devise 3.5.3 → 4.7.1
Sign up to get free protection for your applications and to get access to all the features.
- checksums.yaml +5 -5
- data/CHANGELOG.md +256 -1099
- data/MIT-LICENSE +1 -1
- data/README.md +254 -67
- data/app/controllers/devise/confirmations_controller.rb +3 -1
- data/app/controllers/devise/omniauth_callbacks_controller.rb +8 -6
- data/app/controllers/devise/passwords_controller.rb +7 -4
- data/app/controllers/devise/registrations_controller.rb +39 -18
- data/app/controllers/devise/sessions_controller.rb +9 -7
- data/app/controllers/devise/unlocks_controller.rb +4 -2
- data/app/controllers/devise_controller.rb +23 -10
- data/app/helpers/devise_helper.rb +12 -19
- data/app/mailers/devise/mailer.rb +6 -0
- data/app/views/devise/confirmations/new.html.erb +2 -2
- data/app/views/devise/mailer/email_changed.html.erb +7 -0
- data/app/views/devise/passwords/edit.html.erb +3 -3
- data/app/views/devise/passwords/new.html.erb +2 -2
- data/app/views/devise/registrations/edit.html.erb +9 -5
- data/app/views/devise/registrations/new.html.erb +4 -4
- data/app/views/devise/sessions/new.html.erb +4 -4
- data/app/views/devise/shared/_error_messages.html.erb +15 -0
- data/app/views/devise/shared/_links.html.erb +7 -7
- data/app/views/devise/unlocks/new.html.erb +2 -2
- data/config/locales/en.yml +4 -1
- data/lib/devise/controllers/helpers.rb +23 -20
- data/lib/devise/controllers/rememberable.rb +11 -2
- data/lib/devise/controllers/scoped_views.rb +2 -0
- data/lib/devise/controllers/sign_in_out.rb +34 -11
- data/lib/devise/controllers/store_location.rb +25 -7
- data/lib/devise/controllers/url_helpers.rb +2 -0
- data/lib/devise/delegator.rb +2 -0
- data/lib/devise/encryptor.rb +6 -4
- data/lib/devise/failure_app.rb +75 -37
- data/lib/devise/hooks/activatable.rb +2 -0
- data/lib/devise/hooks/csrf_cleaner.rb +2 -0
- data/lib/devise/hooks/forgetable.rb +2 -0
- data/lib/devise/hooks/lockable.rb +6 -1
- data/lib/devise/hooks/proxy.rb +3 -1
- data/lib/devise/hooks/rememberable.rb +2 -0
- data/lib/devise/hooks/timeoutable.rb +5 -2
- data/lib/devise/hooks/trackable.rb +2 -0
- data/lib/devise/mailers/helpers.rb +7 -4
- data/lib/devise/mapping.rb +2 -0
- data/lib/devise/models/authenticatable.rb +51 -26
- data/lib/devise/models/confirmable.rb +89 -27
- data/lib/devise/models/database_authenticatable.rb +88 -21
- data/lib/devise/models/lockable.rb +15 -5
- data/lib/devise/models/omniauthable.rb +2 -0
- data/lib/devise/models/recoverable.rb +32 -20
- data/lib/devise/models/registerable.rb +4 -0
- data/lib/devise/models/rememberable.rb +42 -26
- data/lib/devise/models/timeoutable.rb +2 -6
- data/lib/devise/models/trackable.rb +15 -1
- data/lib/devise/models/validatable.rb +10 -3
- data/lib/devise/models.rb +3 -1
- data/lib/devise/modules.rb +2 -0
- data/lib/devise/omniauth/config.rb +2 -0
- data/lib/devise/omniauth/url_helpers.rb +14 -5
- data/lib/devise/omniauth.rb +2 -0
- data/lib/devise/orm/active_record.rb +5 -1
- data/lib/devise/orm/mongoid.rb +6 -2
- data/lib/devise/parameter_filter.rb +4 -0
- data/lib/devise/parameter_sanitizer.rb +139 -65
- data/lib/devise/rails/routes.rb +44 -33
- data/lib/devise/rails/warden_compat.rb +3 -10
- data/lib/devise/rails.rb +7 -16
- data/lib/devise/secret_key_finder.rb +27 -0
- data/lib/devise/strategies/authenticatable.rb +3 -1
- data/lib/devise/strategies/base.rb +2 -0
- data/lib/devise/strategies/database_authenticatable.rb +11 -4
- data/lib/devise/strategies/rememberable.rb +5 -6
- data/lib/devise/test/controller_helpers.rb +165 -0
- data/lib/devise/test/integration_helpers.rb +63 -0
- data/lib/devise/test_helpers.rb +7 -124
- data/lib/devise/time_inflector.rb +2 -0
- data/lib/devise/token_generator.rb +3 -41
- data/lib/devise/version.rb +3 -1
- data/lib/devise.rb +61 -40
- data/lib/generators/active_record/devise_generator.rb +29 -10
- data/lib/generators/active_record/templates/migration.rb +4 -2
- data/lib/generators/active_record/templates/migration_existing.rb +4 -2
- data/lib/generators/devise/controllers_generator.rb +3 -1
- data/lib/generators/devise/devise_generator.rb +4 -2
- data/lib/generators/devise/install_generator.rb +17 -0
- data/lib/generators/devise/orm_helpers.rb +10 -21
- data/lib/generators/devise/views_generator.rb +7 -8
- data/lib/generators/mongoid/devise_generator.rb +7 -5
- data/lib/generators/templates/README +1 -8
- data/lib/generators/templates/controllers/confirmations_controller.rb +2 -0
- data/lib/generators/templates/controllers/omniauth_callbacks_controller.rb +2 -0
- data/lib/generators/templates/controllers/passwords_controller.rb +2 -0
- data/lib/generators/templates/controllers/registrations_controller.rb +6 -4
