José Valim
dd721f1857
Use secure compare as well.
2011-02-15 11:33:54 +01:00
Jo Liss
692f7b27ff
typos (remaining instances of authenticable -> authenticatable)
2011-01-13 13:02:17 +08:00
Prem Sichanugrist
e8e3df3891
Add support for non-navigational format response to SessionsController
...
This will make Devise::SessionsController return the authenticated object in the requested format instead of redirect the client to another page upon success authentication.
2010-12-25 17:57:15 +08:00
José Valim
13e8bc22e3
Move duplicate sign_in logic to sign_in().
2010-12-20 10:02:27 +01:00
Gavin Hughes
fe5ef25614
Deprecate anybody_signed_in? in favor of signed_in?(nil)
2010-11-28 00:09:23 +08:00
José Valim
b2496d1bc1
Smallish updates.
2010-11-11 13:53:52 +01:00
José Valim
e4c5158851
Sign out by default will destroy the existing session.
2010-10-10 17:51:32 +02:00
José Valim
db1ce8eeb2
Sign up now check if the user is active or not and redirect him accordingly setting the inactive_signed_up message. This commit also moves after_update_path_for to inside RegistrationsController, not allowing it to be overriden inside ApplicationController anymore.
2010-09-30 09:12:00 +02:00
José Valim
617e142e34
Store the salt in session and expire the session if the user changes his password
2010-09-25 17:24:56 +02:00
José Valim
617b95fdcd
sign_out_all_scopes is true by default.
2010-08-23 09:18:39 -03:00
Carlos Antonio da Silva
81c49c69df
Fix failing helper test and test descriptions
2010-08-13 09:02:51 -03:00
Carlos Antonio da Silva
01c272c692
Add some tests to helper creation using namespaces, to better show how it works.
2010-08-02 08:52:12 -03:00
José Valim
fefbf51c79
scope_signed_in? helpers now simply delegate to current_scope to improve performance.
2010-07-26 20:33:23 +02:00
José Valim
00c6f583e2
More OAuth tests.
2010-07-26 20:33:22 +02:00
Denis Lifanov
819db39263
simplification (sign_out_everybody => sign_out_all_scopes)
2010-06-25 02:29:48 +08:00
Denis Lifanov
1924a915a8
sign_out_everybody helper (as a convenient proxy to warden)
2010-06-25 02:29:41 +08:00
SSDany
5c9fe5e769
anybody_signed_in? helper
2010-06-12 05:11:03 +08:00
Joseph DelCioppio
80977c6dee
Added after_update_path to registrations controller. Users can now specify the path that their app should return to after updated a resource. If not specified it will return to the root, or the resource's root if specified.
2010-05-25 04:25:32 +08:00
José Valim
23e608e27b
No need to append ?unauthenticated=true in URLs anymore since Flash was moved to a middleware in Rails 3.
2010-04-03 11:43:31 +02:00
José Valim
2b5a068246
Move part of the logic in SessionsController#create to the FailureApp. Whenever Warden is invoked with a :recall, the failure app will recall the chosen controller and the action given to recall.
2010-04-01 17:30:55 +02:00
José Valim
ca4e09390e
Compatibility with Ruby 1.9.1 and 1.9.2.
2010-03-26 11:27:19 +01:00
José Valim
829c85631b
Aim for Rails 3.0.0.beta1 compatibility. A few issues are still pending with Warden.
2010-03-10 15:00:12 +01:00
José Valim
1c6f18cb8b
Since Devise::FailureApp is now a metal, we can get rid of this default_url_options stuff.
2010-02-19 10:13:53 +01:00
José Valim
d466849c57
More tests passing for Rails 3 compatibility. 369 tests, 788 assertions, 34 failures, 16 errors.
2010-02-16 16:11:30 +01:00
José Valim
a5b2ee5171
Improve documentation for after_sign_in_path_for.
2010-01-16 10:56:35 +01:00
José Valim
f46d1b1d81
Add support to Warden 0.9.0.pre
2010-01-14 13:38:02 +01:00
José Valim
b581f86317
DRY up controllers.
2010-01-13 18:12:13 +01:00
José Valim
1db50dee36
Skip authentication filters by default on Devise controllers and add devise_controller? to select/reject other filters.
2009-11-06 09:33:18 -02:00
José Valim
dede8af5b0
Do not include Devise internal helpers in application controller.
2009-10-27 21:26:40 -02:00
José Valim
609a83a76c
Allow to access the session for a given scope, through #{scope}_session reader and improved documentation.
2009-10-18 12:54:21 -02:00
José Valim
6da49499ff
Finished major changes.
2009-10-12 10:18:14 -03:00