José Valim
42f0285278
Extract mailer functionality, closes #1164
2011-06-27 12:13:00 -03:00
José Valim
62e11ddbe4
Update CHANGELOG.
2011-06-22 13:07:19 -03:00
Rodrigo Flores
004fe2ad12
Paranoid mode for recoverable
2011-06-22 12:50:34 -03:00
Stefan Wrobel
8e87a2d80d
Add strip_whitespace_keys which works like case_insensitive_keys but strips whitespace from emails
2011-06-10 01:37:43 -07:00
Sergey Kojin
58f8c7c613
support for named omniauth open_id strategies
2011-05-25 00:15:24 +04:00
Wael Nasreddine
4c8cc5e3f3
SecureRandom is available since Ruby 1.8.7, remove the unnecessary defined? check.
2011-05-24 08:29:15 +02:00
Wael Nasreddine
72bb33f962
Rails has remove SecureRandom from ActiveSupport in Rails 3.2, deprecated in 3.1
...
Since it has been deprecated, this patch favors SecureRandom on ActiveSupport::SecureRandom
2011-05-23 15:34:09 -07:00
Artem Pechenyi
0fbe4cb6b9
fix reference storage to support new and old class cache api
2011-05-23 17:29:10 +03:00
José Valim
4fd866d113
User cannot access sign up and similar pages if he is already signed in through a cookie or token, closes #1036 .
2011-04-29 08:56:57 +02:00
José Valim
bdad984ace
Use Devise::Email::EXACT_PATTERN.
2011-04-19 14:22:14 +02:00
Rodrigo Flores
0b598cf132
Changed the e-mail validation regex
2011-04-19 20:16:19 +08:00
José Valim
2cfa58b433
Create shared_helpers for duplicated logic in Devise controllers and failure app.
2011-04-17 19:43:54 +02:00
José Valim
fa6c8ab321
Use inflector to avoid conflicts.
2011-04-16 13:30:15 +02:00
Matias Korhonen
8db00eedea
Bump the password maximum length to 128 characters.
2011-04-15 16:39:01 +08:00
José Valim
ed51fc7636
Tidy up previous commits.
2011-03-30 15:35:38 +02:00
Jean-Daniel Guyot
be2aeee70f
Add reset_password_within configuration variable.
2011-03-30 21:11:33 +08:00
José Valim
73669e09c8
Remove deprecations, bump to .dev and update template.
2011-03-28 21:26:53 +02:00
Jack Dempsey
fbd35ec332
new cache api requires passing a key to get
2011-03-25 06:38:26 +08:00
José Valim
30b35e3727
Fix syntax error.
2011-03-24 20:25:54 +01:00
Jack Dempsey
330cafd3d2
use reference if available otherwise ref
2011-03-25 03:16:41 +08:00
Jack Dempsey
fe9024218c
ref will be reference in 3.1
2011-03-25 03:16:40 +08:00
José Valim
74166e224b
Faster uniqueness queries, closes #917
2011-03-15 12:53:17 +01:00
Guilherme Silveira
e4cae200f4
simplifying comparisons (avoind too much negatives) and adding unit test cases
2011-02-27 15:14:02 +08:00
José Valim
2e43944567
Move rememberable back to a hook.
2011-02-24 21:55:52 +01:00
José Valim
dd721f1857
Use secure compare as well.
2011-02-15 11:33:54 +01:00
José Valim
add8f8a203
Works on 3.0.4.
2011-02-15 10:27:34 +01:00
Jo Liss
bca43a7576
Require 'rails' in devise.rb.
...
This way we can require 'devise' without requiring 'rails' beforehand.
2011-02-10 23:00:13 +08:00
Jo Liss
8440ed0101
Make Devise::friendly_token 20 characters long.
...
This makes the tokens better suited for URLs in plain-text emails, and
is still secure for all practical purposes.
2011-02-10 21:42:58 +08:00
Carlos Antonio da Silva
c9fe8885f9
Spaces
2011-02-06 19:23:36 -02:00
Nico Ritsche
f06bed279a
corrected 'an user' to 'a user' in comments and docs
2011-02-06 23:46:49 +08:00
John Plummer
7a1852e9f5
Allow send confirmation to change keys used
2011-02-05 16:19:01 +08:00
Carlos Antonio da Silva
1f8909458f
Fix typo
2011-01-26 22:26:40 -02:00
José Valim
68f699bfd4
Do not change default behavior of previous apps.
2011-01-21 10:55:40 +01:00
José Valim
c78bb68c66
Revert "Fix an issue causing infinite redirects in production, closes #720 "
...
This reverts commit a156576ce9
2011-01-20 09:16:44 +01:00
Richard Aday
038eb321d4
Allowing reset_password_keys and unlock_keys to be set through the config
2010-12-30 03:10:56 +08:00
José Valim
a156576ce9
Fix an issue causing infinite redirects in production, closes #720
2010-12-18 09:38:41 +01:00
José Valim
b50fd1a72e
Fix e-mail regexp. Closes #698
2010-12-01 17:19:45 +01:00
José Valim
71450998c5
Avoid session fixation attacks.
2010-11-20 23:18:41 +01:00
Andrew Dahl
e911abf13b
changed case_insensitive_keys config setting to an array and added downcasing of keys as a before filter on database authentication module
2010-11-18 23:29:53 +01:00
Andrew Dahl
94c666e439
first attempt
2010-11-18 21:24:42 +01:00
José Valim
c7efb68a77
Devise does not intercept 401 returned from applications anymore
2010-11-09 23:42:14 +01:00
José Valim
835d1044ae
Fix a problem with IE7 headers.
2010-11-08 22:45:42 +01:00
José Valim
2f360bf201
Remove OAuth2 in favor of OmniAuth.
2010-10-18 15:00:34 +02:00
José Valim
21d5e50054
Basic omniauth support.
2010-10-18 15:00:34 +02:00
José Valim
8a8ba6c70c
Depend on ORM Adapter.
2010-10-10 17:51:32 +02:00
Carlos Antonio da Silva
0bc80cec35
Remove autoload for Bcrypt encryptor, it does not exist anymore
2010-09-25 23:14:31 -03:00
José Valim
38f3f6318a
cookie_domain is deprecated in favor of cookie_options which uses session_options by default.
2010-09-25 21:13:54 +02:00
José Valim
531f221be7
Allow :stateless_token to be set to true avoiding users to be stored in session through token authentication
2010-09-25 20:28:14 +02:00
José Valim
09088706bb
Extract encryptors into their own module for better bcrypt support.
2010-09-25 16:08:46 +02:00
José Valim
31d821c2e0
Allow to Rememberable to work without remember_token relying on salt if possible.
...
This comes with the benefit that if you change your password, all remember tokens expires, and it also requires one field less in the database.
The downside is that if you want remember_me_across_browser to be false, it won't work unless you use the token. It also requires you to be using database_authenticable.
Using salt is now the default in Devise.
2010-09-25 13:07:24 +02:00