- data/lib/generators/templates/controllers/sessions_controller.rb +4 -2
- data/lib/generators/templates/controllers/unlocks_controller.rb +2 -0
- data/lib/generators/templates/devise.rb +50 -20
- data/lib/generators/templates/markerb/email_changed.markerb +7 -0
- data/lib/generators/templates/markerb/password_change.markerb +2 -2
- data/lib/generators/templates/simple_form_for/confirmations/new.html.erb +5 -1
- data/lib/generators/templates/simple_form_for/passwords/edit.html.erb +10 -2
- data/lib/generators/templates/simple_form_for/passwords/new.html.erb +4 -1
- data/lib/generators/templates/simple_form_for/registrations/edit.html.erb +11 -3
- data/lib/generators/templates/simple_form_for/registrations/new.html.erb +11 -3
- data/lib/generators/templates/simple_form_for/sessions/new.html.erb +7 -2
- data/lib/generators/templates/simple_form_for/unlocks/new.html.erb +4 -1
- metadata +13 -310
- data/.gitignore +0 -10
- data/.travis.yml +0 -44
- data/.yardopts +0 -9
- data/CODE_OF_CONDUCT.md +0 -22
- data/CONTRIBUTING.md +0 -16
- data/Gemfile +0 -29
- data/Gemfile.lock +0 -183
- data/Rakefile +0 -36
- data/devise.gemspec +0 -27
- data/devise.png +0 -0
- data/gemfiles/Gemfile.rails-3.2-stable +0 -29
- data/gemfiles/Gemfile.rails-3.2-stable.lock +0 -172
- data/gemfiles/Gemfile.rails-4.0-stable +0 -29
- data/gemfiles/Gemfile.rails-4.0-stable.lock +0 -166
- data/gemfiles/Gemfile.rails-4.1-stable +0 -29
- data/gemfiles/Gemfile.rails-4.1-stable.lock +0 -172
- data/gemfiles/Gemfile.rails-4.2-stable +0 -29
- data/gemfiles/Gemfile.rails-4.2-stable.lock +0 -194
- data/script/cached-bundle +0 -49
- data/script/s3-put +0 -71
- data/test/controllers/custom_registrations_controller_test.rb +0 -40
- data/test/controllers/custom_strategy_test.rb +0 -62
- data/test/controllers/helper_methods_test.rb +0 -21
- data/test/controllers/helpers_test.rb +0 -316
- data/test/controllers/inherited_controller_i18n_messages_test.rb +0 -51
- data/test/controllers/internal_helpers_test.rb +0 -129
- data/test/controllers/load_hooks_controller_test.rb +0 -19
- data/test/controllers/passwords_controller_test.rb +0 -31
- data/test/controllers/sessions_controller_test.rb +0 -103
- data/test/controllers/url_helpers_test.rb +0 -65
- data/test/delegator_test.rb +0 -19
- data/test/devise_test.rb +0 -107
- data/test/failure_app_test.rb +0 -315
- data/test/generators/active_record_generator_test.rb +0 -109
- data/test/generators/controllers_generator_test.rb +0 -48
- data/test/generators/devise_generator_test.rb +0 -39
- data/test/generators/install_generator_test.rb +0 -13
- data/test/generators/mongoid_generator_test.rb +0 -23
- data/test/generators/views_generator_test.rb +0 -103
- data/test/helpers/devise_helper_test.rb +0 -49
- data/test/integration/authenticatable_test.rb +0 -729
- data/test/integration/confirmable_test.rb +0 -324
- data/test/integration/database_authenticatable_test.rb +0 -95
- data/test/integration/http_authenticatable_test.rb +0 -105
- data/test/integration/lockable_test.rb +0 -239
- data/test/integration/omniauthable_test.rb +0 -135
- data/test/integration/recoverable_test.rb +0 -347
- data/test/integration/registerable_test.rb +0 -359
- data/test/integration/rememberable_test.rb +0 -176
- data/test/integration/timeoutable_test.rb +0 -184
- data/test/integration/trackable_test.rb +0 -92
- data/test/mailers/confirmation_instructions_test.rb +0 -115
- data/test/mailers/reset_password_instructions_test.rb +0 -96
- data/test/mailers/unlock_instructions_test.rb +0 -91
- data/test/mapping_test.rb +0 -134
- data/test/models/authenticatable_test.rb +0 -23
- data/test/models/confirmable_test.rb +0 -489
- data/test/models/database_authenticatable_test.rb +0 -269
- data/test/models/lockable_test.rb +0 -328
- data/test/models/omniauthable_test.rb +0 -7
- data/test/models/recoverable_test.rb +0 -251
- data/test/models/registerable_test.rb +0 -7
- data/test/models/rememberable_test.rb +0 -204
- data/test/models/serializable_test.rb +0 -49
- data/test/models/timeoutable_test.rb +0 -51
- data/test/models/trackable_test.rb +0 -41
- data/test/models/validatable_test.rb +0 -127
- data/test/models_test.rb +0 -153
- data/test/omniauth/config_test.rb +0 -57
- data/test/omniauth/url_helpers_test.rb +0 -54
- data/test/orm/active_record.rb +0 -10
- data/test/orm/mongoid.rb +0 -13
- data/test/parameter_sanitizer_test.rb +0 -81
- data/test/rails_app/Rakefile +0 -6
- data/test/rails_app/app/active_record/admin.rb +0 -6
- data/test/rails_app/app/active_record/shim.rb +0 -2
- data/test/rails_app/app/active_record/user.rb +0 -6
- data/test/rails_app/app/active_record/user_on_engine.rb +0 -7
- data/test/rails_app/app/active_record/user_on_main_app.rb +0 -7
