RubyGems - devise - Versions diffs - 3.3.0 → 3.5.10 - Mend

devise 3.3.0 → 3.5.10

Potentially problematic release.

This version of devise might be problematic. Click here for more details.

Files changed (138) hide show

checksums.yaml +4 -4
data/.travis.yml +29 -20
data/CHANGELOG.md +219 -102
data/CODE_OF_CONDUCT.md +22 -0
data/CONTRIBUTING.md +2 -0
data/Gemfile +3 -2
data/Gemfile.lock +101 -80
data/MIT-LICENSE +1 -1
data/README.md +87 -43
data/Rakefile +2 -1
data/app/controllers/devise/confirmations_controller.rb +5 -1
data/app/controllers/devise/omniauth_callbacks_controller.rb +4 -0
data/app/controllers/devise/passwords_controller.rb +14 -4
data/app/controllers/devise/registrations_controller.rb +10 -11
data/app/controllers/devise/sessions_controller.rb +7 -2
data/app/controllers/devise/unlocks_controller.rb +3 -0
data/app/controllers/devise_controller.rb +44 -21
data/app/mailers/devise/mailer.rb +4 -0
data/app/views/devise/confirmations/new.html.erb +7 -3
data/app/views/devise/mailer/password_change.html.erb +3 -0
data/app/views/devise/passwords/edit.html.erb +14 -5
data/app/views/devise/passwords/new.html.erb +7 -3
data/app/views/devise/registrations/edit.html.erb +19 -9
data/app/views/devise/registrations/new.html.erb +18 -7
data/app/views/devise/sessions/new.html.erb +15 -6
data/app/views/devise/shared/{_links.erb → _links.html.erb} +1 -1
data/app/views/devise/unlocks/new.html.erb +7 -3
data/config/locales/en.yml +4 -2
data/devise.gemspec +2 -2
data/gemfiles/Gemfile.rails-3.2-stable.lock +54 -48
data/gemfiles/Gemfile.rails-4.0-stable +1 -0
data/gemfiles/Gemfile.rails-4.0-stable.lock +63 -59
data/gemfiles/{Gemfile.rails-head → Gemfile.rails-4.1-stable} +3 -5
data/gemfiles/Gemfile.rails-4.1-stable.lock +171 -0
data/gemfiles/Gemfile.rails-4.2-stable +30 -0
data/gemfiles/Gemfile.rails-4.2-stable.lock +193 -0
data/lib/devise/controllers/helpers.rb +12 -6
data/lib/devise/controllers/rememberable.rb +9 -2
data/lib/devise/controllers/sign_in_out.rb +2 -8
data/lib/devise/controllers/store_location.rb +3 -1
data/lib/devise/controllers/url_helpers.rb +7 -9
data/lib/devise/encryptor.rb +22 -0
data/lib/devise/failure_app.rb +56 -14
data/lib/devise/hooks/timeoutable.rb +5 -7
data/lib/devise/mapping.rb +2 -1
data/lib/devise/models/authenticatable.rb +28 -28
data/lib/devise/models/confirmable.rb +51 -17
data/lib/devise/models/database_authenticatable.rb +17 -11
data/lib/devise/models/lockable.rb +7 -3
data/lib/devise/models/recoverable.rb +23 -15
data/lib/devise/models/rememberable.rb +56 -22
data/lib/devise/models/timeoutable.rb +0 -6
data/lib/devise/models/trackable.rb +1 -2
data/lib/devise/models/validatable.rb +3 -3
data/lib/devise/models.rb +1 -1
data/lib/devise/rails/routes.rb +33 -27
data/lib/devise/rails.rb +1 -1
data/lib/devise/strategies/authenticatable.rb +8 -6
data/lib/devise/strategies/database_authenticatable.rb +2 -1
data/lib/devise/strategies/rememberable.rb +13 -3
data/lib/devise/test_helpers.rb +2 -2
data/lib/devise/version.rb +1 -1
data/lib/devise.rb +39 -37
data/lib/generators/active_record/devise_generator.rb +2 -1
data/lib/generators/active_record/templates/migration.rb +1 -1
data/lib/generators/active_record/templates/migration_existing.rb +1 -1
data/lib/generators/devise/controllers_generator.rb +44 -0
data/lib/generators/devise/views_generator.rb +14 -3
data/lib/generators/templates/controllers/README +14 -0
data/lib/generators/templates/controllers/confirmations_controller.rb +28 -0
data/lib/generators/templates/controllers/omniauth_callbacks_controller.rb +28 -0
data/lib/generators/templates/controllers/passwords_controller.rb +32 -0
data/lib/generators/templates/controllers/registrations_controller.rb +60 -0
data/lib/generators/templates/controllers/sessions_controller.rb +25 -0
data/lib/generators/templates/controllers/unlocks_controller.rb +28 -0
data/lib/generators/templates/devise.rb +19 -13
data/lib/generators/templates/markerb/confirmation_instructions.markerb +1 -1
data/lib/generators/templates/markerb/password_change.markerb +3 -0
data/lib/generators/templates/markerb/reset_password_instructions.markerb +1 -1
data/lib/generators/templates/markerb/unlock_instructions.markerb +1 -1
data/lib/generators/templates/simple_form_for/passwords/edit.html.erb +1 -1
data/lib/generators/templates/simple_form_for/registrations/new.html.erb +1 -1
data/lib/generators/templates/simple_form_for/sessions/new.html.erb +2 -2
data/test/controllers/custom_registrations_controller_test.rb +6 -1
data/test/controllers/helper_methods_test.rb +21 -0
data/test/controllers/helpers_test.rb +5 -0
data/test/controllers/inherited_controller_i18n_messages_test.rb +51 -0
data/test/controllers/internal_helpers_test.rb +10 -4
data/test/controllers/load_hooks_controller_test.rb +19 -0
data/test/controllers/passwords_controller_test.rb +1 -1
data/test/controllers/sessions_controller_test.rb +3 -3
