solidus_auth_devise 2.5.3 → 2.5.5

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: e442fd849cd81697c2738c0456da5353b23c973e33bb5d17cbe596da7afd790a
-  data.tar.gz: d74b42a53ea082caf38c5a4404890fd0b9ebafa102e1c1dd273ae05d52697a80
+  metadata.gz: eabe96f35091dbe9f4cac913044f4eb301bd049adb5cb1f8b7b98616847cdf0f
+  data.tar.gz: '009afc8b8585d494940949bebaae6dc3ffdf2f80fb26f16189ecd1299c65c669'
 SHA512:
-  metadata.gz: 7ca6fef05444b0005956f8a7089ebb4424b1c1e128c1eb04bfc7613401cfa0d7f9d29f663b3e0730860c1ff015610ea5543901f66d4f2f4b5c030a9fe14bf39d
-  data.tar.gz: 76582bc566e1626cc19d6a168ce693c980d3b65a8cba889e4ed9dbd90a62ba3c27c1e9233fc297435c681c57017afca58c04d4f8001591772ad535711fde9e82
+  metadata.gz: 7991cf3c2104f5e1cb21fe59d251a0d38c060ffb1b98788abc21598419034d19307879e0ebc075c1b9683a8c77bf1c2cb94438f21f197e6acb3a8105da0c76a8
+  data.tar.gz: 0abb460d4822728befdbfa648d3b190412968b3e75049e64f05b3b3304368ec4212cfb5feaedb7c3f3b1a92b8f256e7815c8daa37f82611eadb36be3ca0ab51c

data/.circleci/config.yml

@@ -1,6 +1,9 @@
 version: 2.1
 
 orbs:
+  # Required for feature specs.
+  browser-tools: circleci/browser-tools@1.1
+
   # Always take the latest version of the orb, this allows us to
   # run specs against Solidus supported versions only without the need
   # to change this configuration every time a Solidus version is released
@@ -9,19 +12,49 @@ orbs:
 
 jobs:
   run-specs-with-postgres:
-    executor: solidusio_extensions/postgres
+    executor:
+      name: solidusio_extensions/postgres
+      ruby_version: '3.1'
     steps:
-      - solidusio_extensions/run-tests
+      - browser-tools/install-browser-tools
+      - checkout
+      - solidusio_extensions/run-tests-solidus-master
+      - solidusio_extensions/store-test-results
+
   run-specs-with-mysql:
-    executor: solidusio_extensions/mysql
+    executor:
+      name: solidusio_extensions/mysql
+      ruby_version: '3.0'
+    steps:
+      - browser-tools/install-browser-tools
+      - checkout
+      - solidusio_extensions/run-tests-solidus-current
+      - solidusio_extensions/store-test-results
+
+  run-specs-with-sqlite:
+    executor:
+      name: solidusio_extensions/sqlite
+      ruby_version: '2.7'
     steps:
-      - solidusio_extensions/run-tests
+      - browser-tools/install-browser-tools
+      - checkout
+      - solidusio_extensions/run-tests-solidus-older
+      - solidusio_extensions/store-test-results
+
+  lint-code:
+    executor: solidusio_extensions/sqlite-memory
+    steps:
+      - browser-tools/install-browser-tools
+      - solidusio_extensions/lint-code
 
 workflows:
   "Run specs on supported Solidus versions":
     jobs:
       - run-specs-with-postgres
       - run-specs-with-mysql
+      - run-specs-with-sqlite
+      - lint-code
+
   "Weekly run specs against master":
     triggers:
       - schedule:
@@ -33,3 +66,4 @@ workflows:
     jobs:
       - run-specs-with-postgres
       - run-specs-with-mysql
+      - run-specs-with-sqlite

data/.gem_release.yml

@@ -1,5 +1,5 @@
 bump:
   recurse: false
-  file: 'lib/spree/auth/version.rb'
+  file: 'lib/solidus_auth_devise/version.rb'
   message: Bump SolidusAuthDevise to %{version}
   tag: true

data/.github/stale.yml

@@ -1,17 +1,17 @@
 # Number of days of inactivity before an issue becomes stale
 daysUntilStale: 60
 # Number of days of inactivity before a stale issue is closed
-daysUntilClose: 7
+daysUntilClose: false
 # Issues with these labels will never be considered stale
 exemptLabels:
   - pinned
   - security
 # Label to use when marking an issue as stale
-staleLabel: wontfix
+staleLabel: stale
 # Comment to post when marking an issue as stale. Set to `false` to disable
 markComment: >
   This issue has been automatically marked as stale because it has not had
-  recent activity. It will be closed if no further activity occurs. Thank you
+  recent activity. It might be closed if no further activity occurs. Thank you
   for your contributions.
 # Comment to post when closing a stale issue. Set to `false` to disable
-closeComment: false
+closeComment: false

