sorcery 0.8.2 → 0.8.6

data/spec/rails3/spec/controller_brute_force_protection_spec.rb

@@ -1,96 +0,0 @@
-require File.expand_path(File.dirname(__FILE__) + '/spec_helper')
-
-describe ApplicationController do
-  before(:all) do
-    ActiveRecord::Migrator.migrate("#{Rails.root}/db/migrate/brute_force_protection")
-  end
-
-  after(:all) do
-    ActiveRecord::Migrator.rollback("#{Rails.root}/db/migrate/brute_force_protection")
-  end
-
-  # ----------------- SESSION TIMEOUT -----------------------
-  describe ApplicationController, "with brute force protection features" do
-    before(:all) do
-      sorcery_reload!([:brute_force_protection])
-      create_new_user
-    end
-
-    after(:each) do
-      Sorcery::Controller::Config.reset!
-      sorcery_controller_property_set(:user_class, User)
-      Timecop.return
-    end
-
-    it "should count login retries" do
-      3.times {get :test_login, :username => 'gizmo', :password => 'blabla'}
-      User.find_by_username('gizmo').failed_logins_count.should == 3
-    end
-
-    it "should generate unlock token after user locked" do
-      sorcery_model_property_set(:consecutive_login_retries_amount_limit, 2)
-      sorcery_model_property_set(:login_lock_time_period, 0)
-      sorcery_model_property_set(:unlock_token_mailer, SorceryMailer)
-      3.times {get :test_login, :username => "gizmo", :password => "blabla"}
-      User.find_by_username('gizmo').unlock_token.should_not be_nil
-    end
-
-    it "should generate unlock token before mail is sent" do
-      sorcery_model_property_set(:consecutive_login_retries_amount_limit, 2)
-      sorcery_model_property_set(:login_lock_time_period, 0)
-      sorcery_model_property_set(:unlock_token_mailer, SorceryMailer)
-      3.times {get :test_login, :username => "gizmo", :password => "blabla"}
-      ActionMailer::Base.deliveries.last.body.to_s.match(User.find_by_username('gizmo').unlock_token).should_not be_nil
-    end
-
-    it "should unlock after entering unlock token" do
-      sorcery_model_property_set(:consecutive_login_retries_amount_limit, 2)
-      sorcery_model_property_set(:login_lock_time_period, 0)
-      sorcery_model_property_set(:unlock_token_mailer, SorceryMailer)
-      3.times {get :test_login, :username => "gizmo", :password => "blabla"}
-      User.find_by_username('gizmo').unlock_token.should_not be_nil
-      token = User.find_by_username('gizmo').unlock_token
-      user = User.load_from_unlock_token(token)
-      user.should_not be_nil
-      user.unlock!
-      User.load_from_unlock_token(token).should be_nil
-    end
-
-
-    it "should reset the counter on a good login" do
-      sorcery_model_property_set(:consecutive_login_retries_amount_limit, 5)
-      3.times {get :test_login, :username => 'gizmo', :password => 'blabla'}
-      get :test_login, :username => 'gizmo', :password => 'secret'
-      User.find_by_username('gizmo').failed_logins_count.should == 0
-    end
-
-    it "should lock user when number of retries reached the limit" do
-      User.find_by_username('gizmo').lock_expires_at.should be_nil
-      sorcery_model_property_set(:consecutive_login_retries_amount_limit, 1)
-      get :test_login, :username => 'gizmo', :password => 'blabla'
-      User.find_by_username('gizmo').lock_expires_at.should_not be_nil
-    end
-
-    it "should unlock after lock time period passes" do
-      sorcery_model_property_set(:consecutive_login_retries_amount_limit, 2)
