├── .gitattributes ├── .gitignore ├── .ruby-version ├── Gemfile ├── Gemfile.lock ├── README.md ├── Rakefile ├── app ├── channels │ └── application_cable │ │ ├── channel.rb │ │ └── connection.rb ├── controllers │ ├── application_controller.rb │ ├── concerns │ │ └── .keep │ ├── members_controller.rb │ └── users │ │ ├── registrations_controller.rb │ │ └── sessions_controller.rb ├── jobs │ └── application_job.rb ├── mailers │ └── application_mailer.rb ├── models │ ├── application_record.rb │ ├── concerns │ │ └── .keep │ ├── jwt_denylist.rb │ └── user.rb └── views │ └── layouts │ ├── mailer.html.erb │ └── mailer.text.erb ├── bin ├── bundle ├── rails ├── rake └── setup ├── config.ru ├── config ├── application.rb ├── boot.rb ├── cable.yml ├── credentials.yml.enc ├── database.yml ├── environment.rb ├── environments │ ├── development.rb │ ├── production.rb │ └── test.rb ├── initializers │ ├── cors.rb │ ├── devise.rb │ ├── filter_parameter_logging.rb │ └── inflections.rb ├── locales │ ├── devise.en.yml │ └── en.yml ├── puma.rb ├── routes.rb └── storage.yml ├── db ├── migrate │ ├── 20220117065741_devise_create_users.rb │ └── 20220117065748_create_jwt_denylist.rb ├── schema.rb └── seeds.rb ├── frontend ├── .browserslistrc ├── .gitignore ├── README.md ├── babel.config.js ├── package-lock.json ├── package.json ├── public │ ├── favicon.ico │ └── index.html └── src │ ├── App.vue │ ├── assets │ └── logo.png │ ├── components │ ├── HelloWorld.vue │ └── SessionManager.vue │ ├── main.js │ └── store │ ├── index.js │ └── modules │ └── session_manager.js ├── lib └── tasks │ └── .keep ├── log └── .keep ├── public └── robots.txt ├── storage └── .keep ├── test ├── channels │ └── application_cable │ │ └── connection_test.rb ├── controllers │ └── .keep ├── fixtures │ ├── files │ │ └── .keep │ ├── jwt_denylists.yml │ └── users.yml ├── integration │ └── .keep ├── mailers │ └── .keep ├── models │ ├── .keep │ ├── jwt_denylist_test.rb │ └── user_test.rb └── test_helper.rb ├── tmp ├── .keep ├── pids │ └── .keep └── storage │ └── .keep └── vendor └── .keep /.gitattributes: -------------------------------------------------------------------------------- 1 | # See https://git-scm.com/docs/gitattributes for more about git attribute files. 2 | 3 | # Mark the database schema as having been generated. 4 | db/schema.rb linguist-generated 5 | 6 | # Mark any vendored files as having been vendored. 7 | vendor/* linguist-vendored 8 | -------------------------------------------------------------------------------- /.gitignore: -------------------------------------------------------------------------------- 1 | # See https://help.github.com/articles/ignoring-files for more about ignoring files. 2 | # 3 | # If you find yourself ignoring temporary files generated by your text editor 4 | # or operating system, you probably want to add a global ignore instead: 5 | # git config --global core.excludesfile '~/.gitignore_global' 6 | 7 | # Ignore bundler config. 8 | /.bundle 9 | 10 | # Ignore the default SQLite database. 11 | /db/*.sqlite3 12 | /db/*.sqlite3-* 13 | 14 | # Ignore all logfiles and tempfiles. 15 | /log/* 16 | /tmp/* 17 | !/log/.keep 18 | !/tmp/.keep 19 | 20 | # Ignore pidfiles, but keep the directory. 21 | /tmp/pids/* 22 | !/tmp/pids/ 23 | !/tmp/pids/.keep 24 | 25 | # Ignore uploaded files in development. 26 | /storage/* 27 | !/storage/.keep 28 | /tmp/storage/* 29 | !/tmp/storage/ 30 | !/tmp/storage/.keep 31 | 32 | # Ignore master key for decrypting credentials and more. 33 | /config/master.key 34 | -------------------------------------------------------------------------------- /.ruby-version: -------------------------------------------------------------------------------- 1 | ruby-3.0.3 2 | -------------------------------------------------------------------------------- /Gemfile: -------------------------------------------------------------------------------- 1 | source "https://rubygems.org" 2 | git_source(:github) { |repo| "https://github.com/#{repo}.git" } 3 | 4 | ruby "3.0.3" 5 | 6 | # Bundle edge Rails instead: gem "rails", github: "rails/rails", branch: "main" 7 | gem "rails", "~> 7.0.1" 8 | 9 | # Use sqlite3 as the database for Active Record 10 | gem "sqlite3", "~> 1.4" 11 | 12 | # Use the Puma web server [https://github.com/puma/puma] 13 | gem "puma", "~> 5.0" 14 | 15 | # Build JSON APIs with ease [https://github.com/rails/jbuilder] 16 | # gem "jbuilder" 17 | 18 | # Use Redis adapter to run Action Cable in production 19 | # gem "redis", "~> 4.0" 20 | 21 | # Use Kredis to get higher-level data types in Redis [https://github.com/rails/kredis] 22 | # gem "kredis" 23 | 24 | # Use Active Model has_secure_password [https://guides.rubyonrails.org/active_model_basics.html#securepassword] 25 | # gem "bcrypt", "~> 3.1.7" 26 | 27 | # Windows does not include zoneinfo files, so bundle the tzinfo-data gem 28 | gem "tzinfo-data", platforms: %i[ mingw mswin x64_mingw jruby ] 29 | 30 | # Reduces boot times through caching; required in config/boot.rb 31 | gem "bootsnap", require: false 32 | 33 | # Use Active Storage variants [https://guides.rubyonrails.org/active_storage_overview.html#transforming-images] 34 | # gem "image_processing", "~> 1.2" 35 | 36 | # Use Rack CORS for handling Cross-Origin Resource Sharing (CORS), making cross-origin AJAX possible 37 | # gem "rack-cors" 38 | 39 | group :development, :test do 40 | # See https://guides.rubyonrails.org/debugging_rails_applications.html#debugging-with-the-debug-gem 41 | gem "debug", platforms: %i[ mri mingw x64_mingw ] 42 | end 43 | 44 | group :development do 45 | # Speed up commands on slow machines / big apps [https://github.com/rails/spring] 46 | # gem "spring" 47 | end 48 | 49 | 50 | gem "devise", "~> 4.8" 51 | gem "devise-jwt", "~> 0.9.0" 52 | gem "rack-cors", "~> 1.1" 53 | -------------------------------------------------------------------------------- /Gemfile.lock: -------------------------------------------------------------------------------- 1 | GEM 2 | remote: https://rubygems.org/ 3 | specs: 4 | actioncable (7.0.1) 5 | actionpack (= 7.0.1) 6 | activesupport (= 7.0.1) 7 | nio4r (~> 2.0) 8 | websocket-driver (>= 0.6.1) 9 | actionmailbox (7.0.1) 10 | actionpack (= 7.0.1) 11 | activejob (= 7.0.1) 12 | activerecord (= 7.0.1) 13 | activestorage (= 7.0.1) 14 | activesupport (= 7.0.1) 15 | mail (>= 2.7.1) 16 | net-imap 17 | net-pop 18 | net-smtp 19 | actionmailer (7.0.1) 20 | actionpack (= 7.0.1) 21 | actionview (= 7.0.1) 22 | activejob (= 7.0.1) 23 | activesupport (= 7.0.1) 24 | mail (~> 2.5, >= 2.5.4) 25 | net-imap 26 | net-pop 27 | net-smtp 28 | rails-dom-testing (~> 2.0) 29 | actionpack (7.0.1) 30 | actionview (= 7.0.1) 31 | activesupport (= 7.0.1) 32 | rack (~> 2.0, >= 2.2.0) 33 | rack-test (>= 0.6.3) 34 | rails-dom-testing (~> 2.0) 35 | rails-html-sanitizer (~> 1.0, >= 1.2.0) 36 | actiontext (7.0.1) 37 | actionpack (= 7.0.1) 38 | activerecord (= 7.0.1) 39 | activestorage (= 7.0.1) 40 | activesupport (= 7.0.1) 41 | globalid (>= 0.6.0) 42 | nokogiri (>= 1.8.5) 43 | actionview (7.0.1) 44 | activesupport (= 7.0.1) 45 | builder (~> 3.1) 46 | erubi (~> 1.4) 47 | rails-dom-testing (~> 2.0) 48 | rails-html-sanitizer (~> 1.1, >= 1.2.0) 49 | activejob (7.0.1) 50 | activesupport (= 7.0.1) 51 | globalid (>= 0.3.6) 52 | activemodel (7.0.1) 53 | activesupport (= 7.0.1) 54 | activerecord (7.0.1) 55 | activemodel (= 7.0.1) 56 | activesupport (= 7.0.1) 57 | activestorage (7.0.1) 58 | actionpack (= 7.0.1) 59 | activejob (= 7.0.1) 60 | activerecord (= 7.0.1) 61 | activesupport (= 7.0.1) 62 | marcel (~> 1.0) 63 | mini_mime (>= 1.1.0) 64 | activesupport (7.0.1) 65 | concurrent-ruby (~> 1.0, >= 1.0.2) 66 | i18n (>= 1.6, < 2) 67 | minitest (>= 5.1) 68 | tzinfo (~> 2.0) 69 | bcrypt (3.1.16) 70 | bootsnap (1.9.4) 71 | msgpack (~> 1.0) 72 | builder (3.2.4) 73 | concurrent-ruby (1.1.9) 74 | crass (1.0.6) 75 | debug (1.4.0) 76 | irb (>= 1.3.6) 77 | reline (>= 0.2.7) 78 | devise (4.8.1) 79 | bcrypt (~> 3.0) 80 | orm_adapter (~> 0.1) 81 | railties (>= 4.1.0) 82 | responders 83 | warden (~> 1.2.3) 84 | devise-jwt (0.9.0) 85 | devise (~> 4.0) 86 | warden-jwt_auth (~> 0.6) 87 | digest (3.1.0) 88 | dry-auto_inject (0.8.0) 89 | dry-container (>= 0.3.4) 90 | dry-configurable (0.14.0) 91 | concurrent-ruby (~> 1.0) 92 | dry-core (~> 0.6) 93 | dry-container (0.9.0) 94 | concurrent-ruby (~> 1.0) 95 | dry-configurable (~> 0.13, >= 0.13.0) 96 | dry-core (0.7.1) 97 | concurrent-ruby (~> 1.0) 98 | erubi (1.10.0) 99 | globalid (1.0.0) 100 | activesupport (>= 5.0) 101 | i18n (1.8.11) 102 | concurrent-ruby (~> 1.0) 103 | io-console (0.5.11) 104 | io-wait (0.2.1) 105 | irb (1.4.1) 106 | reline (>= 0.3.0) 107 | jwt (2.3.0) 108 | loofah (2.13.0) 109 | crass (~> 1.0.2) 110 | nokogiri (>= 1.5.9) 111 | mail (2.7.1) 112 | mini_mime (>= 0.1.1) 113 | marcel (1.0.2) 114 | method_source (1.0.0) 115 | mini_mime (1.1.2) 116 | minitest (5.15.0) 117 | msgpack (1.4.2) 118 | net-imap (0.2.3) 119 | digest 120 | net-protocol 121 | strscan 122 | net-pop (0.1.1) 123 | digest 124 | net-protocol 125 | timeout 126 | net-protocol (0.1.2) 127 | io-wait 128 | timeout 129 | net-smtp (0.3.1) 130 | digest 131 | net-protocol 132 | timeout 133 | nio4r (2.5.8) 134 | nokogiri (1.13.1-x86_64-linux) 135 | racc (~> 1.4) 136 | orm_adapter (0.5.0) 137 | puma (5.5.2) 138 | nio4r (~> 2.0) 139 | racc (1.6.0) 140 | rack (2.2.3) 141 | rack-cors (1.1.1) 142 | rack (>= 2.0.0) 143 | rack-test (1.1.0) 144 | rack (>= 1.0, < 3) 145 | rails (7.0.1) 146 | actioncable (= 7.0.1) 147 | actionmailbox (= 7.0.1) 148 | actionmailer (= 7.0.1) 149 | actionpack (= 7.0.1) 150 | actiontext (= 7.0.1) 151 | actionview (= 7.0.1) 152 | activejob (= 7.0.1) 153 | activemodel (= 7.0.1) 154 | activerecord (= 7.0.1) 155 | activestorage (= 7.0.1) 156 | activesupport (= 7.0.1) 157 | bundler (>= 1.15.0) 158 | railties (= 7.0.1) 159 | rails-dom-testing (2.0.3) 160 | activesupport (>= 4.2.0) 161 | nokogiri (>= 1.6) 162 | rails-html-sanitizer (1.4.2) 163 | loofah (~> 2.3) 164 | railties (7.0.1) 165 | actionpack (= 7.0.1) 166 | activesupport (= 7.0.1) 167 | method_source 168 | rake (>= 12.2) 169 | thor (~> 1.0) 170 | zeitwerk (~> 2.5) 171 | rake (13.0.6) 172 | reline (0.3.1) 173 | io-console (~> 0.5) 174 | responders (3.0.1) 175 | actionpack (>= 5.0) 176 | railties (>= 5.0) 177 | sqlite3 (1.4.2) 178 | strscan (3.0.1) 179 | thor (1.2.1) 180 | timeout (0.2.0) 181 | tzinfo (2.0.4) 182 | concurrent-ruby (~> 1.0) 183 | warden (1.2.9) 184 | rack (>= 2.0.9) 185 | warden-jwt_auth (0.6.0) 186 | dry-auto_inject (~> 0.8) 187 | dry-configurable (~> 0.13) 188 | jwt (~> 2.1) 189 | warden (~> 1.2) 190 | websocket-driver (0.7.5) 191 | websocket-extensions (>= 0.1.0) 192 | websocket-extensions (0.1.5) 193 | zeitwerk (2.5.3) 194 | 195 | PLATFORMS 196 | x86_64-linux 197 | 198 | DEPENDENCIES 199 | bootsnap 200 | debug 201 | devise (~> 4.8) 202 | devise-jwt (~> 0.9.0) 203 | puma (~> 5.0) 204 | rack-cors (~> 1.1) 205 | rails (~> 7.0.1) 206 | sqlite3 (~> 1.4) 207 | tzinfo-data 208 | 209 | RUBY VERSION 210 | ruby 3.0.3p157 211 | 212 | BUNDLED WITH 213 | 2.2.32 214 | -------------------------------------------------------------------------------- /README.md: -------------------------------------------------------------------------------- 1 | # README 2 | 3 | This README would normally document whatever steps are necessary to get the 4 | application up and running. 5 | 6 | Things you may want to cover: 7 | 8 | * Ruby version 9 | 10 | * System dependencies 11 | 12 | * Configuration 13 | 14 | * Database creation 15 | 16 | * Database initialization 17 | 18 | * How to run the test suite 19 | 20 | * Services (job queues, cache servers, search engines, etc.) 21 | 22 | * Deployment instructions 23 | 24 | * ... 25 | -------------------------------------------------------------------------------- /Rakefile: -------------------------------------------------------------------------------- 1 | # Add your own tasks in files placed in lib/tasks ending in .rake, 2 | # for example lib/tasks/capistrano.rake, and they will automatically be available to Rake. 3 | 4 | require_relative "config/application" 5 | 6 | Rails.application.load_tasks 7 | -------------------------------------------------------------------------------- /app/channels/application_cable/channel.rb: -------------------------------------------------------------------------------- 1 | module ApplicationCable 2 | class Channel < ActionCable::Channel::Base 3 | end 4 | end 5 | -------------------------------------------------------------------------------- /app/channels/application_cable/connection.rb: -------------------------------------------------------------------------------- 1 | module ApplicationCable 2 | class Connection < ActionCable::Connection::Base 3 | end 4 | end 5 | -------------------------------------------------------------------------------- /app/controllers/application_controller.rb: -------------------------------------------------------------------------------- 1 | class ApplicationController < ActionController::API 2 | end 3 | -------------------------------------------------------------------------------- /app/controllers/concerns/.keep: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/Deanout/devise-vue-api/34d82b67b47361a06e302cd6e6779bce9c2a7464/app/controllers/concerns/.keep -------------------------------------------------------------------------------- /app/controllers/members_controller.rb: -------------------------------------------------------------------------------- 1 | # app/controllers/members_controller.rb 2 | class MembersController < ApplicationController 3 | before_action :authenticate_user! 4 | 5 | def show 6 | user = get_user_from_token 7 | render json: { 8 | message: "If you see this, you're in!", 9 | user: user 10 | } 11 | end 12 | 13 | private 14 | 15 | def get_user_from_token 16 | jwt_payload = JWT.decode(request.headers['Authorization'].split(' ')[1], 17 | Rails.application.credentials.devise[:jwt_secret_key]).first 18 | user_id = jwt_payload['sub'] 19 | User.find(user_id.to_s) 20 | end 21 | end 22 | -------------------------------------------------------------------------------- /app/controllers/users/registrations_controller.rb: -------------------------------------------------------------------------------- 1 | # app/controllers/users/registrations_controller.rb 2 | class Users::RegistrationsController < Devise::RegistrationsController 3 | respond_to :json 4 | 5 | private 6 | 7 | def respond_with(resource, _opts = {}) 8 | register_success && return if resource.persisted? 9 | 10 | register_failed 11 | end 12 | 13 | def register_success 14 | render json: { 15 | message: 'Signed up sucessfully.', 16 | user: current_user 17 | }, status: :ok 18 | end 19 | 20 | def register_failed 21 | render json: { message: 'Something went wrong.' }, status: :unprocessable_entity 22 | end 23 | end 24 | -------------------------------------------------------------------------------- /app/controllers/users/sessions_controller.rb: -------------------------------------------------------------------------------- 1 | # app/controllers/users/sessions_controller.rb 2 | class Users::SessionsController < Devise::SessionsController 3 | respond_to :json 4 | 5 | private 6 | 7 | def respond_with(_resource, _opts = {}) 8 | render json: { 9 | message: 'You are logged in.', 10 | user: current_user 11 | }, status: :ok 12 | end 13 | 14 | def respond_to_on_destroy 15 | log_out_success && return if current_user 16 | 17 | log_out_failure 18 | end 19 | 20 | def log_out_success 21 | render json: { message: 'You are logged out.' }, status: :ok 22 | end 23 | 24 | def log_out_failure 25 | render json: { message: 'Hmm nothing happened.' }, status: :unauthorized 26 | end 27 | end 28 | -------------------------------------------------------------------------------- /app/jobs/application_job.rb: -------------------------------------------------------------------------------- 1 | class ApplicationJob < ActiveJob::Base 2 | # Automatically retry jobs that encountered a deadlock 3 | # retry_on ActiveRecord::Deadlocked 4 | 5 | # Most jobs are safe to ignore if the underlying records are no longer available 6 | # discard_on ActiveJob::DeserializationError 7 | end 8 | -------------------------------------------------------------------------------- /app/mailers/application_mailer.rb: -------------------------------------------------------------------------------- 1 | class ApplicationMailer < ActionMailer::Base 2 | default from: "from@example.com" 3 | layout "mailer" 4 | end 5 | -------------------------------------------------------------------------------- /app/models/application_record.rb: -------------------------------------------------------------------------------- 1 | class ApplicationRecord < ActiveRecord::Base 2 | primary_abstract_class 3 | end 4 | -------------------------------------------------------------------------------- /app/models/concerns/.keep: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/Deanout/devise-vue-api/34d82b67b47361a06e302cd6e6779bce9c2a7464/app/models/concerns/.keep -------------------------------------------------------------------------------- /app/models/jwt_denylist.rb: -------------------------------------------------------------------------------- 1 | class JwtDenylist < ApplicationRecord 2 | include Devise::JWT::RevocationStrategies::Denylist 3 | 4 | self.table_name = 'jwt_denylist' 5 | end 6 | -------------------------------------------------------------------------------- /app/models/user.rb: -------------------------------------------------------------------------------- 1 | class User < ApplicationRecord 2 | # Include default devise modules. Others available are: 3 | # :confirmable, :lockable, :timeoutable, :trackable and :omniauthable 4 | devise :database_authenticatable, :registerable, 5 | :jwt_authenticatable, 6 | jwt_revocation_strategy: JwtDenylist 7 | end 8 | -------------------------------------------------------------------------------- /app/views/layouts/mailer.html.erb: -------------------------------------------------------------------------------- 1 | 2 | 3 |
