sorcery 0.7.0 → 0.7.4

data/Gemfile

@@ -3,15 +3,13 @@ source "http://rubygems.org"
 # Example:
 #   gem "activesupport", ">= 2.3.5"
 gem 'oauth', "~> 0.4.4"
-gem 'oauth2', "~> 0.5.1"
+gem 'oauth2', "~> 0.4.1"
 
 # Add dependencies to develop your gem here.
 # Include everything needed to run rake, tests, features, etc.
 group :development do
   gem "rails", ">= 3.0.0"
   gem 'json', ">= 1.5.1"
-  gem "mongoid", "~> 2.0"
-  gem "bson_ext", "~> 1.3"
   gem "rspec", "~> 2.5.0"
   gem 'rspec-rails', "~> 2.5.0"
   gem 'ruby-debug19'

data/Gemfile.lock

@@ -1,49 +1,45 @@
 GEM
   remote: http://rubygems.org/
   specs:
-    actionmailer (3.1.0)
-      actionpack (= 3.1.0)
+    actionmailer (3.1.1)
+      actionpack (= 3.1.1)
       mail (~> 2.3.0)
-    actionpack (3.1.0)
-      activemodel (= 3.1.0)
-      activesupport (= 3.1.0)
+    actionpack (3.1.1)
+      activemodel (= 3.1.1)
+      activesupport (= 3.1.1)
       builder (~> 3.0.0)
       erubis (~> 2.7.0)
       i18n (~> 0.6)
       rack (~> 1.3.2)
-      rack-cache (~> 1.0.3)
+      rack-cache (~> 1.1)
       rack-mount (~> 0.8.2)
       rack-test (~> 0.6.1)
-      sprockets (~> 2.0.0)
-    activemodel (3.1.0)
-      activesupport (= 3.1.0)
-      bcrypt-ruby (~> 3.0.0)
+      sprockets (~> 2.0.2)
+    activemodel (3.1.1)
+      activesupport (= 3.1.1)
       builder (~> 3.0.0)
       i18n (~> 0.6)
-    activerecord (3.1.0)
-      activemodel (= 3.1.0)
-      activesupport (= 3.1.0)
+    activerecord (3.1.1)
+      activemodel (= 3.1.1)
+      activesupport (= 3.1.1)
       arel (~> 2.2.1)
       tzinfo (~> 0.3.29)
-    activeresource (3.1.0)
-      activemodel (= 3.1.0)
-      activesupport (= 3.1.0)
-    activesupport (3.1.0)
+    activeresource (3.1.1)
+      activemodel (= 3.1.1)
+      activesupport (= 3.1.1)
+    activesupport (3.1.1)
       multi_json (~> 1.0)
     addressable (2.2.6)
     archive-tar-minitar (0.5.2)
     arel (2.2.1)
-    bcrypt-ruby (3.0.0)
-    bson (1.3.1)
-    bson_ext (1.3.1)
     builder (3.0.0)
     columnize (0.3.4)
     diff-lcs (1.1.3)
     erubis (2.7.0)
-    faraday (0.7.4)
-      addressable (~> 2.2.6)
+    faraday (0.6.1)
+      addressable (~> 2.2.4)
       multipart-post (~> 1.1.0)
-      rack (< 2, >= 1.1.0)
+      rack (>= 1.1.0, < 2)
     git (1.2.5)
     hike (1.2.1)
     i18n (0.6.0)
@@ -51,29 +47,23 @@ GEM
       bundler (~> 1.0.0)
       git (>= 1.2.5)
       rake
-    json (1.5.4)
+    json (1.6.1)
     linecache19 (0.5.12)
       ruby_core_source (>= 0.1.4)
     mail (2.3.0)
       i18n (>= 0.4.0)
       mime-types (~> 1.16)
       treetop (~> 1.4.8)
-    mime-types (1.16)
-    mongo (1.3.1)
-      bson (>= 1.3.1)
-    mongoid (2.2.0)
-      activemodel (~> 3.0)
-      mongo (~> 1.3)
-      tzinfo (~> 0.3.22)
+    mime-types (1.17.2)
     multi_json (1.0.3)
     multipart-post (1.1.3)
     oauth (0.4.5)
-    oauth2 (0.5.1)
-      faraday (~> 0.7.4)
-      multi_json (~> 1.0.3)
+    oauth2 (0.4.1)
+      faraday (~> 0.6.1)
+      multi_json (>= 0.0.5)
     polyglot (0.3.2)
-    rack (1.3.3)
-    rack-cache (1.0.3)
+    rack (1.3.5)
+    rack-cache (1.1)
       rack (>= 0.4)
     rack-mount (0.8.3)
       rack (>= 1.0.0)
@@ -81,23 +71,24 @@ GEM
       rack
     rack-test (0.6.1)
       rack (>= 1.0)
-    rails (3.1.0)
-      actionmailer (= 3.1.0)
-      actionpack (= 3.1.0)
-      activerecord (= 3.1.0)
-      activeresource (= 3.1.0)
-      activesupport (= 3.1.0)
+    rails (3.1.1)
+      actionmailer (= 3.1.1)
+      actionpack (= 3.1.1)
+      activerecord (= 3.1.1)
+      activeresource (= 3.1.1)
+      activesupport (= 3.1.1)
       bundler (~> 1.0)
-      railties (= 3.1.0)
-    railties (3.1.0)
-      actionpack (= 3.1.0)
-      activesupport (= 3.1.0)
+      railties (= 3.1.1)
+    railties (3.1.1)
+      actionpack (= 3.1.1)
+      activesupport (= 3.1.1)
       rack-ssl (~> 1.3.2)
       rake (>= 0.8.7)
       rdoc (~> 3.4)
       thor (~> 0.14.6)
-    rake (0.9.2)
-    rdoc (3.9.4)
+    rake (0.9.2.2)
+    rdoc (3.11)
+      json (~> 1.4)
     rspec (2.5.0)
       rspec-core (~> 2.5.0)
       rspec-expectations (~> 2.5.0)
@@ -121,13 +112,14 @@ GEM
       ruby-debug-base19 (>= 0.11.19)
     ruby_core_source (0.1.5)
       archive-tar-minitar (>= 0.5.2)
-    simplecov (0.4.2)
-      simplecov-html (~> 0.4.4)
-    simplecov-html (0.4.5)
-    sprockets (2.0.0)
+    simplecov (0.5.4)
+      multi_json (~> 1.0.3)
+      simplecov-html (~> 0.5.3)
+    simplecov-html (0.5.3)
+    sprockets (2.0.3)
       hike (~> 1.2)
       rack (~> 1.0)
-      tilt (!= 1.3.0, ~> 1.1)
+      tilt (~> 1.1, != 1.3.0)
     sqlite3 (1.3.4)
     sqlite3-ruby (1.3.3)
       sqlite3 (>= 1.3.3)
@@ -137,20 +129,18 @@ GEM
     treetop (1.4.10)
       polyglot
       polyglot (>= 0.3.1)
-    tzinfo (0.3.29)
+    tzinfo (0.3.30)
     yard (0.6.8)
 
