RubyGems - authlogic - Versions diffs - 1.4.3 → 2.0.0 - Mend

authlogic 1.4.3 → 2.0.0

Potentially problematic release.

This version of authlogic might be problematic. Click here for more details.

Files changed (131) hide show

data/CHANGELOG.rdoc +19 -0
data/Manifest.txt +111 -0
data/README.rdoc +116 -389
data/Rakefile +14 -7
data/lib/authlogic.rb +33 -35
data/lib/authlogic/acts_as_authentic/base.rb +91 -0
data/lib/authlogic/acts_as_authentic/email.rb +77 -0
data/lib/authlogic/acts_as_authentic/logged_in_status.rb +54 -0
data/lib/authlogic/acts_as_authentic/login.rb +65 -0
data/lib/authlogic/acts_as_authentic/magic_columns.rb +24 -0
data/lib/authlogic/acts_as_authentic/password.rb +215 -0
data/lib/authlogic/acts_as_authentic/perishable_token.rb +100 -0
data/lib/authlogic/acts_as_authentic/persistence_token.rb +66 -0
data/lib/authlogic/acts_as_authentic/restful_authentication.rb +60 -0
data/lib/authlogic/acts_as_authentic/session_maintenance.rb +127 -0
data/lib/authlogic/acts_as_authentic/single_access_token.rb +58 -0
data/lib/authlogic/acts_as_authentic/validations_scope.rb +32 -0
data/lib/authlogic/{session/authenticates_many_association.rb → authenticates_many/association.rb} +10 -6
data/lib/authlogic/authenticates_many/base.rb +55 -0
data/lib/authlogic/controller_adapters/abstract_adapter.rb +2 -3
data/lib/authlogic/controller_adapters/merb_adapter.rb +0 -4
data/lib/authlogic/controller_adapters/rails_adapter.rb +0 -4
data/lib/authlogic/crypto_providers/aes256.rb +0 -2
data/lib/authlogic/crypto_providers/bcrypt.rb +0 -2
data/lib/authlogic/crypto_providers/md5.rb +34 -0
data/lib/authlogic/crypto_providers/sha1.rb +0 -2
data/lib/authlogic/crypto_providers/sha512.rb +1 -3
data/lib/authlogic/i18n.rb +1 -4
data/lib/authlogic/random.rb +33 -0
data/lib/authlogic/session/activation.rb +56 -0
data/lib/authlogic/session/active_record_trickery.rb +15 -7
data/lib/authlogic/session/base.rb +31 -456
data/lib/authlogic/session/brute_force_protection.rb +50 -27
data/lib/authlogic/session/callbacks.rb +24 -15
data/lib/authlogic/session/cookies.rb +108 -22
data/lib/authlogic/session/existence.rb +89 -0
data/lib/authlogic/session/foundation.rb +63 -0
data/lib/authlogic/session/http_auth.rb +23 -0
data/lib/authlogic/session/id.rb +41 -0
data/lib/authlogic/session/klass.rb +75 -0
data/lib/authlogic/session/magic_columns.rb +75 -0
data/lib/authlogic/session/magic_states.rb +58 -0
data/lib/authlogic/session/params.rb +82 -19
data/lib/authlogic/session/password.rb +156 -0
data/lib/authlogic/session/{perishability.rb → perishable_token.rb} +4 -4
data/lib/authlogic/session/persistence.rb +70 -0
data/lib/authlogic/session/priority_record.rb +34 -0
data/lib/authlogic/session/scopes.rb +57 -53
data/lib/authlogic/session/session.rb +46 -31
data/lib/authlogic/session/timeout.rb +65 -31
data/lib/authlogic/session/unauthorized_record.rb +50 -0
data/lib/authlogic/session/validation.rb +76 -0
data/lib/authlogic/testing/test_unit_helpers.rb +3 -3
data/lib/authlogic/version.rb +3 -3
data/test/acts_as_authentic_test/base_test.rb +12 -0
data/test/acts_as_authentic_test/email_test.rb +79 -0
data/test/acts_as_authentic_test/logged_in_status_test.rb +36 -0
data/test/acts_as_authentic_test/login_test.rb +79 -0
data/test/acts_as_authentic_test/magic_columns_test.rb +27 -0
data/test/acts_as_authentic_test/password_test.rb +212 -0
data/test/acts_as_authentic_test/perishable_token_test.rb +56 -0
data/test/acts_as_authentic_test/persistence_token_test.rb +55 -0
data/test/acts_as_authentic_test/session_maintenance_test.rb +68 -0
data/test/acts_as_authentic_test/single_access_test.rb +39 -0
data/test/authenticates_many_test.rb +16 -0
data/test/{crypto_provider_tests → crypto_provider_test}/aes256_test.rb +1 -1
data/test/{crypto_provider_tests → crypto_provider_test}/bcrypt_test.rb +1 -1
data/test/{crypto_provider_tests → crypto_provider_test}/sha1_test.rb +1 -1
