José Valim
7a45043bc8
Be more friendly if the user goes ahead and adds devise_for :users before defining the model.
2010-06-24 16:51:30 +02:00
Rob Holland
ad63e25c89
config.load_paths is now config.autoload_paths
2010-06-24 19:28:34 +08:00
José Valim
a39312e26b
Ensure flash messages work with Devise::TestHelper, closes #327
2010-06-23 12:39:04 +02:00
Jared Morgan
e90732c8c3
Remove #save! method from test DM User model
...
DM has a #save! method, so it's no longer needed. Having it call #save
caused #valid? to be called where tests were expecting validations to be
skipped.
2010-06-23 18:38:39 +08:00
Postmodern
29ba790e07
Do not use ActiveRecord only methods in tests.
2010-06-19 17:30:10 -07:00
snusnu
4e2cd157c1
Specs surely don't pass, but they run at least!
2010-06-19 17:30:10 -07:00
José Valim
5e1ef9319e
Check if the user is already signing out before timing out his connection, closes #273 .
2010-06-13 12:40:13 +02:00
José Valim
70a429d9ff
Split tests files a bit.
2010-06-13 12:11:15 +02:00
José Valim
f16d01869a
Rename apply_schema to apply_devise_schema and refactor Mongoid part a bit.
2010-06-13 11:48:45 +02:00
José Valim
80895c3b9a
Make I18n key for mailer compatible with lookup shortcuts, closes #245
2010-06-12 20:29:43 +02:00
José Valim
0333caeb92
Make bcrypt the default encryptor and automatically add a pepper on generation.
2010-06-12 14:46:55 +02:00
SSDany
5c9fe5e769
anybody_signed_in? helper
2010-06-12 05:11:03 +08:00
José Valim
870912d458
beta 4 works, yay.
2010-06-09 01:27:38 +02:00
Lloyd Pick
f0c0f5f11b
fixed a few spelling/grammar mistakes
2010-05-28 20:24:39 +08:00
Alexander Uvarov
6ff77c9fdf
Add merb-auth like router helper
2010-05-25 05:51:32 +08:00
Joseph DelCioppio
80977c6dee
Added after_update_path to registrations controller. Users can now specify the path that their app should return to after updated a resource. If not specified it will return to the root, or the resource's root if specified.
2010-05-25 04:25:32 +08:00
bodhi
c8ec42a41c
Update documentation to track deprecation of :as in #devise_for
2010-05-19 15:50:48 +08:00
José Valim
bff64a6291
Added navigational formats to specify when it should return a 302 and when a 401, closes #234 and #249 .
2010-05-16 19:13:38 +02:00
Paul Rosania
592fa59e88
Automatically create the confirmation_token when email is sent for optionally confirmable models
...
Signed-off-by: José Valim <jose.valim@gmail.com >
2010-05-16 14:54:05 +02:00
Paul Rosania
02c2df65cd
Mark confirmable roles as active when confirmation_required? is false
...
Signed-off-by: José Valim <jose.valim@gmail.com >
2010-05-16 14:53:08 +02:00
José Valim
59bee679ca
Add tests to cookie domain, closes #254 .
2010-05-16 14:13:56 +02:00
José Valim
f1bbce58f3
Add tests to previous commit.
2010-05-16 12:14:02 +02:00
José Valim
e905762611
Clean up the whole loading mess and closes #247 . This commit depends on latest Rails.
2010-05-16 00:38:40 +02:00
José Valim
d38421dde8
Green tests on Rails master, closes #261
2010-05-15 10:39:11 +02:00
José Valim
708fe78d86
Ensure password confirmation is always required, closes #228
2010-04-25 09:38:56 +02:00
José Valim
41311eb38d
Move mailer configuration to the app.
2010-04-25 09:26:51 +02:00
José Valim
4da63c5395
Ensure routes are loaded before application classes are eager loaded, closes #212 .
2010-04-22 19:59:52 +02:00
José Valim
b9c0676a01
Get rid of deprecation warnings.
2010-04-15 08:43:39 +02:00
José Valim
731f156f50
Do not show unlock link unless strategy is e-mail. Closes #204 .
2010-04-15 08:40:15 +02:00
José Valim
b2a50db1df
Fix a bug with STI. Closes #195 .
2010-04-15 08:34:57 +02:00
José Valim
6bd0c7fc2b
:as and :scope in routes is deprecated. Use :path and :singular instead. Closes #199 .
2010-04-15 08:21:13 +02:00
José Valim
8db559148c
All tests green on latest Rails beta.
2010-04-13 23:28:13 +02:00
José Valim
fd934f1434
Revert "Only triggers http in failure app if devise.authentication_method is :http."
...
It has not fixed the problem it was supposed to fix.
This reverts commit 9d1a52978c
2010-04-06 22:36:41 +02:00
José Valim
c07b5ae858
:activatable is included by default in your models. If you are building a strategy for devise, you now need to call validate(resource), since Devise has now a default API to validate resources before and after signing them in. You can still use other Warden::Strategies with Devise, but they won't work with a few modules like unlockable (they never did, but now we have a single point to make it work).
2010-04-06 16:34:22 +02:00
José Valim
9d1a52978c
Only triggers http in failure app if devise.authentication_method is :http.
2010-04-06 13:40:39 +02:00
José Valim
0d3c6b9d99
Small changes to token_authenticatable.
2010-04-06 13:26:56 +02:00
José Valim
1591294b7a
Compatibility with Rails beta 3.
2010-04-05 11:46:26 +02:00
José Valim
b974b7bc78
Move failure messages from devise.sessions to devise.failure.
2010-04-03 13:11:45 +02:00
José Valim
23e608e27b
No need to append ?unauthenticated=true in URLs anymore since Flash was moved to a middleware in Rails 3.
2010-04-03 11:43:31 +02:00
José Valim
f5d01c217d
TokenAuthenticatable now works with HTTP Basic Auth by default (take a look at Highrise API for a good example). This basically allows you to pass the authentication token as HTTP Basic Auth username.
2010-04-01 19:09:33 +02:00
José Valim
2b5a068246
Move part of the logic in SessionsController#create to the FailureApp. Whenever Warden is invoked with a :recall, the failure app will recall the chosen controller and the action given to recall.
2010-04-01 17:30:55 +02:00
José Valim
13b8ddf54c
Ensure customs pass through sessions_controller.
2010-04-01 14:00:21 +02:00
José Valim
16666b7587
Get rid of flash hook and clean up passwords after registration.
2010-04-01 13:23:49 +02:00
José Valim
dac7887d7c
Allow the dummy application in test/rails_app to boot.
2010-04-01 12:49:11 +02:00
José Valim
3d1a04fd83
Fix warden configuration.
2010-03-31 22:04:48 +02:00
José Valim
015c74e734
Use message verifier in cookies. Previous implementation allowed brute force attacks by cookies. Even though it is impossible for the brute force attack to succeed, the current implementation blocks the attacker even before hitting the database.
2010-03-31 13:31:45 +02:00
José Valim
6cc32db2dd
Add lock_strategy.
2010-03-31 11:54:11 +02:00
José Valim
597a930c74
We do not use t() helpers in views, so there is no reason why this particular one should use them.
2010-03-30 20:06:56 +02:00
José Valim
22e1fa0cb9
Small cleanup.
2010-03-30 00:29:57 +02:00
Josh Kalderimis
a6a018253e
minor change to content type checking to make it more flexible when utf8 is returned
...
Signed-off-by: José Valim <jose.valim@gmail.com >
2010-03-30 00:23:46 +02:00