 PLATFORMS
   ruby
 
 DEPENDENCIES
-  bson_ext (~> 1.3)
   bundler (~> 1.0.0)
   jeweler (~> 1.5.2)
   json (>= 1.5.1)
-  mongoid (~> 2.0)
   oauth (~> 0.4.4)
-  oauth2 (~> 0.5.1)
+  oauth2 (~> 0.4.1)
   rails (>= 3.0.0)
   rspec (~> 2.5.0)
   rspec-rails (~> 2.5.0)

data/README.rdoc

@@ -1,6 +1,6 @@
 = sorcery
-Magical Authentication for Rails 3 and Sinatra.
-Supports ActiveRecord and Mongoid.
+Magical Authentication for Rails 3.
+Supports ActiveRecord, Mongoid and MongoMapper.
 
 Inspired by restful_authentication, Authlogic and Devise.
 Crypto code taken almost unchanged from Authlogic.
@@ -28,9 +28,7 @@ Railscast: http://railscasts.com/episodes/283-authentication-with-sorcery
 
 Example Rails 3 app using sorcery: https://github.com/NoamB/sorcery-example-app
 
-Example Sinatra app using sorcery: https://github.com/NoamB/sorcery-example-app-sinatra
-
-Documentation: http://rubydoc.info/gems/sorcery/0.7.0/frames
+Documentation: http://rubydoc.info/gems/sorcery/0.7.4/frames
 
 Check out the tutorials in the github wiki!
 
@@ -97,59 +95,26 @@ Otherwise simply
 
 == Rails 3 Configuration:
 
+    rails generate sorcery:install
 
-For Rails 3 create an initializer file using:
-
-    rake sorcery:bootstrap
-
-This will create the file as config/initializers/sorcery.rb .
-Inside it the comments will tell you everything you need to know.
-
-For your convenience, Sorcery includes a migrations generator for Rails, which can be used like so:
-
-  rails g sorcery_migration [list of submodules]
+This will generate the core migration file, the initializer file and the 'User' model class.
 
