Santiago Pastorino
5fb5efbd42
Returning WWW-authenticate on ajaxs calls depends only on Devise.http_authenticatable_on_xhr config
2010-08-31 23:51:58 +08:00
José Valim
b8ab9a835b
Disable HTTP Authentication by default. You can turn it on in the initializer.
2010-08-23 10:22:31 -03:00
José Valim
617b95fdcd
sign_out_all_scopes is true by default.
2010-08-23 09:18:39 -03:00
José Valim
731650a0f1
after_sign_in_path_for always receives a resource
2010-08-23 08:56:10 -03:00
Carlos Antonio da Silva
81c49c69df
Fix failing helper test and test descriptions
2010-08-13 09:02:51 -03:00
Martin Rehfeld
f3385e96ab
use :sign_out_via to control the method(s) for the destroy_*_session_path route
2010-08-13 19:16:59 +08:00
Martin Rehfeld
f04e633542
provide :sign_out_via option for Devise::Mapping
2010-08-13 19:16:58 +08:00
Carlos Antonio da Silva
01c272c692
Add some tests to helper creation using namespaces, to better show how it works.
2010-08-02 08:52:12 -03:00
José Valim
c31b1f2146
Remove skipped handling from OAuth in favor of exceptions and rescue_from syntax.
2010-07-28 21:51:26 +02:00
José Valim
fefbf51c79
scope_signed_in? helpers now simply delegate to current_scope to improve performance.
2010-07-26 20:33:23 +02:00
José Valim
4ac6b6e407
Unit tests for OAuth.
2010-07-26 20:33:23 +02:00
José Valim
4bfa98eb7c
More and more tests to DeviseOauth.
2010-07-26 20:33:23 +02:00
José Valim
00c6f583e2
More OAuth tests.
2010-07-26 20:33:22 +02:00
José Valim
adba4e2262
Register cancel route so a shortcut is created.
2010-07-26 20:33:22 +02:00
José Valim
ac8221aca7
Add cancel to registrations controller as a way to delete information from session.
2010-07-26 20:33:22 +02:00
José Valim
bd8d11e291
More minor tweaks to README>
2010-07-26 20:33:22 +02:00
José Valim
0d6f303735
Add a small connection stubbing API.
2010-07-26 20:33:22 +02:00
José Valim
ef841ca17d
Start to add helpers for OAuth tests.
2010-07-26 20:33:22 +02:00
José Valim
17ec0c08ed
Expire all /_oauth_token$/ keys in session after sign in, so if two users create accounts in the same session, the facebook account will be linked just to the first one.
2010-07-26 20:32:06 +02:00
José Valim
bd8294aecf
More OAuth setup.
2010-07-26 20:32:04 +02:00
José Valim
6c5be8dfd5
Initial routes and module setup.
2010-07-26 20:32:04 +02:00
José Valim
c5999c8f61
Tests green on mongoid as well.
2010-07-26 20:25:02 +02:00
José Valim
81620fecab
More about extend remember period feature.
2010-07-23 23:57:31 +02:00
Trevor Turk
2939a61a49
documentation tweaks for extend_remember_period
2010-07-24 01:06:10 +08:00
José Valim
058d433f28
Add extend_remember_period, closes #340 .
2010-07-23 16:32:22 +02:00
Stefan Huber
5aeb8cf1cf
small documentation fix
2010-07-23 01:33:08 +08:00
José Valim
b4794e041b
Save confirmation token to the database, if one does not exist but was requested, closes #377
2010-07-14 18:03:34 +02:00
José Valim
e567c00dd8
Store classes as string in session, to avoid serialization and stale data issues, closes #356
2010-07-12 07:48:19 +02:00
José Valim
2602ef41cf
Do not add unlock routes unless unlock strategy is email or both, closes #373
2010-07-12 07:24:21 +02:00
José Valim
a87bc4a861
Also pass stretches to salt generation.
2010-07-12 06:59:49 +02:00
José Valim
9c5ff02ff1
Update CHANGELOG and tidy up tests.
