devise 4.7.1 → 4.8.0
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- checksums.yaml +4 -4
- data/CHANGELOG.md +36 -4
- data/MIT-LICENSE +2 -1
- data/README.md +68 -61
- data/app/controllers/devise_controller.rb +2 -2
- data/app/helpers/devise_helper.rb +18 -6
- data/app/mailers/devise/mailer.rb +5 -5
- data/app/views/devise/shared/_links.html.erb +1 -1
- data/config/locales/en.yml +2 -2
- data/lib/devise.rb +1 -5
- data/lib/devise/controllers/helpers.rb +7 -7
- data/lib/devise/controllers/sign_in_out.rb +6 -4
- data/lib/devise/controllers/url_helpers.rb +1 -1
- data/lib/devise/failure_app.rb +2 -3
- data/lib/devise/hooks/lockable.rb +2 -5
- data/lib/devise/hooks/timeoutable.rb +2 -2
- data/lib/devise/mapping.rb +1 -1
- data/lib/devise/models/authenticatable.rb +12 -7
- data/lib/devise/models/confirmable.rb +2 -2
- data/lib/devise/models/database_authenticatable.rb +5 -1
- data/lib/devise/models/lockable.rb +10 -2
- data/lib/devise/models/recoverable.rb +2 -2
- data/lib/devise/models/rememberable.rb +1 -1
- data/lib/devise/models/trackable.rb +1 -1
- data/lib/devise/omniauth.rb +2 -5
- data/lib/devise/rails/deprecated_constant_accessor.rb +39 -0
- data/lib/devise/rails/routes.rb +4 -4
- data/lib/devise/test/controller_helpers.rb +3 -1
- data/lib/devise/test/integration_helpers.rb +1 -1
- data/lib/devise/version.rb +1 -1
- data/lib/generators/active_record/devise_generator.rb +17 -2
- data/lib/generators/devise/devise_generator.rb +1 -1
- data/lib/generators/devise/install_generator.rb +1 -5
- data/lib/generators/devise/views_generator.rb +1 -1
- data/lib/generators/templates/README +9 -1
- data/lib/generators/templates/controllers/omniauth_callbacks_controller.rb +1 -1
- data/lib/generators/templates/devise.rb +15 -3
- metadata +9 -8
data/lib/devise/rails/routes.rb
CHANGED
|
@@ -287,7 +287,7 @@ module ActionDispatch::Routing
|
|
|
287
287
|
# root to: "admin/dashboard#show", as: :user_root
|
|
288
288
|
# end
|
|
289
289
|
#
|
|
290
|
-
def authenticate(scope=nil, block=nil)
|
|
290
|
+
def authenticate(scope = nil, block = nil)
|
|
291
291
|
constraints_for(:authenticate!, scope, block) do
|
|
292
292
|
yield
|
|
293
293
|
end
|
|
@@ -311,7 +311,7 @@ module ActionDispatch::Routing
|
|
|
311
311
|
#
|
|
312
312
|
# root to: 'landing#show'
|
|
313
313
|
#
|
|
314
|
-
def authenticated(scope=nil, block=nil)
|
|
314
|
+
def authenticated(scope = nil, block = nil)
|
|
315
315
|
constraints_for(:authenticate?, scope, block) do
|
|
316
316
|
yield
|
|
317
317
|
end
|
|
@@ -328,7 +328,7 @@ module ActionDispatch::Routing
|
|
|
328
328
|
#
|
|
329
329
|
# root to: 'dashboard#show'
|
|
330
330
|
#
|
|
331
|
-
def unauthenticated(scope=nil)
|
|
331
|
+
def unauthenticated(scope = nil)
|
|
332
332
|
constraint = lambda do |request|
|
|
333
333
|
not request.env["warden"].authenticate? scope: scope
|
|
334
334
|
end
|
|
@@ -474,7 +474,7 @@ ERROR
|
|
|
474
474
|
@scope = current_scope
|
|
475
475
|
end
|
|
476
476
|
|
|
477
|
-
def constraints_for(method_to_apply, scope=nil, block=nil)
|
|
477
|
+
def constraints_for(method_to_apply, scope = nil, block = nil)
|
|
478
478
|
constraint = lambda do |request|
|
|
479
479
|
request.env['warden'].send(method_to_apply, scope: scope) &&
|
|
480
480
|
(block.nil? || block.call(request.env["warden"].user(scope)))
|
|
@@ -37,6 +37,8 @@ module Devise
|
|
|
37
37
|
@response
|
|
38
38
|
end
|
|
39
39
|
|
|
40
|
+
ruby2_keywords(:process) if respond_to?(:ruby2_keywords, true)