data/test/{crypto_provider_tests → crypto_provider_test}/sha512_test.rb +1 -1
data/test/fixtures/employees.yml +4 -4
data/test/fixtures/users.yml +6 -6
data/test/libs/company.rb +6 -0
data/test/libs/employee.rb +7 -0
data/test/libs/employee_session.rb +2 -0
data/test/libs/project.rb +3 -0
data/test/libs/user_session.rb +2 -0
data/test/random_test.rb +49 -0
data/test/session_test/activation_test.rb +43 -0
data/test/session_test/active_record_trickery_test.rb +26 -0
data/test/session_test/brute_force_protection_test.rb +76 -0
data/test/session_test/callbacks_test.rb +6 -0
data/test/session_test/cookies_test.rb +107 -0
data/test/session_test/credentials_test.rb +0 -0
data/test/session_test/existence_test.rb +64 -0
data/test/session_test/http_auth_test.rb +16 -0
data/test/session_test/id_test.rb +17 -0
data/test/session_test/klass_test.rb +35 -0
data/test/session_test/magic_columns_test.rb +59 -0
data/test/session_test/magic_states_test.rb +60 -0
data/test/session_test/params_test.rb +53 -0
data/test/session_test/password_test.rb +84 -0
data/test/{session_tests → session_test}/perishability_test.rb +1 -1
data/test/session_test/persistence_test.rb +21 -0
data/test/{session_tests → session_test}/scopes_test.rb +2 -3
data/test/session_test/session_test.rb +59 -0
data/test/session_test/timeout_test.rb +43 -0
data/test/session_test/unauthorized_record_test.rb +13 -0
data/test/session_test/validation_test.rb +23 -0
data/test/test_helper.rb +14 -29
metadata +120 -112
data/Manifest +0 -76
data/authlogic.gemspec +0 -38
data/lib/authlogic/orm_adapters/active_record_adapter/acts_as_authentic/base.rb +0 -22
data/lib/authlogic/orm_adapters/active_record_adapter/acts_as_authentic/config.rb +0 -238
data/lib/authlogic/orm_adapters/active_record_adapter/acts_as_authentic/credentials.rb +0 -155
data/lib/authlogic/orm_adapters/active_record_adapter/acts_as_authentic/logged_in.rb +0 -51
data/lib/authlogic/orm_adapters/active_record_adapter/acts_as_authentic/perishability.rb +0 -71
data/lib/authlogic/orm_adapters/active_record_adapter/acts_as_authentic/persistence.rb +0 -94
data/lib/authlogic/orm_adapters/active_record_adapter/acts_as_authentic/session_maintenance.rb +0 -87
data/lib/authlogic/orm_adapters/active_record_adapter/acts_as_authentic/single_access.rb +0 -61
data/lib/authlogic/orm_adapters/active_record_adapter/authenticates_many.rb +0 -58
data/lib/authlogic/session/config.rb +0 -421
data/lib/authlogic/session/errors.rb +0 -18
data/lib/authlogic/session/record_info.rb +0 -24
data/test/orm_adapters_tests/active_record_adapter_tests/acts_as_authentic_tests/config_test.rb +0 -154
data/test/orm_adapters_tests/active_record_adapter_tests/acts_as_authentic_tests/credentials_test.rb +0 -157
data/test/orm_adapters_tests/active_record_adapter_tests/acts_as_authentic_tests/logged_in_test.rb +0 -24
data/test/orm_adapters_tests/active_record_adapter_tests/acts_as_authentic_tests/perishability_test.rb +0 -41
data/test/orm_adapters_tests/active_record_adapter_tests/acts_as_authentic_tests/persistence_test.rb +0 -54
data/test/orm_adapters_tests/active_record_adapter_tests/acts_as_authentic_tests/session_maintenance_test.rb +0 -62
data/test/orm_adapters_tests/active_record_adapter_tests/acts_as_authentic_tests/single_access_test.rb +0 -41
data/test/orm_adapters_tests/active_record_adapter_tests/authenticates_many_test.rb +0 -32
data/test/session_tests/active_record_trickery_test.rb +0 -14
data/test/session_tests/authenticates_many_association_test.rb +0 -28
data/test/session_tests/base_test.rb +0 -307
data/test/session_tests/brute_force_protection_test.rb +0 -53
data/test/session_tests/config_test.rb +0 -184
data/test/session_tests/cookies_test.rb +0 -32
data/test/session_tests/params_test.rb +0 -32
data/test/session_tests/session_test.rb +0 -45
data/test/session_tests/timeout_test.rb +0 -71

