Carlos Antonio da Silva
eb0ad1c21a
Merge branch 'master' into rails4
2013-05-07 13:01:34 -03:00
José Valim
e499fadf52
Use persisted? in order to check if the record was destoryed or not
2013-05-07 08:55:30 -06:00
José Valim
5ad122b928
Fix build for mongoid
2013-05-07 08:47:18 -06:00
José Valim
03f2a6a5e4
Merge pull request #2392 from michiel3/master
...
Add destroy_with_password method
2013-05-07 07:11:47 -07:00
Carlos Antonio da Silva
69f79ad446
Let Devise play with both Rails 3.2 and Rails 4 for now
2013-05-05 19:55:06 -03:00
Victor Cruz Dueñas
d6d61fc5be
Adding tests for case_insensitive_keys and strip_whitespace_keys to param filter
2013-05-05 01:02:48 +02:00
Carlos Antonio da Silva
a0058d5fbf
Add some spaces, remove comment
2013-05-03 21:52:00 -03:00
Carlos Antonio da Silva
d9d5ae3d58
Correct OrderedHash initialization to ensure keys order in 1.8.7
...
This should hopefully fix the build with 1.8.7 🙏
2013-05-01 21:35:03 -03:00
Michiel Prins
60e933df73
Add destroy_with_password method
2013-04-29 15:06:13 +02:00
Vasiliy Ermolovich
dceb788c6b
fix OrderedHash initialization
2013-04-23 10:37:10 +03:00
Vasiliy Ermolovich
fae8e977e8
use ordered hash to fix tests on ruby 1.8
2013-04-22 22:42:49 +03:00
Tan Jun Rong
804fbdf6d5
Fix spelling error, 'reseting' to 'resetting'
2013-04-22 22:25:40 +08:00
Tan Jun Rong
9d5a9c8a61
Add ability to override the redirect path after user has reset their password
2013-04-22 20:22:53 +08:00
Carlos Antonio da Silva
b8c5d76c5a
Merge pull request #2380 from vipulnsward/fix_warnings
...
fix some warnings
2013-04-19 15:53:43 -07:00
Vipul A M
b871bd5036
fix some warning
2013-04-19 19:08:20 +05:30
Vipul A M
2e6457006e
Remove unused variables and fix typos
2013-04-18 10:24:38 +05:30
José Valim
8a93c34080
Clean up Devise parameter sanitizer
2013-04-13 23:21:46 -07:00
José Valim
5bf4f57fcf
Tidy up devise configuration
2013-04-13 22:07:54 -07:00
José Valim
1b8fd7c2ff
Merge pull request #2271 from robhurring/master
...
Allowing http token auth to set the token_authentication_key if missing from params
2013-04-13 21:39:36 -07:00
Carlos Antonio da Silva
f75352a373
Merge branch 'master' into rails4
2013-04-13 11:37:48 -03:00
Carlos Antonio da Silva
ac2ebdfb11
Fix session store changed in Rails master
...
There's no encrypted cookie store anymore, by default the cookie store
will be encrypted.
2013-04-13 11:16:11 -03:00
Carlos Antonio da Silva
d89dad5728
Bundle update for both Rails 3.1 and 3.2, update mocha, fix failing tests
2013-04-13 11:08:27 -03:00
Carlos Antonio da Silva
32a141d2a9
Fix typo in test descriptions
2013-04-13 10:54:52 -03:00
Tomas Varneckas
1acd3d1790
Fix devise sender bug with custom devise mailers.
...
The devise sender detection must take into account that the default
sender set in the custom devise mailer can be a proc.
2013-04-12 16:48:48 +03:00
Drew Ulmer
d20fdf87b6
Introduce BaseSanitizer null sanitizer and controller-specific callbacks
...
This updates Devise's StrongParameter support to feature:
- A Null base sanitizer to support existing Rails 3.x installations that
don't want to use StrongParameters yet
- A new, simpler API for ParameterSanitizer: #permit, #permit!, and #forbid
- Overrideable callbacks on a controller-basis, e.g. #create_sessions_params
for passing the current scope's parameters through StrongParameters and
a helper method, whitelisted_params, for rolling your own implementations
of #create_x_params in your own controllers.
- Lots of tests!
