devise 3.5.2 → 4.7.1

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (255) hide show
  1. checksums.yaml +5 -5
  2. data/CHANGELOG.md +259 -1086
  3. data/MIT-LICENSE +1 -1
  4. data/README.md +254 -67
  5. data/app/controllers/devise/confirmations_controller.rb +3 -1
  6. data/app/controllers/devise/omniauth_callbacks_controller.rb +8 -6
  7. data/app/controllers/devise/passwords_controller.rb +8 -4
  8. data/app/controllers/devise/registrations_controller.rb +39 -18
  9. data/app/controllers/devise/sessions_controller.rb +9 -7
  10. data/app/controllers/devise/unlocks_controller.rb +4 -2
  11. data/app/controllers/devise_controller.rb +23 -10
  12. data/app/helpers/devise_helper.rb +12 -19
  13. data/app/mailers/devise/mailer.rb +10 -0
  14. data/app/views/devise/confirmations/new.html.erb +2 -2
  15. data/app/views/devise/mailer/email_changed.html.erb +7 -0
  16. data/app/views/devise/mailer/password_change.html.erb +3 -0
  17. data/app/views/devise/passwords/edit.html.erb +3 -3
  18. data/app/views/devise/passwords/new.html.erb +2 -2
  19. data/app/views/devise/registrations/edit.html.erb +9 -5
  20. data/app/views/devise/registrations/new.html.erb +4 -4
  21. data/app/views/devise/sessions/new.html.erb +4 -4
  22. data/app/views/devise/shared/_error_messages.html.erb +15 -0
  23. data/app/views/devise/shared/_links.html.erb +8 -8
  24. data/app/views/devise/unlocks/new.html.erb +2 -2
  25. data/config/locales/en.yml +6 -1
  26. data/lib/devise/controllers/helpers.rb +35 -26
  27. data/lib/devise/controllers/rememberable.rb +11 -2
  28. data/lib/devise/controllers/scoped_views.rb +2 -0
  29. data/lib/devise/controllers/sign_in_out.rb +34 -11
  30. data/lib/devise/controllers/store_location.rb +25 -7
  31. data/lib/devise/controllers/url_helpers.rb +2 -0
  32. data/lib/devise/delegator.rb +2 -0
  33. data/lib/devise/encryptor.rb +6 -4
  34. data/lib/devise/failure_app.rb +84 -32
  35. data/lib/devise/hooks/activatable.rb +2 -0
  36. data/lib/devise/hooks/csrf_cleaner.rb +2 -0
  37. data/lib/devise/hooks/forgetable.rb +2 -0
  38. data/lib/devise/hooks/lockable.rb +6 -1
  39. data/lib/devise/hooks/proxy.rb +3 -1
  40. data/lib/devise/hooks/rememberable.rb +2 -0
  41. data/lib/devise/hooks/timeoutable.rb +7 -3
  42. data/lib/devise/hooks/trackable.rb +2 -0
  43. data/lib/devise/mailers/helpers.rb +7 -4
  44. data/lib/devise/mapping.rb +2 -0
  45. data/lib/devise/models/authenticatable.rb +51 -26
  46. data/lib/devise/models/confirmable.rb +89 -27
  47. data/lib/devise/models/database_authenticatable.rb +97 -20
  48. data/lib/devise/models/lockable.rb +15 -5
  49. data/lib/devise/models/omniauthable.rb +2 -0
  50. data/lib/devise/models/recoverable.rb +32 -24
  51. data/lib/devise/models/registerable.rb +4 -0
  52. data/lib/devise/models/rememberable.rb +42 -26
  53. data/lib/devise/models/timeoutable.rb +2 -6
  54. data/lib/devise/models/trackable.rb +15 -1
  55. data/lib/devise/models/validatable.rb +10 -3
  56. data/lib/devise/models.rb +3 -1
  57. data/lib/devise/modules.rb +2 -0
  58. data/lib/devise/omniauth/config.rb +2 -0
  59. data/lib/devise/omniauth/url_helpers.rb +14 -5
  60. data/lib/devise/omniauth.rb +2 -0
  61. data/lib/devise/orm/active_record.rb +5 -1
  62. data/lib/devise/orm/mongoid.rb +6 -2
  63. data/lib/devise/parameter_filter.rb +4 -0
  64. data/lib/devise/parameter_sanitizer.rb +139 -65
  65. data/lib/devise/rails/routes.rb +59 -34
  66. data/lib/devise/rails/warden_compat.rb +3 -10
  67. data/lib/devise/rails.rb +7 -16
  68. data/lib/devise/secret_key_finder.rb +27 -0
  69. data/lib/devise/strategies/authenticatable.rb +4 -2
  70. data/lib/devise/strategies/base.rb +2 -0
  71. data/lib/devise/strategies/database_authenticatable.rb +11 -4
  72. data/lib/devise/strategies/rememberable.rb +5 -6
  73. data/lib/devise/test/controller_helpers.rb +165 -0
  74. data/lib/devise/test/integration_helpers.rb +63 -0
