devise
https://github.com/heartcombo/devise
Ruby
Flexible authentication solution for Rails with Warden.
Triage Issues!
When you volunteer to triage issues, you'll receive an email each day with a link to an open issue that needs help in this project. You'll also receive instructions on how to triage issues.
Triage Docs!
Receive a documented method or class from your favorite GitHub repos in your inbox every day. If you're really pro, receive undocumented methods or classes and supercharge your commit history.
10 Subscribers
Add a CodeTriage badge to devise
Help out
- Issues
- Tell the recipient software when a password link expires.
- sha256 password before passing to bcrypt to avoid issues with 72 bytes truncation for passwords
- Drop obsolete Devise::Models::Authenticatable#inspect method
- Add separate translation keys for each Lockable strategy
- `Confirmable` "change email" vulnerability - race condition permits user to confirm email address they have no access to
- allow_params_authentication! authenticates the user too
- Fix race condition vulnerability, by ensuring the `unconfirmed_email` is always saved
- Redirect to new_password_path if reset_password_token is expired
- Fix email enumeration vulnerabilities in password reset and registration flows
- Trackable should be invoked on sign in, not on authentication
- Docs
- Devise::Orm::DirtyTrackingMongoidMethods#devise_respond_to_and_will_save_change_to_attribute?
- Devise::Orm::DirtyTrackingMongoidMethods#devise_will_save_change_to_email?
- Devise::Orm::DirtyTrackingMongoidMethods#devise_saved_change_to_encrypted_password?
- Devise::Orm::DirtyTrackingMongoidMethods#devise_saved_change_to_email?
- Devise::Orm::DirtyTrackingMongoidMethods#devise_email_in_database
- Devise::Orm::DirtyTrackingMongoidMethods#devise_email_before_last_save
- Devise::Orm::DirtyTrackingActiveRecordMethods#devise_respond_to_and_will_save_change_to_attribute?
- Devise::Orm::DirtyTrackingActiveRecordMethods#devise_will_save_change_to_email?
- Devise::Orm::DirtyTrackingActiveRecordMethods#devise_saved_change_to_encrypted_password?
- Devise::Orm::DirtyTrackingActiveRecordMethods#devise_saved_change_to_email?