data/test/controllers/url_helpers_test.rb +6 -0
data/test/devise_test.rb +3 -3
data/test/failure_app_test.rb +47 -0
data/test/generators/controllers_generator_test.rb +48 -0
data/test/generators/views_generator_test.rb +8 -1
data/test/helpers/devise_helper_test.rb +9 -12
data/test/integration/authenticatable_test.rb +1 -1
data/test/integration/database_authenticatable_test.rb +11 -0
data/test/integration/http_authenticatable_test.rb +1 -1
data/test/integration/omniauthable_test.rb +12 -10
data/test/integration/recoverable_test.rb +13 -0
data/test/integration/rememberable_test.rb +50 -3
data/test/integration/timeoutable_test.rb +13 -18
data/test/mailers/confirmation_instructions_test.rb +1 -1
data/test/mapping_test.rb +7 -0
data/test/models/authenticatable_test.rb +10 -0
data/test/models/confirmable_test.rb +99 -42
data/test/models/database_authenticatable_test.rb +20 -0
data/test/models/lockable_test.rb +45 -17
data/test/models/recoverable_test.rb +62 -7
data/test/models/rememberable_test.rb +68 -97
data/test/models/validatable_test.rb +5 -5
data/test/models_test.rb +15 -6
data/test/rails_app/app/active_record/user_without_email.rb +8 -0
data/test/rails_app/app/controllers/admins_controller.rb +0 -5
data/test/rails_app/app/controllers/custom/registrations_controller.rb +10 -0
data/test/rails_app/app/mailers/users/from_proc_mailer.rb +3 -0
data/test/rails_app/app/mailers/users/mailer.rb +0 -9
data/test/rails_app/app/mailers/users/reply_to_mailer.rb +4 -0
data/test/rails_app/app/mongoid/user_without_email.rb +33 -0
data/test/rails_app/config/application.rb +1 -1
data/test/rails_app/config/environments/production.rb +6 -2
data/test/rails_app/config/environments/test.rb +7 -2
data/test/rails_app/config/initializers/devise.rb +12 -15
data/test/rails_app/config/routes.rb +6 -3
data/test/rails_app/db/migrate/20100401102949_create_tables.rb +2 -2
data/test/rails_app/lib/shared_user.rb +1 -1
data/test/rails_app/lib/shared_user_without_email.rb +26 -0
data/test/rails_test.rb +9 -0
data/test/support/helpers.rb +13 -6
data/test/support/integration.rb +2 -2
data/test/test_helper.rb +5 -0
data/test/test_helpers_test.rb +22 -7
data/test/test_models.rb +2 -2
data/test/time_helpers.rb +137 -0
metadata +58 -8
data/gemfiles/Gemfile.rails-head.lock +0 -190

data/CHANGELOG.md CHANGED Viewed

@@ -1,9 +1,126 @@
-### Unreleased
+### 3.5.10 - 2016-05-15
+* bug fixes
+  * Fix overwriting the remember_token when a valid one already exists (by @ralinchimev).
+### 3.5.9 - 2016-05-02
+* bug fixes
+  * Fix strategy checking in `Lockable#unlock_strategy_enabled?` for `:none`
+  and `:undefined` strategies. (by @f3ndot)
+### 3.5.8 - 2016-04-25
+* bug fixes
+  * Fix the e-mail confirmation instructions send when a user updates the email address from nil
+### 3.5.7 - 2016-04-18
+* bug fixes
+  * Fix the `extend_remember_period` configuration. When set to `false` it does
+    not update the cookie expiration anymore.(by @ulissesalmeida)
+### 3.5.6 - 2016-01-02
+* bug fixes
+  * Fix type coercion of the rememberable timestamp stored on cookies.
+### 3.5.5 - 2016-22-01
+* bug fixes
+  * Bring back remember_expired? implementation
+  * Ensure timeouts are not triggered if remember me is being used
+### 3.5.4 - 2016-18-01
+* bug fixes
+  * Store creation timestamps on remember cookies
+### 3.5.3 - 2015-12-10
+* bug fixes
+  * Fix password reset for records where `confirmation_required?` is disabled and
+    `confirmation_sent_at` is nil. (by @andygeers)
+  * Allow resources with no `email` field to be recoverable (and do not clear the
+    reset password token if the model was already persisted). (by @seddy, @stanhu)
+* enhancements
+  * Upon setting `Devise.send_password_change_notification = true` a user will receive notification when their password has been changed.
+### 3.5.2 - 2015-08-10
 * enhancements
+  * Perform case insensitive basic authorization matching
 * bug fixes
+  * Do not use digests for password confirmation token
+  * Fix infinite redirect in Rails 4.2 authenticated routes
+  * Autoload Devise::Encryptor to avoid errors on thread-safe mode
-### 3.3.0
+* deprecations
+  * `config.expire_auth_token_on_timeout` was removed
+### 3.5.1 - 2015-05-24
+Note: 3.5.0 has been yanked due to a regression
+* security improvements
+  * Clean up reset password token whenever e-mail or password changes. thanks to George Deglin & Dennis Charles Hackethal for reporting this bug
+  * Ensure empty `authenticable_salt` cannot be used as remember token. This bug can only affect users who manually implement their own `authenticable_salt` and allow empty values as salt
+* enhancements
+  * The hint about minimum password length required both `@validatable` and `@minimum_password_length` variables on the views, it now uses only the latter. If you have generated the views relying on the `@validatable` variable, replace it with `@minimum_password_length`.