4 | 5 | 8 | 9 | 10 | 11 | <%= yield %> 12 | 13 | 14 | -------------------------------------------------------------------------------- /app/views/layouts/mailer.text.erb: -------------------------------------------------------------------------------- 1 | <%= yield %> 2 | -------------------------------------------------------------------------------- /bin/bundle: -------------------------------------------------------------------------------- 1 | #!/usr/bin/env ruby 2 | # frozen_string_literal: true 3 | 4 | # 5 | # This file was generated by Bundler. 6 | # 7 | # The application 'bundle' is installed as part of a gem, and 8 | # this file is here to facilitate running it. 9 | # 10 | 11 | require "rubygems" 12 | 13 | m = Module.new do 14 | module_function 15 | 16 | def invoked_as_script? 17 | File.expand_path($0) == File.expand_path(__FILE__) 18 | end 19 | 20 | def env_var_version 21 | ENV["BUNDLER_VERSION"] 22 | end 23 | 24 | def cli_arg_version 25 | return unless invoked_as_script? # don't want to hijack other binstubs 26 | return unless "update".start_with?(ARGV.first || " ") # must be running `bundle update` 27 | bundler_version = nil 28 | update_index = nil 29 | ARGV.each_with_index do |a, i| 30 | if update_index && update_index.succ == i && a =~ Gem::Version::ANCHORED_VERSION_PATTERN 31 | bundler_version = a 32 | end 33 | next unless a =~ /\A--bundler(?:[= ](#{Gem::Version::VERSION_PATTERN}))?\z/ 34 | bundler_version = $1 35 | update_index = i 36 | end 37 | bundler_version 38 | end 39 | 40 | def gemfile 41 | gemfile = ENV["BUNDLE_GEMFILE"] 42 | return gemfile if gemfile && !gemfile.empty? 43 | 44 | File.expand_path("../../Gemfile", __FILE__) 45 | end 46 | 47 | def lockfile 48 | lockfile = 49 | case File.basename(gemfile) 50 | when "gems.rb" then gemfile.sub(/\.rb$/, gemfile) 51 | else "#{gemfile}.lock" 52 | end 53 | File.expand_path(lockfile) 54 | end 55 | 56 | def lockfile_version 57 | return unless File.file?(lockfile) 58 | lockfile_contents = File.read(lockfile) 59 | return unless lockfile_contents =~ /\n\nBUNDLED WITH\n\s{2,}(#{Gem::Version::VERSION_PATTERN})\n/ 60 | Regexp.last_match(1) 61 | end 62 | 63 | def bundler_requirement 64 | @bundler_requirement ||= 65 | env_var_version || cli_arg_version || 66 | bundler_requirement_for(lockfile_version) 67 | end 68 | 69 | def bundler_requirement_for(version) 70 | return "#{Gem::Requirement.default}.a" unless version 71 | 72 | bundler_gem_version = Gem::Version.new(version) 73 | 74 | requirement = bundler_gem_version.approximate_recommendation 75 | 76 | return requirement unless Gem::Version.new(Gem::VERSION) < Gem::Version.new("2.7.0") 77 | 78 | requirement += ".a" if bundler_gem_version.prerelease? 79 | 80 | requirement 81 | end 82 | 83 | def load_bundler! 84 | ENV["BUNDLE_GEMFILE"] ||= gemfile 85 | 86 | activate_bundler 87 | end 88 | 89 | def activate_bundler 90 | gem_error = activation_error_handling do 91 | gem "bundler", bundler_requirement 92 | end 93 | return if gem_error.nil? 94 | require_error = activation_error_handling do 95 | require "bundler/version" 96 | end 97 | return if require_error.nil? && Gem::Requirement.new(bundler_requirement).satisfied_by?(Gem::Version.new(Bundler::VERSION)) 98 | warn "Activating bundler (#{bundler_requirement}) failed:\n#{gem_error.message}\n\nTo install the version of bundler this project requires, run `gem install bundler -v '#{bundler_requirement}'`" 99 | exit 42 100 | end 101 | 102 | def activation_error_handling 103 | yield 104 | nil 105 | rescue StandardError, LoadError => e 106 | e 107 | end 108 | end 109 | 110 | m.load_bundler! 111 | 112 | if m.invoked_as_script? 113 | load Gem.bin_path("bundler", "bundle") 114 | end 115 | -------------------------------------------------------------------------------- /bin/rails: -------------------------------------------------------------------------------- 1 | #!/usr/bin/env ruby 2 | APP_PATH = File.expand_path("../config/application", __dir__) 3 | require_relative "../config/boot" 4 | require "rails/commands" 5 | -------------------------------------------------------------------------------- /bin/rake: -------------------------------------------------------------------------------- 1 | #!/usr/bin/env ruby 2 | require_relative "../config/boot" 3 | require "rake" 4 | Rake.application.run 5 | -------------------------------------------------------------------------------- /bin/setup: -------------------------------------------------------------------------------- 1 | #!/usr/bin/env ruby 2 | require "fileutils" 3 | 4 | # path to your application root. 5 | APP_ROOT = File.expand_path("..", __dir__) 6 | 7 | def system!(*args) 8 | system(*args) || abort("\n== Command #{args} failed ==") 9 | end 10 | 11 | FileUtils.chdir APP_ROOT do 12 | # This script is a way to set up or update your development environment automatically. 13 | # This script is idempotent, so that you can run it at any time and get an expectable outcome. 14 | # Add necessary setup steps to this file. 15 | 16 | puts "== Installing dependencies ==" 17 | system! "gem install bundler --conservative" 18 | system("bundle check") || system!("bundle install") 19 | 20 | # puts "\n== Copying sample files ==" 21 | # unless File.exist?("config/database.yml") 22 | # FileUtils.cp "config/database.yml.sample", "config/database.yml" 23 | # end 24 | 25 | puts "\n== Preparing database ==" 26 | system! "bin/rails db:prepare" 27 | 28 | puts "\n== Removing old logs and tempfiles ==" 29 | system! "bin/rails log:clear tmp:clear" 30 | 31 | puts "\n== Restarting application server ==" 32 | system! "bin/rails restart" 33 | end 34 | -------------------------------------------------------------------------------- /config.ru: -------------------------------------------------------------------------------- 1 | # This file is used by Rack-based servers to start the application. 2 | 3 | require_relative "config/environment" 4 | 5 | run Rails.application 6 | Rails.application.load_server 7 | -------------------------------------------------------------------------------- /config/application.rb: -------------------------------------------------------------------------------- 1 | require_relative 'boot' 2 | 3 | require 'rails/all' 4 | 5 | # Require the gems listed in Gemfile, including any gems 6 | # you've limited to :test, :development, or :production. 7 | Bundler.require(*Rails.groups) 8 | 9 | module DeviseVue 10 | class Application < Rails::Application 11 | # Initialize configuration defaults for originally generated Rails version. 12 | config.load_defaults 7.0 13 | 14 | # This also configures session_options for use below 15 | config.session_store :cookie_store, key: '_interslice_session' 16 | 17 | # Required for all session management (regardless of session_store) 18 | config.middleware.use ActionDispatch::Cookies 19 | 20 | config.middleware.use config.session_store, config.session_options 21 | 22 | # Configuration for the application, engines, and railties goes here. 23 | # 24 | # These settings can be overridden in specific environments using the files 25 | # in config/environments, which are processed later. 26 | # 27 | # config.time_zone = "Central Time (US & Canada)" 28 | # config.eager_load_paths << Rails.root.join("extras") 29 | 30 | # Only loads a smaller set of middleware suitable for API only apps. 31 | # Middleware like session, flash, cookies can be added back manually. 32 | # Skip views, helpers and assets when generating a new resource. 33 | config.api_only = true 34 | end 35 | end 36 | -------------------------------------------------------------------------------- /config/boot.rb: -------------------------------------------------------------------------------- 1 | ENV["BUNDLE_GEMFILE"] ||= File.expand_path("../Gemfile", __dir__) 2 | 3 | require "bundler/setup" # Set up gems listed in the Gemfile. 4 | require "bootsnap/setup" # Speed up boot time by caching expensive operations. 5 | -------------------------------------------------------------------------------- /config/cable.yml: -------------------------------------------------------------------------------- 1 | development: 2 | adapter: async 3 | 4 | test: 5 | adapter: test 6 | 7 | production: 8 | adapter: redis 9 | url: <%= ENV.fetch("REDIS_URL") { "redis://localhost:6379/1" } %> 10 | channel_prefix: devise_vue_production 11 | -------------------------------------------------------------------------------- /config/credentials.yml.enc: -------------------------------------------------------------------------------- 1 | VLjfZ9bz++04DGLu2YXG2DyK+1oadzVdfDzmYzYieHLHI21vvQh4PZRcfnxpD2u745/ZJZCuxj4Q2CEb+UkLtYE/2Zdu14pAKNWxBxxW9fNTnxCEpnavgnCFvOiYOML3Fs4ELJxEOwZZe+Vt+KaoUebS+i4Q2U+w62eDnT18b2o16BWRqjB77cyEbIDYladNQD+KB1JheWBLvB87uNOtM0l26L/7uw2WSknMpFGJMXp92ywoRDXocCkfdJijedumW9gqADJ+UTqatVes5kkokRNcGOVesORa/yqbPKpPNAjUVmDESkF/D1jwMx+RjAcTLiXkxVnW7uIpkIU5KaSHojLpd+xDGBtJQ5mNWv6gua4lAHg/6hEJqn79zLRqCtIo9Ulvr2kcY+UYh/586T2JtLqL89lk0aIx0cOA0mKa2I2XHiPP05gJWD/a1YLn7S0UPmXec8O/Ky+aEMkkh4UpMJr3QTAtTHbE1qDcDNGWRASjB5i6GMy4vFGZbEeuXamCvK9T0CzvnnY26i/w93wNdmRX226DmmDcDS+/wX8xMidlID+JHpKW+jFTfmfcIp4Kn9IMTW9E0TGnHUawEdYJ/g2/TDI3YsHKqTs5q5fBb5g=--obKF2pETPJrqVCE3--GdN5VMwqRNwjtUbhp26VpA== -------------------------------------------------------------------------------- /config/database.yml: -------------------------------------------------------------------------------- 1 | # SQLite. Versions 3.8.0 and up are supported. 2 | # gem install sqlite3 3 | # 4 | # Ensure the SQLite 3 gem is defined in your Gemfile 5 | # gem "sqlite3" 6 | # 7 | default: &default 8 | adapter: sqlite3 9 | pool: <%= ENV.fetch("RAILS_MAX_THREADS") { 5 } %> 10 | timeout: 5000 11 | 12 | development: 13 | <<: *default 14 | database: db/development.sqlite3 15 | 16 | # Warning: The database defined as "test" will be erased and 17 | # re-generated from your development database when you run "rake". 