José Valim
ac8221aca7
Add cancel to registrations controller as a way to delete information from session.
2010-07-26 20:33:22 +02:00
Carlos Antonio da Silva
d0d88cf259
Minor tweaks in OAuth README
2010-07-26 20:33:22 +02:00
José Valim
bd8d11e291
More minor tweaks to README>
2010-07-26 20:33:22 +02:00
José Valim
0d6f303735
Add a small connection stubbing API.
2010-07-26 20:33:22 +02:00
José Valim
ef841ca17d
Start to add helpers for OAuth tests.
2010-07-26 20:33:22 +02:00
José Valim
eb3118e89a
Add OAuth2 documentation.
2010-07-26 20:33:21 +02:00
José Valim
5d6900dcdb
Remove old generators.
2010-07-26 20:32:06 +02:00
José Valim
bd1006d321
Add the possibility to skip OAuth authentication by returning nil from the finder method.
2010-07-26 20:32:06 +02:00
José Valim
17ec0c08ed
Expire all /_oauth_token$/ keys in session after sign in, so if two users create accounts in the same session, the facebook account will be linked just to the first one.
2010-07-26 20:32:06 +02:00
José Valim
b31d60ce7c
Implement error handling for OAuth.
2010-07-26 20:32:05 +02:00
José Valim
b87dc84079
Add oauth links to default template.
2010-07-26 20:32:05 +02:00
José Valim
0aa41d6388
Tidy up lose ends.
2010-07-26 20:32:05 +02:00
José Valim
8bf6a66e05
Make Devise::Oauth follow the same conventions as Devise::controllers.
2010-07-26 20:32:05 +02:00
José Valim
3ba424774e
Remove deprecated code.
2010-07-26 20:32:05 +02:00
José Valim
1a9db03b22
Do not rely on load time anymore. Instead, provide a helper that is called whenever a mapping is given.
2010-07-26 20:32:05 +02:00
José Valim
faf771c798
Add OAuth url helpers.
2010-07-26 20:32:04 +02:00
José Valim
bd8294aecf
More OAuth setup.
2010-07-26 20:32:04 +02:00
José Valim
6c5be8dfd5
Initial routes and module setup.
2010-07-26 20:32:04 +02:00
José Valim
9ab64c53f4
Release 1.1.0.
v1.1.0
2010-07-26 20:25:28 +02:00
José Valim
c5999c8f61
Tests green on mongoid as well.
2010-07-26 20:25:02 +02:00
José Valim
680f2612f4
Update CHANGELOG.
2010-07-26 11:52:05 +02:00
José Valim
81620fecab
More about extend remember period feature.
2010-07-23 23:57:31 +02:00
Trevor Turk
2939a61a49
documentation tweaks for extend_remember_period
2010-07-24 01:06:10 +08:00
José Valim
058d433f28
Add extend_remember_period, closes #340 .
2010-07-23 16:32:22 +02:00
Stefan Huber
5aeb8cf1cf
small documentation fix
2010-07-23 01:33:08 +08:00
José Valim
abfd7e5a4b
Warn in case you are using the previous session schema, closes #386
2010-07-19 00:11:51 +02:00
José Valim
869c658e3b
Always loop before generating a token.
2010-07-18 23:32:56 +02:00
José Valim
5e64699a5f
Add filters as convenient default.
2010-07-18 12:17:04 +02:00
Jinzhu
aecc014d33
Attributes for devise generator
2010-07-17 15:09:01 +08:00
José Valim
55fd7e3b0a
Consider ApplicationController url_options in for PathChecker.
2010-07-16 08:40:21 +02:00
José Valim
b4794e041b
Save confirmation token to the database, if one does not exist but was requested, closes #377
2010-07-14 18:03:34 +02:00
Carlos Antonio da Silva
4f6113ab68
Fix docs about after_sign_in_path_for and routes
2010-07-13 22:22:26 -03:00
José Valim
05d23f1a00
Do not check the constant, otherwise class renaming will trigger errors as well.
2010-07-12 10:42:02 +02:00
José Valim
e567c00dd8
Store classes as string in session, to avoid serialization and stale data issues, closes #356
2010-07-12 07:48:19 +02:00
José Valim
ebe3e791d6
Email should be case insensitive, closes #372
2010-07-12 07:29:45 +02:00
José Valim
2602ef41cf
Do not add unlock routes unless unlock strategy is email or both, closes #373
2010-07-12 07:24:21 +02:00
José Valim
a87bc4a861
Also pass stretches to salt generation.
2010-07-12 06:59:49 +02:00
José Valim
eca511a8f2
Use confirmed_at as flag.
2010-07-08 08:21:14 +02:00
José Valim
9c5ff02ff1
Update CHANGELOG and tidy up tests.
2010-07-07 21:32:13 +02:00
James Pellow
9f29ca480b
Add http_authenticatable_on_xhr option
...
Signed-off-by: José Valim <jose.valim@gmail.com >
2010-07-07 21:26:29 +02:00
James Pellow
b9df42c350
Add tests for http_authenticatable_on_xhr option
2010-07-08 03:21:13 +08:00
José Valim
bd0e2a3180
devise_for now accepts a block. All routes inside the block uses the scope defined by devise_for.
...
You are now allowed to do:
devise_for :users do
# Non conventional sign_in route
get "/sign_in" => "devise/sessions#new"
end
And it should work as expected.
2010-07-07 10:51:14 +02:00
José Valim
750560ae87
Ensure method is always POST on new.html.erb forms, closes #365 . Also, start to remove usage of assert_template.
2010-07-06 16:01:22 +02:00
José Valim
e2a4ebce4a
Consider script name in PathChecker.
2010-07-06 16:01:22 +02:00
Carlos Antonio da Silva
77b7692b57
Regenerate devise initializar and get rid of some deprecation warnings from Devise and Rails.
2010-07-06 08:40:32 -03:00
José Valim
ae6322efb5
No longer retrieve the user from paths, but use the env hash. This change deprecates use_default_scope.
...
If you have non conventional routes and want to specify the scope for a controller, you can do that at the router level:
as :user do
get "/sign_in", :to => "devise/session#new"
end
This is saying: when accessing "/sign_in", devise should use the user scope. Meaning that users signed through that form will be signed to the user scope.
2010-07-06 01:33:32 +02:00
Carlos Antonio da Silva
238226e33a
Adding a small note about security and issues
2010-07-05 14:26:58 -03:00
José Valim
96a9c88420
Improve docs on finders after taking a look at the wiki.
2010-07-05 19:11:37 +02:00
José Valim
dd612753f9
Extract redirect_url from failure app to its own method.
2010-07-05 15:22:44 +02:00
José Valim
35923c9c69
Move template_paths to its own module.
2010-07-05 13:27:15 +02:00