sorcery 0.1.3 → 0.2.0

data/lib/sorcery/model/submodules/reset_password.rb

@@ -0,0 +1,96 @@
+module Sorcery
+  module Model
+    module Submodules
+      # This submodule adds the ability to reset password via email confirmation.
+      # When the user requests an email is sent to him with a url.
+      # The url includes a token, which is also saved with the user's record in the db.
+      # The token has configurable expiration.
+      # When the user clicks the url in the email, providing the token has not yet expired, he will be able to reset his password via a form.
+      #
+      # When using this submodule, supplying a mailer is mandatory.
+      module ResetPassword       
+        def self.included(base)
+          base.sorcery_config.class_eval do
+            attr_accessor :reset_password_token_attribute_name,              # reset password code attribute name.
+                          :reset_password_token_expires_at_attribute_name,   # expires at attribute name.
+                          :reset_password_email_sent_at_attribute_name,      # when was email sent, used for hammering protection.
+                          :reset_password_mailer,                            # mailer class. Needed.
+                          :reset_password_email_method_name,                 # reset password email method on your mailer class.
+                          :reset_password_expiration_period,                 # how many seconds before the reset request expires. nil for never expires.
+                          :reset_password_time_between_emails                # hammering protection, how long to wait before allowing another email to be sent.
+
+          end
+          
+          base.sorcery_config.instance_eval do
+            @defaults.merge!(:@reset_password_token_attribute_name            => :reset_password_token,
+                             :@reset_password_token_expires_at_attribute_name => :reset_password_token_expires_at,
+                             :@reset_password_email_sent_at_attribute_name    => :reset_password_email_sent_at,
+                             :@reset_password_mailer                          => nil,
+                             :@reset_password_email_method_name               => :reset_password_email,
+                             :@reset_password_expiration_period               => nil,
+                             :@reset_password_time_between_emails             => 5.minutes )
+
+            reset!
+          end
+          
+          base.sorcery_config.after_config << :validate_mailer_defined
+          
+          base.extend(ClassMethods)
+          base.send(:include, TemporaryToken)
+          base.send(:include, InstanceMethods)
+        end
+        
+        module ClassMethods
+          # Find user by token, also checks for expiration.
+          # Returns the user if token found and is valid.
+          def load_from_reset_password_token(token)
+            token_attr_name = @sorcery_config.reset_password_token_attribute_name
+            token_expiration_date_attr = @sorcery_config.reset_password_token_expires_at_attribute_name
+            load_from_token(token, token_attr_name, token_expiration_date_attr)
+          end
+          
+          protected
+          
+          # This submodule requires the developer to define his own mailer class to be used by it.
+          def validate_mailer_defined
+            msg = "To use reset_password submodule, you must define a mailer (config.reset_password_mailer = YourMailerClass)."
+            raise ArgumentError, msg if @sorcery_config.reset_password_mailer == nil
+          end
+
+        end
+        
+        module InstanceMethods
+          # generates a reset code with expiration and sends an email to the user.
+          def deliver_reset_password_instructions!
+            config = sorcery_config
+            # hammering protection
+            return if config.reset_password_time_between_emails && self.send(config.reset_password_email_sent_at_attribute_name) && self.send(config.reset_password_email_sent_at_attribute_name) > config.reset_password_time_between_emails.ago.utc
+            self.send(:"#{config.reset_password_token_attribute_name}=", generate_random_token)
+            self.send(:"#{config.reset_password_token_expires_at_attribute_name}=", Time.now.utc + config.reset_password_expiration_period) if config.reset_password_expiration_period
+            self.send(:"#{config.reset_password_email_sent_at_attribute_name}=", Time.now.utc)
+            self.class.transaction do
+              self.save!(:validate => false)
+              generic_send_email(:reset_password_email_method_name, :reset_password_mailer)
+            end
+          end
+          
+          # Clears token and tries to update the new password for the user.
+          def reset_password!(params)
+            clear_reset_password_token
+            update_attributes(params)
+          end
+
+          protected
+
+          # Clears the token.
+          def clear_reset_password_token
+            config = sorcery_config
+            self.send(:"#{config.reset_password_token_attribute_name}=", nil)
+            self.send(:"#{config.reset_password_token_expires_at_attribute_name}=", nil) if config.reset_password_expiration_period
+          end
+        end
+        
+      end
+    end
+  end
+end

