Stan Hu f71d843f93 Only clear the reset token on an update ...

This solves the issue where a package might do:

```
user = User.new
user.email = 'test@test.com'
token = user.generate_reset_token
user.save

send_reset_email(token)
```

Since the save clears the reset token, the user will receive a stale token that no longer works.

Closes #3774

2015-12-09 11:14:50 -08:00

..

authenticatable_test.rb

Ensure that we sanitize any AC::Parameters in find_or_initialize_with_errors.

2014-09-18 18:21:05 -03:00

confirmable_test.rb

Write unit test for bug fix

2015-11-18 22:21:03 +00:00

database_authenticatable_test.rb

quick comment touch-ups

2015-08-27 10:26:12 -05:00

lockable_test.rb

Fix typo: successful

2015-09-30 19:31:49 -03:00

omniauthable_test.rb

Adding required_fields to all modules

2012-02-24 20:57:58 -02:00

recoverable_test.rb

Only clear the reset token on an update

2015-12-09 11:14:50 -08:00

registerable_test.rb

Adding required_fields to all modules

2012-02-24 20:57:58 -02:00

rememberable_test.rb

Do not accept empty authentication_salt too

2015-05-26 15:04:27 +02:00

serializable_test.rb

Updated ruby 1.9 hash syntax

2014-02-25 22:12:55 +05:30

timeoutable_test.rb

Updated ruby 1.9 hash syntax

2014-02-25 22:12:55 +05:30

trackable_test.rb

added test for update_tracked_fields method

2014-05-22 11:11:13 -07:00

validatable_test.rb

Update password length validation to 72 characters max

2014-11-18 23:10:01 -06:00