José Valim
dd721f1857
Use secure compare as well.
2011-02-15 11:33:54 +01:00
Jo Liss
692f7b27ff
typos (remaining instances of authenticable -> authenticatable)
2011-01-13 13:02:17 +08:00
Prem Sichanugrist
e8e3df3891
Add support for non-navigational format response to SessionsController
...
This will make Devise::SessionsController return the authenticated object in the requested format instead of redirect the client to another page upon success authentication.
2010-12-25 17:57:15 +08:00
José Valim
13e8bc22e3
Move duplicate sign_in logic to sign_in().
2010-12-20 10:02:27 +01:00
Gavin Hughes
fe5ef25614
Deprecate anybody_signed_in? in favor of signed_in?(nil)
2010-11-28 00:09:23 +08:00
Carlos Antonio da Silva
ed30114bd8
Fix changelog e cleanup white spaces
2010-11-21 11:25:37 -02:00
Steve Ross
4a8f9a9ba8
set_flash_message: Added conditional to make certain flash entries are not set if message is blank.
...
Signed-off-by: José Valim <jose.valim@gmail.com >
2010-11-20 21:42:25 +01:00
José Valim
b2496d1bc1
Smallish updates.
2010-11-11 13:53:52 +01:00
José Valim
e4c5158851
Sign out by default will destroy the existing session.
2010-10-10 17:51:32 +02:00
José Valim
db1ce8eeb2
Sign up now check if the user is active or not and redirect him accordingly setting the inactive_signed_up message. This commit also moves after_update_path_for to inside RegistrationsController, not allowing it to be overriden inside ApplicationController anymore.
2010-09-30 09:12:00 +02:00
José Valim
617e142e34
Store the salt in session and expire the session if the user changes his password
2010-09-25 17:24:56 +02:00
José Valim
617b95fdcd
sign_out_all_scopes is true by default.
2010-08-23 09:18:39 -03:00
José Valim
731650a0f1
after_sign_in_path_for always receives a resource
2010-08-23 08:56:10 -03:00
Carlos Antonio da Silva
81c49c69df
Fix failing helper test and test descriptions
2010-08-13 09:02:51 -03:00
Carlos Antonio da Silva
01c272c692
Add some tests to helper creation using namespaces, to better show how it works.
2010-08-02 08:52:12 -03:00
José Valim
fefbf51c79
scope_signed_in? helpers now simply delegate to current_scope to improve performance.
2010-07-26 20:33:23 +02:00
José Valim
4ac6b6e407
Unit tests for OAuth.
2010-07-26 20:33:23 +02:00
José Valim
00c6f583e2
More OAuth tests.
2010-07-26 20:33:22 +02:00
José Valim
adba4e2262
Register cancel route so a shortcut is created.
2010-07-26 20:33:22 +02:00
José Valim
ae6322efb5
No longer retrieve the user from paths, but use the env hash. This change deprecates use_default_scope.
...
If you have non conventional routes and want to specify the scope for a controller, you can do that at the router level:
as :user do
get "/sign_in", :to => "devise/session#new"
end
This is saying: when accessing "/sign_in", devise should use the user scope. Meaning that users signed through that form will be signed to the user scope.
2010-07-06 01:33:32 +02:00
José Valim
7a1adbb61e
Improve integration of devise with new router scope.
2010-07-04 11:53:12 +02:00
Denis Lifanov
819db39263
simplification (sign_out_everybody => sign_out_all_scopes)
2010-06-25 02:29:48 +08:00
Denis Lifanov
1924a915a8
sign_out_everybody helper (as a convenient proxy to warden)
2010-06-25 02:29:41 +08:00
SSDany
5c9fe5e769
anybody_signed_in? helper
2010-06-12 05:11:03 +08:00
Joseph DelCioppio
80977c6dee
Added after_update_path to registrations controller. Users can now specify the path that their app should return to after updated a resource. If not specified it will return to the root, or the resource's root if specified.
2010-05-25 04:25:32 +08:00
José Valim
23e608e27b
No need to append ?unauthenticated=true in URLs anymore since Flash was moved to a middleware in Rails 3.
2010-04-03 11:43:31 +02:00
José Valim
2b5a068246
Move part of the logic in SessionsController#create to the FailureApp. Whenever Warden is invoked with a :recall, the failure app will recall the chosen controller and the action given to recall.
2010-04-01 17:30:55 +02:00
José Valim
ca4e09390e
Compatibility with Ruby 1.9.1 and 1.9.2.
2010-03-26 11:27:19 +01:00
José Valim
829c85631b
Aim for Rails 3.0.0.beta1 compatibility. A few issues are still pending with Warden.
2010-03-10 15:00:12 +01:00
José Valim
1c6f18cb8b
Since Devise::FailureApp is now a metal, we can get rid of this default_url_options stuff.
2010-02-19 10:13:53 +01:00
José Valim
d466849c57
More tests passing for Rails 3 compatibility. 369 tests, 788 assertions, 34 failures, 16 errors.
2010-02-16 16:11:30 +01:00
José Valim
a5b2ee5171
Improve documentation for after_sign_in_path_for.
2010-01-16 10:56:35 +01:00
José Valim
f46d1b1d81
Add support to Warden 0.9.0.pre
2010-01-14 13:38:02 +01:00
José Valim
b581f86317
DRY up controllers.
2010-01-13 18:12:13 +01:00
José Valim
eb335234d4
Release Devise 0.5.5 bringing back Ruby 1.8.6 compatibility.
2009-11-19 20:55:40 -02:00
José Valim
d445b4beb9
Create after_sign_in_path_for and after_sign_out_path_for hooks and sign_in_and_redirect and sign_out_and_redirect helpers.
2009-11-19 11:16:31 -02:00
José Valim
05fc5712e3
Added a couple of helpers to help sign up and delete account tasks.
2009-11-15 12:19:16 -02:00
José Valim
05678e773f
Added support to config.default_url_options.
2009-11-06 20:59:36 -02:00
José Valim
1db50dee36
Skip authentication filters by default on Devise controllers and add devise_controller? to select/reject other filters.
2009-11-06 09:33:18 -02:00
José Valim
dede8af5b0
Do not include Devise internal helpers in application controller.
2009-10-27 21:26:40 -02:00
Carlos A. da Silva
28a7f78fba
Creating rememberable module.
2009-10-20 00:31:33 -02:00
José Valim
b0a2da72b5
Use sign_in and authenticate methods.
2009-10-18 15:01:56 -02:00
José Valim
609a83a76c
Allow to access the session for a given scope, through #{scope}_session reader and improved documentation.
2009-10-18 12:54:21 -02:00
Carlos A. da Silva
8d85db3b57
Sign user in automatically after confirming or changing it's password
2009-10-18 10:36:20 -02:00
Carlos A. da Silva
0f174dbf4b
Updating routes to use sign_in/sign_out instead of session.
2009-10-16 13:44:51 -03:00
Carlos A. da Silva
0664359381
Updating helpers to use sign_in/sign_out instead of authenticate/logout.
2009-10-12 19:20:12 -03:00
José Valim
6da49499ff
Finished major changes.
2009-10-12 10:18:14 -03:00
José Valim
b012bc800b
Kick tests back to life.
2009-10-11 23:24:57 -03:00
Carlos A. da Silva
91a87eed2c
Use signed_in instead of logged_in, and setup current_user to pass a scope.
2009-10-11 13:00:44 -03:00
Carlos A. da Silva
1226c3d8de
Adding separated tests for admins and users to enforce modularization. Rewrite of several tests.
2009-10-11 10:49:25 -03:00