data/test/session_tests/brute_force_protection_test.rb DELETED Viewed

@@ -1,53 +0,0 @@
-require File.dirname(__FILE__) + '/../test_helper.rb'
-module SessionTests
-  class BruteForceProtectionTest < ActiveSupport::TestCase
-    def test_under_limit
-      ben = users(:ben)
-      ben.failed_login_count = UserSession.consecutive_failed_logins_limit - 1
-      assert ben.save
-      assert UserSession.create(:login => ben.login, :password => "benrocks")
-    end
-    def test_exceeded_limit
-      ben = users(:ben)
-      ben.failed_login_count = UserSession.consecutive_failed_logins_limit
-      assert ben.save
-      assert !UserSession.create(:login => ben.login, :password => "benrocks")
-    end
-    def test_exeeding_failed_logins_limit
-      UserSession.consecutive_failed_logins_limit = 2
-      ben = users(:ben)
-      2.times do |i|
-        session = UserSession.new(:login => ben.login, :password => "badpassword")
-        assert !session.save
-        assert session.errors.on(:password)
-        assert_equal i + 1, ben.reload.failed_login_count
-      end
-      session = UserSession.new(:login => ben.login, :password => "badpassword2")
-      assert !session.save
-      assert !session.errors.on(:password)
-      assert_equal 2, ben.reload.failed_login_count
-      UserSession.consecutive_failed_logins_limit = 50
-    end
-    def test_resetting_failed_logins_count
-      ben = users(:ben)
-      2.times do |i|
-        session = UserSession.new(:login => ben.login, :password => "badpassword")
-        assert !session.save
-        assert session.errors.on(:password)
-        assert_equal i + 1, ben.reload.failed_login_count
-      end
-      session = UserSession.new(:login => ben.login, :password => "benrocks")
-      assert session.save
-      assert_equal 0, ben.reload.failed_login_count
-    end
-  end
-end

