devise-authy 1.0.0

Sign up to get free protection for your applications and to get access to all the features.
Files changed (158) hide show
  1. data/.document +5 -0
  2. data/.rspec +1 -0
  3. data/Gemfile +22 -0
  4. data/Gemfile.lock +138 -0
  5. data/LICENSE.txt +20 -0
  6. data/README.md +86 -0
  7. data/Rakefile +42 -0
  8. data/VERSION +1 -0
  9. data/app/assets/javascripts/devise_authy.js +7 -0
  10. data/app/assets/stylesheets/devise_authy.css +26 -0
  11. data/app/assets/stylesheets/devise_authy.sass +23 -0
  12. data/app/controllers/devise/devise_authy_controller.rb +109 -0
  13. data/app/views/devise/enable_authy.html.erb +8 -0
  14. data/app/views/devise/enable_authy.html.haml +8 -0
  15. data/app/views/devise/verify_authy.html.erb +13 -0
  16. data/app/views/devise/verify_authy.html.haml +11 -0
  17. data/app/views/devise/verify_authy_installation.html.erb +10 -0
  18. data/app/views/devise/verify_authy_installation.html.haml +8 -0
  19. data/authy-devise-demo/.gitignore +15 -0
  20. data/authy-devise-demo/Gemfile +39 -0
  21. data/authy-devise-demo/Gemfile.lock +134 -0
  22. data/authy-devise-demo/README.md +64 -0
  23. data/authy-devise-demo/Rakefile +7 -0
  24. data/authy-devise-demo/app/assets/images/rails.png +0 -0
  25. data/authy-devise-demo/app/assets/javascripts/application.js +15 -0
  26. data/authy-devise-demo/app/assets/javascripts/devise_authy.js +7 -0
  27. data/authy-devise-demo/app/assets/javascripts/welcome.js.coffee +3 -0
  28. data/authy-devise-demo/app/assets/stylesheets/application.css +13 -0
  29. data/authy-devise-demo/app/assets/stylesheets/devise_authy.css +26 -0
  30. data/authy-devise-demo/app/assets/stylesheets/welcome.css.scss +3 -0
  31. data/authy-devise-demo/app/controllers/application_controller.rb +3 -0
  32. data/authy-devise-demo/app/controllers/welcome_controller.rb +6 -0
  33. data/authy-devise-demo/app/helpers/application_helper.rb +2 -0
  34. data/authy-devise-demo/app/helpers/welcome_helper.rb +2 -0
  35. data/authy-devise-demo/app/mailers/.gitkeep +0 -0
  36. data/authy-devise-demo/app/models/.gitkeep +0 -0
  37. data/authy-devise-demo/app/models/user.rb +11 -0
  38. data/authy-devise-demo/app/views/devise/devise_authy/enable_authy.html.erb +8 -0
  39. data/authy-devise-demo/app/views/devise/devise_authy/verify_authy.html.erb +13 -0
  40. data/authy-devise-demo/app/views/devise/devise_authy/verify_authy_installation.html.erb +10 -0
  41. data/authy-devise-demo/app/views/layouts/application.html.erb +18 -0
  42. data/authy-devise-demo/app/views/welcome/index.html.erb +5 -0
  43. data/authy-devise-demo/config.ru +4 -0
  44. data/authy-devise-demo/config/application.rb +62 -0
  45. data/authy-devise-demo/config/boot.rb +6 -0
  46. data/authy-devise-demo/config/database.yml +25 -0
  47. data/authy-devise-demo/config/environment.rb +5 -0
  48. data/authy-devise-demo/config/environments/development.rb +37 -0
  49. data/authy-devise-demo/config/environments/production.rb +67 -0
  50. data/authy-devise-demo/config/environments/test.rb +37 -0
  51. data/authy-devise-demo/config/initializers/authy.rb +1 -0
  52. data/authy-devise-demo/config/initializers/backtrace_silencers.rb +7 -0
  53. data/authy-devise-demo/config/initializers/devise.rb +232 -0
  54. data/authy-devise-demo/config/initializers/inflections.rb +15 -0
  55. data/authy-devise-demo/config/initializers/mime_types.rb +5 -0
  56. data/authy-devise-demo/config/initializers/secret_token.rb +7 -0
  57. data/authy-devise-demo/config/initializers/session_store.rb +8 -0
  58. data/authy-devise-demo/config/initializers/wrap_parameters.rb +14 -0
  59. data/authy-devise-demo/config/locales/devise.authy.en.yml +18 -0
  60. data/authy-devise-demo/config/locales/devise.en.yml +58 -0
  61. data/authy-devise-demo/config/locales/en.yml +5 -0
  62. data/authy-devise-demo/config/routes.rb +62 -0
  63. data/authy-devise-demo/db/migrate/20130409234357_devise_create_users.rb +46 -0
  64. data/authy-devise-demo/db/migrate/20130409234434_devise_authy_add_to_users.rb +18 -0