  75. data/lib/devise/test_helpers.rb +7 -124
  76. data/lib/devise/time_inflector.rb +2 -0
  77. data/lib/devise/token_generator.rb +3 -41
  78. data/lib/devise/version.rb +3 -1
  79. data/lib/devise.rb +72 -42
  80. data/lib/generators/active_record/devise_generator.rb +29 -10
  81. data/lib/generators/active_record/templates/migration.rb +4 -2
  82. data/lib/generators/active_record/templates/migration_existing.rb +4 -2
  83. data/lib/generators/devise/controllers_generator.rb +3 -1
  84. data/lib/generators/devise/devise_generator.rb +4 -2
  85. data/lib/generators/devise/install_generator.rb +17 -0
  86. data/lib/generators/devise/orm_helpers.rb +10 -21
  87. data/lib/generators/devise/views_generator.rb +21 -11
  88. data/lib/generators/mongoid/devise_generator.rb +7 -5
  89. data/lib/generators/templates/README +1 -8
  90. data/lib/generators/templates/controllers/confirmations_controller.rb +2 -0
  91. data/lib/generators/templates/controllers/omniauth_callbacks_controller.rb +2 -0
  92. data/lib/generators/templates/controllers/passwords_controller.rb +2 -0
  93. data/lib/generators/templates/controllers/registrations_controller.rb +6 -4
  94. data/lib/generators/templates/controllers/sessions_controller.rb +4 -2
  95. data/lib/generators/templates/controllers/unlocks_controller.rb +2 -0
  96. data/lib/generators/templates/devise.rb +52 -19
  97. data/lib/generators/templates/markerb/confirmation_instructions.markerb +1 -1
  98. data/lib/generators/templates/markerb/email_changed.markerb +7 -0
  99. data/lib/generators/templates/markerb/password_change.markerb +3 -0
  100. data/lib/generators/templates/markerb/reset_password_instructions.markerb +1 -1
  101. data/lib/generators/templates/markerb/unlock_instructions.markerb +1 -1
  102. data/lib/generators/templates/simple_form_for/confirmations/new.html.erb +5 -1
  103. data/lib/generators/templates/simple_form_for/passwords/edit.html.erb +10 -2
  104. data/lib/generators/templates/simple_form_for/passwords/new.html.erb +4 -1
  105. data/lib/generators/templates/simple_form_for/registrations/edit.html.erb +11 -3
  106. data/lib/generators/templates/simple_form_for/registrations/new.html.erb +11 -3
  107. data/lib/generators/templates/simple_form_for/sessions/new.html.erb +7 -2
  108. data/lib/generators/templates/simple_form_for/unlocks/new.html.erb +4 -1
  109. metadata +27 -313
  110. data/.gitignore +0 -10
  111. data/.travis.yml +0 -45
  112. data/.yardopts +0 -9
  113. data/CONTRIBUTING.md +0 -14
  114. data/Gemfile +0 -29
  115. data/Gemfile.lock +0 -183
  116. data/Rakefile +0 -36
  117. data/devise.gemspec +0 -27
  118. data/devise.png +0 -0
  119. data/gemfiles/Gemfile.rails-3.2-stable +0 -29
  120. data/gemfiles/Gemfile.rails-3.2-stable.lock +0 -169
  121. data/gemfiles/Gemfile.rails-4.0-stable +0 -29
  122. data/gemfiles/Gemfile.rails-4.0-stable.lock +0 -163
  123. data/gemfiles/Gemfile.rails-4.1-stable +0 -29
  124. data/gemfiles/Gemfile.rails-4.1-stable.lock +0 -169
  125. data/gemfiles/Gemfile.rails-4.2-stable +0 -29
  126. data/gemfiles/Gemfile.rails-4.2-stable.lock +0 -191
  127. data/script/cached-bundle +0 -49
  128. data/script/s3-put +0 -71
  129. data/test/controllers/custom_registrations_controller_test.rb +0 -40
  130. data/test/controllers/custom_strategy_test.rb +0 -62
  131. data/test/controllers/helpers_test.rb +0 -316
  132. data/test/controllers/inherited_controller_i18n_messages_test.rb +0 -51
  133. data/test/controllers/internal_helpers_test.rb +0 -129
  134. data/test/controllers/load_hooks_controller_test.rb +0 -19
  135. data/test/controllers/passwords_controller_test.rb +0 -31
  136. data/test/controllers/sessions_controller_test.rb +0 -103
  137. data/test/controllers/url_helpers_test.rb +0 -65
  138. data/test/delegator_test.rb +0 -19
  139. data/test/devise_test.rb +0 -107