data/.github_changelog_generator

@@ -0,0 +1,2 @@
+issues=false
+exclude-labels=infrastructure

data/.gitignore

@@ -7,6 +7,7 @@
 .project
 .sass-cache
 coverage
+Gemfile-local
 Gemfile.lock
 tmp
 nbproject
@@ -14,3 +15,7 @@ pkg
 *.swp
 spec/dummy
 spec/examples.txt
+/sandbox
+.rvmrc
+.ruby-version
+.ruby-gemset

data/.rubocop.yml

@@ -1,2 +1,7 @@
+inherit_from: .rubocop_todo.yml
+
 require:
   - solidus_dev_support/rubocop
+
+AllCops:
+  NewCops: disable

data/.rubocop_todo.yml

@@ -0,0 +1,398 @@
+# This configuration was generated by
+# `rubocop --auto-gen-config`
+# on 2022-09-09 11:12:37 UTC using RuboCop version 1.36.0.
+# The point is for the user to remove these configuration records
+# one by one as the offenses are removed from the code base.
+# Note that changes in the inspected code, or installation of new
+# versions of RuboCop, may require this file to be generated again.
+
+# Offense count: 2
+# This cop supports safe autocorrection (--autocorrect).
+# Configuration parameters: TreatCommentsAsGroupSeparators, ConsiderPunctuation, Include.
+# Include: **/*.gemspec
+Gemspec/OrderedDependencies:
+  Exclude:
+    - 'solidus_auth_devise.gemspec'
+
+# Offense count: 8
+# This cop supports safe autocorrection (--autocorrect).
+# Configuration parameters: EnforcedStyle, IndentationWidth.
+# SupportedStyles: with_first_argument, with_fixed_indentation
+Layout/ArgumentAlignment:
+  Exclude:
+    - 'app/models/spree/user.rb'
+    - 'lib/spree/authentication_helpers.rb'
+    - 'spec/controllers/spree/user_sessions_controller_spec.rb'
+    - 'spec/features/sign_out_spec.rb'
+
+# Offense count: 2
+# This cop supports safe autocorrection (--autocorrect).
+Layout/ElseAlignment:
+  Exclude:
+    - 'config/initializers/devise.rb'
+    - 'spec/support/features/fill_addresses_fields.rb'
+
+# Offense count: 1
+# This cop supports safe autocorrection (--autocorrect).
+# Configuration parameters: EmptyLineBetweenMethodDefs, EmptyLineBetweenClassDefs, EmptyLineBetweenModuleDefs, AllowAdjacentOneLineDefs, NumberOfEmptyLines.
+Layout/EmptyLineBetweenDefs:
+  Exclude:
+    - 'lib/spree/auth/engine.rb'
+
+# Offense count: 1
+# This cop supports safe autocorrection (--autocorrect).
+Layout/EmptyLines:
+  Exclude:
+    - 'lib/spree/auth/engine.rb'
+
+# Offense count: 2
+# This cop supports safe autocorrection (--autocorrect).
+# Configuration parameters: EnforcedStyleAlignWith, Severity.
+# SupportedStylesAlignWith: keyword, variable, start_of_line
+Layout/EndAlignment:
+  Exclude:
+    - 'config/initializers/devise.rb'
+    - 'spec/support/features/fill_addresses_fields.rb'
+
+# Offense count: 4
+# This cop supports safe autocorrection (--autocorrect).
+# Configuration parameters: Width, AllowedPatterns, IgnoredPatterns.
+Layout/IndentationWidth:
+  Exclude:
+    - 'config/initializers/devise.rb'
+    - 'spec/features/admin/sign_out_spec.rb'
+    - 'spec/features/sign_out_spec.rb'
+    - 'spec/support/features/fill_addresses_fields.rb'
+
+# Offense count: 4
+# This cop supports safe autocorrection (--autocorrect).
+# Configuration parameters: EnforcedStyle.
+# SupportedStyles: symmetrical, new_line, same_line
+Layout/MultilineMethodCallBraceLayout:
+  Exclude:
+    - 'spec/controllers/spree/user_registrations_controller_spec.rb'
+    - 'spec/controllers/spree/user_sessions_controller_spec.rb'
+    - 'spec/features/admin/password_reset_spec.rb'
+
+# Offense count: 1
+# This cop supports safe autocorrection (--autocorrect).
+Layout/SpaceAfterComma:
+  Exclude:
+    - 'spec/features/account_spec.rb'
+
+# Offense count: 1
