devise_openid_authenticatable 1.1.4 → 1.1.5

checksums.yaml

@@ -0,0 +1,7 @@
+---
+SHA1:
+  metadata.gz: c4fe28bba0936e9c53447026d38de5acb83cc33a
+  data.tar.gz: 9550c338338ef13f94e6185f337ef692d835ad88
+SHA512:
+  metadata.gz: 46a91be8f2a3516c3b4c4b09da8f609706944475921f365765d77ee6f03a0d84f978dbf061b3226289d35186d140089458680ab06dce5dd17be9cfa0708da958
+  data.tar.gz: 662261c5290d7273940a0d4217d2a3a70e19862bb07bb8c8cffe462fa5880df0fda5e5b3ce797e838a2836027c80f9466fe3a10e3bb37fffbd91cdc0116de907

data/CHANGELOG.rdoc

@@ -1,3 +1,6 @@
+== 1.1.5
+* More CSRF authenticity token fixes: for Rails 4, we need to just stop checking authenticity if we're returning from rack-openid.  Thanks to pierre-pretorius for the fix.
+
 == 1.1.4
 * Remove authenticity token from return parameters, and instead stop requiring it for successful authentication.  This is required to be compatible with Devise's recent security fixes.
 * Test suite is now fully passing on Devise 1.4 through 3.0

data/lib/devise_openid_authenticatable/controller.rb

@@ -0,0 +1,14 @@
+module DeviseOpenidAuthenticatable
+  module Controller
+    extend ActiveSupport::Concern
+    
+    included do
+      skip_before_filter :verify_authenticity_token, :if => :openid_provider_response?
+    end
+        
+    protected
+    def openid_provider_response?
+      !!env[Rack::OpenID::RESPONSE]
+    end
+  end
+end

data/lib/devise_openid_authenticatable/railtie.rb

@@ -1,9 +1,15 @@
+require 'devise_openid_authenticatable/controller'
+
 if defined?(::Rails::Railtie)
   module DeviseOpenidAuthenticatable
     class Railtie < Rails::Railtie
       initializer "devise.openid_initialization" do |config|
         config.middleware.insert_before(Warden::Manager, Rack::OpenID)
       end
+      
+      initializer "devise_openid_authenticatable.controller" do
+        ActionController::Base.send(:include, DeviseOpenidAuthenticatable::Controller)
+      end
     end
   end
 end

data/lib/devise_openid_authenticatable/version.rb

@@ -1,3 +1,3 @@
 module DeviseOpenidAuthenticatable
-  VERSION = "1.1.4"
+  VERSION = "1.1.5"
 end

data/spec/scenario/config/environments/test.rb

@@ -30,4 +30,6 @@ Scenario::Application.configure do
   config.action_dispatch.show_exceptions = false
 
   config.active_support.deprecation = :stderr
+  
+  config.eager_load = false
 end

