diff --git a/CHANGELOG.rdoc b/CHANGELOG.rdoc index e2ac5dee..7e259d2f 100644 --- a/CHANGELOG.rdoc +++ b/CHANGELOG.rdoc @@ -3,6 +3,7 @@ * bug fix * `/users/sign_in` doesn't choke on protected attributes used to select sign in scope (by @Paymium) * `failed_attempts` is set to zero after any sign in (including via reset password) (by @rodrigoflores) + * Added token expiration on timeout (by @antiarchitect) == 2.1.0.rc diff --git a/test/integration/token_authenticatable_test.rb b/test/integration/token_authenticatable_test.rb index 9129b374..17426dbf 100644 --- a/test/integration/token_authenticatable_test.rb +++ b/test/integration/token_authenticatable_test.rb @@ -100,7 +100,7 @@ class TokenAuthenticationTest < ActionController::IntegrationTest end end - test 'should not authenticated and reset token when expire_auth_token_on_timeout is set to true, timeoutable is enabled and we have a timed out session' do + test 'should reset token and not authenticate when expire_auth_token_on_timeout is set to true, timeoutable is enabled and we have a timed out session' do swap Devise, :token_authentication_key => :secret_token, :expire_auth_token_on_timeout => true, :timeout_in => (-1).minute do user = sign_in_as_new_user_with_token assert warden.authenticated?(:user)