devise 4.1.1 → 5.0.4

data/test/models_test.rb

@@ -1,153 +0,0 @@
-require 'test_helper'
-require 'test_models'
-
-class ActiveRecordTest < ActiveSupport::TestCase
-  def include_module?(klass, mod)
-    klass.devise_modules.include?(mod) &&
-      klass.included_modules.include?(Devise::Models::const_get(mod.to_s.classify))
-  end
-
-  def assert_include_modules(klass, *modules)
-    modules.each do |mod|
-      assert include_module?(klass, mod)
-    end
-
-    (Devise::ALL - modules).each do |mod|
-      assert_not include_module?(klass, mod)
-    end
-  end
-
-  test 'can cherry pick modules' do
-    assert_include_modules Admin, :database_authenticatable, :registerable, :timeoutable, :recoverable, :lockable, :confirmable
-  end
-
-  test 'validations options are not applied too late' do
-    validators = WithValidation.validators_on :password
-    length = validators.find { |v| v.kind == :length }
-    assert_equal 2, length.options[:minimum]
-    assert_equal 6, length.options[:maximum]
-  end
-
-  test 'validations are applied just once' do
-    validators = Several.validators_on :password
-    assert_equal 1, validators.select{ |v| v.kind == :length }.length
-  end
-
-  test 'chosen modules are inheritable' do
-    assert_include_modules Inheritable, :database_authenticatable, :registerable, :timeoutable, :recoverable, :lockable, :confirmable
-  end
-
-  test 'order of module inclusion' do
-    correct_module_order   = [:database_authenticatable, :recoverable, :registerable, :confirmable, :lockable, :timeoutable]
-    incorrect_module_order = [:database_authenticatable, :timeoutable, :registerable, :recoverable, :lockable, :confirmable]
-
-    assert_include_modules Admin, *incorrect_module_order
-
-    # get module constants from symbol list
-    module_constants = correct_module_order.collect { |mod| Devise::Models::const_get(mod.to_s.classify) }
-
-    # confirm that they adhere to the order in ALL
-    # get included modules, filter out the noise, and reverse the order
-    assert_equal module_constants, (Admin.included_modules & module_constants).reverse
-  end
-
-  test 'raise error on invalid module' do
-    assert_raise NameError do
-      # Mix valid an invalid modules.
-      Configurable.class_eval { devise :database_authenticatable, :doesnotexit }
-    end
-  end
-
-  test 'set a default value for stretches' do
-    assert_equal 15, Configurable.stretches
-  end
-
-  test 'set a default value for pepper' do
-    assert_equal 'abcdef', Configurable.pepper
-  end
-
-  test 'set a default value for allow_unconfirmed_access_for' do
-    assert_equal 5.days, Configurable.allow_unconfirmed_access_for
-  end
-
-  test 'set a default value for remember_for' do
-    assert_equal 7.days, Configurable.remember_for
-  end
-
-  test 'set a default value for timeout_in' do
-    assert_equal 15.minutes, Configurable.timeout_in
-  end
-
-  test 'set a default value for unlock_in' do
-    assert_equal 10.days, Configurable.unlock_in
-  end
-
-  test 'set null fields on migrations' do
-    # Ignore email sending since no email exists.
-    klass = Class.new(Admin) do
-      def send_devise_notification(*); end
-    end
-
-    klass.create!
-  end
-end
-
-module StubModelFilters
-  def stub_filter(name)
-    define_singleton_method(name) { |*| nil }
-  end
-end
-
-class CheckFieldsTest < ActiveSupport::TestCase
-  test 'checks if the class respond_to the required fields' do
-    Player = Class.new do
-      extend Devise::Models
-      extend StubModelFilters
-
-      stub_filter :before_validation
-      stub_filter :after_update
-
-      devise :database_authenticatable
-
-      attr_accessor :encrypted_password, :email
-    end
-
-    assert_nothing_raised Devise::Models::MissingAttribute do
-      Devise::Models.check_fields!(Player)
-    end
-  end
-
-  test 'raises Devise::Models::MissingAtrribute and shows the missing attribute if the class doesn\'t respond_to one of the attributes' do
-    Clown = Class.new do
-      extend Devise::Models
-      extend StubModelFilters
-
-      stub_filter :before_validation
-      stub_filter :after_update
-
-      devise :database_authenticatable
-
-      attr_accessor :encrypted_password
-    end
-
-    assert_raise_with_message Devise::Models::MissingAttribute, "The following attribute(s) is (are) missing on your model: email" do
-      Devise::Models.check_fields!(Clown)
-    end
-  end
-
-  test 'raises Devise::Models::MissingAtrribute with all the missing attributes if there is more than one' do
-    Magician = Class.new do
-      extend Devise::Models
-      extend StubModelFilters
-
-      stub_filter :before_validation
-      stub_filter :after_update
-
-      devise :database_authenticatable
-    end
-
-    assert_raise_with_message Devise::Models::MissingAttribute, "The following attribute(s) is (are) missing on your model: encrypted_password, email" do
-      Devise::Models.check_fields!(Magician)
-    end
-  end
-end