- data/test/rails_app/app/active_record/user_without_email.rb +0 -8
- data/test/rails_app/app/controllers/admins/sessions_controller.rb +0 -6
- data/test/rails_app/app/controllers/admins_controller.rb +0 -6
- data/test/rails_app/app/controllers/application_controller.rb +0 -12
- data/test/rails_app/app/controllers/application_with_fake_engine.rb +0 -30
- data/test/rails_app/app/controllers/custom/registrations_controller.rb +0 -31
- data/test/rails_app/app/controllers/home_controller.rb +0 -25
- data/test/rails_app/app/controllers/publisher/registrations_controller.rb +0 -2
- data/test/rails_app/app/controllers/publisher/sessions_controller.rb +0 -2
- data/test/rails_app/app/controllers/users/omniauth_callbacks_controller.rb +0 -14
- data/test/rails_app/app/controllers/users_controller.rb +0 -31
- data/test/rails_app/app/helpers/application_helper.rb +0 -3
- data/test/rails_app/app/mailers/users/from_proc_mailer.rb +0 -3
- data/test/rails_app/app/mailers/users/mailer.rb +0 -3
- data/test/rails_app/app/mailers/users/reply_to_mailer.rb +0 -4
- data/test/rails_app/app/mongoid/admin.rb +0 -29
- data/test/rails_app/app/mongoid/shim.rb +0 -23
- data/test/rails_app/app/mongoid/user.rb +0 -39
- data/test/rails_app/app/mongoid/user_on_engine.rb +0 -39
- data/test/rails_app/app/mongoid/user_on_main_app.rb +0 -39
- data/test/rails_app/app/mongoid/user_without_email.rb +0 -33
- data/test/rails_app/app/views/admins/index.html.erb +0 -1
- data/test/rails_app/app/views/admins/sessions/new.html.erb +0 -2
- data/test/rails_app/app/views/home/admin_dashboard.html.erb +0 -1
- data/test/rails_app/app/views/home/index.html.erb +0 -1
- data/test/rails_app/app/views/home/join.html.erb +0 -1
- data/test/rails_app/app/views/home/private.html.erb +0 -1
- data/test/rails_app/app/views/home/user_dashboard.html.erb +0 -1
- data/test/rails_app/app/views/layouts/application.html.erb +0 -24
- data/test/rails_app/app/views/users/edit_form.html.erb +0 -1
- data/test/rails_app/app/views/users/index.html.erb +0 -1
- data/test/rails_app/app/views/users/mailer/confirmation_instructions.erb +0 -1
- data/test/rails_app/app/views/users/sessions/new.html.erb +0 -1
- data/test/rails_app/bin/bundle +0 -3
- data/test/rails_app/bin/rails +0 -4
- data/test/rails_app/bin/rake +0 -4
- data/test/rails_app/config/application.rb +0 -40
- data/test/rails_app/config/boot.rb +0 -14
- data/test/rails_app/config/database.yml +0 -18
- data/test/rails_app/config/environment.rb +0 -5
- data/test/rails_app/config/environments/development.rb +0 -30
- data/test/rails_app/config/environments/production.rb +0 -84
- data/test/rails_app/config/environments/test.rb +0 -41
- data/test/rails_app/config/initializers/backtrace_silencers.rb +0 -7
- data/test/rails_app/config/initializers/devise.rb +0 -180
- data/test/rails_app/config/initializers/inflections.rb +0 -2
- data/test/rails_app/config/initializers/secret_token.rb +0 -8
- data/test/rails_app/config/initializers/session_store.rb +0 -1
- data/test/rails_app/config/routes.rb +0 -125
- data/test/rails_app/config.ru +0 -4
- data/test/rails_app/db/migrate/20100401102949_create_tables.rb +0 -71
- data/test/rails_app/db/schema.rb +0 -55
- data/test/rails_app/lib/shared_admin.rb +0 -17
- data/test/rails_app/lib/shared_user.rb +0 -29
- data/test/rails_app/lib/shared_user_without_email.rb +0 -26
- data/test/rails_app/lib/shared_user_without_omniauth.rb +0 -13
- data/test/rails_app/public/404.html +0 -26
- data/test/rails_app/public/422.html +0 -26
- data/test/rails_app/public/500.html +0 -26
- data/test/rails_app/public/favicon.ico +0 -0
- data/test/rails_test.rb +0 -9
- data/test/routes_test.rb +0 -264
- data/test/support/action_controller/record_identifier.rb +0 -10
- data/test/support/assertions.rb +0 -39
- data/test/support/helpers.rb +0 -77
- data/test/support/integration.rb +0 -92
- data/test/support/locale/en.yml +0 -8
- data/test/support/mongoid.yml +0 -6
- data/test/support/webrat/integrations/rails.rb +0 -24
- data/test/test_helper.rb +0 -34
- data/test/test_helpers_test.rb +0 -178
- data/test/test_models.rb +0 -33
@@ -1,127 +0,0 @@
|
|
1
|
-
# encoding: UTF-8
|
2
|
-
require 'test_helper'
|
3
|
-
|
4
|
-
class ValidatableTest < ActiveSupport::TestCase
|
5
|
-
test 'should require email to be set' do
|
6
|
-
user = new_user(email: nil)
|
7
|
-
assert user.invalid?
|
8
|
-
assert user.errors[:email]
|
9
|
-
assert_equal 'can\'t be blank', user.errors[:email].join
|
10
|
-
end
|
11
|
-
|
12
|
-
test 'should require uniqueness of email if email has changed, allowing blank' do
|
13
|
-
existing_user = create_user
|
14
|
-
|
15
|
-
user = new_user(email: '')
|
16
|
-
assert user.invalid?