data/lib/sorcery/model/submodules/user_activation.rb

@@ -8,27 +8,33 @@ module Sorcery
       module UserActivation
         def self.included(base)
           base.sorcery_config.class_eval do
-            attr_accessor :activation_state_attribute_name,         # the attribute name to hold activation state (active/pending).
-                          :activation_code_attribute_name,          # the attribute name to hold activation code (sent by email).
-                          :user_activation_mailer,                  # your mailer class. Needed.
-                          :activation_needed_email_method_name,     # activation needed email method on your mailer class.
-                          :activation_success_email_method_name,    # activation success email method on your mailer class.
-                          :prevent_non_active_users_to_login        # do you want to prevent or allow users that did not activate by email to login?
+            attr_accessor :activation_state_attribute_name,               # the attribute name to hold activation state (active/pending).
+                          :activation_token_attribute_name,               # the attribute name to hold activation code (sent by email).
+                          :activation_token_expires_at_attribute_name,    # the attribute name to hold activation code expiration date. 
+                          :activation_token_expiration_period,            # how many seconds before the activation code expires. nil for never expires.
+                          :user_activation_mailer,                        # your mailer class. Required.
+                          :activation_needed_email_method_name,           # activation needed email method on your mailer class.
+                          :activation_success_email_method_name,          # activation success email method on your mailer class.
+                          :prevent_non_active_users_to_login              # do you want to prevent or allow users that did not activate by email to login?
           end
           
           base.sorcery_config.instance_eval do
-            @defaults.merge!(:@activation_state_attribute_name      => :activation_state,
-                             :@activation_code_attribute_name       => :activation_code,
-                             :@user_activation_mailer               => nil,
-                             :@activation_needed_email_method_name  => :activation_needed_email,
-                             :@activation_success_email_method_name => :activation_success_email,
-                             :@prevent_non_active_users_to_login    => true)
+            @defaults.merge!(:@activation_state_attribute_name             => :activation_state,
+                             :@activation_token_attribute_name             => :activation_token,
+                             :@activation_token_expires_at_attribute_name  => :activation_token_expires_at,
+                             :@activation_token_expiration_period          => nil,
+                             :@user_activation_mailer                      => nil,
+                             :@activation_needed_email_method_name         => :activation_needed_email,
+                             :@activation_success_email_method_name        => :activation_success_email,
+                             :@prevent_non_active_users_to_login           => true)
             reset!
           end
           
           base.class_eval do
-            before_create :setup_activation
-            after_create :send_activation_needed_email!
+            # don't setup activation if no password supplied - this user is created automatically
+            before_create :setup_activation, :if => Proc.new { |user| user.send(sorcery_config.password_attribute_name).present? }
+            # don't send activation needed email if no crypted password created - this user is external (OAuth etc.)
+            after_create  :send_activation_needed_email!, :if => Proc.new { |user| !user.external?}
           end
           
           base.sorcery_config.after_config << :validate_mailer_defined
@@ -36,10 +42,22 @@ module Sorcery
           base.sorcery_config.before_authenticate << :prevent_non_active_login
           
           base.extend(ClassMethods)
+          base.send(:include, TemporaryToken)
           base.send(:include, InstanceMethods)
         end
         
         module ClassMethods
+          # Find user by token, also checks for expiration.
+          # Returns the user if token found and is valid.
+          def load_from_activation_token(token)
+            token_attr_name = @sorcery_config.activation_token_attribute_name
+            token_expiration_date_attr = @sorcery_config.activation_token_expires_at_attribute_name
+            load_from_token(token, token_attr_name, token_expiration_date_attr)
+          end
+          
+          protected
+          
+          # This submodule requires the developer to define his own mailer class to be used by it.
           def validate_mailer_defined
             msg = "To use user_activation submodule, you must define a mailer (config.user_activation_mailer = YourMailerClass)."
             raise ArgumentError, msg if @sorcery_config.user_activation_mailer == nil
@@ -47,23 +65,26 @@ module Sorcery
         end
         