|
|
41
|
+
|
|
40
42
|
# We need to set up the environment variables and the response in the controller.
|
|
41
43
|
def setup_controller_for_warden #:nodoc:
|
|
42
44
|
@request.env['action_controller.instance'] = @controller
|
|
@@ -141,7 +143,7 @@ module Devise
|
|
|
141
143
|
@controller.response.headers.merge!(headers)
|
|
142
144
|
@controller.response.content_type = headers["Content-Type"] unless Rails::VERSION::MAJOR >= 5
|
|
143
145
|
@controller.status = status
|
|
144
|
-
@controller.
|
|
146
|
+
@controller.response_body = response.body
|
|
145
147
|
nil # causes process return @response
|
|
146
148
|
end
|
|
147
149
|
|
|
@@ -28,7 +28,7 @@ module Devise
|
|
|
28
28
|
end
|
|
29
29
|
end
|
|
30
30
|
|
|
31
|
-
# Signs in a specific resource, mimicking a
|
|
31
|
+
# Signs in a specific resource, mimicking a successful sign in
|
|
32
32
|
# operation through +Devise::SessionsController#create+.
|
|
33
33
|
#
|
|
34
34
|
# * +resource+ - The resource that should be authenticated
|
data/lib/devise/version.rb
CHANGED
|
@@ -86,9 +86,24 @@ RUBY
|
|
|
86
86
|
Rails::VERSION::MAJOR >= 5
|
|
87
87
|
end
|
|
88
88
|
|
|
89
|
+
def rails61_and_up?
|
|
90
|
+
Rails::VERSION::MAJOR > 6 || (Rails::VERSION::MAJOR == 6 && Rails::VERSION::MINOR >= 1)
|
|
91
|
+
end
|
|
92
|
+
|
|
89
93
|
def postgresql?
|
|
90
|
-
|
|
91
|
-
|
|
94
|
+
ar_config && ar_config['adapter'] == 'postgresql'
|
|
95
|
+
end
|
|
96
|
+
|
|
97
|
+
def ar_config
|
|
98
|
+
if ActiveRecord::Base.configurations.respond_to?(:configs_for)
|
|
99
|
+
if rails61_and_up?
|
|
100
|
+
ActiveRecord::Base.configurations.configs_for(env_name: Rails.env, name: "primary").configuration_hash
|
|
101
|
+
else
|
|
102
|
+
ActiveRecord::Base.configurations.configs_for(env_name: Rails.env, spec_name: "primary").config
|
|
103
|
+
end
|
|
104
|
+
else
|
|
105
|
+
ActiveRecord::Base.configurations[Rails.env]
|
|
106
|
+
end
|
|
92
107
|
end
|
|
93
108
|
|
|
94
109
|
def migration_version
|
|
@@ -13,7 +13,7 @@ module Devise
|
|
|
13
13
|
desc "Generates a model with the given NAME (if one does not exist) with devise " \
|
|
14
14
|
"configuration plus a migration file and devise routes."
|
|
15
15
|
|
|
16
|
-
hook_for :orm
|
|
16
|
+
hook_for :orm, required: true
|
|
17
17
|
|
|
18
18
|
class_option :routes, desc: "Generate routes", type: :boolean, default: true
|
|
19
19
|
|
|
@@ -11,7 +11,7 @@ module Devise
|
|
|
11
11
|
source_root File.expand_path("../../templates", __FILE__)
|
|
12
12
|
|
|
13
13
|
desc "Creates a Devise initializer and copy locale files to your application."
|
|
14
|
-
class_option :orm
|
|
14
|
+
class_option :orm, required: true
|
|
15
15
|
|
|
16
16
|
def copy_initializer
|
|
17
17
|
unless options[:orm]
|
|
@@ -37,10 +37,6 @@ module Devise
|
|
|
37
37
|
def show_readme
|
|
38
38
|
readme "README" if behavior == :invoke
|
|
39
39
|
end
|
|
40
|
-
|
|
41
|
-
def rails_4?
