devise 4.1.1 → 4.8.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (255) hide show
  1. checksums.yaml +5 -5
  2. data/CHANGELOG.md +224 -4
  3. data/MIT-LICENSE +2 -1
  4. data/README.md +275 -90
  5. data/app/controllers/devise/confirmations_controller.rb +2 -0
  6. data/app/controllers/devise/omniauth_callbacks_controller.rb +7 -5
  7. data/app/controllers/devise/passwords_controller.rb +3 -0
  8. data/app/controllers/devise/registrations_controller.rb +34 -13
  9. data/app/controllers/devise/sessions_controller.rb +3 -1
  10. data/app/controllers/devise/unlocks_controller.rb +2 -0
  11. data/app/controllers/devise_controller.rb +5 -3
  12. data/app/helpers/devise_helper.rb +23 -18
  13. data/app/mailers/devise/mailer.rb +10 -4
  14. data/app/views/devise/confirmations/new.html.erb +2 -2
  15. data/app/views/devise/mailer/email_changed.html.erb +7 -0
  16. data/app/views/devise/passwords/edit.html.erb +3 -3
  17. data/app/views/devise/passwords/new.html.erb +2 -2
  18. data/app/views/devise/registrations/edit.html.erb +9 -5
  19. data/app/views/devise/registrations/new.html.erb +4 -4
  20. data/app/views/devise/sessions/new.html.erb +4 -4
  21. data/app/views/devise/shared/_error_messages.html.erb +15 -0
  22. data/app/views/devise/shared/_links.html.erb +8 -8
  23. data/app/views/devise/unlocks/new.html.erb +2 -2
  24. data/config/locales/en.yml +5 -2
  25. data/lib/devise.rb +39 -17
  26. data/lib/devise/controllers/helpers.rb +22 -9
  27. data/lib/devise/controllers/rememberable.rb +3 -1
  28. data/lib/devise/controllers/scoped_views.rb +2 -0
  29. data/lib/devise/controllers/sign_in_out.rb +39 -14
  30. data/lib/devise/controllers/store_location.rb +25 -7
  31. data/lib/devise/controllers/url_helpers.rb +3 -1
  32. data/lib/devise/delegator.rb +2 -0
  33. data/lib/devise/encryptor.rb +2 -0
  34. data/lib/devise/failure_app.rb +63 -33
  35. data/lib/devise/hooks/activatable.rb +2 -0
  36. data/lib/devise/hooks/csrf_cleaner.rb +2 -0
  37. data/lib/devise/hooks/forgetable.rb +2 -0
  38. data/lib/devise/hooks/lockable.rb +4 -2
  39. data/lib/devise/hooks/proxy.rb +3 -1
  40. data/lib/devise/hooks/rememberable.rb +2 -0
  41. data/lib/devise/hooks/timeoutable.rb +4 -2
  42. data/lib/devise/hooks/trackable.rb +2 -0
  43. data/lib/devise/mailers/helpers.rb +6 -3
  44. data/lib/devise/mapping.rb +3 -1
  45. data/lib/devise/models.rb +3 -1
  46. data/lib/devise/models/authenticatable.rb +63 -37
  47. data/lib/devise/models/confirmable.rb +79 -22
  48. data/lib/devise/models/database_authenticatable.rb +86 -17
  49. data/lib/devise/models/lockable.rb +17 -3
  50. data/lib/devise/models/omniauthable.rb +2 -0
  51. data/lib/devise/models/recoverable.rb +32 -20
  52. data/lib/devise/models/registerable.rb +4 -0
  53. data/lib/devise/models/rememberable.rb +5 -3
  54. data/lib/devise/models/timeoutable.rb +2 -0
  55. data/lib/devise/models/trackable.rb +15 -1
  56. data/lib/devise/models/validatable.rb +10 -3
  57. data/lib/devise/modules.rb +2 -0
  58. data/lib/devise/omniauth.rb +4 -5
  59. data/lib/devise/omniauth/config.rb +2 -0
  60. data/lib/devise/omniauth/url_helpers.rb +2 -51
  61. data/lib/devise/orm/active_record.rb +5 -1
  62. data/lib/devise/orm/mongoid.rb +6 -2
  63. data/lib/devise/parameter_filter.rb +4 -0
  64. data/lib/devise/parameter_sanitizer.rb +15 -56
  65. data/lib/devise/rails.rb +6 -6
  66. data/lib/devise/rails/deprecated_constant_accessor.rb +39 -0
  67. data/lib/devise/rails/routes.rb +9 -7
  68. data/lib/devise/rails/warden_compat.rb +2 -0
  69. data/lib/devise/secret_key_finder.rb +27 -0
  70. data/lib/devise/strategies/authenticatable.rb +3 -1
  71. data/lib/devise/strategies/base.rb +2 -0
  72. data/lib/devise/strategies/database_authenticatable.rb +8 -1
  73. data/lib/devise/strategies/rememberable.rb +2 -0
  74. data/lib/devise/test/controller_helpers.rb +167 -0
  75. data/lib/devise/test/integration_helpers.rb +63 -0
  76. data/lib/devise/test_helpers.rb +7 -129
  77. data/lib/devise/time_inflector.rb +2 -0
  78. data/lib/devise/token_generator.rb +2 -0
  79. data/lib/devise/version.rb +3 -1
  80. data/lib/generators/active_record/devise_generator.rb +40 -12
  81. data/lib/generators/active_record/templates/migration.rb +3 -1