+  * Added an ActiveSupport load hook for `:devise_controller`. (by @nakhli)
+  * Location fragments are now preserved between requests. (by @jbourassa)
+  * Added an `after_remembered` callback for the Rememerable module. (by @BM5k)
+  * `RegistrationsController#new` and `SessionsController#new` now yields the
+    current resource. (by @mtarnovan, @deivid-rodriguez)
+  * Password length validation is now limited to 72 characters for newer apps. (by @lleger)
+  * Controllers inheriting from any Devise core controller will now use appropriate translations. The i18n scope can be overridden in `translation_scope`.
+  * Allow the user to set the length of friendly token. (by @Angelmmiguel)
+* bug fixes
+  * Use router_name from scope if one is available to support isolated engines. (by @cipater)
+  * Do not clean up CSRF on rememberable.
+  * Only use flash if it has been configured in failure app. (by @alex88)
+* deprecations
+  * `confirm!` has been deprecated in favor of `confirm`.
+  * `reset_password!` has been deprecated in favor of `reset_password`.
+  * `Devise.bcrypt` has been deprecated in favor of `Devise::Encryptor.digest`".
+### 3.4.1 - 2014-10-29
+* enhancements
+  * Devise default views now have a similar markup to Rails scaffold views. (by @udaysinghcode, @cllns)
+  * Passing `now: true` to the `set_flash_message` helper now sets the message into
+    the `flash.now` Hash. (by @hbriggs)
+* bugfixes
+  * Fixed an regression with translation of flash messages for when the `authentication_keys`
+  config is a Hash. (by @lucasmazza)
+### 3.4.0 - 2014-10-03
+* enhancements
+  * Support added for Rails 4.2. Devise now depends on the `responders` gem due
+    the extraction of the `respond_with` API from Rails. (by @lucasmazza)
+  * The Simple Form templates follow the same change from 3.3.0 by using `Log in` and adding
+    a hint about the minimum password length when `validatable` is enabled. (by @aried3r)
+  * Controller generator added as `devise:controllers SCOPE`. You can use the `-c` flag
+    to pick which controllers (`unlocks`, `confirmations`, etc) you want to generate. (by @Chun-Yang)
+  * Removed the hardcoded references for "email" in the flash messages. If you are using
+    different attributes as the `authentication_keys` they will be interpolated in the
+    messages instead. (by @timoschilling)
+* bug fix
+  * Fixed a regression where the devise generator would fail with a `ConnectionNotEstablished`
+    exception when executed inside a mountable engine. (by @lucasmazza)
+  * Ensure to return symbols in find_scope! fixing a previous regression from 3.3.0 (by @micat)
+  * Ensure all causes of failed login have the same error message (by @pjungwir)
+  * The `last_attempt_warning` now takes effect when generating the unauthenticated
+    message for your users. To keep the current behavior, this flag is now `true`
+    by default. (by @lucasmazza)
+### 3.3.0 - 2014-08-13
 * enhancements
   * Support multiple warden configuration blocks on devise configuration. (by @rossta)
@@ -27,13 +144,13 @@
   * Ensure registration controller block yields happen on failure in addition to success (by @dpehrson)
   * Only valid paths will be stored for redirections (by @parallel588)
-### 3.2.4
+### 3.2.4 - 2014-03-17
 * enhancements
   * `bcrypt` dependency updated due https://github.com/codahale/bcrypt-ruby/pull/86.
   * View generator now can generate specific views with the `-v` flag, like `rails g devise:views -v sessions` (by @kayline)
-### 3.2.3
+### 3.2.3 - 2014-02-20
 * enhancements
   * Devise will use the `secret_key_base` on Rails 4+ applications as its `secret_key`.
@@ -42,14 +159,14 @@
 * bug fix
   * Migrations will be properly generated when using rails 4.1.0.
-### 3.2.2
+### 3.2.2 - 2013-11-25
 * bug fix
   * Ensure timeoutable works when `sign_out_all_scopes` is false (by @louman)
   * Keep the query string when storing location (by @csexton)
   * Require rails generator base class in devise generators
-### 3.2.1
+### 3.2.1 - 2013-11-13
 Security announcement: http://blog.plataformatec.com.br/2013/11/e-mail-enumeration-in-devise-in-paranoid-mode
@@ -61,7 +178,7 @@ Security announcement: http://blog.plataformatec.com.br/2013/11/e-mail-enumerati
   * Bring `password_digest` back to fix compatibility with `devise-encryptable`
   * Avoid e-mail enumeration on sign in when in paranoid mode
-### 3.2.0
+### 3.2.0 - 2013-11-06
 * enhancements
   * Previously deprecated token authenticatable and insecure lookups have been removed
@@ -80,13 +197,13 @@ Security announcement: http://blog.plataformatec.com.br/2013/11/e-mail-enumerati
 * deprecations
   * `expire_session_data_after_sign_in!` has been deprecated in favor of `expire_data_after_sign_in!`
-### 3.1.1
+### 3.1.1 - 2013-10-01
 * bug fix
   * Improve default message which asked users to sign in even when they were already signed (by @gregates)
   * Improve error message for when the config.secret_key is missing
-### 3.1.0
+### 3.1.0 - 2013-09-05
 Security announcement: http://blog.plataformatec.com.br/2013/08/devise-3-1-now-with-more-secure-defaults/
@@ -109,12 +226,12 @@ Security announcement: http://blog.plataformatec.com.br/2013/08/devise-3-1-now-w
   * Do not compare directly against confirmation, unlock and reset password tokens
   * Skip storage for cookies on unverified requests
-### 3.0.2
+### 3.0.2 - 2013-08-09
 * bug fix
   * Skip storage for cookies on unverified requests
-### 3.0.1
+### 3.0.1 - 2013-08-02
 Security announcement: http://blog.plataformatec.com.br/2013/08/csrf-token-fixation-attacks-in-devise/
@@ -125,7 +242,7 @@ Security announcement: http://blog.plataformatec.com.br/2013/08/csrf-token-fixat
   * When using rails 3.2, the generator adds 'attr_accessible' to the model (by @jcoyne)
   * Clean up CSRF token after authentication (by @homakov). Notice this change will clean up the CSRF Token after authentication (sign in, sign up, etc). So if you are using AJAX for such features, you will need to fetch a new CSRF token from the server.
