RubyGems - authlogic - Versions diffs - 1.4.3 → 2.0.0 - Mend

authlogic 1.4.3 → 2.0.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.

Potentially problematic release.

This version of authlogic might be problematic. Click here for more details.

Files changed (131) hide show

data/CHANGELOG.rdoc +19 -0
data/Manifest.txt +111 -0
data/README.rdoc +116 -389
data/Rakefile +14 -7
data/lib/authlogic.rb +33 -35
data/lib/authlogic/acts_as_authentic/base.rb +91 -0
data/lib/authlogic/acts_as_authentic/email.rb +77 -0
data/lib/authlogic/acts_as_authentic/logged_in_status.rb +54 -0
data/lib/authlogic/acts_as_authentic/login.rb +65 -0
data/lib/authlogic/acts_as_authentic/magic_columns.rb +24 -0
data/lib/authlogic/acts_as_authentic/password.rb +215 -0
data/lib/authlogic/acts_as_authentic/perishable_token.rb +100 -0
data/lib/authlogic/acts_as_authentic/persistence_token.rb +66 -0
data/lib/authlogic/acts_as_authentic/restful_authentication.rb +60 -0
data/lib/authlogic/acts_as_authentic/session_maintenance.rb +127 -0
data/lib/authlogic/acts_as_authentic/single_access_token.rb +58 -0
data/lib/authlogic/acts_as_authentic/validations_scope.rb +32 -0
data/lib/authlogic/{session/authenticates_many_association.rb → authenticates_many/association.rb} +10 -6
data/lib/authlogic/authenticates_many/base.rb +55 -0
data/lib/authlogic/controller_adapters/abstract_adapter.rb +2 -3
data/lib/authlogic/controller_adapters/merb_adapter.rb +0 -4
data/lib/authlogic/controller_adapters/rails_adapter.rb +0 -4
data/lib/authlogic/crypto_providers/aes256.rb +0 -2
data/lib/authlogic/crypto_providers/bcrypt.rb +0 -2
data/lib/authlogic/crypto_providers/md5.rb +34 -0
data/lib/authlogic/crypto_providers/sha1.rb +0 -2
data/lib/authlogic/crypto_providers/sha512.rb +1 -3
data/lib/authlogic/i18n.rb +1 -4
data/lib/authlogic/random.rb +33 -0
data/lib/authlogic/session/activation.rb +56 -0
data/lib/authlogic/session/active_record_trickery.rb +15 -7
data/lib/authlogic/session/base.rb +31 -456
data/lib/authlogic/session/brute_force_protection.rb +50 -27
data/lib/authlogic/session/callbacks.rb +24 -15
data/lib/authlogic/session/cookies.rb +108 -22
data/lib/authlogic/session/existence.rb +89 -0
data/lib/authlogic/session/foundation.rb +63 -0
data/lib/authlogic/session/http_auth.rb +23 -0
data/lib/authlogic/session/id.rb +41 -0
data/lib/authlogic/session/klass.rb +75 -0
data/lib/authlogic/session/magic_columns.rb +75 -0
data/lib/authlogic/session/magic_states.rb +58 -0
data/lib/authlogic/session/params.rb +82 -19
data/lib/authlogic/session/password.rb +156 -0
data/lib/authlogic/session/{perishability.rb → perishable_token.rb} +4 -4
data/lib/authlogic/session/persistence.rb +70 -0
data/lib/authlogic/session/priority_record.rb +34 -0
data/lib/authlogic/session/scopes.rb +57 -53
data/lib/authlogic/session/session.rb +46 -31
data/lib/authlogic/session/timeout.rb +65 -31
data/lib/authlogic/session/unauthorized_record.rb +50 -0
data/lib/authlogic/session/validation.rb +76 -0
data/lib/authlogic/testing/test_unit_helpers.rb +3 -3
data/lib/authlogic/version.rb +3 -3
data/test/acts_as_authentic_test/base_test.rb +12 -0
data/test/acts_as_authentic_test/email_test.rb +79 -0
data/test/acts_as_authentic_test/logged_in_status_test.rb +36 -0
data/test/acts_as_authentic_test/login_test.rb +79 -0
data/test/acts_as_authentic_test/magic_columns_test.rb +27 -0
data/test/acts_as_authentic_test/password_test.rb +212 -0
data/test/acts_as_authentic_test/perishable_token_test.rb +56 -0
data/test/acts_as_authentic_test/persistence_token_test.rb +55 -0
data/test/acts_as_authentic_test/session_maintenance_test.rb +68 -0
data/test/acts_as_authentic_test/single_access_test.rb +39 -0
data/test/authenticates_many_test.rb +16 -0
data/test/{crypto_provider_tests → crypto_provider_test}/aes256_test.rb +1 -1
data/test/{crypto_provider_tests → crypto_provider_test}/bcrypt_test.rb +1 -1