data/test/omniauth/config_test.rb

@@ -1,57 +0,0 @@
-require 'test_helper'
-
-class OmniAuthConfigTest < ActiveSupport::TestCase
-  class MyStrategy
-    include OmniAuth::Strategy
-  end
-
-  test 'strategy_name returns provider if no options given' do
-    config = Devise::OmniAuth::Config.new :facebook, [{}]
-    assert_equal :facebook, config.strategy_name
-  end
-
-  test 'strategy_name returns provider if no name option are given' do
-    config = Devise::OmniAuth::Config.new :facebook, [{ other: :option }]
-    assert_equal :facebook, config.strategy_name
-  end
-
-  test 'returns name option when have a name' do
-    config = Devise::OmniAuth::Config.new :facebook, [{ name: :github }]
-    assert_equal :github, config.strategy_name
-  end
-
-  test "finds contrib strategies" do
-    config = Devise::OmniAuth::Config.new :facebook, [{}]
-    assert_equal OmniAuth::Strategies::Facebook, config.strategy_class
-  end
-
-  test "finds the strategy in OmniAuth's list by name" do
-    NamedTestStrategy = Class.new
-    NamedTestStrategy.send :include, OmniAuth::Strategy
-    NamedTestStrategy.option :name, :the_one
-
-    config = Devise::OmniAuth::Config.new :the_one, [{}]
-    assert_equal NamedTestStrategy, config.strategy_class
-  end
-
-  test "finds the strategy in OmniAuth's list by class name" do
-    UnNamedTestStrategy = Class.new
-    UnNamedTestStrategy.send :include, OmniAuth::Strategy
-
-    config = Devise::OmniAuth::Config.new :un_named_test_strategy, [{}]
-    assert_equal UnNamedTestStrategy, config.strategy_class
-  end
-
-  test 'raises an error if strategy cannot be found' do
-    config = Devise::OmniAuth::Config.new :my_other_strategy, [{}]
-    assert_raise Devise::OmniAuth::StrategyNotFound do
-      config.strategy_class
-    end
-  end
-
-  test 'allows the user to define a custom require path' do
-    config = Devise::OmniAuth::Config.new :my_strategy, [{strategy_class: MyStrategy}]
-    config_class = config.strategy_class
-    assert_equal MyStrategy, config_class
-  end
-end