  140. data/test/failure_app_test.rb +0 -298
  141. data/test/generators/active_record_generator_test.rb +0 -109
  142. data/test/generators/controllers_generator_test.rb +0 -48
  143. data/test/generators/devise_generator_test.rb +0 -39
  144. data/test/generators/install_generator_test.rb +0 -13
  145. data/test/generators/mongoid_generator_test.rb +0 -23
  146. data/test/generators/views_generator_test.rb +0 -96
  147. data/test/helpers/devise_helper_test.rb +0 -49
  148. data/test/integration/authenticatable_test.rb +0 -729
  149. data/test/integration/confirmable_test.rb +0 -324
  150. data/test/integration/database_authenticatable_test.rb +0 -95
  151. data/test/integration/http_authenticatable_test.rb +0 -105
  152. data/test/integration/lockable_test.rb +0 -239
  153. data/test/integration/omniauthable_test.rb +0 -133
  154. data/test/integration/recoverable_test.rb +0 -347
  155. data/test/integration/registerable_test.rb +0 -359
  156. data/test/integration/rememberable_test.rb +0 -176
  157. data/test/integration/timeoutable_test.rb +0 -172
  158. data/test/integration/trackable_test.rb +0 -92
  159. data/test/mailers/confirmation_instructions_test.rb +0 -115
  160. data/test/mailers/reset_password_instructions_test.rb +0 -96
  161. data/test/mailers/unlock_instructions_test.rb +0 -91
  162. data/test/mapping_test.rb +0 -134
  163. data/test/models/authenticatable_test.rb +0 -23
  164. data/test/models/confirmable_test.rb +0 -479
  165. data/test/models/database_authenticatable_test.rb +0 -249
  166. data/test/models/lockable_test.rb +0 -328
  167. data/test/models/omniauthable_test.rb +0 -7
  168. data/test/models/recoverable_test.rb +0 -228
  169. data/test/models/registerable_test.rb +0 -7
  170. data/test/models/rememberable_test.rb +0 -204
  171. data/test/models/serializable_test.rb +0 -49
  172. data/test/models/timeoutable_test.rb +0 -51
  173. data/test/models/trackable_test.rb +0 -41
  174. data/test/models/validatable_test.rb +0 -127
  175. data/test/models_test.rb +0 -144
  176. data/test/omniauth/config_test.rb +0 -57
  177. data/test/omniauth/url_helpers_test.rb +0 -54
  178. data/test/orm/active_record.rb +0 -10
  179. data/test/orm/mongoid.rb +0 -13
  180. data/test/parameter_sanitizer_test.rb +0 -81
  181. data/test/rails_app/Rakefile +0 -6
  182. data/test/rails_app/app/active_record/admin.rb +0 -6
  183. data/test/rails_app/app/active_record/shim.rb +0 -2
  184. data/test/rails_app/app/active_record/user.rb +0 -6
  185. data/test/rails_app/app/active_record/user_on_engine.rb +0 -7
  186. data/test/rails_app/app/active_record/user_on_main_app.rb +0 -7
  187. data/test/rails_app/app/controllers/admins/sessions_controller.rb +0 -6
  188. data/test/rails_app/app/controllers/admins_controller.rb +0 -6
  189. data/test/rails_app/app/controllers/application_controller.rb +0 -12
  190. data/test/rails_app/app/controllers/application_with_fake_engine.rb +0 -30
  191. data/test/rails_app/app/controllers/custom/registrations_controller.rb +0 -31
  192. data/test/rails_app/app/controllers/home_controller.rb +0 -25
  193. data/test/rails_app/app/controllers/publisher/registrations_controller.rb +0 -2
  194. data/test/rails_app/app/controllers/publisher/sessions_controller.rb +0 -2
  195. data/test/rails_app/app/controllers/users/omniauth_callbacks_controller.rb +0 -14
  196. data/test/rails_app/app/controllers/users_controller.rb +0 -31
  197. data/test/rails_app/app/helpers/application_helper.rb +0 -3
  198. data/test/rails_app/app/mailers/users/from_proc_mailer.rb +0 -3
  199. data/test/rails_app/app/mailers/users/mailer.rb +0 -3
  200. data/test/rails_app/app/mailers/users/reply_to_mailer.rb +0 -4
  201. data/test/rails_app/app/mongoid/admin.rb +0 -29
  202. data/test/rails_app/app/mongoid/shim.rb +0 -23
  203. data/test/rails_app/app/mongoid/user.rb +0 -39
  204. data/test/rails_app/app/mongoid/user_on_engine.rb +0 -39