         module InstanceMethods
+          # clears activation code, sets the user as 'active' and optionaly sends a success email.
           def activate!
             config = sorcery_config
-            self.send(:"#{config.activation_code_attribute_name}=", nil)
+            self.send(:"#{config.activation_token_attribute_name}=", nil)
             self.send(:"#{config.activation_state_attribute_name}=", "active")
-            send_activation_success_email!
+            send_activation_success_email! unless self.external?
             save!(:validate => false) # don't run validations
           end
-
+          
           protected
 
           def setup_activation
             config = sorcery_config
-            generated_activation_code = CryptoProviders::SHA1.encrypt( Time.now.to_s.split(//).sort_by {rand}.join )
-            self.send(:"#{config.activation_code_attribute_name}=", generated_activation_code)
+            generated_activation_token = generate_random_token
+            self.send(:"#{config.activation_token_attribute_name}=", generated_activation_token)
             self.send(:"#{config.activation_state_attribute_name}=", "pending")
+            self.send(:"#{config.activation_token_expires_at_attribute_name}=", Time.now.utc + config.activation_token_expiration_period) if config.activation_token_expiration_period
           end
 
+          # called automatically after user initial creation.
           def send_activation_needed_email!
             generic_send_email(:activation_needed_email_method_name, :user_activation_mailer) unless sorcery_config.activation_needed_email_method_name.nil?
           end

data/lib/sorcery/model/temporary_token.rb

@@ -0,0 +1,22 @@
+module Sorcery
+  module Model
+    # This module encapsulates the logic for temporary token.
+    # A temporary token is created to identify a user in scenarios such as reseting password and activating the user by email.
+    module TemporaryToken
+      def self.included(base)
+        base.extend(ClassMethods)
+      end
+      
+      module ClassMethods
+        def load_from_token(token, token_attr_name, token_expiration_date_attr)
+          return nil if token.blank?
+          user = where("#{token_attr_name} = ?", token).first
+          if !user.blank? && !user.send(token_expiration_date_attr).nil?
+            return Time.now.utc < user.send(token_expiration_date_attr) ? user : nil
+          end
+          user
+        end
+      end
+    end
+  end
+end

data/lib/sorcery/model.rb

@@ -55,7 +55,8 @@ module Sorcery
         _salt = user.send(@sorcery_config.salt_attribute_name) if user && !@sorcery_config.salt_attribute_name.nil? && !@sorcery_config.encryption_provider.nil?
         user if user && @sorcery_config.before_authenticate.all? {|c| user.send(c)} && credentials_match?(user.send(@sorcery_config.crypted_password_attribute_name),credentials[1],_salt)
       end
-
+      
+      # Calls the configured encryption provider to compare the supplied password with the encrypted one.
       def credentials_match?(crypted, *tokens)
         return crypted == tokens.join if @sorcery_config.encryption_provider.nil?
         @sorcery_config.encryption_provider.matches?(crypted, *tokens)
@@ -78,13 +79,19 @@ module Sorcery
         self.class.sorcery_config
       end
       
+      # identifies whether this user is regular, i.e. we hold his credentials in our db,
+      # or that he is external, and his credentials are saved elsewhere (twitter/facebook etc.).
+      def external?
+        send(sorcery_config.crypted_password_attribute_name).nil?
+      end
+      
       protected
       
       # creates new salt and saves it.
       # encrypts password with salt and save it.
       def encrypt_password
         config = sorcery_config
-        new_salt = self.send(:"#{config.salt_attribute_name}=", generate_random_code) if !config.salt_attribute_name.nil?
+        new_salt = self.send(:"#{config.salt_attribute_name}=", generate_random_token) if !config.salt_attribute_name.nil?
         self.send(:"#{config.crypted_password_attribute_name}=", self.class.encrypt(self.send(config.password_attribute_name),new_salt))
       end
 