-### 3.0.0
+### 3.0.0 - 2013-07-14
 * enhancements
   * Rails 4 and Strong Parameters compatibility (by @carlosantoniodasilva, @josevalim, @latortuga, @lucasmazza, @nashby, @rafaelfranca, @spastorino)
@@ -135,7 +252,7 @@ Security announcement: http://blog.plataformatec.com.br/2013/08/csrf-token-fixat
 * bug fix
   * Errors on unlock are now properly reflected on the first `unlock_keys`
-### 2.2.4
+### 2.2.4 - 2013-05-07
 * enhancements
   * Add `destroy_with_password` to `DatabaseAuthenticatable`. Allows destroying a record when `:current_password` matches, similarly to how `update_with_password` works. (by @michiel3)
@@ -154,25 +271,25 @@ Security announcement: http://blog.plataformatec.com.br/2013/08/csrf-token-fixat
 * backwards incompatible changes
   * Changes on session storage will expire all existing sessions on upgrade. For those storing the session in the DB, they can be upgraded according to this gist: https://gist.github.com/moll/6417606
-### 2.2.3
+### 2.2.3 - 2013-01-26
 Security announcement: http://blog.plataformatec.com.br/2013/01/security-announcement-devise-v2-2-3-v2-1-3-v2-0-5-and-v1-5-3-released/
 * bug fix
   * Require string conversion for all values
-### 2.2.2
+### 2.2.2 - 2013-01-15
 * bug fix
   * Fix bug when checking for reconfirmable in templates
-### 2.2.1
+### 2.2.1 - 2013-01-11
 * bug fix
   * Fix regression with case_insensitive_keys
   * Fix regression when password is blank when it is invalid
-### 2.2.0
+### 2.2.0 - 2013-01-08
 * backwards incompatible changes
   * `headers_for` is deprecated, customize the mailer directly instead
@@ -203,17 +320,17 @@ Security announcement: http://blog.plataformatec.com.br/2013/01/security-announc
   * `update_with_password` doesn't change encrypted password when it is invalid (by @nashby)
   * Properly handle namespaced models on Active Record generator (by @nashby)
-### 2.1.4
+### 2.1.4 - 2013-08-18
 * bugfix
   * Do not confirm account after reset password
-### 2.1.3
+### 2.1.3 - 2013-01-26
 * bugfix
   * Require string conversion for all values
-### 2.1.2
+### 2.1.2 - 2012-06-19
 * enhancements
   * Handle backwards incompatibility between Rails 3.2.6 and Thor 0.15.x
@@ -221,7 +338,7 @@ Security announcement: http://blog.plataformatec.com.br/2013/01/security-announc
 * bug fix
   * Fix regression on strategy validation on previous release
-### 2.1.1 (yanked)
+### 2.1.1 - 2012-06-15 (yanked)
 * enhancements
   * `sign_out_all_scopes` now locks warden and does not allow new logins in the same action
@@ -238,7 +355,7 @@ Security announcement: http://blog.plataformatec.com.br/2013/01/security-announc
 * deprecations
   * Strategy#validate() no longer validates nil resources
-### 2.1.0
+### 2.1.0 - 2012-05-15
 * enhancements
   * Add `check_fields!(model_class)` method on Devise::Models to check if the model includes the fields that Devise uses
@@ -265,7 +382,7 @@ Security announcement: http://blog.plataformatec.com.br/2013/01/security-announc
   * Return `head :no_content` in SessionsController now that most JS libraries handle it (by @julianvargasalvarez)
   * Reverted moving devise/shared/_links.erb to devise/_links.erb
-### 2.0.4
+### 2.0.4 - 2012-02-17
 Notes: https://github.com/plataformatec/devise/wiki/How-To:-Upgrade-to-Devise-2.0
@@ -273,7 +390,7 @@ Notes: https://github.com/plataformatec/devise/wiki/How-To:-Upgrade-to-Devise-2.
   * Fix when :host is used with devise_for  (by @mreinsch)
   * Fix a regression that caused Warden to be initialized too late
-### 2.0.3 (yanked)
+### 2.0.3 - 2012-06-16 (yanked)
 * bug fix
   * Ensure warning is not shown by mistake on apps with mounted engines
@@ -281,7 +398,7 @@ Notes: https://github.com/plataformatec/devise/wiki/How-To:-Upgrade-to-Devise-2.
   * Ensure serializable_hash does not depend on accessible attributes
   * Ensure that timeout callback does not run on sign out action
-### 2.0.2
+### 2.0.2 - 2012-02-14
 * enhancements
   * Add devise_i18n_options to customize I18n message
@@ -293,7 +410,7 @@ Notes: https://github.com/plataformatec/devise/wiki/How-To:-Upgrade-to-Devise-2.