data/test/omniauth/url_helpers_test.rb

@@ -1,51 +0,0 @@
-require 'test_helper'
-
-class OmniAuthRoutesTest < ActionController::TestCase
-  tests ApplicationController
-
-  def assert_path(action, provider, with_param=true)
-    # Resource param
-    assert_equal @controller.send(action, :user, provider),
-                 @controller.send("user_#{provider}_#{action}")
-
-    # With an object
-    assert_equal @controller.send(action, User.new, provider),
-                 @controller.send("user_#{provider}_#{action}")
-
-    if with_param
-      # Default url params
-      assert_equal @controller.send(action, :user, provider, param: 123),
-                   @controller.send("user_#{provider}_#{action}", param: 123)
-    end
-  end
-
-  test 'should alias omniauth_callback to mapped user auth_callback' do
-    assert_path :omniauth_callback_path, :facebook
-  end
-
-  test 'should alias omniauth_authorize to mapped user auth_authorize' do
-    assert_path :omniauth_authorize_path, :facebook, false
-  end
-
-  test 'should generate authorization path' do
-    assert_match "/users/auth/facebook", @controller.omniauth_authorize_path(:user, :facebook)
-
-    assert_raise NoMethodError do
-      @controller.omniauth_authorize_path(:user, :github)
-    end
-  end
-
-  test 'should generate authorization path for named open_id omniauth' do
-    assert_match "/users/auth/google", @controller.omniauth_authorize_path(:user, :google)
-  end
-
-  test 'should generate authorization path with params' do
-    assert_match "/users/auth/openid?openid_url=http%3A%2F%2Fyahoo.com",
-                  @controller.omniauth_authorize_path(:user, :openid, openid_url: "http://yahoo.com")
-  end
-
-  test 'should not add a "?" if no param was sent' do
-    assert_equal "/users/auth/openid",
-                  @controller.omniauth_authorize_path(:user, :openid)
-  end
-end

data/test/orm/active_record.rb

@@ -1,17 +0,0 @@
-ActiveRecord::Migration.verbose = false
-ActiveRecord::Base.logger = Logger.new(nil)
-ActiveRecord::Base.include_root_in_json = true
-
-ActiveRecord::Migrator.migrate(File.expand_path("../../rails_app/db/migrate/", __FILE__))
-
-class ActiveSupport::TestCase
-  if Devise.rails5?
-    self.use_transactional_tests = true
-  else
-    # Let `after_commit` work with transactional fixtures, however this is not needed for Rails 5.
-    require 'test_after_commit'
-    self.use_transactional_fixtures = true
-  end
-
-  self.use_instantiated_fixtures  = false
-end

data/test/orm/mongoid.rb

@@ -1,13 +0,0 @@
-require 'mongoid/version'
-
-Mongoid.configure do |config|
-  config.load!('test/support/mongoid.yml')
-  config.use_utc = true
-  config.include_root_in_json = true
-end
-
-class ActiveSupport::TestCase
-  setup do
-    Mongoid.purge!
-  end
-end