-      sorcery_model_property_set(:login_lock_time_period, 0.2)
-      get :test_login, :username => 'gizmo', :password => 'blabla'
-      get :test_login, :username => 'gizmo', :password => 'blabla'
-      User.find_by_username('gizmo').lock_expires_at.should_not be_nil
-      Timecop.travel(Time.now.in_time_zone + 0.3)
-      get :test_login, :username => 'gizmo', :password => 'blabla'
-      User.find_by_username('gizmo').lock_expires_at.should be_nil
-    end
-
-    it "should not unlock if time period is 0 (permanent lock)" do
-      sorcery_model_property_set(:consecutive_login_retries_amount_limit, 2)
-      sorcery_model_property_set(:login_lock_time_period, 0)
-      get :test_login, :username => 'gizmo', :password => 'blabla'
-      get :test_login, :username => 'gizmo', :password => 'blabla'
-      unlock_date = User.find_by_username('gizmo').lock_expires_at
-      Timecop.travel(Time.now.in_time_zone + 1)
-      get :test_login, :username => 'gizmo', :password => 'blabla'
-      User.find_by_username('gizmo').lock_expires_at.to_s.should == unlock_date.to_s
-    end
-  end
-end

data/spec/rails3/spec/controller_http_basic_auth_spec.rb

@@ -1,50 +0,0 @@
-require File.expand_path(File.dirname(__FILE__) + '/spec_helper')
-
-describe ApplicationController do
-  
-  # ----------------- HTTP BASIC AUTH -----------------------
-  describe ApplicationController, "with http basic auth features" do
-    before(:all) do
-      sorcery_reload!([:http_basic_auth])
-      create_new_user
-    end
-    
-    after(:each) do
-      logout_user
-    end
-    
-    it "requests basic authentication when before_filter is used" do
-      get :test_http_basic_auth
-      response.code.should == "401"
-    end
-    
-    it "authenticates from http basic if credentials are sent" do
-      @request.env["HTTP_AUTHORIZATION"] = "Basic " + Base64::encode64("#{@user.username}:secret")
-      get :test_http_basic_auth, nil, :http_authentication_used => true
-      response.should be_a_success
-    end
-    
-    it "fails authentication if credentials are wrong" do
-      @request.env["HTTP_AUTHORIZATION"] = "Basic " + Base64::encode64("#{@user.username}:wrong!")
-      get :test_http_basic_auth, nil, :http_authentication_used => true
-      response.code.should redirect_to root_url
-    end
-    
-    it "should allow configuration option 'controller_to_realm_map'" do
-      sorcery_controller_property_set(:controller_to_realm_map, {"1" => "2"})
-      Sorcery::Controller::Config.controller_to_realm_map.should == {"1" => "2"}
-    end
-    
-    it "should display the correct realm name configured for the controller" do
-      sorcery_controller_property_set(:controller_to_realm_map, {"application" => "Salad"})
-      get :test_http_basic_auth
-      response.headers["WWW-Authenticate"].should == "Basic realm=\"Salad\""
-    end
-    
-    it "should sign in the user's session on successful login" do
-      @request.env["HTTP_AUTHORIZATION"] = "Basic " + Base64::encode64("#{@user.username}:secret")
-      get :test_http_basic_auth, nil, :http_authentication_used => true
-      session[:user_id].should == User.find_by_username(@user.username).id
-    end
-  end
-end

data/spec/rails3/spec/controller_oauth2_spec.rb

@@ -1,380 +0,0 @@
-require File.expand_path(File.dirname(__FILE__) + '/spec_helper')
-require File.expand_path(File.dirname(__FILE__) + '/../../shared_examples/controller_oauth2_shared_examples')
-
-def stub_all_oauth2_requests!
