José Valim
505bd39700
failure_app now properly handles nil request.format
2010-11-09 23:30:53 +01:00
José Valim
931b902583
Fix failing tests.
2010-11-09 22:27:46 +01:00
José Valim
835d1044ae
Fix a problem with IE7 headers.
2010-11-08 22:45:42 +01:00
José Valim
1f44c61d08
Improve error messages, closes #574
2010-11-06 08:54:03 +01:00
Mike Gehard
9b468816dd
Add in some instructions for getting routes to a custom action on a Devise override controller
2010-11-06 15:52:29 +08:00
bUg
ab033ea986
fix for omniauth 0.2.0
2010-11-04 08:21:34 +08:00
David A. Cuadrado
09a46695f2
omniauth route should not add a ? if no param is given
2010-10-31 03:06:53 +08:00
David A. Cuadrado
bf19b15914
added open id support via omniauth
2010-10-31 03:06:52 +08:00
bUg
c429fe8d1c
fixed bug 'Could not find a valid mapping for path /users/auth/:provider/callback' when devise_for called inside scope
2010-10-30 08:57:13 +08:00
bUg
d8f33b8925
omniauth routes fix, see devise issue #600
2010-10-29 20:48:40 +08:00
José Valim
e30c0f3319
Do not automatically set filter_parameters.
2010-10-26 18:07:06 -02:00
bUg
6b04312be5
get -> match for omniauth callbacks
...
Signed-off-by: José Valim <jose.valim@gmail.com >
2010-10-26 17:55:18 -02:00
José Valim
31edd76369
Remove crazy controllers handling code.
2010-10-18 15:01:38 +02:00
José Valim
3e38043085
Properly handle failure.
2010-10-18 15:00:34 +02:00
José Valim
611261c64e
More tests for Omniauth.
2010-10-18 15:00:34 +02:00
José Valim
2f360bf201
Remove OAuth2 in favor of OmniAuth.
2010-10-18 15:00:34 +02:00
José Valim
5d4e4fbb88
Automatically set OmniAuth path prefix
2010-10-18 15:00:34 +02:00
José Valim
21d5e50054
Basic omniauth support.
2010-10-18 15:00:34 +02:00
George Guimarães
bca72ddf59
fixing typo and whitespaces
2010-10-16 20:17:39 -03:00
Jared Morgan
0aa21dca4c
Use to_adapter.get in Warden::SessionSerializer#deserialize
2010-10-17 04:22:22 +08:00
Jared Morgan
31170b9100
Use to_adapter in two more methods
...
Authenticatable.generate_token and Warden::SessionSerializer#deserialize
2010-10-17 04:22:22 +08:00
José Valim
cdbd03c45a
Simplify I18n lookup.
2010-10-14 14:43:41 +02:00
José Valim
8a8ba6c70c
Depend on ORM Adapter.
2010-10-10 17:51:32 +02:00
José Valim
e4c5158851
Sign out by default will destroy the existing session.
2010-10-10 17:51:32 +02:00
José Valim
7bc37e5237
Provide a better encryptor message and update Gemfile.lock.
2010-10-10 17:51:32 +02:00
Sean Cribbs
9f032350e3
Use ActiveModel's to_key instead of id.
...
Signed-off-by: José Valim <jose.valim@gmail.com >
2010-10-10 17:51:32 +02:00
José Valim
94ccfc5322
Remove deprecation warnings on Rails 3.1.
2010-10-10 17:51:31 +02:00
Sebastián Gamboa
721843c841
Allow to conditionally skip email validation.
2010-10-05 05:42:20 +08:00
José Valim
db1ce8eeb2
Sign up now check if the user is active or not and redirect him accordingly setting the inactive_signed_up message. This commit also moves after_update_path_for to inside RegistrationsController, not allowing it to be overriden inside ApplicationController anymore.
2010-09-30 09:12:00 +02:00
Pat Allan
16c39a9f17
Making sure timeoutable respects rememberable if both are loaded.
2010-09-29 15:27:54 +08:00
José Valim
fbb77a6edd
Ensure bcrypt also uses pepper for backward compatibility.
2010-09-28 17:45:34 +02:00
Carlos Antonio da Silva
98e69cfd71
Remove unused options param for token_auth schema, and avoid creating a new hash
2010-09-26 14:08:25 -03:00
Carlos Antonio da Silva
6a09daf570
Don't need to extend ActiveSupport::Concern anymore in oauth helpers
2010-09-26 11:47:56 -03:00
José Valim
fbac68d51a
This helpers are useless outside oauth context.
2010-09-26 13:40:09 +02:00
José Valim
2169e5de97
OAuth shortcut should use paths instead of urls.
2010-09-26 13:28:30 +02:00
José Valim
4d8d1f5222
Uncomment pepper in configuration.
2010-09-26 01:44:37 -07:00
Carlos Antonio da Silva
0bc80cec35
Remove autoload for Bcrypt encryptor, it does not exist anymore
2010-09-25 23:14:31 -03:00
José Valim
38f3f6318a
cookie_domain is deprecated in favor of cookie_options which uses session_options by default.
2010-09-25 21:13:54 +02:00
José Valim
1dfcbe3bd4
Regenerate gemspec to force latest warden version.
2010-09-25 20:29:33 +02:00
José Valim
531f221be7
Allow :stateless_token to be set to true avoiding users to be stored in session through token authentication
2010-09-25 20:28:14 +02:00
José Valim
617e142e34
Store the salt in session and expire the session if the user changes his password
2010-09-25 17:24:56 +02:00
José Valim
09088706bb
Extract encryptors into their own module for better bcrypt support.
2010-09-25 16:08:46 +02:00
José Valim
31d821c2e0
Allow to Rememberable to work without remember_token relying on salt if possible.
...
This comes with the benefit that if you change your password, all remember tokens expires, and it also requires one field less in the database.
The downside is that if you want remember_me_across_browser to be false, it won't work unless you use the token. It also requires you to be using database_authenticable.
Using salt is now the default in Devise.
2010-09-25 13:07:24 +02:00
José Valim
2aa1d2f3b7
Increase the size of the friendly token.
...
The chance of someone to successfully guess a random token in the website is:
(number_of_users / 2388636399360109977557402041718133080829429159844757507642063199359529632522467783435119230976)
2010-09-25 11:51:57 +02:00
José Valim
c12d75eecf
Do not rely on controller being available in params.
2010-09-25 11:22:18 +02:00
Carlos Antonio da Silva
d02ea3153b
Small doc fix
2010-09-24 08:59:39 -03:00
José Valim
dd11f43014
All tests green on latest mongoid.
2010-09-24 11:30:08 +02:00
Martin Davidsson
ec0e105c52
Incorporate feedback from carlosantoniodasilva and update rememberable
...
tests
2010-09-24 11:08:59 +08:00
Martin Davidsson
f3e348f6f4
Merge options hash instead of overwriting it
...
The forgetable hook will delete cookies based on the :scope in an
options hash but it was overwriting the options and setting them to
either an empty hash or a hash with a single :domain key. Because the
:scope was lost, the hook was trying to delete the 'remember__token'
instead of the more typical 'remember_user_token' cookie.
2010-09-24 11:08:58 +08:00
José Valim
589de27bcd
Stop using inject({}) to build hashes. It is harder to read and slower.
2010-09-22 23:29:17 +02:00