+# This cop supports safe autocorrection (--autocorrect).
+Layout/SpaceBeforeComma:
+  Exclude:
+    - 'spec/features/account_spec.rb'
+
+# Offense count: 1
+# Configuration parameters: AllowedMethods, AllowedPatterns, IgnoredMethods.
+Lint/AmbiguousBlockAssociation:
+  Exclude:
+    - 'spec/controllers/spree/checkout_controller_spec.rb'
+
+# Offense count: 3
+# This cop supports safe autocorrection (--autocorrect).
+RSpec/BeEql:
+  Exclude:
+    - 'spec/models/user_spec.rb'
+
+# Offense count: 1
+RSpec/BeforeAfterAll:
+  Exclude:
+    - 'spec/models/user_spec.rb'
+
+# Offense count: 5
+# This cop supports safe autocorrection (--autocorrect).
+RSpec/Capybara/CurrentPathExpectation:
+  Exclude:
+    - 'spec/features/admin/sign_in_spec.rb'
+    - 'spec/features/sign_in_spec.rb'
+
+# Offense count: 69
+# This cop supports safe autocorrection (--autocorrect).
+# Configuration parameters: EnabledMethods.
+RSpec/Capybara/FeatureMethods:
+  Exclude:
+    - 'spec/features/account_spec.rb'
+    - 'spec/features/admin/password_reset_spec.rb'
+    - 'spec/features/admin/products_spec.rb'
+    - 'spec/features/admin/sign_in_spec.rb'
+    - 'spec/features/admin/sign_out_spec.rb'
+    - 'spec/features/admin_permissions_spec.rb'
+    - 'spec/features/change_email_spec.rb'
+    - 'spec/features/checkout_spec.rb'
+    - 'spec/features/confirmation_spec.rb'
+    - 'spec/features/order_spec.rb'
+    - 'spec/features/password_reset_spec.rb'
+    - 'spec/features/sign_in_spec.rb'
+    - 'spec/features/sign_out_spec.rb'
+    - 'spec/features/sign_up_spec.rb'
+    - 'spec/requests/spree/frontend/user_update_spec.rb'
+
+# Offense count: 12
+# This cop supports safe autocorrection (--autocorrect).
+RSpec/ContextMethod:
+  Exclude:
+    - 'spec/controllers/spree/checkout_controller_spec.rb'
+    - 'spec/controllers/spree/user_passwords_controller_spec.rb'
+    - 'spec/controllers/spree/user_registrations_controller_spec.rb'
+    - 'spec/controllers/spree/user_sessions_controller_spec.rb'
+    - 'spec/controllers/spree/users_controller_spec.rb'
+    - 'spec/models/order_spec.rb'
+
+# Offense count: 26
+# Configuration parameters: Prefixes.
+# Prefixes: when, with, without
+RSpec/ContextWording:
+  Exclude:
+    - 'spec/controllers/spree/checkout_controller_spec.rb'
+    - 'spec/controllers/spree/user_passwords_controller_spec.rb'
+    - 'spec/controllers/spree/user_registrations_controller_spec.rb'
+    - 'spec/controllers/spree/user_sessions_controller_spec.rb'
+    - 'spec/controllers/spree/users_controller_spec.rb'
+    - 'spec/features/account_spec.rb'
+    - 'spec/features/admin/password_reset_spec.rb'
+    - 'spec/features/admin/products_spec.rb'
+    - 'spec/features/admin_permissions_spec.rb'
+    - 'spec/mailers/user_mailer_spec.rb'
+    - 'spec/models/order_spec.rb'
+    - 'spec/models/user_spec.rb'
+    - 'spec/requests/spree/frontend/user_update_spec.rb'
+
+# Offense count: 6
+# This cop supports unsafe autocorrection (--autocorrect-all).
+# Configuration parameters: SkipBlocks, EnforcedStyle.
+# SupportedStyles: described_class, explicit
+RSpec/DescribedClass:
+  Exclude:
+    - 'spec/mailers/user_mailer_spec.rb'
+    - 'spec/models/user_spec.rb'
+
+# Offense count: 2
+# This cop supports safe autocorrection (--autocorrect).
+RSpec/EmptyLineAfterFinalLet:
+  Exclude:
+    - 'spec/controllers/spree/user_sessions_controller_spec.rb'
+    - 'spec/models/order_spec.rb'
+
+# Offense count: 1
+# This cop supports safe autocorrection (--autocorrect).
+RSpec/EmptyLineAfterSubject:
+  Exclude:
+    - 'spec/controllers/spree/checkout_controller_spec.rb'