data/test/session_tests/config_test.rb DELETED Viewed

@@ -1,184 +0,0 @@
-require File.dirname(__FILE__) + '/../test_helper.rb'
-module SessionTests
-  class ConfigTest < ActiveSupport::TestCase
-    def test_authenticate_with
-      UserSession.authenticate_with = Employee
-      assert_equal "Employee", UserSession.klass_name
-      assert_equal Employee, UserSession.klass
-      UserSession.authenticate_with User
-      assert_equal "User", UserSession.klass_name
-      assert_equal User, UserSession.klass
-    end
-    def test_cookie_key
-      UserSession.cookie_key = "my_cookie_key"
-      assert_equal "my_cookie_key", UserSession.cookie_key
-      session = UserSession.new
-      assert_equal "my_cookie_key", session.cookie_key
-      UserSession.cookie_key "user_credentials"
-      assert_equal "user_credentials", UserSession.cookie_key
-      session = UserSession.new
-      assert_equal "user_credentials", session.cookie_key
-    end
-    def test_disable_magic_states
-      UserSession.disable_magic_states = true
-      assert_equal true, UserSession.disable_magic_states
-      session = UserSession.new
-      assert_equal true, session.disable_magic_states?
-      UserSession.disable_magic_states false
-      assert_equal false, UserSession.disable_magic_states
-      session = UserSession.new
-      assert_equal false, session.disable_magic_states?
-    end
-    def test_find_by_login_method
-      UserSession.find_by_login_method = "my_login_method"
-      assert_equal "my_login_method", UserSession.find_by_login_method
-      session = UserSession.new
-      assert_equal "my_login_method", session.find_by_login_method
-      UserSession.find_by_login_method "find_by_login"
-      assert_equal "find_by_login", UserSession.find_by_login_method
-      session = UserSession.new
-      assert_equal "find_by_login", session.find_by_login_method
-    end
-    def test_find_with
-      UserSession.find_with = [:session]
-      assert_equal [:session], UserSession.find_with
-      session = UserSession.new
-      assert_equal [:session], session.find_with
-      set_cookie_for(users(:ben))
-      assert !UserSession.find
-      UserSession.find_with :session, :cookie, :http_auth
-      assert_equal [:session, :cookie, :http_auth], UserSession.find_with
-      session = UserSession.new
-      assert_equal [:session, :cookie, :http_auth], session.find_with
-      assert UserSession.find
-    end
-    def test_last_request_at_threshold
-      UserSession.last_request_at_threshold = 2.minutes
-      assert_equal 2.minutes, UserSession.last_request_at_threshold
-      session = UserSession.new
-      assert_equal 2.minutes, session.last_request_at_threshold
-      UserSession.last_request_at_threshold 0
-      assert_equal 0, UserSession.last_request_at_threshold
-      session = UserSession.new
-      assert_equal 0, session.last_request_at_threshold
-    end
-    def test_login_field
-      UserSession.methods_configured = false
-      UserSession.login_field = :saweet
-      assert_equal :saweet, UserSession.login_field
-      session = UserSession.new
-      assert_equal :saweet, session.login_field
-      assert session.respond_to?(:saweet)
-      UserSession.login_field :login
-      assert_equal :login, UserSession.login_field
-      session = UserSession.new
-      assert_equal :login, session.login_field
-      assert session.respond_to?(:login)
-    end
-    def test_params_key
-      UserSession.params_key = "my_params_key"
-      assert_equal "my_params_key", UserSession.params_key
-      session = UserSession.new
-      assert_equal "my_params_key", session.params_key
-      UserSession.params_key "user_credentials"
-      assert_equal "user_credentials", UserSession.params_key
-      session = UserSession.new
-      assert_equal "user_credentials", session.params_key
-    end
-    def test_password_field
-      UserSession.methods_configured = false
-      UserSession.password_field = :saweet
-      assert_equal :saweet, UserSession.password_field
-      session = UserSession.new
-      assert_equal :saweet, session.password_field
-      assert session.respond_to?(:saweet)
-      UserSession.password_field :password
-      assert_equal :password, UserSession.password_field
-      session = UserSession.new
-      assert_equal :password, session.password_field
-      assert session.respond_to?(:password)
-    end
-    def test_remember_me
-      UserSession.remember_me = true
-      assert_equal true, UserSession.remember_me
-      session = UserSession.new
-      assert_equal true, session.remember_me
-      UserSession.remember_me false
-      assert_equal false, UserSession.remember_me
-      session = UserSession.new
-      assert_equal false, session.remember_me
-    end
-    def test_remember_me_for
-      UserSession.remember_me_for = 3.years
-      assert_equal 3.years, UserSession.remember_me_for
-      session = UserSession.new
-      session.remember_me = true
-      assert_equal 3.years, session.remember_me_for
-      UserSession.remember_me_for 3.months
-      assert_equal 3.months, UserSession.remember_me_for
-      session = UserSession.new
-      session.remember_me = true
-      assert_equal 3.months, session.remember_me_for
-    end
-    def test_session_key
-      UserSession.session_key = "my_session_key"
-      assert_equal "my_session_key", UserSession.session_key
-      session = UserSession.new
-      assert_equal "my_session_key", session.session_key
-      UserSession.session_key "user_credentials"
-      assert_equal "user_credentials", UserSession.session_key
-      session = UserSession.new
-      assert_equal "user_credentials", session.session_key
-    end
-    def test_single_access_allowed_request_types
-      UserSession.single_access_allowed_request_types = "my request type"
-      assert_equal ["my request type"], UserSession.single_access_allowed_request_types
-      session = UserSession.new
-      assert_equal ["my request type"], session.single_access_allowed_request_types
-      UserSession.single_access_allowed_request_types "application/rss+xml", "application/atom+xml"
-      assert_equal ["application/rss+xml", "application/atom+xml"], UserSession.single_access_allowed_request_types
-      session = UserSession.new
-      assert_equal ["application/rss+xml", "application/atom+xml"], session.single_access_allowed_request_types
-    end
-    def test_verify_password_method
-      UserSession.verify_password_method = "my_login_method"
-      assert_equal "my_login_method", UserSession.verify_password_method
-      session = UserSession.new
-      assert_equal "my_login_method", session.verify_password_method
-      UserSession.verify_password_method "valid_password?"
-      assert_equal "valid_password?", UserSession.verify_password_method
-      session = UserSession.new
-      assert_equal "valid_password?", session.verify_password_method
-    end
-  end
-end