@@ -104,7 +111,7 @@ module Sorcery
       end
       
       # Random code, used for salt and temporary tokens.
-      def generate_random_code
+      def generate_random_token
         return Digest::SHA1.hexdigest( Time.now.to_s.split(//).sort_by {rand}.join )
       end
     end

data/lib/sorcery/test_helpers.rb

@@ -0,0 +1,84 @@
+module Sorcery
+  module TestHelpers
+    SUBMODUELS_AUTO_ADDED_CONTROLLER_FILTERS = [:register_last_activity_time_to_db, :deny_banned_user, :validate_session]
+
+    def create_new_user(attributes_hash = nil)
+      user_attributes_hash = attributes_hash || {:username => 'gizmo', :email => "bla@bla.com", :password => 'secret'}
+      @user = User.new(user_attributes_hash)
+      @user.save!
+      @user
+    end
+
+    def create_new_external_user(provider, attributes_hash = nil)
+      user_attributes_hash = attributes_hash || {:username => 'gizmo', :authentications_attributes => [{:provider => provider, :uid => 123}]}
+      @user = User.new(user_attributes_hash)
+      @user.save!
+      @user
+    end
+    
+    def login_user(user = nil)
+      user ||= @user
+      subject.send(:login_user,user)
+      subject.send(:after_login!,user,[user.username,'secret'])
+    end
+
+    def logout_user
+      subject.send(:logout)
+    end
+
+    def clear_user_without_logout
+      subject.instance_variable_set(:@current_user,nil)
+    end
+
+    def sorcery_reload!(submodules = [], options = {})
+      reload_user_class
+
+      # return to no-module configuration
+      ::Sorcery::Controller::Config.init!
+      ::Sorcery::Controller::Config.reset!
+
+      # remove all plugin before_filters so they won't fail other tests.
+      # I don't like this way, but I didn't find another.
+      # hopefully it won't break until Rails 4.
+      ApplicationController._process_action_callbacks.delete_if {|c| SUBMODUELS_AUTO_ADDED_CONTROLLER_FILTERS.include?(c.filter) }
+
+      # configure
+      ::Sorcery::Controller::Config.submodules = submodules
+      ::Sorcery::Controller::Config.user_class = nil
+      ActionController::Base.send(:include,::Sorcery::Controller)
+
+      User.activate_sorcery! do |config|
+        options.each do |property,value|
+          config.send(:"#{property}=", value)
+        end
+      end
+    end
+
+    def sorcery_model_property_set(property, *values)
+      User.class_eval do
+        sorcery_config.send(:"#{property}=", *values)
+      end
+    end
+
+    def sorcery_controller_property_set(property, value)
+      ApplicationController.activate_sorcery! do |config|
+        config.send(:"#{property}=", value)
+      end
+    end
+    
+    def sorcery_controller_oauth_property_set(provider, property, value)
+      ApplicationController.activate_sorcery! do |config|
+        config.send(provider).send(:"#{property}=", value)
+      end
+    end
+
+    private
+
+    # reload user class between specs
+    # so it will be possible to test the different submodules in isolation
+    def reload_user_class
+      Object.send(:remove_const,:User)
+      load 'user.rb'
+    end
+  end
+end

data/lib/sorcery.rb

@@ -1,10 +1,14 @@
 module Sorcery
   autoload :Model, 'sorcery/model'
   module Model
+    autoload :TemporaryToken, 'sorcery/model/temporary_token'
     module Submodules
       autoload :UserActivation, 'sorcery/model/submodules/user_activation'
-      autoload :PasswordReset, 'sorcery/model/submodules/password_reset'
+      autoload :ResetPassword, 'sorcery/model/submodules/reset_password'
       autoload :RememberMe, 'sorcery/model/submodules/remember_me'
+      autoload :ActivityLogging, 'sorcery/model/submodules/activity_logging'
+      autoload :BruteForceProtection, 'sorcery/model/submodules/brute_force_protection'
+      autoload :Oauth, 'sorcery/model/submodules/oauth'
     end
   end
   autoload :Controller, 'sorcery/controller'
@@ -14,6 +18,16 @@ module Sorcery
       autoload :SessionTimeout, 'sorcery/controller/submodules/session_timeout'
       autoload :BruteForceProtection, 'sorcery/controller/submodules/brute_force_protection'
       autoload :HttpBasicAuth, 'sorcery/controller/submodules/http_basic_auth'
+      autoload :ActivityLogging, 'sorcery/controller/submodules/activity_logging'
+      autoload :Oauth, 'sorcery/controller/submodules/oauth'
+      module Oauth
+        autoload :Oauth1, 'sorcery/controller/submodules/oauth/oauth1'
+        autoload :Oauth2, 'sorcery/controller/submodules/oauth/oauth2'
+        module Providers
+          autoload :Twitter, 'sorcery/controller/submodules/oauth/providers/twitter'
+          autoload :Facebook, 'sorcery/controller/submodules/oauth/providers/facebook'
+        end
+      end
     end
   end
   module CryptoProviders
@@ -24,6 +38,7 @@ module Sorcery
     autoload :SHA256, 'sorcery/crypto_providers/sha256'
     autoload :SHA512, 'sorcery/crypto_providers/sha512'
   end
+  autoload :TestHelpers, 'sorcery/test_helpers'
   