data/test/{crypto_provider_tests → crypto_provider_test}/sha1_test.rb +1 -1
data/test/{crypto_provider_tests → crypto_provider_test}/sha512_test.rb +1 -1
data/test/fixtures/employees.yml +4 -4
data/test/fixtures/users.yml +6 -6
data/test/libs/company.rb +6 -0
data/test/libs/employee.rb +7 -0
data/test/libs/employee_session.rb +2 -0
data/test/libs/project.rb +3 -0
data/test/libs/user_session.rb +2 -0
data/test/random_test.rb +49 -0
data/test/session_test/activation_test.rb +43 -0
data/test/session_test/active_record_trickery_test.rb +26 -0
data/test/session_test/brute_force_protection_test.rb +76 -0
data/test/session_test/callbacks_test.rb +6 -0
data/test/session_test/cookies_test.rb +107 -0
data/test/session_test/credentials_test.rb +0 -0
data/test/session_test/existence_test.rb +64 -0
data/test/session_test/http_auth_test.rb +16 -0
data/test/session_test/id_test.rb +17 -0
data/test/session_test/klass_test.rb +35 -0
data/test/session_test/magic_columns_test.rb +59 -0
data/test/session_test/magic_states_test.rb +60 -0
data/test/session_test/params_test.rb +53 -0
data/test/session_test/password_test.rb +84 -0
data/test/{session_tests → session_test}/perishability_test.rb +1 -1
data/test/session_test/persistence_test.rb +21 -0
data/test/{session_tests → session_test}/scopes_test.rb +2 -3
data/test/session_test/session_test.rb +59 -0
data/test/session_test/timeout_test.rb +43 -0
data/test/session_test/unauthorized_record_test.rb +13 -0
data/test/session_test/validation_test.rb +23 -0
data/test/test_helper.rb +14 -29
metadata +120 -112
data/Manifest +0 -76
data/authlogic.gemspec +0 -38
data/lib/authlogic/orm_adapters/active_record_adapter/acts_as_authentic/base.rb +0 -22
data/lib/authlogic/orm_adapters/active_record_adapter/acts_as_authentic/config.rb +0 -238
data/lib/authlogic/orm_adapters/active_record_adapter/acts_as_authentic/credentials.rb +0 -155
data/lib/authlogic/orm_adapters/active_record_adapter/acts_as_authentic/logged_in.rb +0 -51
data/lib/authlogic/orm_adapters/active_record_adapter/acts_as_authentic/perishability.rb +0 -71
data/lib/authlogic/orm_adapters/active_record_adapter/acts_as_authentic/persistence.rb +0 -94
data/lib/authlogic/orm_adapters/active_record_adapter/acts_as_authentic/session_maintenance.rb +0 -87
data/lib/authlogic/orm_adapters/active_record_adapter/acts_as_authentic/single_access.rb +0 -61
data/lib/authlogic/orm_adapters/active_record_adapter/authenticates_many.rb +0 -58
data/lib/authlogic/session/config.rb +0 -421
data/lib/authlogic/session/errors.rb +0 -18
data/lib/authlogic/session/record_info.rb +0 -24
data/test/orm_adapters_tests/active_record_adapter_tests/acts_as_authentic_tests/config_test.rb +0 -154
data/test/orm_adapters_tests/active_record_adapter_tests/acts_as_authentic_tests/credentials_test.rb +0 -157
data/test/orm_adapters_tests/active_record_adapter_tests/acts_as_authentic_tests/logged_in_test.rb +0 -24
data/test/orm_adapters_tests/active_record_adapter_tests/acts_as_authentic_tests/perishability_test.rb +0 -41
data/test/orm_adapters_tests/active_record_adapter_tests/acts_as_authentic_tests/persistence_test.rb +0 -54
data/test/orm_adapters_tests/active_record_adapter_tests/acts_as_authentic_tests/session_maintenance_test.rb +0 -62
data/test/orm_adapters_tests/active_record_adapter_tests/acts_as_authentic_tests/single_access_test.rb +0 -41
data/test/orm_adapters_tests/active_record_adapter_tests/authenticates_many_test.rb +0 -32
data/test/session_tests/active_record_trickery_test.rb +0 -14
data/test/session_tests/authenticates_many_association_test.rb +0 -28
data/test/session_tests/base_test.rb +0 -307
data/test/session_tests/brute_force_protection_test.rb +0 -53
data/test/session_tests/config_test.rb +0 -184
data/test/session_tests/cookies_test.rb +0 -32
data/test/session_tests/params_test.rb +0 -32
data/test/session_tests/session_test.rb +0 -45
data/test/session_tests/timeout_test.rb +0 -71