data/test/parameter_sanitizer_test.rb

@@ -1,131 +0,0 @@
-require 'test_helper'
-require 'devise/parameter_sanitizer'
-
-class ParameterSanitizerTest < ActiveSupport::TestCase
-  def sanitizer(params)
-    params = ActionController::Parameters.new(params)
-    Devise::ParameterSanitizer.new(User, :user, params)
-  end
-
-  test 'permits the default parameters for sign in' do
-    sanitizer = sanitizer('user' => { 'email' => 'jose' })
-    sanitized = sanitizer.sanitize(:sign_in)
-
-    assert_equal({ 'email' => 'jose' }, sanitized)
-  end
-
-  test 'permits the default parameters for sign up' do
-    sanitizer = sanitizer('user' => { 'email' => 'jose', 'role' => 'invalid' })
-    sanitized = sanitizer.sanitize(:sign_up)
-
-    assert_equal({ 'email' => 'jose' }, sanitized)
-  end
-
-  test 'permits the default parameters for account update' do
-    sanitizer = sanitizer('user' => { 'email' => 'jose', 'role' => 'invalid' })
-    sanitized = sanitizer.sanitize(:account_update)
-
-    assert_equal({ 'email' => 'jose' }, sanitized)
-  end
-
-  test 'permits news parameters for an existing action' do
-    sanitizer = sanitizer('user' => { 'username' => 'jose' })
-    sanitizer.permit(:sign_in, keys: [:username])
-    sanitized = sanitizer.sanitize(:sign_in)
-
-    assert_equal({ 'username' => 'jose' }, sanitized)
-  end
-
-  test 'permits news parameters for an existing action with a block' do
-    sanitizer = sanitizer('user' => { 'username' => 'jose' })
-    sanitizer.permit(:sign_in) do |user|
-      user.permit(:username)
-    end
-
-    sanitized = sanitizer.sanitize(:sign_in)
-
-    assert_equal({ 'username' => 'jose' }, sanitized)
-  end
-
-  test 'permit parameters for new actions' do
-    sanitizer = sanitizer('user' => { 'email' => 'jose@omglol', 'name' => 'Jose' })
-    sanitizer.permit(:invite_user, keys: [:email, :name])
-
-    sanitized = sanitizer.sanitize(:invite_user)
-
-    assert_equal({ 'email' => 'jose@omglol', 'name' => 'Jose' }, sanitized)
-  end
-
-  test 'fails when we do not have any permitted parameters for the action' do
-    sanitizer = sanitizer('user' => { 'email' => 'jose', 'password' => 'invalid' })
-
-    assert_raise NotImplementedError do
-      sanitizer.sanitize(:unknown)
-    end
-  end
-
-  test 'removes permitted parameters' do
-    sanitizer = sanitizer('user' => { 'email' => 'jose@omglol', 'username' => 'jose' })
-
-    sanitizer.permit(:sign_in, keys: [:username], except: [:email])
-    sanitized = sanitizer.sanitize(:sign_in)
-
-    assert_equal({ 'username' => 'jose' }, sanitized)
-  end
-end
-
-class DeprecatedParameterSanitizerAPITest < ActiveSupport::TestCase
-  class CustomSanitizer < Devise::ParameterSanitizer
-    def sign_in
-      default_params.permit(:username)
-    end
-  end
-
-  def sanitizer(params)
-    params = ActionController::Parameters.new(params)
-    Devise::ParameterSanitizer.new(User, :user, params)
-  end
-
-  test 'overriding instance methods have precedence over the default sanitized attributes' do
-    assert_deprecated do
-      params =  ActionController::Parameters.new(user: { "username" => "jose", "name" => "Jose" })
-      sanitizer = CustomSanitizer.new(User, :user, params)
-
-      sanitized = sanitizer.sanitize(:sign_in)
-
-      assert_equal({ "username" => "jose" }, sanitized)
-    end
-  end
-
-  test 'adding new parameters by mutating the Array' do
-    assert_deprecated do
-      sanitizer = sanitizer('user' => { 'username' => 'jose' })
-      sanitizer.for(:sign_in) << :username
-      sanitized = sanitizer.sanitize(:sign_in)
-
-      assert_equal({ 'username' => 'jose' }, sanitized)
-    end
-  end
-
-   test 'adding new parameters with a block' do
-     assert_deprecated do
-       sanitizer = sanitizer('user' => { 'username' => 'jose' })
-       sanitizer.for(:sign_in) { |user| user.permit(:username) }
-
-       sanitized = sanitizer.sanitize(:sign_in)
-
-       assert_equal({ 'username' => 'jose' }, sanitized)
-     end
-   end
-
-  test 'removing multiple default parameters' do
-    assert_deprecated do
-      sanitizer = sanitizer('user' => { 'email' => 'jose', 'password' => 'invalid', 'remember_me' => '1' })
-      sanitizer.for(:sign_in).delete(:email)
-      sanitizer.for(:sign_in).delete(:password)
-      sanitized = sanitizer.sanitize(:sign_in)
-
-      assert_equal({ 'remember_me' => '1' }, sanitized)
-    end
-  end
-end