   require 'sorcery/engine' if defined?(Rails) && Rails::VERSION::MAJOR == 3
 end

data/sorcery.gemspec

@@ -5,11 +5,11 @@
 
 Gem::Specification.new do |s|
   s.name = %q{sorcery}
-  s.version = "0.1.3"
+  s.version = "0.2.0"
 
   s.required_rubygems_version = Gem::Requirement.new(">= 0") if s.respond_to? :required_rubygems_version=
   s.authors = ["Noam Ben Ari"]
-  s.date = %q{2011-02-05}
+  s.date = %q{2011-03-13}
   s.description = %q{Provides common authentication needs such as signing in/out, activating by email and resetting password.}
   s.email = %q{nbenari@gmail.com}
   s.extra_rdoc_files = [
@@ -25,11 +25,16 @@ Gem::Specification.new do |s|
     "README.rdoc",
     "Rakefile",
     "VERSION",
-    "features/support/env.rb",
     "lib/sorcery.rb",
     "lib/sorcery/controller.rb",
+    "lib/sorcery/controller/submodules/activity_logging.rb",
     "lib/sorcery/controller/submodules/brute_force_protection.rb",
     "lib/sorcery/controller/submodules/http_basic_auth.rb",
+    "lib/sorcery/controller/submodules/oauth.rb",
+    "lib/sorcery/controller/submodules/oauth/oauth1.rb",
+    "lib/sorcery/controller/submodules/oauth/oauth2.rb",
+    "lib/sorcery/controller/submodules/oauth/providers/facebook.rb",
+    "lib/sorcery/controller/submodules/oauth/providers/twitter.rb",
     "lib/sorcery/controller/submodules/remember_me.rb",
     "lib/sorcery/controller/submodules/session_timeout.rb",
     "lib/sorcery/crypto_providers/aes256.rb",
@@ -40,23 +45,30 @@ Gem::Specification.new do |s|
     "lib/sorcery/crypto_providers/sha512.rb",
     "lib/sorcery/engine.rb",
     "lib/sorcery/model.rb",
-    "lib/sorcery/model/submodules/password_reset.rb",
+    "lib/sorcery/model/submodules/activity_logging.rb",
+    "lib/sorcery/model/submodules/brute_force_protection.rb",
+    "lib/sorcery/model/submodules/oauth.rb",
     "lib/sorcery/model/submodules/remember_me.rb",
+    "lib/sorcery/model/submodules/reset_password.rb",
     "lib/sorcery/model/submodules/user_activation.rb",
+    "lib/sorcery/model/temporary_token.rb",
+    "lib/sorcery/test_helpers.rb",
     "sorcery.gemspec",
     "spec/Gemfile",
     "spec/Gemfile.lock",
     "spec/Rakefile",
     "spec/rails3/.rspec",
-    "spec/rails3/Gemfile",
-    "spec/rails3/Gemfile.lock",
-    "spec/rails3/Rakefile",
     "spec/rails3/app_root/.gitignore",
+    "spec/rails3/app_root/.rspec",
+    "spec/rails3/app_root/Gemfile",
+    "spec/rails3/app_root/Gemfile.lock",
     "spec/rails3/app_root/README",
+    "spec/rails3/app_root/Rakefile",
     "spec/rails3/app_root/Rakefile.unused",
     "spec/rails3/app_root/app/controllers/application_controller.rb",
     "spec/rails3/app_root/app/helpers/application_helper.rb",
     "spec/rails3/app_root/app/mailers/sorcery_mailer.rb",
+    "spec/rails3/app_root/app/models/authentication.rb",
     "spec/rails3/app_root/app/models/user.rb",
     "spec/rails3/app_root/app/views/layouts/application.html.erb",
     "spec/rails3/app_root/app/views/sorcery_mailer/activation_email.html.erb",
@@ -82,9 +94,12 @@ Gem::Specification.new do |s|
     "spec/rails3/app_root/config/locales/en.yml",
     "spec/rails3/app_root/config/routes.rb",
     "spec/rails3/app_root/db/migrate/activation/20101224223622_add_activation_to_users.rb",
