lockdown 0.5.19 → 0.5.20

data/History.txt

@@ -1,3 +1,7 @@
+== 0.5.20 2008-08-04
+* Fixed authorized? method to avoid ActionController::Routing::Routes.recognize_path invalid return values
+* Added option[:session_timeout_method]. This method will be called when the session times out.
+
 == 0.5.19 2008-08-01
 * Modified the lockdown system to account for permissions added/removed from user groups in init.rb.  This will NOT manage user groups defined via the admin screens.
 == 0.5.18 2008-07-23

data/app_generators/lockdown/templates/init.rb

@@ -11,6 +11,9 @@ Lockdown::System.configure do
   # Set timeout to 1 hour:
   #       options[:session_timeout] = (60 * 60)
   #
+  # Call method when timeout occurs (method must be callable by controller):
+  #       options[:session_timeout_method] = :clear_session_values
+  #
   # Set system to logout if unauthorized access is attempted:
   #       options[:logout_on_access_violation] = false
   #

data/lib/lockdown/controller.rb

@@ -46,6 +46,10 @@ module Lockdown
         def check_session_expiry
           if session[:expiry_time] && session[:expiry_time] < Time.now
             nil_lockdown_values
+            timeout_method = Lockdown::System.fetch(:session_timeout_method)
+            if timeout_method.is_a?(Symbol) && self.respond_to?(timeout_method)
+              send(timeout_method) 
+            end
           end
           session[:expiry_time] = Time.now + Lockdown::System.fetch(:session_timeout)
         end
@@ -181,11 +185,11 @@ module Lockdown
 
           # Test for a named routed
           begin
-            hsh = ActionController::Routing::Routes.recognize_path(url)
-            unless hsh.nil?
+            hsh = ActionController::Routing::Routes.recognize_path(path)
+            unless hsh.nil? || hsh[:id]
               return true if path_allowed?(path_from_hash(hsh)) 
             end
-          rescue Exception => e
+          rescue Exception 
             # continue on
           end
 

data/lib/lockdown/version.rb

@@ -2,7 +2,7 @@ module Lockdown #:nodoc:
   module VERSION #:nodoc:
     MAJOR = 0
     MINOR = 5
-    TINY  = 19
+    TINY  = 20
 
     STRING = [MAJOR, MINOR, TINY].join('.')
   end

data/website/index.html

@@ -33,7 +33,7 @@
     <h1>Lockdown</h1>
     <div id="version" class="clickable" onclick='document.location = "http://rubyforge.org/projects/lockdown"; return false'>
       <p>Get Version</p>
-      <a href="http://rubyforge.org/projects/lockdown" class="numbers">0.5.19</a>
+      <a href="http://rubyforge.org/projects/lockdown" class="numbers">0.5.20</a>
     </div>
     <h2>What</h2>
 <p>Lockdown is a authentication/authorization system for RubyOnRails (ver 2.x). While Merb functionality is in place, it is not complete.  There will be a release solely focused on getting the Merb functionality up to par with Rails.</p>

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification 
 name: lockdown
 version: !ruby/object:Gem::Version 
-  version: 0.5.19
+  version: 0.5.20
 platform: ruby
 authors: 
 - Andrew Stone
@@ -9,7 +9,7 @@ autorequire:
 bindir: bin
 cert_chain: []
 
-date: 2008-08-01 00:00:00 -04:00
+date: 2008-08-04 00:00:00 -04:00
 default_executable: 
 dependencies: 
 - !ruby/object:Gem::Dependency