data/test/session_tests/brute_force_protection_test.rb DELETED Viewed

@@ -1,53 +0,0 @@
-require File.dirname(__FILE__) + '/../test_helper.rb'
-module SessionTests
-  class BruteForceProtectionTest < ActiveSupport::TestCase
-    def test_under_limit
-      ben = users(:ben)
-      ben.failed_login_count = UserSession.consecutive_failed_logins_limit - 1
-      assert ben.save
-      assert UserSession.create(:login => ben.login, :password => "benrocks")
-    end
-    def test_exceeded_limit
-      ben = users(:ben)
-      ben.failed_login_count = UserSession.consecutive_failed_logins_limit
-      assert ben.save
-      assert !UserSession.create(:login => ben.login, :password => "benrocks")
-    end
-    def test_exeeding_failed_logins_limit
-      UserSession.consecutive_failed_logins_limit = 2
-      ben = users(:ben)
-      2.times do |i|
-        session = UserSession.new(:login => ben.login, :password => "badpassword")
-        assert !session.save
-        assert session.errors.on(:password)
-        assert_equal i + 1, ben.reload.failed_login_count
-      end
-      session = UserSession.new(:login => ben.login, :password => "badpassword2")
-      assert !session.save
-      assert !session.errors.on(:password)
-      assert_equal 2, ben.reload.failed_login_count
-      UserSession.consecutive_failed_logins_limit = 50
-    end
-    def test_resetting_failed_logins_count
-      ben = users(:ben)
-      2.times do |i|
-        session = UserSession.new(:login => ben.login, :password => "badpassword")
-        assert !session.save
-        assert session.errors.on(:password)
-        assert_equal i + 1, ben.reload.failed_login_count
-      end
-      session = UserSession.new(:login => ben.login, :password => "benrocks")
-      assert session.save
-      assert_equal 0, ben.reload.failed_login_count
-    end
-  end
-end