|
17
|
-
assert_no_match(/taken/, user.errors[:email].join)
|
18
|
-
|
19
|
-
user.email = existing_user.email
|
20
|
-
assert user.invalid?
|
21
|
-
assert_match(/taken/, user.errors[:email].join)
|
22
|
-
|
23
|
-
user.save(validate: false)
|
24
|
-
assert user.valid?
|
25
|
-
end
|
26
|
-
|
27
|
-
test 'should require correct email format if email has changed, allowing blank' do
|
28
|
-
user = new_user(email: '')
|
29
|
-
assert user.invalid?
|
30
|
-
assert_not_equal 'is invalid', user.errors[:email].join
|
31
|
-
|
32
|
-
%w{invalid_email_format 123 $$$ () ☃ bla@bla.}.each do |email|
|
33
|
-
user.email = email
|
34
|
-
assert user.invalid?, 'should be invalid with email ' << email
|
35
|
-
assert_equal 'is invalid', user.errors[:email].join
|
36
|
-
end
|
37
|
-
|
38
|
-
user.save(validate: false)
|
39
|
-
assert user.valid?
|
40
|
-
end
|
41
|
-
|
42
|
-
test 'should accept valid emails' do
|
43
|
-
%w(a.b.c@example.com test_mail@gmail.com any@any.net email@test.br 123@mail.test 1☃3@mail.test).each do |email|
|
44
|
-
user = new_user(email: email)
|
45
|
-
assert user.valid?, 'should be valid with email ' << email
|
46
|
-
assert_blank user.errors[:email]
|
47
|
-
end
|
48
|
-
end
|
49
|
-
|
50
|
-
test 'should require password to be set when creating a new record' do
|
51
|
-
user = new_user(password: '', password_confirmation: '')
|
52
|
-
assert user.invalid?
|
53
|
-
assert_equal 'can\'t be blank', user.errors[:password].join
|
54
|
-
end
|
55
|
-
|
56
|
-
test 'should require confirmation to be set when creating a new record' do
|
57
|
-
user = new_user(password: 'new_password', password_confirmation: 'blabla')
|
58
|
-
assert user.invalid?
|
59
|
-
|
60
|
-
if Devise.rails4?
|
61
|
-
assert_equal 'doesn\'t match Password', user.errors[:password_confirmation].join
|
62
|
-
else
|
63
|
-
assert_equal 'doesn\'t match confirmation', user.errors[:password].join
|
64
|
-
end
|
65
|
-
end
|
66
|
-
|
67
|
-
test 'should require password when updating/resetting password' do
|
68
|
-
user = create_user
|
69
|
-
|
70
|
-
user.password = ''
|
71
|
-
user.password_confirmation = ''
|
72
|
-
|
73
|
-
assert user.invalid?
|
74
|
-
assert_equal 'can\'t be blank', user.errors[:password].join
|
75
|
-
end
|
76
|
-
|
77
|
-
test 'should require confirmation when updating/resetting password' do
|
78
|
-
user = create_user
|
79
|
-
user.password_confirmation = 'another_password'
|
80
|
-
assert user.invalid?
|
81
|
-
|
82
|
-
if Devise.rails4?
|
83
|
-
assert_equal 'doesn\'t match Password', user.errors[:password_confirmation].join
|
84
|
-
else
|
85
|
-
assert_equal 'doesn\'t match confirmation', user.errors[:password].join
|
86
|
-
end
|
87
|
-
end
|
88
|
-
|
89
|
-
test 'should require a password with minimum of 7 characters' do
|
90
|
-
user = new_user(password: '12345', password_confirmation: '12345')
|
91
|
-
assert user.invalid?
|
92
|
-
assert_equal 'is too short (minimum is 7 characters)', user.errors[:password].join
|
93
|
-
end
|
94
|
-
|
95
|
-
test 'should require a password with maximum of 72 characters long' do
|
96
|
-
user = new_user(password: 'x'*73, password_confirmation: 'x'*73)
|
97
|
-
assert user.invalid?
|
98
|
-
assert_equal 'is too long (maximum is 72 characters)', user.errors[:password].join
|
99
|
-
end
|
100
|
-
|
101
|
-
test 'should not require password length when it\'s not changed' do
|
102
|
-
user = create_user.reload
|
103
|
-
user.password = user.password_confirmation = nil
|
104
|
-
assert user.valid?
|
105
|
-
|
106
|
-
user.password_confirmation = 'confirmation'
|
107
|
-
assert user.invalid?
|
108
|
-
assert_not (user.errors[:password].join =~ /is too long/)
|
109
|
-
end
|
110
|
-
|
111
|
-
test 'should complain about length even if password is not required' do
|
112
|
-
user = new_user(password: 'x'*73, password_confirmation: 'x'*73)
|
113
|
-
user.stubs(:password_required?).returns(false)
|
114
|
-
assert user.invalid?
