devise_security_extension 0.5.0 → 0.5.1

Sign up to get free protection for your applications and to get access to all the features.
data/README.rdoc CHANGED
@@ -4,16 +4,20 @@ An enterprise security extension for devise, trying to meet industrial standard
4
4
 
5
5
  == Features
6
6
 
7
- * expire passwords (update password with current password)
8
- * strong password validation
9
- * save old passwords to protect users from assigning old/expired passwords again
10
7
  * captcha support for sign_up, sign_in, recover and unlock (to make automated mass creation and brute forcing of accounts harder)
11
8
 
9
+ === Model modules
10
+
11
+ * :password_expirable - passwords will expire after a configured time (and will need an update)
12
+ * :secure_validatable - better way to validate model (email, stronger password validation). don't use with :validatable!
13
+ * :password_archivable - save used password in an old_passwords table for history checks (don't be able to use a formerly used password)
14
+ * :session_limitable - ensures, that there is only one session usable per account at once.
15
+
12
16
  == Installation
13
17
  add to Gemfile
14
18
  gem 'devise_security_extension'
15
19
 
16
- after bundle execute
20
+ after bundle install
17
21
  rails g devise_security_extension:install
18
22
 
19
23
  for :secure_validatable you need to add
@@ -59,13 +63,8 @@ for :secure_validatable you need to add
59
63
  <p><%= captcha_tag %></p>
60
64
  <p><%= text_field_tag :captcha %></p>
61
65
 
62
- That's all!
66
+ That's it!
63
67
 
64
- == Model modules
65
-
66
- * :password_expirable - activate that passwords will expire
67
- * :secure_validatable - better way to validate model. don't use with :validatable!!!
68
- * :password_archivable - save password in old_passwords for history checks
69
68
 
70
69
  == Schema
71
70
 
@@ -75,13 +74,19 @@ That's all!
75
74
  t.password_expirable
76
75
  end
77
76
 
78
- === Password archive
77
+ === Password archivable
79
78
 
80
79
  create_table :old_passwords do |t|
81
80
  t.password_archivable
82
81
  end
83
82
  add_index :old_passwords, [:password_archivable_type, :password_archivable_id], :name => :index_password_archivable
84
83
 
84
+ === Session limitable
85
+
86
+ create_table :the_resources do |t|
87
+ t.session_limitable
88
+ end
89
+
85
90
  == Requirements
86
91
 
87
92
  * devise (https://github.com/plataformatec/devise)
@@ -97,11 +102,13 @@ That's all!
97
102
  * 0.2 strong password validation
98
103
  * 0.3 password archivable with validation
99
104
  * 0.4 captcha support for sign_up, sign_in, recover and unlock
105
+ * 0.5 session_limitable module
100
106
 
101
107
  == Maintainers
102
108
 
103
109
  * Team Phatworx (http://github.com/phatworx)
104
110
  * Marco Scholl (http://github.com/traxanos)
111
+ * Alexander Dreher (http://github.com/alexdreher)
105
112
 
106
113
  == Contributing to devise_security_extension
107
114
 
@@ -115,5 +122,4 @@ That's all!
115
122
 
116
123
  == Copyright
117
124
 
118
- Copyright (c) 2011 Marco Scholl. See LICENSE.txt for
119
- further details.
125
+ Copyright (c) 2011 Marco Scholl. See LICENSE.txt for further details.
data/Rakefile CHANGED
@@ -15,10 +15,10 @@ Jeweler::Tasks.new do |gem|
15
15
  gem.name = "devise_security_extension"
16
16
  gem.homepage = "http://github.com/phatworx/devise_security_extension"
17
17
  gem.license = "MIT"
18
- gem.summary = %Q{an security extension for devise}
19
- gem.description = %Q{a gem for extend devise for more password security}
18
+ gem.summary = %Q{Security extension for devise}
19
+ gem.description = %Q{An enterprise security extension for devise, trying to meet industrial standard security demands for web applications.}
20
20
  gem.email = "team@phatworx.de"
21
- gem.authors = ["Marco Scholl"]
21
+ gem.authors = ["Marco Scholl", "Alexander Dreher"]
22
22
  end
23
23
  Jeweler::RubygemsDotOrgTasks.new
24
24
 
data/VERSION CHANGED
@@ -1 +1 @@
1
- 0.5.0
1
+ 0.5.1
@@ -5,12 +5,12 @@
5
5
 
6
6
  Gem::Specification.new do |s|
7
7
  s.name = "devise_security_extension"
8
- s.version = "0.5.0"
8
+ s.version = "0.5.1"
9
9
 