-  auth_code       = OAuth2::Strategy::AuthCode.any_instance
-  access_token    = mock(OAuth2::AccessToken)
-  access_token.stub(:token_param=)
-  response        = mock(OAuth2::Response)
-  response.stub(:body).and_return({
-    "id"=>"123",
-    "name"=>"Noam Ben Ari",
-    "first_name"=>"Noam",
-    "last_name"=>"Ben Ari",
-    "link"=>"http://www.facebook.com/nbenari1",
-    "hometown"=>{"id"=>"110619208966868", "name"=>"Haifa, Israel"},
-    "location"=>{"id"=>"106906559341067", "name"=>"Pardes Hanah, Hefa, Israel"},
-    "bio"=>"I'm a new daddy, and enjoying it!",
-    "gender"=>"male",
-    "email"=>"nbenari@gmail.com",
-    "timezone"=>2,
-    "locale"=>"en_US",
-    "languages"=>[{"id"=>"108405449189952", "name"=>"Hebrew"}, {"id"=>"106059522759137", "name"=>"English"}, {"id"=>"112624162082677", "name"=>"Russian"}],
-    "verified"=>true,
-    "updated_time"=>"2011-02-16T20:59:38+0000"}.to_json)
-  access_token.stub(:get).and_return(response)
-  auth_code.stub(:get_token).and_return(access_token)
-end
-
-def set_external_property
-  sorcery_controller_property_set(:external_providers, [:facebook, :github, :google, :liveid])
-  sorcery_controller_external_property_set(:facebook, :key, "eYVNBjBDi33aa9GkA3w")
-  sorcery_controller_external_property_set(:facebook, :secret, "XpbeSdCoaKSmQGSeokz5qcUATClRW5u08QWNfv71N8")
-  sorcery_controller_external_property_set(:facebook, :callback_url, "http://blabla.com")
-  sorcery_controller_external_property_set(:github, :key, "eYVNBjBDi33aa9GkA3w")
-  sorcery_controller_external_property_set(:github, :secret, "XpbeSdCoaKSmQGSeokz5qcUATClRW5u08QWNfv71N8")
-  sorcery_controller_external_property_set(:github, :callback_url, "http://blabla.com")
-  sorcery_controller_external_property_set(:google, :key, "eYVNBjBDi33aa9GkA3w")
-  sorcery_controller_external_property_set(:google, :secret, "XpbeSdCoaKSmQGSeokz5qcUATClRW5u08QWNfv71N8")
-  sorcery_controller_external_property_set(:google, :callback_url, "http://blabla.com")
-  sorcery_controller_external_property_set(:liveid, :key, "eYVNBjBDi33aa9GkA3w")
-  sorcery_controller_external_property_set(:liveid, :secret, "XpbeSdCoaKSmQGSeokz5qcUATClRW5u08QWNfv71N8")
-  sorcery_controller_external_property_set(:liveid, :callback_url, "http://blabla.com")
-end
-
-describe ApplicationController do
-  before(:all) do
-    ActiveRecord::Migrator.migrate("#{Rails.root}/db/migrate/external")
-    sorcery_reload!([:external])
-    set_external_property
-  end
-
-  after(:all) do
-    ActiveRecord::Migrator.rollback("#{Rails.root}/db/migrate/external")
-  end
-  # ----------------- OAuth -----------------------
-  describe ApplicationController, "with OAuth features" do
-
-    before(:each) do
-      stub_all_oauth2_requests!
-    end
-
-    after(:each) do
-      User.delete_all
-      Authentication.delete_all
-    end
-
-    context "when callback_url begin with /" do 
-      before do
-        sorcery_controller_external_property_set(:facebook, :callback_url, "/oauth/twitter/callback")
-      end
-      it "login_at redirects correctly" do
-        create_new_user
-        get :login_at_test2
-        response.should be_a_redirect
-        response.should redirect_to("https://graph.facebook.com/oauth/authorize?response_type=code&client_id=#{::Sorcery::Controller::Config.facebook.key}&redirect_uri=http%3A%2F%2Ftest.host%2Foauth%2Ftwitter%2Fcallback&scope=email%2Coffline_access&display=page")
-      end
-      after do
-        sorcery_controller_external_property_set(:facebook, :callback_url, "http://blabla.com")
-      end
-    end
-
-    context "when callback_url begin with http://" do 
-      it "login_at redirects correctly" do
-        create_new_user
-        get :login_at_test2
-        response.should be_a_redirect
-        response.should redirect_to("https://graph.facebook.com/oauth/authorize?response_type=code&client_id=#{::Sorcery::Controller::Config.facebook.key}&redirect_uri=http%3A%2F%2Fblabla.com&scope=email%2Coffline_access&display=page")
-      end
-    end
-    
-    it "'login_from' logins if user exists" do
-      sorcery_model_property_set(:authentications_class, Authentication)
-      create_new_external_user(:facebook)
-      get :test_login_from2
-      flash[:notice].should == "Success!"
-    end
-
-    it "'login_from' fails if user doesn't exist" do
-      sorcery_model_property_set(:authentications_class, Authentication)
-      create_new_user
-      get :test_login_from2
-      flash[:alert].should == "Failed!"
-    end
-
-    it "on successful login_from the user should be redirected to the url he originally wanted" do
-      sorcery_model_property_set(:authentications_class, Authentication)
-      create_new_external_user(:facebook)
-      get :test_return_to_with_external2, {}, :return_to_url => "fuu"
-      response.should redirect_to("fuu")
-      flash[:notice].should == "Success!"