18 | # Do not set this db to the same as development or production. 19 | test: 20 | <<: *default 21 | database: db/test.sqlite3 22 | 23 | production: 24 | <<: *default 25 | database: db/production.sqlite3 26 | -------------------------------------------------------------------------------- /config/environment.rb: -------------------------------------------------------------------------------- 1 | # Load the Rails application. 2 | require_relative "application" 3 | 4 | # Initialize the Rails application. 5 | Rails.application.initialize! 6 | -------------------------------------------------------------------------------- /config/environments/development.rb: -------------------------------------------------------------------------------- 1 | require "active_support/core_ext/integer/time" 2 | 3 | Rails.application.configure do 4 | # Settings specified here will take precedence over those in config/application.rb. 5 | 6 | # In the development environment your application's code is reloaded any time 7 | # it changes. This slows down response time but is perfect for development 8 | # since you don't have to restart the web server when you make code changes. 9 | config.cache_classes = false 10 | 11 | # Do not eager load code on boot. 12 | config.eager_load = false 13 | 14 | # Show full error reports. 15 | config.consider_all_requests_local = true 16 | 17 | # Enable server timing 18 | config.server_timing = true 19 | 20 | # Enable/disable caching. By default caching is disabled. 21 | # Run rails dev:cache to toggle caching. 22 | if Rails.root.join("tmp/caching-dev.txt").exist? 23 | config.cache_store = :memory_store 24 | config.public_file_server.headers = { 25 | "Cache-Control" => "public, max-age=#{2.days.to_i}" 26 | } 27 | else 28 | config.action_controller.perform_caching = false 29 | 30 | config.cache_store = :null_store 31 | end 32 | 33 | # Store uploaded files on the local file system (see config/storage.yml for options). 34 | config.active_storage.service = :local 35 | 36 | # Don't care if the mailer can't send. 37 | config.action_mailer.raise_delivery_errors = false 38 | 39 | config.action_mailer.perform_caching = false 40 | 41 | # Print deprecation notices to the Rails logger. 42 | config.active_support.deprecation = :log 43 | 44 | # Raise exceptions for disallowed deprecations. 45 | config.active_support.disallowed_deprecation = :raise 46 | 47 | # Tell Active Support which deprecation messages to disallow. 48 | config.active_support.disallowed_deprecation_warnings = [] 49 | 50 | # Raise an error on page load if there are pending migrations. 51 | config.active_record.migration_error = :page_load 52 | 53 | # Highlight code that triggered database queries in logs. 54 | config.active_record.verbose_query_logs = true 55 | 56 | 57 | # Raises error for missing translations. 58 | # config.i18n.raise_on_missing_translations = true 59 | 60 | # Annotate rendered view with file names. 61 | # config.action_view.annotate_rendered_view_with_filenames = true 62 | 63 | # Uncomment if you wish to allow Action Cable access from any origin. 64 | # config.action_cable.disable_request_forgery_protection = true 65 | end 66 | -------------------------------------------------------------------------------- /config/environments/production.rb: -------------------------------------------------------------------------------- 1 | require "active_support/core_ext/integer/time" 2 | 3 | Rails.application.configure do 4 | # Settings specified here will take precedence over those in config/application.rb. 5 | 6 | # Code is not reloaded between requests. 7 | config.cache_classes = true 8 | 9 | # Eager load code on boot. This eager loads most of Rails and 10 | # your application in memory, allowing both threaded web servers 11 | # and those relying on copy on write to perform better. 12 | # Rake tasks automatically ignore this option for performance. 13 | config.eager_load = true 14 | 15 | # Full error reports are disabled and caching is turned on. 16 | config.consider_all_requests_local = false 17 | 18 | # Ensures that a master key has been made available in either ENV["RAILS_MASTER_KEY"] 19 | # or in config/master.key. This key is used to decrypt credentials (and other encrypted files). 20 | # config.require_master_key = true 21 | 22 | # Disable serving static files from the `/public` folder by default since 23 | # Apache or NGINX already handles this. 24 | config.public_file_server.enabled = ENV["RAILS_SERVE_STATIC_FILES"].present? 25 | 26 | # Enable serving of images, stylesheets, and JavaScripts from an asset server. 27 | # config.asset_host = "http://assets.example.com" 28 | 29 | # Specifies the header that your server uses for sending files. 30 | # config.action_dispatch.x_sendfile_header = "X-Sendfile" # for Apache 31 | # config.action_dispatch.x_sendfile_header = "X-Accel-Redirect" # for NGINX 32 | 33 | # Store uploaded files on the local file system (see config/storage.yml for options). 34 | config.active_storage.service = :local 35 | 36 | # Mount Action Cable outside main process or domain. 37 | # config.action_cable.mount_path = nil 38 | # config.action_cable.url = "wss://example.com/cable" 39 | # config.action_cable.allowed_request_origins = [ "http://example.com", /http:\/\/example.*/ ] 40 | 41 | # Force all access to the app over SSL, use Strict-Transport-Security, and use secure cookies. 42 | # config.force_ssl = true 43 | 44 | # Include generic and useful information about system operation, but avoid logging too much 45 | # information to avoid inadvertent exposure of personally identifiable information (PII). 46 | config.log_level = :info 47 | 48 | # Prepend all log lines with the following tags. 49 | config.log_tags = [ :request_id ] 50 | 51 | # Use a different cache store in production. 52 | # config.cache_store = :mem_cache_store 53 | 54 | # Use a real queuing backend for Active Job (and separate queues per environment). 55 | # config.active_job.queue_adapter = :resque 56 | # config.active_job.queue_name_prefix = "devise_vue_production" 57 | 58 | config.action_mailer.perform_caching = false 59 | 60 | # Ignore bad email addresses and do not raise email delivery errors. 61 | # Set this to true and configure the email server for immediate delivery to raise delivery errors. 62 | # config.action_mailer.raise_delivery_errors = false 63 | 64 | # Enable locale fallbacks for I18n (makes lookups for any locale fall back to 65 | # the I18n.default_locale when a translation cannot be found). 66 | config.i18n.fallbacks = true 67 | 68 | # Don't log any deprecations. 69 | config.active_support.report_deprecations = false 70 | 71 | # Use default logging formatter so that PID and timestamp are not suppressed. 72 | config.log_formatter = ::Logger::Formatter.new 73 | 74 | # Use a different logger for distributed setups. 75 | # require "syslog/logger" 76 | # config.logger = ActiveSupport::TaggedLogging.new(Syslog::Logger.new "app-name") 77 | 78 | if ENV["RAILS_LOG_TO_STDOUT"].present? 79 | logger = ActiveSupport::Logger.new(STDOUT) 80 | logger.formatter = config.log_formatter 81 | config.logger = ActiveSupport::TaggedLogging.new(logger) 82 | end 83 | 84 | # Do not dump schema after migrations. 85 | config.active_record.dump_schema_after_migration = false 86 | end 87 | -------------------------------------------------------------------------------- /config/environments/test.rb: -------------------------------------------------------------------------------- 1 | require "active_support/core_ext/integer/time" 2 | 3 | # The test environment is used exclusively to run your application's 4 | # test suite. You never need to work with it otherwise. Remember that 5 | # your test database is "scratch space" for the test suite and is wiped 6 | # and recreated between test runs. Don't rely on the data there! 7 | 8 | Rails.application.configure do 9 | # Settings specified here will take precedence over those in config/application.rb. 10 | 11 | # Turn false under Spring and add config.action_view.cache_template_loading = true. 12 | config.cache_classes = true 13 | 14 | # Eager loading loads your whole application. When running a single test locally, 15 | # this probably isn't necessary. It's a good idea to do in a continuous integration 16 | # system, or in some way before deploying your code. 17 | config.eager_load = ENV["CI"].present? 18 | 19 | # Configure public file server for tests with Cache-Control for performance. 20 | config.public_file_server.enabled = true 21 | config.public_file_server.headers = { 22 | "Cache-Control" => "public, max-age=#{1.hour.to_i}" 23 | } 24 | 25 | # Show full error reports and disable caching. 26 | config.consider_all_requests_local = true 27 | config.action_controller.perform_caching = false 28 | config.cache_store = :null_store 29 | 30 | # Raise exceptions instead of rendering exception templates. 31 | config.action_dispatch.show_exceptions = false 32 | 33 | # Disable request forgery protection in test environment. 34 | config.action_controller.allow_forgery_protection = false 35 | 36 | # Store uploaded files on the local file system in a temporary directory. 