  82. data/lib/generators/active_record/templates/migration_existing.rb +2 -0
  83. data/lib/generators/devise/controllers_generator.rb +3 -1
  84. data/lib/generators/devise/devise_generator.rb +5 -3
  85. data/lib/generators/devise/install_generator.rb +3 -5
  86. data/lib/generators/devise/orm_helpers.rb +9 -3
  87. data/lib/generators/devise/views_generator.rb +8 -9
  88. data/lib/generators/mongoid/devise_generator.rb +7 -5
  89. data/lib/generators/templates/README +9 -8
  90. data/lib/generators/templates/controllers/confirmations_controller.rb +2 -0
  91. data/lib/generators/templates/controllers/omniauth_callbacks_controller.rb +3 -1
  92. data/lib/generators/templates/controllers/passwords_controller.rb +2 -0
  93. data/lib/generators/templates/controllers/registrations_controller.rb +4 -2
  94. data/lib/generators/templates/controllers/sessions_controller.rb +3 -1
  95. data/lib/generators/templates/controllers/unlocks_controller.rb +2 -0
  96. data/lib/generators/templates/devise.rb +49 -6
  97. data/lib/generators/templates/markerb/email_changed.markerb +7 -0
  98. data/lib/generators/templates/markerb/password_change.markerb +2 -2
  99. data/lib/generators/templates/simple_form_for/confirmations/new.html.erb +5 -1
  100. data/lib/generators/templates/simple_form_for/passwords/edit.html.erb +10 -2
  101. data/lib/generators/templates/simple_form_for/passwords/new.html.erb +4 -1
  102. data/lib/generators/templates/simple_form_for/registrations/edit.html.erb +11 -3
  103. data/lib/generators/templates/simple_form_for/registrations/new.html.erb +11 -3
  104. data/lib/generators/templates/simple_form_for/sessions/new.html.erb +7 -2
  105. data/lib/generators/templates/simple_form_for/unlocks/new.html.erb +4 -1
  106. metadata +16 -297
  107. data/.gitignore +0 -10
  108. data/.travis.yml +0 -44
  109. data/.yardopts +0 -9
  110. data/CODE_OF_CONDUCT.md +0 -22
  111. data/CONTRIBUTING.md +0 -16
  112. data/Gemfile +0 -30
  113. data/Gemfile.lock +0 -182
  114. data/Rakefile +0 -36
  115. data/bin/test +0 -13
  116. data/devise.gemspec +0 -26
  117. data/devise.png +0 -0
  118. data/gemfiles/Gemfile.rails-4.1-stable +0 -30
  119. data/gemfiles/Gemfile.rails-4.1-stable.lock +0 -170
  120. data/gemfiles/Gemfile.rails-4.2-stable +0 -30
  121. data/gemfiles/Gemfile.rails-4.2-stable.lock +0 -192
  122. data/gemfiles/Gemfile.rails-5.0-beta +0 -37
  123. data/gemfiles/Gemfile.rails-5.0-beta.lock +0 -199
  124. data/test/controllers/custom_registrations_controller_test.rb +0 -40
  125. data/test/controllers/custom_strategy_test.rb +0 -64
  126. data/test/controllers/helper_methods_test.rb +0 -22
  127. data/test/controllers/helpers_test.rb +0 -316
  128. data/test/controllers/inherited_controller_i18n_messages_test.rb +0 -51
  129. data/test/controllers/internal_helpers_test.rb +0 -127
  130. data/test/controllers/load_hooks_controller_test.rb +0 -19
  131. data/test/controllers/passwords_controller_test.rb +0 -32
  132. data/test/controllers/sessions_controller_test.rb +0 -106
  133. data/test/controllers/url_helpers_test.rb +0 -65
  134. data/test/delegator_test.rb +0 -19
  135. data/test/devise_test.rb +0 -107
  136. data/test/failure_app_test.rb +0 -320
  137. data/test/generators/active_record_generator_test.rb +0 -83
  138. data/test/generators/controllers_generator_test.rb +0 -48
  139. data/test/generators/devise_generator_test.rb +0 -39
  140. data/test/generators/install_generator_test.rb +0 -24
  141. data/test/generators/mongoid_generator_test.rb +0 -23
  142. data/test/generators/views_generator_test.rb +0 -103
  143. data/test/helpers/devise_helper_test.rb +0 -49
  144. data/test/integration/authenticatable_test.rb +0 -698
  145. data/test/integration/confirmable_test.rb +0 -324
  146. data/test/integration/database_authenticatable_test.rb +0 -95
  147. data/test/integration/http_authenticatable_test.rb +0 -106
  148. data/test/integration/lockable_test.rb +0 -240
  149. data/test/integration/omniauthable_test.rb +0 -135
  150. data/test/integration/recoverable_test.rb +0 -347
  151. data/test/integration/registerable_test.rb +0 -357
  152. data/test/integration/rememberable_test.rb +0 -211