data/test/session_tests/cookies_test.rb DELETED Viewed

@@ -1,32 +0,0 @@
-require File.dirname(__FILE__) + '/../test_helper.rb'
-module SessionTests
-  class CookiesTest < ActiveSupport::TestCase
-    def test_valid_cookie
-      ben = users(:ben)
-      session = UserSession.new
-      assert !session.valid_cookie?
-      set_cookie_for(ben)
-      assert session.valid_cookie?
-      assert_equal ben, session.unauthorized_record
-    end
-    def test_save
-      ben = users(:ben)
-      session = UserSession.new(ben)
-      assert session.save
-      assert_equal ben.persistence_token, @controller.cookies["user_credentials"]
-    end
-    def test_destroy
-      ben = users(:ben)
-      set_cookie_for(ben)
-      session = UserSession.find
-      assert @controller.cookies["user_credentials"]
-      assert session.destroy
-      assert !@controller.cookies["user_credentials"]
-    end
-  end
-end

data/test/session_tests/params_test.rb DELETED Viewed

@@ -1,32 +0,0 @@
-require File.dirname(__FILE__) + '/../test_helper.rb'
-module SessionTests
-  class ParamsTest < ActiveSupport::TestCase
-    def test_valid_params
-      ben = users(:ben)
-      session = UserSession.new
-      assert !session.valid_params?
-      set_params_for(ben)
-      assert !session.valid_params?
-      assert !session.unauthorized_record
-      assert !@controller.session["user_credentials"]
-      set_request_content_type("text/plain")
-      assert !session.valid_params?
-      assert !session.unauthorized_record
-      assert !@controller.session["user_credentials"]
-      set_request_content_type("application/atom+xml")
-      assert session.valid_params?
-      assert_equal ben, session.unauthorized_record
-      assert !@controller.session["user_credentials"]
-      set_request_content_type("application/rss+xml")
-      assert session.valid_params?
-      assert_equal ben, session.unauthorized_record
-      assert !@controller.session["user_credentials"]
-    end
-  end
-end

