kotovalexarian-likes-github/heartcombo--devise
1
0
Fork 0
mirror of https://github.com/heartcombo/devise.git synced 2022-11-09 12:18:31 -05:00
Code Releases Activity

Sanity check the serialized class.

Browse source
This commit is contained in:
José Valim 2009-11-15 11:17:40 -02:00
parent 3805bf2f26
commit 4f6dfefe0e
2 changed files with 14 additions and 0 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

1
lib/devise/models/authenticatable.rb
View file

@ -93,6 +93,7 @@ module Devise
# Hook to serialize user from session. Overwrite if you want.
def serialize_from_session(keys)
klass, id = keys
raise "#{self} cannot serialize from #{klass} session since it's not its ancestors" unless klass <= self
klass.find_by_id(id)
end
end

13
test/models/authenticatable_test.rb
View file

@ -145,4 +145,17 @@ class AuthenticatableTest < ActiveSupport::TestCase
user = create_user
assert_equal user.id, User.serialize_from_session([User, user.id]).id
end
test 'should not serialize another klass from session' do
user = create_user
assert_raise RuntimeError, /ancestors/ do
User.serialize_from_session([Admin, user.id])
end
end
test 'should serialize another klass from session' do
user = create_user
klass = Class.new(User)
assert_equal user.id, User.serialize_from_session([klass, user.id]).id
end
end