+    "spec/rails3/app_root/db/migrate/activity_logging/20101224223624_add_activity_logging_to_users.rb",
+    "spec/rails3/app_root/db/migrate/brute_force_protection/20101224223626_add_brute_force_protection_to_users.rb",
     "spec/rails3/app_root/db/migrate/core/20101224223620_create_users.rb",
-    "spec/rails3/app_root/db/migrate/password_reset/20101224223622_add_password_reset_to_users.rb",
+    "spec/rails3/app_root/db/migrate/oauth/20101224223628_create_authentications.rb",
     "spec/rails3/app_root/db/migrate/remember_me/20101224223623_add_remember_me_token_to_users.rb",
+    "spec/rails3/app_root/db/migrate/reset_password/20101224223622_add_reset_password_to_users.rb",
     "spec/rails3/app_root/db/schema.rb",
     "spec/rails3/app_root/db/seeds.rb",
     "spec/rails3/app_root/lib/tasks/.gitkeep",
@@ -103,33 +118,37 @@ Gem::Specification.new do |s|
     "spec/rails3/app_root/public/robots.txt",
     "spec/rails3/app_root/public/stylesheets/.gitkeep",
     "spec/rails3/app_root/script/rails",
-    "spec/rails3/app_root/test/fixtures/users.yml",
-    "spec/rails3/app_root/test/performance/browsing_test.rb",
-    "spec/rails3/app_root/test/test_helper.rb",
-    "spec/rails3/app_root/test/unit/user_test.rb",
+    "spec/rails3/app_root/spec/controller_activity_logging_spec.rb",
+    "spec/rails3/app_root/spec/controller_brute_force_protection_spec.rb",
+    "spec/rails3/app_root/spec/controller_http_basic_auth_spec.rb",
+    "spec/rails3/app_root/spec/controller_oauth2_spec.rb",
+    "spec/rails3/app_root/spec/controller_oauth_spec.rb",
+    "spec/rails3/app_root/spec/controller_remember_me_spec.rb",
+    "spec/rails3/app_root/spec/controller_session_timeout_spec.rb",
+    "spec/rails3/app_root/spec/controller_spec.rb",
+    "spec/rails3/app_root/spec/spec_helper.orig.rb",
+    "spec/rails3/app_root/spec/spec_helper.rb",
+    "spec/rails3/app_root/spec/user_activation_spec.rb",
+    "spec/rails3/app_root/spec/user_activity_logging_spec.rb",
+    "spec/rails3/app_root/spec/user_brute_force_protection_spec.rb",
+    "spec/rails3/app_root/spec/user_oauth_spec.rb",
+    "spec/rails3/app_root/spec/user_remember_me_spec.rb",
+    "spec/rails3/app_root/spec/user_reset_password_spec.rb",
+    "spec/rails3/app_root/spec/user_spec.rb",
     "spec/rails3/app_root/vendor/plugins/.gitkeep",
-    "spec/rails3/controller_brute_force_protection_spec.rb",
-    "spec/rails3/controller_http_basic_auth_spec.rb",
-    "spec/rails3/controller_remember_me_spec.rb",
-    "spec/rails3/controller_session_timeout_spec.rb",
-    "spec/rails3/controller_spec.rb",
-    "spec/rails3/spec_helper.rb",
-    "spec/rails3/user_activation_spec.rb",
-    "spec/rails3/user_password_reset_spec.rb",
-    "spec/rails3/user_remember_me_spec.rb",
-    "spec/rails3/user_spec.rb",
     "spec/sorcery_crypto_providers_spec.rb",
     "spec/spec_helper.rb"
   ]
   s.homepage = %q{http://github.com/NoamB/sorcery}
   s.licenses = ["MIT"]
   s.require_paths = ["lib"]
-  s.rubygems_version = %q{1.5.0}
+  s.rubygems_version = %q{1.6.2}
   s.summary = %q{Magical authentication for Rails 3 applications}
   s.test_files = [
     "spec/rails3/app_root/app/controllers/application_controller.rb",