-    end
-
-  # provider: github
-    it "login_at redirects correctly (github)" do
-      create_new_user
-      get :login_at_test3
-      response.should be_a_redirect
-      response.should redirect_to("https://github.com/login/oauth/authorize?response_type=code&client_id=#{::Sorcery::Controller::Config.github.key}&redirect_uri=http%3A%2F%2Fblabla.com&scope&display")
-    end
-
-    it "'login_from' logins if user exists (github)" do
-      sorcery_model_property_set(:authentications_class, Authentication)
-      create_new_external_user(:github)
-      get :test_login_from3
-      flash[:notice].should == "Success!"
-    end
-
-    it "'login_from' fails if user doesn't exist (github)" do
-      sorcery_model_property_set(:authentications_class, Authentication)
-      create_new_user
-      get :test_login_from3
-      flash[:alert].should == "Failed!"
-    end
-
-    it "on successful login_from the user should be redirected to the url he originally wanted (github)" do
-      sorcery_model_property_set(:authentications_class, Authentication)
-      create_new_external_user(:github)
-      get :test_return_to_with_external3, {}, :return_to_url => "fuu"
-      response.should redirect_to("fuu")
-      flash[:notice].should == "Success!"
-    end
-
-  # provider: google
-    it "login_at redirects correctly (google)" do
-      create_new_user
-      get :login_at_test4
-      response.should be_a_redirect
-      response.should redirect_to("https://accounts.google.com/o/oauth2/auth?response_type=code&client_id=#{::Sorcery::Controller::Config.google.key}&redirect_uri=http%3A%2F%2Fblabla.com&scope=https%3A%2F%2Fwww.googleapis.com%2Fauth%2Fuserinfo.email+https%3A%2F%2Fwww.googleapis.com%2Fauth%2Fuserinfo.profile&display")
-    end
-
-    it "'login_from' logins if user exists (google)" do
-      sorcery_model_property_set(:authentications_class, Authentication)
-      create_new_external_user(:google)
-      get :test_login_from4
-      flash[:notice].should == "Success!"
-    end
-
-    it "'login_from' fails if user doesn't exist (google)" do
-      sorcery_model_property_set(:authentications_class, Authentication)
-      create_new_user
-      get :test_login_from4
-      flash[:alert].should == "Failed!"
-    end
-
-    it "on successful login_from the user should be redirected to the url he originally wanted (google)" do
-      sorcery_model_property_set(:authentications_class, Authentication)
-      create_new_external_user(:google)
-      get :test_return_to_with_external4, {}, :return_to_url => "fuu"
-      response.should redirect_to("fuu")
-      flash[:notice].should == "Success!"
-    end
-
-  # provider: liveid
-    it "login_at redirects correctly (liveid)" do
-      create_new_user
-      get :login_at_test5
-      response.should be_a_redirect
-      response.should redirect_to("https://oauth.live.com/authorize?response_type=code&client_id=#{::Sorcery::Controller::Config.liveid.key}&redirect_uri=http%3A%2F%2Fblabla.com&scope=wl.basic+wl.emails+wl.offline_access&display")
-    end
-
-    it "'login_from' logins if user exists (liveid)" do
-      sorcery_model_property_set(:authentications_class, Authentication)
-      create_new_external_user(:liveid)
-      get :test_login_from5
-      flash[:notice].should == "Success!"
-    end
-
-    it "'login_from' fails if user doesn't exist (liveid)" do
-      sorcery_model_property_set(:authentications_class, Authentication)
-      create_new_user
-      get :test_login_from5
-      flash[:alert].should == "Failed!"
-    end
-
-    it "on successful login_from the user should be redirected to the url he originally wanted (liveid)" do
-      sorcery_model_property_set(:authentications_class, Authentication)
-      create_new_external_user(:liveid)
-      get :test_return_to_with_external5, {}, :return_to_url => "fuu"
-      response.should redirect_to("fuu")
-      flash[:notice].should == "Success!"