  153. data/test/integration/timeoutable_test.rb +0 -184
  154. data/test/integration/trackable_test.rb +0 -92
  155. data/test/mailers/confirmation_instructions_test.rb +0 -115
  156. data/test/mailers/reset_password_instructions_test.rb +0 -96
  157. data/test/mailers/unlock_instructions_test.rb +0 -91
  158. data/test/mapping_test.rb +0 -134
  159. data/test/models/authenticatable_test.rb +0 -23
  160. data/test/models/confirmable_test.rb +0 -511
  161. data/test/models/database_authenticatable_test.rb +0 -269
  162. data/test/models/lockable_test.rb +0 -350
  163. data/test/models/omniauthable_test.rb +0 -7
  164. data/test/models/recoverable_test.rb +0 -251
  165. data/test/models/registerable_test.rb +0 -7
  166. data/test/models/rememberable_test.rb +0 -169
  167. data/test/models/serializable_test.rb +0 -49
  168. data/test/models/timeoutable_test.rb +0 -51
  169. data/test/models/trackable_test.rb +0 -41
  170. data/test/models/validatable_test.rb +0 -119
  171. data/test/models_test.rb +0 -153
  172. data/test/omniauth/config_test.rb +0 -57
  173. data/test/omniauth/url_helpers_test.rb +0 -51
  174. data/test/orm/active_record.rb +0 -17
  175. data/test/orm/mongoid.rb +0 -13
  176. data/test/parameter_sanitizer_test.rb +0 -131
  177. data/test/rails_app/Rakefile +0 -6
  178. data/test/rails_app/app/active_record/admin.rb +0 -6
  179. data/test/rails_app/app/active_record/shim.rb +0 -2
  180. data/test/rails_app/app/active_record/user.rb +0 -7
  181. data/test/rails_app/app/active_record/user_on_engine.rb +0 -7
  182. data/test/rails_app/app/active_record/user_on_main_app.rb +0 -7
  183. data/test/rails_app/app/active_record/user_without_email.rb +0 -8
  184. data/test/rails_app/app/controllers/admins/sessions_controller.rb +0 -6
  185. data/test/rails_app/app/controllers/admins_controller.rb +0 -6
  186. data/test/rails_app/app/controllers/application_controller.rb +0 -11
  187. data/test/rails_app/app/controllers/application_with_fake_engine.rb +0 -30
  188. data/test/rails_app/app/controllers/custom/registrations_controller.rb +0 -31
  189. data/test/rails_app/app/controllers/home_controller.rb +0 -29
  190. data/test/rails_app/app/controllers/publisher/registrations_controller.rb +0 -2
  191. data/test/rails_app/app/controllers/publisher/sessions_controller.rb +0 -2
  192. data/test/rails_app/app/controllers/users/omniauth_callbacks_controller.rb +0 -14
  193. data/test/rails_app/app/controllers/users_controller.rb +0 -31
  194. data/test/rails_app/app/helpers/application_helper.rb +0 -3
  195. data/test/rails_app/app/mailers/users/from_proc_mailer.rb +0 -3
  196. data/test/rails_app/app/mailers/users/mailer.rb +0 -3
  197. data/test/rails_app/app/mailers/users/reply_to_mailer.rb +0 -4
  198. data/test/rails_app/app/mongoid/admin.rb +0 -29
  199. data/test/rails_app/app/mongoid/shim.rb +0 -23
  200. data/test/rails_app/app/mongoid/user.rb +0 -39
  201. data/test/rails_app/app/mongoid/user_on_engine.rb +0 -39
  202. data/test/rails_app/app/mongoid/user_on_main_app.rb +0 -39
  203. data/test/rails_app/app/mongoid/user_without_email.rb +0 -33
  204. data/test/rails_app/app/views/admins/index.html.erb +0 -1
  205. data/test/rails_app/app/views/admins/sessions/new.html.erb +0 -2
  206. data/test/rails_app/app/views/home/admin_dashboard.html.erb +0 -1
  207. data/test/rails_app/app/views/home/index.html.erb +0 -1
  208. data/test/rails_app/app/views/home/join.html.erb +0 -1
  209. data/test/rails_app/app/views/home/private.html.erb +0 -1
  210. data/test/rails_app/app/views/home/user_dashboard.html.erb +0 -1
  211. data/test/rails_app/app/views/layouts/application.html.erb +0 -24
  212. data/test/rails_app/app/views/users/edit_form.html.erb +0 -1
  213. data/test/rails_app/app/views/users/index.html.erb +0 -1
  214. data/test/rails_app/app/views/users/mailer/confirmation_instructions.erb +0 -1
  215. data/test/rails_app/app/views/users/sessions/new.html.erb +0 -1
  216. data/test/rails_app/bin/bundle +0 -3
  217. data/test/rails_app/bin/rails +0 -4
  218. data/test/rails_app/bin/rake +0 -4
  219. data/test/rails_app/config.ru +0 -4
  220. data/test/rails_app/config/application.rb +0 -44
  221. data/test/rails_app/config/boot.rb +0 -14
