aboutsummaryrefslogtreecommitdiffstats
path: root/activemodel/lib/active_model/secure_password.rb
Commit message (Collapse)AuthorAgeFilesLines
* has_secure_password: use `recovery_password` instead of `activation_token`bogdanvlviv2018-07-081-6/+6
| | | | | | Since we have `has_secure_token`, it is too confusing to use `_token` suffix with `has_secure_password`. Context https://github.com/rails/rails/pull/33307#discussion_r200807185
* Merge pull request #26764 from choncou/improve_has_secure_passwordRafael Mendonça França2018-06-281-55/+48
|\ | | | | | | Allow configurable attribute name on `#has_secure_password`
| * Remove method for regenerating a token, and update `#authenticate`.Unathi Chonco2016-10-121-40/+16
| | | | | | | | | | | | | | This change now creates a method `#authenticate_XXX` where XXX is the configured attribute name on `#has_secure_password`. `#authenticate` is now an alias to this method when the attribute name is the default 'password'
| * This addition will now allow configuring an attribute name for theUnathi Chonco2016-10-121-40/+57
| | | | | | | | | | | | | | | | | | | | | | | | existing `#has_secure_password`. This can be useful when one would like to store some secure field as a digest, just like a password. The method still defaults to `password`. It now also allows using the same `#authenticate` method which now accepts a second argument for specifying the attribute to be authenticated, or will default to 'password`. A new method is also added for generating a new token for an attribute by calling `#regenerate_XXXX` where `XXXX` is the attribute name.
* | Talk about bytes not charactersRafael Mendonça França2017-07-311-3/+3
| | | | | | | | | | | | [ci skip] Closes #30012
* | Use frozen string literal in activemodel/Kir Shatrov2017-07-161-0/+2
| |
* | Revert "Merge pull request #29540 from kirs/rubocop-frozen-string"Matthew Draper2017-07-021-1/+0
| | | | | | | | | | This reverts commit 3420a14590c0e6915d8b6c242887f74adb4120f9, reversing changes made to afb66a5a598ce4ac74ad84b125a5abf046dcf5aa.
* | Enforce frozen string in RubocopKir Shatrov2017-07-011-0/+1
|/
* applies new string literal convention in activemodel/libXavier Noria2016-08-061-1/+1
| | | | | The current code base is not uniform. After some discussion, we have chosen to go with double quotes by default.
* Fix spelling error in has_secure_password documentation [ci skip]Melanie Gilman2015-03-031-1/+1
|
* Remove attributes_protected_by_default reference, since ↵robertomiranda2015-01-091-7/+0
| | | | MassAssignmentSecurity was removed from ActiveModel f8c9a4d3e88181
* Use more semantic method to check passwordRohit Arondekar2014-12-301-1/+1
|
* use `allow_blank` option insteadKuldeep Aggarwal2014-09-141-1/+1
|
* Allow password to contain spaces only.Yevhene Shemet2014-08-061-2/+2
|
* Only automatically include validations when enabledGodfrey Chan2014-07-021-1/+2
| | | | This is a follow up to #16024.
* automatically include ActiveModel::Validations when include ↵Aditya Kapoor2014-07-031-0/+1
| | | | ActiveModel::SecurePassword
* Edit pass on `has_secure_password` documentation [ci skip]Godfrey Chan2014-06-141-5/+6
|
* [ci skip] Update #has_secure_password docsAkshay Vishnoi2014-06-141-6/+9
|
* SecurePassword - Validate password must be less than or equal to 72Akshay Vishnoi2014-06-141-0/+6
| | | | See #14591, Reason - BCrypt hash function can handle maximum 72 characters.
* Merge pull request #15154 from msgehard/move_password_fieldRafael Mendonça França2014-05-201-2/+2
|\ | | | | Put attr_reader in with all of the other instance methods
| * Put attr_reader in with all of the other instance methodsMike Gehard2014-05-171-2/+2
| | | | | | | | This makes the grouping make a little more sense
* | Let others know why this code is hereMike Gehard2014-05-181-0/+1
|/ | | | [ci skip]
* Bump version of bcrypt gemT.J. Schuck2014-02-251-4/+4
|
* Some minor fixesGodfrey Chan2014-01-241-2/+2
|
* Got all the new tests passingGodfrey Chan2014-01-241-10/+8
|
* Restored the ability to clear the password with user.password= nil (see the ↵Godfrey Chan2014-01-241-1/+3
| | | | docs)
* Use a better method name to check the requirement of password confirmationCarlos Antonio da Silva2014-01-071-5/+5
| | | | | Also improve changelog entries related to secure password to proper highlight.
