José Valim
6b95b96547
Release v3.0.2
2013-08-09 10:24:23 +02:00
José Valim
df8e6cf225
Skip storage for cookies on unverified requests
2013-08-08 23:32:18 +02:00
José Valim
cf87cd0742
Update OTHER lock
2013-08-08 23:32:09 +02:00
José Valim
cf1989e1da
Update Gemfile.lock
2013-08-02 23:43:07 +02:00
José Valim
7c8c0f8dba
Release 3.0.1
2013-08-02 23:25:11 +02:00
José Valim
66afa2a2bf
Update CHANGELOG
2013-08-02 23:14:54 +02:00
José Valim
747751a20f
Protect against CSRF token fixation attacks
2013-08-02 23:13:15 +02:00
José Valim
8e0327e203
Merge pull request #2530 from barodeur/patch-1
...
Remove trailing whitespaces
2013-07-28 14:25:39 -07:00
Paul Chobert
d88b3cedfb
Remove trailing whitespaces
2013-07-28 23:15:42 +02:00
José Valim
c4d5a3fdaa
No need to assert for a message we won't receive
2013-07-26 10:00:09 +02:00
José Valim
11a77055f1
Merge pull request #2525 from jetthoughts/timeoutable-without-rememberable
...
Fixed checking for rememberable in timeoutable
2013-07-26 00:58:09 -07:00
José Valim
9bc8e1211b
Update CHANGELOG
2013-07-26 09:22:59 +02:00
José Valim
cd1bc53947
Do not generate attr_accessible for any Rails 4 app
2013-07-26 09:22:03 +02:00
Michael Nikitochkin
fffbeb5cc7
Fixed bug when user has field remember_created_at but the module rememberable is not enabled for the user
2013-07-26 10:20:29 +03:00
José Valim
7539d31a05
Update 3.2 Gemfile
2013-07-26 09:17:35 +02:00
José Valim
78fedd6c10
Merge pull request #2523 from Neschur/add_method_after_confrimation
...
Added method after_confrimation
2013-07-25 23:59:50 -07:00
José Valim
14a0cfefaa
Merge pull request #2522 from jcoyne/attr_accessible
...
When using rails 3.2, the generator adds 'attr_accessible' to the model....
2013-07-25 23:56:03 -07:00
Justin Coyne
b7e67115fc
When using rails 3.2, the generator adds 'attr_accessible' to the model. Fixes #2515
2013-07-23 22:49:05 -05:00
Siarhei Hanchuk
b7bc8dec12
Added method after_confrimation
2013-07-23 14:19:58 +03:00
José Valim
b8ed2f3160
Clarify the roles of Devise models
2013-07-23 10:21:01 +02:00
José Valim
b46b7e3736
Release v3.0.0
2013-07-14 20:40:56 +02:00
José Valim
c5ef39f087
Bump to Warden 1.2.3
2013-07-14 20:40:09 +02:00
José Valim
cfb8228de9
Merge pull request #2506 from mxhold/master
...
Update README.md
2013-07-14 11:20:35 -07:00
Max Holder
4e0c598de1
Update README.md
...
Replace case statement with if statement since we're comparing two equivalent classes (which would never be case equivalent).
2013-07-14 10:35:11 -04:00
José Valim
fed6a92d55
Merge pull request #2504 from plataformatec/remember-me
...
Add remember_me to the permitted sign_in params
2013-07-12 12:19:35 -07:00
Vasiliy Ermolovich
2c1ca126f4
add remember_me to the permitted sign_in params
2013-07-12 22:14:32 +03:00
Vasiliy Ermolovich
36fb1ecf4d
update Gemfile.lock
2013-07-12 22:13:52 +03:00
José Valim
08986dbd4b
Merge pull request #2502 from slainer68/readme_strong_parameters
...
Update README.md [ci skip]
2013-07-12 04:26:59 -07:00
Nicolas Blanco
b69d2c412f
Update README.md [ci skip]
...
Fix the example for Strong parameters multi roles as resource_class is actually a class not an instance.