37 | config.active_storage.service = :test 38 | 39 | config.action_mailer.perform_caching = false 40 | 41 | # Tell Action Mailer not to deliver emails to the real world. 42 | # The :test delivery method accumulates sent emails in the 43 | # ActionMailer::Base.deliveries array. 44 | config.action_mailer.delivery_method = :test 45 | 46 | # Print deprecation notices to the stderr. 47 | config.active_support.deprecation = :stderr 48 | 49 | # Raise exceptions for disallowed deprecations. 50 | config.active_support.disallowed_deprecation = :raise 51 | 52 | # Tell Active Support which deprecation messages to disallow. 53 | config.active_support.disallowed_deprecation_warnings = [] 54 | 55 | # Raises error for missing translations. 56 | # config.i18n.raise_on_missing_translations = true 57 | 58 | # Annotate rendered view with file names. 59 | # config.action_view.annotate_rendered_view_with_filenames = true 60 | end 61 | -------------------------------------------------------------------------------- /config/initializers/cors.rb: -------------------------------------------------------------------------------- 1 | # Be sure to restart your server when you modify this file. 2 | 3 | # Avoid CORS issues when API is called from the frontend app. 4 | # Handle Cross-Origin Resource Sharing (CORS) in order to accept cross-origin AJAX requests. 5 | 6 | # Read more: https://github.com/cyu/rack-cors 7 | 8 | Rails.application.config.middleware.insert_before 0, Rack::Cors do 9 | allow do 10 | origins '*' 11 | 12 | resource '*', 13 | headers: :any, 14 | methods: %i[get post put patch delete options head], 15 | expose: %w[Authorization Uid] 16 | end 17 | end 18 | -------------------------------------------------------------------------------- /config/initializers/devise.rb: -------------------------------------------------------------------------------- 1 | # frozen_string_literal: true 2 | 3 | # Assuming you have not yet modified this file, each configuration option below 4 | # is set to its default value. Note that some are commented out while others 5 | # are not: uncommented lines are intended to protect your configuration from 6 | # breaking changes in upgrades (i.e., in the event that future versions of 7 | # Devise change the default values for those options). 8 | # 9 | # Use this hook to configure devise mailer, warden hooks and so forth. 10 | # Many of these configuration options can be set straight in your model. 11 | Devise.setup do |config| 12 | # The secret key used by Devise. Devise uses this key to generate 13 | # random tokens. Changing this key will render invalid all existing 14 | # confirmation, reset password and unlock tokens in the database. 15 | # Devise will use the `secret_key_base` as its `secret_key` 16 | # by default. You can change it below and use your own secret key. 17 | # config.secret_key = '9adf0169e7d6cfa7569499c6740142b8dd69553f8d9d47106daedecbf0de56d5b42cc3ccbf68a9d13e05c7738e6da4294b504dd66bff09f9a3cdae00b04b749b' 18 | config.jwt do |jwt| 19 | jwt.secret = Rails.application.credentials.devise[:jwt_secret_key] 20 | end 21 | # ==> Controller configuration 22 | # Configure the parent class to the devise controllers. 23 | # config.parent_controller = 'DeviseController' 24 | 25 | # ==> Mailer Configuration 26 | # Configure the e-mail address which will be shown in Devise::Mailer, 27 | # note that it will be overwritten if you use your own mailer class 28 | # with default "from" parameter. 29 | config.mailer_sender = 'please-change-me-at-config-initializers-devise@example.com' 30 | 31 | # Configure the class responsible to send e-mails. 32 | # config.mailer = 'Devise::Mailer' 33 | 34 | # Configure the parent class responsible to send e-mails. 35 | # config.parent_mailer = 'ActionMailer::Base' 36 | 37 | # ==> ORM configuration 38 | # Load and configure the ORM. Supports :active_record (default) and 39 | # :mongoid (bson_ext recommended) by default. Other ORMs may be 40 | # available as additional gems. 41 | require 'devise/orm/active_record' 42 | 43 | # ==> Configuration for any authentication mechanism 44 | # Configure which keys are used when authenticating a user. The default is 45 | # just :email. You can configure it to use [:username, :subdomain], so for 46 | # authenticating a user, both parameters are required. Remember that those 47 | # parameters are used only when authenticating and not when retrieving from 48 | # session. If you need permissions, you should implement that in a before filter. 49 | # You can also supply a hash where the value is a boolean determining whether 50 | # or not authentication should be aborted when the value is not present. 51 | # config.authentication_keys = [:email] 52 | 53 | # Configure parameters from the request object used for authentication. Each entry 54 | # given should be a request method and it will automatically be passed to the 55 | # find_for_authentication method and considered in your model lookup. For instance, 56 | # if you set :request_keys to [:subdomain], :subdomain will be used on authentication. 57 | # The same considerations mentioned for authentication_keys also apply to request_keys. 58 | # config.request_keys = [] 59 | 60 | # Configure which authentication keys should be case-insensitive. 61 | # These keys will be downcased upon creating or modifying a user and when used 62 | # to authenticate or find a user. Default is :email. 63 | config.case_insensitive_keys = [:email] 64 | 65 | # Configure which authentication keys should have whitespace stripped. 66 | # These keys will have whitespace before and after removed upon creating or 67 | # modifying a user and when used to authenticate or find a user. Default is :email. 68 | config.strip_whitespace_keys = [:email] 69 | 70 | # Tell if authentication through request.params is enabled. True by default. 71 | # It can be set to an array that will enable params authentication only for the 72 | # given strategies, for example, `config.params_authenticatable = [:database]` will 73 | # enable it only for database (email + password) authentication. 74 | # config.params_authenticatable = true 75 | 76 | # Tell if authentication through HTTP Auth is enabled. False by default. 77 | # It can be set to an array that will enable http authentication only for the 78 | # given strategies, for example, `config.http_authenticatable = [:database]` will 79 | # enable it only for database authentication. 80 | # For API-only applications to support authentication "out-of-the-box", you will likely want to 81 | # enable this with :database unless you are using a custom strategy. 82 | # The supported strategies are: 83 | # :database = Support basic authentication with authentication key + password 84 | # config.http_authenticatable = false 85 | 86 | # If 401 status code should be returned for AJAX requests. True by default. 87 | # config.http_authenticatable_on_xhr = true 88 | 89 | # The realm used in Http Basic Authentication. 'Application' by default. 90 | # config.http_authentication_realm = 'Application' 91 | 92 | # It will change confirmation, password recovery and other workflows 93 | # to behave the same regardless if the e-mail provided was right or wrong. 94 | # Does not affect registerable. 95 | # config.paranoid = true 96 | 97 | # By default Devise will store the user in session. You can skip storage for 98 | # particular strategies by setting this option. 99 | # Notice that if you are skipping storage for all authentication paths, you 100 | # may want to disable generating routes to Devise's sessions controller by 101 | # passing skip: :sessions to `devise_for` in your config/routes.rb 102 | config.skip_session_storage = [:http_auth] 103 | 104 | # By default, Devise cleans up the CSRF token on authentication to 105 | # avoid CSRF token fixation attacks. This means that, when using AJAX 106 | # requests for sign in and sign up, you need to get a new CSRF token 107 | # from the server. You can disable this option at your own risk. 108 | # config.clean_up_csrf_token_on_authentication = true 109 | 110 | # When false, Devise will not attempt to reload routes on eager load. 111 | # This can reduce the time taken to boot the app but if your application 112 | # requires the Devise mappings to be loaded during boot time the application 113 | # won't boot properly. 114 | # config.reload_routes = true 115 | 116 | # ==> Configuration for :database_authenticatable 117 | # For bcrypt, this is the cost for hashing the password and defaults to 12. If 118 | # using other algorithms, it sets how many times you want the password to be hashed. 119 | # The number of stretches used for generating the hashed password are stored 120 | # with the hashed password. This allows you to change the stretches without 121 | # invalidating existing passwords. 122 | # 123 | # Limiting the stretches to just one in testing will increase the performance of 124 | # your test suite dramatically. However, it is STRONGLY RECOMMENDED to not use 125 | # a value less than 10 in other environments. Note that, for bcrypt (the default 126 | # algorithm), the cost increases exponentially with the number of stretches (e.g. 127 | # a value of 20 is already extremely slow: approx. 60 seconds for 1 calculation). 128 | config.stretches = Rails.env.test? ? 