2010-07-07 21:32:13 +02:00
James Pellow
b9df42c350
Add tests for http_authenticatable_on_xhr option
2010-07-08 03:21:13 +08:00
José Valim
bd0e2a3180
devise_for now accepts a block. All routes inside the block uses the scope defined by devise_for.
...
You are now allowed to do:
devise_for :users do
# Non conventional sign_in route
get "/sign_in" => "devise/sessions#new"
end
And it should work as expected.
2010-07-07 10:51:14 +02:00
José Valim
750560ae87
Ensure method is always POST on new.html.erb forms, closes #365 . Also, start to remove usage of assert_template.
2010-07-06 16:01:22 +02:00
Carlos Antonio da Silva
77b7692b57
Regenerate devise initializar and get rid of some deprecation warnings from Devise and Rails.
2010-07-06 08:40:32 -03:00
José Valim
ae6322efb5
No longer retrieve the user from paths, but use the env hash. This change deprecates use_default_scope.
...
If you have non conventional routes and want to specify the scope for a controller, you can do that at the router level:
as :user do
get "/sign_in", :to => "devise/session#new"
end
This is saying: when accessing "/sign_in", devise should use the user scope. Meaning that users signed through that form will be signed to the user scope.
2010-07-06 01:33:32 +02:00
José Valim
7774accb6c
Remove data_mapper support.
...
Devise 1.1.0 will be released soon. This new version will support activerecord and mongoid as default ORMs. From now on, Devise will prefer ORM extensions as gems since this is the best way to handle dependencies.
For example, to allow Devise to work with Datamapper, it requires at least activemodel, dm-rails and dm-timestamps. If the ORM support comes from Devise gem, we cannot add dm-rails and dm-timestamps as dependencies, relying on the developer and documentation to find these out and install them.
Other ORMs may still be added to Devise, as long as they are supported by the community, extend Devise test suite to have all tests passing and they necessarily use ActiveModel::Validations.
2010-07-04 17:22:57 +02:00
José Valim
7a1adbb61e
Improve integration of devise with new router scope.
2010-07-04 11:53:12 +02:00
José Valim
18cccae82f
Update bundler, Rails and improve tests for previous commit.
2010-07-02 08:12:00 +02:00
klacointe
e9fbb3d7ef
fix AbstractController::ActionNotFound when use
...
route with specific format (ie xml, json...)
2010-07-02 13:25:33 +08:00
José Valim
421256d294
Devise should respect script_name and path_info contracts. This closes #331 , a long standing bug with Passenger.
2010-07-01 13:50:05 +02:00
Trevor Turk
aefcd53765
more tests for remember_across_browsers
...
Signed-off-by: José Valim <jose.valim@gmail.com >
2010-06-30 12:42:59 +02:00
Trevor Turk
8824b767f3
remember_across_browsers option for rememberable module
...
Signed-off-by: José Valim <jose.valim@gmail.com >
2010-06-30 12:42:42 +02:00
José Valim
2103a673f0
Allow devise_for to be scoped with the scope method. This commit requires latest commits in Rails master.
2010-06-30 12:41:44 +02:00
José Valim
78e7642bd2
Tests green again.
2010-06-29 21:41:34 +02:00
José Valim
4b272767d6
Fix a bug in Devise::TestHelpers where current_user was returning a Response object for non active accounts, closes #341 .
2010-06-29 11:52:10 +02:00
Maxim Filatov
4db3ac820b
sign_out_all_scopes is false by default
2010-06-25 02:29:52 +08:00
Denis Lifanov
819db39263
simplification (sign_out_everybody => sign_out_all_scopes)
2010-06-25 02:29:48 +08:00
Denis Lifanov
1a224c7486
move sign_out_scoped logic to the Devise::SessionsController#destroy
2010-06-25 02:29:45 +08:00
Denis Lifanov
1924a915a8
sign_out_everybody helper (as a convenient proxy to warden)
2010-06-25 02:29:41 +08:00