2013-07-12 13:25:26 +02:00
José Valim
6f5d176e8e
Bump warden dependency
2013-07-12 13:00:31 +02:00
José Valim
57515de5ad
Update to Rails 4.0
2013-07-09 09:09:22 +02:00
José Valim
49aebde435
Update CHANGELOG
2013-07-09 09:05:19 +02:00
José Valim
bc598b9da3
Merge pull request #2452 from latortuga/bad-strong-params-on-failed-login
...
Add failing test case for bad parameter sanitizing when failing to login
2013-07-08 23:53:41 -07:00
José Valim
da0323e591
Merge pull request #2419 from plataformatec/issue-2418
...
set error to the field specified in unlock_keys config
2013-07-08 23:52:19 -07:00
José Valim
061e9d7404
Merge pull request #2475 from tkhr/enable_skipping_reconfirmation_notification_but_regenerate_confirmation_token_2
...
Enable to skip sending reconfirmation email when reconfirmable is on and skip_confirmation_notification! is invoked
2013-07-08 23:51:42 -07:00
José Valim
3c519b13ff
Merge pull request #2485 from betelgeuse/changelog_fix
...
CHANGELOG fix about _links.erb partial revert
2013-07-03 03:58:13 -07:00
Petteri Räty
aeec6138c2
CHANGELOG fix about _links.erb partial revert
...
9bf718 got reverted by aa2d15 but the CHANGELOG was not reflected to
show this.
2013-07-03 13:34:25 +03:00
José Valim
75ad4ee87b
Add thread-safety support note
2013-06-30 14:18:57 +02:00
Drew Ulmer
e029ad7b0c
Fix improper login param sanitization permit
...
This includes a failing test case that hooks into ActiveSupport
Notifications to catch the param permit error.
2013-06-25 13:44:39 -05:00
José Valim
225afe6813
Merge pull request #2480 from robinroestenburg/patch-1
...
Updated section 'Configuring controllers'
2013-06-25 04:19:23 -07:00
Robin Roestenburg
8487637b2f
Updated section 'Configuring controllers'
...
I added an extra note in the section on creating a custom (namespaced) controller.
This controller needs to be created in a directory in order for it to work. Otherwise (for example when creating the controller in `app/controllers`) a `uninitialized constant Admins` error is thrown.
Also, fixed the Markdown formatting for the numbered lists in the README.
2013-06-25 14:01:11 +03:00
José Valim
8978bd4fe0
Merge pull request #2479 from djmaze/patch-1
...
Update code example for #update_without_password
2013-06-25 02:30:41 -07:00
Martin Honermeyer
5926898cf4
Update code example for #update_without_password
2013-06-25 11:27:35 +02:00
Takehiro Adachi
df2995ce19
Enable to skip sending reconfirmation email when skip_confirmation_notification! is invoked
...
We could always generate a confirmation token but not sending a
confirmation email by invoking the skip_confirmation_notification!
method when creating the account.
But there were no way to do that when we were turning on reconfirmable
and updating email.
2013-06-20 08:21:54 +09:00
José Valim
5717c6f082
Splat args to be sanitized
2013-06-19 10:37:37 +02:00
José Valim
72cf2481b5
Rename ParamFilter to ParameterFilter for consistency
2013-06-19 09:17:54 +02:00
José Valim
5c39a0c6d1
Merge pull request #2458 from t-kot/fix_access_locked_return_value
...
Fix access_locked? always return boolean
2013-06-12 20:45:25 -07:00
José Valim
56a26bd280
Merge pull request #2464 from sslotnick/expose_reset_confirm_tokens
...
Expose reset password and confirmation tokens
2013-06-12 20:44:45 -07:00
Steve Slotnick
b194882b23
Renaming get_or_create_*_token to ensure_*_token to match API in token authenticatable
2013-06-12 15:10:14 -07:00
Steve Slotnick
b5909f9b93
changing name from *_token! to get_or_create_*_token
2013-06-11 14:14:17 -07:00