data/test/session_tests/config_test.rb DELETED Viewed

@@ -1,184 +0,0 @@
-require File.dirname(__FILE__) + '/../test_helper.rb'
-module SessionTests
-  class ConfigTest < ActiveSupport::TestCase
-    def test_authenticate_with
-      UserSession.authenticate_with = Employee
-      assert_equal "Employee", UserSession.klass_name
-      assert_equal Employee, UserSession.klass
-      UserSession.authenticate_with User
-      assert_equal "User", UserSession.klass_name
-      assert_equal User, UserSession.klass
-    end
-    def test_cookie_key
-      UserSession.cookie_key = "my_cookie_key"
-      assert_equal "my_cookie_key", UserSession.cookie_key
-      session = UserSession.new
-      assert_equal "my_cookie_key", session.cookie_key
-      UserSession.cookie_key "user_credentials"
-      assert_equal "user_credentials", UserSession.cookie_key
-      session = UserSession.new
-      assert_equal "user_credentials", session.cookie_key
-    end
-    def test_disable_magic_states
-      UserSession.disable_magic_states = true
-      assert_equal true, UserSession.disable_magic_states
-      session = UserSession.new
-      assert_equal true, session.disable_magic_states?
-      UserSession.disable_magic_states false
-      assert_equal false, UserSession.disable_magic_states
-      session = UserSession.new
-      assert_equal false, session.disable_magic_states?
-    end
-    def test_find_by_login_method
-      UserSession.find_by_login_method = "my_login_method"
-      assert_equal "my_login_method", UserSession.find_by_login_method
-      session = UserSession.new
-      assert_equal "my_login_method", session.find_by_login_method
-      UserSession.find_by_login_method "find_by_login"
-      assert_equal "find_by_login", UserSession.find_by_login_method
-      session = UserSession.new
-      assert_equal "find_by_login", session.find_by_login_method
-    end
-    def test_find_with
-      UserSession.find_with = [:session]
-      assert_equal [:session], UserSession.find_with
-      session = UserSession.new
-      assert_equal [:session], session.find_with
-      set_cookie_for(users(:ben))
-      assert !UserSession.find
-      UserSession.find_with :session, :cookie, :http_auth
-      assert_equal [:session, :cookie, :http_auth], UserSession.find_with
-      session = UserSession.new
-      assert_equal [:session, :cookie, :http_auth], session.find_with
-      assert UserSession.find
-    end
-    def test_last_request_at_threshold
-      UserSession.last_request_at_threshold = 2.minutes
-      assert_equal 2.minutes, UserSession.last_request_at_threshold
-      session = UserSession.new
-      assert_equal 2.minutes, session.last_request_at_threshold
-      UserSession.last_request_at_threshold 0
-      assert_equal 0, UserSession.last_request_at_threshold
-      session = UserSession.new
-      assert_equal 0, session.last_request_at_threshold
-    end
-    def test_login_field
-      UserSession.methods_configured = false
-      UserSession.login_field = :saweet
-      assert_equal :saweet, UserSession.login_field
-      session = UserSession.new
-      assert_equal :saweet, session.login_field
-      assert session.respond_to?(:saweet)
-      UserSession.login_field :login
-      assert_equal :login, UserSession.login_field
-      session = UserSession.new
-      assert_equal :login, session.login_field
-      assert session.respond_to?(:login)
-    end
-    def test_params_key
-      UserSession.params_key = "my_params_key"
-      assert_equal "my_params_key", UserSession.params_key
-      session = UserSession.new
-      assert_equal "my_params_key", session.params_key
-      UserSession.params_key "user_credentials"
-      assert_equal "user_credentials", UserSession.params_key
-      session = UserSession.new
-      assert_equal "user_credentials", session.params_key
-    end
-    def test_password_field
-      UserSession.methods_configured = false
-      UserSession.password_field = :saweet
-      assert_equal :saweet, UserSession.password_field
-      session = UserSession.new
-      assert_equal :saweet, session.password_field
-      assert session.respond_to?(:saweet)
-      UserSession.password_field :password
-      assert_equal :password, UserSession.password_field
-      session = UserSession.new
-      assert_equal :password, session.password_field
-      assert session.respond_to?(:password)
-    end
-    def test_remember_me
-      UserSession.remember_me = true
-      assert_equal true, UserSession.remember_me
-      session = UserSession.new
-      assert_equal true, session.remember_me
-      UserSession.remember_me false
-      assert_equal false, UserSession.remember_me
-      session = UserSession.new
-      assert_equal false, session.remember_me
-    end
-    def test_remember_me_for
-      UserSession.remember_me_for = 3.years
-      assert_equal 3.years, UserSession.remember_me_for
-      session = UserSession.new
-      session.remember_me = true
-      assert_equal 3.years, session.remember_me_for
-      UserSession.remember_me_for 3.months
-      assert_equal 3.months, UserSession.remember_me_for
-      session = UserSession.new
-      session.remember_me = true
-      assert_equal 3.months, session.remember_me_for
-    end
-    def test_session_key
-      UserSession.session_key = "my_session_key"
-      assert_equal "my_session_key", UserSession.session_key
-      session = UserSession.new
-      assert_equal "my_session_key", session.session_key
-      UserSession.session_key "user_credentials"
-      assert_equal "user_credentials", UserSession.session_key
-      session = UserSession.new
-      assert_equal "user_credentials", session.session_key
-    end
-    def test_single_access_allowed_request_types
-      UserSession.single_access_allowed_request_types = "my request type"
-      assert_equal ["my request type"], UserSession.single_access_allowed_request_types
-      session = UserSession.new
-      assert_equal ["my request type"], session.single_access_allowed_request_types
-      UserSession.single_access_allowed_request_types "application/rss+xml", "application/atom+xml"
-      assert_equal ["application/rss+xml", "application/atom+xml"], UserSession.single_access_allowed_request_types
-      session = UserSession.new
-      assert_equal ["application/rss+xml", "application/atom+xml"], session.single_access_allowed_request_types
-    end
-    def test_verify_password_method
-      UserSession.verify_password_method = "my_login_method"
-      assert_equal "my_login_method", UserSession.verify_password_method
-      session = UserSession.new
-      assert_equal "my_login_method", session.verify_password_method
-      UserSession.verify_password_method "valid_password?"
-      assert_equal "valid_password?", UserSession.verify_password_method
-      session = UserSession.new
-      assert_equal "valid_password?", session.verify_password_method
-    end
-  end
-end