|
115
|
-
assert_equal 'is too long (maximum is 72 characters)', user.errors[:password].join
|
116
|
-
end
|
117
|
-
|
118
|
-
test 'should not be included in objects with invalid API' do
|
119
|
-
assert_raise RuntimeError do
|
120
|
-
Class.new.send :include, Devise::Models::Validatable
|
121
|
-
end
|
122
|
-
end
|
123
|
-
|
124
|
-
test 'required_fields should be an empty array' do
|
125
|
-
assert_equal Devise::Models::Validatable.required_fields(User), []
|
126
|
-
end
|
127
|
-
end
|
data/test/models_test.rb
DELETED
@@ -1,153 +0,0 @@
|
|
1
|
-
require 'test_helper'
|
2
|
-
require 'test_models'
|
3
|
-
|
4
|
-
class ActiveRecordTest < ActiveSupport::TestCase
|
5
|
-
def include_module?(klass, mod)
|
6
|
-
klass.devise_modules.include?(mod) &&
|
7
|
-
klass.included_modules.include?(Devise::Models::const_get(mod.to_s.classify))
|
8
|
-
end
|
9
|
-
|
10
|
-
def assert_include_modules(klass, *modules)
|
11
|
-
modules.each do |mod|
|
12
|
-
assert include_module?(klass, mod)
|
13
|
-
end
|
14
|
-
|
15
|
-
(Devise::ALL - modules).each do |mod|
|
16
|
-
assert_not include_module?(klass, mod)
|
17
|
-
end
|
18
|
-
end
|
19
|
-
|
20
|
-
test 'can cherry pick modules' do
|
21
|
-
assert_include_modules Admin, :database_authenticatable, :registerable, :timeoutable, :recoverable, :lockable, :confirmable
|
22
|
-
end
|
23
|
-
|
24
|
-
test 'validations options are not applied too late' do
|
25
|
-
validators = WithValidation.validators_on :password
|
26
|
-
length = validators.find { |v| v.kind == :length }
|
27
|
-
assert_equal 2, length.options[:minimum]
|
28
|
-
assert_equal 6, length.options[:maximum]
|
29
|
-
end
|
30
|
-
|
31
|
-
test 'validations are applied just once' do
|
32
|
-
validators = Several.validators_on :password
|
33
|
-
assert_equal 1, validators.select{ |v| v.kind == :length }.length
|
34
|
-
end
|
35
|
-
|
36
|
-
test 'chosen modules are inheritable' do
|
37
|
-
assert_include_modules Inheritable, :database_authenticatable, :registerable, :timeoutable, :recoverable, :lockable, :confirmable
|
38
|
-
end
|
39
|
-
|
40
|
-
test 'order of module inclusion' do
|
41
|
-
correct_module_order = [:database_authenticatable, :recoverable, :registerable, :confirmable, :lockable, :timeoutable]
|
42
|
-
incorrect_module_order = [:database_authenticatable, :timeoutable, :registerable, :recoverable, :lockable, :confirmable]
|
43
|
-
|
44
|
-
assert_include_modules Admin, *incorrect_module_order
|
45
|
-
|
46
|
-
# get module constants from symbol list
|
47
|
-
module_constants = correct_module_order.collect { |mod| Devise::Models::const_get(mod.to_s.classify) }
|
48
|
-
|
49
|
-
# confirm that they adhere to the order in ALL
|
50
|
-
# get included modules, filter out the noise, and reverse the order
|
51
|
-
assert_equal module_constants, (Admin.included_modules & module_constants).reverse
|
52
|
-
end
|
53
|
-
|
54
|
-
test 'raise error on invalid module' do
|
55
|
-
assert_raise NameError do
|
56
|
-
# Mix valid an invalid modules.
|
57
|
-
Configurable.class_eval { devise :database_authenticatable, :doesnotexit }
|
58
|
-
end
|
59
|
-
end
|
60
|
-
|
61
|
-
test 'set a default value for stretches' do
|
62
|
-
assert_equal 15, Configurable.stretches
|
63
|
-
end
|
64
|
-
|
65
|
-
test 'set a default value for pepper' do
|
66
|
-
assert_equal 'abcdef', Configurable.pepper
|
67
|
-
end
|
68
|
-
|
69
|
-
test 'set a default value for allow_unconfirmed_access_for' do
|
70
|
-
assert_equal 5.days, Configurable.allow_unconfirmed_access_for
|
71
|
-
end
|
72
|
-
|
73
|
-
test 'set a default value for remember_for' do
|
74
|
-
assert_equal 7.days, Configurable.remember_for
|
75
|
-
end
|
76
|
-
|
77
|
-
test 'set a default value for timeout_in' do
|
78
|
-
assert_equal 15.minutes, Configurable.timeout_in
|
79
|
-
end
|
80
|
-
|
81
|
-
test 'set a default value for unlock_in' do
|
82
|
-
assert_equal 10.days, Configurable.unlock_in
|
83
|
-
end
|
84
|
-
|
85
|
-
test 'set null fields on migrations' do
|
86
|
-
# Ignore email sending since no email exists.
|
87
|
-
klass = Class.new(Admin) do
|
88
|
-
def send_devise_notification(*); end
|
89
|
-
end
|
90
|
-
|
91
|
-
klass.create!