  65. data/authy-devise-demo/db/schema.rb +38 -0
  66. data/authy-devise-demo/db/seeds.rb +7 -0
  67. data/authy-devise-demo/lib/assets/.gitkeep +0 -0
  68. data/authy-devise-demo/lib/tasks/.gitkeep +0 -0
  69. data/authy-devise-demo/log/.gitkeep +0 -0
  70. data/authy-devise-demo/public/404.html +26 -0
  71. data/authy-devise-demo/public/422.html +26 -0
  72. data/authy-devise-demo/public/500.html +25 -0
  73. data/authy-devise-demo/public/favicon.ico +0 -0
  74. data/authy-devise-demo/public/robots.txt +5 -0
  75. data/authy-devise-demo/script/rails +6 -0
  76. data/authy-devise-demo/test/fixtures/.gitkeep +0 -0
  77. data/authy-devise-demo/test/fixtures/users.yml +11 -0
  78. data/authy-devise-demo/test/functional/.gitkeep +0 -0
  79. data/authy-devise-demo/test/functional/welcome_controller_test.rb +9 -0
  80. data/authy-devise-demo/test/integration/.gitkeep +0 -0
  81. data/authy-devise-demo/test/performance/browsing_test.rb +12 -0
  82. data/authy-devise-demo/test/test_helper.rb +13 -0
  83. data/authy-devise-demo/test/unit/.gitkeep +0 -0
  84. data/authy-devise-demo/test/unit/helpers/welcome_helper_test.rb +4 -0
  85. data/authy-devise-demo/test/unit/user_test.rb +7 -0
  86. data/authy-devise-demo/vendor/assets/javascripts/.gitkeep +0 -0
  87. data/authy-devise-demo/vendor/assets/stylesheets/.gitkeep +0 -0
  88. data/authy-devise-demo/vendor/plugins/.gitkeep +0 -0
  89. data/config/locales/en.yml +18 -0
  90. data/devise-authy.gemspec +223 -0
  91. data/lib/devise-authy.rb +22 -0
  92. data/lib/devise-authy/controllers/helpers.rb +39 -0
  93. data/lib/devise-authy/controllers/view_helpers.rb +36 -0
  94. data/lib/devise-authy/hooks/authy_authenticatable.rb +7 -0
  95. data/lib/devise-authy/models/authy_authenticatable.rb +23 -0
  96. data/lib/devise-authy/rails.rb +11 -0
  97. data/lib/devise-authy/routes.rb +20 -0
  98. data/lib/devise-authy/version.rb +3 -0
  99. data/lib/generators/active_record/devise_authy_generator.rb +13 -0
  100. data/lib/generators/active_record/templates/migration.rb +18 -0
  101. data/lib/generators/devise_authy/devise_authy_generator.rb +30 -0
  102. data/lib/generators/devise_authy/install_generator.rb +64 -0
  103. data/spec/controllers/devise_authy_controller_spec.rb +85 -0
  104. data/spec/generators_spec.rb +24 -0
  105. data/spec/integration/authy_authenticatable.rb +88 -0
  106. data/spec/models/authy_authenticatable.rb +17 -0
  107. data/spec/orm/active_record.rb +4 -0
  108. data/spec/rails_app/Rakefile +10 -0
  109. data/spec/rails_app/app/assets/images/rails.png +0 -0
  110. data/spec/rails_app/app/assets/javascripts/application.js +10 -0
  111. data/spec/rails_app/app/assets/stylesheets/application.css +9 -0
  112. data/spec/rails_app/app/assets/stylesheets/devise_authy.css +26 -0
  113. data/spec/rails_app/app/assets/stylesheets/devise_authy.css.scss +26 -0
  114. data/spec/rails_app/app/assets/stylesheets/scaffolds.css.scss +56 -0
  115. data/spec/rails_app/app/controllers/application_controller.rb +4 -0
  116. data/spec/rails_app/app/controllers/posts_controller.rb +83 -0
  117. data/spec/rails_app/app/helpers/application_helper.rb +2 -0
  118. data/spec/rails_app/app/helpers/posts_helper.rb +2 -0
  119. data/spec/rails_app/app/mailers/.gitkeep +0 -0
  120. data/spec/rails_app/app/models/.gitkeep +0 -0
  121. data/spec/rails_app/app/models/post.rb +2 -0
  122. data/spec/rails_app/app/models/user.rb +9 -0
  123. data/spec/rails_app/app/views/devise/devise_authy/register.html.erb +10 -0
  124. data/spec/rails_app/app/views/devise/devise_authy/show.html.erb +10 -0
  125. data/spec/rails_app/app/views/layouts/application.html.erb +24 -0
  126. data/spec/rails_app/app/views/posts/_form.html.erb +25 -0
  127. data/spec/rails_app/app/views/posts/edit.html.erb +6 -0
  128. data/spec/rails_app/app/views/posts/index.html.erb +27 -0
  129. data/spec/rails_app/app/views/posts/new.html.erb +5 -0
  130. data/spec/rails_app/app/views/posts/show.html.erb +15 -0