-    end
-
-  end
-
-
-  describe ApplicationController do
-    it_behaves_like "oauth2_controller"
-  end
-
-  describe ApplicationController, "OAuth with User Activation features" do
-    before(:all) do
-      ActiveRecord::Migrator.migrate("#{Rails.root}/db/migrate/activation")
-      sorcery_reload!([:user_activation,:external], :user_activation_mailer => ::SorceryMailer)
-      sorcery_controller_property_set(:external_providers, [:facebook, :github, :google, :liveid])
-      sorcery_controller_external_property_set(:facebook, :key, "eYVNBjBDi33aa9GkA3w")
-      sorcery_controller_external_property_set(:facebook, :secret, "XpbeSdCoaKSmQGSeokz5qcUATClRW5u08QWNfv71N8")
-      sorcery_controller_external_property_set(:facebook, :callback_url, "http://blabla.com")
-      sorcery_controller_external_property_set(:github, :key, "eYVNBjBDi33aa9GkA3w")
-      sorcery_controller_external_property_set(:github, :secret, "XpbeSdCoaKSmQGSeokz5qcUATClRW5u08QWNfv71N8")
-      sorcery_controller_external_property_set(:github, :callback_url, "http://blabla.com")
-      sorcery_controller_external_property_set(:google, :key, "eYVNBjBDi33aa9GkA3w")
-      sorcery_controller_external_property_set(:google, :secret, "XpbeSdCoaKSmQGSeokz5qcUATClRW5u08QWNfv71N8")
-      sorcery_controller_external_property_set(:google, :callback_url, "http://blabla.com")
-      sorcery_controller_external_property_set(:liveid, :key, "eYVNBjBDi33aa9GkA3w")
-      sorcery_controller_external_property_set(:liveid, :secret, "XpbeSdCoaKSmQGSeokz5qcUATClRW5u08QWNfv71N8")
-      sorcery_controller_external_property_set(:liveid, :callback_url, "http://blabla.com")
-
-    end
-
-    after(:all) do
-      ActiveRecord::Migrator.rollback("#{Rails.root}/db/migrate/activation")
-    end
-
-    after(:each) do
-      User.delete_all
-    end
-
-    it "should not send activation email to external users" do
-      old_size = ActionMailer::Base.deliveries.size
-      create_new_external_user(:facebook)
-      ActionMailer::Base.deliveries.size.should == old_size
-    end
-
-    it "should not send external users an activation success email" do
-      sorcery_model_property_set(:activation_success_email_method_name, nil)
-      create_new_external_user(:facebook)
-      old_size = ActionMailer::Base.deliveries.size
-      @user.activate!
-      ActionMailer::Base.deliveries.size.should == old_size
-    end
-
-  # provider: github
-    it "should not send activation email to external users (github)" do
-      old_size = ActionMailer::Base.deliveries.size
-      create_new_external_user(:github)
-      ActionMailer::Base.deliveries.size.should == old_size
-    end
-
-    it "should not send external users an activation success email (github)" do
-      sorcery_model_property_set(:activation_success_email_method_name, nil)
-      create_new_external_user(:github)
-      old_size = ActionMailer::Base.deliveries.size
-      @user.activate!
-      ActionMailer::Base.deliveries.size.should == old_size
-    end
-
-  # provider: google
-    it "should not send activation email to external users (google)" do
-      old_size = ActionMailer::Base.deliveries.size
-      create_new_external_user(:google)
-      ActionMailer::Base.deliveries.size.should == old_size
-    end
-
-    it "should not send external users an activation success email (google)" do
-      sorcery_model_property_set(:activation_success_email_method_name, nil)
-      create_new_external_user(:google)
-      old_size = ActionMailer::Base.deliveries.size
-      @user.activate!
-      ActionMailer::Base.deliveries.size.should == old_size
-    end
-
-  # provider: liveid
-    it "should not send activation email to external users (liveid)" do
-      old_size = ActionMailer::Base.deliveries.size
-      create_new_external_user(:liveid)
-      ActionMailer::Base.deliveries.size.should == old_size
-    end
-
-    it "should not send external users an activation success email (liveid)" do
-      sorcery_model_property_set(:activation_success_email_method_name, nil)
-      create_new_external_user(:liveid)
-      old_size = ActionMailer::Base.deliveries.size
-      @user.activate!
-      ActionMailer::Base.deliveries.size.should == old_size
-    end
-  end
-
-  describe ApplicationController, "OAuth with user activation features"  do
-    before(:all) do
-      ActiveRecord::Migrator.migrate("#{Rails.root}/db/migrate/external")
-      ActiveRecord::Migrator.migrate("#{Rails.root}/db/migrate/activity_logging")
-      sorcery_reload!([:activity_logging, :external])
-    end
-
-    after(:all) do
-      ActiveRecord::Migrator.rollback("#{Rails.root}/db/migrate/external")
-      ActiveRecord::Migrator.rollback("#{Rails.root}/db/migrate/activity_logging")
-    end
-
-    %w(facebook github google liveid).each.with_index(2) do |provider, index|
-      context "when #{provider}" do
-        before(:each) do
-          User.delete_all
-          Authentication.delete_all
-          sorcery_controller_property_set(:register_login_time, true)
-          stub_all_oauth2_requests!
-          sorcery_model_property_set(:authentications_class, Authentication)
-          create_new_external_user(provider.to_sym)
-        end
-
-        it "should register login time" do
-          now = Time.now.in_time_zone
-          get "test_login_from#{index}".to_sym
-          User.last.last_login_at.should_not be_nil
-          User.last.last_login_at.to_s(:db).should >= now.to_s(:db)
-          User.last.last_login_at.to_s(:db).should <= (now+2).to_s(:db)
-        end
-
-        it "should not register login time if configured so" do
-          sorcery_controller_property_set(:register_login_time, false)
-          now = Time.now.in_time_zone
-          get "test_login_from#{index}".to_sym
-          User.last.last_login_at.should be_nil
-        end
-      end
-    end
-  end
-
-  describe ApplicationController, "OAuth with session timeout features" do
-    before(:all) do
-      ActiveRecord::Migrator.migrate("#{Rails.root}/db/migrate/external")
-      sorcery_reload!([:session_timeout, :external])
-    end
-
-    after(:all) do
-      ActiveRecord::Migrator.rollback("#{Rails.root}/db/migrate/external")
-    end
-
-    %w(facebook github google liveid).each.with_index(2) do |provider, index|
-      context "when #{provider}" do
-        before(:each) do
-          User.delete_all
-          Authentication.delete_all
-          sorcery_model_property_set(:authentications_class, Authentication)
-          sorcery_controller_property_set(:session_timeout,0.5)
-          stub_all_oauth2_requests!
-          create_new_external_user(provider.to_sym)
-        end
-
-        after(:each) do
-          Timecop.return
-        end
-
-        it "should not reset session before session timeout" do
-          get "test_login_from#{index}".to_sym
-          session[:user_id].should_not be_nil
-          flash[:notice].should == "Success!"
-        end
-
-        it "should reset session after session timeout" do
-          get "test_login_from#{index}".to_sym
-          Timecop.travel(Time.now.in_time_zone+0.6)
-          get :test_should_be_logged_in
-          session[:user_id].should be_nil
-          response.should be_a_redirect
-        end
-      end
-    end
-  end
-end

data/spec/rails3/spec/controller_remember_me_spec.rb

@@ -1,96 +0,0 @@
-require File.expand_path(File.dirname(__FILE__) + '/spec_helper')
-
-describe ApplicationController do
-  
-  # ----------------- REMEMBER ME -----------------------
-  describe ApplicationController, "with remember me features" do
-    
-    before(:all) do
-      ActiveRecord::Migrator.migrate("#{Rails.root}/db/migrate/remember_me")
-      sorcery_reload!([:remember_me])
-    end
-    
-    before(:each) do
-      create_new_user
-    end
-    
-    after(:all) do
-      ActiveRecord::Migrator.rollback("#{Rails.root}/db/migrate/remember_me")
-    end
-    
-    after(:each) do
-      session = nil
-      cookies = nil
-      User.delete_all
-    end
-    
-    it "should set cookie on remember_me!" do
-      post :test_login_with_remember, :username => 'gizmo', :password => 'secret'
-      @request.cookies.merge!(cookies)
-      cookies = ActionDispatch::Cookies::CookieJar.build(@request)
-      cookies.signed["remember_me_token"].should == assigns[:current_user].remember_me_token
-    end
-    
-    it "should clear cookie on forget_me!" do
-      cookies["remember_me_token"] == {:value => 'asd54234dsfsd43534', :expires => 3600}
-      get :test_logout
-      cookies["remember_me_token"].should be_nil
-    end
-    
-    it "login(username,password,remember_me) should login and remember" do
-      post :test_login_with_remember_in_login, :username => 'gizmo', :password => 'secret', :remember => "1"
-      @request.cookies.merge!(cookies)
-      cookies = ActionDispatch::Cookies::CookieJar.build(@request)
-      cookies.signed["remember_me_token"].should_not be_nil
-      cookies.signed["remember_me_token"].should == assigns[:user].remember_me_token
-    end
-    
-    it "logout should also forget_me!" do
-      session[:user_id] = @user.id
-      get :test_logout_with_remember
-      cookies["remember_me_token"].should be_nil
-    end
-    
-    it "should login_from_cookie" do
-      session[:user_id] = @user.id
-      subject.remember_me!
