José Valim
68f699bfd4
Do not change default behavior of previous apps.
2011-01-21 10:55:40 +01:00
Jo Liss
258eb1c7e6
Move config.pepper from encryptable into database_authenticatable section in the initializer.
...
config.pepper is used by both database_authenticatable and encryptable,
but encryptable requires database_authenticatable anyway, so it makes
more sense to have it in the database_authenticatable section.
2011-01-13 13:02:17 +08:00
Richard Aday
038eb321d4
Allowing reset_password_keys and unlock_keys to be set through the config
2010-12-30 03:10:56 +08:00
José Valim
b50fd1a72e
Fix e-mail regexp. Closes #698
2010-12-01 17:19:45 +01:00
Andrew Dahl
e911abf13b
changed case_insensitive_keys config setting to an array and added downcasing of keys as a before filter on database authentication module
2010-11-18 23:29:53 +01:00
Andrew Dahl
94c666e439
first attempt
2010-11-18 21:24:42 +01:00
Robert Peters
32c6f7b00b
For #646 - modify the configuration text that is output for confirm_within so that it matches the actual default value. If you use nil as a value, it crashes trying to call nil.ago
2010-11-13 15:50:33 +08:00
José Valim
14d772972d
No need to set a pepper in a bcrypt world.
2010-11-11 12:54:09 -08:00
José Valim
c7efb68a77
Devise does not intercept 401 returned from applications anymore
2010-11-09 23:42:14 +01:00
José Valim
835d1044ae
Fix a problem with IE7 headers.
2010-11-08 22:45:42 +01:00
José Valim
2f360bf201
Remove OAuth2 in favor of OmniAuth.
2010-10-18 15:00:34 +02:00
José Valim
4d8d1f5222
Uncomment pepper in configuration.
2010-09-26 01:44:37 -07:00
José Valim
531f221be7
Allow :stateless_token to be set to true avoiding users to be stored in session through token authentication
2010-09-25 20:28:14 +02:00
José Valim
09088706bb
Extract encryptors into their own module for better bcrypt support.
2010-09-25 16:08:46 +02:00
José Valim
31d821c2e0
Allow to Rememberable to work without remember_token relying on salt if possible.
...
This comes with the benefit that if you change your password, all remember tokens expires, and it also requires one field less in the database.
The downside is that if you want remember_me_across_browser to be false, it won't work unless you use the token. It also requires you to be using database_authenticable.
Using salt is now the default in Devise.
2010-09-25 13:07:24 +02:00
José Valim
b2066cc229
Add request_keys support. Closes #401 .
2010-09-21 11:45:44 +02:00
Carlos Antonio da Silva
5c928df66b
Strip some whitespaces
2010-09-09 21:11:23 -03:00
George Guimarães
1e17b6a5ec
Typo in initializer
2010-08-25 00:41:26 -03:00
George Guimarães
a9aab6bd27
Changes the comments in devise initializer to reflect the default options.
2010-08-23 16:50:42 -03:00
José Valim
b8ab9a835b
Disable HTTP Authentication by default. You can turn it on in the initializer.
2010-08-23 10:22:31 -03:00
José Valim
ab7f3bc175
Added Devise.sign_out_via.
2010-08-23 09:05:40 -03:00
José Valim
d6c6e7cfe1
Fix generators bug.
2010-07-27 16:14:09 +02:00