|
92
|
-
end
|
93
|
-
end
|
94
|
-
|
95
|
-
module StubModelFilters
|
96
|
-
def stub_filter(name)
|
97
|
-
define_singleton_method(name) { |*| nil }
|
98
|
-
end
|
99
|
-
end
|
100
|
-
|
101
|
-
class CheckFieldsTest < ActiveSupport::TestCase
|
102
|
-
test 'checks if the class respond_to the required fields' do
|
103
|
-
Player = Class.new do
|
104
|
-
extend Devise::Models
|
105
|
-
extend StubModelFilters
|
106
|
-
|
107
|
-
stub_filter :before_validation
|
108
|
-
stub_filter :after_update
|
109
|
-
|
110
|
-
devise :database_authenticatable
|
111
|
-
|
112
|
-
attr_accessor :encrypted_password, :email
|
113
|
-
end
|
114
|
-
|
115
|
-
assert_nothing_raised Devise::Models::MissingAttribute do
|
116
|
-
Devise::Models.check_fields!(Player)
|
117
|
-
end
|
118
|
-
end
|
119
|
-
|
120
|
-
test 'raises Devise::Models::MissingAtrribute and shows the missing attribute if the class doesn\'t respond_to one of the attributes' do
|
121
|
-
Clown = Class.new do
|
122
|
-
extend Devise::Models
|
123
|
-
extend StubModelFilters
|
124
|
-
|
125
|
-
stub_filter :before_validation
|
126
|
-
stub_filter :after_update
|
127
|
-
|
128
|
-
devise :database_authenticatable
|
129
|
-
|
130
|
-
attr_accessor :encrypted_password
|
131
|
-
end
|
132
|
-
|
133
|
-
assert_raise_with_message Devise::Models::MissingAttribute, "The following attribute(s) is (are) missing on your model: email" do
|
134
|
-
Devise::Models.check_fields!(Clown)
|
135
|
-
end
|
136
|
-
end
|
137
|
-
|
138
|
-
test 'raises Devise::Models::MissingAtrribute with all the missing attributes if there is more than one' do
|
139
|
-
Magician = Class.new do
|
140
|
-
extend Devise::Models
|
141
|
-
extend StubModelFilters
|
142
|
-
|
143
|
-
stub_filter :before_validation
|
144
|
-
stub_filter :after_update
|
145
|
-
|
146
|
-
devise :database_authenticatable
|
147
|
-
end
|
148
|
-
|
149
|
-
assert_raise_with_message Devise::Models::MissingAttribute, "The following attribute(s) is (are) missing on your model: encrypted_password, email" do
|
150
|
-
Devise::Models.check_fields!(Magician)
|
151
|
-
end
|
152
|
-
end
|
153
|
-
end
|
@@ -1,57 +0,0 @@
|
|
1
|
-
require 'test_helper'
|
2
|
-
|
3
|
-
class OmniAuthConfigTest < ActiveSupport::TestCase
|
4
|
-
class MyStrategy
|
5
|
-
include OmniAuth::Strategy
|
6
|
-
end
|
7
|
-
|
8
|
-
test 'strategy_name returns provider if no options given' do
|
9
|
-
config = Devise::OmniAuth::Config.new :facebook, [{}]
|
10
|
-
assert_equal :facebook, config.strategy_name
|
11
|
-
end
|
12
|
-
|
13
|
-
test 'strategy_name returns provider if no name option are given' do
|
14
|
-
config = Devise::OmniAuth::Config.new :facebook, [{ other: :option }]
|
15
|
-
assert_equal :facebook, config.strategy_name
|
16
|
-
end
|
17
|
-
|
18
|
-
test 'returns name option when have a name' do
|
19
|
-
config = Devise::OmniAuth::Config.new :facebook, [{ name: :github }]
|
20
|
-
assert_equal :github, config.strategy_name
|
21
|
-
end
|
22
|
-
|
23
|
-
test "finds contrib strategies" do
|
24
|
-
config = Devise::OmniAuth::Config.new :facebook, [{}]
|
25
|
-
assert_equal OmniAuth::Strategies::Facebook, config.strategy_class
|
26
|
-
end
|
27
|
-
|
28
|
-
test "finds the strategy in OmniAuth's list by name" do
|
29
|
-
NamedTestStrategy = Class.new
|
30
|
-
NamedTestStrategy.send :include, OmniAuth::Strategy
|
31
|
-
NamedTestStrategy.option :name, :the_one
|
32
|
-
|
33
|
-
config = Devise::OmniAuth::Config.new :the_one, [{}]
|
34
|
-
assert_equal NamedTestStrategy, config.strategy_class
|
35
|
-
end
|
36
|
-
|
37
|
-
test "finds the strategy in OmniAuth's list by class name" do
|
38
|
-
UnNamedTestStrategy = Class.new
|
39
|
-
UnNamedTestStrategy.send :include, OmniAuth::Strategy
|
40
|
-
|
41
|
-
config = Devise::OmniAuth::Config.new :un_named_test_strategy, [{}]
|
42
|
-
assert_equal UnNamedTestStrategy, config.strategy_class
|
43
|
-
end
|
44
|
-
|
45
|
-
test 'raises an error if strategy cannot be found' do
|
46
|
-
config = Devise::OmniAuth::Config.new :my_other_strategy, [{}]
|
47
|
-
assert_raise Devise::OmniAuth::StrategyNotFound do
|
48
|
-
config.strategy_class
|
49
|
-
end
|
50
|
-
end
|
51
|
-
|
52
|
-
test 'allows the user to define a custom require path' do
|
53
|
-
config = Devise::OmniAuth::Config.new :my_strategy, [{strategy_class: MyStrategy}]
|
54
|
-
config_class = config.strategy_class
|
55
|
-
assert_equal MyStrategy, config_class
|
56
|
-
end
|
57
|
-
end
|
@@ -1,54 +0,0 @@
|
|
1
|
-
require 'test_helper'
|
2
|
-
|
3
|
-
class OmniAuthRoutesTest < ActionController::TestCase
|
4
|
-
ExpectedUrlGeneratiorError = Devise.rails4? ?