-      subject.instance_eval do
-        @current_user = nil
-      end
-      session[:user_id] = nil
-      get :test_login_from_cookie
-      assigns[:current_user].should == @user
-    end
-    
-    it "should not remember_me! when not asked to, even if third parameter is used" do
-      post :test_login_with_remember_in_login, :username => 'gizmo', :password => 'secret', :remember => "0"
-      cookies["remember_me_token"].should be_nil
-    end
-    
-    it "should not remember_me! when not asked to" do
-      post :test_login, :username => 'gizmo', :password => 'secret'
-      cookies["remember_me_token"].should be_nil
-    end
-    
-    # --- login_user(user) ---
-    specify { should respond_to(:auto_login) }
-        
-    it "auto_login(user) should login a user instance without remembering" do
-      create_new_user
-      session[:user_id] = nil
-      subject.auto_login(@user)
-      get :test_login_from_cookie
-      assigns[:current_user].should == @user
-      cookies["remember_me_token"].should be_nil
-    end
-    
-    it "auto_login(user, true) should login a user instance with remembering" do
-      create_new_user
-      session[:user_id] = nil
-      subject.auto_login(@user, true)
-      get :test_login_from_cookie
-      assigns[:current_user].should == @user
-      cookies["remember_me_token"].should_not be_nil
-    end       
-  end
-end

data/spec/rails3/spec/controller_session_timeout_spec.rb

@@ -1,55 +0,0 @@
-require File.expand_path(File.dirname(__FILE__) + '/spec_helper')
-
-describe ApplicationController do
-  
-  # ----------------- SESSION TIMEOUT -----------------------
-  describe ApplicationController, "with session timeout features" do
-    before(:all) do
-      sorcery_reload!([:session_timeout])
-      sorcery_controller_property_set(:session_timeout,0.5)
-      create_new_user
-    end
-    
-    after(:each) do
-      Timecop.return
-    end
-    
-    it "should not reset session before session timeout" do
-      login_user
-      get :test_should_be_logged_in
-      session[:user_id].should_not be_nil
-      response.should be_a_success
-    end
-    
-    it "should reset session after session timeout" do
-      login_user
-      Timecop.travel(Time.now.in_time_zone+0.6)
-      get :test_should_be_logged_in
-      session[:user_id].should be_nil
-      response.should be_a_redirect
-    end
-    
-    context "with 'session_timeout_from_last_action'" do
-      it "should not logout if there was activity" do
-        sorcery_controller_property_set(:session_timeout_from_last_action, true)
-        get :test_login, :username => 'gizmo', :password => 'secret'
-        Timecop.travel(Time.now.in_time_zone+0.3)
-        get :test_should_be_logged_in
-        session[:user_id].should_not be_nil
-        Timecop.travel(Time.now.in_time_zone+0.3)
-        get :test_should_be_logged_in
-        session[:user_id].should_not be_nil
-        response.should be_a_success
-      end
-    
-      it "with 'session_timeout_from_last_action' should logout if there was no activity" do
-        sorcery_controller_property_set(:session_timeout_from_last_action, true)
-        get :test_login, :username => 'gizmo', :password => 'secret'
-        Timecop.travel(Time.now.in_time_zone+0.6)
-        get :test_should_be_logged_in
-        session[:user_id].should be_nil
-        response.should be_a_redirect
-      end
-    end
-  end
-end