José Valim
beeb48c404
Release v2.2.8
2013-11-13 14:11:45 +01:00
José Valim
cd982123a8
Release 2.2.7
2013-08-18 10:29:38 +02:00
José Valim
02a2976f5e
Release v2.2.6
2013-08-09 10:31:54 +02:00
José Valim
60f3c678e6
Skip storage for cookies on unverified requests
2013-08-09 09:33:19 +02:00
José Valim
373fd03ebc
Release 2.2.5
2013-08-02 23:24:17 +02:00
José Valim
415fa2ad21
Protect against CSRF token fixation attacks
2013-08-02 23:16:32 +02:00
Carlos Antonio da Silva
f5e33089a0
Release 2.2.4
2013-05-07 12:51:46 -03:00
José Valim
ef2a2280a3
Update examples to be compatible with Rails 4
2013-05-07 08:18:12 -06:00
José Valim
03f2a6a5e4
Merge pull request #2392 from michiel3/master
...
Add destroy_with_password method
2013-05-07 07:11:47 -07:00
Victor Cruz Dueñas
75fdd2944d
Avoid hash mutation
2013-05-05 10:12:57 +02:00
Victor Cruz Dueñas
ae48fc8419
Refactor to avoid duplication on param filter
2013-05-05 01:19:37 +02:00
Rafael Mendonça França
63627d1439
Refactoring the code a little bit
...
* Rename #get_constraints_given_method to #constraints_for to make the
method clear.
* The method name now is required.
* Use symbols instead of strings.
* Make #constraints_for a protected method.
2013-05-04 14:33:55 -03:00
DI2uNk
eadce2fef6
Refactored rails/routes.rb to avoid repeated code
2013-05-04 11:56:56 +02:00
Michiel Prins
92218e9ecc
Remove unnecessary code
2013-04-29 15:21:31 +02:00
Michiel Prins
60e933df73
Add destroy_with_password method
2013-04-29 15:06:13 +02:00
Scott M
2f28e48f54
Fix spelling error in doc block
2013-04-29 01:52:37 -03:00
Carlos Antonio da Silva
df4b282566
Set variable to false instead of nil
2013-04-19 19:59:08 -03:00
Carlos Antonio da Silva
b8c5d76c5a
Merge pull request #2380 from vipulnsward/fix_warnings
...
fix some warnings
2013-04-19 15:53:43 -07:00
Vipul A M
b871bd5036
fix some warning
2013-04-19 19:08:20 +05:30
Vipul A M
2e6457006e
Remove unused variables and fix typos
2013-04-18 10:24:38 +05:30
José Valim
5bf4f57fcf
Tidy up devise configuration
2013-04-13 22:07:54 -07:00
José Valim
1b8fd7c2ff
Merge pull request #2271 from robhurring/master
...
Allowing http token auth to set the token_authentication_key if missing from params
2013-04-13 21:39:36 -07:00
Carlos Antonio da Silva
fa5ae57ce4
Use instance_eval instead of Proc#bind
...
Keep the implementation more similar to how it works in Action Mailer,
and avoid deprecation warnings with Proc#bind being raised in rails4
branch.
2013-04-13 11:35:51 -03:00
Tomas Varneckas
1acd3d1790
Fix devise sender bug with custom devise mailers.
...
The devise sender detection must take into account that the default
sender set in the custom devise mailer can be a proc.
2013-04-12 16:48:48 +03:00
José Valim
148fa99dce
Merge pull request #2330 from pungoyal/master
...
Language copy changes
2013-04-01 12:20:02 -07:00
Scott Jacobsen
4549d8c65f
Update recoverable.rb
...
Fix type-o.
2013-03-21 18:49:19 -06:00
Puneet Goyal
5d87e150f7
removing an extra full stop
2013-03-15 15:18:45 +05:30
José Valim
d90e365636
Merge pull request #2315 from neo/http_auth_key
...
Allow explicit configuration of http auth key
2013-03-07 09:43:08 -08:00
Lucas Mazza
22442907af
Fix send_devise_notification arity in the documentation.
...
