José Valim
221be6d6ef
Update bundled rails app
2013-11-13 13:29:25 +01:00
José Valim
dff7891b97
Get rid of token authentication
2013-09-02 19:15:47 -03:00
José Valim
354e5022bf
Only allow insecure token lookup if a flag is given
2013-08-06 11:55:13 +02:00
José Valim
32648027e2
Add Devise::KeyGenerator
2013-08-05 11:47:36 +02:00
Vasiliy Ermolovich
b7079c7cf2
redirect user to the referrer if latest request was not GET after timeout
...
closes #2421
2013-05-19 17:11:34 +03:00
Carlos Antonio da Silva
69f79ad446
Let Devise play with both Rails 3.2 and Rails 4 for now
2013-05-05 19:55:06 -03:00
José Valim
8a93c34080
Clean up Devise parameter sanitizer
2013-04-13 23:21:46 -07:00
Carlos Antonio da Silva
f75352a373
Merge branch 'master' into rails4
2013-04-13 11:37:48 -03:00
Carlos Antonio da Silva
ac2ebdfb11
Fix session store changed in Rails master
...
There's no encrypted cookie store anymore, by default the cookie store
will be encrypted.
2013-04-13 11:16:11 -03:00
Tomas Varneckas
1acd3d1790
Fix devise sender bug with custom devise mailers.
...
The devise sender detection must take into account that the default
sender set in the custom devise mailer can be a proc.
2013-04-12 16:48:48 +03:00
Drew Ulmer
b151d2cfe2
Remove MassAssignment security from Mongoid test shim
2013-04-01 09:00:36 -05:00
Drew Ulmer
2f88f7c0ed
Remove protected_attributes gem and all whitelisting
2013-03-31 15:21:49 -05:00
Carlos Antonio da Silva
e79ebe8aec
Fix last mongoid tests since it does not have the order method
2013-02-25 22:13:36 -03:00
Santiago Pastorino
135c8da390
To be able to post to root via is now needed
2013-02-25 22:12:20 -03:00
Carlos Antonio da Silva
aca7e5d162
Run tests with mongoid
2013-02-25 22:12:20 -03:00
Carlos Antonio da Silva
02298117a0
Do not remove app/mailers from autoloaded paths
2013-02-25 22:12:06 -03:00
Carlos Antonio da Silva
567fabbbc6
Disable forcing whitelist attributes from protected attributes
...
This was the previous functionality since we didn't set anything in the
application configuration. Now when using protected attributes gem, it
sets whitelist to true, forcing us to always declare the accessible
attributes, and this is not the case for the Admin model.
2013-02-25 22:12:06 -03:00
Carlos Antonio da Silva
9ae013ae3c
Updating test app running rake rails:update, tests running with failures
2013-02-25 22:12:06 -03:00
Carlos Antonio da Silva
af37800c1d
Change match routes to get / post
...
match without a verb is deprecated in Rails master.
2013-01-28 20:23:13 -02:00
José Valim
30ab6f923d
Release 2.2.0.rc
2012-12-13 09:20:46 +01:00
Durran Jordan
d821275588
Fix spec failures for Mongoid 3.
...
This has no actual changes to Devise itself, just fixes the failing
tests when running against Mongoid 3 instead of Mongoid 2.
Mocha has been locked at 0.10.0 since 0.12.0 raises an error when trying
to set an expectation on a frozen object.
Tests were updated to work with both AR and Mongoid, some cases the XML
serialization was slightly different but both were outputting correct
and valid XML, and the id/_id field mismatch is now handled.
An active field was missing from the test models for Mongoid, and the
invalid :null => true options in field were removed.
2012-11-10 20:02:58 +01:00
Nils Landt
6e48fcee76
Fix tests for email token expiration
...
The tests work now, but are a bit wonky because User.create does things
I don't understand.