data/test/rails_app/Rakefile

@@ -1,6 +0,0 @@
-# Add your own tasks in files placed in lib/tasks ending in .rake,
-# for example lib/tasks/capistrano.rake, and they will automatically be available to Rake.
-
-require File.expand_path('../config/application', __FILE__)
-
-Rails.application.load_tasks

data/test/rails_app/app/active_record/admin.rb

@@ -1,6 +0,0 @@
-require 'shared_admin'
-
-class Admin < ActiveRecord::Base
-  include Shim
-  include SharedAdmin
-end

data/test/rails_app/app/active_record/shim.rb

@@ -1,2 +0,0 @@
-module Shim
-end

data/test/rails_app/app/active_record/user.rb

@@ -1,7 +0,0 @@
-require 'shared_user'
-
-class User < ActiveRecord::Base
-  include Shim
-  include SharedUser
-  include ActiveModel::Serializers::Xml if Devise.rails5?
-end

data/test/rails_app/app/active_record/user_on_engine.rb

@@ -1,7 +0,0 @@
-require 'shared_user_without_omniauth'
-
-class UserOnEngine < ActiveRecord::Base
-  self.table_name = 'users'
-  include Shim
-  include SharedUserWithoutOmniauth
-end

data/test/rails_app/app/active_record/user_on_main_app.rb

@@ -1,7 +0,0 @@
-require 'shared_user_without_omniauth'
-
-class UserOnMainApp < ActiveRecord::Base
-  self.table_name = 'users'
-  include Shim
-  include SharedUserWithoutOmniauth
-end

data/test/rails_app/app/active_record/user_without_email.rb

@@ -1,8 +0,0 @@
-require "shared_user_without_email"
-
-class UserWithoutEmail < ActiveRecord::Base
-  self.table_name = 'users'
-  include Shim
-  include SharedUserWithoutEmail
-end
-

data/test/rails_app/app/controllers/admins/sessions_controller.rb

@@ -1,6 +0,0 @@
-class Admins::SessionsController < Devise::SessionsController
-  def new
-    flash[:special] = "Welcome to #{controller_path.inspect} controller!"
-    super
-  end
-end

data/test/rails_app/app/controllers/admins_controller.rb

@@ -1,6 +0,0 @@
-class AdminsController < ApplicationController
-  before_action :authenticate_admin!
-
-  def index
-  end
-end

data/test/rails_app/app/controllers/application_controller.rb

@@ -1,11 +0,0 @@
-# Filters added to this controller apply to all controllers in the application.
-# Likewise, all the methods added will be available for all controllers.
-
-class ApplicationController < ActionController::Base
-  protect_from_forgery
-  before_action :current_user, unless: :devise_controller?
-  before_action :authenticate_user!, if: :devise_controller?
-  respond_to(*Mime::SET.map(&:to_sym))
-
-  devise_group :commenter, contains: [:user, :admin]
-end

data/test/rails_app/app/controllers/application_with_fake_engine.rb

@@ -1,30 +0,0 @@
-class ApplicationWithFakeEngine < ApplicationController
-  private
-
-  helper_method :fake_engine
-  def fake_engine
-    @fake_engine ||= FakeEngine.new
-  end
-end
-
-class FakeEngine
-  def user_on_engine_confirmation_path
-    '/user_on_engine/confirmation'
-  end
-
-  def new_user_on_engine_session_path
-    '/user_on_engine/confirmation/new'
-  end
-
-  def new_user_on_engine_registration_path
-    '/user_on_engine/registration/new'
-  end
-
-  def new_user_on_engine_password_path
-    '/user_on_engine/password/new'
-  end
-
-  def new_user_on_engine_unlock_path
-    '/user_on_engine/unlock/new'
-  end
-end

