v0.5.0

No significant changes from 0.5.0.pre2.

v0.5.0.pre2

• Add support for Propshaft (1b34375)
• Update font sizes due to root font size changes in Trestle v0.10.0.pre2 (a4f7f58)
• Drop support for Rails 5.2 (6868e6e)

v0.5.0.pre

This release updates trestle-auth to support the Hotwire updates introduced in Trestle v0.10.0.pre.

• Markup and CSS has been updated for Bootstrap 5
• Turbolinks meta tags and data- attributes replaced with Turbo tags
• FontAwesome icons added to auth layout when using Sprockets

v0.4.4

• Added auth.login.form.before and auth.login.form.after hooks (#39)

v0.4.3

• Update routing constraint (Trestle::Auth::Constraint) to work with all authentication backends [#36]
• Use Devise.authentication_keys to determine default authentication parameter for Devise

v0.4.2

This release fixes a Cross-Site Request Forgery issue that is present in trestle-auth versions 0.4.0 and 0.4.1.
See GHSA-h8hx-2c5r-32cf for more information.

• Ensure CSRF protection is prepended before authentication before_actions (addresses CVE-2021-29435)
• Fix install generator on older Ruby versions (< 2.6) [#31]

v0.4.1

• Implement singular account admin generator for managing the current user
• Fix Devise admin generator to avoid re-login after an invalid password change
• Pass form builder object to auth.login.form hook (for additional login fields)

v0.4.0

• Add support for alternative authentication backends including Devise and Warden
• Add --devise option to install generator: rails generate trestle:auth:install User --devise
• Add ability to disable login/logout actions via config.auth.enable_login and config.auth.enable_logout configuration options
• Add config.auth.login_url configuration option
• Add config.auth.human_attribute_name configuration option for translating login fields
• Evaluate config.auth.locale and config.auth.time_zone blocks within controller context

v0.3.0

• Implement new asset build process with Bootstrap 4 compatibility (compatible with Trestle 0.9.0)
• Add config.auth.logo configuration option to control login form logo independently of main admin
• Add Spanish translations (es locale)

v0.2.5

• Add config.auth.format_user_name configuration option to customize user name rendering in header
• Add config.auth.redirect_on_login and config.auth.redirect_on_logout configuration options to control redirect locations after login/logout
• Allow user locale and time zone around actions to be disabled if config.auth.locale or config.auth.time_zone are false
• Add more helpful error message when install generator is run before the main Trestle install generator