David Henry
bec913fc07
Clean up the code.
2014-05-06 23:31:59 +01:00
Anshul Sharma
dc1b399a8b
Updated ruby 1.9 hash syntax
2014-02-25 22:12:55 +05:30
José Valim
dff7891b97
Get rid of token authentication
2013-09-02 19:15:47 -03:00
José Valim
354e5022bf
Only allow insecure token lookup if a flag is given
2013-08-06 11:55:13 +02:00
Drew Ulmer
2f88f7c0ed
Remove protected_attributes gem and all whitelisting
2013-03-31 15:21:49 -05:00
Nils Landt
6e48fcee76
Fix tests for email token expiration
...
The tests work now, but are a bit wonky because User.create does things
I don't understand.
2012-07-11 18:30:36 +02:00
Rodrigo Flores
768f8832b9
Removing encryptable module
2012-05-07 16:37:16 -03:00
José Valim
89db0dd44d
Do not run validatins unless on reconfirmable branch, closes #1515 .
2011-12-20 20:54:49 +01:00
José Valim
930b324c15
Usage of confirm_within was deprecated in favor allow_unconfirmed_access_for
2011-12-11 20:18:02 +01:00
José Valim
d952dea32b
Remove the code that was dynamically adding columns to active record
2011-12-11 20:07:50 +01:00
José Valim
9a6ac7ab69
Add confirmable to admin.
2011-12-11 20:07:50 +01:00
José Valim
bd27bf7677
Deprecate and disable old behavior accumulated with time.
2011-12-04 23:58:19 +01:00
José Valim
b3034292f2
Ensure admin is running with manual lock strategy.
2011-12-01 13:19:05 +01:00
did
bbd117bd92
implementation of a much simpler solution
2011-11-05 16:53:27 +01:00
Ches Martin
55af9f8a40
Fix failing Mongoid tests
...
- attr_accessible not set for test user model, making Serializable tests
inaccurate
- Mongoid does not `include_root_in_json` by default, so enable this for
consistency with AR tests
- Mark tests pending for Mongoid < 2.1 that fail there due to known bugs
- Add `:mongoid` key for i18n model labels
- Remove outdated shim of `update_attribute` that caused mass assignment
security to be applied (ugh, that took awhile to find)
2011-08-05 01:38:42 +07:00
José Valim
29afe2d21c
Other minor improvements in the REST code.
2011-04-19 08:36:52 +02:00
José Valim
611261c64e
More tests for Omniauth.
2010-10-18 15:00:34 +02:00
José Valim
2f360bf201
Remove OAuth2 in favor of OmniAuth.
2010-10-18 15:00:34 +02:00
Carlos Antonio da Silva
98e69cfd71
Remove unused options param for token_auth schema, and avoid creating a new hash
2010-09-26 14:08:25 -03:00
José Valim
09088706bb
Extract encryptors into their own module for better bcrypt support.
2010-09-25 16:08:46 +02:00
José Valim
1ed674afa8
Use Admin in old rememberable tests.
2010-09-25 12:04:38 +02:00
José Valim
2aa1d2f3b7
Increase the size of the friendly token.
...
The chance of someone to successfully guess a random token in the website is:
(number_of_users / 2388636399360109977557402041718133080829429159844757507642063199359529632522467783435119230976)
2010-09-25 11:51:57 +02:00
José Valim
4ac6b6e407
Unit tests for OAuth.
2010-07-26 20:33:23 +02:00
José Valim
4bfa98eb7c
More and more tests to DeviseOauth.
2010-07-26 20:33:23 +02:00
José Valim
00c6f583e2
More OAuth tests.
2010-07-26 20:33:22 +02:00