|
5
|
-
ActionController::UrlGenerationError : ActionController::RoutingError
|
6
|
-
|
7
|
-
tests ApplicationController
|
8
|
-
|
9
|
-
def assert_path(action, provider, with_param=true)
|
10
|
-
# Resource param
|
11
|
-
assert_equal @controller.send(action, :user, provider),
|
12
|
-
@controller.send("user_#{action}", provider)
|
13
|
-
|
14
|
-
# With an object
|
15
|
-
assert_equal @controller.send(action, User.new, provider),
|
16
|
-
@controller.send("user_#{action}", provider)
|
17
|
-
|
18
|
-
if with_param
|
19
|
-
# Default url params
|
20
|
-
assert_equal @controller.send(action, :user, provider, param: 123),
|
21
|
-
@controller.send("user_#{action}", provider, param: 123)
|
22
|
-
end
|
23
|
-
end
|
24
|
-
|
25
|
-
test 'should alias omniauth_callback to mapped user auth_callback' do
|
26
|
-
assert_path :omniauth_callback_path, :facebook
|
27
|
-
end
|
28
|
-
|
29
|
-
test 'should alias omniauth_authorize to mapped user auth_authorize' do
|
30
|
-
assert_path :omniauth_authorize_path, :facebook, false
|
31
|
-
end
|
32
|
-
|
33
|
-
test 'should generate authorization path' do
|
34
|
-
assert_match "/users/auth/facebook", @controller.omniauth_authorize_path(:user, :facebook)
|
35
|
-
|
36
|
-
assert_raise ExpectedUrlGeneratiorError do
|
37
|
-
@controller.omniauth_authorize_path(:user, :github)
|
38
|
-
end
|
39
|
-
end
|
40
|
-
|
41
|
-
test 'should generate authorization path for named open_id omniauth' do
|
42
|
-
assert_match "/users/auth/google", @controller.omniauth_authorize_path(:user, :google)
|
43
|
-
end
|
44
|
-
|
45
|
-
test 'should generate authorization path with params' do
|
46
|
-
assert_match "/users/auth/openid?openid_url=http%3A%2F%2Fyahoo.com",
|
47
|
-
@controller.omniauth_authorize_path(:user, :openid, openid_url: "http://yahoo.com")
|
48
|
-
end
|
49
|
-
|
50
|
-
test 'should not add a "?" if no param was sent' do
|
51
|
-
assert_equal "/users/auth/openid",
|
52
|
-
@controller.omniauth_authorize_path(:user, :openid)
|
53
|
-
end
|
54
|
-
end
|
data/test/orm/active_record.rb
DELETED
@@ -1,10 +0,0 @@
|
|
1
|
-
ActiveRecord::Migration.verbose = false
|
2
|
-
ActiveRecord::Base.logger = Logger.new(nil)
|
3
|
-
ActiveRecord::Base.include_root_in_json = true
|
4
|
-
|
5
|
-
ActiveRecord::Migrator.migrate(File.expand_path("../../rails_app/db/migrate/", __FILE__))
|
6
|
-
|
7
|
-
class ActiveSupport::TestCase
|
8
|
-
self.use_transactional_fixtures = true
|
9
|
-
self.use_instantiated_fixtures = false
|
10
|
-
end
|
data/test/orm/mongoid.rb
DELETED
@@ -1,81 +0,0 @@
|
|
1
|
-
require 'test_helper'
|
2
|
-
require 'devise/parameter_sanitizer'
|
3
|
-
|
4
|
-
class BaseSanitizerTest < ActiveSupport::TestCase
|
5
|
-
def sanitizer(params)
|
6
|
-
Devise::BaseSanitizer.new(User, :user, params)
|
7
|
-
end
|
8
|
-
|
9
|
-
test 'returns chosen params' do
|
10
|
-
sanitizer = sanitizer(user: { "email" => "jose" })
|
11
|
-
assert_equal({ "email" => "jose" }, sanitizer.sanitize(:sign_in))
|
12
|
-
end
|
13
|
-
end
|
14
|
-
|
15
|
-
if defined?(ActionController::StrongParameters)
|
16
|
-
require 'active_model/forbidden_attributes_protection'
|
17
|
-
|
18
|
-
class ParameterSanitizerTest < ActiveSupport::TestCase
|
19
|
-
def sanitizer(params)
|
20
|
-
params = ActionController::Parameters.new(params)
|
21
|
-
Devise::ParameterSanitizer.new(User, :user, params)
|
22
|
-
end
|
23
|
-
|
24
|
-
test 'filters some parameters on sign in by default' do
|
25
|
-
sanitizer = sanitizer(user: { "email" => "jose", "password" => "invalid", "remember_me" => "1" })
|
26
|
-
assert_equal({ "email" => "jose", "password" => "invalid", "remember_me" => "1" }, sanitizer.sanitize(:sign_in))
|
27
|
-
end
|
28
|
-
|
29
|
-
test 'handles auth keys as a hash' do
|
30
|
-
swap Devise, authentication_keys: {email: true} do
|
31
|
-
sanitizer = sanitizer(user: { "email" => "jose", "password" => "invalid" })
|
32
|
-
assert_equal({ "email" => "jose", "password" => "invalid" }, sanitizer.sanitize(:sign_in))
|
33
|
-
end
|
34
|
-
end
|
35
|
-
|
36
|
-
test 'filters some parameters on sign up by default' do
|
37
|
-
sanitizer = sanitizer(user: { "email" => "jose", "role" => "invalid" })
|
38
|
-
assert_equal({ "email" => "jose" }, sanitizer.sanitize(:sign_up))
|
39
|
-
end
|
40
|
-
|
41
|
-
test 'filters some parameters on account update by default' do
|
42
|
-
sanitizer = sanitizer(user: { "email" => "jose", "role" => "invalid" })
|