     "spec/rails3/app_root/app/helpers/application_helper.rb",
     "spec/rails3/app_root/app/mailers/sorcery_mailer.rb",
+    "spec/rails3/app_root/app/models/authentication.rb",
     "spec/rails3/app_root/app/models/user.rb",
     "spec/rails3/app_root/config/application.rb",
     "spec/rails3/app_root/config/boot.rb",
@@ -145,24 +164,31 @@ Gem::Specification.new do |s|
     "spec/rails3/app_root/config/initializers/session_store.rb",
     "spec/rails3/app_root/config/routes.rb",
     "spec/rails3/app_root/db/migrate/activation/20101224223622_add_activation_to_users.rb",
+    "spec/rails3/app_root/db/migrate/activity_logging/20101224223624_add_activity_logging_to_users.rb",
+    "spec/rails3/app_root/db/migrate/brute_force_protection/20101224223626_add_brute_force_protection_to_users.rb",
     "spec/rails3/app_root/db/migrate/core/20101224223620_create_users.rb",
-    "spec/rails3/app_root/db/migrate/password_reset/20101224223622_add_password_reset_to_users.rb",
+    "spec/rails3/app_root/db/migrate/oauth/20101224223628_create_authentications.rb",
     "spec/rails3/app_root/db/migrate/remember_me/20101224223623_add_remember_me_token_to_users.rb",
+    "spec/rails3/app_root/db/migrate/reset_password/20101224223622_add_reset_password_to_users.rb",
     "spec/rails3/app_root/db/schema.rb",
     "spec/rails3/app_root/db/seeds.rb",
-    "spec/rails3/app_root/test/performance/browsing_test.rb",
-    "spec/rails3/app_root/test/test_helper.rb",
-    "spec/rails3/app_root/test/unit/user_test.rb",
-    "spec/rails3/controller_brute_force_protection_spec.rb",
-    "spec/rails3/controller_http_basic_auth_spec.rb",
-    "spec/rails3/controller_remember_me_spec.rb",
-    "spec/rails3/controller_session_timeout_spec.rb",
-    "spec/rails3/controller_spec.rb",
-    "spec/rails3/spec_helper.rb",
-    "spec/rails3/user_activation_spec.rb",
-    "spec/rails3/user_password_reset_spec.rb",
-    "spec/rails3/user_remember_me_spec.rb",
-    "spec/rails3/user_spec.rb",
+    "spec/rails3/app_root/spec/controller_activity_logging_spec.rb",
+    "spec/rails3/app_root/spec/controller_brute_force_protection_spec.rb",
+    "spec/rails3/app_root/spec/controller_http_basic_auth_spec.rb",
+    "spec/rails3/app_root/spec/controller_oauth2_spec.rb",
+    "spec/rails3/app_root/spec/controller_oauth_spec.rb",
+    "spec/rails3/app_root/spec/controller_remember_me_spec.rb",
+    "spec/rails3/app_root/spec/controller_session_timeout_spec.rb",
+    "spec/rails3/app_root/spec/controller_spec.rb",
+    "spec/rails3/app_root/spec/spec_helper.orig.rb",
+    "spec/rails3/app_root/spec/spec_helper.rb",
+    "spec/rails3/app_root/spec/user_activation_spec.rb",
+    "spec/rails3/app_root/spec/user_activity_logging_spec.rb",
+    "spec/rails3/app_root/spec/user_brute_force_protection_spec.rb",
+    "spec/rails3/app_root/spec/user_oauth_spec.rb",
+    "spec/rails3/app_root/spec/user_remember_me_spec.rb",
+    "spec/rails3/app_root/spec/user_reset_password_spec.rb",
+    "spec/rails3/app_root/spec/user_spec.rb",
     "spec/sorcery_crypto_providers_spec.rb",
     "spec/spec_helper.rb"
   ]
@@ -171,39 +197,54 @@ Gem::Specification.new do |s|
     s.specification_version = 3
 