|
|
42
|
-
Rails::VERSION::MAJOR == 4
|
|
43
|
-
end
|
|
44
40
|
end
|
|
45
41
|
end
|
|
46
42
|
end
|
|
@@ -42,7 +42,7 @@ module Devise
|
|
|
42
42
|
def view_directory(name, _target_path = nil)
|
|
43
43
|
directory name.to_s, _target_path || "#{target_path}/#{name}" do |content|
|
|
44
44
|
if scope
|
|
45
|
-
content.gsub
|
|
45
|
+
content.gsub("devise/shared", "#{plural_scope}/shared")
|
|
46
46
|
else
|
|
47
47
|
content
|
|
48
48
|
end
|
|
@@ -1,6 +1,6 @@
|
|
|
1
1
|
===============================================================================
|
|
2
2
|
|
|
3
|
-
|
|
3
|
+
Depending on your application's configuration some manual setup may be required:
|
|
4
4
|
|
|
5
5
|
1. Ensure you have defined default url options in your environments files. Here
|
|
6
6
|
is an example of default_url_options appropriate for a development environment
|
|
@@ -10,10 +10,14 @@ Some setup you must do manually if you haven't yet:
|
|
|
10
10
|
|
|
11
11
|
In production, :host should be set to the actual host of your application.
|
|
12
12
|
|
|
13
|
+
* Required for all applications. *
|
|
14
|
+
|
|
13
15
|
2. Ensure you have defined root_url to *something* in your config/routes.rb.
|
|
14
16
|
For example:
|
|
15
17
|
|
|
16
18
|
root to: "home#index"
|
|
19
|
+
|
|
20
|
+
* Not required for API-only Applications *
|
|
17
21
|
|
|
18
22
|
3. Ensure you have flash messages in app/views/layouts/application.html.erb.
|
|
19
23
|
For example:
|
|
@@ -21,8 +25,12 @@ Some setup you must do manually if you haven't yet:
|
|
|
21
25
|
<p class="notice"><%= notice %></p>
|
|
22
26
|
<p class="alert"><%= alert %></p>
|
|
23
27
|
|
|
28
|
+
* Not required for API-only Applications *
|
|
29
|
+
|
|
24
30
|
4. You can copy Devise views (for customization) to your app by running:
|
|
25
31
|
|
|
26
32
|
rails g devise:views
|
|
33
|
+
|
|
34
|
+
* Not required *
|
|
27
35
|
|
|
28
36
|
===============================================================================
|
|
@@ -9,7 +9,7 @@ class <%= @scope_prefix %>OmniauthCallbacksController < Devise::OmniauthCallback