data/test/session_tests/cookies_test.rb DELETED Viewed

@@ -1,32 +0,0 @@
-require File.dirname(__FILE__) + '/../test_helper.rb'
-module SessionTests
-  class CookiesTest < ActiveSupport::TestCase
-    def test_valid_cookie
-      ben = users(:ben)
-      session = UserSession.new
-      assert !session.valid_cookie?
-      set_cookie_for(ben)
-      assert session.valid_cookie?
-      assert_equal ben, session.unauthorized_record
-    end
-    def test_save
-      ben = users(:ben)
-      session = UserSession.new(ben)
-      assert session.save
-      assert_equal ben.persistence_token, @controller.cookies["user_credentials"]
-    end
-    def test_destroy
-      ben = users(:ben)
-      set_cookie_for(ben)
-      session = UserSession.find
-      assert @controller.cookies["user_credentials"]
-      assert session.destroy
-      assert !@controller.cookies["user_credentials"]
-    end
-  end
-end

data/test/session_tests/params_test.rb DELETED Viewed

@@ -1,32 +0,0 @@
-require File.dirname(__FILE__) + '/../test_helper.rb'
-module SessionTests
-  class ParamsTest < ActiveSupport::TestCase
-    def test_valid_params
-      ben = users(:ben)
-      session = UserSession.new
-      assert !session.valid_params?
-      set_params_for(ben)
-      assert !session.valid_params?
-      assert !session.unauthorized_record
-      assert !@controller.session["user_credentials"]
-      set_request_content_type("text/plain")
-      assert !session.valid_params?
-      assert !session.unauthorized_record
-      assert !@controller.session["user_credentials"]
-      set_request_content_type("application/atom+xml")
-      assert session.valid_params?
-      assert_equal ben, session.unauthorized_record
-      assert !@controller.session["user_credentials"]
-      set_request_content_type("application/rss+xml")
-      assert session.valid_params?
-      assert_equal ben, session.unauthorized_record
-      assert !@controller.session["user_credentials"]
-    end
-  end
-end