   * Show a warning in case someone gives a pluralized name to devise generator
   * Fix test behavior for rspec subject requests (by @sj26)
-### 2.0.1
+### 2.0.1 - 2012-02-09
 * enhancements
   * Improved error messages on deprecation warnings
@@ -302,7 +419,7 @@ Notes: https://github.com/plataformatec/devise/wiki/How-To:-Upgrade-to-Devise-2.
 * bug fix
   * Removed tmp and log files from gem
-### 2.0.0
+### 2.0.0 - 2012-01-26
 * enhancements
   * Add support for e-mail reconfirmation on change (by @Mandaryn and @heimidal)
@@ -328,14 +445,14 @@ Notes: https://github.com/plataformatec/devise/wiki/How-To:-Upgrade-to-Devise-2.
   * Deprecated support to devise.registrations.reasons and devise.registrations.inactive_signed_up in favor of devise.registrations.signed_up_but_*
   * Protected method render_with_scope was removed.
-### 1.5.3
+### 1.5.3 - 2011-12-19
 * bug fix
   * Ensure delegator converts scope to symbol (by @dmitriy-kiriyenko)
   * Ensure passing :format => false to devise_for is not permanent
   * Ensure path checker does not check invalid routes
-### 1.5.2
+### 1.5.2 - 2011-11-30
 * enhancements
   * Add support for Rails 3.1 new mass assignment conventions (by @kirs)
@@ -344,12 +461,12 @@ Notes: https://github.com/plataformatec/devise/wiki/How-To:-Upgrade-to-Devise-2.
 * bug fix
   * OmniAuth error message now shows the proper option (:strategy_class instead of :klass)
-### 1.5.1
+### 1.5.1 - 2011-11-22
 * bug fix
   * Devise should not attempt to load OmniAuth strategies. Strategies should be loaded before hand by the developer or explicitly given to Devise.
-### 1.5.0
+### 1.5.0 - 2011-11-13
 * enhancements
   * Timeoutable also skips tracking if skip_trackable is given
@@ -370,12 +487,12 @@ Notes: https://github.com/plataformatec/devise/wiki/How-To:-Upgrade-to-Devise-2.
   * redirect_location is deprecated, please use after_sign_in_path_for
   * after_sign_in_path_for now redirects to session[scope_return_to] if any value is stored in it
-### 1.4.9
+### 1.4.9 - 2011-10-19
 * bug fix
   * url helpers were not being set under some circumstances
-### 1.4.8
+### 1.4.8 - 2011-10-09
 * enhancements
   * Add docs for assets pipeline and Heroku
@@ -383,12 +500,12 @@ Notes: https://github.com/plataformatec/devise/wiki/How-To:-Upgrade-to-Devise-2.
 * bug fix
   * confirmation_url was not being set under some circumstances
-### 1.4.7
+### 1.4.7 - 2011-09-21
 * bug fix
   * Fix backward incompatible change from 1.4.6 for those using custom controllers
-### 1.4.6 (yanked)
+### 1.4.6 - 2011-09-19 (yanked)
 * enhancements
   * Allow devise_for :skip => :all
@@ -396,7 +513,7 @@ Notes: https://github.com/plataformatec/devise/wiki/How-To:-Upgrade-to-Devise-2.
   * Allow --skip-routes to devise generator
   * Add allow_params_authentication! to make it explicit when params authentication is allowed in a controller
-### 1.4.5
+### 1.4.5 - 2011-09-07
 * bug fix
   * Failure app tries the root path if a session one does not exist
@@ -404,12 +521,12 @@ Notes: https://github.com/plataformatec/devise/wiki/How-To:-Upgrade-to-Devise-2.
   * Reset password shows proper message if user is not active
   * `clean_up_passwords` sets the accessors to nil to skip validations
-### 1.4.4
+### 1.4.4 - 2011-08-30
 * bug fix
   * Do not always skip helpers, instead provide :skip_helpers as option to trigger it manually
-### 1.4.3
+### 1.4.3 - 2011-08-29
 * enhancements
   * Improve Rails 3.1 compatibility
@@ -425,12 +542,12 @@ Notes: https://github.com/plataformatec/devise/wiki/How-To:-Upgrade-to-Devise-2.
 * deprecations
   * Loosened the used email regexp to simply assert the existent of "@". If someone relies on a more strict regexp, they may use https://github.com/SixArm/sixarm_ruby_email_address_validation
-### 1.4.2
+### 1.4.2 - 2011-06-30
 * bug fix
   * Provide a more robust behavior to serializers and add :force_except option
-### 1.4.1
+### 1.4.1 - 2011-06-29
 * enhancements
   * Add :defaults and :format support on router
@@ -441,7 +558,7 @@ Notes: https://github.com/plataformatec/devise/wiki/How-To:-Upgrade-to-Devise-2.
   * Ensure to_xml is properly white listened
   * Ensure handle_unverified_request clean up any cached signed-in user
-### 1.4.0
+### 1.4.0 - 2011-06-23
 * enhancements
   * Added authenticated and unauthenticated to the router to route the used based on their status (by @sj26)
@@ -459,22 +576,22 @@ Notes: https://github.com/plataformatec/devise/wiki/How-To:-Upgrade-to-Devise-2.
   * Devise now honors routes constraints (by @macmartine)
   * Do not return the user resource when requesting instructions (by @rodrigoflores)
-### 1.3.4
+### 1.3.4 - 2011-04-28
 * bug fix
   * Do not add formats if html or "*/*"
-### 1.3.3
+### 1.3.3 - 2011-04-20
 * bug fix
   * Explicitly mark the token as expired if so
-### 1.3.2
+### 1.3.2 - 2011-04-20
 * bug fix
   * Fix another regression related to reset_password_sent_at (by @alexdreher)
-### 1.3.1
+### 1.3.1 - 2011-04-18
 * enhancements
   * Improve failure_app responses (by @indirect)
@@ -483,7 +600,7 @@ Notes: https://github.com/plataformatec/devise/wiki/How-To:-Upgrade-to-Devise-2.
