José Valim
3cdbf15fe9
Update OTHER lock
2013-08-05 19:24:04 +02:00
José Valim
143794d701
Use HMAC on tokens stored in the DB
2013-08-05 18:56:07 +02:00
Juan Lulkin
4048545151
Using urlsafe_base64 cause it already handle url sensitive chars, keeping the replacement of the confusing chars, though
2013-08-05 14:54:56 +03:00
José Valim
32648027e2
Add Devise::KeyGenerator
2013-08-05 11:47:36 +02:00
José Valim
7e96bac6a4
Get rid of deprecated code
2013-08-05 11:24:04 +02:00
José Valim
f5a77ac598
Skip storage for cookies on unverified requests
2013-08-05 10:24:11 +02:00
José Valim
591f4a97f7
Update the OTHER gemfile
2013-08-02 23:57:43 +02:00
José Valim
cf1989e1da
Update Gemfile.lock
2013-08-02 23:43:07 +02:00
José Valim
7c8c0f8dba
Release 3.0.1
2013-08-02 23:25:11 +02:00
José Valim
66afa2a2bf
Update CHANGELOG
2013-08-02 23:14:54 +02:00
José Valim
747751a20f
Protect against CSRF token fixation attacks
2013-08-02 23:13:15 +02:00
José Valim
8e0327e203
Merge pull request #2530 from barodeur/patch-1
...
Remove trailing whitespaces
2013-07-28 14:25:39 -07:00
Paul Chobert
d88b3cedfb
Remove trailing whitespaces
2013-07-28 23:15:42 +02:00
hakanensari
9a60415e2e
Fix assertion
2013-07-26 19:31:49 +01:00
hakanensari
b861a65e72
Fix run-on sentence
2013-07-26 14:24:19 +01:00
hakanensari
1ab7792beb
Fix grammar
2013-07-26 14:24:13 +01:00
José Valim
c4d5a3fdaa
No need to assert for a message we won't receive
2013-07-26 10:00:09 +02:00
José Valim
11a77055f1
Merge pull request #2525 from jetthoughts/timeoutable-without-rememberable
...
Fixed checking for rememberable in timeoutable
2013-07-26 00:58:09 -07:00
José Valim
9bc8e1211b
Update CHANGELOG
2013-07-26 09:22:59 +02:00
José Valim
cd1bc53947
Do not generate attr_accessible for any Rails 4 app
2013-07-26 09:22:03 +02:00
Michael Nikitochkin
fffbeb5cc7
Fixed bug when user has field remember_created_at but the module rememberable is not enabled for the user
2013-07-26 10:20:29 +03:00
José Valim
7539d31a05
Update 3.2 Gemfile
2013-07-26 09:17:35 +02:00
José Valim
78fedd6c10
Merge pull request #2523 from Neschur/add_method_after_confrimation
...
Added method after_confrimation
2013-07-25 23:59:50 -07:00
José Valim
14a0cfefaa
Merge pull request #2522 from jcoyne/attr_accessible
...
When using rails 3.2, the generator adds 'attr_accessible' to the model....
2013-07-25 23:56:03 -07:00
Justin Coyne
b7e67115fc
When using rails 3.2, the generator adds 'attr_accessible' to the model. Fixes #2515
2013-07-23 22:49:05 -05:00
Siarhei Hanchuk
b7bc8dec12
Added method after_confrimation
2013-07-23 14:19:58 +03:00
José Valim
b8ed2f3160
Clarify the roles of Devise models
2013-07-23 10:21:01 +02:00
José Valim
b46b7e3736
Release v3.0.0
2013-07-14 20:40:56 +02:00
José Valim
c5ef39f087
Bump to Warden 1.2.3
2013-07-14 20:40:09 +02:00
José Valim
cfb8228de9
Merge pull request #2506 from mxhold/master
...
Update README.md
2013-07-14 11:20:35 -07:00
Max Holder
4e0c598de1
Update README.md
...
Replace case statement with if statement since we're comparing two equivalent classes (which would never be case equivalent).
2013-07-14 10:35:11 -04:00
José Valim
fed6a92d55
Merge pull request #2504 from plataformatec/remember-me
...
Add remember_me to the permitted sign_in params
2013-07-12 12:19:35 -07:00
Vasiliy Ermolovich
2c1ca126f4
add remember_me to the permitted sign_in params
2013-07-12 22:14:32 +03:00
Vasiliy Ermolovich
36fb1ecf4d
update Gemfile.lock
2013-07-12 22:13:52 +03:00
José Valim
08986dbd4b
Merge pull request #2502 from slainer68/readme_strong_parameters
...
Update README.md [ci skip]
2013-07-12 04:26:59 -07:00
Nicolas Blanco
b69d2c412f
Update README.md [ci skip]
...
Fix the example for Strong parameters multi roles as resource_class is actually a class not an instance.
2013-07-12 13:25:26 +02:00
José Valim
6f5d176e8e
Bump warden dependency
2013-07-12 13:00:31 +02:00
José Valim
57515de5ad
Update to Rails 4.0
2013-07-09 09:09:22 +02:00
José Valim
49aebde435
Update CHANGELOG
2013-07-09 09:05:19 +02:00
José Valim
bc598b9da3
Merge pull request #2452 from latortuga/bad-strong-params-on-failed-login
...
Add failing test case for bad parameter sanitizing when failing to login
2013-07-08 23:53:41 -07:00
José Valim
da0323e591
Merge pull request #2419 from plataformatec/issue-2418
...
set error to the field specified in unlock_keys config
2013-07-08 23:52:19 -07:00
José Valim
061e9d7404
Merge pull request #2475 from tkhr/enable_skipping_reconfirmation_notification_but_regenerate_confirmation_token_2
...
Enable to skip sending reconfirmation email when reconfirmable is on and skip_confirmation_notification! is invoked
2013-07-08 23:51:42 -07:00
José Valim
3c519b13ff
Merge pull request #2485 from betelgeuse/changelog_fix
...
CHANGELOG fix about _links.erb partial revert
2013-07-03 03:58:13 -07:00
Petteri Räty
aeec6138c2
CHANGELOG fix about _links.erb partial revert
...
9bf718 got reverted by aa2d15 but the CHANGELOG was not reflected to
show this.
2013-07-03 13:34:25 +03:00
José Valim
75ad4ee87b
Add thread-safety support note
2013-06-30 14:18:57 +02:00
Drew Ulmer
e029ad7b0c
Fix improper login param sanitization permit
...
This includes a failing test case that hooks into ActiveSupport
Notifications to catch the param permit error.
2013-06-25 13:44:39 -05:00
José Valim
225afe6813
Merge pull request #2480 from robinroestenburg/patch-1
...
Updated section 'Configuring controllers'
2013-06-25 04:19:23 -07:00
Robin Roestenburg
8487637b2f
Updated section 'Configuring controllers'
...
I added an extra note in the section on creating a custom (namespaced) controller.
This controller needs to be created in a directory in order for it to work. Otherwise (for example when creating the controller in `app/controllers`) a `uninitialized constant Admins` error is thrown.
Also, fixed the Markdown formatting for the numbered lists in the README.
2013-06-25 14:01:11 +03:00
José Valim
8978bd4fe0
Merge pull request #2479 from djmaze/patch-1
...
Update code example for #update_without_password
2013-06-25 02:30:41 -07:00
Martin Honermeyer
5926898cf4
Update code example for #update_without_password
2013-06-25 11:27:35 +02:00