  222. data/test/rails_app/config/database.yml +0 -18
  223. data/test/rails_app/config/environment.rb +0 -5
  224. data/test/rails_app/config/environments/development.rb +0 -30
  225. data/test/rails_app/config/environments/production.rb +0 -84
  226. data/test/rails_app/config/environments/test.rb +0 -46
  227. data/test/rails_app/config/initializers/backtrace_silencers.rb +0 -7
  228. data/test/rails_app/config/initializers/devise.rb +0 -180
  229. data/test/rails_app/config/initializers/inflections.rb +0 -2
  230. data/test/rails_app/config/initializers/secret_token.rb +0 -3
  231. data/test/rails_app/config/initializers/session_store.rb +0 -1
  232. data/test/rails_app/config/routes.rb +0 -126
  233. data/test/rails_app/db/migrate/20100401102949_create_tables.rb +0 -71
  234. data/test/rails_app/db/schema.rb +0 -55
  235. data/test/rails_app/lib/shared_admin.rb +0 -17
  236. data/test/rails_app/lib/shared_user.rb +0 -30
  237. data/test/rails_app/lib/shared_user_without_email.rb +0 -26
  238. data/test/rails_app/lib/shared_user_without_omniauth.rb +0 -13
  239. data/test/rails_app/public/404.html +0 -26
  240. data/test/rails_app/public/422.html +0 -26
  241. data/test/rails_app/public/500.html +0 -26
  242. data/test/rails_app/public/favicon.ico +0 -0
  243. data/test/rails_test.rb +0 -9
  244. data/test/routes_test.rb +0 -279
  245. data/test/support/action_controller/record_identifier.rb +0 -10
  246. data/test/support/assertions.rb +0 -39
  247. data/test/support/helpers.rb +0 -77
  248. data/test/support/http_method_compatibility.rb +0 -51
  249. data/test/support/integration.rb +0 -92
  250. data/test/support/locale/en.yml +0 -8
  251. data/test/support/mongoid.yml +0 -6
  252. data/test/support/webrat/integrations/rails.rb +0 -33
  253. data/test/test_helper.rb +0 -34
  254. data/test/test_helpers_test.rb +0 -178
  255. data/test/test_models.rb +0 -33
@@ -1,40 +0,0 @@
1
- require 'test_helper'
2
-
3
- class CustomRegistrationsControllerTest < Devise::ControllerTestCase
4
- tests Custom::RegistrationsController
5
-
6
- include Devise::TestHelpers
7
-
8
- setup do
9
- request.env["devise.mapping"] = Devise.mappings[:user]
10
- @password = 'password'
11
- @user = create_user(password: @password, password_confirmation: @password).tap(&:confirm)
12
- end
13
-
14
- test "yield resource to block on create success" do
15
- post :create, params: { user: { email: "user@example.org", password: "password", password_confirmation: "password" } }
16
- assert @controller.create_block_called?, "create failed to yield resource to provided block"
17
- end
18
-
19
- test "yield resource to block on create failure" do
20
- post :create, params: { user: { } }
21
- assert @controller.create_block_called?, "create failed to yield resource to provided block"
22
- end
23
-
24
- test "yield resource to block on update success" do
25
- sign_in @user
26
- put :update, params: { user: { current_password: @password } }
27
- assert @controller.update_block_called?, "update failed to yield resource to provided block"
28
- end
29
-
30
- test "yield resource to block on update failure" do
31
- sign_in @user
32
- put :update, params: { user: { } }
33
- assert @controller.update_block_called?, "update failed to yield resource to provided block"
34
- end
35
-
36
- test "yield resource to block on new" do
37
- get :new
38
- assert @controller.new_block_called?, "new failed to yield resource to provided block"
39
- end
40
- end
@@ -1,64 +0,0 @@
1
- require 'test_helper'
2
- require 'ostruct'
3
- require 'warden/strategies/base'
4
- require 'devise/test_helpers'
5
-
6
- class CustomStrategyController < ActionController::Base
7
- def new
8
- warden.authenticate!(:custom_strategy)
9
- end
10
- end
11
-
12
- # These tests are to prove that a warden strategy can successfully
13
- # return a custom response, including a specific status code and
14
- # custom http response headers. This does work in production,
15
- # however, at the time of writing this, the Devise test helpers do
16
- # not recognise the custom response and proceed to calling the
17
- # Failure App. This makes it impossible to write tests for a
18
- # strategy that return a custom response with Devise.
