José Valim
7ff0231ab7
Don't pass options forward, this fixes uncaught warden error. Unfortunately could not write a test for it, although easily reproducible in Rails applications. Closes #754
2011-01-03 16:25:23 +01:00
Carlos Antonio da Silva
55cb7195b8
Implicit self
2011-01-02 20:13:37 -02:00
José Valim
555435e6fe
Doh. Use respond_to :all.
2010-12-30 14:49:15 +01:00
Richard Aday
038eb321d4
Allowing reset_password_keys and unlock_keys to be set through the config
2010-12-30 03:10:56 +08:00
José Valim
c8c84c77c6
Respond to all formats if none is specified.
2010-12-29 16:01:11 +01:00
José Valim
8f20b13f84
By default, just require e-mail on recover and lockable.
2010-12-28 23:00:23 +01:00
José Valim
af1295284c
rememberable cookie now is httponly by default
2010-12-25 12:04:04 +01:00
José Valim
b34f456096
Invoke callbacks using the correct API
2010-12-25 11:41:14 +01:00
Josh Starcher
1a2590dc08
Warden before_failure hooks are an array, not a proc
2010-12-25 18:21:20 +08:00
José Valim
1cdb02bd54
More tiny fixes
2010-12-25 11:15:56 +01:00
José Valim
b32883a7c5
Small fixes in views generator
2010-12-25 11:07:52 +01:00
José Valim
27051cb2fe
responder formats should be inherited from ApplicationController
2010-12-25 11:04:39 +01:00
Prem Sichanugrist
e8e3df3891
Add support for non-navigational format response to SessionsController
...
This will make Devise::SessionsController return the authenticated object in the requested format instead of redirect the client to another page upon success authentication.
2010-12-25 17:57:15 +08:00
Fred Wu
2561cd4eac
Use an instance variale when removing the temp directories otherwise the create_haml_views method gets called twice.
2010-12-23 17:05:05 +08:00
Fred Wu
4519364eaf
Added support for generating Slim view templates.
2010-12-23 17:05:03 +08:00
Uģis Ozols
f56c588a6a
Fix typo.
2010-12-23 15:48:03 +08:00
siong1987
379d8c69a5
Issue 675: recall option is now passed for not confirmed email and inactive account.
2010-12-23 02:24:26 +08:00
José Valim
13e8bc22e3
Move duplicate sign_in logic to sign_in().
2010-12-20 10:02:27 +01:00
José Valim
a156576ce9
Fix an issue causing infinite redirects in production, closes #720
2010-12-18 09:38:41 +01:00
Andrés Mejía
fe4eaf2d12
Invoking the model generator even if the model exists but only when the behavior is :revoke (i.e. we are running 'rails destroy' instead of 'rails generate')
2010-12-18 15:15:42 +08:00
Andrés Mejía
845c186f48
Removing caching from #model_exists? so it doesn't return a false positive when the method is called, the file is deleted and then the method is called again.
2010-12-18 15:15:42 +08:00
José Valim
b50fd1a72e
Fix e-mail regexp. Closes #698
2010-12-01 17:19:45 +01:00
José Valim
f2f9232b89
Fix typo.
2010-11-30 05:01:19 -08:00
José Valim
cb62597afa
Improve messages.
2010-11-30 12:23:09 +01:00
José Valim
089c316f37
Improve message.
2010-11-29 00:56:43 -08:00
José Valim
ec5bfe9119
Ensure to convert keys on indifferent hash.
2010-11-27 19:45:25 +01:00
Gavin Hughes
fe5ef25614
Deprecate anybody_signed_in? in favor of signed_in?(nil)
2010-11-28 00:09:23 +08:00
José Valim
4977bd1222
Fix indifferent access on session issue.
2010-11-25 00:06:39 +01:00
José Valim
71450998c5
Avoid session fixation attacks.
2010-11-20 23:18:41 +01:00
José Valim
6f205fe4c4
Tidy up.
2010-11-20 21:44:53 +01:00
Steve Ross
4a8f9a9ba8
set_flash_message: Added conditional to make certain flash entries are not set if message is blank.
...
Signed-off-by: José Valim <jose.valim@gmail.com >
2010-11-20 21:42:25 +01:00
José Valim
d8016ea3fd
Ensure namespaces has proper scoped views, closes #654
2010-11-20 21:41:26 +01:00
José Valim
6bfcbeffdd
Tidy up and update CHANGELOG.
2010-11-20 21:19:12 +01:00
Andrew Dahl
8d1e23c67d
add unit and integration tests for case insensitive keys
2010-11-20 15:54:01 +01:00
Andrew Dahl
e911abf13b
changed case_insensitive_keys config setting to an array and added downcasing of keys as a before filter on database authentication module
2010-11-18 23:29:53 +01:00
Andrew Dahl
94c666e439
first attempt
2010-11-18 21:24:42 +01:00
Andrés Mejía
020f919dcd
Tpyo.
2010-11-15 18:35:15 +08:00
José Valim
b70b72b6b0
Rollback to use the regexp result.
2010-11-15 10:01:45 +01:00
Denis Hennessy
19219cbe0f
Fix for HTTP Basic Auth when base64 encoded string wraps
...
When using a token longer than approximately 45 characters, the base64 encoded string passed in
the HTTP_AUTHORIZATION header will contain newline characters. The existing implementation used
a regex which didn't handle this case correctly.
2010-11-15 16:40:39 +08:00
Robert Peters
32c6f7b00b
For #646 - modify the configuration text that is output for confirm_within so that it matches the actual default value. If you use nil as a value, it crashes trying to call nil.ago
2010-11-13 15:50:33 +08:00
José Valim
67a49f3b75
Ensure authenticatable_salt can be nil.
2010-11-11 22:51:39 +01:00
José Valim
14d772972d
No need to set a pepper in a bcrypt world.
2010-11-11 12:54:09 -08:00
José Valim
b2496d1bc1
Smallish updates.
2010-11-11 13:53:52 +01:00
José Valim
c7efb68a77
Devise does not intercept 401 returned from applications anymore
2010-11-09 23:42:14 +01:00
José Valim
505bd39700
failure_app now properly handles nil request.format
2010-11-09 23:30:53 +01:00
José Valim
931b902583
Fix failing tests.
2010-11-09 22:27:46 +01:00
José Valim
835d1044ae
Fix a problem with IE7 headers.
2010-11-08 22:45:42 +01:00
José Valim
1f44c61d08
Improve error messages, closes #574
2010-11-06 08:54:03 +01:00
Mike Gehard
9b468816dd
Add in some instructions for getting routes to a custom action on a Devise override controller
2010-11-06 15:52:29 +08:00
bUg
ab033ea986
fix for omniauth 0.2.0
2010-11-04 08:21:34 +08:00