  131. data/spec/rails_app/config.ru +4 -0
  132. data/spec/rails_app/config/application.rb +33 -0
  133. data/spec/rails_app/config/boot.rb +7 -0
  134. data/spec/rails_app/config/database.yml +22 -0
  135. data/spec/rails_app/config/environment.rb +5 -0
  136. data/spec/rails_app/config/environments/development.rb +37 -0
  137. data/spec/rails_app/config/environments/production.rb +67 -0
  138. data/spec/rails_app/config/environments/test.rb +37 -0
  139. data/spec/rails_app/config/initializers/authy.rb +3 -0
  140. data/spec/rails_app/config/initializers/backtrace_silencers.rb +7 -0
  141. data/spec/rails_app/config/initializers/devise.rb +237 -0
  142. data/spec/rails_app/config/initializers/inflections.rb +10 -0
  143. data/spec/rails_app/config/initializers/mime_types.rb +5 -0
  144. data/spec/rails_app/config/initializers/secret_token.rb +7 -0
  145. data/spec/rails_app/config/initializers/session_store.rb +8 -0
  146. data/spec/rails_app/config/initializers/wrap_parameters.rb +14 -0
  147. data/spec/rails_app/config/locales/devise.authy.en.yml +14 -0
  148. data/spec/rails_app/config/routes.rb +6 -0
  149. data/spec/rails_app/db/migrate/20121029205626_devise_create_users.rb +32 -0
  150. data/spec/rails_app/db/migrate/20121029205627_create_posts.rb +10 -0
  151. data/spec/rails_app/db/migrate/20121029205628_devise_authy_add_to_users.rb +15 -0
  152. data/spec/rails_app/db/schema.rb +43 -0
  153. data/spec/rails_app/public/favicon.ico +0 -0
  154. data/spec/rails_app/script/rails +6 -0
  155. data/spec/routing/routes_spec.rb +19 -0
  156. data/spec/spec_helper.rb +30 -0
  157. data/spec/support/helpers.rb +28 -0
  158. metadata +367 -0
@@ -0,0 +1,8 @@
1
+ <h2><%= I18n.t('authy_register_title', {:scope => 'devise'}) %></h2>
2
+
3
+ <%= enable_authy_form do %>
4
+ <%= text_field_tag :cellphone, '', :autocomplete => :off, :placeholder => I18n.t('devise.cellphone'), :id => "authy-cellphone"%>
5
+ <%= text_field_tag :country_code, '', :autocomplete => :off, :placeholder => I18n.t('devise.country'), :id => "authy-countries"%>
6
+ <p><%= submit_tag I18n.t('enable_authy', {:scope => 'devise'}) %></p>
7
+ <% end %>
8
+
@@ -0,0 +1,13 @@
1
+ <h2>
2
+ <%= I18n.t('authy_register_title', {:scope => 'devise'}) %>
3
+ </h2>
4
+
5
+ <%= verify_authy_form do %>
6
+ <legend><%= I18n.t('submit_token_title', {:scope => 'devise'}) %></legend>
7
+ <%= label_tag :token %>
8
+ <%= text_field_tag :token, "", :autocomplete => :off, :id => 'authy-token' %>
9
+ <%= link_to '?', '#', :id => 'authy-help' %>
10
+ <%= authy_request_sms_link %>
11
+ <%= submit_tag I18n.t('submit_token', {:scope => 'devise'}), :class => 'btn' %>
12
+ <% end %>
13
+
@@ -0,0 +1,10 @@
1
+ <h2><%= I18n.t('authy_verify_installation_title', {:scope => 'devise'}) %></h2>
2
+
3
+ <%= verify_authy_installation_form do %>
4
+ <legend><%= I18n.t('submit_token_title', {:scope => 'devise'}) %></legend>
5
+ <%= label_tag :token %>
6
+ <%= text_field_tag :token, "", :autocomplete => :off, :id => 'authy-token' %>
7
+ <%= authy_request_sms_link %>
8
+ <%= submit_tag I18n.t('enable_my_account', {:scope => 'devise'}), :class => 'btn' %>
9
+ <% end %>
10
+
@@ -0,0 +1,18 @@
1
+ <!DOCTYPE html>
2
+ <html>
3
+ <head>
4
+ <title>AuthyDeviseDemo</title>
5
+ <%= stylesheet_link_tag "application", :media => "all" %>
6
+ <%= javascript_include_tag "application" %>
7
+ <%= csrf_meta_tags %>
8
+ <%=javascript_include_tag "https://www.authy.com/form.authy.min.js" %>
9
+ <%=stylesheet_link_tag "https://www.authy.com/form.authy.min.css" %>
10
+ <%=javascript_include_tag "devise_authy.js" %>
11
+
12
+ </head>
13
+ <body>
14
+
15
+ <%= yield %>
16
+
17
+ </body>
18
+ </html>
@@ -0,0 +1,5 @@
1
+ <h1>Welcome#index</h1>
2
+ <p>Find me in app/views/welcome/index.html.erb</p>
3
+
4
+ <%= link_to "Enable authy", user_enable_authy_path %>
5
+ <%= link_to "Logout", destroy_user_session_path, :method => :delete %>
@@ -0,0 +1,4 @@
1
+ # This file is used by Rack-based servers to start the application.
