« Changelog History


Shield v0.4.0 Release Notes

Release Date: 2020-11-12 // over 3 years ago

  • In memory of Flt. Lt. J. J. Rawlings, who passed away today. May his soul rest in peace.

    ➕ Added

    • Add Bearer authentication (RFC 6750).
    • Add more Avram validation helpers
    • ➕ Add documentation on integration with third-party authorization shards
    • ➕ Add Shield::SetSession and Shield::DeleteSession operation mixins
    • ➕ Add Shield::IpAddressColumn model mixin
    • ➕ Add Shield::NotifyLogin operation mixin
    • ➕ Add Shield::NotifyPasswordChange operation mixin
    • ➕ Add Shield::HasManyBearerLogins model association mixin
    • ➕ Add Shield::HasManyLogins model association mixin
    • ➕ Add Shield::HasManyPasswordResets model association mixin
    • ➕ Add Shield::HasOneUserOptions model association mixin
    • ➕ Add Shield::BelongsToUser model association mixin
    • ➕ Add Shield::HasOneCreateSaveUserOptions and Shield::HasOneUpdateSaveUserOptions operation mixins
    • ➕ Add Shield::NeverExpires operation mixin
    • ➕ Add modules to delete authentication records, as an alternative to revoking them.

    🛠 Fixed

    • 🛠 Fix wrong flash type used when deleting user fails
    • 🛠 Fix #redirect_back going back past the previous page sometimes
    • 🛠 Fix other users logged out when a given user's password changes

    🔄 Changed

    • Convert email confirmation into a database model
    • ⬆️ Upgrade default hash for message encryptor/verifier from SHA1 to SHA256
    • ➕ Add user : User parameter to Shield::AuthorizationPipes#authorize?
    • 0️⃣ Return 403 status code, by default, for denied requests.
    • 📇 Rename Shield::Logins to Shield::CurrentLogin
    • Convert EmailConfirmation#url to a class method.
    • ✂ Remove required id param from password reset URL.
    • ⚙ Remove the second parameter from all #do_run_operation_failed action methods.
    • In development and test, automatically click email confirmation and password reset links.

    ✂ Removed

    • ✂ Remove password_confirmation fields
    • ✂ Remove status column from authentication models
    • ✂ Remove Shield::Error