc0b
chore(deps): bump ash from 2.4.30 to 2.5.1 (#123)
Bumps [ash](https://github.com/ash-project/ash) from 2.4.30 to 2.5.1.
- [Release notes](https://github.com/ash-project/ash/releases)
- [Changelog](https://github.com/ash-project/ash/blob/main/CHANGELOG.md)
- [Commits](https://github.com/ash-project/ash/compare/v2.4.30...v2.5.1)

---
updated-dependencies:
- dependency-name: ash
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-01-12 09:57:37 +13:00
9caeae6943 chore(deps): Update castore to 0.1.22 to fix the build. 2023-01-12 09:42:46 +13:00
github-actions
0ee896829e chore: release version v3.4.0 2023-01-11 02:19:36 +00:00
James Harton
d5c5d6b6c5
feat: Add token-required-for-authentication feature. (#116)
* Adds the `require_token_presence_for_authentication?` DSL option to the Authentication extension which when enabled changes the following behaviour:
  1. The `store_in_session` plug will store the user's token rather than their subject in the session.
  2. The `retrieve_from_session` plug will look for a stored token in the session rather than a subject and ensure that it's present in the `TokenResource`.
  3. The `retrieve_from_bearer` plug will ensure that the token is present in the `TokenResource`.
* Adds the `get_token` action to the `TokenResource`.
2023-01-11 15:12:53 +13:00
github-actions
c444f4583e chore: release version v3.3.1 2023-01-09 03:36:05 +00:00
James Harton
34b9d94f51
improvement: Set Ash actor and tenant when executing internal plugs. (#115)
Closes #114.
2023-01-09 16:30:00 +13:00
github-actions
757290f508 chore: release version v3.3.0 2023-01-09 02:19:16 +00:00
James Harton
792ec056b8
feat: Make strategy names optional where possible. (#113) 2023-01-09 15:02:48 +13:00
github-actions
f117200ad4 chore: release version v3.2.2 2023-01-08 20:34:05 +00:00
James Harton
5ba5e163f3
improvement: Allow the strategy name to be passed for password validations and changes. (#102)
After #89 was merged folks were no longer able to use `AshAuthentication.Strategy.Password.HashPasswordChange` and `AshAuthentication.Strategy.Password.PasswordConfirmationValidation` in their own actions.  This change fixes this issue by allowing the name of the strategy to be passed in in the changeset context.
2023-01-09 09:27:50 +13:00
dependabot[bot]
25610d01d2
chore(deps-dev): bump ash_postgres from 1.2.5 to 1.2.6 (#110)
Bumps [ash_postgres](https://github.com/ash-project/ash_postgres) from 1.2.5 to 1.2.6.
- [Release notes](https://github.com/ash-project/ash_postgres/releases)
- [Changelog](https://github.com/ash-project/ash_postgres/blob/main/CHANGELOG.md)
- [Commits](https://github.com/ash-project/ash_postgres/compare/v1.2.5...v1.2.6)

---
updated-dependencies:
- dependency-name: ash_postgres
  dependency-type: direct:development
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-01-09 09:15:04 +13:00
dependabot[bot]
2b8917ddfd
chore(deps): bump spark from 0.3.2 to 0.3.3 (#112)
Bumps [spark](https://github.com/ash-project/spark) from 0.3.2 to 0.3.3.
- [Release notes](https://github.com/ash-project/spark/releases)
- [Changelog](https://github.com/ash-project/spark/blob/main/CHANGELOG.md)
- [Commits](https://github.com/ash-project/spark/compare/v0.3.2...v0.3.3)

---
updated-dependencies:
- dependency-name: spark
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-01-09 09:14:41 +13:00
dependabot[bot]
a137edeef3
chore(deps-dev): bump ash_json_api from 0.30.1 to 0.31.0 (#111)
Bumps [ash_json_api](https://github.com/ash-project/ash_json_api) from 0.30.1 to 0.31.0.
- [Release notes](https://github.com/ash-project/ash_json_api/releases)
- [Changelog](https://github.com/ash-project/ash_json_api/blob/main/CHANGELOG.md)
- [Commits](https://github.com/ash-project/ash_json_api/compare/v0.30.1...v0.31.0)