2
+
3
+ require ::File.expand_path('../config/environment', __FILE__)
4
+ run AuthyDeviseDemo::Application
@@ -0,0 +1,62 @@
1
+ require File.expand_path('../boot', __FILE__)
2
+
3
+ require 'rails/all'
4
+
5
+ if defined?(Bundler)
6
+ # If you precompile assets before deploying to production, use this line
7
+ Bundler.require(*Rails.groups(:assets => %w(development test)))
8
+ # If you want your assets lazily compiled in production, use this line
9
+ # Bundler.require(:default, :assets, Rails.env)
10
+ end
11
+
12
+ module AuthyDeviseDemo
13
+ class Application < Rails::Application
14
+ # Settings in config/environments/* take precedence over those specified here.
15
+ # Application configuration should go into files in config/initializers
16
+ # -- all .rb files in that directory are automatically loaded.
17
+
18
+ # Custom directories with classes and modules you want to be autoloadable.
19
+ # config.autoload_paths += %W(#{config.root}/extras)
20
+
21
+ # Only load the plugins named here, in the order given (default is alphabetical).
22
+ # :all can be used as a placeholder for all plugins not explicitly named.
23
+ # config.plugins = [ :exception_notification, :ssl_requirement, :all ]
24
+
25
+ # Activate observers that should always be running.
26
+ # config.active_record.observers = :cacher, :garbage_collector, :forum_observer
27
+
28
+ # Set Time.zone default to the specified zone and make Active Record auto-convert to this zone.
29
+ # Run "rake -D time" for a list of tasks for finding time zone names. Default is UTC.
30
+ # config.time_zone = 'Central Time (US & Canada)'
31
+
32
+ # The default locale is :en and all translations from config/locales/*.rb,yml are auto loaded.
33
+ # config.i18n.load_path += Dir[Rails.root.join('my', 'locales', '*.{rb,yml}').to_s]
34
+ # config.i18n.default_locale = :de
35
+
36
+ # Configure the default encoding used in templates for Ruby 1.9.
37
+ config.encoding = "utf-8"
38
+
39
+ # Configure sensitive parameters which will be filtered from the log file.
40
+ config.filter_parameters += [:password]
41
+
42
+ # Enable escaping HTML in JSON.
43
+ config.active_support.escape_html_entities_in_json = true
44
+
45
+ # Use SQL instead of Active Record's schema dumper when creating the database.
46
+ # This is necessary if your schema can't be completely dumped by the schema dumper,
47
+ # like if you have constraints or database-specific column types
48
+ # config.active_record.schema_format = :sql
49
+
50
+ # Enforce whitelist mode for mass assignment.
51
+ # This will create an empty whitelist of attributes available for mass-assignment for all models
52
+ # in your app. As such, your models will need to explicitly whitelist or blacklist accessible
53
+ # parameters by using an attr_accessible or attr_protected declaration.
54
+ config.active_record.whitelist_attributes = true
55
+
56
+ # Enable the asset pipeline
57
+ config.assets.enabled = true
58
+
59
+ # Version of your assets, change this if you want to expire all your assets
60
+ config.assets.version = '1.0'
61
+ end
62
+ end
@@ -0,0 +1,6 @@
1
+ require 'rubygems'
2
+
3
+ # Set up gems listed in the Gemfile.
4
+ ENV['BUNDLE_GEMFILE'] ||= File.expand_path('../../Gemfile', __FILE__)
5
+
6
+ require 'bundler/setup' if File.exists?(ENV['BUNDLE_GEMFILE'])
@@ -0,0 +1,25 @@
1
+ # SQLite version 3.x
2
+ # gem install sqlite3
3
+ #
4
+ # Ensure the SQLite 3 gem is defined in your Gemfile
5
+ # gem 'sqlite3'
6
+ development:
7
+ adapter: sqlite3
8
+ database: db/development.sqlite3
9
+ pool: 5
10
+ timeout: 5000
11
+
12
+ # Warning: The database defined as "test" will be erased and
13
+ # re-generated from your development database when you run "rake".
