Commit message (Collapse) | Author | Age | Files | Lines | |
---|---|---|---|---|---|
* | `has_secure_password` is not invalid when assigning empty Strings. | Yves Senn | 2013-03-04 | 1 | -0/+6 |
| | | | | | | | | | | Closes #9535. With 692b3b6 the `password=` setter does no longer set blank passwords. This triggered validation errors when assigning empty Strings to `password` and `password_confirmation`. This patch only sets the confirmation if it is not `blank?`. | ||||
* | Use secure password min cost option in its own tests for a speed up | Carlos Antonio da Silva | 2012-11-21 | 1 | -2/+10 |
| | | | | Around 0.564359s => 0.092244s speed up in my machine. | ||||
* | Use BCrypt's MIN_COST in the test environment for speedier tests | Trevor Turk | 2012-11-14 | 1 | -1/+12 |
| | |||||
* | Cleanup trailing whitespaces | dfens | 2012-10-12 | 1 | -1/+1 |
| | |||||
* | Remove MassAssignmentSecurity from ActiveModel | Guillermo Iguaran | 2012-09-16 | 1 | -12/+0 |
| | | | | This will be moved out to protected_attributes gem | ||||
* | has_secure_password should not raise a 'digest missing' error if the calling ↵ | Robby Grossman | 2012-07-31 | 1 | -0/+8 |
| | | | | class has specified for validations to be skipped. | ||||
* | Updated tests for has_secure_password. | Erich Menge | 2012-05-08 | 1 | -8/+22 |
| | |||||
* | Fix secure_password setter | Oscar Del Ben | 2012-04-24 | 1 | -0/+6 |
| | |||||
* | use variables from test setup | Vijay Dev | 2011-10-17 | 1 | -6/+4 |
| | |||||
* | AM mass assignment security attr_accessible and attr_protected now allow for ↵ | Josh Kalderimis | 2011-04-24 | 1 | -5/+6 |
| | | | | | | | | scopes using :as => scope eg. attr_accessible :name attr_accessible :name, :admin, :as => :admin | ||||
* | bcrypt will encrypt anything, so validate_presence_of would not catch nil / ↵ | Aaron Patterson | 2011-04-14 | 1 | -0/+12 |
| | | | | blank passwords. Thank you to Aleksander Kamil Modzelewski for reporting this | ||||
* | Override attributes_protected_by_default when has_secure_password is called. | Tsutomu Kuroda | 2011-02-09 | 1 | -0/+13 |
| | | | | | | | attr_protected should not be called, because it nullifies the mass assignment protection that has been set by attr_accessible. Signed-off-by: Santiago Pastorino <santiago@wyeworks.com> | ||||
* | Remove weak_passwords list and the length/strong password validator, leave ↵ | Santiago Pastorino | 2010-12-19 | 1 | -49/+1 |
| | | | | that up to the programmer | ||||
* | Add set_weak_passwords call in alignment with set_table_name. | Mikel Lindsaar | 2010-12-19 | 1 | -0/+5 |
| | |||||
* | Added ability to specify which passwords you want as weak passwords | Mikel Lindsaar | 2010-12-19 | 1 | -11/+31 |
| | |||||
* | Make password messages translatable. | José Valim | 2010-12-19 | 1 | -1/+1 |
| | |||||
* | Avoid warnings and fix small typo on SecurePassword. | José Valim | 2010-12-19 | 1 | -1/+3 |
| | |||||
* | BCrypt does its own salting, lovely! | David Heinemeier Hansson | 2010-12-18 | 1 | -0/+11 |
| | |||||
* | Added ActiveRecord::Base#has_secure_password (via ↵ | David Heinemeier Hansson | 2010-12-18 | 1 | -0/+42 |
ActiveModel::SecurePassword) to encapsulate dead-simple password usage with SHA2 encryption and salting |