Module: Aikotoba

Defined in:
app/controllers/concerns/aikotoba/protection/rate_limiting.rb,
lib/aikotoba.rb,
lib/aikotoba/engine.rb,
lib/aikotoba/errors.rb,
lib/aikotoba/version.rb,
app/models/aikotoba/account.rb,
app/models/aikotoba/account/lock.rb,
app/models/aikotoba/account/token.rb,
app/mailers/aikotoba/account_mailer.rb,
app/models/aikotoba/account/session.rb,
app/models/aikotoba/account/password.rb,
app/models/aikotoba/account/recovery.rb,
app/mailers/aikotoba/application_mailer.rb,
lib/aikotoba/test/authentication_helper.rb,
app/models/aikotoba/account/confirmation.rb,
app/models/aikotoba/account/unlock_token.rb,
app/controllers/concerns/aikotoba/scopable.rb,
app/models/aikotoba/account/recovery_token.rb,
app/controllers/aikotoba/unlocks_controller.rb,
app/models/aikotoba/account/password/argon2.rb,
app/controllers/aikotoba/accounts_controller.rb,
app/controllers/aikotoba/confirms_controller.rb,
app/controllers/aikotoba/sessions_controller.rb,
app/controllers/aikotoba/recoveries_controller.rb,
app/models/aikotoba/account/confirmation_token.rb,
app/models/concerns/aikotoba/token_encryptable.rb,
app/controllers/aikotoba/application_controller.rb,
app/controllers/concerns/aikotoba/authenticatable.rb,
app/models/concerns/aikotoba/enabled_feature_checkable.rb,
app/controllers/concerns/aikotoba/protection/session_fixation_attack.rb

Overview

NOTE: Provides the ability to refresh session before sign_in for session fixation attacks. owasp.org/www-community/attacks/Session_fixation

Defined Under Namespace

Modules: Authenticatable, EnabledFeatureCheckable, Errors, Scopable, Test, TokenEncryptable Classes: Account, AccountMailer, AccountsController, ApplicationController, ApplicationMailer, ConfirmableConstraint, ConfirmsController, Engine, LockableConstraint, RecoverableConstraint, RecoveriesController, RegisterableConstraint, SessionsController, UnlocksController

Constant Summary collapse

DEPRECATOR = 
ActiveSupport::Deprecation.new("1.0", "Aikotoba")
VERSION = 
"0.2.0"

Class Method Summary collapse

Class Method Details

.add_scope(name, config = {}) ⇒ Object 



69
70
71
 
# File 'lib/aikotoba.rb', line 69

def self.add_scope(name, config = {})
  scopes[name] = default_scope.merge(config)
end

.default_scope ⇒ Object 



59
60
61
 
# File 'lib/aikotoba.rb', line 59

def self.default_scope
  scopes[:default]
end

.default_scope=(hash) ⇒ Object

NOTE: Merge configuration into default scope (does not replace, merges with existing keys)

Example: Aikotoba.default_scope = { sign_in_path: "/custom" }



65
66
67
 
# File 'lib/aikotoba.rb', line 65

def self.default_scope=(hash)
  default_scope.merge!(hash)
end