- Avoid warning on uninitialized instance variable (#188)
- Bump rack to 2.2.3 (#190)
- Remove Gemfile.lock
- Resolve outstanding TODO entries (#179)
- A bunch of gem structure cleanup (thanks @olleolleolle)
- Set winning strategy when :warden is thrown (#174)
- Bump rack dependency to >= 2.0.9 due to CVEs
- Bugfix: Flips two lines to allow scopes authenticating from another without stepping on each other's toes. (PR #144)
- Update
rack
dependency to >= 2.0.6 due to security vulnerability - Internal: Add Rubocop Lint checking
- Internal: Update RSpec to use
.rspec
file
- Added 'frozen_string_literal' comment, bump ruby to 2.3
- Separate test helpers to encapsulate Warden object mocking inside it's own class
- Expands on the test helpers available to make it easier for testing gems
- Fix an issue with lazy loaded sessions
- Support nil session stores on logout
- Fix strategies blowing up with undefined method base
- Minor caching and speed improvements
- Add support to #lock in the proxy
- Add support to after_failed_fetch callback
- Deprecate warden_cookies since it was never functional
- Add support to serialize_from_session and serialize_into_session per scope
- Allow run_callbacks as an option to set_user and user
- Use the default scopes action when using a bare throw(:warden)
- Remove gem files from the packaged gem
- Do not renew session on user fetch
- Added :intercept_401 to Warden::Config
- Bug fix on strategies errors handler
- Bump!
- Allow strategies to configure if user should be stored or not
- Force session id renewal when user is set
- Performance boost. config object to use raw accessors
- Add per strategy storage option
- Bugfix set_user was not respecting logouts in hooks
- Add action specifying in scope_defaults
- Bugfix prevent halted winning strategy from being skipped in subsequent runs
- Halt on fail!. Add fail to allow cascading
- cache the winning strategy
- Make the config object Dupable
- Merge previous from master
- tag
- Allow default strategies to be set on the proxy
- Provide each scope with it's own default strategies
- Provide each scope with default set_user opts
- depricate the Proxy#default_strategies= method
- Add Warden.test_mode!
- Add Warden.on_next_request
- Add test helpers in Warden::Test::Helpers ** login_as ** logout
- Fix an issue where winning_strategy was not cleaned, allowing multiple scopes to sign in, even when the second one should not
- Add prepend_ to all hooks (josevalim)
- Ruby 1.9 compatibility changes (grimen)
- Support for passing a custom message with Warden::Strategy::Base#success! as second optional (grimen)
- Remove serializers and make strategies more powerful, including cache behavior (josevalim)
- Fix a bug when silence missing serializers is set (josevalim)
- enhancements
- Add conditionals to callbacks (josevalim)
- Extract Warden::Config from Warden::Manager (josevalim)
- enhancements
- Expose config in warden proxy (hassox)
-
enhancements
- added serializers, including session serializer (set by default) and a cookie serializer (josevalim)
-
deprecation
- serializer_into_session and serializer_from_session are deprecated, overwrite serialize and deserializer in Warden::Serializers::Session instead (josevalim)
- bug fixes
- authenticated? and unauthenticated? should return true or false, not the user or false. (hassox)
- enhancements
- authenticated? always try to serialize the user from session (josevalim)
- stored_in_session? checks if user information is stored in session, without serializing (josevalim)
- 401 behaves exactly like throw :warden (staugaard)
- enhancements
- Adds yielding to authenticated? and unauthenticated? methods (hassox)
- Adds an option to silence missing strategies (josevalim)
- Add an option to authenticate(!) to prevent storage of a user into the session (hassox)
- allow custom :action to be thrown (josevalim)
-
enhancements
- add Content-Type header to redirects (staugaard)
- Make scope available to strategies (josevalim)
-
bug fixes
- Do not consume opts twice, otherwise just the first will parse the scope (josevalim)
- enhancements
- add a hook for plugins to specify how they can clear the whole section