José Valim
|
1d65a76cf3
|
Move remember_me hook inside strategies.
|
2010-03-31 21:43:19 +02:00 |
|
José Valim
|
015c74e734
|
Use message verifier in cookies. Previous implementation allowed brute force attacks by cookies. Even though it is impossible for the brute force attack to succeed, the current implementation blocks the attacker even before hitting the database.
|
2010-03-31 13:31:45 +02:00 |
|
José Valim
|
1c5d4771ff
|
Initial work on making the authentication stack more flexible.
|
2010-03-29 16:13:19 +02:00 |
|
José Valim
|
0e64bc74b7
|
Move trackabe logic to the model.
|
2010-03-03 12:03:43 +01:00 |
|
José Valim
|
bcb46bbccb
|
Do not forget frozen records.
|
2010-02-25 08:00:10 +01:00 |
|
José Valim
|
6d6633d1fb
|
Release 1.1.pre which is Rails 3 compatible.
|
2010-02-17 13:53:05 +01:00 |
|
José Valim
|
766316b5e7
|
Got tests running on Rails 3: 369 tests, 486 assertions, 45 failures, 124 errors.
|
2010-02-16 14:31:49 +01:00 |
|
Jonas Grimfelt
|
4878bdb60b
|
Second version of token_authenticatable reflecting feedback: Nuked all hook-stuff. Should be easy to custom-reset authentication tokens by inheritance.
Signed-off-by: José Valim <jose.valim@gmail.com>
|
2010-02-02 12:37:06 +01:00 |
|
Jonas Grimfelt
|
e1440fb430
|
Initial support for authorization using "authentication token" (a.k.a. "single access token") - new module. Corresponding changes to Devise core to hook events like "after_changed_password" (only one added now - only one that makes much sense for latest module) easily. Unit and integration tests included. NOTE: One failing test for hooking Warden::Manager.after_authentication - gets ignored for some reason.
Signed-off-by: José Valim <jose.valim@gmail.com>
|
2010-02-02 12:36:44 +01:00 |
|
José Valim
|
2afad49a96
|
Bring rememberable back.
|
2010-01-14 15:47:14 +01:00 |
|
José Valim
|
6bb1901830
|
Add tests for mail with proc.
|
2010-01-13 17:45:02 +01:00 |
|
José Valim
|
6517b358a1
|
sign_in_count should also be increased when user signs in via password change, confirmation, etc.
|
2010-01-07 22:41:14 +01:00 |
|
José Valim
|
e1c2e45f97
|
Extract Activatable from Confirmable, so if you need to active your account through other means, you can still do so and ensure cherry pick works as expected.
|
2009-12-20 13:53:53 +01:00 |
|
José Valim
|
f9c5dd6a79
|
Added trackable for sign_in_count, sign_in_at and sign_in_ip.
|
2009-11-24 15:18:42 -02:00 |
|
Carlos Antonio da Silva
|
7f4bc8973a
|
Changing default timeout to 30.minutes.
|
2009-11-23 23:28:04 -02:00 |
|
Carlos Antonio da Silva
|
a88731bb93
|
Adding i18n flash message when session is expired.
|
2009-11-23 23:01:01 -02:00 |
|
Carlos Antonio da Silva
|
4ba34290c7
|
Improving docs about timeoutable
|
2009-11-23 23:01:01 -02:00 |
|
Carlos Antonio da Silva
|
40aaa98de9
|
Refactoring timeoutable module and confirmable tests.
|
2009-11-23 23:01:00 -02:00 |
|
Carlos Antonio da Silva
|
099c77e867
|
Introducing timeoutable to timeout sessions without activity.
|
2009-11-23 23:01:00 -02:00 |
|
José Valim
|
ffbc9c604d
|
Only redirect if needed.
|
2009-11-16 14:31:09 -02:00 |
|
José Valim
|
7ffd0900c1
|
Rely on Warden new serializers.
|
2009-11-15 00:13:43 -02:00 |
|
José Valim
|
4894059828
|
Remember token is now properly stored and specified one for each user.
|
2009-11-13 17:23:32 -02:00 |
|
José Valim
|
e5efe20845
|
Allow default_url to be set for Devise::Failure app.
|
2009-10-23 00:54:42 -02:00 |
|
Carlos A. da Silva
|
11e4ee112b
|
Adding Failure module to redirect the user when unauthenticated or unconfirmed, based on warden last changes
|
2009-10-22 20:18:16 -02:00 |
|
Carlos A. da Silva
|
18d87d5c58
|
Updating cookies info adding expires for rememberable.
|
2009-10-22 20:18:16 -02:00 |
|
Carlos A. da Silva
|
bbca9e830e
|
Verify confirmation time frame to let the user sign in or block it if the user is not confirmed.
|
2009-10-22 20:18:16 -02:00 |
|
José Valim
|
d505fd15c0
|
Small refactoring.
|
2009-10-20 08:44:21 -02:00 |
|
Carlos A. da Silva
|
28a7f78fba
|
Creating rememberable module.
|
2009-10-20 00:31:33 -02:00 |
|