cccms - [no description]

Age	Commit message (Collapse)	Author
3 days	Allow updating migrated users without supplying a password	erdgeist
	password_required? treated a blank crypted_password as "needs a password", but after bcrypt migration crypted_password is nil by design -- every subsequent save of a migrated or new user failed validation. The predicate now requires a password only when both the legacy and the bcrypt credential are absent, or when one is actually being set.
3 days	Implement transparent password hash migration	erdgeist
	Add has_secure_password and bcrypt while retaining compatibility with legacy SHA-1 password hashes. Existing users are upgraded to password_digest on their next successful login. Add regression tests covering both legacy and modern authentication paths.
3 days	Use SecureRandom instead of the hand rolled implementation	erdgeist

2009-02-15	* initial commit of the stripped restful-authentication	simon
	* http basic auth and login from cookie have been removed * no it does not work yet, it's so f*cking secure, it won't even let legitimate users login