43
|
-
assert_equal({ "email" => "jose" }, sanitizer.sanitize(:account_update))
|
44
|
-
end
|
45
|
-
|
46
|
-
test 'allows custom hooks' do
|
47
|
-
sanitizer = sanitizer(user: { "email" => "jose", "password" => "invalid" })
|
48
|
-
sanitizer.for(:sign_in) { |user| user.permit(:email, :password) }
|
49
|
-
assert_equal({ "email" => "jose", "password" => "invalid" }, sanitizer.sanitize(:sign_in))
|
50
|
-
end
|
51
|
-
|
52
|
-
test 'adding multiple permitted parameters' do
|
53
|
-
sanitizer = sanitizer(user: { "email" => "jose", "username" => "jose1", "role" => "valid" })
|
54
|
-
sanitizer.for(:sign_in).concat([:username, :role])
|
55
|
-
assert_equal({ "email" => "jose", "username" => "jose1", "role" => "valid" }, sanitizer.sanitize(:sign_in))
|
56
|
-
end
|
57
|
-
|
58
|
-
test 'removing multiple default parameters' do
|
59
|
-
sanitizer = sanitizer(user: { "email" => "jose", "password" => "invalid", "remember_me" => "1" })
|
60
|
-
sanitizer.for(:sign_in).delete(:email)
|
61
|
-
sanitizer.for(:sign_in).delete(:password)
|
62
|
-
assert_equal({ "remember_me" => "1" }, sanitizer.sanitize(:sign_in))
|
63
|
-
end
|
64
|
-
|
65
|
-
test 'raises on unknown hooks' do
|
66
|
-
sanitizer = sanitizer(user: { "email" => "jose", "password" => "invalid" })
|
67
|
-
assert_raise NotImplementedError do
|
68
|
-
sanitizer.sanitize(:unknown)
|
69
|
-
end
|
70
|
-
end
|
71
|
-
|
72
|
-
test 'passes parameters to filter as arguments to sanitizer' do
|
73
|
-
params = {user: stub}
|
74
|
-
sanitizer = Devise::ParameterSanitizer.new(User, :user, params)
|
75
|
-
|
76
|
-
params[:user].expects(:permit).with(kind_of(Symbol), kind_of(Symbol), kind_of(Symbol))
|
77
|
-
|
78
|
-
sanitizer.sanitize(:sign_in)
|
79
|
-
end
|
80
|
-
end
|
81
|
-
end
|
data/test/rails_app/Rakefile
DELETED
@@ -1,12 +0,0 @@
|
|
1
|
-
# Filters added to this controller apply to all controllers in the application.
|
2
|
-
# Likewise, all the methods added will be available for all controllers.
|
3
|
-
|
4
|
-
class ApplicationController < ActionController::Base
|
5
|
-
protect_from_forgery
|
6
|
-
before_filter :current_user, unless: :devise_controller?
|
7
|
-
before_filter :authenticate_user!, if: :devise_controller?
|
8
|
-
respond_to *Mime::SET.map(&:to_sym)
|
9
|
-
|
10
|
-
devise_group :commenter, contains: [:user, :admin]
|
11
|
-
end
|
12
|
-
|
@@ -1,30 +0,0 @@
|
|
1
|
-
class ApplicationWithFakeEngine < ApplicationController
|
2
|
-
private
|
3
|
-
|
4
|
-
helper_method :fake_engine
|
5
|
-
def fake_engine
|
6
|
-
@fake_engine ||= FakeEngine.new
|
7
|
-
end
|
8
|
-
end
|
9
|
-
|
10
|
-
class FakeEngine
|
11
|
-
def user_on_engine_confirmation_path
|
12
|
-
'/user_on_engine/confirmation'
|
13
|
-
end
|
14
|
-
|
15
|
-
def new_user_on_engine_session_path
|
16
|
-
'/user_on_engine/confirmation/new'
|
17
|
-
end
|
18
|
-
|
19
|
-
def new_user_on_engine_registration_path
|
20
|
-
'/user_on_engine/registration/new'
|
21
|
-
end
|
22
|
-
|
23
|
-
def new_user_on_engine_password_path
|
24
|
-
'/user_on_engine/password/new'
|
25
|
-
end
|
26
|
-
|
27
|
-
def new_user_on_engine_unlock_path
|
28
|
-
'/user_on_engine/unlock/new'
|
29
|
-
end
|
30
|
-
end
|
@@ -1,31 +0,0 @@
|
|
1
|
-
class Custom::RegistrationsController < Devise::RegistrationsController
|
2
|
-
def new
|
3
|
-
super do |resource|
|
4
|
-
@new_block_called = true
|
5
|
-
end
|
6
|
-
end
|
7
|
-
|
8
|
-
def create
|
9
|
-
super do |resource|
|
10
|
-
@create_block_called = true
|
11
|
-
end
|
12
|
-
end
|
13
|
-
|
14
|
-
def update
|
15
|
-
super do |resource|
|
16
|
-
@update_block_called = true
|
17
|
-
end
|
18
|
-
end
|
19
|
-
|
20
|
-
def create_block_called?
|
21
|
-
@create_block_called == true
|
22
|
-
end
|
23
|
-
|
24
|
-
def update_block_called?
|
25
|
-
@update_block_called == true
|
26
|
-
end
|
27
|
-
|
28
|
-
def new_block_called?
|
29
|
-
@new_block_called == true
|
30
|
-
end
|
31
|
-
end
|
@@ -1,25 +0,0 @@
|
|
1
|
-
class HomeController < ApplicationController
|
2
|
-
def index
|
3
|
-
end
|
4
|
-
|
5
|
-
def private
|
6
|
-
end
|
7
|
-
|
8
|
-
def user_dashboard
|
9
|
-
end
|
10
|
-
|
11
|
-
def admin_dashboard
|
12
|
-
end
|
13
|
-
|
14
|
-
def join
|
15
|
-
end
|
16
|
-
|
17
|
-
def set
|
18
|
-
session["devise.foo_bar"] = "something"
|
19
|
-
head :ok
|
20
|
-
end
|
21
|
-
|
22
|
-
def unauthenticated
|
23
|
-
render text: "unauthenticated", status: :unauthorized
|
24
|
-
end
|
25
|
-
end
|