data/test/session_tests/session_test.rb DELETED Viewed

@@ -1,45 +0,0 @@
-require File.dirname(__FILE__) + '/../test_helper.rb'
-module SessionTests
-  class SessionTest < ActiveSupport::TestCase
-    def test_valid_session
-      ben = users(:ben)
-      session = UserSession.new
-      assert !session.valid_session?
-      set_session_for(ben)
-      assert session.valid_session?
-      assert session.find_record
-      assert_equal ben, session.record
-      assert_equal ben.persistence_token, @controller.session["user_credentials"]
-      assert_equal ben, session.unauthorized_record
-      assert !session.new_session?
-    end
-    def test_save
-      ben = users(:ben)
-      session = UserSession.new(ben)
-      assert @controller.session["user_credentials"].blank?
-      assert session.save
-      assert_equal ben.persistence_token, @controller.session["user_credentials"]
-    end
-    def test_destroy
-      ben = users(:ben)
-      set_session_for(ben)
-      assert_equal ben.persistence_token, @controller.session["user_credentials"]
-      session = UserSession.find
-      assert session.destroy
-      assert @controller.session["user_credentials"].blank?
-    end
-    def test_find
-      ben = users(:ben)
-      set_cookie_for(ben)
-      assert @controller.session["user_credentials"].blank?
-      assert UserSession.find
-      assert_equal ben.persistence_token, @controller.session["user_credentials"]
-    end
-  end
-end

data/test/session_tests/timeout_test.rb DELETED Viewed

@@ -1,71 +0,0 @@
-require File.dirname(__FILE__) + '/../test_helper.rb'
-module SessionTests
-  class TimeoutTest < ActiveSupport::TestCase
-    def test_after_find
-      ben = users(:ben)
-      set_session_for(ben)
-      session = UserSession.find
-      assert session
-      assert !session.record.last_request_at.nil?
-      UserSession.last_request_at_threshold = 2.seconds
-      assert_equal 2.seconds, UserSession.last_request_at_threshold
-      assert UserSession.find
-      last_request_at = ben.reload.last_request_at
-      sleep(0.5)
-      assert UserSession.find
-      assert_equal last_request_at, ben.reload.last_request_at
-      sleep(2)
-      assert UserSession.find
-      assert_not_equal last_request_at, ben.reload.last_request_at
-      UserSession.last_request_at_threshold 0
-      assert_equal 0, UserSession.last_request_at_threshold
-    end
-    def test_after_save
-      ben = users(:ben)
-      session = UserSession.new(ben)
-      assert session.save
-      assert !session.record.last_request_at.nil?
-      assert !session.stale?
-    end
-    def test_not_stale
-      UserSession.logout_on_timeout = true
-      ben = users(:ben)
-      ben.update_attribute(:last_request_at, Time.now)
-      set_session_for(ben)
-      session = UserSession.find
-      assert !session.stale?
-    end
-    def test_stale
-      ben = users(:ben)
-      set_session_for(ben)
-      ben.update_attribute(:last_request_at, 3.years.ago)
-      session = UserSession.find
-      assert session.stale?
-      assert_nil @controller.session["user_credentials"]
-      assert_nil @controller.session["user_credentials_id"]
-      UserSession.logout_on_timeout = false
-    end
-    def test_stale_find
-      UserSession.logout_on_timeout = true
-      ben = users(:ben)
-      ben.update_attribute(:last_request_at, 3.years.ago)
-      set_session_for(ben)
-      session = UserSession.find
-      assert session.stale?
-      ben.update_attribute(:last_request_at, Time.now)
-      set_session_for(ben)
-      session = UserSession.find
-      assert !session.stale?
-    end
-  end
-end