19
- class CustomStrategy < Warden::Strategies::Base
20
- def authenticate!
21
- custom_headers = { "X-FOO" => "BAR" }
22
- response = Rack::Response.new("BAD REQUEST", 400, custom_headers)
23
- custom! response.finish
24
- end
25
- end
26
-
27
- class CustomStrategyTest < Devise::ControllerTestCase
28
- tests CustomStrategyController
29
-
30
- include Devise::TestHelpers
31
-
32
- setup do
33
- Warden::Strategies.add(:custom_strategy, CustomStrategy)
34
- end
35
-
36
- teardown do
37
- Warden::Strategies._strategies.delete(:custom_strategy)
38
- end
39
-
40
- test "custom strategy can return its own status code" do
41
- ret = get :new
42
-
43
- # check the returned rack array
44
- # assert ret.is_a?(Array)
45
- # assert_equal 400, ret.first
46
- assert ret.is_a?(ActionDispatch::TestResponse)
47
-
48
- # check the saved response as well. This is purely so that the response is available to the testing framework
49
- # for verification. In production, the above array would be delivered directly to Rack.
50
- assert_response 400
51
- end
52
-
53
- test "custom strategy can return custom headers" do
54
- ret = get :new
55
-
56
- # check the returned rack array
57
- # assert ret.is_a?(Array)
58
- # assert_equal ret.third['X-FOO'], 'BAR'
59
- assert ret.is_a?(ActionDispatch::TestResponse)
60
-
61
- # check the saved response headers as well.
62
- assert_equal response.headers['X-FOO'], 'BAR'
63
- end
64
- end
@@ -1,22 +0,0 @@
1
- require 'test_helper'
2
-
3
- class ApiController < ActionController::Metal
4
- include Devise::Controllers::Helpers
5
- end
6
-
7
- class HelperMethodsTest < Devise::ControllerTestCase
8
- tests ApiController
9
-
10
- test 'includes Devise::Controllers::Helpers' do
11
- assert_includes @controller.class.ancestors, Devise::Controllers::Helpers
12
- end
13
-
14
- test 'does not respond_to helper or helper_method' do
15
- refute_respond_to @controller.class, :helper
16
- refute_respond_to @controller.class, :helper_method
17
- end
18
-
19
- test 'defines methods like current_user' do
20
- assert_respond_to @controller, :current_user
21
- end
22
- end
@@ -1,316 +0,0 @@
1
- require 'test_helper'
2
- require 'ostruct'
3
-
4
- class ControllerAuthenticatableTest < Devise::ControllerTestCase
5
- tests ApplicationController
6
-
7
- def setup
8
- @mock_warden = OpenStruct.new
9
- @controller.request.env['warden'] = @mock_warden
10
- end
11
-
12
- test 'provide access to warden instance' do
13
- assert_equal @mock_warden, @controller.warden
14
- end
15
-
16
- test 'proxy signed_in?(scope) to authenticate?' do
17
- @mock_warden.expects(:authenticate?).with(scope: :my_scope)
18
- @controller.signed_in?(:my_scope)
19
- end
20
-
21
- test 'proxy signed_in?(nil) to authenticate?' do
22
- Devise.mappings.keys.each do |scope| # :user, :admin, :manager
23
- @mock_warden.expects(:authenticate?).with(scope: scope)
24
- end
25
- @controller.signed_in?
26
- end
27
-
28
- test 'proxy [group]_signed_in? to authenticate? with each scope' do
29
- [:user, :admin].each do |scope|
30
- @mock_warden.expects(:authenticate?).with(scope: scope).returns(false)
31
- end
32
- @controller.commenter_signed_in?
