José Valim
839e8fc8ac
Show if there is an e-mail waiting for confirmation, closes #2060
2012-12-13 09:13:33 +01:00
José Valim
e1fde192f2
Update CHANGELOG
2012-12-13 08:43:43 +01:00
Gabe Martin-Dempesy
130d684198
Change failure key for missing database resource to :invalid_email
2012-11-19 15:49:21 -08:00
Jared Morgan
f044916f94
Use correct current_password in RegistrationTest of invalid confirmation
...
In DatabaseAuthenticatable#update_with_password, password is now deleted if
the current_password is invalid. dm-validations will not check the
confirmation in that case, so this test was failing in dm-devise.
2012-11-15 12:21:11 -06:00
Durran Jordan
d821275588
Fix spec failures for Mongoid 3.
...
This has no actual changes to Devise itself, just fixes the failing
tests when running against Mongoid 3 instead of Mongoid 2.
Mocha has been locked at 0.10.0 since 0.12.0 raises an error when trying
to set an expectation on a frozen object.
Tests were updated to work with both AR and Mongoid, some cases the XML
serialization was slightly different but both were outputting correct
and valid XML, and the id/_id field mismatch is now handled.
An active field was missing from the test models for Mongoid, and the
invalid :null => true options in field were removed.
2012-11-10 20:02:58 +01:00
Marcin Balinski
ac58c28617
Unlock user when re-setting password and unlock strategy is :email or :both
2012-11-07 10:45:46 +01:00
Drew Ulmer
f79bb31ee6
Add failing test for Issue #1994
...
Lockable should not leak information about account existence if paranoid
mode is on.
2012-10-25 16:20:21 -05:00
José Valim
4a24667e80
Revert "Rails 3.2.7 deprecates update_attribute in favor of update_column"
...
Rails 3.2.8 is rolling back the deprecations.
This reverts commit 7d41072c0e
2012-08-05 09:24:10 -03:00
Fabio Kreusch
7d41072c0e
Rails 3.2.7 deprecates update_attribute in favor of update_column. Updated projects using Devise output lots of warnings because Devise uses the deprecated version in some places. This commit replaces update_attribute with update_column to fix that.
2012-07-27 17:25:21 -03:00
Víctor Manuel Cruz Dueñas
73f617db7b
Checking if unconfirmed_email has changed before to set update_needs_confirmation flash message.
...
Conflicts:
test/integration/registerable_test.rb
Signed-off-by: José Valim <jose.valim@plataformatec.com.br >
2012-07-23 16:20:51 +02:00
Nils Landt
dcada8fe75
Refactor according to line notes from josevalim
...
- rename reset_password_within to confirm_within
- confirmation_period_valid? is back and memoized
- fix hash syntax to hashrocket
2012-07-22 14:02:27 +02:00
Nils Landt
f80cecc864
Remove unnecessary include
2012-07-16 11:50:46 +02:00
Nils Landt
1d6ee13aae
Refactor according to rodrigoflores
...
- Favor using update_attribute instead of constructor parameters in user
factory for tests
- Test for accurate error message when confirmation token is expired
- Don't check twice whether the confirmation period is expired
2012-07-16 11:20:01 +02:00
Nils Landt
6e48fcee76
Fix tests for email token expiration
...
The tests work now, but are a bit wonky because User.create does things
I don't understand.
2012-07-11 18:30:36 +02:00
Nils Landt
87f2fa9767
Add options to expire confirmation tokens
...
With this patch, functionality is added to expire the confirmation
tokens that are being sent by email.
For example, if a token is valid for 3 days only, it cannot be used for
confirmation on the 4th day.
2012-07-09 14:43:12 +02:00
Carlos Galdino
c179cef365
Change the minimum password length to 8
2012-07-06 11:46:46 -03:00
dblock
619826fbc8
Test that confirms that #1948 is not an issue.
2012-06-25 18:33:48 -04:00
José Valim
4bc2ff997a
Timeout does not explode when reset_authentication_token! is accidentally defined by Active Model
2012-06-16 14:04:34 +02:00
José Valim
41a91188f5
Do not trigger timeout on sign in related actions
2012-06-16 13:24:07 +02:00
Chris Oliver
37c55eb192
Added tests for flexible routing constraints
2012-06-15 13:06:29 -05:00
José Valim
c4818a9fb2
Reorganize tests slightly
2012-06-15 11:15:03 +02:00
Gregory Bataille
ff75341c75
Redirect to sign in page when trying to access password#edit without a
...
reset_password_token (i.e. not coming from a reset password email)
2012-06-08 10:08:35 +02:00
Rodrigo Flores
8baacecdcf
Fixing tests
2012-05-14 17:53:34 -03:00
Julian Vargas
6664acd27f
Use 'head :no_content' in sessions_controller#destroy
...