14
+ # Do not set this db to the same as development or production.
15
+ test:
16
+ adapter: sqlite3
17
+ database: db/test.sqlite3
18
+ pool: 5
19
+ timeout: 5000
20
+
21
+ production:
22
+ adapter: sqlite3
23
+ database: db/production.sqlite3
24
+ pool: 5
25
+ timeout: 5000
@@ -0,0 +1,5 @@
1
+ # Load the rails application
2
+ require File.expand_path('../application', __FILE__)
3
+
4
+ # Initialize the rails application
5
+ AuthyDeviseDemo::Application.initialize!
@@ -0,0 +1,37 @@
1
+ AuthyDeviseDemo::Application.configure do
2
+ # Settings specified here will take precedence over those in config/application.rb
3
+
4
+ # In the development environment your application's code is reloaded on
5
+ # every request. This slows down response time but is perfect for development
6
+ # since you don't have to restart the web server when you make code changes.
7
+ config.cache_classes = false
8
+
9
+ # Log error messages when you accidentally call methods on nil.
10
+ config.whiny_nils = true
11
+
12
+ # Show full error reports and disable caching
13
+ config.consider_all_requests_local = true
14
+ config.action_controller.perform_caching = false
15
+
16
+ # Don't care if the mailer can't send
17
+ config.action_mailer.raise_delivery_errors = false
18
+
19
+ # Print deprecation notices to the Rails logger
20
+ config.active_support.deprecation = :log
21
+
22
+ # Only use best-standards-support built into browsers
23
+ config.action_dispatch.best_standards_support = :builtin
24
+
25
+ # Raise exception on mass assignment protection for Active Record models
26
+ config.active_record.mass_assignment_sanitizer = :strict
27
+
28
+ # Log the query plan for queries taking more than this (works
29
+ # with SQLite, MySQL, and PostgreSQL)
30
+ config.active_record.auto_explain_threshold_in_seconds = 0.5
31
+
32
+ # Do not compress assets
33
+ config.assets.compress = false
34
+
35
+ # Expands the lines which load the assets
36
+ config.assets.debug = true
37
+ end
@@ -0,0 +1,67 @@
1
+ AuthyDeviseDemo::Application.configure do
2
+ # Settings specified here will take precedence over those in config/application.rb
3
+
4
+ # Code is not reloaded between requests
5
+ config.cache_classes = true
6
+
7
+ # Full error reports are disabled and caching is turned on
8
+ config.consider_all_requests_local = false
9
+ config.action_controller.perform_caching = true
10
+
11
+ # Disable Rails's static asset server (Apache or nginx will already do this)
12
+ config.serve_static_assets = false
13
+
14
+ # Compress JavaScripts and CSS
15
+ config.assets.compress = true
16
+
17
+ # Don't fallback to assets pipeline if a precompiled asset is missed
18
+ config.assets.compile = false
19
+
20
+ # Generate digests for assets URLs
21
+ config.assets.digest = true
22
+
23
+ # Defaults to nil and saved in location specified by config.assets.prefix
24
+ # config.assets.manifest = YOUR_PATH
25
+
26
+ # Specifies the header that your server uses for sending files
27
+ # config.action_dispatch.x_sendfile_header = "X-Sendfile" # for apache
28
+ # config.action_dispatch.x_sendfile_header = 'X-Accel-Redirect' # for nginx
29
+
30
+ # Force all access to the app over SSL, use Strict-Transport-Security, and use secure cookies.
31
+ # config.force_ssl = true
32
+
33
+ # See everything in the log (default is :info)
34
+ # config.log_level = :debug
35
+
36
+ # Prepend all log lines with the following tags
37
+ # config.log_tags = [ :subdomain, :uuid ]
38
+
39
+ # Use a different logger for distributed setups
40
+ # config.logger = ActiveSupport::TaggedLogging.new(SyslogLogger.new)
41
+
42
+ # Use a different cache store in production
43
+ # config.cache_store = :mem_cache_store
44
+
45
+ # Enable serving of images, stylesheets, and JavaScripts from an asset server
46
+ # config.action_controller.asset_host = "http://assets.example.com"
47
+
48
+ # Precompile additional assets (application.js, application.css, and all non-JS/CSS are already added)
49
+ # config.assets.precompile += %w( search.js )
50
+
51
+ # Disable delivery errors, bad email addresses will be ignored
52
+ # config.action_mailer.raise_delivery_errors = false
53
+
54
+ # Enable threaded mode
55
+ # config.threadsafe!