 * bug fix
   * Fix a regression that occurred if reset_password_sent_at is not present (by @stevehodgkiss)
-### 1.3.0
+### 1.3.0 - 2011-04-15
 * enhancements
   * All controllers can now handle different mime types than html using Responders (by @sikachu)
@@ -503,19 +620,19 @@ Notes: https://github.com/plataformatec/devise/wiki/How-To:-Upgrade-to-Devise-2.
 * backward incompatible changes
   * authentication_keys are no longer considered when creating the e-mail validations, the previous behavior was buggy. You must double check if you were relying on such behavior.
-### 1.2.1
+### 1.2.1 - 2011-03-27
 * enhancements
   * Improve update path messages
-### 1.2.0
+### 1.2.0 - 2011-03-24
 * bug fix
   * Properly ignore path prefix on omniauthable
   * Faster uniqueness queries
   * Rename active? to active_for_authentication? to avoid conflicts
-### 1.2.rc2
+### 1.2.rc2 - 2011-03-10
 * enhancements
   * Make friendly_token 20 chars long
@@ -545,7 +662,7 @@ Notes: https://github.com/plataformatec/devise/wiki/How-To:-Upgrade-to-Devise-2.
   * Removed --haml and --slim view templates
   * Devise::OmniAuth helpers were deprecated and removed in favor of Omniauth.config.test_mode
-### 1.2.rc
+### 1.2.rc - 2010-10-25
 * deprecations
   * cookie_domain is deprecated in favor of cookie_options
@@ -583,13 +700,13 @@ Notes: https://github.com/plataformatec/devise/wiki/How-To:-Upgrade-to-Devise-2.
   * Ensure namespaces has proper scoped views
   * Ensure Devise does not set empty flash messages (by @sxross)
-### 1.1.6
+### 1.1.6 - 2011-02-14
 * Use a more secure e-mail regexp
 * Implement Rails 3.0.4 handle unverified request
 * Use secure_compare to compare passwords
-### 1.1.5
+### 1.1.5 - 2010-11-26
 * bugfix
   * Ensure to convert keys on indifferent hash
@@ -597,12 +714,12 @@ Notes: https://github.com/plataformatec/devise/wiki/How-To:-Upgrade-to-Devise-2.
 * defaults
   * Set config.http_authenticatable to false to avoid confusion
-### 1.1.4
+### 1.1.4 - 2010-11-25
 * bugfix
   * Avoid session fixation attacks
-### 1.1.3
+### 1.1.3 - 2010-09-23
 * bugfix
   * Add reply-to to e-mail headers by default
@@ -613,17 +730,17 @@ Notes: https://github.com/plataformatec/devise/wiki/How-To:-Upgrade-to-Devise-2.
   * Fix for failed first-ever logins on PostgreSQL where column default is nil (by @bensie)
   * :default options is now honored in migrations
-### 1.1.2
+### 1.1.2 - 2010-08-25
 * bugfix
   * Compatibility with latest Rails routes schema
-### 1.1.1
+### 1.1.1 - 2010-07-26
 * bugfix
   * Fix a small bug where generated locale file was empty on devise:install
-### 1.1.0
+### 1.1.0 - 2010-07-25
 * enhancements
   * Rememberable module allows user to be remembered across browsers and is enabled by default (by @trevorturk)
@@ -643,7 +760,7 @@ Notes: https://github.com/plataformatec/devise/wiki/How-To:-Upgrade-to-Devise-2.
 * deprecations
   * use_default_scope is deprecated and has no effect. Use :as or :devise_scope in the router instead
-### 1.1.rc2
+### 1.1.rc2 - 2010-06-22
 * enhancements
   * Allow to set cookie domain for the remember token. (by @mantas)
@@ -661,7 +778,7 @@ Notes: https://github.com/plataformatec/devise/wiki/How-To:-Upgrade-to-Devise-2.
   * devise.mailer.user.confirmations_instructions now should be devise.mailer.confirmations_instructions.user_subject
   * Generators now use Rails 3 syntax (devise:install) instead of devise_install
-### 1.1.rc1
+### 1.1.rc1 - 2010-04-14
 * enhancements
   * Rails 3 compatibility
@@ -693,7 +810,7 @@ Notes: https://github.com/plataformatec/devise/wiki/How-To:-Upgrade-to-Devise-2.
   * All messages under devise.sessions, except :signed_in and :signed_out, should be moved to devise.failure
   * :as and :scope in routes is deprecated. Use :path and :singular instead
-### 1.0.8
+### 1.0.8 - 2010-06-22
 * enhancements
   * Support for latest MongoMapper
@@ -702,7 +819,7 @@ Notes: https://github.com/plataformatec/devise/wiki/How-To:-Upgrade-to-Devise-2.
 * bug fix
   * confirmation_required? is properly honored on active? calls. (by @paulrosania)
-### 1.0.7
+### 1.0.7 - 2010-05-02
 * bug fix
   * Ensure password confirmation is always required
@@ -711,14 +828,14 @@ Notes: https://github.com/plataformatec/devise/wiki/How-To:-Upgrade-to-Devise-2.
   * authenticatable was deprecated and renamed to database_authenticatable
   * confirmable is not included by default on generation
-### 1.0.6
+### 1.0.6 - 2010-04-02
 * bug fix
   * Do not allow unlockable strategies based on time to access a controller.
   * Do not send unlockable email several times.
   * Allow controller to upstram custom! failures to Warden.