-Note: There is no migration for the session_timeout module. 
-For example, for only the core functionality use:
+    rails generate sorcery:install remember_me reset_password
 
-  rails g sorcery_migration core
+This will generate the migrations files for remember_me and reset_password submodules
+and will create the initializer file (and add submodules to it), and create the 'User' model class.
 
-To generate migrations for both the core AND 'remember_me' submodule:
+    rails generate sorcery:install --model Person
 
-  rails g sorcery_migration core remember_me
+This will generate the core migration file, the initializer and change the model class
+(in the initializer and migration files) to the class 'Person' (and its pluralized version, 'people')
 
-These migrations use the default fields. You can choose to use these migrations or make your own tables and fields. Sorcery tries not to impose a database structure and naming scheme on your application.
+    rails generate sorcery:install http_basic_auth external remember_me --migrations
 
-Finally, add sorcery to the the model that you will use for authentication:
-
-    class User < ActiveRecord::Base
-      authenticates_with_sorcery!
-    end
+This will generate only the migration files for the specified submodules and will
+add them to the initializer file.
     
-== Sinatra Configuration:
-
-
-For Sinatra you'll need to create the initializer manually. You can do it in the main app file or in a separate file you require (see example in example app). The code looks as follows:
-
-    Sorcery::Controller::Config.submodules = [] # specify here the submodules you want to include
-    
-    Sorcery::Controller::Config.configure do |config|
-      config.session_timeout = 10.minutes
-      ...
-      ...
-    
-      config.user_config do |user|
-        user.username_attribute_name                      = :email
-        ...
-    	...
-    	
-      end
-    end
-
-Finally, to make all the code above take effect, we'll need to re-include the sorcery controller module:
-
-    include Sorcery::Controller::Adapters::Sinatra
-    include Sorcery::Controller
+Inside the initializer, the comments will tell you what each setting does.
 
 
 == Full Features List by module:
@@ -216,13 +181,6 @@ I've got some thoughts which include (unordered):
 Have an idea? Let me know, and it might get into the gem!
 
 
-Other stuff:
-* Improve specs speed
-* Provide an easy way to run specs after install
-* Improve documentation
-* Try to reduce the number of library methods, and find better names to some
-
-
 == Backward compatibility
 
 
@@ -238,11 +196,15 @@ The same cannot be said about upgrading to x.4.0 and above, however.
 
 Important notes while upgrading:
 
+* If upgrading from <= 0.6.1 to >= 0.7.0 you need to change 'username_attribute_name' to 'username_attribute_names' in initializer.
 * If upgrading from <= v0.5.1 to >= v0.5.2 you need to explicitly set your user_class model in the initializer file.
 
     # This line must come after the 'user config' block.
     config.user_class = User
 
+* Sinatra support existed until v0.7.0 (including), but was dropped later due to being a maintenance nightmare. 
+
+
 == Contributing to sorcery
 
 

data/Rakefile

@@ -27,7 +27,7 @@ Jeweler::Tasks.new do |gem|
   #  gem.add_development_dependency 'rspec', '> 1.2.3'
   gem.add_runtime_dependency 'bcrypt-ruby', '~> 3.0.0'
   gem.add_runtime_dependency 'oauth', '~> 0.4.4'
-  gem.add_runtime_dependency 'oauth2', '~> 0.5.1'
+  gem.add_runtime_dependency 'oauth2', '~> 0.4.1'
 end
 Jeweler::RubygemsDotOrgTasks.new
 
@@ -54,3 +54,29 @@ task :all_sorcery_specs do
     CMD
   end
 end
+
+desc "Bundle all folders"
+task :bundle do
+  sh "bundle"
+  Dir['spec', 'spec/**'].each do |dir|
+    if Dir.exists?(dir) && File.exists?(dir + "/Gemfile")
+      sh <<-CMD
+        cd #{dir}
+        bundle
+      CMD
+    end
+  end
+end
+
+desc "Bundle update all folders"
+task :bundle_update do
+  sh "bundle update"
+  Dir['spec', 'spec/**'].each do |dir|
+    if Dir.exists?(dir) && File.exists?(dir + "/Gemfile")
+      sh <<-CMD
+        cd #{dir}
+        bundle update
+      CMD
+    end
+  end
+end

data/VERSION

@@ -1 +1 @@
-0.7.0
+0.7.4

data/lib/generators/sorcery/USAGE

@@ -0,0 +1,22 @@
+Description:
+  Generates the necessary files to get you up and running with Sorcery gem
+  
+Examples:
+  rails generate sorcery:install
+
+    This will generate the core migration file, the initializer file and the 'User' model class.
+
+  rails generate sorcery:install remember_me reset_password
+
+    This will generate the migrations files for remember_me and reset_password submodules
+    and will create the initializer file (and add submodules to it), and create the 'User' model class.
+
+  rails generate sorcery:install --model Person
+
+    This will generate the core migration file, the initializer and change the model class
+    (in the initializer and migration files) to the class 'Person' (and it's pluralized version, 'people')
+
+  rails generate sorcery:install http_basic_auth external remember_me --migrations
+
+    This will generate only the migration files for the specified submodules and will
+    add them to the initializer file.

data/lib/generators/sorcery/install_generator.rb

@@ -0,0 +1,72 @@
+require 'rails/generators/migration'
+
+module Sorcery
+  module Generators
+    class InstallGenerator < Rails::Generators::Base
+      include Rails::Generators::Migration
+      
+      source_root File.expand_path('../templates', __FILE__)
+      
+      argument :submodules, :optional => true, :type => :array, :banner => "submodules"
+      
+      class_option :model, :optional => true, :type => :string, :banner => "model",
+                   :desc => "Specify the model class name if you will use anything other than 'User'"
+                           
+      class_option :migrations, :optional => true, :type => :boolean, :banner => "migrations",
+                   :desc => "Specify if you want to add submodules to an existing model\n\t\t\t     # (will generate migrations files, and add submodules to config file)"
+      
+      
+      # Copy the initializer file to config/initializers folder.
+      def copy_initializer_file
+        template "initializer.rb", "config/initializers/sorcery.rb" unless options[:migrations]
+      end
+
+      def configure_initializer_file
+        # Add submodules to the initializer file.
+        if submodules
+          str = submodules.collect{ |submodule| ':' + submodule + ', ' }
+          str.last.delete!(", ")
+          
+          gsub_file "config/initializers/sorcery.rb", /submodules = \[\]/, "submodules = [#{str.join()}]"
+        end
+
+        # Generate the model and add 'authenticates_with_sorcery!' unless you passed --migrations
+        unless options[:migrations]
+          generate "model #{model_class_name} --skip-migration"
+          insert_into_file "app/models/#{model_class_name.downcase}.rb", "  authenticates_with_sorcery!\n", :after => "class #{model_class_name} < ActiveRecord::Base\n"
+        end
+      end
+
+      # Copy the migrations files to db/migrate folder
+      def copy_migration_files
+        if submodules
+          submodules.each do |submodule|
+            unless submodule == "http_basic_auth" || submodule == "session_timeout"
+              migration_template "migration/#{submodule}.rb", "db/migrate/sorcery_#{submodule}.rb"
+            end
+          end
+        end
+        
+        # Copy core migration file in all cases except when you pass --migrations.
+        migration_template "migration/core.rb", "db/migrate/sorcery_core.rb" unless options[:migrations]
+      end
+      
+      # Define the next_migration_number method (necessary for the migration_template method to work)
+      def self.next_migration_number(dirname)
+        if ActiveRecord::Base.timestamped_migrations
+          sleep 1 # make sure each time we get a different timestamp
+          Time.new.utc.strftime("%Y%m%d%H%M%S")
+        else
+          "%.3d" % (current_migration_number(dirname) + 1)
+        end
+      end
+      
+      private
+
+      # Either return the model passed in a capitalized form or return the default "User".
+      def model_class_name
+        options[:model] ? options[:model].capitalize : "User"
+      end
+    end
+  end
+end

data/lib/{sorcery/initializers → generators/sorcery/templates}/initializer.rb

@@ -18,6 +18,9 @@ Rails.application.config.sorcery.configure do |config|
                                                                       # and send him there after login, using
                                                                       # 'redirect_back_or_to'.
 
+  # config.cookie_domain = nil                                        # set domain option for cookies
+                                                                      # Useful for remember_me submodule
+
   # -- session timeout --
   # config.session_timeout = 3600                                     # how long in seconds to keep the session alive.
   # config.session_timeout_from_last_action = false                   # use the last action as the beginning of
@@ -54,9 +57,6 @@ Rails.application.config.sorcery.configure do |config|
   # config.github.callback_url = "http://0.0.0.0:3000/oauth/callback?provider=github"
   # config.github.user_info_mapping = {:email => "name"}
 
-  # config.sinatra_cookie_secret = 'ch4ng3M3plz'                      # key used to sign cookies in Sinatra
-                                                                      # changing it will invalidate all signed cookies!        
-
   # --- user config ---
   config.user_config do |user|
     # -- core --
@@ -194,6 +194,6 @@ Rails.application.config.sorcery.configure do |config|
   end
 
   # This line must come after the 'user config' block.
-  config.user_class = "User"                                                          # define which model authenticates
+  config.user_class = "<%= model_class_name %>"                                       # define which model authenticates
                                                                                       # with sorcery.
 end

data/lib/generators/sorcery/templates/migration/activity_logging.rb

@@ -0,0 +1,17 @@
+class SorceryActivityLogging < ActiveRecord::Migration
+  def self.up
+    add_column :<%= model_class_name.tableize %>, :last_login_at,     :datetime, :default => nil
+    add_column :<%= model_class_name.tableize %>, :last_logout_at,    :datetime, :default => nil
+    add_column :<%= model_class_name.tableize %>, :last_activity_at,  :datetime, :default => nil
+    
+    add_index :<%= model_class_name.tableize %>, [:last_logout_at, :last_activity_at]
+  end
+
+  def self.down
+    remove_index :<%= model_class_name.tableize %>, [:last_logout_at, :last_activity_at]
+    
+    remove_column :<%= model_class_name.tableize %>, :last_activity_at
+    remove_column :<%= model_class_name.tableize %>, :last_logout_at
+    remove_column :<%= model_class_name.tableize %>, :last_login_at
+  end
+end

data/lib/generators/sorcery/templates/migration/brute_force_protection.rb

@@ -0,0 +1,11 @@
+class SorceryBruteForceProtection < ActiveRecord::Migration
+  def self.up
+    add_column :<%= model_class_name.tableize %>, :failed_logins_count, :integer, :default => 0
+    add_column :<%= model_class_name.tableize %>, :lock_expires_at, :datetime, :default => nil
+  end
+
+  def self.down
+    remove_column :<%= model_class_name.tableize %>, :lock_expires_at
+    remove_column :<%= model_class_name.tableize %>, :failed_logins_count
+  end
+end

data/lib/generators/{sorcery_migration/templates → sorcery/templates/migration}/core.rb

@@ -1,6 +1,6 @@
 class SorceryCore < ActiveRecord::Migration
   def self.up
-    create_table :users do |t|
+    create_table :<%= model_class_name.tableize %> do |t|
       t.string :username,         :null => false  # if you use another field as a username, for example email, you can safely remove this field.
       t.string :email,            :default => nil # if you use this field as a username, you might want to make it :null => false.
       t.string :crypted_password, :default => nil
@@ -11,6 +11,6 @@ class SorceryCore < ActiveRecord::Migration
   end
 
   def self.down
-    drop_table :users
+    drop_table :<%= model_class_name.tableize %>
   end
 end

data/lib/generators/{sorcery_migration/templates → sorcery/templates/migration}/external.rb

@@ -1,7 +1,7 @@
 class SorceryExternal < ActiveRecord::Migration
   def self.up
     create_table :authentications do |t|
-      t.integer :user_id, :null => false
+      t.integer :<%= model_class_name.tableize.singularize %>_id, :null => false
       t.string :provider, :uid, :null => false
 
       t.timestamps

data/lib/generators/sorcery/templates/migration/remember_me.rb

@@ -0,0 +1,15 @@
+class SorceryRememberMe < ActiveRecord::Migration
+  def self.up
+    add_column :<%= model_class_name.tableize %>, :remember_me_token, :string, :default => nil
+    add_column :<%= model_class_name.tableize %>, :remember_me_token_expires_at, :datetime, :default => nil
+    
+    add_index :<%= model_class_name.tableize %>, :remember_me_token
+  end
+
+  def self.down
+    remove_index :<%= model_class_name.tableize %>, :remember_me_token
+    
+    remove_column :<%= model_class_name.tableize %>, :remember_me_token_expires_at
+    remove_column :<%= model_class_name.tableize %>, :remember_me_token
+  end
+end