data/test/rails_app/app/controllers/custom/registrations_controller.rb

@@ -1,31 +0,0 @@
-class Custom::RegistrationsController < Devise::RegistrationsController
-  def new
-    super do |resource|
-      @new_block_called = true
-    end
-  end
-
-  def create
-    super do |resource|
-      @create_block_called = true
-    end
-  end
-
-  def update
-    super do |resource|
-      @update_block_called = true
-    end
-  end
-
-  def create_block_called?
-    @create_block_called == true
-  end
-
-  def update_block_called?
-    @update_block_called == true
-  end
-
-  def new_block_called?
-    @new_block_called == true
-  end
-end

data/test/rails_app/app/controllers/home_controller.rb

@@ -1,29 +0,0 @@
-class HomeController < ApplicationController
-  def index
-  end
-
-  def private
-  end
-
-  def user_dashboard
-  end
-
-  def admin_dashboard
-  end
-
-  def join
-  end
-
-  def set
-    session["devise.foo_bar"] = "something"
-    head :ok
-  end
-
-  def unauthenticated
-    if Devise.rails5?
-      render body: "unauthenticated", status: :unauthorized
-    else
-      render text: "unauthenticated", status: :unauthorized
-    end
-  end
-end

data/test/rails_app/app/controllers/publisher/registrations_controller.rb

@@ -1,2 +0,0 @@
-class Publisher::RegistrationsController < ApplicationController
-end

data/test/rails_app/app/controllers/publisher/sessions_controller.rb

@@ -1,2 +0,0 @@
-class Publisher::SessionsController < ApplicationController
-end

data/test/rails_app/app/controllers/users/omniauth_callbacks_controller.rb

@@ -1,14 +0,0 @@
-class Users::OmniauthCallbacksController < Devise::OmniauthCallbacksController
-  def facebook
-    data = request.respond_to?(:get_header) ? request.get_header("omniauth.auth") : env["omniauth.auth"]
-    session["devise.facebook_data"] = data["extra"]["user_hash"]
-    render json: data
-  end
-
-  def sign_in_facebook
-    user = User.to_adapter.find_first(email: 'user@test.com')
-    user.remember_me = true
-    sign_in user
-    render (Devise.rails5? ? :body : :text) => ""
-  end
-end

data/test/rails_app/app/controllers/users_controller.rb

@@ -1,31 +0,0 @@
-class UsersController < ApplicationController
-  prepend_before_action :current_user, only: :exhibit
-  before_action :authenticate_user!, except: [:accept, :exhibit]
-  respond_to :html, :xml
-
-  def index
-    user_session[:cart] = "Cart"
-    respond_with(current_user)
-  end
-
-  def edit_form
-    user_session['last_request_at'] = params.fetch(:last_request_at, 31.minutes.ago.utc)
-  end
-
-  def update_form
-    render (Devise.rails5? ? :body : :text) => 'Update'
-  end
-
-  def accept
-    @current_user = current_user
-  end
-
-  def exhibit
-    render (Devise.rails5? ? :body : :text) => current_user ? "User is authenticated" : "User is not authenticated"
-  end
-
-  def expire
-    user_session['last_request_at'] = 31.minutes.ago.utc
-    render (Devise.rails5? ? :body : :text) => 'User will be expired on next request'
-  end
-end

data/test/rails_app/app/helpers/application_helper.rb

@@ -1,3 +0,0 @@
-# Methods added to this helper will be available to all templates in the application.
-module ApplicationHelper
-end

data/test/rails_app/app/mailers/users/from_proc_mailer.rb

@@ -1,3 +0,0 @@
-class Users::FromProcMailer < Devise::Mailer
-  default from: proc { 'custom@example.com' }
-end

data/test/rails_app/app/mailers/users/mailer.rb

@@ -1,3 +0,0 @@
-class Users::Mailer < Devise::Mailer
-  default from: 'custom@example.com'
-end

data/test/rails_app/app/mailers/users/reply_to_mailer.rb

@@ -1,4 +0,0 @@
-class Users::ReplyToMailer < Devise::Mailer
-  default from: 'custom@example.com'
-  default reply_to: 'custom_reply_to@example.com'
-end