José Valim
cd982123a8
Release 2.2.7
2013-08-18 10:29:38 +02:00
José Valim
a44002c68b
Fix the build
2013-08-09 10:21:22 +02:00
José Valim
60f3c678e6
Skip storage for cookies on unverified requests
2013-08-09 09:33:19 +02:00
José Valim
415fa2ad21
Protect against CSRF token fixation attacks
2013-08-02 23:16:32 +02:00
José Valim
e499fadf52
Use persisted? in order to check if the record was destoryed or not
2013-05-07 08:55:30 -06:00
José Valim
5ad122b928
Fix build for mongoid
2013-05-07 08:47:18 -06:00
José Valim
03f2a6a5e4
Merge pull request #2392 from michiel3/master
...
Add destroy_with_password method
2013-05-07 07:11:47 -07:00
Victor Cruz Dueñas
d6d61fc5be
Adding tests for case_insensitive_keys and strip_whitespace_keys to param filter
2013-05-05 01:02:48 +02:00
Carlos Antonio da Silva
a0058d5fbf
Add some spaces, remove comment
2013-05-03 21:52:00 -03:00
Carlos Antonio da Silva
d9d5ae3d58
Correct OrderedHash initialization to ensure keys order in 1.8.7
...
This should hopefully fix the build with 1.8.7 🙏
2013-05-01 21:35:03 -03:00
Michiel Prins
60e933df73
Add destroy_with_password method
2013-04-29 15:06:13 +02:00
Vasiliy Ermolovich
dceb788c6b
fix OrderedHash initialization
2013-04-23 10:37:10 +03:00
Vasiliy Ermolovich
fae8e977e8
use ordered hash to fix tests on ruby 1.8
2013-04-22 22:42:49 +03:00
Tan Jun Rong
804fbdf6d5
Fix spelling error, 'reseting' to 'resetting'
2013-04-22 22:25:40 +08:00
Tan Jun Rong
9d5a9c8a61
Add ability to override the redirect path after user has reset their password
2013-04-22 20:22:53 +08:00
Carlos Antonio da Silva
b8c5d76c5a
Merge pull request #2380 from vipulnsward/fix_warnings
...
fix some warnings
2013-04-19 15:53:43 -07:00
Vipul A M
b871bd5036
fix some warning
2013-04-19 19:08:20 +05:30
Vipul A M
2e6457006e
Remove unused variables and fix typos
2013-04-18 10:24:38 +05:30
José Valim
5bf4f57fcf
Tidy up devise configuration
2013-04-13 22:07:54 -07:00
José Valim
1b8fd7c2ff
Merge pull request #2271 from robhurring/master
...
Allowing http token auth to set the token_authentication_key if missing from params
2013-04-13 21:39:36 -07:00
Carlos Antonio da Silva
d89dad5728
Bundle update for both Rails 3.1 and 3.2, update mocha, fix failing tests
2013-04-13 11:08:27 -03:00
Carlos Antonio da Silva
32a141d2a9
Fix typo in test descriptions
2013-04-13 10:54:52 -03:00
Tomas Varneckas
1acd3d1790
Fix devise sender bug with custom devise mailers.
...
The devise sender detection must take into account that the default
sender set in the custom devise mailer can be a proc.
2013-04-12 16:48:48 +03:00
Matt Jones + Tony Schneider
f4ceecece4
Allow explicit configuration of http auth key
...
- Fix basic auth case in which authorized_keys is configured as hash
- Duplicate existing functionality when http_auth_key is not explicitly
set
2013-03-04 12:23:05 -05:00
Lucas Mazza
198bfff2de
Merge pull request #2300 from fphilipe/scoped-serialization
...