-### 1.0.5
+### 1.0.5 - 2010-03-25
 * bug fix
   * Use prepend_before_filter in require_no_authentication.
@@ -726,19 +843,19 @@ Notes: https://github.com/plataformatec/devise/wiki/How-To:-Upgrade-to-Devise-2.
   * Fix a bug when giving an association proxy to devise.
   * Do not use lock! on lockable since it's part of ActiveRecord API.
-### 1.0.4
+### 1.0.4 - 2010-03-02
 * bug fix
   * Fixed a bug when deleting an account with rememberable
   * Fixed a bug with custom controllers
-### 1.0.3
+### 1.0.3 - 2010-02-22
 * enhancements
   * HTML e-mails now have proper formatting
   * Do not remove MongoMapper options in find
-### 1.0.2
+### 1.0.2 - 2010-02-17
 * enhancements
   * Allows you set mailer content type (by @glennr)
@@ -746,7 +863,7 @@ Notes: https://github.com/plataformatec/devise/wiki/How-To:-Upgrade-to-Devise-2.
 * bug fix
   * Uses the same content type as request on http authenticatable 401 responses
-### 1.0.1
+### 1.0.1 - 2010-02-16
 * enhancements
   * HttpAuthenticatable is not added by default automatically.
@@ -755,7 +872,7 @@ Notes: https://github.com/plataformatec/devise/wiki/How-To:-Upgrade-to-Devise-2.
 * bug fix
   * Fixed encryptors autoload
-### 1.0.0
+### 1.0.0 - 2010-02-08
 * deprecation
   * :old_password in update_with_password is deprecated, use :current_password instead
@@ -766,7 +883,7 @@ Notes: https://github.com/plataformatec/devise/wiki/How-To:-Upgrade-to-Devise-2.
   * Allow scoped_views to be customized per controller/mailer class
   * Allow authenticatable to used in change_table statements
-### 0.9.2
+### 0.9.2 - 2010-02-04
 * bug fix
   * Ensure inactive user cannot sign in
@@ -776,13 +893,13 @@ Notes: https://github.com/plataformatec/devise/wiki/How-To:-Upgrade-to-Devise-2.
   * Added gemspec to repo
   * Added token authenticatable (by @grimen)
-### 0.9.1
+### 0.9.1 - 2010-01-24
 * bug fix
   * Allow bigger salt size (by @jgeiger)
   * Fix relative url root
-### 0.9.0
+### 0.9.0 - 2010-01-20
 * deprecation
   * devise :all is deprecated
@@ -799,7 +916,7 @@ Notes: https://github.com/plataformatec/devise/wiki/How-To:-Upgrade-to-Devise-2.
   * Accept path prefix not starting with slash
   * url helpers should rely on find_scope!
-### 0.8.2
+### 0.8.2 - 2010-01-12
 * enhancements
   * Allow Devise.mailer_sender to be a proc (by @grimen)
@@ -807,7 +924,7 @@ Notes: https://github.com/plataformatec/devise/wiki/How-To:-Upgrade-to-Devise-2.
 * bug fix
   * Fix bug with passenger, update is required to anyone deploying on passenger (by @dvdpalm)
-### 0.8.1
+### 0.8.1 - 2010-01-07
 * enhancements
   * Move salt to encryptors
@@ -817,7 +934,7 @@ Notes: https://github.com/plataformatec/devise/wiki/How-To:-Upgrade-to-Devise-2.
 * bug fix
   * Bcrypt generator was not being loaded neither setting the proper salt
-### 0.8.0
+### 0.8.0 - 2010-01-06
 * enhancements
   * Warden 0.8.0 compatibility
@@ -831,19 +948,19 @@ Notes: https://github.com/plataformatec/devise/wiki/How-To:-Upgrade-to-Devise-2.
 * deprecation
   * Removed DeviseMailer.sender
-### 0.7.5
+### 0.7.5 - 2010-01-01
 * enhancements
   * Set a default value for mailer to avoid find_template issues
   * Add models configuration to MongoMapper::EmbeddedDocument as well
-### 0.7.4
+### 0.7.4 - 2009-12-21
 * enhancements
   * Extract Activatable from Confirmable
   * Decouple Serializers from Devise modules
-### 0.7.3
+### 0.7.3 - 2009-12-15
 * bug fix
   * Give scope to the proper model validation
@@ -853,7 +970,7 @@ Notes: https://github.com/plataformatec/devise/wiki/How-To:-Upgrade-to-Devise-2.
   * Added update_with_password for authenticatable
   * Allow render_with_scope to accept :controller option
-### 0.7.2
+### 0.7.2 - 2009-12-14
 * deprecation
   * Renamed reset_confirmation! to resend_confirmation!
@@ -863,12 +980,12 @@ Notes: https://github.com/plataformatec/devise/wiki/How-To:-Upgrade-to-Devise-2.
   * Fixed render_with_scope to work with all controllers
   * Allow sign in with two different users in Devise::TestHelpers
-### 0.7.1
+### 0.7.1 - 2009-12-09
 * enhancements
   * Small enhancements for other plugins compatibility (by @grimen)
-### 0.7.0
+### 0.7.0 - 2009-12-08
 * deprecations
   * :authenticatable is not included by default anymore
@@ -877,25 +994,25 @@ Notes: https://github.com/plataformatec/devise/wiki/How-To:-Upgrade-to-Devise-2.