33
- end
34
-
35
- test 'proxy current_user to authenticate with user scope' do
36
- @mock_warden.expects(:authenticate).with(scope: :user)
37
- @controller.current_user
38
- end
39
-
40
- test 'proxy current_admin to authenticate with admin scope' do
41
- @mock_warden.expects(:authenticate).with(scope: :admin)
42
- @controller.current_admin
43
- end
44
-
45
- test 'proxy current_[group] to authenticate with each scope' do
46
- [:user, :admin].each do |scope|
47
- @mock_warden.expects(:authenticate).with(scope: scope).returns(nil)
48
- end
49
- @controller.current_commenter
50
- end
51
-
52
- test 'proxy current_[plural_group] to authenticate with each scope' do
53
- [:user, :admin].each do |scope|
54
- @mock_warden.expects(:authenticate).with(scope: scope)
55
- end
56
- @controller.current_commenters
57
- end
58
-
59
- test 'proxy current_publisher_account to authenticate with namespaced publisher account scope' do
60
- @mock_warden.expects(:authenticate).with(scope: :publisher_account)
61
- @controller.current_publisher_account
62
- end
63
-
64
- test 'proxy authenticate_user! to authenticate with user scope' do
65
- @mock_warden.expects(:authenticate!).with(scope: :user)
66
- @controller.authenticate_user!
67
- end
68
-
69
- test 'proxy authenticate_user! options to authenticate with user scope' do
70
- @mock_warden.expects(:authenticate!).with(scope: :user, recall: "foo")
71
- @controller.authenticate_user!(recall: "foo")
72
- end
73
-
74
- test 'proxy authenticate_admin! to authenticate with admin scope' do
75
- @mock_warden.expects(:authenticate!).with(scope: :admin)
76
- @controller.authenticate_admin!
77
- end
78
-
79
- test 'proxy authenticate_[group]! to authenticate!? with each scope' do
80
- [:user, :admin].each do |scope|
81
- @mock_warden.expects(:authenticate!).with(scope: scope)
82
- @mock_warden.expects(:authenticate?).with(scope: scope).returns(false)
83
- end
84
- @controller.authenticate_commenter!
85
- end
86
-
87
- test 'proxy authenticate_publisher_account! to authenticate with namespaced publisher account scope' do
88
- @mock_warden.expects(:authenticate!).with(scope: :publisher_account)
89
- @controller.authenticate_publisher_account!
90
- end
91
-
92
- test 'proxy user_signed_in? to authenticate with user scope' do
93
- @mock_warden.expects(:authenticate).with(scope: :user).returns("user")
94
- assert @controller.user_signed_in?
95
- end
96
-
97
- test 'proxy admin_signed_in? to authenticatewith admin scope' do
98
- @mock_warden.expects(:authenticate).with(scope: :admin)
99
- assert_not @controller.admin_signed_in?
100
- end
101
-
102
- test 'proxy publisher_account_signed_in? to authenticate with namespaced publisher account scope' do
103
- @mock_warden.expects(:authenticate).with(scope: :publisher_account)
104
- @controller.publisher_account_signed_in?
105
- end
106
-
107
- test 'proxy user_session to session scope in warden' do
108
- @mock_warden.expects(:authenticate).with(scope: :user).returns(true)
109
- @mock_warden.expects(:session).with(:user).returns({})
110
- @controller.user_session
111
- end
112
-
113
- test 'proxy admin_session to session scope in warden' do
114
- @mock_warden.expects(:authenticate).with(scope: :admin).returns(true)
115
- @mock_warden.expects(:session).with(:admin).returns({})
116
- @controller.admin_session
117
- end
118
-
119
- test 'proxy publisher_account_session from namespaced scope to session scope in warden' do
120
- @mock_warden.expects(:authenticate).with(scope: :publisher_account).returns(true)
121
- @mock_warden.expects(:session).with(:publisher_account).returns({})
122
- @controller.publisher_account_session
123
- end
124
-
125
- test 'sign in proxy to set_user on warden' do
126
- user = User.new
127
- @mock_warden.expects(:user).returns(nil)
128
- @mock_warden.expects(:set_user).with(user, scope: :user).returns(true)
129
- @controller.sign_in(:user, user)
130
- end
131
-
132
- test 'sign in accepts a resource as argument' do
133
- user = User.new
134
- @mock_warden.expects(:user).returns(nil)
135
- @mock_warden.expects(:set_user).with(user, scope: :user).returns(true)
136
- @controller.sign_in(user)
137
- end
138
-
139
- test 'does not sign in again if the user is already in' do
140
- user = User.new
141
- @mock_warden.expects(:user).returns(user)
142
- @mock_warden.expects(:set_user).never
143
- assert @controller.sign_in(user)
144
- end
145
-
146
- test 'sign in again when the user is already in only if force is given' do
147
- user = User.new
148
- @mock_warden.expects(:user).returns(user)