* Fix few typos and improve markup at some levelsRobin Dupret2013-12-241-1/+1
|
* Merge pull request #12635 from mperham/4-0-stableGuillermo Iguaran2013-10-241-1/+0
| | | | Allow any version of BCrypt
* Use bcrypt's public cost attr, not internal constantT.J. Schuck2013-10-101-1/+1
| | | | | | | | See: - https://github.com/codahale/bcrypt-ruby/pull/63 - https://github.com/codahale/bcrypt-ruby/pull/64 - https://github.com/codahale/bcrypt-ruby/pull/65
* bcrypt-ruby v3.1.2 supports Ruby 2.0 on WindowsT.J. Schuck2013-09-231-3/+3
|
* Add :nodoc: to ActiveModel::SecurePassword.min_costGaurish Sharma2013-08-291-1/+3
| | | | [ci skip]
* Fix secure_password password_confirmation validationsVladimir Kiselev2013-07-241-2/+8
|
* bcrypt-ruby stable is 3.1Burkhard Vogel-Kreykenbohm2013-07-171-3/+3
|
* Fixing Issue #11083Akshay Khole2013-06-251-1/+1
| | | | Removing other occurrences of `the` appearing twice
* Fix regression in has_secure_password.Phil Calvin2013-05-301-4/+3
| | | | If the confirmation was blank, but the password wasn't, it would still save.
* Convert ActiveModel to 1.9 hash syntax.Patrick Robertson2013-05-011-1/+1
| | | | | I also attempted to fix other styleguide violations such as { a: :b } over {a: :b} and foo(b: 'bar') over foo( b: 'bar' ).
* Prefer find_by over dynamic finders in rdocSam Ruby2013-04-021-7/+7
|
* Remove exception variable from rescue blockCarlos Antonio da Silva2013-03-221-2/+2
| | | | | Just raising from the rescue block will re-raise the exception, so the variable is not necessary.
* Change Standard error when is required bcrypt-ruby and failsrobertomiranda2013-03-211-2/+7
|
* `has_secure_password` is not invalid when assigning empty Strings.Yves Senn2013-03-041-2/+8
| | | | | | | | | | Closes #9535. With 692b3b6 the `password=` setter does no longer set blank passwords. This triggered validation errors when assigning empty Strings to `password` and `password_confirmation`. This patch only sets the confirmation if it is not `blank?`.
* Revert "Merge pull request #8989 from robertomiranda/use-rails-4-find-by"Guillermo Iguaran2013-01-181-2/+2
| | | | | This reverts commit 637a7d9d357a0f3f725b0548282ca8c5e7d4af4a, reversing changes made to 5937bd02dee112646469848d7fe8a8bfcef5b4c1.
* User Rails 4 find_byrobertomiranda2013-01-181-2/+2
|
* Initialize #min_cost to avoid warning in Ruby 2.0Carlos Antonio da Silva2012-11-171-2/+3
|
* Merge branch 'master' of github.com:lifo/docrailsVijay Dev2012-11-171-0/+4
|\ | | | | | | | | Conflicts: actionpack/lib/action_dispatch/routing/redirection.rb
| * add details on password confirmation used with has_secure_passwordDaniel Lopes2012-11-131-0/+4
| |
* | Use BCrypt's MIN_COST in the test environment for speedier testsTrevor Turk2012-11-141-1/+4
|/
* remove non-breaking spaces [ci skip]Francesco Rodriguez2012-10-181-3/+3
|
* Merge branch 'master' of github.com:lifo/docrailsVijay Dev2012-08-041-17/+37
|\ | | | | | | | | | | Conflicts: activemodel/lib/active_model/secure_password.rb activerecord/lib/active_record/associations/collection_proxy.rb
| * update ActiveModel::Validator docs [ci skip]Francesco Rodriguez2012-07-291-1/+1
| |