authpwn_rails 0.7.2 → 0.7.3

data/VERSION

@@ -1 +1 @@
-0.7.2
+0.7.3

data/authpwn_rails.gemspec

@@ -5,7 +5,7 @@
 
 Gem::Specification.new do |s|
   s.name = %q{authpwn_rails}
-  s.version = "0.7.2"
+  s.version = "0.7.3"
 
   s.required_rubygems_version = Gem::Requirement.new(">= 0") if s.respond_to? :required_rubygems_version=
   s.authors = ["Victor Costan"]
@@ -59,7 +59,7 @@ Gem::Specification.new do |s|
   ]
   s.homepage = %q{http://github.com/pwnall/authpwn_rails}
   s.require_paths = ["lib"]
-  s.rubygems_version = %q{1.6.0}
+  s.rubygems_version = %q{1.5.3}
   s.summary = %q{User authentication for Rails 3 applications.}
   s.test_files = [
     "test/cookie_controller_test.rb",

data/lib/authpwn_rails/session.rb

@@ -109,7 +109,10 @@ module SessionControllerInstanceMethods
       unless performed?
         respond_to do |format|
           format.html { render :action => :home }
-          format.json { render :json => @user }
+          format.json do
+            render :json => { :user => @user.serializable_hash,
+                              :csrf => form_authenticity_token }
+          end
         end
       end
     end
@@ -125,7 +128,10 @@ module SessionControllerInstanceMethods
     respond_to do |format|
       if current_user
         format.html { redirect_to @redirect_url }
-        format.json { render :json => current_user }
+        format.json do
+          render :json => { :user => current_user.serializable_hash,
+                            :csrf => form_authenticity_token }
+        end
       else
         notice = 'Invalid e-mail or password'
         format.html do

data/test/session_controller_api_test.rb

@@ -43,6 +43,7 @@ class SessionControllerApiTest < ActionController::TestCase
     assert_response :ok
     data = ActiveSupport::JSON.decode response.body
     assert_equal @user.email, data['user']['email']
+    assert_equal session[:_csrf_token], data['csrf']
     assert_equal @user, assigns(:user), 'home controller method not called'
   end
   
@@ -88,6 +89,7 @@ class SessionControllerApiTest < ActionController::TestCase
     assert_response :ok
     data = ActiveSupport::JSON.decode response.body
     assert_equal @user.email, data['user']['email']
+    assert_equal session[:_csrf_token], data['csrf']
     assert_equal @user, assigns(:current_user), 'instance variable'
     assert_equal @user, session_current_user, 'session'
   end

metadata

@@ -1,13 +1,13 @@
 --- !ruby/object:Gem::Specification 
 name: authpwn_rails
 version: !ruby/object:Gem::Version 
-  hash: 7
+  hash: 5
   prerelease: 
   segments: 
   - 0
   - 7
-  - 2
-  version: 0.7.2
+  - 3
+  version: 0.7.3
 platform: ruby
 authors: 
 - Victor Costan
@@ -145,7 +145,7 @@ required_rubygems_version: !ruby/object:Gem::Requirement
 requirements: []
 
 rubyforge_project: 
-rubygems_version: 1.6.0
+rubygems_version: 1.5.3
 signing_key: 
 specification_version: 3
 summary: User authentication for Rails 3 applications.