[ci skip]
2013-03-05 15:55:19 -03:00
robhurring
10f58b636f
update devise config template with new allow_token_authenticatable_via_headers options
2013-03-04 17:38:36 -05:00
robhurring
2d14bd2826
removing params hash merging of token and mimicking http basic auth flow
2013-03-04 17:33:27 -05:00
Matt Jones + Tony Schneider
f4ceecece4
Allow explicit configuration of http auth key
...
- Fix basic auth case in which authorized_keys is configured as hash
- Duplicate existing functionality when http_auth_key is not explicitly
set
2013-03-04 12:23:05 -05:00
Andrew White
c6578250d2
Improve documentation on sending delayed emails
...
There are a couple of gotchas in the existing documentation
about the `send_devise_notification` hook.
1. The `after_commit` callback can be called multiple times
so you should clear the array otherwise any additional
invocations will trigger extra copies of the email.
2. The `after_commit` callback is only called when a record
is created or updated so you need to check for `new_record?`
or `changed?` before adding it to `pending_notifications`
otherwise it's okay to send it immediately.
The `new_record? || changed?` condition is necessary because
the latter isn't always true for new records, e.g:
>> User.new.changed?
=> false
[ci skip]
2013-03-01 14:32:15 +00:00
Lucas Mazza
198bfff2de
Merge pull request #2300 from fphilipe/scoped-serialization
...
Make use of warden's scoped serialization
2013-02-25 15:32:43 -08:00
José Valim
b388aae473
Merge pull request #2302 from islandr/master
...
Mention devise-encryptable requirement in initializer template
2013-02-25 14:05:15 -08:00
Ryan Mohr
f3928d8462
Mention devise-encryptable requirement for anything but bcrypt.
2013-02-25 10:42:06 -10:00
Philipe Fatio
c22d755cf4
Make use of warden's scoped serialization
2013-02-25 07:38:42 +01:00
Greg Gates
72cfaad618
Add #skip_confirmation_notification to Confirmable
2013-02-22 12:43:01 -05:00
Vasiliy Ermolovich
395a69b4ef
allow_unconfirmed_access_for set to nil means unconfirmed access for unlimited time
...
closes #2275
2013-02-13 21:17:38 +03:00
Rob
547439d94c
renaming devise option "allow_authorization_to_set_auth_token" to "allow_token_authenticatable_via_headers"
2013-02-10 12:50:52 -05:00
Rob
84f743c4ef
adding http token auth options to env[devise.token_options]
2013-02-10 12:48:02 -05:00
Rob
22a8cfe6d3
fix hanging line on method call
2013-02-09 15:19:42 -05:00
Rob
3025b7e2f7
Allow http token authorization to set token_authentication_key in place of passing it in via params
...
It will not override existing token_authentication_key params if they are present.
2013-02-09 15:12:36 -05:00
Vasiliy Ermolovich
1b2460171e
Merge pull request #2261 from plataformatec/issue-2253
...
use scoped path to shared views if scope is present
2013-02-08 15:43:39 -08:00
Vasiliy Ermolovich
f822f92321
use scoped path to shared views if scope is present
...
closes #2253
2013-02-09 02:35:06 +03:00
Stefan Boesen
3458e12274
Update lib/generators/templates/devise.rb
...
Typo in template comment.
2013-02-06 16:30:00 -08:00
Waldyr Guimarães Araújo de Souza
5ee07390b7
correcting tiny typo
2013-01-29 22:45:23 -02:00
Carlos Antonio da Silva
83ad67bd51
Fix inheriting mailer templates from Devise::Mailer
...
Previously inheriting from Devise::Mailer would not render default views
from devise when the inheriting mailer didn't have the view. Now it'll
correctly pick the default one from Devise::Mailer.
2013-01-29 00:08:26 -02:00
Carlos Antonio da Silva
af37800c1d
Change match routes to get / post
...
match without a verb is deprecated in Rails master.
2013-01-28 20:23:13 -02:00
Rafael Mendonça França
bfa65dde70
Use the Ruby 1.8 hash syntax.
...
Yes we still support Ruby 1.8 😢
2013-01-28 13:21:44 -02:00