  205. data/test/rails_app/app/mongoid/user_on_main_app.rb +0 -39
  206. data/test/rails_app/app/views/admins/index.html.erb +0 -1
  207. data/test/rails_app/app/views/admins/sessions/new.html.erb +0 -2
  208. data/test/rails_app/app/views/home/admin_dashboard.html.erb +0 -1
  209. data/test/rails_app/app/views/home/index.html.erb +0 -1
  210. data/test/rails_app/app/views/home/join.html.erb +0 -1
  211. data/test/rails_app/app/views/home/private.html.erb +0 -1
  212. data/test/rails_app/app/views/home/user_dashboard.html.erb +0 -1
  213. data/test/rails_app/app/views/layouts/application.html.erb +0 -24
  214. data/test/rails_app/app/views/users/edit_form.html.erb +0 -1
  215. data/test/rails_app/app/views/users/index.html.erb +0 -1
  216. data/test/rails_app/app/views/users/mailer/confirmation_instructions.erb +0 -1
  217. data/test/rails_app/app/views/users/sessions/new.html.erb +0 -1
  218. data/test/rails_app/bin/bundle +0 -3
  219. data/test/rails_app/bin/rails +0 -4
  220. data/test/rails_app/bin/rake +0 -4
  221. data/test/rails_app/config/application.rb +0 -40
  222. data/test/rails_app/config/boot.rb +0 -14
  223. data/test/rails_app/config/database.yml +0 -18
  224. data/test/rails_app/config/environment.rb +0 -5
  225. data/test/rails_app/config/environments/development.rb +0 -30
  226. data/test/rails_app/config/environments/production.rb +0 -84
  227. data/test/rails_app/config/environments/test.rb +0 -41
  228. data/test/rails_app/config/initializers/backtrace_silencers.rb +0 -7
  229. data/test/rails_app/config/initializers/devise.rb +0 -180
  230. data/test/rails_app/config/initializers/inflections.rb +0 -2
  231. data/test/rails_app/config/initializers/secret_token.rb +0 -8
  232. data/test/rails_app/config/initializers/session_store.rb +0 -1
  233. data/test/rails_app/config/routes.rb +0 -120
  234. data/test/rails_app/config.ru +0 -4
  235. data/test/rails_app/db/migrate/20100401102949_create_tables.rb +0 -71
  236. data/test/rails_app/db/schema.rb +0 -55
  237. data/test/rails_app/lib/shared_admin.rb +0 -17
  238. data/test/rails_app/lib/shared_user.rb +0 -29
  239. data/test/rails_app/lib/shared_user_without_omniauth.rb +0 -13
  240. data/test/rails_app/public/404.html +0 -26
  241. data/test/rails_app/public/422.html +0 -26
  242. data/test/rails_app/public/500.html +0 -26
  243. data/test/rails_app/public/favicon.ico +0 -0
  244. data/test/rails_test.rb +0 -9
  245. data/test/routes_test.rb +0 -264
  246. data/test/support/action_controller/record_identifier.rb +0 -10
  247. data/test/support/assertions.rb +0 -39
  248. data/test/support/helpers.rb +0 -73
  249. data/test/support/integration.rb +0 -92
  250. data/test/support/locale/en.yml +0 -8
  251. data/test/support/mongoid.yml +0 -6
  252. data/test/support/webrat/integrations/rails.rb +0 -24
  253. data/test/test_helper.rb +0 -34
  254. data/test/test_helpers_test.rb +0 -178
  255. data/test/test_models.rb +0 -33
@@ -1,479 +0,0 @@
1
- require 'test_helper'
2
-
3
- class ConfirmableTest < ActiveSupport::TestCase
4
-
5
- def setup
6
- setup_mailer
7
- end
8
-
9
- test 'should generate confirmation token after creating a record' do
10
- assert_nil new_user.confirmation_token
11
- assert_not_nil create_user.confirmation_token
12
- end
13
-
14
- test 'should never generate the same confirmation token for different users' do
15
- confirmation_tokens = []
16
- 3.times do
17
- token = create_user.confirmation_token
18
- assert !confirmation_tokens.include?(token)
19
- confirmation_tokens << token
20
- end
21
- end
22
-
23
- test 'should confirm a user by updating confirmed at' do
24
- user = create_user
25
- assert_nil user.confirmed_at
26
- assert user.confirm
27
- assert_not_nil user.confirmed_at
28
- end
29
-
30
- test 'should verify whether a user is confirmed or not' do
31
- assert_not new_user.confirmed?
