Alexander Uvarov
bbaaefa995
Relax dependency on ActiveModel::Dirty
...
Signed-off-by: José Valim <jose.valim@gmail.com >
2011-02-18 12:28:56 +01:00
Joey Aghion
fdf6a48a7e
Custom failure apps no longer ignored in test mode.
2011-02-18 15:53:04 +08:00
José Valim
7113beac81
Bring back behavior for < 3.0.4.
2011-02-16 20:59:58 +01:00
José Valim
dd721f1857
Use secure compare as well.
2011-02-15 11:33:54 +01:00
José Valim
ca293d17ba
Implement Rails' handle unverified request.
2011-02-15 10:58:38 +01:00
José Valim
add8f8a203
Works on 3.0.4.
2011-02-15 10:27:34 +01:00
Nate Todd
2d0f887ba7
Preventing timeoutable from interfering with stateless tokens.
...
Signed-off-by: José Valim <jose.valim@gmail.com >
2011-02-15 09:54:13 +01:00
José Valim
3109b0924b
Remove --haml and --slim views from Devise.
2011-02-15 09:49:11 +01:00
Jo Liss
bca43a7576
Require 'rails' in devise.rb.
...
This way we can require 'devise' without requiring 'rails' beforehand.
2011-02-10 23:00:13 +08:00
Jo Liss
8440ed0101
Make Devise::friendly_token 20 characters long.
...
This makes the tokens better suited for URLs in plain-text emails, and
is still secure for all practical purposes.
2011-02-10 21:42:58 +08:00
Jeffrey Jones
cb5e0c4a7b
Simplified logic for checking if the email is present and moved the Mongoid classes out of eval statements
2011-02-10 16:16:33 +08:00
Jeffrey Jones
0287d8cc80
When using database_authenticatable Devise will now only create an email field when appropriate.
...
(If using default authentication_keys or custom authentication_keys with email included)
Test written for Mongoid, not sure how to test for active_record yet.
2011-02-10 16:16:33 +08:00
Carlos Antonio da Silva
c9fe8885f9
Spaces
2011-02-06 19:23:36 -02:00
Nico Ritsche
f06bed279a
corrected 'an user' to 'a user' in comments and docs
2011-02-06 23:46:49 +08:00
John Plummer
7a1852e9f5
Allow send confirmation to change keys used
2011-02-05 16:19:01 +08:00
Carlos Antonio da Silva
1f8909458f
Fix typo
2011-01-26 22:26:40 -02:00
José Valim
68f699bfd4
Do not change default behavior of previous apps.
2011-01-21 10:55:40 +01:00
José Valim
0615c0a0a4
Fix infinite redirect issues. Closes #787 and closes #795 .
2011-01-20 09:22:41 +01:00
José Valim
c78bb68c66
Revert "Fix an issue causing infinite redirects in production, closes #720 "
...
This reverts commit a156576ce9
2011-01-20 09:16:44 +01:00
José Valim
d018970c4b
Revert "Doh. Use respond_to :all."
...
This reverts commit 555435e6fe
2011-01-20 09:14:38 +01:00
Jo Liss
4207c2321f
Fix the module sorting in devise method.
2011-01-15 07:38:06 +08:00
Jo Liss
54dc82ad25
Generate add_index for :authentication_token (used by :token_authenticatable).
2011-01-15 06:42:30 +08:00
Jo Liss
fa239b984a
Do not silently ignore invalid modules passed to devise method in model.
...
The & operator seemed to be only used to force sorting, but as a
side effect we got suboptimal error handling.
2011-01-15 06:42:29 +08:00
Jo Liss
692f7b27ff
typos (remaining instances of authenticable -> authenticatable)
2011-01-13 13:02:17 +08:00
Jo Liss
258eb1c7e6
Move config.pepper from encryptable into database_authenticatable section in the initializer.
...
config.pepper is used by both database_authenticatable and encryptable,
but encryptable requires database_authenticatable anyway, so it makes
more sense to have it in the database_authenticatable section.
2011-01-13 13:02:17 +08:00
vagmi
d87521723d
fix create_haml_views. see issue 761 for details
...
accessing a variable before assigning causes nil exception
2011-01-11 19:06:48 +08:00
siong1987
6e91edd5e3
failure_app redirects to the correct format if it is a non-html request. This is to ensure that firefox redirects the correct format since firefox doesn't inherit accept info. also fix issue 675 that is resurrected by issue 754.
2011-01-11 18:27:14 +08:00
Andrés Mejía
fb4ec6e9da
Fixing parameters for _omniauth_authorize_path method after short-circuiting it.
2011-01-08 02:37:05 +08:00
José Valim
7ff0231ab7
Don't pass options forward, this fixes uncaught warden error. Unfortunately could not write a test for it, although easily reproducible in Rails applications. Closes #754
2011-01-03 16:25:23 +01:00
Carlos Antonio da Silva
55cb7195b8
Implicit self
2011-01-02 20:13:37 -02:00
José Valim
555435e6fe
Doh. Use respond_to :all.
2010-12-30 14:49:15 +01:00
Richard Aday
038eb321d4
Allowing reset_password_keys and unlock_keys to be set through the config
2010-12-30 03:10:56 +08:00
José Valim
c8c84c77c6
Respond to all formats if none is specified.
2010-12-29 16:01:11 +01:00
José Valim
8f20b13f84
By default, just require e-mail on recover and lockable.
2010-12-28 23:00:23 +01:00
José Valim
af1295284c
rememberable cookie now is httponly by default
2010-12-25 12:04:04 +01:00
José Valim
b34f456096
Invoke callbacks using the correct API
2010-12-25 11:41:14 +01:00
Josh Starcher
1a2590dc08
Warden before_failure hooks are an array, not a proc
2010-12-25 18:21:20 +08:00
José Valim
1cdb02bd54
More tiny fixes
2010-12-25 11:15:56 +01:00
José Valim
b32883a7c5
Small fixes in views generator
2010-12-25 11:07:52 +01:00
José Valim
27051cb2fe
responder formats should be inherited from ApplicationController
2010-12-25 11:04:39 +01:00
Prem Sichanugrist
e8e3df3891
Add support for non-navigational format response to SessionsController
...
This will make Devise::SessionsController return the authenticated object in the requested format instead of redirect the client to another page upon success authentication.
2010-12-25 17:57:15 +08:00
Fred Wu
2561cd4eac
Use an instance variale when removing the temp directories otherwise the create_haml_views method gets called twice.
2010-12-23 17:05:05 +08:00
Fred Wu
4519364eaf
Added support for generating Slim view templates.
2010-12-23 17:05:03 +08:00
Uģis Ozols
f56c588a6a
Fix typo.
2010-12-23 15:48:03 +08:00
siong1987
379d8c69a5
Issue 675: recall option is now passed for not confirmed email and inactive account.
2010-12-23 02:24:26 +08:00
José Valim
13e8bc22e3
Move duplicate sign_in logic to sign_in().
2010-12-20 10:02:27 +01:00
José Valim
a156576ce9
Fix an issue causing infinite redirects in production, closes #720
2010-12-18 09:38:41 +01:00
Andrés Mejía
fe4eaf2d12
Invoking the model generator even if the model exists but only when the behavior is :revoke (i.e. we are running 'rails destroy' instead of 'rails generate')
2010-12-18 15:15:42 +08:00
Andrés Mejía
845c186f48
Removing caching from #model_exists? so it doesn't return a false positive when the method is called, the file is deleted and then the method is called again.
2010-12-18 15:15:42 +08:00
José Valim
b50fd1a72e
Fix e-mail regexp. Closes #698
2010-12-01 17:19:45 +01:00
