13 commits

Author	SHA1	Message	Date
José Valim	015c74e734	Use message verifier in cookies. Previous implementation allowed brute force attacks by cookies. Even though it is impossible for the brute force attack to succeed, the current implementation blocks the attacker even before hitting the database.	2010-03-31 13:31:45 +02:00
José Valim	ca4e09390e	Compatibility with Ruby 1.9.1 and 1.9.2.	2010-03-26 11:27:19 +01:00
José Valim	e03e137c35	Update warden which fixes a security issue.	2010-02-23 19:47:45 +01:00
José Valim	33941d1f62	All tests passing (except two which are errors in Rails). Now generators and initialization process.	2010-02-16 21:23:58 +01:00
José Valim	2afad49a96	Bring rememberable back.	2010-01-14 15:47:14 +01:00
José Valim	f46d1b1d81	Add support to Warden 0.9.0.pre	2010-01-14 13:38:02 +01:00
José Valim	7ffd0900c1	Rely on Warden new serializers.	2009-11-15 00:13:43 -02:00
José Valim	0be7426847	Use a Rack Middleware to sign in users.	2009-11-13 19:26:33 -02:00
José Valim	4894059828	Remember token is now properly stored and specified one for each user.	2009-11-13 17:23:32 -02:00
José Valim	371a9bb0d0	Major refactoring. Allow Warden::Manager to be configured through Devise, undeprecate Devise.confirm_within, Devise.pepper and friends and move Rails hooks to their own file.	2009-11-03 09:35:11 -02:00
José Valim	e7f809de3c	Do not require ActiveRecord to be loaded to use Devise.	2009-10-30 21:51:50 -02:00
Carlos A. da Silva	5631b8dacd	Remember the user only if the remember token has not expired.	2009-10-22 20:18:16 -02:00
Carlos A. da Silva	28a7f78fba	Creating rememberable module.	2009-10-20 00:31:33 -02:00