sorcery 0.7.6 → 0.8.0

data/spec/rails3/spec/controller_oauth2_spec.rb

@@ -5,7 +5,8 @@ def stub_all_oauth2_requests!
   auth_code       = OAuth2::Strategy::AuthCode.any_instance
   access_token    = mock(OAuth2::AccessToken)
   access_token.stub(:token_param=)
-  access_token.stub(:get).and_return({
+  response        = mock(OAuth2::Response)
+  response.stub(:body).and_return({
     "id"=>"123",
     "name"=>"Noam Ben Ari",
     "first_name"=>"Noam",
@@ -21,26 +22,31 @@ def stub_all_oauth2_requests!
     "languages"=>[{"id"=>"108405449189952", "name"=>"Hebrew"}, {"id"=>"106059522759137", "name"=>"English"}, {"id"=>"112624162082677", "name"=>"Russian"}],
     "verified"=>true,
     "updated_time"=>"2011-02-16T20:59:38+0000"}.to_json)
-  auth_code.stub(:get_access_token).and_return(access_token)
+  access_token.stub(:get).and_return(response)
+  auth_code.stub(:get_token).and_return(access_token)
+end
+
+def set_external_property
+  sorcery_controller_property_set(:external_providers, [:facebook, :github, :google, :liveid])
+  sorcery_controller_external_property_set(:facebook, :key, "eYVNBjBDi33aa9GkA3w")
+  sorcery_controller_external_property_set(:facebook, :secret, "XpbeSdCoaKSmQGSeokz5qcUATClRW5u08QWNfv71N8")
+  sorcery_controller_external_property_set(:facebook, :callback_url, "http://blabla.com")
+  sorcery_controller_external_property_set(:github, :key, "eYVNBjBDi33aa9GkA3w")
+  sorcery_controller_external_property_set(:github, :secret, "XpbeSdCoaKSmQGSeokz5qcUATClRW5u08QWNfv71N8")
+  sorcery_controller_external_property_set(:github, :callback_url, "http://blabla.com")
+  sorcery_controller_external_property_set(:google, :key, "eYVNBjBDi33aa9GkA3w")
+  sorcery_controller_external_property_set(:google, :secret, "XpbeSdCoaKSmQGSeokz5qcUATClRW5u08QWNfv71N8")
+  sorcery_controller_external_property_set(:google, :callback_url, "http://blabla.com")
+  sorcery_controller_external_property_set(:liveid, :key, "eYVNBjBDi33aa9GkA3w")
+  sorcery_controller_external_property_set(:liveid, :secret, "XpbeSdCoaKSmQGSeokz5qcUATClRW5u08QWNfv71N8")
+  sorcery_controller_external_property_set(:liveid, :callback_url, "http://blabla.com")
 end
 
 describe ApplicationController do
   before(:all) do
     ActiveRecord::Migrator.migrate("#{Rails.root}/db/migrate/external")
     sorcery_reload!([:external])
-    sorcery_controller_property_set(:external_providers, [:facebook, :github, :google, :liveid])
-    sorcery_controller_external_property_set(:facebook, :key, "eYVNBjBDi33aa9GkA3w")
-    sorcery_controller_external_property_set(:facebook, :secret, "XpbeSdCoaKSmQGSeokz5qcUATClRW5u08QWNfv71N8")
-    sorcery_controller_external_property_set(:facebook, :callback_url, "http://blabla.com")
-    sorcery_controller_external_property_set(:github, :key, "eYVNBjBDi33aa9GkA3w")
-    sorcery_controller_external_property_set(:github, :secret, "XpbeSdCoaKSmQGSeokz5qcUATClRW5u08QWNfv71N8")
-    sorcery_controller_external_property_set(:github, :callback_url, "http://blabla.com")
-    sorcery_controller_external_property_set(:google, :key, "eYVNBjBDi33aa9GkA3w")
-    sorcery_controller_external_property_set(:google, :secret, "XpbeSdCoaKSmQGSeokz5qcUATClRW5u08QWNfv71N8")
-    sorcery_controller_external_property_set(:google, :callback_url, "http://blabla.com")
-    sorcery_controller_external_property_set(:liveid, :key, "eYVNBjBDi33aa9GkA3w")
-    sorcery_controller_external_property_set(:liveid, :secret, "XpbeSdCoaKSmQGSeokz5qcUATClRW5u08QWNfv71N8")
-    sorcery_controller_external_property_set(:liveid, :callback_url, "http://blabla.com")
+    set_external_property
   end
 
   after(:all) do
@@ -58,13 +64,30 @@ describe ApplicationController do
       Authentication.delete_all
     end
 
-    it "login_at redirects correctly" do
-      create_new_user
-      get :login_at_test2
-      response.should be_a_redirect
-      response.should redirect_to("https://graph.facebook.com/oauth/authorize?response_type=code&client_id=#{::Sorcery::Controller::Config.facebook.key}&redirect_uri=http%3A%2F%2Fblabla.com&scope=email%2Coffline_access&display=page")
+    context "when callback_url begin with /" do 
+      before do
+        sorcery_controller_external_property_set(:facebook, :callback_url, "/oauth/twitter/callback")
+      end
+      it "login_at redirects correctly" do
+        create_new_user
+        get :login_at_test2
+        response.should be_a_redirect
+        response.should redirect_to("https://graph.facebook.com/oauth/authorize?response_type=code&client_id=#{::Sorcery::Controller::Config.facebook.key}&redirect_uri=http%3A%2F%2Ftest.host%2Foauth%2Ftwitter%2Fcallback&scope=email%2Coffline_access&display=page")
+      end
+      after do
+        sorcery_controller_external_property_set(:facebook, :callback_url, "http://blabla.com")
+      end
     end
 
+    context "when callback_url begin with http://" do 
+      it "login_at redirects correctly" do
+        create_new_user
+        get :login_at_test2
+        response.should be_a_redirect
+        response.should redirect_to("https://graph.facebook.com/oauth/authorize?response_type=code&client_id=#{::Sorcery::Controller::Config.facebook.key}&redirect_uri=http%3A%2F%2Fblabla.com&scope=email%2Coffline_access&display=page")
+      end
+    end
+    
     it "'login_from' logins if user exists" do
       sorcery_model_property_set(:authentications_class, Authentication)
       create_new_external_user(:facebook)
@@ -79,12 +102,20 @@ describe ApplicationController do
       flash[:alert].should == "Failed!"
     end
 
+    it "on successful login_from the user should be redirected to the url he originally wanted" do
+      sorcery_model_property_set(:authentications_class, Authentication)
+      create_new_external_user(:facebook)
+      get :test_return_to_with_external2, {}, :return_to_url => "fuu"
+      response.should redirect_to("fuu")
+      flash[:notice].should == "Success!"
+    end
+
   # provider: github
     it "login_at redirects correctly (github)" do
       create_new_user
       get :login_at_test3
       response.should be_a_redirect
-      response.should redirect_to("https://github.com/oauth/authorize?response_type=code&client_id=#{::Sorcery::Controller::Config.github.key}&redirect_uri=http%3A%2F%2Fblabla.com&scope=&display=")
+      response.should redirect_to("https://github.com/login/oauth/authorize?response_type=code&client_id=#{::Sorcery::Controller::Config.github.key}&redirect_uri=http%3A%2F%2Fblabla.com&scope&display")
     end
 
     it "'login_from' logins if user exists (github)" do
@@ -101,12 +132,20 @@ describe ApplicationController do
       flash[:alert].should == "Failed!"
     end
 
+    it "on successful login_from the user should be redirected to the url he originally wanted (github)" do
+      sorcery_model_property_set(:authentications_class, Authentication)
+      create_new_external_user(:github)
+      get :test_return_to_with_external3, {}, :return_to_url => "fuu"
+      response.should redirect_to("fuu")
+      flash[:notice].should == "Success!"
+    end
+
   # provider: google
     it "login_at redirects correctly (google)" do
       create_new_user
       get :login_at_test4
       response.should be_a_redirect
-      response.should redirect_to("https://accounts.google.com/o/oauth2/auth?response_type=code&client_id=#{::Sorcery::Controller::Config.google.key}&redirect_uri=http%3A%2F%2Fblabla.com&scope=https%3A%2F%2Fwww.googleapis.com%2Fauth%2Fuserinfo.email%20https%3A%2F%2Fwww.googleapis.com%2Fauth%2Fuserinfo.profile&display=")
+      response.should redirect_to("https://accounts.google.com/o/oauth2/auth?response_type=code&client_id=#{::Sorcery::Controller::Config.google.key}&redirect_uri=http%3A%2F%2Fblabla.com&scope=https%3A%2F%2Fwww.googleapis.com%2Fauth%2Fuserinfo.email+https%3A%2F%2Fwww.googleapis.com%2Fauth%2Fuserinfo.profile&display")
     end
 
     it "'login_from' logins if user exists (google)" do
@@ -123,12 +162,20 @@ describe ApplicationController do
       flash[:alert].should == "Failed!"
     end
 
+    it "on successful login_from the user should be redirected to the url he originally wanted (google)" do
+      sorcery_model_property_set(:authentications_class, Authentication)
+      create_new_external_user(:google)
+      get :test_return_to_with_external4, {}, :return_to_url => "fuu"
+      response.should redirect_to("fuu")
+      flash[:notice].should == "Success!"
+    end
+
   # provider: liveid
     it "login_at redirects correctly (liveid)" do
       create_new_user
       get :login_at_test5
       response.should be_a_redirect
-      response.should redirect_to("https://oauth.live.com/authorize?response_type=code&client_id=#{::Sorcery::Controller::Config.liveid.key}&redirect_uri=http%3A%2F%2Fblabla.com&scope=wl.basic%20wl.emails%20wl.offline_access&display=")
+      response.should redirect_to("https://oauth.live.com/authorize?response_type=code&client_id=#{::Sorcery::Controller::Config.liveid.key}&redirect_uri=http%3A%2F%2Fblabla.com&scope=wl.basic+wl.emails+wl.offline_access&display")
     end
 
     it "'login_from' logins if user exists (liveid)" do
@@ -145,6 +192,14 @@ describe ApplicationController do
       flash[:alert].should == "Failed!"
     end
 
+    it "on successful login_from the user should be redirected to the url he originally wanted (liveid)" do
+      sorcery_model_property_set(:authentications_class, Authentication)
+      create_new_external_user(:liveid)
+      get :test_return_to_with_external5, {}, :return_to_url => "fuu"
+      response.should redirect_to("fuu")
+      flash[:notice].should == "Success!"
+    end
+
   end
 
 
@@ -239,4 +294,87 @@ describe ApplicationController do
       ActionMailer::Base.deliveries.size.should == old_size
     end
   end
-end
+
+  describe ApplicationController, "OAuth with user activation features"  do
+    before(:all) do
+      ActiveRecord::Migrator.migrate("#{Rails.root}/db/migrate/external")
+      ActiveRecord::Migrator.migrate("#{Rails.root}/db/migrate/activity_logging")
+      sorcery_reload!([:activity_logging, :external])
+    end
+
+    after(:all) do
+      ActiveRecord::Migrator.rollback("#{Rails.root}/db/migrate/external")
+      ActiveRecord::Migrator.rollback("#{Rails.root}/db/migrate/activity_logging")
+    end
+
+    %w(facebook github google liveid).each.with_index(2) do |provider, index|
+      context "when #{provider}" do
+        before(:each) do
+          User.delete_all
+          Authentication.delete_all
+          sorcery_controller_property_set(:register_login_time, true)
+          stub_all_oauth2_requests!
+          sorcery_model_property_set(:authentications_class, Authentication)
+          create_new_external_user(provider.to_sym)
+        end
+
+        it "should register login time" do
+          now = Time.now.in_time_zone
+          get "test_login_from#{index}".to_sym
+          User.last.last_login_at.should_not be_nil
+          User.last.last_login_at.to_s(:db).should >= now.to_s(:db)
+          User.last.last_login_at.to_s(:db).should <= (now+2).to_s(:db)
+        end
+
+        it "should not register login time if configured so" do
+          sorcery_controller_property_set(:register_login_time, false)
+          now = Time.now.in_time_zone
+          get "test_login_from#{index}".to_sym
+          User.last.last_login_at.should be_nil
+        end
+      end
+    end
+  end
+
+  describe ApplicationController, "OAuth with session timeout features" do
+    before(:all) do
+      ActiveRecord::Migrator.migrate("#{Rails.root}/db/migrate/external")
+      sorcery_reload!([:session_timeout, :external])
+    end
+
+    after(:all) do
+      ActiveRecord::Migrator.rollback("#{Rails.root}/db/migrate/external")
+    end
+
+    %w(facebook github google liveid).each.with_index(2) do |provider, index|
+      context "when #{provider}" do
+        before(:each) do
+          User.delete_all
+          Authentication.delete_all
+          sorcery_model_property_set(:authentications_class, Authentication)
+          sorcery_controller_property_set(:session_timeout,0.5)
+          stub_all_oauth2_requests!
+          create_new_external_user(provider.to_sym)
+        end
+
+        after(:each) do
+          Timecop.return
+        end
+
+        it "should not reset session before session timeout" do
+          get "test_login_from#{index}".to_sym
+          session[:user_id].should_not be_nil
+          flash[:notice].should == "Success!"
+        end
+
+        it "should reset session after session timeout" do
+          get "test_login_from#{index}".to_sym
+          Timecop.travel(Time.now.in_time_zone+0.6)
+          get :test_should_be_logged_in
+          session[:user_id].should be_nil
+          response.should be_a_redirect
+        end
+      end
+    end
+  end
+end

data/spec/rails3/spec/controller_oauth_spec.rb

@@ -43,11 +43,28 @@ describe ApplicationController do
       Authentication.delete_all
     end
     
-    it "login_at redirects correctly" do
-      create_new_user
-      get :login_at_test
-      response.should be_a_redirect
-      response.should redirect_to("http://myapi.com/oauth/authorize?oauth_callback=http%3A%2F%2Fblabla.com&oauth_token=")
+    context "when callback_url begin with /" do 
+      before do
+        sorcery_controller_external_property_set(:twitter, :callback_url, "/oauth/twitter/callback")
+      end
+      it "login_at redirects correctly" do
+        create_new_user
+        get :login_at_test
+        response.should be_a_redirect
+        response.should redirect_to("http://myapi.com/oauth/authorize?oauth_callback=http%3A%2F%2Ftest.host%2Foauth%2Ftwitter%2Fcallback&oauth_token=")
+      end
+      after do
+        sorcery_controller_external_property_set(:twitter, :callback_url, "http://blabla.com")
+      end
+    end
+
+    context "when callback_url begin with http://" do 
+      it "login_at redirects correctly" do
+        create_new_user
+        get :login_at_test
+        response.should be_a_redirect
+        response.should redirect_to("http://myapi.com/oauth/authorize?oauth_callback=http%3A%2F%2Fblabla.com&oauth_token=")
+      end
     end
     
     it "logins if user exists" do
@@ -63,6 +80,15 @@ describe ApplicationController do
       get :test_login_from, :oauth_verifier => "blablaRERASDFcxvSDFA"
       flash[:alert].should == "Failed!"
     end
+
+    it "on successful 'login_from' the user should be redirected to the url he originally wanted" do
+      sorcery_model_property_set(:authentications_class, Authentication)
+      create_new_external_user(:twitter)
+      get :test_return_to_with_external, {}, :return_to_url => "fuu"
+      response.should redirect_to("fuu")
+      flash[:notice].should == "Success!"
+    end
+
   end
   
   describe ApplicationController do
@@ -98,4 +124,83 @@ describe ApplicationController do
       ActionMailer::Base.deliveries.size.should == old_size
     end
   end
-end
+
+  describe ApplicationController, "OAuth with user activation features"  do
+    before(:all) do
+      ActiveRecord::Migrator.migrate("#{Rails.root}/db/migrate/external")
+      ActiveRecord::Migrator.migrate("#{Rails.root}/db/migrate/activity_logging")
+      sorcery_reload!([:activity_logging, :external])
+    end
+
+    after(:all) do
+      ActiveRecord::Migrator.rollback("#{Rails.root}/db/migrate/external")
+      ActiveRecord::Migrator.rollback("#{Rails.root}/db/migrate/activity_logging")
+    end
+
+    context "when twitter" do
+      before(:each) do
+        User.delete_all
+        Authentication.delete_all
+        sorcery_controller_property_set(:register_login_time, true)
+        stub_all_oauth_requests!
+        sorcery_model_property_set(:authentications_class, Authentication)
+        create_new_external_user(:twitter)
+      end
+
+      it "should register login time" do
+        now = Time.now.in_time_zone
+        get :test_login_from
+        User.last.last_login_at.should_not be_nil
+        User.last.last_login_at.to_s(:db).should >= now.to_s(:db)
+        User.last.last_login_at.to_s(:db).should <= (now+2).to_s(:db)
+      end
+
+      it "should not register login time if configured so" do
+        sorcery_controller_property_set(:register_login_time, false)
+        now = Time.now.in_time_zone
+        get :test_login_from
+        User.last.last_login_at.should be_nil
+      end
+    end
+  end
+
+  describe ApplicationController, "OAuth with session timeout features" do
+    before(:all) do
+      ActiveRecord::Migrator.migrate("#{Rails.root}/db/migrate/external")
+      sorcery_reload!([:session_timeout, :external])
+    end
+
+    after(:all) do
+      ActiveRecord::Migrator.rollback("#{Rails.root}/db/migrate/external")
+    end
+
+    context "when twitter" do
+      before(:each) do
+        User.delete_all
+        Authentication.delete_all
+        sorcery_model_property_set(:authentications_class, Authentication)
+        sorcery_controller_property_set(:session_timeout,0.5)
+        stub_all_oauth_requests!
+        create_new_external_user(:twitter)
+      end
+
+      after(:each) do
+        Timecop.return
+      end
+
+      it "should not reset session before session timeout" do
+        get :test_login_from
+        session[:user_id].should_not be_nil
+        flash[:notice].should == "Success!"
+      end
+
+      it "should reset session after session timeout" do
+        get :test_login_from
+        Timecop.travel(Time.now.in_time_zone+0.6)
+        get :test_should_be_logged_in
+        session[:user_id].should be_nil
+        response.should be_a_redirect
+      end
+    end
+  end
+end

data/spec/rails3/spec/controller_spec.rb

@@ -141,6 +141,13 @@ describe ApplicationController do
       response.should redirect_to("http://test.host/")
     end
     
+    it "require_login before_filter should not save the url that the user originally wanted upon all non-get http methods" do
+      [:post, :put, :delete].each do |m|
+        self.send(m, :some_action)
+        session[:return_to_url].should be_nil
+      end
+    end
+    
     it "on successful login the user should be redirected to the url he originally wanted" do
       session[:return_to_url] = "http://test.host/some_action"
       post :test_return_to, :username => 'gizmo', :password => 'secret'

data/spec/rails3_mongo_mapper/Gemfile

@@ -1,8 +1,9 @@
 source 'http://rubygems.org'
 
+gem 'bcrypt-ruby', '~> 3.0.0'
 gem 'rails', '3.0.3'
 gem "sorcery", '>= 0.1.0', :path => '../../'
-gem "mongo_mapper"
+gem "mongo_mapper", '~> 0.11.0'
 gem "bson_ext", "~> 1.3"
 
 group :development, :test do

data/spec/rails3_mongo_mapper/Gemfile.lock

@@ -1,12 +1,10 @@
 PATH
   remote: ../../
   specs:
-    sorcery (0.7.5)
+    sorcery (0.7.13)
       bcrypt-ruby (~> 3.0.0)
       oauth (~> 0.4.4)
-      oauth (~> 0.4.4)
-      oauth2 (~> 0.5.1)
-      oauth2 (~> 0.5.1)
+      oauth2 (~> 0.8.0)
 
 GEM
   remote: http://rubygems.org/
@@ -38,23 +36,24 @@ GEM
       activemodel (= 3.0.3)
       activesupport (= 3.0.3)
     activesupport (3.0.3)
-    addressable (2.2.6)
     archive-tar-minitar (0.5.2)
     arel (2.0.10)
     bcrypt-ruby (3.0.1)
-    bson (1.4.0)
-    bson_ext (1.4.0)
+    bson (1.6.0)
+    bson_ext (1.6.0)
+      bson (= 1.6.0)
     builder (2.1.2)
-    coderay (0.9.8)
-    columnize (0.3.5)
+    coderay (1.0.5)
+    columnize (0.3.6)
     diff-lcs (1.1.3)
     erubis (2.6.6)
       abstract (>= 1.0.0)
-    faraday (0.7.5)
-      addressable (~> 2.2.6)
-      multipart-post (~> 1.1.3)
-      rack (>= 1.1.0, < 2)
+    faraday (0.8.4)
+      multipart-post (~> 1.1)
+    httpauth (0.2.0)
     i18n (0.6.0)
+    jwt (0.1.5)
+      multi_json (>= 1.0)
     linecache19 (0.5.12)
       ruby_core_source (>= 0.1.4)
     mail (2.2.19)
@@ -62,30 +61,31 @@ GEM
       i18n (>= 0.4.0)
       mime-types (~> 1.16)
       treetop (~> 1.4.8)
-    method_source (0.6.7)
-      ruby_parser (>= 2.3.1)
+    method_source (0.7.1)
     mime-types (1.17.2)
-    mongo (1.4.0)
-      bson (= 1.4.0)
-    mongo_mapper (0.10.1)
+    mongo (1.6.0)
+      bson (= 1.6.0)
+    mongo_mapper (0.11.0)
       activemodel (~> 3.0)
       activesupport (~> 3.0)
       plucky (~> 0.4.0)
-    multi_json (1.0.3)
-    multipart-post (1.1.4)
-    oauth (0.4.5)
-    oauth2 (0.5.1)
-      faraday (~> 0.7.4)
-      multi_json (~> 1.0.3)
-    plucky (0.4.3)
-      mongo (~> 1.3)
+    multi_json (1.1.0)
+    multipart-post (1.1.5)
+    oauth (0.4.7)
+    oauth2 (0.8.0)
+      faraday (~> 0.8)
+      httpauth (~> 0.1)
+      jwt (~> 0.1.4)
+      multi_json (~> 1.0)
+      rack (~> 1.2)
+    plucky (0.4.4)
+      mongo (~> 1.5)
     polyglot (0.3.3)
-    pry (0.9.7.4)
-      coderay (~> 0.9.8)
-      method_source (~> 0.6.7)
-      ruby_parser (>= 2.3.1)
-      slop (~> 2.1.0)
-    rack (1.2.4)
+    pry (0.9.8.3)
+      coderay (~> 1.0.5)
+      method_source (~> 0.7.1)
+      slop (>= 2.4.4, < 3)
+    rack (1.2.5)
     rack-mount (0.6.14)
       rack (>= 1.0.0)
     rack-test (0.5.7)
@@ -127,14 +127,11 @@ GEM
       ruby-debug-base19 (>= 0.11.19)
     ruby_core_source (0.1.5)
       archive-tar-minitar (>= 0.5.2)
-    ruby_parser (2.3.1)
-      sexp_processor (~> 3.0)
-    sexp_processor (3.0.8)
-    simplecov (0.5.4)
-      multi_json (~> 1.0.3)
+    simplecov (0.6.1)
+      multi_json (~> 1.0)
       simplecov-html (~> 0.5.3)
     simplecov-html (0.5.3)
-    slop (2.1.0)
+    slop (2.4.4)
     thor (0.14.6)
     timecop (0.3.5)
     treetop (1.4.10)
@@ -146,8 +143,9 @@ PLATFORMS
   ruby
 
 DEPENDENCIES
+  bcrypt-ruby (~> 3.0.0)
   bson_ext (~> 1.3)
-  mongo_mapper
+  mongo_mapper (~> 0.11.0)
   pry
   rails (= 3.0.3)
   rspec (~> 2.5.0)

data/spec/rails3_mongo_mapper/app/controllers/application_controller.rb

@@ -101,6 +101,20 @@ class ApplicationController < ActionController::Base
     end
   end
   
+  def test_create_from_provider_with_block
+    provider = params[:provider]
+    login_from(provider)
+    @user = create_from(provider) do |user|
+      # check uniqueness of username
+      User.where(:username => user.username).empty?
+    end
+    if @user 
+      redirect_to "bla", :notice => "Success!"
+    else
+      redirect_to "blu", :alert => "Failed!"
+    end
+  end
+  
   protected
   
   

data/spec/rails3_mongo_mapper/spec/controller_spec.rb

@@ -141,6 +141,13 @@ describe ApplicationController do
       response.should redirect_to("http://test.host/")
     end
     
+    it "require_login before_filter should not save the url that the user originally wanted upon all non-get http methods" do
+      [:post, :put, :delete].each do |m|
+        self.send(m, :some_action)
+        session[:return_to_url].should be_nil
+      end
+    end
+    
     it "on successful login the user should be redirected to the url he originally wanted" do
       session[:return_to_url] = "http://test.host/some_action"
       post :test_return_to, :username => 'gizmo', :password => 'secret'

data/spec/rails3_mongoid/Gemfile

@@ -1,5 +1,6 @@
 source 'http://rubygems.org'
 
+gem 'bcrypt-ruby', '~> 3.0.0'
 gem 'rails', '3.0.3'
 gem "sorcery", '>= 0.1.0', :path => '../../'
 gem "mongoid", "~> 2.0"