56
+
57
+ # Enable locale fallbacks for I18n (makes lookups for any locale fall back to
58
+ # the I18n.default_locale when a translation can not be found)
59
+ config.i18n.fallbacks = true
60
+
61
+ # Send deprecation notices to registered listeners
62
+ config.active_support.deprecation = :notify
63
+
64
+ # Log the query plan for queries taking more than this (works
65
+ # with SQLite, MySQL, and PostgreSQL)
66
+ # config.active_record.auto_explain_threshold_in_seconds = 0.5
67
+ end
@@ -0,0 +1,37 @@
1
+ AuthyDeviseDemo::Application.configure do
2
+ # Settings specified here will take precedence over those in config/application.rb
3
+
4
+ # The test environment is used exclusively to run your application's
5
+ # test suite. You never need to work with it otherwise. Remember that
6
+ # your test database is "scratch space" for the test suite and is wiped
7
+ # and recreated between test runs. Don't rely on the data there!
8
+ config.cache_classes = true
9
+
10
+ # Configure static asset server for tests with Cache-Control for performance
11
+ config.serve_static_assets = true
12
+ config.static_cache_control = "public, max-age=3600"
13
+
14
+ # Log error messages when you accidentally call methods on nil
15
+ config.whiny_nils = true
16
+
17
+ # Show full error reports and disable caching
18
+ config.consider_all_requests_local = true
19
+ config.action_controller.perform_caching = false
20
+
21
+ # Raise exceptions instead of rendering exception templates
22
+ config.action_dispatch.show_exceptions = false
23
+
24
+ # Disable request forgery protection in test environment
25
+ config.action_controller.allow_forgery_protection = false
26
+
27
+ # Tell Action Mailer not to deliver emails to the real world.
28
+ # The :test delivery method accumulates sent emails in the
29
+ # ActionMailer::Base.deliveries array.
30
+ config.action_mailer.delivery_method = :test
31
+
32
+ # Raise exception on mass assignment protection for Active Record models
33
+ config.active_record.mass_assignment_sanitizer = :strict
34
+
35
+ # Print deprecation notices to the stderr
36
+ config.active_support.deprecation = :stderr
37
+ end
@@ -0,0 +1 @@
1
+ Authy.api_key = '3b7e8596118c25511fd7462622b6cd23'
@@ -0,0 +1,7 @@
1
+ # Be sure to restart your server when you modify this file.
2
+
3
+ # You can add backtrace silencers for libraries that you're using but don't wish to see in your backtraces.
4
+ # Rails.backtrace_cleaner.add_silencer { |line| line =~ /my_noisy_library/ }
5
+
6
+ # You can also remove all the silencers if you're trying to debug a problem that might stem from framework code.
7
+ # Rails.backtrace_cleaner.remove_silencers!
@@ -0,0 +1,232 @@
1
+ # Use this hook to configure devise mailer, warden hooks and so forth.
2
+ # Many of these configuration options can be set straight in your model.
3
+ Devise.setup do |config|
4
+ # ==> Mailer Configuration
5
+ # Configure the e-mail address which will be shown in Devise::Mailer,
6
+ # note that it will be overwritten if you use your own mailer class with default "from" parameter.
7
+ config.mailer_sender = "please-change-me-at-config-initializers-devise@example.com"
8
+
9
+ # Configure the class responsible to send e-mails.
10
+ # config.mailer = "Devise::Mailer"
11
+
12
+ # ==> ORM configuration
13
+ # Load and configure the ORM. Supports :active_record (default) and
14
+ # :mongoid (bson_ext recommended) by default. Other ORMs may be
15
+ # available as additional gems.
16
+ require 'devise/orm/active_record'
17
+
18
+ # ==> Configuration for any authentication mechanism
19
+ # Configure which keys are used when authenticating a user. The default is
20
+ # just :email. You can configure it to use [:username, :subdomain], so for
21
+ # authenticating a user, both parameters are required. Remember that those
22
+ # parameters are used only when authenticating and not when retrieving from
23
+ # session. If you need permissions, you should implement that in a before filter.
24
+ # You can also supply a hash where the value is a boolean determining whether
25
+ # or not authentication should be aborted when the value is not present.
26
+ # config.authentication_keys = [ :email ]
27
+
28
+ # Configure parameters from the request object used for authentication. Each entry
29
+ # given should be a request method and it will automatically be passed to the
30
+ # find_for_authentication method and considered in your model lookup. For instance,
31
+ # if you set :request_keys to [:subdomain], :subdomain will be used on authentication.
32
+ # The same considerations mentioned for authentication_keys also apply to request_keys.
33
+ # config.request_keys = []
34
+
35
+ # Configure which authentication keys should be case-insensitive.
36
+ # These keys will be downcased upon creating or modifying a user and when used
37
+ # to authenticate or find a user. Default is :email.