32
- user = create_user
33
- assert_not user.confirmed?
34
- user.confirm
35
- assert user.confirmed?
36
- end
37
-
38
- test 'should not confirm a user already confirmed' do
39
- user = create_user
40
- assert user.confirm
41
- assert_blank user.errors[:email]
42
-
43
- assert_not user.confirm
44
- assert_equal "was already confirmed, please try signing in", user.errors[:email].join
45
- end
46
-
47
- test 'should find and confirm a user automatically based on the raw token' do
48
- user = create_user
49
- raw = user.raw_confirmation_token
50
- confirmed_user = User.confirm_by_token(raw)
51
- assert_equal confirmed_user, user
52
- assert user.reload.confirmed?
53
- end
54
-
55
- test 'should return a new record with errors when a invalid token is given' do
56
- confirmed_user = User.confirm_by_token('invalid_confirmation_token')
57
- assert_not confirmed_user.persisted?
58
- assert_equal "is invalid", confirmed_user.errors[:confirmation_token].join
59
- end
60
-
61
- test 'should return a new record with errors when a blank token is given' do
62
- confirmed_user = User.confirm_by_token('')
63
- assert_not confirmed_user.persisted?
64
- assert_equal "can't be blank", confirmed_user.errors[:confirmation_token].join
65
- end
66
-
67
- test 'should generate errors for a user email if user is already confirmed' do
68
- user = create_user
69
- user.confirmed_at = Time.now
70
- user.save
71
- confirmed_user = User.confirm_by_token(user.raw_confirmation_token)
72
- assert confirmed_user.confirmed?
73
- assert_equal "was already confirmed, please try signing in", confirmed_user.errors[:email].join
74
- end
75
-
76
- test 'should show error when a token has already been used' do
77
- user = create_user
78
- raw = user.raw_confirmation_token
79
- User.confirm_by_token(raw)
80
- assert user.reload.confirmed?
81
-
82
- confirmed_user = User.confirm_by_token(raw)
83
- assert_equal "was already confirmed, please try signing in", confirmed_user.errors[:email].join
84
- end
85
-
86
- test 'should send confirmation instructions by email' do
87
- assert_email_sent "mynewuser@example.com" do
88
- create_user email: "mynewuser@example.com"
89
- end
90
- end
91
-
92
- test 'should not send confirmation when trying to save an invalid user' do
93
- assert_email_not_sent do
94
- user = new_user
95
- user.stubs(:valid?).returns(false)
96
- user.save
97
- end
98
- end
99
-
100
- test 'should not generate a new token neither send e-mail if skip_confirmation! is invoked' do
101
- user = new_user
102
- user.skip_confirmation!
103
-
104
- assert_email_not_sent do
105
- user.save!
106
- assert_nil user.confirmation_token
107
- assert_not_nil user.confirmed_at
108
- end
109
- end
110
-
111
- test 'should skip confirmation e-mail without confirming if skip_confirmation_notification! is invoked' do
112
- user = new_user
113
- user.skip_confirmation_notification!
114
-
115
- assert_email_not_sent do
116
- user.save!
117
- assert !user.confirmed?