Make use of warden's scoped serialization
2013-02-25 15:32:43 -08:00
Philipe Fatio
c22d755cf4
Make use of warden's scoped serialization
2013-02-25 07:38:42 +01:00
Greg Gates
72cfaad618
Add #skip_confirmation_notification to Confirmable
2013-02-22 12:43:01 -05:00
Vasiliy Ermolovich
395a69b4ef
allow_unconfirmed_access_for set to nil means unconfirmed access for unlimited time
...
closes #2275
2013-02-13 21:17:38 +03:00
Rob
547439d94c
renaming devise option "allow_authorization_to_set_auth_token" to "allow_token_authenticatable_via_headers"
2013-02-10 12:50:52 -05:00
Rob
84f743c4ef
adding http token auth options to env[devise.token_options]
2013-02-10 12:48:02 -05:00
Rob
3025b7e2f7
Allow http token authorization to set token_authentication_key in place of passing it in via params
...
It will not override existing token_authentication_key params if they are present.
2013-02-09 15:12:36 -05:00
Vasiliy Ermolovich
f822f92321
use scoped path to shared views if scope is present
...
closes #2253
2013-02-09 02:35:06 +03:00
Drew Ulmer
c9c1e13743
Add test for Issue #2190
...
Seems to be passing for me.
2013-01-31 10:05:53 -06:00
José Valim
25296d8c6f
Add tests for sign out with redirect, related to #2249
2013-01-30 08:28:51 -07:00
Carlos Antonio da Silva
83ad67bd51
Fix inheriting mailer templates from Devise::Mailer
...
Previously inheriting from Devise::Mailer would not render default views
from devise when the inheriting mailer didn't have the view. Now it'll
correctly pick the default one from Devise::Mailer.
2013-01-29 00:08:26 -02:00
Carlos Antonio da Silva
72be1f1289
Match against string value, no need to create regexps
2013-01-28 23:59:15 -02:00
Carlos Antonio da Silva
0285565322
Actually fix this test by forcing to_s on the id
2013-01-28 21:40:11 -02:00
Carlos Antonio da Silva
acc3adb2c1
Use #next instead of calculating id + 1
...
The id attribute is not Integer in Mongo, so it fails with something like:
NoMethodError: undefined method `+' for "5106fc06ee6da1ee44000002":Moped::BSON::ObjectId'`
With #next, it will work with both Integer and String ids, for both AR
and Mongo, returning a different id to test for filtered conditions.
2013-01-28 20:46:21 -02:00
Carlos Antonio da Silva
af37800c1d
Change match routes to get / post
...
match without a verb is deprecated in Rails master.
2013-01-28 20:23:13 -02:00
Carlos Antonio da Silva
86eecc6606
Change "ActionController::IntegrationTest" to "ActionDispatch::IntegrationTest"
2013-01-28 19:58:21 -02:00
Rafael Mendonça França
bfa65dde70
Use the Ruby 1.8 hash syntax.
...
Yes we still support Ruby 1.8 😢
2013-01-28 13:21:44 -02:00
José Valim
5190f52857
Require string conversion for all values
2013-01-26 11:42:42 -07:00
Carlos Antonio da Silva
0061f113db
Fix indent [ci skip]
2013-01-20 21:49:45 -02:00
Vasiliy Ermolovich
d3f8bd6cae
add key option to rememberable_options
...
closes #2218
2013-01-20 23:16:25 +03:00
Vasiliy Ermolovich
9913fde749
use click_button for canceling account in integration specs
2013-01-12 14:12:05 +03:00
José Valim
33fb89340a
Revert "update_with_password doesn't change encrypted password when it is invalid"
...
This reverts commit 10235f9d72 .
2013-01-11 19:12:53 +01:00
Drew Ulmer
c768366240
Add failing tests for Issue #2204
...
For a point release upgrade, Devise should not throw an exception when trying
to downcase or strip globally configured keys. This would be a breaking
change in functionality and this test demonstrates the issue.
2013-01-09 11:41:20 -06:00
Alan Larkin
84b8188db9
Added failing integration test for XHR invocation of SessionsController#destroy with */*' in the Accept' header.
2013-01-06 03:49:59 +00:00
José Valim
30ab6f923d
Release 2.2.0.rc
2012-12-13 09:20:46 +01:00
José Valim
839e8fc8ac
Show if there is an e-mail waiting for confirmation, closes #2060
2012-12-13 09:13:33 +01:00