devise_security_extension 0.8.4 → 0.9.1

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA1:
-  metadata.gz: 4a269d39594fb817ba41d90c08145095269351da
-  data.tar.gz: 037dd34adf758a1d08418fd8b3eee7e56c3f9d01
+  metadata.gz: 8b1bd7589ea55a7edd6e8e56d8579e88b52cc3f4
+  data.tar.gz: 5825a8e120345807f429e6993eccbc8732450dcb
 SHA512:
-  metadata.gz: 88e384e31fc22e617fe52b18d5665c2fa86fd4b54fe480d7432006bf394a18a1957cfacb3e1d14a02f60bc0f81296641e82cc5eaa7d16400b3e41938caccaef8
-  data.tar.gz: 70a6446e21bd45b6f4667acbcf74e4ba5aa8181aa62942b9c0410487f83fff8c054ea85c018b7f71548a10f563df86571607859516bce6a1940d6439ca8e5770
+  metadata.gz: 854f361e0e72086510e7a950682426988dec71f6638e5d02cb4e46d67c8748489a98c9a4e6a5d76314d3a8148d99450e4de83afff73ea5b7b9532fda96b78a6f
+  data.tar.gz: 773f51925ce47a1618224fb92abf4c39dfa826de45d1314a07e2a83085cb5317a347b3be568a28f2d3d8a554a9ebe0b5828be7f9d5eebb071780b055c135ff45

data/Gemfile.lock

@@ -1,7 +1,7 @@
 PATH
   remote: .
   specs:
-    devise_security_extension (0.8.3)
+    devise_security_extension (0.8.4)
       devise (>= 2.0.0)
       rails (>= 3.1.1)
 

data/VERSION

@@ -1 +1 @@
-0.8.3
+0.9.1

data/app/controllers/devise/password_expired_controller.rb

@@ -11,7 +11,8 @@ class Devise::PasswordExpiredController < DeviseController
   end
 
   def update
-    if resource.update_with_password(resource_params)
+    resource.extend(Devise::Models::DatabaseAuthenticatablePatch)
+    if resource.update_with_password(params[resource_name])
       warden.session(scope)['password_expired'] = false
       set_flash_message :notice, :updated
       sign_in scope, resource, :bypass => true

data/devise_security_extension.gemspec

@@ -6,12 +6,12 @@
 
 Gem::Specification.new do |s|
   s.name = "devise_security_extension"
-  s.version = "0.8.4"
+  s.version = "0.9.1"
 
   s.required_rubygems_version = Gem::Requirement.new(">= 0") if s.respond_to? :required_rubygems_version=
   s.require_paths = ["lib"]
   s.authors = ["Marco Scholl", "Alexander Dreher"]
-  s.date = "2015-03-28"
+  s.date = "2015-04-02"
   s.description = "An enterprise security extension for devise, trying to meet industrial standard security demands for web applications."
   s.email = "team@phatworx.de"
   s.extra_rdoc_files = [
@@ -45,6 +45,7 @@ Gem::Specification.new do |s|
     "lib/devise_security_extension/models/security_questionable.rb",
     "lib/devise_security_extension/models/session_limitable.rb",
     "lib/devise_security_extension/orm/active_record.rb",
+    "lib/devise_security_extension/models/database_authenticatable_patch.rb",
     "lib/devise_security_extension/patches.rb",
     "lib/devise_security_extension/patches/confirmations_controller_captcha.rb",
     "lib/devise_security_extension/patches/confirmations_controller_security_question.rb",

data/lib/devise_security_extension.rb

@@ -93,3 +93,4 @@ require 'devise_security_extension/rails'
 require 'devise_security_extension/orm/active_record'
 require 'devise_security_extension/models/old_password'
 require 'devise_security_extension/models/security_question'
+require 'devise_security_extension/models/database_authenticatable_patch'

data/lib/devise_security_extension/models/database_authenticatable_patch.rb

@@ -0,0 +1,26 @@
+module Devise
+  module Models
+    module DatabaseAuthenticatablePatch
+      def update_with_password(params, *options)
+        current_password = params.delete(:current_password)
+
+        new_password = params[:password]
+        new_password_confirmation = params[:password_confirmation]
+
+        result = if valid_password?(current_password) && new_password.present? && new_password_confirmation.present?
+          update_attributes(params, *options)
+        else
+          self.assign_attributes(params, *options)
+          self.valid?
+          self.errors.add(:current_password, current_password.blank? ? :blank : :invalid)
+          self.errors.add(:password, new_password.blank? ? :blank : :invalid)
+          self.errors.add(:password_confirmation, new_password_confirmation.blank? ? :blank : :invalid)
+          false
+        end
+
+        clean_up_passwords
+        result
+      end
+    end
+  end
+end

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: devise_security_extension
 version: !ruby/object:Gem::Version
-  version: 0.8.4
+  version: 0.9.1
 platform: ruby
 authors:
 - Marco Scholl
@@ -9,7 +9,7 @@ authors:
 autorequire: 
 bindir: bin
 cert_chain: []
-date: 2015-03-28 00:00:00.000000000 Z
+date: 2015-04-02 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: rails
@@ -135,6 +135,7 @@ files:
 - lib/devise_security_extension/hooks/expirable.rb
 - lib/devise_security_extension/hooks/password_expirable.rb
 - lib/devise_security_extension/hooks/session_limitable.rb
+- lib/devise_security_extension/models/database_authenticatable_patch.rb
 - lib/devise_security_extension/models/expirable.rb
 - lib/devise_security_extension/models/old_password.rb
 - lib/devise_security_extension/models/password_archivable.rb