data/test/session_tests/session_test.rb DELETED Viewed

@@ -1,45 +0,0 @@
-require File.dirname(__FILE__) + '/../test_helper.rb'
-module SessionTests
-  class SessionTest < ActiveSupport::TestCase
-    def test_valid_session
-      ben = users(:ben)
-      session = UserSession.new
-      assert !session.valid_session?
-      set_session_for(ben)
-      assert session.valid_session?
-      assert session.find_record
-      assert_equal ben, session.record
-      assert_equal ben.persistence_token, @controller.session["user_credentials"]
-      assert_equal ben, session.unauthorized_record
-      assert !session.new_session?
-    end
-    def test_save
-      ben = users(:ben)
-      session = UserSession.new(ben)
-      assert @controller.session["user_credentials"].blank?
-      assert session.save
-      assert_equal ben.persistence_token, @controller.session["user_credentials"]
-    end
-    def test_destroy
-      ben = users(:ben)
-      set_session_for(ben)
-      assert_equal ben.persistence_token, @controller.session["user_credentials"]
-      session = UserSession.find
-      assert session.destroy
-      assert @controller.session["user_credentials"].blank?
-    end
-    def test_find
-      ben = users(:ben)
-      set_cookie_for(ben)
-      assert @controller.session["user_credentials"].blank?
-      assert UserSession.find
-      assert_equal ben.persistence_token, @controller.session["user_credentials"]
-    end
-  end
-end

data/test/session_tests/timeout_test.rb DELETED Viewed

@@ -1,71 +0,0 @@
-require File.dirname(__FILE__) + '/../test_helper.rb'
-module SessionTests
-  class TimeoutTest < ActiveSupport::TestCase
-    def test_after_find
-      ben = users(:ben)
-      set_session_for(ben)
-      session = UserSession.find
-      assert session
-      assert !session.record.last_request_at.nil?
-      UserSession.last_request_at_threshold = 2.seconds
-      assert_equal 2.seconds, UserSession.last_request_at_threshold
-      assert UserSession.find
-      last_request_at = ben.reload.last_request_at
-      sleep(0.5)
-      assert UserSession.find
-      assert_equal last_request_at, ben.reload.last_request_at
-      sleep(2)
-      assert UserSession.find
-      assert_not_equal last_request_at, ben.reload.last_request_at
-      UserSession.last_request_at_threshold 0
-      assert_equal 0, UserSession.last_request_at_threshold
-    end
-    def test_after_save
-      ben = users(:ben)
-      session = UserSession.new(ben)
-      assert session.save
-      assert !session.record.last_request_at.nil?
-      assert !session.stale?
-    end
-    def test_not_stale
-      UserSession.logout_on_timeout = true
-      ben = users(:ben)
-      ben.update_attribute(:last_request_at, Time.now)
-      set_session_for(ben)
-      session = UserSession.find
-      assert !session.stale?
-    end
-    def test_stale
-      ben = users(:ben)
-      set_session_for(ben)
-      ben.update_attribute(:last_request_at, 3.years.ago)
-      session = UserSession.find
-      assert session.stale?
-      assert_nil @controller.session["user_credentials"]
-      assert_nil @controller.session["user_credentials_id"]
-      UserSession.logout_on_timeout = false
-    end
-    def test_stale_find
-      UserSession.logout_on_timeout = true
-      ben = users(:ben)
-      ben.update_attribute(:last_request_at, 3.years.ago)
-      set_session_for(ben)
-      session = UserSession.find
-      assert session.stale?
-      ben.update_attribute(:last_request_at, Time.now)
-      set_session_for(ben)
-      session = UserSession.find
-      assert !session.stale?
-    end
-  end
-end