2012-07-11 18:30:36 +02:00
Carlos Galdino
c179cef365
Change the minimum password length to 8
2012-07-06 11:46:46 -03:00
José Valim
9678b422ff
Merge pull request #1954 from mrchrisadams/d1bf31729d10fbb65f1b7ce158f3926aa946b3ad
...
Allow setting of default reply_to fields on mailer mails - #1936
2012-06-27 03:19:52 -07:00
Chris Adams
d1bf31729d
Address issue #1936
...
Update mailer to accept reply_to as a default param as well, as discussed in
https://github.com/plataformatec/devise/issues/1936#issuecomment-6583637
2012-06-26 23:11:35 +01:00
José Valim
4bc2ff997a
Timeout does not explode when reset_authentication_token! is accidentally defined by Active Model
2012-06-16 14:04:34 +02:00
Chris Oliver
37c55eb192
Added tests for flexible routing constraints
2012-06-15 13:06:29 -05:00
Rodrigo Flores
39dc9a7ba6
Removed encryptable references on rails_app
2012-05-09 14:49:55 -03:00
Rodrigo Flores
768f8832b9
Removing encryptable module
2012-05-07 16:37:16 -03:00
José Valim
32f20dddd6
Get rid of deprecated code
2012-05-06 13:13:53 +02:00
José Valim
5e845ee265
Do not reproduce warden behavior, simply rely on the controller calling it
2012-05-06 12:09:53 +02:00
José Valim
a0a141b457
Merge pull request #1661 from mreinsch/fix_subdomain_routing
...
fix for when using :host in routes
2012-02-17 02:31:14 -08:00
Michael Reinsch
0315ca2701
fix for :host getting overwritten in scope[:options] and thus not generating URLs with correct hostnames
2012-02-17 19:14:42 +09:00
Rodrigo Flores
65f08ea175
Removing signed_out path workaround
2012-02-16 14:53:11 -02:00
José Valim
55be93d5c4
Deprecated support for nested devise_for blocks
2012-01-24 13:40:04 +01:00
José Valim
18dc82c6b6
add a test that :module => :devise overrides previous configs.
2012-01-02 22:47:28 +01:00
Jo Liss
27b745d04f
Use consistent number of hash signs
2011-12-28 17:26:57 +01:00
José Valim
89db0dd44d
Do not run validatins unless on reconfirmable branch, closes #1515 .
2011-12-20 20:54:49 +01:00
José Valim
5a11c6597c
Usage of Devise.stateless_token= is deprecated in favor of appending :token_auth to Devise.skip_session_storage
2011-12-11 20:39:41 +01:00
José Valim
930b324c15
Usage of confirm_within was deprecated in favor allow_unconfirmed_access_for
2011-12-11 20:18:02 +01:00
José Valim
d952dea32b
Remove the code that was dynamically adding columns to active record
2011-12-11 20:07:50 +01:00
José Valim
9a6ac7ab69
Add confirmable to admin.
2011-12-11 20:07:50 +01:00
José Valim
7693173ecd
Final tidy up on removing schema helpers.
2011-12-05 12:17:02 +01:00
José Valim
a0294cbae8
Improve fields.
2011-12-05 12:02:25 +01:00
José Valim
1cf008cbe3
Remove apply schema from mongoid as well.
2011-12-05 11:48:27 +01:00
José Valim
bd27bf7677
Deprecate and disable old behavior accumulated with time.
2011-12-04 23:58:19 +01:00
José Valim
b3034292f2
Ensure admin is running with manual lock strategy.
2011-12-01 13:19:05 +01:00
José Valim
582f00ed95
Devise should not attempt to load OmniAuth strategies. Strategies should be loaded before hand by the developer or explicitly given to Devise.
2011-11-20 19:42:02 +00:00
José Valim
dfb8ff372d
Revert "Fixed require_strategy for google_oauth2 omniauth strategy."
...
This reverts commit 065963f6d3
2011-11-20 19:21:08 +00:00
Christian Buggle
065963f6d3
Fixed require_strategy for google_oauth2 omniauth strategy.
2011-11-14 19:14:28 +01:00