38
+ config.case_insensitive_keys = [ :email ]
39
+
40
+ # Configure which authentication keys should have whitespace stripped.
41
+ # These keys will have whitespace before and after removed upon creating or
42
+ # modifying a user and when used to authenticate or find a user. Default is :email.
43
+ config.strip_whitespace_keys = [ :email ]
44
+
45
+ # Tell if authentication through request.params is enabled. True by default.
46
+ # It can be set to an array that will enable params authentication only for the
47
+ # given strategies, for example, `config.params_authenticatable = [:database]` will
48
+ # enable it only for database (email + password) authentication.
49
+ # config.params_authenticatable = true
50
+
51
+ # Tell if authentication through HTTP Basic Auth is enabled. False by default.
52
+ # It can be set to an array that will enable http authentication only for the
53
+ # given strategies, for example, `config.http_authenticatable = [:token]` will
54
+ # enable it only for token authentication.
55
+ # config.http_authenticatable = false
56
+
57
+ # If http headers should be returned for AJAX requests. True by default.
58
+ # config.http_authenticatable_on_xhr = true
59
+
60
+ # The realm used in Http Basic Authentication. "Application" by default.
61
+ # config.http_authentication_realm = "Application"
62
+
63
+ # It will change confirmation, password recovery and other workflows
64
+ # to behave the same regardless if the e-mail provided was right or wrong.
65
+ # Does not affect registerable.
66
+ # config.paranoid = true
67
+
68
+ # By default Devise will store the user in session. You can skip storage for
69
+ # :http_auth and :token_auth by adding those symbols to the array below.
70
+ # Notice that if you are skipping storage for all authentication paths, you
71
+ # may want to disable generating routes to Devise's sessions controller by
72
+ # passing :skip => :sessions to `devise_for` in your config/routes.rb
73
+ config.skip_session_storage = [:http_auth]
74
+
75
+ # ==> Configuration for :database_authenticatable
76
+ # For bcrypt, this is the cost for hashing the password and defaults to 10. If
77
+ # using other encryptors, it sets how many times you want the password re-encrypted.
78
+ #
79
+ # Limiting the stretches to just one in testing will increase the performance of
80
+ # your test suite dramatically. However, it is STRONGLY RECOMMENDED to not use
81
+ # a value less than 10 in other environments.
82
+ config.stretches = Rails.env.test? ? 1 : 10
83
+
84
+ # Setup a pepper to generate the encrypted password.
85
+ # config.pepper = "e0a1729ce89577b6ca7510ca4625d2d5c2cf2d9cfb214629b55d660ff42f44272e75858eed89e3bdf558db8a949c6dd6f512b7f7a0ef787547ed76aeaf59f1fd"
86
+
87
+ # ==> Configuration for :confirmable
88
+ # A period that the user is allowed to access the website even without
89
+ # confirming his account. For instance, if set to 2.days, the user will be
90
+ # able to access the website for two days without confirming his account,
91
+ # access will be blocked just in the third day. Default is 0.days, meaning
92
+ # the user cannot access the website without confirming his account.
93
+ # config.allow_unconfirmed_access_for = 2.days
94
+
95
+ # If true, requires any email changes to be confirmed (exactly the same way as
96
+ # initial account confirmation) to be applied. Requires additional unconfirmed_email
97
+ # db field (see migrations). Until confirmed new email is stored in
98
+ # unconfirmed email column, and copied to email column on successful confirmation.
99
+ config.reconfirmable = true
100
+
101
+ # Defines which key will be used when confirming an account
102
+ # config.confirmation_keys = [ :email ]
103
+
104
+ # ==> Configuration for :rememberable
105
+ # The time the user will be remembered without asking for credentials again.
106
+ # config.remember_for = 2.weeks
107
+
108
+ # If true, extends the user's remember period when remembered via cookie.
109
+ # config.extend_remember_period = false
110
+
111
+ # Options to be passed to the created cookie. For instance, you can set
112
+ # :secure => true in order to force SSL only cookies.
113
+ # config.rememberable_options = {}
114
+
115
+ # ==> Configuration for :validatable
116
+ # Range for password length. Default is 6..128.
117
+ # config.password_length = 6..128
118
+
119
+ # Email regex used to validate email formats. It simply asserts that
120
+ # an one (and only one) @ exists in the given string. This is mainly
121
+ # to give user feedback and not to assert the e-mail validity.
122
+ # config.email_regexp = /\A[^@]+@[^@]+\z/
123
+
124
+ # ==> Configuration for :timeoutable
125
+ # The time you want to timeout the user session without activity. After this
126
+ # time the user will be asked for credentials again. Default is 30 minutes.
127
+ # config.timeout_in = 30.minutes
128
+
129
+ # If true, expires auth token on session timeout.
130
+ # config.expire_auth_token_on_timeout = false
131
+
132
+ # ==> Configuration for :lockable
133
+ # Defines which strategy will be used to lock an account.