118
- end
119
- end
120
-
121
- test 'should not send confirmation when no email is provided' do
122
- assert_email_not_sent do
123
- user = new_user
124
- user.email = ''
125
- user.save(validate: false)
126
- end
127
- end
128
-
129
- test 'should find a user to send confirmation instructions' do
130
- user = create_user
131
- confirmation_user = User.send_confirmation_instructions(email: user.email)
132
- assert_equal confirmation_user, user
133
- end
134
-
135
- test 'should return a new user if no email was found' do
136
- confirmation_user = User.send_confirmation_instructions(email: "invalid@example.com")
137
- assert_not confirmation_user.persisted?
138
- end
139
-
140
- test 'should add error to new user email if no email was found' do
141
- confirmation_user = User.send_confirmation_instructions(email: "invalid@example.com")
142
- assert confirmation_user.errors[:email]
143
- assert_equal "not found", confirmation_user.errors[:email].join
144
- end
145
-
146
- test 'should send email instructions for the user confirm its email' do
147
- user = create_user
148
- assert_email_sent user.email do
149
- User.send_confirmation_instructions(email: user.email)
150
- end
151
- end
152
-
153
- test 'should always have confirmation token when email is sent' do
154
- user = new_user
155
- user.instance_eval { def confirmation_required?; false end }
156
- user.save
157
- user.send_confirmation_instructions
158
- assert_not_nil user.reload.confirmation_token
159
- end
160
-
161
- test 'should not resend email instructions if the user change their email' do
162
- user = create_user
163
- user.email = 'new_test@example.com'
164
- assert_email_not_sent do
165
- user.save!
166
- end
167
- end
168
-
169
- test 'should not reset confirmation status or token when updating email' do
170
- user = create_user
171
- original_token = user.confirmation_token
172
- user.confirm
173
- user.email = 'new_test@example.com'
174
- user.save!
175
-
176
- user.reload
177
- assert user.confirmed?
178
- assert_equal original_token, user.confirmation_token
179
- end
180
-
181
- test 'should not be able to send instructions if the user is already confirmed' do
182
- user = create_user
183
- user.confirm
184
- assert_not user.resend_confirmation_instructions
185
- assert user.confirmed?
186
- assert_equal 'was already confirmed, please try signing in', user.errors[:email].join
187
- end
188
-
189
- test 'confirm time should fallback to devise confirm in default configuration' do
190
- swap Devise, allow_unconfirmed_access_for: 1.day do
191
- user = new_user
192
- user.confirmation_sent_at = 2.days.ago
193
- assert_not user.active_for_authentication?
194
-
195
- Devise.allow_unconfirmed_access_for = 3.days
196
- assert user.active_for_authentication?
197
- end
198
- end
199
-
200
- test 'should be active when confirmation sent at is not overpast' do
201
- swap Devise, allow_unconfirmed_access_for: 5.days do
202
- Devise.allow_unconfirmed_access_for = 5.days
203
- user = create_user
204
-
205
- user.confirmation_sent_at = 4.days.ago
206
- assert user.active_for_authentication?
207
-
208
- user.confirmation_sent_at = 5.days.ago
209
- assert_not user.active_for_authentication?
210
- end
211
- end
212
-
213
- test 'should be active when already confirmed' do
214
- user = create_user
215
- assert_not user.confirmed?
216
- assert_not user.active_for_authentication?
217
-
218
- user.confirm
219
- assert user.confirmed?
220
- assert user.active_for_authentication?
221
- end
222
-
223
- test 'should not be active when confirm in is zero' do
224
- Devise.allow_unconfirmed_access_for = 0.days
225
- user = create_user
226
- user.confirmation_sent_at = Time.zone.today
227
- assert_not user.active_for_authentication?
228
- end
229
-
230
- test 'should be active when we set allow_unconfirmed_access_for to nil' do
231
- swap Devise, allow_unconfirmed_access_for: nil do
232
- user = create_user
233
- user.confirmation_sent_at = Time.zone.today
234
- assert user.active_for_authentication?
235
- end
236
- end
237
-
238
- test 'should not be active without confirmation' do
239
- user = create_user
240
- user.confirmation_sent_at = nil
241
- user.save
242
- assert_not user.reload.active_for_authentication?
243
- end
244
-
245
- test 'should be active without confirmation when confirmation is not required' do
246
- user = create_user
247
- user.instance_eval { def confirmation_required?; false end }
248
- user.confirmation_sent_at = nil
249
- user.save
250
- assert user.reload.active_for_authentication?
