app-rails: Update template-application-rails to version 1.0.0.post8.dev0+7fd27de

Author: nava-platform-bot

.template-application-rails/app-rails.yml

@@ -1,5 +1,5 @@
 # Changes here will be overwritten by Copier
-_commit: v1.0.0-3-gc7f7e95
+_commit: v1.0.0-8-g7fd27de
 _src_path: https://github.com/navapbc/template-application-rails
 app_local_port: 3100
 app_name: app-rails

app-rails/README.md

@@ -9,6 +9,8 @@ This is a [Ruby on Rails](https://rubyonrails.org/) application. It includes:
   - Active Storage configuration with AWS S3
   - Action Mailer configuration with AWS SES
   - Authentication with [devise](https://github.com/heartcombo/devise) and AWS Cognito
+- Integration with Azure services, including
+  - Database integration with Azure PostgreSQL using Entra ID
 - Internationalization (i18n)
 - Authorization using [pundit](https://github.com/varvet/pundit)
 - Linting and code formatting using [rubocop](https://rubocop.org/)
@@ -52,6 +54,7 @@ Below are the primary directories to be aware of when working on the app:
   - By default, `docker` is used. To change this, set the `CONTAINER_CMD` variable to `finch` (or whatever your container runtime is) in the shell.
 - An AWS account with a Cognito User Pool and App Client configured
   - By default, the application configures authentication using AWS Cognito
+- Or an Azure subscription
 
 ### 💾 Setup
 
@@ -105,6 +108,31 @@ AUTH_ADAPTER=cognito
 
 You will need to set the other cognito variables as well; setting `AUTH_ADAPTER` alone will merely set the auth flow to cognito, not enable cognito log in.
 
+#### Database Authentication
+
+The application supports three database authentication methods, controlled by the `DB_AUTH_METHOD` environment variable in your `.env` file:
+
+| `DB_AUTH_METHOD` | Description | When to use |
+|---|---|---|
+| *(unset or blank)* | Use `DB_PASSWORD` as-is | Local development |
+| `aws_iam` | AWS RDS IAM auth token | Deployed on AWS |
+| `azure_entra` | Azure Managed Identity token via MS Entra ID | Deployed on Azure |
+
+**Local development** (default): Leave `DB_AUTH_METHOD` unset in your `.env`. The app uses `DB_PASSWORD` directly — no further configuration needed.
+
+**AWS (RDS IAM)**: Set the following in your `.env`:
+```
+DB_AUTH_METHOD=aws_iam
+```
+
+**Azure (Entra ID)**: Set the following in your `.env`:
+```
+DB_AUTH_METHOD=azure_entra
+AZURE_DB_RESOURCE_URI=https://ossrdbms-aad.database.windows.net
+```
+
+`AZURE_DB_RESOURCE_URI` is the audience URI used when requesting an access token from MS Entra ID. For Azure Database for PostgreSQL Flexible Server the value is `https://ossrdbms-aad.database.windows.net`. Consult the Azure documentation if using a different database service.
+
 #### IDE tips
 
 <details>

app-rails/app/assets/config/manifest.js

@@ -16,4 +16,3 @@
 // Compiled CSS and JS
 //= link_tree ../builds
 //= link application.css
-//= link custom.css

app-rails/app/assets/stylesheets/_overrides.scss

@@ -1,4 +1,47 @@
 @forward "uswds-theme";
 @forward "uswds";
-@forward "uswds-overrides";
-@forward "overrides";
+
+@use "uswds-core" as *;
+
+// =========================================================
+// Base typography
+// =========================================================
+h1,
+h2,
+h3,
+h4,
+label,
+legend {
+  text-wrap: balance;
+}
+
+.usa-breadcrumb + h1 {
+  margin-top: units(3);
+}
+
+p,
+li,
+.usa-hint {
+  text-wrap: pretty;
+}
+
+// =========================================================
+// Custom utilities missing from USWDS (for now)
+// =========================================================
+
+// Gap - USWDS has grid-gap but it doesn't work with flexbox
+@for $i from 0 through 10 {
+  .gap-#{$i} {
+    gap: units($i);
+  }
+}
+
+// =========================================================
+// Developer tooling
+// =========================================================
+// This shows when an i18n key is missing a value
+.translation_missing {
+  color: red;
+  font-weight: bold;
+  border: 3px dashed red;
+}

app-rails/app/assets/stylesheets/_uswds-overrides.scss

@@ -9,9 +9,6 @@ class ApplicationController < ActionController::Base
   after_action :verify_authorized, except: :index
   after_action :verify_policy_scoped, only: :index
 
-  # Make sure templates in app/views/overrides are used if present
-  prepend_view_path ActionView::FileSystemResolver.new(Rails.root.join("app/views/overrides"))
-
   # Set the active locale based on the URL
   # For example, if the URL starts with /es-US, the locale will be set to :es-US
   def switch_locale(&action)

app-rails/app/assets/stylesheets/application.scss

@@ -1,9 +1,6 @@
 # frozen_string_literal: true
 
 class ApplicationMailer < ActionMailer::Base
-  # Make sure templates in app/views/overrides are used if present
-  prepend_view_path ActionView::FileSystemResolver.new(Rails.root.join("app/views/overrides"))
-
   default from: ENV["AWS_SES_FROM_EMAIL"] || ENV["SES_EMAIL"]
   layout "mailer"
 end