---
updated-dependencies:
- dependency-name: ash_json_api
  dependency-type: direct:development
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-01-08 13:57:22 +13:00
Bruno Ripa
ceb5cdcfae
docs: fixed the strategy example in the Usage section of README.md. (#108) 2022-12-23 15:34:41 -05:00
dependabot[bot]
3e94e79f92
chore(deps): bump ash from 2.4.27 to 2.4.28 (#106) 2022-12-24 06:21:43 +13:00
dependabot[bot]
ca89ff17fe
chore(deps): bump spark from 0.3.1 to 0.3.2 (#107) 2022-12-24 06:21:10 +13:00
dependabot[bot]
706f3fd46f
chore(deps-dev): bump ash_postgres from 1.2.4 to 1.2.5 (#105) 2022-12-23 07:00:23 +13:00
dependabot[bot]
ed22490e04
chore(deps): bump ash from 2.4.26 to 2.4.27 (#104) 2022-12-22 21:04:38 +13:00
dependabot[bot]
8e5022cbee
chore(deps-dev): bump ash_postgres from 1.2.3 to 1.2.4 (#103)
Bumps [ash_postgres](https://github.com/ash-project/ash_postgres) from 1.2.3 to 1.2.4.
- [Release notes](https://github.com/ash-project/ash_postgres/releases)
- [Changelog](https://github.com/ash-project/ash_postgres/blob/main/CHANGELOG.md)
- [Commits](https://github.com/ash-project/ash_postgres/compare/v1.2.3...v1.2.4)

---
updated-dependencies:
- dependency-name: ash_postgres
  dependency-type: direct:development
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-12-20 16:22:51 +13:00
dependabot[bot]
0d3fb34f3a
chore(deps): bump spark from 0.3.0 to 0.3.1 (#101) 2022-12-17 09:34:31 +13:00
github-actions
018eed99a2 chore: release version v3.2.1 2022-12-16 00:59:08 +00:00
James Harton
74dfbf7595
improvement: add icon field to OAuth2 strategy. (#100) 2022-12-16 13:53:03 +13:00
github-actions
02fe19091b chore: release version v3.2.0 2022-12-16 00:16:58 +00:00
James Harton
cf9ad01dd5
feat(Auth0): Add a pre-configured Auth0 strategy. (#99) 2022-12-16 13:06:51 +13:00
dependabot[bot]
9802d0b3f7
chore(deps-dev): bump ash_postgres from 1.2.1 to 1.2.3 (#98)
Bumps [ash_postgres](https://github.com/ash-project/ash_postgres) from 1.2.1 to 1.2.3.
- [Release notes](https://github.com/ash-project/ash_postgres/releases)
- [Changelog](https://github.com/ash-project/ash_postgres/blob/main/CHANGELOG.md)
- [Commits](https://github.com/ash-project/ash_postgres/compare/v1.2.1...v1.2.3)

---
updated-dependencies:
- dependency-name: ash_postgres
  dependency-type: direct:development
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-12-16 12:14:58 +13:00
Zach Daniel
5f8110056d
improvement: docs updates (#95) 2022-12-16 12:02:34 +13:00
ece9899c49 chore: update .tool-versions to elixir 25.2 and elixir 1.14.2. 2022-12-16 11:49:39 +13:00
a523198015 chore(devcontainer): store Dialyzer PLTs in a volume. 2022-12-16 11:49:39 +13:00
dependabot[bot]
df3b972c64
chore(deps-dev): bump ash_postgres from 1.2.1 to 1.2.3 (#96)
Bumps [ash_postgres](https://github.com/ash-project/ash_postgres) from 1.2.1 to 1.2.3.
- [Release notes](https://github.com/ash-project/ash_postgres/releases)
- [Changelog](https://github.com/ash-project/ash_postgres/blob/main/CHANGELOG.md)
- [Commits](https://github.com/ash-project/ash_postgres/compare/v1.2.1...v1.2.3)

---
updated-dependencies:
- dependency-name: ash_postgres
  dependency-type: direct:development
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-12-16 09:02:42 +13:00
dependabot[bot]
09f300b3c4
chore(deps): bump ash from 2.4.24 to 2.4.25 (#97)
Bumps [ash](https://github.com/ash-project/ash) from 2.4.24 to 2.4.25.
- [Release notes](https://github.com/ash-project/ash/releases)
- [Changelog](https://github.com/ash-project/ash/blob/main/CHANGELOG.md)
- [Commits](https://github.com/ash-project/ash/compare/v2.4.24...v2.4.25)

---
updated-dependencies:
- dependency-name: ash
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-12-16 09:02:27 +13:00