Dmitrii Golub
							
						 
						
							 
							
							
							
								
							
								40c243cc53 
								
							
								 
							
						 
						
							
							
								
								Stamp 1.1.4  
							
							 
							
							
 
							
						 
						
							10 years ago  
						
					 
				
					
						
							
							
								 
								Kopylov German
							
						 
						
							 
							
							
							
								
							
								49c41a87dc 
								
							
								 
							
						 
						
							
							
								
								Move require rotp library to the file where it is used  
							
							 
							
							
 
							
						 
						
							10 years ago  
						
					 
				
					
						
							
							
								 
								Paul Bowsher
							
						 
						
							 
							
							
							
								
							
								8d4da3beb5 
								
							
								 
							
						 
						
							
							
								
								Add support for remembering a user's 2FA session in a cookie  
							
							 
							
							... 
							
							
 
							
							This makes the gem store a signed cookie for a configurable amount of
time that allows the user to bypass 2FA. Our use-case for this is that
we expire user’s Devise sessions after 12 hours, but don’t want to
force them to authenticate using 2FA every day.
Signed cookies are available since Rails 3. This requires the signing
functionality to be properly configured, but is disabled by setting the
config variable to `0`, the default. 
							
						 
						
							10 years ago  
						
					 
				
					
						
							
							
								 
								Dave Riess
							
						 
						
							 
							
							
							
								
							
								10e0ebbd9d 
								
							
								 
							
						 
						
							
							
								
								replace request.path + '?' + request.query_string with request.original_fullpath in order to avoid appending '?' to redirects that have no query string  
							
							 
							
							
 
							
						 
						
							11 years ago  
						
					 
				
					
						
							
							
								 
								Dmitrii Golub
							
						 
						
							 
							
							
							
								
							
								2e18e6ccb9 
								
							
								 
							
						 
						
							
							
								
								update version to 1.1.3  
							
							 
							
							
 
							
						 
						
							11 years ago  
						
					 
				
					
						
							
							
								 
								amoose
							
						 
						
							 
							
							
							
								
							
								3076c6053b 
								
							
								 
							
						 
						
							
							
								
								Allows otp_length to be configurable  
							
							 
							
							... 
							
							
 
							
							Adds otp_length to options in README
Sets default length to 6 
							
						 
						
							11 years ago  
						
					 
				
					
						
							
							
								 
								Albert J. Wong
							
						 
						
							 
							
							
							
								
							
								677cb78d5f 
								
							
								 
							
						 
						
							
							
								
								Preserve query parameters in _return_to for redirect.  
							
							 
							
							... 
							
							
 
							
							Storing just request.path drops the query string which makes two factory
authentication less useful when the guarded page needs those parameters.
This brings the two factor authentication redirect behavior in line with
devise's. 
							
						 
						
							11 years ago  
						
					 
				
					
						
							
							
								 
								Jack Turnbull
							
						 
						
							 
							
							
							
								
							
								94dcc19e99 
								
							
								 
							
						 
						
							
							
								
								Add file extension to ActiveRecord generator  
							
							 
							
							
 
							
						 
						
							11 years ago  
						
					 
				
					
						
							
							
								 
								Dmitrii Golub
							
						 
						
							 
							
							
							
								
							
								1e4a8b13ef 
								
							
								 
							
						 
						
							
							
								
								update version to 1.1.2  
							
							 
							
							
 
							
						 
						
							11 years ago  
						
					 
				
					
						
							
							
								 
								Laust Rud Jacobsen
							
						 
						
							 
							
							
							
								
							
								20703c0397 
								
							
								 
							
						 
						
							
							
								
								Warden hook: refactor to not perform inline assignment for clarity  
							
							 
							
							
 
							
						 
						
							11 years ago  
						
					 
				
					
						
							
							
								 
								Laust Rud Jacobsen
							
						 
						
							 
							
							
							
								
							
								c87d591541 
								
							
								 
							
						 
						
							
							
								
								Extract reused Warden key constant  
							
							 
							
							
 
							
						 
						
							11 years ago  
						
					 
				
					
						
							
							
								 
								Dmitrii Golub
							
						 
						
							 
							
							
							
								
							
								28f9f6f8d9 
								
							
								 
							
						 
						
							
							
								
								new version 1.1.1  
							
							 
							
							
 
							
						 
						
							12 years ago  
						
					 
				
					
						
							
							
								 
								Karol Sarnacki
							
						 
						
							 
							
							
							
								
							
								f3a39237fa 
								
							
								 
							
						 
						
							
							
								
								Use Strings and not Symbols for keys when storing variable in warden session  
							
							 
							
							
 
							
						 
						
							12 years ago  
						
					 
				
					
						
							
							
								 
								Johan Brissmyr
							
						 
						
							 
							
							
							
								
							
								29bddf19f6 
								
							
								 
							
						 
						
							
							
								
								Pad OTP codes with less than 6 digits  
							
							 
							
							
 
							
						 
						
							12 years ago  
						
					 
				
					
						
							
							
								 
								Dmitrii Golub
							
						 
						
							 
							
							
							
								
							
								d7599a8838 
								
							
								 
							
						 
						
							
							
								
								version 1.1  
							
							 
							
							
 
							
						 
						
							12 years ago  
						
					 
				
					
						
							
							
								 
								Edger
							
						 
						
							 
							
							
							
								
							
								a8cea83253 
								
							
								 
							
						 
						
							
							
								
								is_fully_authenticated helper  
							
							 
							
							
 
							
						 
						
							12 years ago  
						
					 
				
					
						
							
							
								 
								Ross Kaffenberger
							
						 
						
							 
							
							
							
								
							
								bb1a619a3c 
								
							
								 
							
						 
						
							
							
								
								ensure return_to location is properly stored  
							
							 
							
							... 
							
