github/devise
1
1
Fork 0
mirror of https://github.com/heartcombo/devise.git synced 2026-01-22 21:28:01 -05:00
Code Issues Packages Projects Releases Wiki Activity
881 Commits 28 Branches 145 Tags
2f360bf201f7f4e5c18907bf6c74f47e04b38176
Commit Graph

632 Commits

Author SHA1 Message Date
José Valim
2f360bf201 Remove OAuth2 in favor of OmniAuth. 2010-10-18 15:00:34 +02:00
José Valim
5d4e4fbb88 Automatically set OmniAuth path prefix 2010-10-18 15:00:34 +02:00
José Valim
21d5e50054 Basic omniauth support. 2010-10-18 15:00:34 +02:00
George Guimarães
bca72ddf59 fixing typo and whitespaces 2010-10-16 20:17:39 -03:00
Jared Morgan
0aa21dca4c Use to_adapter.get in Warden::SessionSerializer#deserialize 2010-10-17 04:22:22 +08:00
Jared Morgan
31170b9100 Use to_adapter in two more methods 
Authenticatable.generate_token and Warden::SessionSerializer#deserialize
 2010-10-17 04:22:22 +08:00
José Valim
cdbd03c45a Simplify I18n lookup. 2010-10-14 14:43:41 +02:00
José Valim
8a8ba6c70c Depend on ORM Adapter. 2010-10-10 17:51:32 +02:00
José Valim
e4c5158851 Sign out by default will destroy the existing session. 2010-10-10 17:51:32 +02:00
José Valim
7bc37e5237 Provide a better encryptor message and update Gemfile.lock. 2010-10-10 17:51:32 +02:00
Sean Cribbs
9f032350e3 Use ActiveModel's to_key instead of id. 
Signed-off-by: José Valim <jose.valim@gmail.com>
 2010-10-10 17:51:32 +02:00
José Valim
94ccfc5322 Remove deprecation warnings on Rails 3.1. 2010-10-10 17:51:31 +02:00
Sebastián Gamboa
721843c841 Allow to conditionally skip email validation. 2010-10-05 05:42:20 +08:00
José Valim
db1ce8eeb2 Sign up now check if the user is active or not and redirect him accordingly setting the inactive_signed_up message. This commit also moves after_update_path_for to inside RegistrationsController, not allowing it to be overriden inside ApplicationController anymore. 2010-09-30 09:12:00 +02:00
Pat Allan
16c39a9f17 Making sure timeoutable respects rememberable if both are loaded. 2010-09-29 15:27:54 +08:00
José Valim
fbb77a6edd Ensure bcrypt also uses pepper for backward compatibility. 2010-09-28 17:45:34 +02:00
Carlos Antonio da Silva
98e69cfd71 Remove unused options param for token_auth schema, and avoid creating a new hash 2010-09-26 14:08:25 -03:00
Carlos Antonio da Silva
6a09daf570 Don't need to extend ActiveSupport::Concern anymore in oauth helpers 2010-09-26 11:47:56 -03:00
José Valim
fbac68d51a This helpers are useless outside oauth context. 2010-09-26 13:40:09 +02:00
José Valim
2169e5de97 OAuth shortcut should use paths instead of urls. 2010-09-26 13:28:30 +02:00
José Valim
4d8d1f5222 Uncomment pepper in configuration. 2010-09-26 01:44:37 -07:00
Carlos Antonio da Silva
0bc80cec35 Remove autoload for Bcrypt encryptor, it does not exist anymore 2010-09-25 23:14:31 -03:00
José Valim
38f3f6318a cookie_domain is deprecated in favor of cookie_options which uses session_options by default. 2010-09-25 21:13:54 +02:00
José Valim
1dfcbe3bd4 Regenerate gemspec to force latest warden version. 2010-09-25 20:29:33 +02:00
José Valim
531f221be7 Allow :stateless_token to be set to true avoiding users to be stored in session through token authentication 2010-09-25 20:28:14 +02:00
José Valim
617e142e34 Store the salt in session and expire the session if the user changes his password 2010-09-25 17:24:56 +02:00
José Valim
09088706bb Extract encryptors into their own module for better bcrypt support. 2010-09-25 16:08:46 +02:00
José Valim
31d821c2e0 Allow to Rememberable to work without remember_token relying on salt if possible. 
This comes with the benefit that if you change your password, all remember tokens expires, and it also requires one field less in the database.