+
+# Offense count: 1
+# This cop supports safe autocorrection (--autocorrect).
+# Configuration parameters: CustomTransform, IgnoredWords.
+RSpec/ExampleWording:
+  Exclude:
+    - 'spec/features/sign_in_spec.rb'
+
+# Offense count: 1
+# This cop supports safe autocorrection (--autocorrect).
+RSpec/ExpectActual:
+  Exclude:
+    - 'spec/controllers/spree/user_registrations_controller_spec.rb'
+
+# Offense count: 2
+# This cop supports unsafe autocorrection (--autocorrect-all).
+# Configuration parameters: EnforcedStyle.
+# SupportedStyles: method_call, block
+RSpec/ExpectChange:
+  Exclude:
+    - 'spec/controllers/spree/checkout_controller_spec.rb'
+    - 'spec/controllers/spree/user_registrations_controller_spec.rb'
+
+# Offense count: 3
+# Configuration parameters: Include, CustomTransform, IgnoreMethods, SpecSuffixOnly.
+# Include: **/*_spec*rb*, **/spec/**/*
+RSpec/FilePath:
+  Exclude:
+    - 'spec/mailers/user_mailer_spec.rb'
+    - 'spec/models/order_spec.rb'
+    - 'spec/models/user_spec.rb'
+
+# Offense count: 15
+# Configuration parameters: AssignmentOnly.
+RSpec/InstanceVariable:
+  Exclude:
+    - 'spec/controllers/spree/admin/user_passwords_controller_spec.rb'
+    - 'spec/controllers/spree/user_passwords_controller_spec.rb'
+    - 'spec/controllers/spree/user_registrations_controller_spec.rb'
+    - 'spec/controllers/spree/user_sessions_controller_spec.rb'
+    - 'spec/features/admin/sign_in_spec.rb'
+    - 'spec/features/checkout_spec.rb'
+    - 'spec/features/sign_in_spec.rb'
+    - 'spec/mailers/user_mailer_spec.rb'
+
+# Offense count: 2
+# This cop supports safe autocorrection (--autocorrect).
+RSpec/LeadingSubject:
+  Exclude:
+    - 'spec/controllers/spree/user_registrations_controller_spec.rb'
+    - 'spec/controllers/spree/user_sessions_controller_spec.rb'
+
+# Offense count: 5
+RSpec/LetSetup:
+  Exclude:
+    - 'spec/features/admin/password_reset_spec.rb'
+    - 'spec/features/confirmation_spec.rb'
+    - 'spec/features/password_reset_spec.rb'
+
+# Offense count: 6
+# Configuration parameters: .
+# SupportedStyles: have_received, receive
+RSpec/MessageSpies:
+  EnforcedStyle: receive
+
+# Offense count: 39
+RSpec/MultipleExpectations:
+  Max: 5
+
+# Offense count: 26
+# Configuration parameters: IgnoreSharedExamples.
+RSpec/NamedSubject:
+  Exclude:
+    - 'spec/controllers/spree/checkout_controller_spec.rb'
+    - 'spec/controllers/spree/user_registrations_controller_spec.rb'
+    - 'spec/controllers/spree/user_sessions_controller_spec.rb'
+    - 'spec/controllers/spree/users_controller_spec.rb'
+
+# Offense count: 30
+RSpec/NestedGroups:
+  Max: 5
+
+# Offense count: 3
+# This cop supports safe autocorrection (--autocorrect).
+# Configuration parameters: EnforcedStyle.
+# SupportedStyles: not_to, to_not
+RSpec/NotToNot:
+  Exclude:
+    - 'spec/controllers/spree/users_controller_spec.rb'
+    - 'spec/features/admin/password_reset_spec.rb'
+    - 'spec/features/password_reset_spec.rb'
+
+# Offense count: 2
+RSpec/RepeatedExampleGroupDescription:
+  Exclude:
+    - 'spec/models/user_spec.rb'
+
+# Offense count: 7
+# This cop supports safe autocorrection (--autocorrect).
+# Configuration parameters: EnforcedStyle.
+# SupportedStyles: and_return, block
+RSpec/ReturnFromStub:
+  Exclude:
+    - 'spec/controllers/spree/checkout_controller_spec.rb'
+    - 'spec/controllers/spree/products_controller_spec.rb'
+    - 'spec/models/order_spec.rb'
+
+# Offense count: 1
+RSpec/StubbedMock:
+  Exclude:
+    - 'spec/models/user_spec.rb'
+
+# Offense count: 2