metadata

@@ -1,144 +1,127 @@
 --- !ruby/object:Gem::Specification
 name: devise_openid_authenticatable
 version: !ruby/object:Gem::Version
-  prerelease: 
-  version: 1.1.4
+  version: 1.1.5
 platform: ruby
 authors:
 - Nat Budin
 autorequire: 
 bindir: bin
 cert_chain: []
-date: 2013-08-20 00:00:00.000000000 Z
+date: 2013-12-20 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
-  version_requirements: !ruby/object:Gem::Requirement
+  name: rack-openid
+  requirement: !ruby/object:Gem::Requirement
     requirements:
-    - - ! '>='
+    - - '>='
       - !ruby/object:Gem::Version
         version: 1.2.0
-    none: false
-  name: rack-openid
   type: :runtime
   prerelease: false
-  requirement: !ruby/object:Gem::Requirement
+  version_requirements: !ruby/object:Gem::Requirement
     requirements:
-    - - ! '>='
+    - - '>='
       - !ruby/object:Gem::Version
         version: 1.2.0
-    none: false
 - !ruby/object:Gem::Dependency
-  version_requirements: !ruby/object:Gem::Requirement
+  name: devise
+  requirement: !ruby/object:Gem::Requirement
     requirements:
-    - - ! '>='
+    - - '>='
       - !ruby/object:Gem::Version
         version: '1.3'
-    none: false
-  name: devise
   type: :runtime
   prerelease: false
-  requirement: !ruby/object:Gem::Requirement
+  version_requirements: !ruby/object:Gem::Requirement
     requirements:
-    - - ! '>='
+    - - '>='
       - !ruby/object:Gem::Version
         version: '1.3'
-    none: false
 - !ruby/object:Gem::Dependency
-  version_requirements: !ruby/object:Gem::Requirement
+  name: rspec
+  requirement: !ruby/object:Gem::Requirement
     requirements:
     - - ~>
       - !ruby/object:Gem::Version
         version: '2.3'
-    none: false
-  name: rspec
   type: :development
   prerelease: false
-  requirement: !ruby/object:Gem::Requirement
+  version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - ~>
       - !ruby/object:Gem::Version
         version: '2.3'
-    none: false
 - !ruby/object:Gem::Dependency
-  version_requirements: !ruby/object:Gem::Requirement
+  name: rspec-rails
+  requirement: !ruby/object:Gem::Requirement
     requirements:
     - - ~>
       - !ruby/object:Gem::Version
         version: '2.3'
-    none: false
-  name: rspec-rails
   type: :development
   prerelease: false
-  requirement: !ruby/object:Gem::Requirement
+  version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - ~>
       - !ruby/object:Gem::Version
         version: '2.3'
-    none: false
 - !ruby/object:Gem::Dependency
-  version_requirements: !ruby/object:Gem::Requirement
+  name: mocha
+  requirement: !ruby/object:Gem::Requirement
     requirements:
-    - - ! '>='
+    - - '>='
       - !ruby/object:Gem::Version
         version: '0'
-    none: false
-  name: mocha
   type: :development
   prerelease: false
-  requirement: !ruby/object:Gem::Requirement
+  version_requirements: !ruby/object:Gem::Requirement
     requirements:
-    - - ! '>='
+    - - '>='
       - !ruby/object:Gem::Version
         version: '0'
-    none: false
 - !ruby/object:Gem::Dependency
-  version_requirements: !ruby/object:Gem::Requirement
+  name: sqlite3-ruby
+  requirement: !ruby/object:Gem::Requirement
     requirements:
-    - - ! '>='
+    - - '>='
       - !ruby/object:Gem::Version
         version: '0'
-    none: false
-  name: sqlite3-ruby
   type: :development
   prerelease: false
-  requirement: !ruby/object:Gem::Requirement
+  version_requirements: !ruby/object:Gem::Requirement
     requirements:
-    - - ! '>='
+    - - '>='
       - !ruby/object:Gem::Version
         version: '0'
-    none: false
 - !ruby/object:Gem::Dependency
-  version_requirements: !ruby/object:Gem::Requirement
+  name: sham_rack
+  requirement: !ruby/object:Gem::Requirement
     requirements:
-    - - ! '>='
+    - - '>='
       - !ruby/object:Gem::Version
         version: '0'
-    none: false
-  name: sham_rack
   type: :development
   prerelease: false
-  requirement: !ruby/object:Gem::Requirement
+  version_requirements: !ruby/object:Gem::Requirement
     requirements:
-    - - ! '>='
+    - - '>='
       - !ruby/object:Gem::Version
         version: '0'
-    none: false
 - !ruby/object:Gem::Dependency
-  version_requirements: !ruby/object:Gem::Requirement
+  name: webrat
+  requirement: !ruby/object:Gem::Requirement
     requirements:
-    - - ! '>='
+    - - '>='
       - !ruby/object:Gem::Version
         version: '0'
-    none: false
-  name: webrat
   type: :development
   prerelease: false
-  requirement: !ruby/object:Gem::Requirement
+  version_requirements: !ruby/object:Gem::Requirement
     requirements:
-    - - ! '>='
+    - - '>='
       - !ruby/object:Gem::Version
         version: '0'
-    none: false
 description: OpenID authentication module for Devise using Rack::OpenID
 email:
 - natbudin@gmail.com
@@ -160,6 +143,7 @@ files:
 - Rakefile
 - devise_openid_authenticatable.gemspec
 - lib/devise_openid_authenticatable.rb
+- lib/devise_openid_authenticatable/controller.rb
 - lib/devise_openid_authenticatable/model.rb
 - lib/devise_openid_authenticatable/railtie.rb
 - lib/devise_openid_authenticatable/schema.rb
@@ -192,27 +176,26 @@ files:
 - spec/support/migrations.rb
 homepage: https://github.com/nbudin/devise_openid_authenticatable
 licenses: []
+metadata: {}
 post_install_message: 
 rdoc_options: []
 require_paths:
 - lib
 required_ruby_version: !ruby/object:Gem::Requirement
   requirements:
-  - - ! '>='
+  - - '>='
     - !ruby/object:Gem::Version
       version: '0'
-  none: false
 required_rubygems_version: !ruby/object:Gem::Requirement
   requirements:
-  - - ! '>='
+  - - '>='
     - !ruby/object:Gem::Version
       version: '0'
-  none: false
 requirements: []
 rubyforge_project: 
-rubygems_version: 1.8.23
+rubygems_version: 2.1.11
 signing_key: 
-specification_version: 3
+specification_version: 4
 summary: OpenID authentication for Devise
 test_files:
 - spec/model_spec.rb
@@ -239,4 +222,3 @@ test_files:
 - spec/spec_helper.rb
 - spec/strategy_spec.rb
 - spec/support/migrations.rb
-has_rdoc: