Commit message (Collapse) | Author | Age | Files | Lines | |
---|---|---|---|---|---|
* | Add `#verified` and `#valid_message?` to MessageVerifier | Logan Leger | 2014-12-01 | 1 | -16/+24 |
| | | | | | | | | | | | This commit adds a `#verified` method to `ActiveSupport::MessageVerifier` which will return either `false` when it encounters an error or the message. `#verify` continues to raise an `InvalidSignature` exception on error. This commit also adds a convenience boolean method on `MessageVerifier` as a way to check if a message is valid without performing the decoding. | ||||
* | MessageVerifier raises an appropriate exception if the secret is nil | Kostiantyn Kahanskyi | 2014-09-12 | 1 | -0/+7 |
| | | | | | Otherwise this will lead to another error later on when generating a signature: TypeError (no implicit conversion of nil into String). | ||||
* | PR #10635 introduces rescue from ArgumentError thrown by ↵ | Vipul A M | 2013-12-12 | 1 | -0/+14 |
| | | | | | | | | `Base64.strict_decode64`. This broke natural order of things for `StaleSessionCheck#stale_session_check!` which tried auto_loading a class based on `ArgumentError` message , and later retrying the `Marshal#load` of class, successfully allowing auto_loading. This PR tries to fix this behavior by forwarding `ArgumentError` 's not raised by `Base64.strict_decode64` , as is, ahead to `StaleSessionCheck#stale_session_check!` | ||||
* | :scissors: | Rafael Mendonça França | 2013-12-02 | 1 | -4/+4 |
| | | | | [ci skip] | ||||
* | Standardize all JSON encoded times to use 3 decimal fractional seconds | Ryan Glover | 2013-11-07 | 1 | -1/+1 |
| | |||||
* | Fixed bad tests to clean up after themselves. | Ryan Davis | 2013-05-03 | 1 | -1/+6 |
| | |||||
* | Remove deprecations from Active Support. | José Valim | 2011-12-20 | 1 | -6/+0 |
| | |||||
* | Test deprecation warning when not using an options hash as second parameter. | Willem van Bergen | 2011-09-15 | 1 | -1/+7 |
| | |||||
* | Use an options hash to specify digest/cipher algorithm and a serializer for ↵ | Willem van Bergen | 2011-09-15 | 1 | -3/+3 |
| | | | | MessageVerifier and MessageEncryptor. | ||||
* | Implement API suggestions of pull request. | Willem van Bergen | 2011-09-15 | 1 | -3/+12 |
| | |||||
* | Fixed tests so that they will also run properly in other timezones. | Willem van Bergen | 2011-09-15 | 1 | -2/+2 |
| | |||||
* | Custom serializers and deserializers in MessageVerifier and MessageEncryptor. | Willem van Bergen | 2011-09-15 | 1 | -0/+9 |
| | | | | | By default, these classes use Marshal for serializing and deserializing messages. Unfortunately, the Marshal format is closely associated with Ruby internals and even changes between different interpreters. This makes the resulting message very hard to impossible to unserialize messages generated by these classes in other environments like node.js. This patch solves this by allowing you to set your own custom serializer and deserializer lambda functions. By default, it still uses Marshal to be backwards compatible. | ||||
* | Ruby 1.9.2: marshaling round-trips Time#zone | Jeremy Kemper | 2010-03-28 | 1 | -1/+1 |
| | |||||
* | Repair time dependencies | Jeremy Kemper | 2009-11-14 | 1 | -0/+2 |
| | |||||
* | Ensure MessageVerifier raises appropriate exception on tampered data | Pratik Naik | 2009-10-09 | 1 | -0/+1 |
| | |||||
* | MessageVerifier#verify raises InvalidSignature if the signature is blank | Jeffrey Hardy | 2009-10-05 | 1 | -0/+5 |
| | | | | Signed-off-by: Jeremy Kemper <jeremy@bitsweat.net> | ||||
* | Nah, test SHA1, but skip the test and whine if OpenSSL is borked up | Jeremy Kemper | 2009-09-24 | 1 | -4/+13 |
| | |||||
* | Test with MD5 digest in an attempt to mollify CI | Jeremy Kemper | 2009-09-24 | 1 | -1/+1 |
| | |||||
* | Ruby 1.9 compat: rename deprecated assert_raises to assert_raise. | Jeremy Kemper | 2009-03-08 | 1 | -1/+1 |
| | | | | [#1617 state:resolved] | ||||
* | Don't need _message as it's in the class name already | Michael Koziarski | 2008-11-23 | 1 | -4/+4 |
| | |||||
* | Add ActiveSupport::MessageVerifier to aid users who need to store ↵ | Michael Koziarski | 2008-11-23 | 1 | -0/+25 |
tamper-proof messages in cookies etc. This is particularly useful for things like remember-me tokens in web applications and auto-unsubscribe links in emails. |