Update to latest devise-security to get a cool unreleased hook (#268)

Author: remi

Gemfile

@@ -9,7 +9,7 @@ gem 'bourgeois'
 gem 'camaraderie'
 gem 'cancancan'
 gem 'devise', '~> 4.9'
-gem 'devise-security'
+gem 'devise-security', github: 'devise-security/devise-security'
 gem 'friendly_id'
 gem 'gaffe', '1.2.0'
 gem 'jquery-turbolinks'

Gemfile.lock

@@ -1,3 +1,10 @@
+GIT
+  remote: https://github.com/devise-security/devise-security.git
+  revision: 5dd024f2a0e416f634af78b7e1bb6753497430c1
+  specs:
+    devise-security (0.18.0)
+      devise (>= 4.8.1)
+
 GEM
   remote: https://rubygems.org/
   specs:
@@ -104,8 +111,6 @@ GEM
       railties (>= 4.1.0)
       responders
       warden (~> 1.2.3)
-    devise-security (0.18.0)
-      devise (>= 4.3.0)
     diff-lcs (1.6.0)
     erubi (1.13.1)
     execjs (2.8.1)
@@ -161,7 +166,7 @@ GEM
     net-smtp (0.5.1)
       net-protocol
     nio4r (2.7.4)
-    nokogiri (1.18.4)
+    nokogiri (1.18.7)
       mini_portile2 (~> 2.8.2)
       racc (~> 1.4)
     orm_adapter (0.5.0)
@@ -337,7 +342,7 @@ DEPENDENCIES
   cancancan
   database_cleaner-active_record
   devise (~> 4.9)
-  devise-security
+  devise-security!
   factory_bot_rails
   ffaker
   friendly_id

app/models/user.rb

@@ -5,7 +5,7 @@ class User < ApplicationRecord
   validates :password, length: { within: 8..128, allow_blank: true }, presence: { if: :password_required? }
 
   # Devise
-  devise :database_authenticatable, :rememberable, :trackable, :recoverable, :password_archivable
+  devise :database_authenticatable, :rememberable, :trackable, :recoverable, :password_archivable, :session_limitable
 
   # FriendlyId
   extend FriendlyId

db/migrate/20250403130915_add_unique_session_id_to_users.rb

@@ -0,0 +1,5 @@
+class AddUniqueSessionIdToUsers < ActiveRecord::Migration[6.1]
+  def change
+    add_column :users, :unique_session_id, :string
+  end
+end

db/schema.rb

@@ -10,7 +10,7 @@
 #
 # It's strongly recommended that you check this file into your version control system.
 
-ActiveRecord::Schema.define(version: 2025_03_14_190743) do
+ActiveRecord::Schema.define(version: 2025_04_03_130915) do
 
   # These are extensions that must be enabled in order to support this database
   enable_extension "plpgsql"
@@ -107,6 +107,7 @@
     t.datetime "deleted_at"
     t.string "reset_password_token"
     t.datetime "reset_password_sent_at"
+    t.string "unique_session_id"
   end
 
   create_table "versions", id: :serial, force: :cascade do |t|