1 : 12 129 | 130 | # Set up a pepper to generate the hashed password. 131 | # config.pepper = '59abfbc91fa772838f12ac8a9926e842cda6afcdfc27e6380f47c9229a2f6b36872918707a5b89105860d730e86b625db97d2343049c3e737e3ce3ce1fa4e6a2' 132 | 133 | # Send a notification to the original email when the user's email is changed. 134 | # config.send_email_changed_notification = false 135 | 136 | # Send a notification email when the user's password is changed. 137 | # config.send_password_change_notification = false 138 | 139 | # ==> Configuration for :confirmable 140 | # A period that the user is allowed to access the website even without 141 | # confirming their account. For instance, if set to 2.days, the user will be 142 | # able to access the website for two days without confirming their account, 143 | # access will be blocked just in the third day. 144 | # You can also set it to nil, which will allow the user to access the website 145 | # without confirming their account. 146 | # Default is 0.days, meaning the user cannot access the website without 147 | # confirming their account. 148 | # config.allow_unconfirmed_access_for = 2.days 149 | 150 | # A period that the user is allowed to confirm their account before their 151 | # token becomes invalid. For example, if set to 3.days, the user can confirm 152 | # their account within 3 days after the mail was sent, but on the fourth day 153 | # their account can't be confirmed with the token any more. 154 | # Default is nil, meaning there is no restriction on how long a user can take 155 | # before confirming their account. 156 | # config.confirm_within = 3.days 157 | 158 | # If true, requires any email changes to be confirmed (exactly the same way as 159 | # initial account confirmation) to be applied. Requires additional unconfirmed_email 160 | # db field (see migrations). Until confirmed, new email is stored in 161 | # unconfirmed_email column, and copied to email column on successful confirmation. 162 | config.reconfirmable = true 163 | 164 | # Defines which key will be used when confirming an account 165 | # config.confirmation_keys = [:email] 166 | 167 | # ==> Configuration for :rememberable 168 | # The time the user will be remembered without asking for credentials again. 169 | # config.remember_for = 2.weeks 170 | 171 | # Invalidates all the remember me tokens when the user signs out. 172 | config.expire_all_remember_me_on_sign_out = true 173 | 174 | # If true, extends the user's remember period when remembered via cookie. 175 | # config.extend_remember_period = false 176 | 177 | # Options to be passed to the created cookie. For instance, you can set 178 | # secure: true in order to force SSL only cookies. 179 | # config.rememberable_options = {} 180 | 181 | # ==> Configuration for :validatable 182 | # Range for password length. 183 | config.password_length = 6..128 184 | 185 | # Email regex used to validate email formats. It simply asserts that 186 | # one (and only one) @ exists in the given string. This is mainly 187 | # to give user feedback and not to assert the e-mail validity. 188 | config.email_regexp = /\A[^@\s]+@[^@\s]+\z/ 189 | 190 | # ==> Configuration for :timeoutable 191 | # The time you want to timeout the user session without activity. After this 192 | # time the user will be asked for credentials again. Default is 30 minutes. 193 | # config.timeout_in = 30.minutes 194 | 195 | # ==> Configuration for :lockable 196 | # Defines which strategy will be used to lock an account. 197 | # :failed_attempts = Locks an account after a number of failed attempts to sign in. 198 | # :none = No lock strategy. You should handle locking by yourself. 199 | # config.lock_strategy = :failed_attempts 200 | 201 | # Defines which key will be used when locking and unlocking an account 202 | # config.unlock_keys = [:email] 203 | 204 | # Defines which strategy will be used to unlock an account. 205 | # :email = Sends an unlock link to the user email 206 | # :time = Re-enables login after a certain amount of time (see :unlock_in below) 207 | # :both = Enables both strategies 208 | # :none = No unlock strategy. You should handle unlocking by yourself. 209 | # config.unlock_strategy = :both 210 | 211 | # Number of authentication tries before locking an account if lock_strategy 212 | # is failed attempts. 213 | # config.maximum_attempts = 20 214 | 215 | # Time interval to unlock the account if :time is enabled as unlock_strategy. 216 | # config.unlock_in = 1.hour 217 | 218 | # Warn on the last attempt before the account is locked. 219 | # config.last_attempt_warning = true 220 | 221 | # ==> Configuration for :recoverable 222 | # 223 | # Defines which key will be used when recovering the password for an account 224 | # config.reset_password_keys = [:email] 225 | 226 | # Time interval you can reset your password with a reset password key. 227 | # Don't put a too small interval or your users won't have the time to 228 | # change their passwords. 229 | config.reset_password_within = 6.hours 230 | 231 | # When set to false, does not sign a user in automatically after their password is 232 | # reset. Defaults to true, so a user is signed in automatically after a reset. 233 | # config.sign_in_after_reset_password = true 234 | 235 | # ==> Configuration for :encryptable 236 | # Allow you to use another hashing or encryption algorithm besides bcrypt (default). 237 | # You can use :sha1, :sha512 or algorithms from others authentication tools as 238 | # :clearance_sha1, :authlogic_sha512 (then you should set stretches above to 20 239 | # for default behavior) and :restful_authentication_sha1 (then you should set 240 | # stretches to 10, and copy REST_AUTH_SITE_KEY to pepper). 241 | # 242 | # Require the `devise-encryptable` gem when using anything other than bcrypt 243 | # config.encryptor = :sha512 244 | 245 | # ==> Scopes configuration 246 | # Turn scoped views on. Before rendering "sessions/new", it will first check for 247 | # "users/sessions/new". It's turned off by default because it's slower if you 248 | # are using only default views. 249 | # config.scoped_views = false 250 | 251 | # Configure the default scope given to Warden. By default it's the first 252 | # devise role declared in your routes (usually :user). 253 | # config.default_scope = :user 254 | 255 | # Set this configuration to false if you want /users/sign_out to sign out 256 | # only the current scope. By default, Devise signs out all scopes. 257 | # config.sign_out_all_scopes = true 258 | 259 | # ==> Navigation configuration 260 | # Lists the formats that should be treated as navigational. Formats like 261 | # :html, should redirect to the sign in page when the user does not have 262 | # access, but formats like :xml or :json, should return 401. 263 | # 264 | # If you have any extra navigational formats, like :iphone or :mobile, you 265 | # should add them to the navigational formats lists. 266 | # 267 | # The "*/*" below is required to match Internet Explorer requests. 268 | # config.navigational_formats = ['*/*', :html] 269 | 270 | # The default HTTP method used to sign out a resource. Default is :delete. 271 | config.sign_out_via = :delete 272 | 273 | # ==> OmniAuth 274 | # Add a new OmniAuth provider. Check the wiki for more information on setting 275 | # up on your models and hooks. 276 | # config.omniauth :github, 'APP_ID', 'APP_SECRET', scope: 'user,public_repo' 277 | 278 | # ==> Warden configuration 279 | # If you want to use other strategies, that are not supported by Devise, or 280 | # change the failure app, you can configure them inside the config.warden block. 281 | # 282 | # config.warden do |manager| 283 | # manager.intercept_401 = false 284 | # manager.default_strategies(scope: :user).unshift :some_external_strategy 285 | # end 286 | 287 | # ==> Mountable engine configurations 288 | # When using Devise inside an engine, let's call it `MyEngine`, and this engine 289 | # is mountable, there are some extra configurations to be taken into account. 290 | # The following options are available, assuming the engine is mounted as: 291 | # 292 | # mount MyEngine, at: '/my_engine' 293 | # 294 | # The router that invoked `devise_for`, in the example above, would be: 295 | # config.router_name = :my_engine 296 | # 297 | # When using OmniAuth, Devise cannot automatically set OmniAuth path, 298 | # so you need to do it manually. For the users scope, it would be: 299 | # config.omniauth_path_prefix = '/my_engine/users/auth' 300 | 301 | # ==> Turbolinks configuration 302 | # If your app is using Turbolinks, Turbolinks::Controller needs to be included to make redirection work correctly: 303 | # 304 | # ActiveSupport.on_load(:devise_failure_app) do 305 | # include Turbolinks::Controller 306 | # end 307 | 308 | # ==> Configuration for :registerable 309 | 310 | # When set to false, does not sign a user in automatically after their password is 311 | # changed. Defaults to true, so a user is signed in automatically after changing a password. 