devise

devise copied to clipboard

Fixed session length : logout user after N hours, even with activity

2

This gem is able to logout a user after a period of inactivity that is configured with the `config.timeout_in` parameter. In some applications it is required to logout a user...

zedtux

Make config.paranoid = true the default in devise:install generator

1

## Environment - Ruby 2.7.1 - Rails 6.0.2 - Devise 4.7.1 ## Current behavior When running the generators for a devise installation in rails via `rails g devise:install` the generated...

timkaechele

I thought it would be more helpful to synchronize them. # lib/devise/models/confirmable.rb:27 https://github.com/heartcombo/devise/blob/fec67f98f26fcd9a79072e4581b1bd40d0c7fa1d/lib/devise/models/confirmable.rb#L27-L33

soma-git-practice

Lock Nokogiri version for Webrat monkey-patch

4

The monkey-patch ~#2469~ in [test/support/webrat/matchers.rb](https://github.com/heartcombo/devise/blob/main/test/support/webrat/matchers.rb) is not compatible with Nokogiri ≥ 1.17, so many tests are currently failing. Nokogiri [dropped support for Ruby 2.7 in 1.16](https://github.com/sparklemotion/nokogiri/pull/3040) which is still supported...

c960657

Request for 5.0: timeoutable should ignore remember_me?

1

I've noticed if a user has "remember me" checked when signing in, this will begin a session that ignores the timeoutable module hook. This looks to be an intentional behaviour...

archonic

The argument for the block passed to `config.warden` is no a `Warden::Manager` instance but a `Warden::Config` instance, but it is confusingly named `manager` in the generated file. I suggest renaming...

c960657

## Environment - Ruby 3.3.6 - Rails 7.2.2.1 - Devise 4.9.4 ## Current behavior ``` sign_in user, bypass: true ``` results in the warning ``` DEPRECATION WARNING: Passing the result...

JasonBarnabe

Is this typo? Sorry, I can't English. 1. I set pry to confirm. ```ruby # lib/devise/models/lockable.rb:90 # Overwrites active_for_authentication? from Devise::Models::Activatable for locking purposes # by verifying whether a user...

soma-git-practice

This would allow to prefill the user's email on the sign-up page via URL params, which is allowed in the SessionController#new.

coezbek

## Environment - Ruby **3.3.5** - Rails **7.0.8.5** - Devise **4.9.4** ## Current behavior Setting `config.skip_session_storage` (in my case, to skip `:params_auth`) will also prevent Rememberable from writing the `remember_token`...

theblang