devise-security 0.14.2 → 0.17.0

data/test/dummy/config/environments/test.rb

@@ -4,13 +4,8 @@ RailsApp::Application.configure do
   config.cache_classes = true
   config.eager_load = false
 
-  if Rails.version > '5'
-    config.public_file_server.enabled = true
-    config.public_file_server.headers = { 'Cache-Control' => 'public, max-age=3600' }
-  else
-    config.serve_static_files = true
-    config.static_cache_control = 'public, max-age=3600'
-  end
+  config.public_file_server.enabled = true
+  config.public_file_server.headers = { 'Cache-Control' => 'public, max-age=3600' }
 
   config.consider_all_requests_local       = true
   config.action_controller.perform_caching = false
@@ -27,11 +22,6 @@ RailsApp::Application.configure do
 
   config.active_support.test_order = :sorted
   config.log_level = :debug
-  if Rails.gem_version >= Gem::Version.new('4.2') && Rails.gem_version.release < Gem::Version.new('5.0')
-    config.active_record.raise_in_transactional_callbacks = true
-  end
-  if Rails.gem_version.release >= Gem::Version.new('5.2') && Rails.gem_version.release < Gem::Version.new('6.0')
-    config.active_record.sqlite3.represent_boolean_as_integer = true
-  end
+  config.active_record.sqlite3.represent_boolean_as_integer = true if Rails.gem_version.release >= Gem::Version.new('5.2') && Rails.gem_version.release < Gem::Version.new('6.0')
 end
 ActiveSupport::Deprecation.debug = true

data/test/dummy/config/initializers/migration_class.rb

@@ -1,10 +1,3 @@
 # frozen_string_literal: true
 
-if DEVISE_ORM == :active_record
-  MIGRATION_CLASS =
-    if Rails.gem_version >= Gem::Version.new('5.0')
-      ActiveRecord::Migration[Rails.version.to_f]
-    else
-      ActiveRecord::Migration
-    end
-end
+MIGRATION_CLASS = ActiveRecord::Migration[Rails.version.to_f] if DEVISE_ORM == :active_record

data/test/dummy/config/locales/en.yml

@@ -0,0 +1,10 @@
+en:
+  errors:
+    messages:
+      password_complexity:
+        letter:
+          one: must contain at least one letter
+          other: must contain at least %{count} letters
+        alnum:
+          one: must contain at least one letter or number
+          other: must contain at least %{count} letters or numbers

data/test/dummy/config/mongoid.yml

@@ -1,5 +1,5 @@
 test:
-  <%= Mongoid::VERSION.to_i > 4 ? 'clients' : 'sessions' %>:
+  clients:
     default:
       database: devise_security_test
       hosts:

data/test/dummy/config/routes.rb

@@ -3,11 +3,13 @@
 RailsApp::Application.routes.draw do
   devise_for :users
 
-  devise_for :captcha_users, only: [:sessions], controllers: { sessions: "captcha/sessions" }
-  devise_for :security_question_users, only: [:sessions, :unlocks], controllers: { unlocks: "security_question/unlocks" }
+  devise_for :captcha_users, only: [:sessions], controllers: { sessions: 'captcha/sessions' }
+  devise_for :password_expired_users, only: [:password_expired], controllers: { password_expired: 'overrides/password_expired' }
+  devise_for :paranoid_verification_users, only: [:verification_code], controllers: { paranoid_verification_code: 'overrides/paranoid_verification_code' }
+  devise_for :security_question_users, only: [:sessions, :unlocks], controllers: { unlocks: 'security_question/unlocks' }
 
   resources :foos
   resource :widgets
 
-  root to: 'foos#index'
+  root to: 'widgets#show'
 end

data/test/dummy/db/migrate/20120508165529_create_tables.rb

@@ -33,10 +33,10 @@ class CreateTables < MIGRATION_CLASS
     end
 
     create_table :old_passwords do |t|
-      t.string :encrypted_password, :null => false
+      t.string :encrypted_password, null: false
       t.string :password_salt
-      t.string :password_archivable_type, :null => false
-      t.integer :password_archivable_id, :null => false
+      t.string :password_archivable_type, null: false
+      t.integer :password_archivable_id, null: false
       t.datetime :created_at
     end
     add_index :old_passwords, [:password_archivable_type, :password_archivable_id], name: 'index_password_archivable'

data/test/dummy/lib/shared_expirable_columns.rb

@@ -1,4 +1,5 @@
 # frozen_string_literal: true
+
 require 'shared_user'
 
 module SharedVerificationColumns

data/test/dummy/lib/shared_security_questions_fields.rb

@@ -1,4 +1,5 @@
 # frozen_string_literal: true
+
 require 'shared_user'
 
 module SharedSecurityQuestionsFields

data/test/dummy/lib/shared_user.rb

@@ -4,10 +4,21 @@ module SharedUser
   extend ActiveSupport::Concern
 
   included do
-    devise :database_authenticatable, :confirmable, :lockable, :recoverable,
-           :registerable, :rememberable, :timeoutable,
-           :trackable, :secure_validatable, :omniauthable, :validatable, password_length: 7..72,
-           reconfirmable: false
+    devise(
+      :database_authenticatable,
+      :confirmable,
+      :lockable,
+      :recoverable,
+      :registerable,
+      :rememberable,
+      :timeoutable,
+      :trackable,
+      :secure_validatable,
+      :omniauthable,
+      :validatable,
+      password_length: 7..72,
+      reconfirmable: false
+    )
 
     attr_accessor :other_key
 
@@ -22,8 +33,8 @@ module SharedUser
   module ExtendMethods
     def new_with_session(params, session)
       super.tap do |user|
-        if data = session["devise.facebook_data"]
-          user.email = data["email"]
+        if (data = session['devise.facebook_data'])
+          user.email = data['email']
           user.confirmed_at = Time.zone.now
         end
       end

data/test/dummy/lib/shared_user_without_email.rb

@@ -21,8 +21,9 @@ module SharedUserWithoutEmail
     raise NoMethodError
   end
 
-  def respond_to?(method_name, include_all=false)
+  def respond_to?(method_name, include_all = false)
     return false if method_name.to_sym == :email_changed?
+
     super(method_name, include_all)
   end
 end

data/test/dummy/lib/shared_user_without_omniauth.rb

@@ -4,9 +4,18 @@ module SharedUserWithoutOmniauth
   extend ActiveSupport::Concern
 
   included do
-    devise :database_authenticatable, :confirmable, :lockable, :recoverable,
-      :registerable, :rememberable, :timeoutable,
-      :trackable, :validatable, reconfirmable: false
+    devise(
+      :database_authenticatable,
+      :confirmable,
+      :lockable,
+      :recoverable,
+      :registerable,
+      :rememberable,
+      :timeoutable,
+      :trackable,
+      :validatable,
+      reconfirmable: false
+    )
   end
 
   def raw_confirmation_token

data/test/dummy/lib/shared_verification_fields.rb

@@ -1,4 +1,5 @@
 # frozen_string_literal: true
+
 require 'shared_user'
 
 module SharedVerificationFields