149
- @mock_warden.expects(:set_user).with(user, scope: :user).returns(true)
150
- @controller.sign_in(user, force: true)
151
- end
152
-
153
- test 'sign in accepts bypass as option' do
154
- user = User.new
155
- @mock_warden.expects(:session_serializer).returns(serializer = mock())
156
- serializer.expects(:store).with(user, :user)
157
- @controller.sign_in(user, bypass: true)
158
- end
159
-
160
- test 'sign out clears up any signed in user from all scopes' do
161
- user = User.new
162
- @mock_warden.expects(:user).times(Devise.mappings.size)
163
- @mock_warden.expects(:logout).with().returns(true)
164
- @controller.instance_variable_set(:@current_user, user)
165
- @controller.instance_variable_set(:@current_admin, user)
166
- @controller.sign_out
167
- assert_equal nil, @controller.instance_variable_get(:@current_user)
168
- assert_equal nil, @controller.instance_variable_get(:@current_admin)
169
- end
170
-
171
- test 'sign out logs out and clears up any signed in user by scope' do
172
- user = User.new
173
- @mock_warden.expects(:user).with(scope: :user, run_callbacks: false).returns(user)
174
- @mock_warden.expects(:logout).with(:user).returns(true)
175
- @mock_warden.expects(:clear_strategies_cache!).with(scope: :user).returns(true)
176
- @controller.instance_variable_set(:@current_user, user)
177
- @controller.sign_out(:user)
178
- assert_equal nil, @controller.instance_variable_get(:@current_user)
179
- end
180
-
181
- test 'sign out accepts a resource as argument' do
182
- @mock_warden.expects(:user).with(scope: :user, run_callbacks: false).returns(true)
183
- @mock_warden.expects(:logout).with(:user).returns(true)
184
- @mock_warden.expects(:clear_strategies_cache!).with(scope: :user).returns(true)
185
- @controller.sign_out(User.new)
186
- end
187
-
188
- test 'sign out without args proxy to sign out all scopes' do
189
- @mock_warden.expects(:user).times(Devise.mappings.size)
190
- @mock_warden.expects(:logout).with().returns(true)
191
- @mock_warden.expects(:clear_strategies_cache!).with().returns(true)
192
- @controller.sign_out
193
- end
194
-
195
- test 'sign out everybody proxy to logout on warden' do
196
- @mock_warden.expects(:user).times(Devise.mappings.size)
197
- @mock_warden.expects(:logout).with().returns(true)
198
- @controller.sign_out_all_scopes
199
- end
200
-
201
- test 'stored location for returns the location for a given scope' do
202
- assert_nil @controller.stored_location_for(:user)
203
- @controller.session[:"user_return_to"] = "/foo.bar"
204
- assert_equal "/foo.bar", @controller.stored_location_for(:user)
205
- end
206
-
207
- test 'stored location for accepts a resource as argument' do
208
- assert_nil @controller.stored_location_for(:user)
209
- @controller.session[:"user_return_to"] = "/foo.bar"
210
- assert_equal "/foo.bar", @controller.stored_location_for(User.new)
211
- end
212
-
213
- test 'stored location cleans information after reading' do
214
- @controller.session[:"user_return_to"] = "/foo.bar"
215
- assert_equal "/foo.bar", @controller.stored_location_for(:user)
216
- assert_nil @controller.session[:"user_return_to"]
217
- end
218
-
219
- test 'store location for stores a location to redirect back to' do
220
- assert_nil @controller.stored_location_for(:user)
221
- @controller.store_location_for(:user, "/foo.bar")
222
- assert_equal "/foo.bar", @controller.stored_location_for(:user)
223
- end
224
-
225
- test 'store bad location for stores a location to redirect back to' do
226
- assert_nil @controller.stored_location_for(:user)
227
- @controller.store_location_for(:user, "/foo.bar\">Carry")
228
- assert_nil @controller.stored_location_for(:user)
229
- end
230
-
231
- test 'store location for accepts a resource as argument' do
232
- @controller.store_location_for(User.new, "/foo.bar")
233
- assert_equal "/foo.bar", @controller.stored_location_for(User.new)
234
- end
235
-
236
- test 'store location for stores paths' do
237
- @controller.store_location_for(:user, "//host/foo.bar")
238
- assert_equal "/foo.bar", @controller.stored_location_for(:user)
239
- @controller.store_location_for(:user, "///foo.bar")
240
- assert_equal "/foo.bar", @controller.stored_location_for(:user)
241
- end
242
-
243
- test 'store location for stores query string' do
244
- @controller.store_location_for(:user, "/foo?bar=baz")
245
- assert_equal "/foo?bar=baz", @controller.stored_location_for(:user)
246
- end
247
-
248
- test 'store location for stores fragments' do
249
- @controller.store_location_for(:user, "/foo#bar")