10
10
  s.required_rubygems_version = Gem::Requirement.new(">= 0") if s.respond_to? :required_rubygems_version=
11
- s.authors = ["Marco Scholl"]
11
+ s.authors = ["Marco Scholl", "Alexander Dreher"]
12
12
  s.date = "2011-12-27"
13
- s.description = "a gem for extend devise for more password security"
13
+ s.description = "An enterprise security extension for devise, trying to meet industrial standard security demands for web applications."
14
14
  s.email = "team@phatworx.de"
15
15
  s.extra_rdoc_files = [
16
16
  "LICENSE.txt",
@@ -52,7 +52,7 @@ Gem::Specification.new do |s|
52
52
  s.licenses = ["MIT"]
53
53
  s.require_paths = ["lib"]
54
54
  s.rubygems_version = "1.8.10"
55
- s.summary = "an security extension for devise"
55
+ s.summary = "Security extension for devise"
56
56
  s.test_files = [
57
57
  "test/helper.rb",
58
58
  "test/test_devise_security_extension.rb"
metadata CHANGED
@@ -1,11 +1,12 @@
1
1
  --- !ruby/object:Gem::Specification
2
2
  name: devise_security_extension
3
3
  version: !ruby/object:Gem::Version
4
- version: 0.5.0
4
+ version: 0.5.1
5
5
  prerelease:
6
6
  platform: ruby
7
7
  authors:
8
8
  - Marco Scholl
9
+ - Alexander Dreher
9
10
  autorequire:
10
11
  bindir: bin
11
12
  cert_chain: []
@@ -13,7 +14,7 @@ date: 2011-12-27 00:00:00.000000000 Z
13
14
  dependencies:
14
15
  - !ruby/object:Gem::Dependency
15
16
  name: rails
16
- requirement: &8681980 !ruby/object:Gem::Requirement
17
+ requirement: &16685220 !ruby/object:Gem::Requirement
17
18
  none: false
18
19
  requirements:
19
20
  - - ! '>='
@@ -21,10 +22,10 @@ dependencies:
21
22
  version: 3.1.1
22
23
  type: :runtime
23
24
  prerelease: false
24
- version_requirements: *8681980
25
+ version_requirements: *16685220
25
26
  - !ruby/object:Gem::Dependency
26
27
  name: devise
27
- requirement: &8706740 !ruby/object:Gem::Requirement
28
+ requirement: &16683580 !ruby/object:Gem::Requirement
28
29
  none: false
29
30
  requirements:
30
31
  - - ! '>='
@@ -32,10 +33,10 @@ dependencies:
32
33
  version: '0'
33
34
  type: :runtime
34
35
  prerelease: false
35
- version_requirements: *8706740
36
+ version_requirements: *16683580
36
37
  - !ruby/object:Gem::Dependency
37
38
  name: rails_email_validator
38
- requirement: &8705420 !ruby/object:Gem::Requirement
39
+ requirement: &16682360 !ruby/object:Gem::Requirement
39
40
  none: false
40
41
  requirements:
41
42
  - - ! '>='
@@ -43,10 +44,10 @@ dependencies:
43
44
  version: '0'
44
45
  type: :development
45
46
  prerelease: false
46
- version_requirements: *8705420
47
+ version_requirements: *16682360
47
48
  - !ruby/object:Gem::Dependency
48
49
  name: easy_captcha
49
- requirement: &8703760 !ruby/object:Gem::Requirement
50
+ requirement: &16681140 !ruby/object:Gem::Requirement
50
51
  none: false
51
52
  requirements:
52
53
  - - ! '>='
@@ -54,10 +55,10 @@ dependencies:
54
55
  version: '0'
55
56
  type: :development
56
57
  prerelease: false
57
- version_requirements: *8703760
58
+ version_requirements: *16681140
58
59
  - !ruby/object:Gem::Dependency
59
60
  name: bundler
60
- requirement: &8721740 !ruby/object:Gem::Requirement
61
+ requirement: &16696860 !ruby/object:Gem::Requirement
61
62
  none: false
62
63
  requirements:
63
64
  - - ~>
@@ -65,10 +66,10 @@ dependencies:
65
66
  version: 1.0.0
66
67
  type: :development
67
68
  prerelease: false
68
- version_requirements: *8721740
69
+ version_requirements: *16696860
69
70
  - !ruby/object:Gem::Dependency
70
71
  name: jeweler
71
- requirement: &8719720 !ruby/object:Gem::Requirement
72
+ requirement: &16692820 !ruby/object:Gem::Requirement
72
73
  none: false
73
74
  requirements:
74
75
  - - ~>
@@ -76,8 +77,9 @@ dependencies:
76
77
  version: 1.5.2
77
78
  type: :development
78
79
  prerelease: false
79
- version_requirements: *8719720
80
- description: a gem for extend devise for more password security
80
+ version_requirements: *16692820
81
+ description: An enterprise security extension for devise, trying to meet industrial
82
+ standard security demands for web applications.
81
83
  email: team@phatworx.de
82
84
  executables: []
83
85
  extensions: []
@@ -130,7 +132,7 @@ required_ruby_version: !ruby/object:Gem::Requirement
130
132
  version: '0'
131
133
  segments:
132
134
  - 0
133
- hash: -1699892809294021618
135
+ hash: 2266778624520241726
134
136
  required_rubygems_version: !ruby/object:Gem::Requirement
135
137
  none: false
136
138
  requirements:
@@ -142,7 +144,7 @@ rubyforge_project:
142
144
  rubygems_version: 1.8.10
143
145
  signing_key:
144
146
  specification_version: 3
145
- summary: an security extension for devise
147
+ summary: Security extension for devise
146
148
  test_files:
147
149
  - test/helper.rb
148
150
  - test/test_devise_security_extension.rb