134
+ # :failed_attempts = Locks an account after a number of failed attempts to sign in.
135
+ # :none = No lock strategy. You should handle locking by yourself.
136
+ # config.lock_strategy = :failed_attempts
137
+
138
+ # Defines which key will be used when locking and unlocking an account
139
+ # config.unlock_keys = [ :email ]
140
+
141
+ # Defines which strategy will be used to unlock an account.
142
+ # :email = Sends an unlock link to the user email
143
+ # :time = Re-enables login after a certain amount of time (see :unlock_in below)
144
+ # :both = Enables both strategies
145
+ # :none = No unlock strategy. You should handle unlocking by yourself.
146
+ # config.unlock_strategy = :both
147
+
148
+ # Number of authentication tries before locking an account if lock_strategy
149
+ # is failed attempts.
150
+ # config.maximum_attempts = 20
151
+
152
+ # Time interval to unlock the account if :time is enabled as unlock_strategy.
153
+ # config.unlock_in = 1.hour
154
+
155
+ # ==> Configuration for :recoverable
156
+ #
157
+ # Defines which key will be used when recovering the password for an account
158
+ # config.reset_password_keys = [ :email ]
159
+
160
+ # Time interval you can reset your password with a reset password key.
161
+ # Don't put a too small interval or your users won't have the time to
162
+ # change their passwords.
163
+ config.reset_password_within = 6.hours
164
+
165
+ # ==> Configuration for :encryptable
166
+ # Allow you to use another encryption algorithm besides bcrypt (default). You can use
167
+ # :sha1, :sha512 or encryptors from others authentication tools as :clearance_sha1,
168
+ # :authlogic_sha512 (then you should set stretches above to 20 for default behavior)
169
+ # and :restful_authentication_sha1 (then you should set stretches to 10, and copy
170
+ # REST_AUTH_SITE_KEY to pepper)
171
+ # config.encryptor = :sha512
172
+
173
+ # ==> Configuration for :token_authenticatable
174
+ # Defines name of the authentication token params key
175
+ # config.token_authentication_key = :auth_token
176
+
177
+ # ==> Scopes configuration
178
+ # Turn scoped views on. Before rendering "sessions/new", it will first check for
179
+ # "users/sessions/new". It's turned off by default because it's slower if you
180
+ # are using only default views.
181
+ # config.scoped_views = false
182
+
183
+ # Configure the default scope given to Warden. By default it's the first
184
+ # devise role declared in your routes (usually :user).
185
+ # config.default_scope = :user
186
+
187
+ # Set this configuration to false if you want /users/sign_out to sign out
188
+ # only the current scope. By default, Devise signs out all scopes.
189
+ # config.sign_out_all_scopes = true
190
+
191
+ # ==> Navigation configuration
192
+ # Lists the formats that should be treated as navigational. Formats like
193
+ # :html, should redirect to the sign in page when the user does not have
194
+ # access, but formats like :xml or :json, should return 401.
195
+ #
196
+ # If you have any extra navigational formats, like :iphone or :mobile, you
197
+ # should add them to the navigational formats lists.
198
+ #
199
+ # The "*/*" below is required to match Internet Explorer requests.
200
+ # config.navigational_formats = ["*/*", :html]
201
+
202
+ # The default HTTP method used to sign out a resource. Default is :delete.
203
+ config.sign_out_via = :delete
204
+
205
+ # ==> OmniAuth
206
+ # Add a new OmniAuth provider. Check the wiki for more information on setting
207
+ # up on your models and hooks.
208
+ # config.omniauth :github, 'APP_ID', 'APP_SECRET', :scope => 'user,public_repo'
209
+
210
+ # ==> Warden configuration
211
+ # If you want to use other strategies, that are not supported by Devise, or
212
+ # change the failure app, you can configure them inside the config.warden block.
213
+ #
214
+ # config.warden do |manager|
215
+ # manager.intercept_401 = false
216
+ # manager.default_strategies(:scope => :user).unshift :some_external_strategy
217
+ # end
218
+
219
+ # ==> Mountable engine configurations
220
+ # When using Devise inside an engine, let's call it `MyEngine`, and this engine
221
+ # is mountable, there are some extra configurations to be taken into account.
222
+ # The following options are available, assuming the engine is mounted as:
223
+ #
224
+ # mount MyEngine, at: "/my_engine"
225
+ #
226
+ # The router that invoked `devise_for`, in the example above, would be:
227
+ # config.router_name = :my_engine
228
+ #
229
+ # When using omniauth, Devise cannot automatically set Omniauth path,
230
+ # so you need to do it manually. For the users scope, it would be:
231
+ # config.omniauth_path_prefix = "/my_engine/users/auth"
232
+ end