251
- end
252
-
253
- test 'should find a user to send email instructions for the user confirm its email by authentication_keys' do
254
- swap Devise, authentication_keys: [:username, :email] do
255
- user = create_user
256
- confirm_user = User.send_confirmation_instructions(email: user.email, username: user.username)
257
- assert_equal confirm_user, user
258
- end
259
- end
260
-
261
- test 'should require all confirmation_keys' do
262
- swap Devise, confirmation_keys: [:username, :email] do
263
- user = create_user
264
- confirm_user = User.send_confirmation_instructions(email: user.email)
265
- assert_not confirm_user.persisted?
266
- assert_equal "can't be blank", confirm_user.errors[:username].join
267
- end
268
- end
269
-
270
- def confirm_user_by_token_with_confirmation_sent_at(confirmation_sent_at)
271
- user = create_user
272
- user.update_attribute(:confirmation_sent_at, confirmation_sent_at)
273
- confirmed_user = User.confirm_by_token(user.raw_confirmation_token)
274
- assert_equal confirmed_user, user
275
- user.reload.confirmed?
276
- end
277
-
278
- test 'should accept confirmation email token even after 5 years when no expiration is set' do
279
- assert confirm_user_by_token_with_confirmation_sent_at(5.years.ago)
280
- end
281
-
282
- test 'should accept confirmation email token after 2 days when expiration is set to 3 days' do
283
- swap Devise, confirm_within: 3.days do
284
- assert confirm_user_by_token_with_confirmation_sent_at(2.days.ago)
285
- end
286
- end
287
-
288
- test 'should not accept confirmation email token after 4 days when expiration is set to 3 days' do
289
- swap Devise, confirm_within: 3.days do
290
- assert_not confirm_user_by_token_with_confirmation_sent_at(4.days.ago)
291
- end
292
- end
293
-
294
- test 'do not generate a new token on resend' do
295
- user = create_user
296
- old = user.confirmation_token
297
- user = User.find(user.id)
298
- user.resend_confirmation_instructions
299
- assert_equal user.confirmation_token, old
300
- end
301
-
302
- test 'generate a new token after first has expired' do
303
- swap Devise, confirm_within: 3.days do
304
- user = create_user
305
- old = user.confirmation_token
306
- user.update_attribute(:confirmation_sent_at, 4.days.ago)
307
- user = User.find(user.id)
308
- user.resend_confirmation_instructions
309
- assert_not_equal user.confirmation_token, old
310
- end
311
- end
312
-
313
- test 'should call after_confirmation if confirmed' do
314
- user = create_user
315
- user.define_singleton_method :after_confirmation do
316
- self.username = self.username.to_s + 'updated'
317
- end
318
- old = user.username
319
- assert user.confirm
320
- assert_not_equal user.username, old
321
- end
322
-
323
- test 'should not call after_confirmation if not confirmed' do
324
- user = create_user
325
- assert user.confirm
326
- user.define_singleton_method :after_confirmation do
327
- self.username = self.username.to_s + 'updated'
328
- end
329
- old = user.username
330
- assert_not user.confirm
331
- assert_equal user.username, old
332
- end
333
-
334
- test 'should always perform validations upon confirm when ensure valid true' do
335
- admin = create_admin
336
- admin.stubs(:valid?).returns(false)
337
- assert_not admin.confirm(ensure_valid: true)
338
- end
339
- end
340
-
341
- class ReconfirmableTest < ActiveSupport::TestCase
342
- test 'should not worry about validations on confirm even with reconfirmable' do
343
- admin = create_admin
344
- admin.reset_password_token = "a"
345
- assert admin.confirm
346
- end
347
-
348
- test 'should generate confirmation token after changing email' do
349
- admin = create_admin
350
- assert admin.confirm
351
- residual_token = admin.confirmation_token
352
- assert admin.update_attributes(email: 'new_test@example.com')
353
- assert_not_equal residual_token, admin.confirmation_token
354
- end
355
-
356
- test 'should not regenerate confirmation token or require reconfirmation if skipping reconfirmation after changing email' do
357
- admin = create_admin
358
- original_token = admin.confirmation_token
359
- assert admin.confirm
360
- admin.skip_reconfirmation!
361
- assert admin.update_attributes(email: 'new_test@example.com')
362
- assert admin.confirmed?
363
- assert_not admin.pending_reconfirmation?
364
- assert_equal original_token, admin.confirmation_token
365
- end
366
-
367
- test 'should skip sending reconfirmation email when email is changed and skip_confirmation_notification! is invoked' do
368
- admin = create_admin
369
- admin.skip_confirmation_notification!