312 | # config.sign_in_after_change_password = true 313 | end 314 | -------------------------------------------------------------------------------- /config/initializers/filter_parameter_logging.rb: -------------------------------------------------------------------------------- 1 | # Be sure to restart your server when you modify this file. 2 | 3 | # Configure sensitive parameters which will be filtered from the log file. 4 | Rails.application.config.filter_parameters += [ 5 | :passw, :secret, :token, :_key, :crypt, :salt, :certificate, :otp, :ssn 6 | ] 7 | -------------------------------------------------------------------------------- /config/initializers/inflections.rb: -------------------------------------------------------------------------------- 1 | # Be sure to restart your server when you modify this file. 2 | 3 | # Add new inflection rules using the following format. Inflections 4 | # are locale specific, and you may define rules for as many different 5 | # locales as you wish. All of these examples are active by default: 6 | # ActiveSupport::Inflector.inflections(:en) do |inflect| 7 | # inflect.plural /^(ox)$/i, "\\1en" 8 | # inflect.singular /^(ox)en/i, "\\1" 9 | # inflect.irregular "person", "people" 10 | # inflect.uncountable %w( fish sheep ) 11 | # end 12 | 13 | # These inflection rules are supported but not enabled by default: 14 | # ActiveSupport::Inflector.inflections(:en) do |inflect| 15 | # inflect.acronym "RESTful" 16 | # end 17 | -------------------------------------------------------------------------------- /config/locales/devise.en.yml: -------------------------------------------------------------------------------- 1 | # Additional translations at https://github.com/heartcombo/devise/wiki/I18n 2 | 3 | en: 4 | devise: 5 | confirmations: 6 | confirmed: "Your email address has been successfully confirmed." 7 | send_instructions: "You will receive an email with instructions for how to confirm your email address in a few minutes." 8 | send_paranoid_instructions: "If your email address exists in our database, you will receive an email with instructions for how to confirm your email address in a few minutes." 9 | failure: 10 | already_authenticated: "You are already signed in." 11 | inactive: "Your account is not activated yet." 12 | invalid: "Invalid %{authentication_keys} or password." 13 | locked: "Your account is locked." 14 | last_attempt: "You have one more attempt before your account is locked." 15 | not_found_in_database: "Invalid %{authentication_keys} or password." 16 | timeout: "Your session expired. Please sign in again to continue." 17 | unauthenticated: "You need to sign in or sign up before continuing." 18 | unconfirmed: "You have to confirm your email address before continuing." 19 | mailer: 20 | confirmation_instructions: 21 | subject: "Confirmation instructions" 22 | reset_password_instructions: 23 | subject: "Reset password instructions" 24 | unlock_instructions: 25 | subject: "Unlock instructions" 26 | email_changed: 27 | subject: "Email Changed" 28 | password_change: 29 | subject: "Password Changed" 30 | omniauth_callbacks: 31 | failure: "Could not authenticate you from %{kind} because \"%{reason}\"." 32 | success: "Successfully authenticated from %{kind} account." 33 | passwords: 34 | no_token: "You can't access this page without coming from a password reset email. If you do come from a password reset email, please make sure you used the full URL provided." 35 | send_instructions: "You will receive an email with instructions on how to reset your password in a few minutes." 36 | send_paranoid_instructions: "If your email address exists in our database, you will receive a password recovery link at your email address in a few minutes." 37 | updated: "Your password has been changed successfully. You are now signed in." 38 | updated_not_active: "Your password has been changed successfully." 39 | registrations: 40 | destroyed: "Bye! Your account has been successfully cancelled. We hope to see you again soon." 41 | signed_up: "Welcome! You have signed up successfully." 42 | signed_up_but_inactive: "You have signed up successfully. However, we could not sign you in because your account is not yet activated." 43 | signed_up_but_locked: "You have signed up successfully. However, we could not sign you in because your account is locked." 44 | signed_up_but_unconfirmed: "A message with a confirmation link has been sent to your email address. Please follow the link to activate your account." 45 | update_needs_confirmation: "You updated your account successfully, but we need to verify your new email address. Please check your email and follow the confirmation link to confirm your new email address." 46 | updated: "Your account has been updated successfully." 47 | updated_but_not_signed_in: "Your account has been updated successfully, but since your password was changed, you need to sign in again." 48 | sessions: 49 | signed_in: "Signed in successfully." 50 | signed_out: "Signed out successfully." 51 | already_signed_out: "Signed out successfully." 52 | unlocks: 53 | send_instructions: "You will receive an email with instructions for how to unlock your account in a few minutes." 54 | send_paranoid_instructions: "If your account exists, you will receive an email with instructions for how to unlock it in a few minutes." 55 | unlocked: "Your account has been unlocked successfully. Please sign in to continue." 56 | errors: 57 | messages: 58 | already_confirmed: "was already confirmed, please try signing in" 59 | confirmation_period_expired: "needs to be confirmed within %{period}, please request a new one" 60 | expired: "has expired, please request a new one" 61 | not_found: "not found" 62 | not_locked: "was not locked" 63 | not_saved: 64 | one: "1 error prohibited this %{resource} from being saved:" 65 | other: "%{count} errors prohibited this %{resource} from being saved:" 66 | -------------------------------------------------------------------------------- /config/locales/en.yml: -------------------------------------------------------------------------------- 1 | # Files in the config/locales directory are used for internationalization 2 | # and are automatically loaded by Rails. If you want to use locales other 3 | # than English, add the necessary files in this directory. 4 | # 5 | # To use the locales, use `I18n.t`: 6 | # 7 | # I18n.t "hello" 8 | # 9 | # In views, this is aliased to just `t`: 10 | # 11 | # <%= t("hello") %> 12 | # 13 | # To use a different locale, set it with `I18n.locale`: 14 | # 15 | # I18n.locale = :es 16 | # 17 | # This would use the information in config/locales/es.yml. 18 | # 19 | # The following keys must be escaped otherwise they will not be retrieved by 20 | # the default I18n backend: 21 | # 22 | # true, false, on, off, yes, no 23 | # 24 | # Instead, surround them with single quotes. 25 | # 26 | # en: 27 | # "true": "foo" 28 | # 29 | # To learn more, please read the Rails Internationalization guide 30 | # available at https://guides.rubyonrails.org/i18n.html. 31 | 32 | en: 33 | hello: "Hello world" 34 | -------------------------------------------------------------------------------- /config/puma.rb: -------------------------------------------------------------------------------- 1 | # Puma can serve each request in a thread from an internal thread pool. 2 | # The `threads` method setting takes two numbers: a minimum and maximum. 3 | # Any libraries that use thread pools should be configured to match 4 | # the maximum value specified for Puma. Default is set to 5 threads for minimum 5 | # and maximum; this matches the default thread size of Active Record. 6 | # 7 | max_threads_count = ENV.fetch("RAILS_MAX_THREADS") { 5 } 8 | min_threads_count = ENV.fetch("RAILS_MIN_THREADS") { max_threads_count } 9 | threads min_threads_count, max_threads_count 10 | 11 | # Specifies the `worker_timeout` threshold that Puma will use to wait before 12 | # terminating a worker in development environments. 13 | # 14 | worker_timeout 3600 if ENV.fetch("RAILS_ENV", "development") == "development" 15 | 16 | # Specifies the `port` that Puma will listen on to receive requests; default is 3000. 17 | # 18 | port ENV.fetch("PORT") { 3000 } 19 | 20 | # Specifies the `environment` that Puma will run in. 21 | # 22 | environment ENV.fetch("RAILS_ENV") { "development" } 23 | 24 | # Specifies the `pidfile` that Puma will use. 25 | pidfile ENV.fetch("PIDFILE") { "tmp/pids/server.pid" } 26 | 27 | # Specifies the number of `workers` to boot in clustered mode. 28 | # Workers are forked web server processes. If using threads and workers together 29 | # the concurrency of the application would be max `threads` * `workers`. 30 | # Workers do not work on JRuby or Windows (both of which do not support 31 | # processes). 32 | # 33 | # workers ENV.fetch("WEB_CONCURRENCY") { 2 } 34 | 35 | # Use the `preload_app!` method when specifying a `workers` number. 36 | # This directive tells Puma to first boot the application and load code 37 | # before forking the application. This takes advantage of Copy On Write 38 | # process behavior so workers use less memory. 39 | # 40 | # preload_app! 41 | 42 | # Allow puma to be restarted by `bin/rails restart` command. 