+# Configuration parameters: IgnoreNameless, IgnoreSymbolicNames.
+RSpec/VerifiedDoubles:
+  Exclude:
+    - 'spec/features/confirmation_spec.rb'
+    - 'spec/models/user_spec.rb'
+
+# Offense count: 12
+# This cop supports unsafe autocorrection (--autocorrect-all).
+# Configuration parameters: Include.
+# Include: app/**/*.rb, config/**/*.rb, db/**/*.rb, lib/**/*.rb
+Rails/Output:
+  Exclude:
+    - 'db/default/users.rb'
+
+# Offense count: 8
+# This cop supports unsafe autocorrection (--autocorrect-all).
+# Configuration parameters: EnforcedStyle.
+# SupportedStyles: nested, compact
+Style/ClassAndModuleChildren:
+  Exclude:
+    - 'lib/controllers/backend/spree/admin/user_passwords_controller.rb'
+    - 'lib/controllers/backend/spree/admin/user_sessions_controller.rb'
+    - 'lib/controllers/frontend/spree/user_confirmations_controller.rb'
+    - 'lib/controllers/frontend/spree/user_passwords_controller.rb'
+    - 'lib/controllers/frontend/spree/user_registrations_controller.rb'
+    - 'lib/controllers/frontend/spree/user_sessions_controller.rb'
+    - 'lib/controllers/frontend/spree/users_controller.rb'
+    - 'lib/decorators/backend/controllers/spree/admin/orders/customer_details_controller_decorator.rb'
+
+# Offense count: 1
+# This cop supports safe autocorrection (--autocorrect).
+# Configuration parameters: EnforcedStyle.
+# SupportedStyles: compact, expanded
+Style/EmptyMethod:
+  Exclude:
+    - 'lib/controllers/backend/spree/admin/user_sessions_controller.rb'
+
+# Offense count: 1
+# This cop supports safe autocorrection (--autocorrect).
+Style/ExpandPathArguments:
+  Exclude:
+    - 'spec/support/confirm_helpers.rb'
+
+# Offense count: 3
+# This cop supports unsafe autocorrection (--autocorrect-all).
+Style/GlobalStdStream:
+  Exclude:
+    - 'db/default/users.rb'
+
+# Offense count: 6
+# Configuration parameters: MinBodyLength, AllowConsecutiveConditionals.
+Style/GuardClause:
+  Exclude:
+    - 'db/migrate/20101026184949_create_users.rb'
+    - 'db/migrate/20120203010234_add_reset_password_sent_at_to_spree_users.rb'
+    - 'db/migrate/20190125170630_add_reset_password_token_index_to_spree_users.rb'
+    - 'db/migrate/20200417153503_add_unconfirmed_email_to_spree_users.rb'
+    - 'lib/spree/authentication_helpers.rb'
+
+# Offense count: 1
+# This cop supports safe autocorrection (--autocorrect).
+Style/RedundantFileExtensionInRequire:
+  Exclude:
+    - 'db/seeds.rb'
+
+# Offense count: 1
+# This cop supports safe autocorrection (--autocorrect).
+# Configuration parameters: EnforcedStyle, AllowInnerSlashes.
+# SupportedStyles: slashes, percent_r, mixed
+Style/RegexpLiteral:
+  Exclude:
+    - 'spec/features/checkout_spec.rb'
+
+# Offense count: 1
+# This cop supports safe autocorrection (--autocorrect).
+# Configuration parameters: EnforcedStyle.
+# SupportedStyles: implicit, explicit
+Style/RescueStandardError:
+  Exclude:
+    - 'spec/requests/spree/frontend/user_update_spec.rb'
+
+# Offense count: 1
+# This cop supports safe autocorrection (--autocorrect).
+# Configuration parameters: AllowModifier.
+Style/SoleNestedConditional:
+  Exclude:
+    - 'config/initializers/warden.rb'
+
+# Offense count: 1
+# This cop supports unsafe autocorrection (--autocorrect-all).
+# Configuration parameters: Mode.
+Style/StringConcatenation:
+  Exclude:
+    - 'app/models/spree/user.rb'
+
+# Offense count: 6
+# This cop supports safe autocorrection (--autocorrect).
+# Configuration parameters: AllowHeredoc, AllowURI, URISchemes, IgnoreCopDirectives, AllowedPatterns, IgnoredPatterns.
+# URISchemes: http, https
+Layout/LineLength:
+  Max: 227