250
- assert_equal "/foo#bar", @controller.stored_location_for(:user)
251
- end
252
-
253
- test 'after sign in path defaults to root path if none by was specified for the given scope' do
254
- assert_equal root_path, @controller.after_sign_in_path_for(:user)
255
- end
256
-
257
- test 'after sign in path defaults to the scoped root path' do
258
- assert_equal admin_root_path, @controller.after_sign_in_path_for(:admin)
259
- end
260
-
261
- test 'after sign out path defaults to the root path' do
262
- assert_equal root_path, @controller.after_sign_out_path_for(:admin)
263
- assert_equal root_path, @controller.after_sign_out_path_for(:user)
264
- end
265
-
266
- test 'sign in and redirect uses the stored location' do
267
- user = User.new
268
- @controller.session[:user_return_to] = "/foo.bar"
269
- @mock_warden.expects(:user).with(:user).returns(nil)
270
- @mock_warden.expects(:set_user).with(user, scope: :user).returns(true)
271
- @controller.expects(:redirect_to).with("/foo.bar")
272
- @controller.sign_in_and_redirect(user)
273
- end
274
-
275
- test 'sign in and redirect uses the configured after sign in path' do
276
- admin = Admin.new
277
- @mock_warden.expects(:user).with(:admin).returns(nil)
278
- @mock_warden.expects(:set_user).with(admin, scope: :admin).returns(true)
279
- @controller.expects(:redirect_to).with(admin_root_path)
280
- @controller.sign_in_and_redirect(admin)
281
- end
282
-
283
- test 'sign in and redirect does not sign in again if user is already signed' do
284
- admin = Admin.new
285
- @mock_warden.expects(:user).with(:admin).returns(admin)
286
- @mock_warden.expects(:set_user).never
287
- @controller.expects(:redirect_to).with(admin_root_path)
288
- @controller.sign_in_and_redirect(admin)
289
- end
290
-
291
- test 'sign out and redirect uses the configured after sign out path when signing out only the current scope' do
292
- swap Devise, sign_out_all_scopes: false do
293
- @mock_warden.expects(:user).with(scope: :admin, run_callbacks: false).returns(true)
294
- @mock_warden.expects(:logout).with(:admin).returns(true)
295
- @mock_warden.expects(:clear_strategies_cache!).with(scope: :admin).returns(true)
296
- @controller.expects(:redirect_to).with(admin_root_path)
297
- @controller.instance_eval "def after_sign_out_path_for(resource); admin_root_path; end"
298
- @controller.sign_out_and_redirect(:admin)
299
- end
300
- end
301
-
302
- test 'sign out and redirect uses the configured after sign out path when signing out all scopes' do
303
- swap Devise, sign_out_all_scopes: true do
304
- @mock_warden.expects(:user).times(Devise.mappings.size)
305
- @mock_warden.expects(:logout).with().returns(true)
306
- @mock_warden.expects(:clear_strategies_cache!).with().returns(true)
307
- @controller.expects(:redirect_to).with(admin_root_path)
308
- @controller.instance_eval "def after_sign_out_path_for(resource); admin_root_path; end"
309
- @controller.sign_out_and_redirect(:admin)
310
- end
311
- end
312
-
313
- test 'is not a devise controller' do
314
- assert_not @controller.devise_controller?
315
- end
316
- end
@@ -1,51 +0,0 @@
1
- require 'test_helper'
2
-
3
- class SessionsInheritedController < Devise::SessionsController
4
- def test_i18n_scope
5
- set_flash_message(:notice, :signed_in)
6
- end
7
- end
8
-
9
- class AnotherInheritedController < SessionsInheritedController
10
- protected
11
-
12
- def translation_scope
13
- 'another'
14
- end
15
- end
16
-
17
- class InheritedControllerTest < Devise::ControllerTestCase
18
- tests SessionsInheritedController
19
-
20
- def setup
21
- @mock_warden = OpenStruct.new
22
- @controller.request.env['warden'] = @mock_warden
23
- @controller.request.env['devise.mapping'] = Devise.mappings[:user]
24
- end
25
-
26
- test 'I18n scope is inherited from Devise::Sessions' do
27
- I18n.expects(:t).with do |message, options|
28
- message == 'user.signed_in' &&
29
- options[:scope] == 'devise.sessions'
30
- end
31
- @controller.test_i18n_scope
32
- end
33
- end
34
-
35
- class AnotherInheritedControllerTest < Devise::ControllerTestCase
36
- tests AnotherInheritedController
37
-
38
- def setup
39
- @mock_warden = OpenStruct.new
40
- @controller.request.env['warden'] = @mock_warden
41
- @controller.request.env['devise.mapping'] = Devise.mappings[:user]
42
- end
43
-
44
- test 'I18n scope is overridden' do
45
- I18n.expects(:t).with do |message, options|
46
- message == 'user.signed_in' &&
47
- options[:scope] == 'another'
48
- end
49
- @controller.test_i18n_scope
50
- end
51
- end