43 | plugin :tmp_restart 44 | -------------------------------------------------------------------------------- /config/routes.rb: -------------------------------------------------------------------------------- 1 | Rails.application.routes.draw do 2 | devise_for :users, 3 | controllers: { 4 | sessions: 'users/sessions', 5 | registrations: 'users/registrations' 6 | } 7 | get '/member-data', to: 'members#show' 8 | # Define your application routes per the DSL in https://guides.rubyonrails.org/routing.html 9 | 10 | # Defines the root path route ("/") 11 | # root "articles#index" 12 | end 13 | -------------------------------------------------------------------------------- /config/storage.yml: -------------------------------------------------------------------------------- 1 | test: 2 | service: Disk 3 | root: <%= Rails.root.join("tmp/storage") %> 4 | 5 | local: 6 | service: Disk 7 | root: <%= Rails.root.join("storage") %> 8 | 9 | # Use bin/rails credentials:edit to set the AWS secrets (as aws:access_key_id|secret_access_key) 10 | # amazon: 11 | # service: S3 12 | # access_key_id: <%= Rails.application.credentials.dig(:aws, :access_key_id) %> 13 | # secret_access_key: <%= Rails.application.credentials.dig(:aws, :secret_access_key) %> 14 | # region: us-east-1 15 | # bucket: your_own_bucket-<%= Rails.env %> 16 | 17 | # Remember not to checkin your GCS keyfile to a repository 18 | # google: 19 | # service: GCS 20 | # project: your_project 21 | # credentials: <%= Rails.root.join("path/to/gcs.keyfile") %> 22 | # bucket: your_own_bucket-<%= Rails.env %> 23 | 24 | # Use bin/rails credentials:edit to set the Azure Storage secret (as azure_storage:storage_access_key) 25 | # microsoft: 26 | # service: AzureStorage 27 | # storage_account_name: your_account_name 28 | # storage_access_key: <%= Rails.application.credentials.dig(:azure_storage, :storage_access_key) %> 29 | # container: your_container_name-<%= Rails.env %> 30 | 31 | # mirror: 32 | # service: Mirror 33 | # primary: local 34 | # mirrors: [ amazon, google, microsoft ] 35 | -------------------------------------------------------------------------------- /db/migrate/20220117065741_devise_create_users.rb: -------------------------------------------------------------------------------- 1 | # frozen_string_literal: true 2 | 3 | class DeviseCreateUsers < ActiveRecord::Migration[7.0] 4 | def change 5 | create_table :users do |t| 6 | ## Database authenticatable 7 | t.string :email, null: false, default: "" 8 | t.string :encrypted_password, null: false, default: "" 9 | 10 | ## Recoverable 11 | t.string :reset_password_token 12 | t.datetime :reset_password_sent_at 13 | 14 | ## Rememberable 15 | t.datetime :remember_created_at 16 | 17 | ## Trackable 18 | # t.integer :sign_in_count, default: 0, null: false 19 | # t.datetime :current_sign_in_at 20 | # t.datetime :last_sign_in_at 21 | # t.string :current_sign_in_ip 22 | # t.string :last_sign_in_ip 23 | 24 | ## Confirmable 25 | # t.string :confirmation_token 26 | # t.datetime :confirmed_at 27 | # t.datetime :confirmation_sent_at 28 | # t.string :unconfirmed_email # Only if using reconfirmable 29 | 30 | ## Lockable 31 | # t.integer :failed_attempts, default: 0, null: false # Only if lock strategy is :failed_attempts 32 | # t.string :unlock_token # Only if unlock strategy is :email or :both 33 | # t.datetime :locked_at 34 | 35 | 36 | t.timestamps null: false 37 | end 38 | 39 | add_index :users, :email, unique: true 40 | add_index :users, :reset_password_token, unique: true 41 | # add_index :users, :confirmation_token, unique: true 42 | # add_index :users, :unlock_token, unique: true 43 | end 44 | end 45 | -------------------------------------------------------------------------------- /db/migrate/20220117065748_create_jwt_denylist.rb: -------------------------------------------------------------------------------- 1 | class CreateJwtDenylist < ActiveRecord::Migration[7.0] 2 | def change 3 | create_table :jwt_denylist do |t| 4 | t.string :jti, null: false 5 | t.datetime :exp, null: false 6 | 7 | t.timestamps 8 | end 9 | add_index :jwt_denylist, :jti 10 | end 11 | end 12 | -------------------------------------------------------------------------------- /db/schema.rb: -------------------------------------------------------------------------------- 1 | # This file is auto-generated from the current state of the database. Instead 2 | # of editing this file, please use the migrations feature of Active Record to 3 | # incrementally modify your database, and then regenerate this schema definition. 4 | # 5 | # This file is the source Rails uses to define your schema when running `bin/rails 6 | # db:schema:load`. When creating a new database, `bin/rails db:schema:load` tends to 7 | # be faster and is potentially less error prone than running all of your 8 | # migrations from scratch. Old migrations may fail to apply correctly if those 9 | # migrations use external dependencies or application code. 10 | # 11 | # It's strongly recommended that you check this file into your version control system. 12 | 13 | ActiveRecord::Schema.define(version: 2022_01_17_065748) do 14 | 15 | create_table "jwt_denylist", force: :cascade do |t| 16 | t.string "jti", null: false 17 | t.datetime "exp", precision: 6, null: false 18 | t.datetime "created_at", precision: 6, null: false 19 | t.datetime "updated_at", precision: 6, null: false 20 | t.index ["jti"], name: "index_jwt_denylist_on_jti" 21 | end 22 | 23 | create_table "users", force: :cascade do |t| 24 | t.string "email", default: "", null: false 25 | t.string "encrypted_password", default: "", null: false 26 | t.string "reset_password_token" 27 | t.datetime "reset_password_sent_at", precision: 6 28 | t.datetime "remember_created_at", precision: 6 29 | t.datetime "created_at", precision: 6, null: false 30 | t.datetime "updated_at", precision: 6, null: false 31 | t.index ["email"], name: "index_users_on_email", unique: true 32 | t.index ["reset_password_token"], name: "index_users_on_reset_password_token", unique: true 33 | end 34 | 35 | end 36 | -------------------------------------------------------------------------------- /db/seeds.rb: -------------------------------------------------------------------------------- 1 | # This file should contain all the record creation needed to seed the database with its default values. 2 | # The data can then be loaded with the bin/rails db:seed command (or created alongside the database with db:setup). 3 | # 4 | # Examples: 5 | # 6 | # movies = Movie.create([{ name: "Star Wars" }, { name: "Lord of the Rings" }]) 7 | # Character.create(name: "Luke", movie: movies.first) 8 | -------------------------------------------------------------------------------- /frontend/.browserslistrc: -------------------------------------------------------------------------------- 1 | > 1% 2 | last 2 versions 3 | not dead 4 | -------------------------------------------------------------------------------- /frontend/.gitignore: -------------------------------------------------------------------------------- 1 | .DS_Store 2 | node_modules 3 | /dist 4 | 5 | 6 | # local env files 7 | .env.local 8 | .env.*.local 9 | 10 | # Log files 11 | npm-debug.log* 12 | yarn-debug.log* 13 | yarn-error.log* 14 | pnpm-debug.log* 15 | 16 | # Editor directories and files 17 | .idea 18 | .vscode 19 | *.suo 20 | *.ntvs* 21 | *.njsproj 22 | *.sln 23 | *.sw? 24 | -------------------------------------------------------------------------------- /frontend/README.md: -------------------------------------------------------------------------------- 1 | # frontend 2 | 3 | ## Project setup 4 | ``` 5 | npm install 6 | ``` 7 | 8 | ### Compiles and hot-reloads for development 9 | ``` 10 | npm run serve 11 | ``` 12 | 13 | ### Compiles and minifies for production 14 | ``` 15 | npm run build 16 | ``` 17 | 18 | ### Customize configuration 19 | See [Configuration Reference](https://cli.vuejs.org/config/). 20 | -------------------------------------------------------------------------------- /frontend/babel.config.js: -------------------------------------------------------------------------------- 1 | module.exports = { 2 | presets: [ 3 | '@vue/cli-plugin-babel/preset' 4 | ] 5 | } 6 | -------------------------------------------------------------------------------- /frontend/package.json: -------------------------------------------------------------------------------- 1 | { 2 | "name": "frontend", 3 | "version": "0.1.0", 4 | "private": true, 5 | "scripts": { 6 | "serve": "vue-cli-service serve", 7 | "build": "vue-cli-service build" 8 | }, 9 | "dependencies": { 10 | "axios": "^0.24.0", 11 | "core-js": "^3.6.5", 12 | "vue": "^3.0.0", 13 | "vuex": "^4.0.0-0" 14 | }, 15 | "devDependencies": { 16 | "@vue/cli-plugin-babel": "~4.5.0", 17 | "@vue/cli-plugin-vuex": "~4.5.0", 18 | "@vue/cli-service": "~4.5.0", 19 | "@vue/compiler-sfc": "^3.0.0" 20 | } 21 | } 22 | -------------------------------------------------------------------------------- /frontend/public/favicon.ico: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/Deanout/devise-vue-api/34d82b67b47361a06e302cd6e6779bce9c2a7464/frontend/public/favicon.ico -------------------------------------------------------------------------------- /frontend/public/index.html: -------------------------------------------------------------------------------- 1 | 2 | 3 | 4 | 5 | 6 | 7 | 8 |
5 | For a guide and recipes on how to configure / customize this project,
6 | check out the
7 | vue-cli documentation.
8 |
ID | 11 |Token | 13 ||
---|---|---|
[{{ this.getUserID }}] | 18 |{{ this.getUserEmail }} | 19 |{{ this.getAuthToken }} | 20 |