data/CHANGELOG.md

@@ -1,5 +1,52 @@
 # Changelog
 
+## [v2.5.5](https://github.com/solidusio/solidus_auth_devise/tree/v2.5.5) (2022-09-19)
+
+[Full Changelog](https://github.com/solidusio/solidus_auth_devise/compare/v2.5.4...v2.5.5)
+
+**Merged pull requests:**
+
+- Run the CI on all supported ruby versions [\#229](https://github.com/solidusio/solidus_auth_devise/pull/229) ([elia](https://github.com/elia))
+- Utilize Devise location helpers for redirecting [\#228](https://github.com/solidusio/solidus_auth_devise/pull/228) ([cpfergus1](https://github.com/cpfergus1))
+- Update to use forked solidus\_frontend when needed [\#227](https://github.com/solidusio/solidus_auth_devise/pull/227) ([waiting-for-dev](https://github.com/waiting-for-dev))
+- Fix keyword usage for Ruby 3.x support on specs [\#226](https://github.com/solidusio/solidus_auth_devise/pull/226) ([jtapia](https://github.com/jtapia))
+- Fix locale inconsistence and remove redundant template [\#224](https://github.com/solidusio/solidus_auth_devise/pull/224) ([bitberry-dev](https://github.com/bitberry-dev))
+- Specs and setup process housekeeping [\#222](https://github.com/solidusio/solidus_auth_devise/pull/222) ([elia](https://github.com/elia))
+- Stop using try\_spree\_current\_user [\#221](https://github.com/solidusio/solidus_auth_devise/pull/221) ([elia](https://github.com/elia))
+- Update to the latest solidus\_dev\_support defaults [\#220](https://github.com/solidusio/solidus_auth_devise/pull/220) ([elia](https://github.com/elia))
+- Fix build [\#219](https://github.com/solidusio/solidus_auth_devise/pull/219) ([gsmendoza](https://github.com/gsmendoza))
+
+## [v2.5.4](https://github.com/solidusio/solidus_auth_devise/tree/v2.5.4) (2021-11-17)
+
+[Full Changelog](https://github.com/solidusio/solidus_auth_devise/compare/v2.5.3...v2.5.4)
+
+- Fix authentication bypass by CSRF weakness [GHSA-xm34-v85h-9pg2](https://github.com/solidusio/solidus_auth_devise/security/advisories/GHSA-xm34-v85h-9pg2)
+
+**Closed issues:**
+
+- This line doesn't do anything [\#214](https://github.com/solidusio/solidus_auth_devise/issues/214)
+
+**Merged pull requests:**
+
+- Bump version and update changelog [\#217](https://github.com/solidusio/solidus_auth_devise/pull/217) ([waiting-for-dev](https://github.com/waiting-for-dev))
+- Remove line that doesn't do anything [\#215](https://github.com/solidusio/solidus_auth_devise/pull/215) ([jarednorman](https://github.com/jarednorman))
+- Allow using auth\_devise with discard [\#209](https://github.com/solidusio/solidus_auth_devise/pull/209) ([kennyadsl](https://github.com/kennyadsl))
+
+## [v2.5.3](https://github.com/solidusio/solidus_auth_devise/tree/v2.5.3) (2021-01-29)
+
+[Full Changelog](https://github.com/solidusio/solidus_auth_devise/compare/v2.5.2...v2.5.3)
+
+**Fixed bugs:**
+
+- Infinte redirection on password change [\#202](https://github.com/solidusio/solidus_auth_devise/issues/202)
+
+**Merged pull requests:**
+
+- Explicitely require paranoia when needed [\#207](https://github.com/solidusio/solidus_auth_devise/pull/207) ([kennyadsl](https://github.com/kennyadsl))
+- Allow Solidus 3 version [\#205](https://github.com/solidusio/solidus_auth_devise/pull/205) ([peterberkenbosch](https://github.com/peterberkenbosch))
+- Fixes \#202 : infinite redirection bug on password change [\#204](https://github.com/solidusio/solidus_auth_devise/pull/204) ([nomad-mando](https://github.com/nomad-mando))
+- Relax Ruby required version to support Ruby 3.0+ [\#203](https://github.com/solidusio/solidus_auth_devise/pull/203) ([filippoliverani](https://github.com/filippoliverani))
+
 ## [v2.5.2](https://github.com/solidusio/solidus_auth_devise/tree/v2.5.2) (2020-11-11)
 