The downside is that if you want remember_me_across_browser to be false, it won't work unless you use the token. It also requires you to be using database_authenticable.

Using salt is now the default in Devise.
 2010-09-25 13:07:24 +02:00
José Valim
2aa1d2f3b7 Increase the size of the friendly token. 
The chance of someone to successfully guess a random token in the website is:

(number_of_users / 2388636399360109977557402041718133080829429159844757507642063199359529632522467783435119230976)
 2010-09-25 11:51:57 +02:00
José Valim
c12d75eecf Do not rely on controller being available in params. 2010-09-25 11:22:18 +02:00
Carlos Antonio da Silva
d02ea3153b Small doc fix 2010-09-24 08:59:39 -03:00
José Valim
dd11f43014 All tests green on latest mongoid. 2010-09-24 11:30:08 +02:00
Martin Davidsson
ec0e105c52 Incorporate feedback from carlosantoniodasilva and update rememberable 
tests
 2010-09-24 11:08:59 +08:00
Martin Davidsson
f3e348f6f4 Merge options hash instead of overwriting it 
The forgetable hook will delete cookies based on the :scope in an
options hash but it was overwriting the options and setting them to
either an empty hash or a hash with a single :domain key. Because the
:scope was lost, the hook was trying to delete the 'remember__token'
instead of the more typical 'remember_user_token' cookie.
 2010-09-24 11:08:58 +08:00
José Valim
589de27bcd Stop using inject({}) to build hashes. It is harder to read and slower. 2010-09-22 23:29:17 +02:00
Thibaud Guillaume-Gentil
c121d8026e Avoid BCrypt::Errors::InvalidSalt: invalid salt 
when password_salt is nil.

Signed-off-by: José Valim <jose.valim@gmail.com>
 2010-09-21 12:09:07 +02:00
José Valim
5429f940e7 Refactor code related with authentication keys on password recovery and account unlocking, closes #396. 2010-09-21 12:05:17 +02:00
RStankov
850afec96e make User#send_reset_password_instructions to require all authentication_keys 
Signed-off-by: José Valim <jose.valim@gmail.com>
 2010-09-21 11:47:07 +02:00
RStankov
fb86f772e7 make User#send_unlock_instructions to require all authentication_keys 
Signed-off-by: José Valim <jose.valim@gmail.com>
 2010-09-21 11:46:57 +02:00
José Valim
b2066cc229 Add request_keys support. Closes #401. 2010-09-21 11:45:44 +02:00
José Valim
7c630fdb5e Do not execute Warden::Callbacks on Devise::TestHelpers. Closes #414. 2010-09-21 10:50:01 +02:00
Carlos Antonio da Silva
0388380614 Small comment fix 2010-09-17 20:58:32 -03:00
Pelle Braendgaard
2fdb71716f The http authentication code was not checking for the type of authentication in the Authentication header. 
This caused issues with OAuth header authentication.
Please note I have added a test but I'm not sure it works right as it doesn't fails without the change :-)
But it does fix failures in the oauth-plugin provider specs using devise.
 2010-09-14 03:55:09 +08:00
Carlos Antonio da Silva
5c928df66b Strip some whitespaces 2010-09-09 21:11:23 -03:00
James Miller
0f0eb4e8ce Fix for failed first-ever logins on PostgreSQL where column default is nil 2010-09-02 05:46:56 +08:00
Vinicius Baggio
006f48232f Fixing typo in documentation 2010-09-01 17:50:52 -03:00
José Valim
31d7020637 Reorganize tests for failure app and add entries to CHANGELOG. 2010-08-31 23:55:25 +02:00
Santiago Pastorino
e582112369 set WWW-Authenticate header on http_auth if request is not xhr 2010-09-01 05:35:40 +08:00
Daniel Lopes
736654e1bc adding docs for the namespace behavior 2010-08-31 23:59:50 +08:00
Santiago Pastorino
5fb5efbd42 Returning WWW-authenticate on ajaxs calls depends only on Devise.http_authenticatable_on_xhr config 2010-08-31 23:51:58 +08:00