data/lib/generators/sorcery/templates/migration/reset_password.rb

@@ -0,0 +1,17 @@
+class SorceryResetPassword < ActiveRecord::Migration
+  def self.up
+    add_column :<%= model_class_name.tableize %>, :reset_password_token, :string, :default => nil
+    add_column :<%= model_class_name.tableize %>, :reset_password_token_expires_at, :datetime, :default => nil
+    add_column :<%= model_class_name.tableize %>, :reset_password_email_sent_at, :datetime, :default => nil
+    
+    add_index :<%= model_class_name.tableize %>, :reset_password_token
+  end
+
+  def self.down
+    remove_index :users, :reset_password_token
+    
+    remove_column :<%= model_class_name.tableize %>, :reset_password_email_sent_at
+    remove_column :<%= model_class_name.tableize %>, :reset_password_token_expires_at
+    remove_column :<%= model_class_name.tableize %>, :reset_password_token
+  end
+end

data/lib/generators/sorcery/templates/migration/user_activation.rb

@@ -0,0 +1,17 @@
+class SorceryUserActivation < ActiveRecord::Migration
+  def self.up
+    add_column :<%= model_class_name.tableize %>, :activation_state, :string, :default => nil
+    add_column :<%= model_class_name.tableize %>, :activation_token, :string, :default => nil
+    add_column :<%= model_class_name.tableize %>, :activation_token_expires_at, :datetime, :default => nil
+    
+    add_index :<%= model_class_name.tableize %>, :activation_token
+  end
+
+  def self.down
+    remove_index :<%= model_class_name.tableize %>, :activation_token
+    
+    remove_column :<%= model_class_name.tableize %>, :activation_token_expires_at
+    remove_column :<%= model_class_name.tableize %>, :activation_token
+    remove_column :<%= model_class_name.tableize %>, :activation_state
+  end
+end

data/lib/sorcery/controller/submodules/activity_logging.rb

@@ -21,15 +21,15 @@ module Sorcery
               attr_accessor :register_last_activity_time
             
               def merge_activity_logging_defaults!
-                @defaults.merge!(:@register_login_time  => true,
-                                 :@register_logout_time => true,
+                @defaults.merge!(:@register_login_time         => true,
+                                 :@register_logout_time        => true,
                                  :@register_last_activity_time => true)
               end
             end
             merge_activity_logging_defaults!
           end
-          Config.after_login << :register_login_time_to_db
-          Config.before_logout << :register_logout_time_to_db
+          Config.after_login    << :register_login_time_to_db
+          Config.before_logout  << :register_logout_time_to_db
           base.after_filter :register_last_activity_time_to_db
         end
         
@@ -52,16 +52,14 @@ module Sorcery
           # This runs as a hook just after a successful login.
           def register_login_time_to_db(user, credentials)
             return unless Config.register_login_time
-            user.send(:"#{user.sorcery_config.last_login_at_attribute_name}=", Time.now.utc.to_s(:db))
-            user.save!(:validate => false)
+            user.update_attribute(user.sorcery_config.last_login_at_attribute_name, Time.now.in_time_zone)
           end
           
           # registers last logout time on every logout.
           # This runs as a hook just before a logout.
           def register_logout_time_to_db(user)
             return unless Config.register_logout_time
-            user.send(:"#{user.sorcery_config.last_logout_at_attribute_name}=", Time.now.utc.to_s(:db))
-            user.save!(:validate => false)
+            user.update_attribute(user.sorcery_config.last_logout_at_attribute_name, Time.now.in_time_zone)
           end
           
           # Updates last activity time on every request.
@@ -69,11 +67,10 @@ module Sorcery
           def register_last_activity_time_to_db
             return unless Config.register_last_activity_time
             return unless logged_in?
-            current_user.send(:"#{current_user.sorcery_config.last_activity_at_attribute_name}=", Time.now.utc.to_s(:db))
-            current_user.save!(:validate => false)
+            current_user.update_attribute(current_user.sorcery_config.last_activity_at_attribute_name, Time.now.in_time_zone)
           end
         end
       end
     end
   end
-end
+end

data/lib/sorcery/controller/submodules/brute_force_protection.rb

@@ -30,10 +30,10 @@ module Sorcery
           # Runs as a hook after a successful login.
           def reset_failed_logins_count!(user, credentials)
             user.send(:"#{user_class.sorcery_config.failed_logins_count_attribute_name}=", 0)
-            user.save!
+            user.save!(:validate => false)
           end
         end
       end
     end
   end
-end
+end