 [Full Changelog](https://github.com/solidusio/solidus_auth_devise/compare/v2.5.1...v2.5.2)
@@ -42,7 +89,7 @@
 - Cant locate devise.rb file to locate secret key. [\#188](https://github.com/solidusio/solidus_auth_devise/issues/188)
 - RuntimeError: Can't modify frozen hash [\#184](https://github.com/solidusio/solidus_auth_devise/issues/184)
 - Bug: NameError [\#174](https://github.com/solidusio/solidus_auth_devise/issues/174)
-- `devise.user\_registrations` key is not the same in the view [\#119](https://github.com/solidusio/solidus_auth_devise/issues/119)
+- `devise.user_registrations` key is not the same in the view [\#119](https://github.com/solidusio/solidus_auth_devise/issues/119)
 - The update action of the password controller from devise makes my app go into a loop. [\#78](https://github.com/solidusio/solidus_auth_devise/issues/78)
 
 **Merged pull requests:**
@@ -72,7 +119,7 @@
 
 - Rails 6, Production only issue, works fine in dev, tripped up assets:precompile build process on Heroku, compiled fine locally. [\#175](https://github.com/solidusio/solidus_auth_devise/issues/175)
 - Spree.user\_class not using my specific class [\#169](https://github.com/solidusio/solidus_auth_devise/issues/169)
-- Missing `config.secret\_key\_base` from default devise.rb? [\#33](https://github.com/solidusio/solidus_auth_devise/issues/33)
+- Missing `config.secret_key_base` from default devise.rb? [\#33](https://github.com/solidusio/solidus_auth_devise/issues/33)
 
 **Merged pull requests:**
 
@@ -130,7 +177,7 @@
 - Run specs on CircleCi with shared configuration [\#143](https://github.com/solidusio/solidus_auth_devise/pull/143) ([kennyadsl](https://github.com/kennyadsl))
 - Lock SQLite3 to version 1.3 [\#142](https://github.com/solidusio/solidus_auth_devise/pull/142) ([aitbw](https://github.com/aitbw))
 - Add Solidus v2.8 to Travis config [\#141](https://github.com/solidusio/solidus_auth_devise/pull/141) ([aitbw](https://github.com/aitbw))
-- Add DB index to `reset\_password\_token` field [\#140](https://github.com/solidusio/solidus_auth_devise/pull/140) ([spaghetticode](https://github.com/spaghetticode))
+- Add DB index to `reset_password_token` field [\#140](https://github.com/solidusio/solidus_auth_devise/pull/140) ([spaghetticode](https://github.com/spaghetticode))
 - Remove warnings [\#139](https://github.com/solidusio/solidus_auth_devise/pull/139) ([jtapia](https://github.com/jtapia))
 - Add missing translation [\#137](https://github.com/solidusio/solidus_auth_devise/pull/137) ([spaghetticode](https://github.com/spaghetticode))
 - Allow Spree::Admin::UserPasswordsController to be accessed from admin… [\#136](https://github.com/solidusio/solidus_auth_devise/pull/136) ([acreilly](https://github.com/acreilly))
@@ -142,7 +189,7 @@
 - Add Solidus v2.7 to .travis.yml [\#127](https://github.com/solidusio/solidus_auth_devise/pull/127) ([jacobherrington](https://github.com/jacobherrington))
 - Fix spree routes [\#125](https://github.com/solidusio/solidus_auth_devise/pull/125) ([jtapia](https://github.com/jtapia))
 - Remove unnecessary decorator [\#122](https://github.com/solidusio/solidus_auth_devise/pull/122) ([jhawthorn](https://github.com/jhawthorn))
-- Disable backend footer profile edit link if role cannot edit users [\#120](https://github.com/solidusio/solidus_auth_devise/pull/120) ([gianlucarizzo](https://github.com/gianlucarizzo))
+- Disable backend footer profile edit link if role cannot edit users [\#120](https://github.com/solidusio/solidus_auth_devise/pull/120) ([cringegnere](https://github.com/cringegnere))
 
 ## [v2.1.0](https://github.com/solidusio/solidus_auth_devise/tree/v2.1.0) (2018-01-22)
 
@@ -158,7 +205,6 @@
 - update spec according new solidus behaviour for 404 [\#115](https://github.com/solidusio/solidus_auth_devise/pull/115) ([ccarruitero](https://github.com/ccarruitero))
 - Don't require deface for solidus 2.5+ [\#114](https://github.com/solidusio/solidus_auth_devise/pull/114) ([jhawthorn](https://github.com/jhawthorn))
 - Test that we are acting as paranoid not it's behaviour [\#113](https://github.com/solidusio/solidus_auth_devise/pull/113) ([tvdeyen](https://github.com/tvdeyen))
-- Remove references to dash [\#104](https://github.com/solidusio/solidus_auth_devise/pull/104) ([jhawthorn](https://github.com/jhawthorn))
 - Reset api key when assigning password [\#99](https://github.com/solidusio/solidus_auth_devise/pull/99) ([jhawthorn](https://github.com/jhawthorn))
 - RFC: Support Backend-Only Stores [\#96](https://github.com/solidusio/solidus_auth_devise/pull/96) ([stewart](https://github.com/stewart))
 