370
-
371
- assert_email_not_sent do
372
- admin.update_attributes(email: 'new_test@example.com')
373
- end
374
- end
375
-
376
- test 'should regenerate confirmation token after changing email' do
377
- admin = create_admin
378
- assert admin.confirm
379
- assert admin.update_attributes(email: 'old_test@example.com')
380
- token = admin.confirmation_token
381
- assert admin.update_attributes(email: 'new_test@example.com')
382
- assert_not_equal token, admin.confirmation_token
383
- end
384
-
385
- test 'should send confirmation instructions by email after changing email' do
386
- admin = create_admin
387
- assert admin.confirm
388
- assert_email_sent "new_test@example.com" do
389
- assert admin.update_attributes(email: 'new_test@example.com')
390
- end
391
- assert_match "new_test@example.com", ActionMailer::Base.deliveries.last.body.encoded
392
- end
393
-
394
- test 'should not send confirmation by email after changing password' do
395
- admin = create_admin
396
- assert admin.confirm
397
- assert_email_not_sent do
398
- assert admin.update_attributes(password: 'newpass', password_confirmation: 'newpass')
399
- end
400
- end
401
-
402
- test 'should not send confirmation by email after changing to a blank email' do
403
- admin = create_admin
404
- assert admin.confirm
405
- assert_email_not_sent do
406
- admin.email = ''
407
- admin.save(validate: false)
408
- end
409
- end
410
-
411
- test 'should stay confirmed when email is changed' do
412
- admin = create_admin
413
- assert admin.confirm
414
- assert admin.update_attributes(email: 'new_test@example.com')
415
- assert admin.confirmed?
416
- end
417
-
418
- test 'should update email only when it is confirmed' do
419
- admin = create_admin
420
- assert admin.confirm
421
- assert admin.update_attributes(email: 'new_test@example.com')
422
- assert_not_equal 'new_test@example.com', admin.email
423
- assert admin.confirm
424
- assert_equal 'new_test@example.com', admin.email
425
- end
426
-
427
- test 'should not allow admin to get past confirmation email by resubmitting their new address' do
428
- admin = create_admin
429
- assert admin.confirm
430
- assert admin.update_attributes(email: 'new_test@example.com')
431
- assert_not_equal 'new_test@example.com', admin.email
432
- assert admin.update_attributes(email: 'new_test@example.com')
433
- assert_not_equal 'new_test@example.com', admin.email
434
- end
435
-
436
- test 'should find a admin by send confirmation instructions with unconfirmed_email' do
437
- admin = create_admin
438
- assert admin.confirm
439
- assert admin.update_attributes(email: 'new_test@example.com')
440
- confirmation_admin = Admin.send_confirmation_instructions(email: admin.unconfirmed_email)
441
- assert_equal confirmation_admin, admin
442
- end
443
-
444
- test 'should return a new admin if no email or unconfirmed_email was found' do
445
- confirmation_admin = Admin.send_confirmation_instructions(email: "invalid@email.com")
446
- assert_not confirmation_admin.persisted?
447
- end
448
-
449
- test 'should add error to new admin email if no email or unconfirmed_email was found' do
450
- confirmation_admin = Admin.send_confirmation_instructions(email: "invalid@email.com")
451
- assert confirmation_admin.errors[:email]
452
- assert_equal "not found", confirmation_admin.errors[:email].join
453
- end
454
-
455
- test 'should find admin with email in unconfirmed_emails' do
456
- admin = create_admin
457
- admin.unconfirmed_email = "new_test@email.com"
458
- assert admin.save
459
- admin = Admin.find_by_unconfirmed_email_with_errors(email: "new_test@email.com")
460
- assert admin.persisted?
461
- end
462
-
463
- test 'required_fields should contain the fields that Devise uses' do
464
- assert_same_content Devise::Models::Confirmable.required_fields(User), [
465
- :confirmation_sent_at,
466
- :confirmation_token,
467
- :confirmed_at
468
- ]
469
- end
470
-
471
- test 'required_fields should also contain unconfirmable when reconfirmable_email is true' do
472
- assert_same_content Devise::Models::Confirmable.required_fields(Admin), [
473
- :confirmation_sent_at,
474
- :confirmation_token,
475
- :confirmed_at,
476
- :unconfirmed_email
477
- ]
478
- end
479
- end