     if Gem::Version.new(Gem::VERSION) >= Gem::Version.new('1.2.0') then
-      s.add_development_dependency(%q<rails>, ["= 3.0.3"])
+      s.add_runtime_dependency(%q<rails>, [">= 3.0.0"])
+      s.add_runtime_dependency(%q<json>, [">= 1.5.1"])
+      s.add_runtime_dependency(%q<oauth>, [">= 0.4.4"])
+      s.add_runtime_dependency(%q<oauth2>, [">= 0.1.1"])
       s.add_development_dependency(%q<rspec>, ["~> 2.3.0"])
       s.add_development_dependency(%q<rspec-rails>, [">= 0"])
       s.add_development_dependency(%q<ruby-debug19>, [">= 0"])
       s.add_development_dependency(%q<sqlite3-ruby>, [">= 0"])
       s.add_development_dependency(%q<yard>, ["~> 0.6.0"])
-      s.add_development_dependency(%q<cucumber>, [">= 0"])
       s.add_development_dependency(%q<bundler>, ["~> 1.0.0"])
       s.add_development_dependency(%q<jeweler>, ["~> 1.5.2"])
       s.add_development_dependency(%q<simplecov>, [">= 0.3.8"])
+      s.add_runtime_dependency(%q<bcrypt-ruby>, ["~> 2.1.4"])
+      s.add_runtime_dependency(%q<oauth>, [">= 0.4.4"])
+      s.add_runtime_dependency(%q<oauth2>, [">= 0.1.1"])
     else
-      s.add_dependency(%q<rails>, ["= 3.0.3"])
+      s.add_dependency(%q<rails>, [">= 3.0.0"])
+      s.add_dependency(%q<json>, [">= 1.5.1"])
+      s.add_dependency(%q<oauth>, [">= 0.4.4"])
+      s.add_dependency(%q<oauth2>, [">= 0.1.1"])
       s.add_dependency(%q<rspec>, ["~> 2.3.0"])
       s.add_dependency(%q<rspec-rails>, [">= 0"])
       s.add_dependency(%q<ruby-debug19>, [">= 0"])
       s.add_dependency(%q<sqlite3-ruby>, [">= 0"])
       s.add_dependency(%q<yard>, ["~> 0.6.0"])
-      s.add_dependency(%q<cucumber>, [">= 0"])
       s.add_dependency(%q<bundler>, ["~> 1.0.0"])
       s.add_dependency(%q<jeweler>, ["~> 1.5.2"])
       s.add_dependency(%q<simplecov>, [">= 0.3.8"])
+      s.add_dependency(%q<bcrypt-ruby>, ["~> 2.1.4"])
+      s.add_dependency(%q<oauth>, [">= 0.4.4"])
+      s.add_dependency(%q<oauth2>, [">= 0.1.1"])
     end
   else
-    s.add_dependency(%q<rails>, ["= 3.0.3"])
+    s.add_dependency(%q<rails>, [">= 3.0.0"])
+    s.add_dependency(%q<json>, [">= 1.5.1"])
+    s.add_dependency(%q<oauth>, [">= 0.4.4"])
+    s.add_dependency(%q<oauth2>, [">= 0.1.1"])
     s.add_dependency(%q<rspec>, ["~> 2.3.0"])
     s.add_dependency(%q<rspec-rails>, [">= 0"])
     s.add_dependency(%q<ruby-debug19>, [">= 0"])
     s.add_dependency(%q<sqlite3-ruby>, [">= 0"])
     s.add_dependency(%q<yard>, ["~> 0.6.0"])
-    s.add_dependency(%q<cucumber>, [">= 0"])
     s.add_dependency(%q<bundler>, ["~> 1.0.0"])
     s.add_dependency(%q<jeweler>, ["~> 1.5.2"])
     s.add_dependency(%q<simplecov>, [">= 0.3.8"])
+    s.add_dependency(%q<bcrypt-ruby>, ["~> 2.1.4"])
+    s.add_dependency(%q<oauth>, [">= 0.4.4"])
+    s.add_dependency(%q<oauth2>, [">= 0.1.1"])
   end
 end
 

data/spec/Gemfile

@@ -2,8 +2,9 @@ source 'http://rubygems.org'
 
 gem "rails", '3.0.3'
 gem 'bcrypt-ruby', :require => 'bcrypt'
-gem "sorcery", '0.1.3', :path => '../../../'
-
+gem "sorcery", '0.1.4', :path => '../../../'
+gem 'oauth', ">= 0.4.4"
+gem 'oauth2', ">= 0.1.1"
 group :development do
   gem 'rspec'
   gem 'ruby-debug19'