@@ -174,6 +220,7 @@
 - Remove has\_many orders [\#107](https://github.com/solidusio/solidus_auth_devise/pull/107) ([jhawthorn](https://github.com/jhawthorn))
 - Use base spec\_helper from solidus\_support [\#106](https://github.com/solidusio/solidus_auth_devise/pull/106) ([jhawthorn](https://github.com/jhawthorn))
 - Extract \*\_available? to solidus\_support [\#105](https://github.com/solidusio/solidus_auth_devise/pull/105) ([jhawthorn](https://github.com/jhawthorn))
+- Remove references to dash [\#104](https://github.com/solidusio/solidus_auth_devise/pull/104) ([jhawthorn](https://github.com/jhawthorn))
 - match logout route to devise configuration [\#103](https://github.com/solidusio/solidus_auth_devise/pull/103) ([BenMorganIO](https://github.com/BenMorganIO))
 
 ## [v1.6.4](https://github.com/solidusio/solidus_auth_devise/tree/v1.6.4) (2017-07-24)
@@ -183,7 +230,7 @@
 **Closed issues:**
 
 - Adding omniauthable to to Spree::User [\#98](https://github.com/solidusio/solidus_auth_devise/issues/98)
-- Use of `helper\_method` should be wrapped in `respond\_to?` check [\#90](https://github.com/solidusio/solidus_auth_devise/issues/90)
+- Use of `helper_method` should be wrapped in `respond_to?` check [\#90](https://github.com/solidusio/solidus_auth_devise/issues/90)
 - Deface Override requires solidus\_frontend [\#85](https://github.com/solidusio/solidus_auth_devise/issues/85)
 
 **Merged pull requests:**
@@ -192,7 +239,7 @@
 - Only apply frontend override if frontend present [\#95](https://github.com/solidusio/solidus_auth_devise/pull/95) ([stewart](https://github.com/stewart))
 - Update outdated development dependencies [\#94](https://github.com/solidusio/solidus_auth_devise/pull/94) ([stewart](https://github.com/stewart))
 - Remove use of deprecated `bypass` opt for sign\_in [\#93](https://github.com/solidusio/solidus_auth_devise/pull/93) ([stewart](https://github.com/stewart))
-- Wrap use of `helper\_method` in `respond\_to?` [\#92](https://github.com/solidusio/solidus_auth_devise/pull/92) ([stewart](https://github.com/stewart))
+- Wrap use of `helper_method` in `respond_to?` [\#92](https://github.com/solidusio/solidus_auth_devise/pull/92) ([stewart](https://github.com/stewart))
 - Remove unused line [\#75](https://github.com/solidusio/solidus_auth_devise/pull/75) ([Murph33](https://github.com/Murph33))
 
 ## [v1.6.3](https://github.com/solidusio/solidus_auth_devise/tree/v1.6.3) (2017-05-09)
@@ -205,7 +252,7 @@
 - Remove Unnecessary `require` statements. [\#89](https://github.com/solidusio/solidus_auth_devise/pull/89) ([stewart](https://github.com/stewart))
 - Do not require core email validator [\#87](https://github.com/solidusio/solidus_auth_devise/pull/87) ([tvdeyen](https://github.com/tvdeyen))
 - Fix warnings on Rails 5.0, support Rails 5.1 [\#86](https://github.com/solidusio/solidus_auth_devise/pull/86) ([jhawthorn](https://github.com/jhawthorn))
-- Change deface dependency from `~\> 1.0.0` to `~\> 1.0` [\#81](https://github.com/solidusio/solidus_auth_devise/pull/81) ([jordan-brough](https://github.com/jordan-brough))
+- Change deface dependency from `~> 1.0.0` to `~> 1.0` [\#81](https://github.com/solidusio/solidus_auth_devise/pull/81) ([jordan-brough](https://github.com/jordan-brough))
 - Switch to rails 5 spec keyword request syntax [\#80](https://github.com/solidusio/solidus_auth_devise/pull/80) ([jhawthorn](https://github.com/jhawthorn))
 - Add missing translations for already\_authenticated [\#79](https://github.com/solidusio/solidus_auth_devise/pull/79) ([vladstoick](https://github.com/vladstoick))