2013-04-10 10:33:50 -05:00
Drew Ulmer
b151d2cfe2
Remove MassAssignment security from Mongoid test shim
2013-04-01 09:00:36 -05:00
Drew Ulmer
e0ffe8f85f
Fix internal helper test referencing resource_params
2013-03-31 21:31:54 -05:00
Drew Ulmer
78f137368c
Add support for Rails 4 strong_parameters
...
This brings support for Rails 4 StrongParameters changes.
- Parameter sanitizing is setup for Devise controllers via
resource_params except Omniauth Callbacks which doesn't use
resource_params.
- Change #build_resource to not call resource_params for get requests.
Parameter sanitizing is only needed when params are posted to the
server so there's no need to try to construct resource params on get
requests (new, edit).
2013-03-31 21:31:48 -05:00
Drew Ulmer
af4a582300
Remove mass-assignment role-based tests, no longer supported in Rails 4
...
Mass-assignment security roles are removed in Rails 4 so there's no need
to test :as => :role behavior.
2013-03-31 15:21:49 -05:00
Drew Ulmer
2f88f7c0ed
Remove protected_attributes gem and all whitelisting
2013-03-31 15:21:49 -05:00
Lucas Mazza
bd14589fe4
Ensure that include_root_in_json is true since our test suite depends on that.
2013-03-31 17:18:41 -03:00
Rafael Mendonça França
335a6af861
Merge branch 'master' into rails4
2013-03-28 13:51:12 -03:00
Matt Jones + Tony Schneider
f4ceecece4
Allow explicit configuration of http auth key
...
- Fix basic auth case in which authorized_keys is configured as hash
- Duplicate existing functionality when http_auth_key is not explicitly
set
2013-03-04 12:23:05 -05:00
Carlos Antonio da Silva
e79ebe8aec
Fix last mongoid tests since it does not have the order method
2013-02-25 22:13:36 -03:00
Santiago Pastorino
10f93129c3
Rails 4 now raises ActionController::UrlGenerationError
...
This is the commit in Rails
https://github.com/rails/rails/commit/db06d128
2013-02-25 22:12:21 -03:00
Santiago Pastorino
135c8da390
To be able to post to root via is now needed
2013-02-25 22:12:20 -03:00
Carlos Antonio da Silva
aca7e5d162
Run tests with mongoid
2013-02-25 22:12:20 -03:00
Carlos Antonio da Silva
02298117a0
Do not remove app/mailers from autoloaded paths
2013-02-25 22:12:06 -03:00
Carlos Antonio da Silva
7998d6f878
Match full template name
2013-02-25 22:12:06 -03:00
Vasiliy Ermolovich
ed6e232756
assert_recognizes rises Assertion instead of RoutingError
2013-02-25 22:12:06 -03:00
Carlos Antonio da Silva
567fabbbc6
Disable forcing whitelist attributes from protected attributes
...
This was the previous functionality since we didn't set anything in the
application configuration. Now when using protected attributes gem, it
sets whitelist to true, forcing us to always declare the accessible
attributes, and this is not the case for the Admin model.
2013-02-25 22:12:06 -03:00
Carlos Antonio da Silva
d77a956276
Remove AR deprecated finder warnings
2013-02-25 22:12:06 -03:00
Carlos Antonio da Silva
3c885e043d
Fix changed error messages from confirmation validation
2013-02-25 22:12:06 -03:00
Carlos Antonio da Silva
9ae013ae3c
Updating test app running rake rails:update, tests running with failures
2013-02-25 22:12:06 -03:00
Carlos Antonio da Silva
f8792c8cf0
Update to Rails 3-2-stable and fix failing tests
2013-02-25 22:06:10 -03:00
Lucas Mazza
198bfff2de
Merge pull request #2300 from fphilipe/scoped-serialization
...
Make use of warden's scoped serialization
2013-02-25 15:32:43 -08:00
Philipe Fatio
c22d755cf4
Make use of warden's scoped serialization
2013-02-25 07:38:42 +01:00
Greg Gates
72cfaad618
Add #skip_confirmation_notification to Confirmable
2013-02-22 12:43:01 -05:00
Vasiliy Ermolovich
395a69b4ef
allow_unconfirmed_access_for set to nil means unconfirmed access for unlimited time
...
closes #2275
2013-02-13 21:17:38 +03:00
Rob
547439d94c
renaming devise option "allow_authorization_to_set_auth_token" to "allow_token_authenticatable_via_headers"
2013-02-10 12:50:52 -05:00