Code cleanup for returning headers instead of an empty string
when destroying sessions.
Lines 464 and 471 on test/integration/autenticatable_test.rb
were adjusted to assert on :no_content
2012-05-02 22:40:53 -05:00
Rodrigo Flores
07ef99a8f0
Changelog and a minor change on the test title
2012-04-04 17:27:41 -03:00
Rodrigo Flores
857af600f7
Merge pull request #1722 from Antiarchitect/master
...
Token regeneration on session timeout.
2012-04-04 13:23:27 -07:00
Andrey Voronkov
7ecbba089f
Authentication token expiration on session timeout
2012-04-02 20:48:23 +04:00
Rodrigo Flores
3623215b8c
failed_attempts is set to 0 on sign in
2012-03-19 17:09:22 -03:00
Rodrigo Flores
bb4f699d03
Fixing two tests
2012-03-03 01:25:17 -03:00
Rodrigo Flores
65f08ea175
Removing signed_out path workaround
2012-02-16 14:53:11 -02:00
José Valim
df8ac1cfe6
Clean up remember token related config.
2012-02-16 12:30:04 +01:00
José Valim
82da877863
Merge pull request #1565 from joliss/unconfirmed-message
...
More helpful sign-up message for Confirmable
2012-01-24 05:06:51 -08:00
José Valim
275c480f89
Redirect to the previous URL on timeout, closes #1596
2012-01-24 14:00:36 +01:00
José Valim
55be93d5c4
Deprecated support for nested devise_for blocks
2012-01-24 13:40:04 +01:00
Jo Liss
c78c196423
More helpful sign-up message for Confirmable
...
This is also better for translations, because we can translate paragraph-wise.
signed_up_but_inactive and signed_up_but_locked are likely not needed,
but I wasn't sure how to best remove them.
2012-01-23 13:52:32 +01:00
Kaleem Ullah
41b1e87105
fix unlock message
2012-01-23 15:20:05 +04:00
Rafael Mendonça França
cf5fbb9d65
Fix order specific test
2012-01-10 11:59:20 -03:00
Rafael Mendonça França
d699b80254
Do not use a local network ip as HTTP_X_FORWARDED_FOR header
...
If HTTP_X_FORWARDED_FOR is a local network IP the HTTP_CLIENT_IP
need to be set
2012-01-10 11:43:15 -03:00
Rafael Mendonça França
edb0aac091
Whitespaces ✂️
2012-01-09 18:11:10 -03:00
Rafael Mendonça França
9549a32500
Do not use deprecated ActiveSupport::Base64. Closes #1554
2012-01-09 18:10:49 -03:00
Jigyasa Makkar
e2030a740d
Fixed a bug in lockable wherein when a user tries to login with correct password after being locked,
...
failed attempts count gets reset. When the user tries to login with an incorrect password next,
the message shown is for invalid password instead of locked account since this check
depended mainly on failed attempts count.
2011-12-29 23:57:39 +05:30
José Valim
5a11c6597c
Usage of Devise.stateless_token= is deprecated in favor of appending :token_auth to Devise.skip_session_storage
2011-12-11 20:39:41 +01:00
José Valim
930b324c15
Usage of confirm_within was deprecated in favor allow_unconfirmed_access_for
2011-12-11 20:18:02 +01:00
José Valim
d952dea32b
Remove the code that was dynamically adding columns to active record
2011-12-11 20:07:50 +01:00
José Valim
9a6ac7ab69
Add confirmable to admin.
2011-12-11 20:07:50 +01:00
Vasiliy Ermolovich
1e1e964d25
redirect users to sign in page after unlock, closes #1486
2011-12-08 22:06:09 +03:00
José Valim
263e0b7692
Fix failing test.
2011-12-07 13:23:55 +01:00
José Valim
bd27bf7677
Deprecate and disable old behavior accumulated with time.
2011-12-04 23:58:19 +01:00
José Valim
6aed8f1c87
Clean up reconfirmable behavior.
2011-12-04 22:14:44 +01:00
José Valim
6d681c5b8a
Merge remote-tracking branch 'heimidal/updates' into reconfirm
...
Conflicts:
lib/devise/models/confirmable.rb
test/support/helpers.rb
2011-12-04 20:58:41 +01:00