|
|
|
9
9
|
# end
|
|
10
10
|
|
|
11
11
|
# More info at:
|
|
12
|
-
# https://github.com/
|
|
12
|
+
# https://github.com/heartcombo/devise#omniauth
|
|
13
13
|
|
|
14
14
|
# GET|POST /resource/auth/twitter
|
|
15
15
|
# def passthru
|
|
@@ -1,5 +1,11 @@
|
|
|
1
1
|
# frozen_string_literal: true
|
|
2
2
|
|
|
3
|
+
# Assuming you have not yet modified this file, each configuration option below
|
|
4
|
+
# is set to its default value. Note that some are commented out while others
|
|
5
|
+
# are not: uncommented lines are intended to protect your configuration from
|
|
6
|
+
# breaking changes in upgrades (i.e., in the event that future versions of
|
|
7
|
+
# Devise change the default values for those options).
|
|
8
|
+
#
|
|
3
9
|
# Use this hook to configure devise mailer, warden hooks and so forth.
|
|
4
10
|
# Many of these configuration options can be set straight in your model.
|
|
5
11
|
Devise.setup do |config|
|
|
@@ -68,7 +74,10 @@ Devise.setup do |config|
|
|
|
68
74
|
# Tell if authentication through HTTP Auth is enabled. False by default.
|
|
69
75
|
# It can be set to an array that will enable http authentication only for the
|
|
70
76
|
# given strategies, for example, `config.http_authenticatable = [:database]` will
|
|
71
|
-
# enable it only for database authentication.
|
|
77
|
+
# enable it only for database authentication.
|
|
78
|
+
# For API-only applications to support authentication "out-of-the-box", you will likely want to
|
|
79
|
+
# enable this with :database unless you are using a custom strategy.
|
|
80
|
+
# The supported strategies are:
|
|
72
81
|
# :database = Support basic authentication with authentication key + password
|
|
73
82
|
# config.http_authenticatable = false
|
|
74
83
|
|
|
@@ -103,15 +112,18 @@ Devise.setup do |config|
|
|
|
103
112
|
# config.reload_routes = true
|
|
104
113
|
|
|
105
114
|
# ==> Configuration for :database_authenticatable
|
|
106
|
-
# For bcrypt, this is the cost for hashing the password and defaults to
|
|
115
|
+
# For bcrypt, this is the cost for hashing the password and defaults to 12. If
|
|
107
116
|
# using other algorithms, it sets how many times you want the password to be hashed.
|
|
117
|
+
# The number of stretches used for generating the hashed password are stored
|
|
118
|
+
# with the hashed password. This allows you to change the stretches without
|
|
119
|
+
# invalidating existing passwords.
|
|
108
120
|
#
|
|
109
121
|
# Limiting the stretches to just one in testing will increase the performance of
|
|
110
122
|
# your test suite dramatically. However, it is STRONGLY RECOMMENDED to not use
|
|
111
123
|
# a value less than 10 in other environments. Note that, for bcrypt (the default
|
|
112
124
|
# algorithm), the cost increases exponentially with the number of stretches (e.g.
|
|
113
125
|
# a value of 20 is already extremely slow: approx. 60 seconds for 1 calculation).
|
|
114
|
-
config.stretches = Rails.env.test? ? 1 :
|
|
126
|
+
config.stretches = Rails.env.test? ? 1 : 12
|
|
115
127
|
|
|
116
128
|
# Set up a pepper to generate the hashed password.
|
|
117
129
|
# config.pepper = '<%= SecureRandom.hex(64) %>'
|
metadata
CHANGED
|
@@ -1,15 +1,15 @@
|
|
|
1
1
|
--- !ruby/object:Gem::Specification
|
|
2
2
|
name: devise
|
|
3
3
|
version: !ruby/object:Gem::Version
|
|
4
|
-
version: 4.
|
|
4
|
+
version: 4.8.0
|
|
5
5
|
platform: ruby
|
|
6
6
|
authors:
|
|
7
7
|
- José Valim
|
|
8
8
|
- Carlos Antônio
|
|
9
|
-
autorequire:
|
|
9
|
+
autorequire:
|
|
10
10
|
bindir: bin
|
|
11
11
|
cert_chain: []
|
|
12
|
-
date:
|
|
12
|
+
date: 2021-04-29 00:00:00.000000000 Z
|
|
13
13
|
dependencies:
|
|
14
14
|
- !ruby/object:Gem::Dependency
|
|
15
15
|
name: warden
|
|
@@ -82,7 +82,7 @@ dependencies:
|
|
|
82
82
|
- !ruby/object:Gem::Version
|
|
83
83
|
version: '0'
|
|
84
84
|
description: Flexible authentication solution for Rails with Warden
|
|
85
|
-
email:
|
|
85
|
+
email: heartcombo@googlegroups.com
|
|
86
86
|
executables: []
|
|
87
87
|
extensions: []
|
|
88
88
|
extra_rdoc_files: []
|
|
@@ -155,6 +155,7 @@ files:
|
|
|
155
155
|
- lib/devise/parameter_filter.rb
|
|
156
156
|
- lib/devise/parameter_sanitizer.rb
|
|
157
157
|
- lib/devise/rails.rb
|
|
158
|
+
- lib/devise/rails/deprecated_constant_accessor.rb
|
|
158
159
|
- lib/devise/rails/routes.rb
|
|
159
160
|
- lib/devise/rails/warden_compat.rb
|
|
160
161
|
- lib/devise/secret_key_finder.rb
|
|
@@ -198,11 +199,11 @@ files:
|
|
|
198
199
|
- lib/generators/templates/simple_form_for/registrations/new.html.erb
|
|
199
200
|
- lib/generators/templates/simple_form_for/sessions/new.html.erb
|
|
200
201
|
- lib/generators/templates/simple_form_for/unlocks/new.html.erb
|
|
201
|
-
homepage: https://github.com/
|
|
202
|
+
homepage: https://github.com/heartcombo/devise
|
|
202
203
|
licenses:
|
|
203
204
|
- MIT
|
|
204
205
|
metadata: {}
|
|
205
|
-
post_install_message:
|
|
206
|
+
post_install_message:
|
|
206
207
|
rdoc_options: []
|
|
207
208
|
require_paths:
|
|
208
209
|
- lib
|
|
@@ -217,8 +218,8 @@ required_rubygems_version: !ruby/object:Gem::Requirement
|
|
|
217
218
|
- !ruby/object:Gem::Version
|
|
218
219
|
version: '0'
|
|
219
220
|
requirements: []
|
|
220
|
-
rubygems_version: 3.
|
|
221
|
-
signing_key:
|
|
221
|
+
rubygems_version: 3.2.6
|
|
222
|
+
signing_key:
|
|
222
223
|
specification_version: 4
|
|
223
224
|
summary: Flexible authentication solution for Rails with Warden
|
|
224
225
|
test_files: []
|