   * Improve loading process
   * Extract SessionSerializer from Authenticatable
-### 0.6.3
+### 0.6.3 - 2009-12-02
 * bug fix
   * Added trackable to migrations
   * Allow inflections to work
-### 0.6.2
+### 0.6.2 - 2009-11-25
 * enhancements
   * More DataMapper compatibility
   * Devise::Trackable - track sign in count, timestamps and ips
-### 0.6.1
+### 0.6.1 - 2009-11-24
 * enhancements
   * Devise::Timeoutable - timeout sessions without activity
   * DataMapper now accepts conditions
-### 0.6.0
+### 0.6.0 - 2009-11-22
 * deprecations
   * :authenticatable is still included by default, but yields a deprecation warning
@@ -906,19 +1023,19 @@ Notes: https://github.com/plataformatec/devise/wiki/How-To:-Upgrade-to-Devise-2.
   * Allow a strategy to be placed after authenticatable
   * Do not rely attribute? methods, since they are not added on Datamapper
-### 0.5.6
+### 0.5.6 - 2009-11-21
 * enhancements
   * Do not send nil to build (DataMapper compatibility)
   * Allow to have scoped views
-### 0.5.5
+### 0.5.5 - 2009-11-20
 * enhancements
   * Allow overwriting find for authentication method
   * Remove Ruby 1.8.7 dependency
-### 0.5.4
+### 0.5.4 - 2009-11-19
 * deprecations
   * Deprecate :singular in devise_for and use :scope instead
@@ -929,7 +1046,7 @@ Notes: https://github.com/plataformatec/devise/wiki/How-To:-Upgrade-to-Devise-2.
   * Create sign_in_and_redirect and sign_out_and_redirect helpers
   * Warden::Manager.default_scope is automatically configured to the first given scope
-### 0.5.3
+### 0.5.3 - 2009-11-18
 * bug fix
   * MongoMapper now converts DateTime to Time
@@ -941,20 +1058,20 @@ Notes: https://github.com/plataformatec/devise/wiki/How-To:-Upgrade-to-Devise-2.
   * Added Devise.apply_schema, so you can turn it to false in Datamapper or MongoMapper
     in cases you don't want it be handlded automatically
-### 0.5.2
+### 0.5.2 - 2009-11-17
 * enhancements
   * Improved sign_in and sign_out helpers to accepts resources
   * Added stored_location_for as a helper
   * Added test helpers
-### 0.5.1
+### 0.5.1 - 2009-11-15
 * enhancements
   * Added serializers based on Warden ones
   * Allow authentication keys to be set
-### 0.5.0
+### 0.5.0 - 2009-11-13
 * bug fix
   * Fixed a bug where remember me module was not working properly
@@ -964,13 +1081,13 @@ Notes: https://github.com/plataformatec/devise/wiki/How-To:-Upgrade-to-Devise-2.
   * Implemented encryptors for Clearance, Authlogic and Restful-Authentication (by @mhfs)
   * Added support for MongoMapper (by @shingara)
-### 0.4.3
+### 0.4.3 - 2009-11-10
 * bug fix
   * Authentication just fails if user cannot be serialized from session, without raising errors;
   * Default configuration values should not overwrite user values;
-### 0.4.2
+### 0.4.2 - 2009-11-06
 * deprecations
   * Renamed mail_sender to mailer_sender
@@ -982,12 +1099,12 @@ Notes: https://github.com/plataformatec/devise/wiki/How-To:-Upgrade-to-Devise-2.
   * Allow :path_prefix to be given to devise_for
   * Allow default_url_options to be configured through devise (:path_prefix => "/:locale" is now supported)
-### 0.4.1
+### 0.4.1 - 2009-11-04
 * bug fix
   * Ensure options can be set even if models were not loaded
-### 0.4.0
+### 0.4.0 - 2009-11-03
 * deprecations
   * Notifier is deprecated, use DeviseMailer instead. Remember to rename
@@ -1000,7 +1117,7 @@ Notes: https://github.com/plataformatec/devise/wiki/How-To:-Upgrade-to-Devise-2.
   * Allow Warden::Manager to be configured through Devise
   * Created a generator which creates an initializer
-### 0.3.0
+### 0.3.0 - 2009-10-30
 * bug fix
   * Allow yml messages to be configured by not using engine locales
@@ -1010,7 +1127,7 @@ Notes: https://github.com/plataformatec/devise/wiki/How-To:-Upgrade-to-Devise-2.
   * Do not send confirmation messages when user changes their e-mail
   * Renamed authenticable to authenticatable and added deprecation warnings
-### 0.2.3
+### 0.2.3 - 2009-10-29
 * enhancements
   * Ensure fail! works inside strategies
@@ -1020,12 +1137,12 @@ Notes: https://github.com/plataformatec/devise/wiki/How-To:-Upgrade-to-Devise-2.
   * Do not redirect on invalid authenticate
   * Allow model configuration to be set to nil
-### 0.2.2
+### 0.2.2 - 2009-10-28
 * bug fix
   * Fix a bug when using customized resources
-### 0.2.1
+### 0.2.1 - 2009-10-27
 * refactor
   * Clean devise_views generator to use devise existing views
@@ -1037,7 +1154,7 @@ Notes: https://github.com/plataformatec/devise/wiki/How-To:-Upgrade-to-Devise-2.
 * bug fix
   * Fix a bug with Mongrel and Ruby 1.8.6
-### 0.2.0
+### 0.2.0 - 2009-10-24
 * enhancements
   * Allow option :null => true in authenticable migration
@@ -1052,12 +1169,12 @@ Notes: https://github.com/plataformatec/devise/wiki/How-To:-Upgrade-to-Devise-2.
 * bug fixes
   * Fixed requiring devise strategies
-### 0.1.1
+### 0.1.1 - 2009-10-21
 * bug fixes
   * Fixed requiring devise mapping
-### 0.1.0
+### 0.1.0 - 2009-10-21
 * Devise::Authenticable
 * Devise::Confirmable