							
 
							
							fixes small typo in session key for what Devise expects when retrieving
stored return_to path for a given scope 
							
						 
						
							12 years ago  
						
					 
				
					
						
							
							
								 
								Ross Kaffenberger
							
						 
						
							 
							
							
							
								
							
								153a4531ca 
								
							
								 
							
						 
						
							
							
								
								extract method #max_login_attempts  
							
							 
							
							... 
							
							
 
							
							Respects Law of Demeter, useful for stubbing out methods on instance or
for apps that use the NullObject pattern for guest user accounts. 
							
						 
						
							12 years ago  
						
					 
				
					
						
							
							
								 
								Ross Kaffenberger
							
						 
						
							 
							
							
							
								
							
								9ef373482a 
								
							
								 
							
						 
						
							
							
								
								extract method #populate_otp_column  
							
							 
							
							... 
							
							
 
							
							useful for populating column values for pre-existing devise-enabled records 
							
						 
						
							12 years ago  
						
					 
				
					
						
							
							
								 
								Ross Kaffenberger
							
						 
						
							 
							
							
							
								
							
								987c0feef6 
								
							
								 
							
						 
						
							
							
								
								provide options for #provisioning_uri  
							
							 
							
							... 
							
							
 
							
							options are passed to the ROTP::TOTP constructor, which currently makes
use of :issuer and :interval option keys 
							
						 
						
							12 years ago  
						
					 
				
					
						
							
							
								 
								Dmitrii Golub
							
						 
						
							 
							
							
							
								
							
								6f0c1fb993 
								
							
								 
							
						 
						
							
							
								
								update version to 1  
							
							 
							
							
 
							
						 
						
							12 years ago  
						
					 
				
					
						
							
							
								 
								Matt Mueller
							
						 
						
							 
							
							
							
								
							
								af6e150124 
								
							
								 
							
						 
						
							
							
								
								Adding unique index to otp secret key.  
							
							 
							
							... 
							
							
 
							
							This prevents the potential of a leaking of a single secret key from effecting others. 
							
						 
						
							12 years ago  
						
					 
				
					
						
							
							
								 
								Matt Mueller
							
						 
						
							 
							
							
							
								
							
								d91d13fc1b 
								
							
								 
							
						 
						
							
							
								
								Remove code argument from send_two_factor_authentication_code  
							
							 
							
							
 
							
						 
						
							12 years ago  
						
					 
				
					
						
							
							
								 
								Matt Mueller
							
						 
						
							 
							
							
							
								
							
								ffab2c2dd2 
								
							
								 
							
						 
						
							
							
								
								Allow for successful rollback of migration.  
							
							 
							
							
 
							
						 
						
							12 years ago  
						
					 
				
					
						
							
							
								 
								Matt Mueller
							
						 
						
							 
							
							
							
								
							
								5094238c74 
								
							
								 
							
						 
						
							
							
								
								Allowing both config and override of allowed otp drift.  
							
							 
							
							
 
							
						 
						
							12 years ago  
						
					 
				
					
						
							
							
								 
								Matt Mueller
							
						 
						
							 
							
							
							
								
							
								1961ae7535 
								
							
								 
							
						 
						
							
							
								
								otp_column_name: do not allow for override.  
							
							 
							
							
 
							
						 
						
							12 years ago  
						
					 
				
					
						
							
							
								 
								Matt Mueller
							
						 
						
							 
							
							
							
								
							
								4d2dbe1c44 
								
							
								 
							
						 
						
							
							
								
								Spec: validate that send_two_factor_authentication_code can be overwritten  
							
							 
							
							
 
							
						 
						
							12 years ago  
						
					 
				
					
						
							
							
								 
								Matt Mueller
							
						 
						
							 
							
							
							
								
							
								b4e8138b5a 
								
							
								 
							
						 
						
							
							
								
								Only max_login_attempts is now configurable.  
							
							 
							
							
 
							
						 
						
							12 years ago  
						
					 
				
					
						
							
							
								 
								Matt Mueller
							
						 
						
							 
							
							
							
								
							
								d00f0ae35e 
								
							
								 
							
						 
						
							
							
								
								Introducing first spec to test otp code.  
							
							 
							
							
 
							
						 
						
							12 years ago  
						
					 
				
					
						
							
							
								 
								Matt Mueller
							
						 
						
							 
							
							
							
								
							
								3e501a30b2 
								
							
								 
							
						 
						
							
							
								
								Misc renames for otp secret key.  
							
							 
							
							
 
							
						 
						
							12 years ago  
						
					 
				
					
						
							
							
								 
								Matt Mueller
							
						 
						
							 
							
							
							
								
							
								13f33a9445 
								
							
								 
							
						 
						
							
							
								
								Adding otp methods.  
							
							 
							
							
 
							
						 
						
							12 years ago  
						
					 
				
					
						
							
							
								 
								Matt Mueller
							
						 
						
							 
							
							
							
								
							
								98868bbece 
								
							
								 
							
						 
						
							
							
								
								Change migration to add otp secret key.  
							
							 
							
							
 
							
						 
						
							12 years ago  
						
					 
				
					
						
							
							
								 
								Wojtek Kruszewski
							
						 
						
							 
							
							
							
								
							
								ab768d4784 
								
							
								 
							
						 
						
							
							
								
								Respond with 401 for request non-HTML requests [ #6 ]  
							
							 
							
							
 
							
						 
						
							13 years ago  
						
					 
				
					
						
							
							
								 
								Dmitrii Golub
							
						 
						
							 
							
							
							
								
							
								8e78fc4027 
								
							
								 
							
						 
						
							
							
								
								version to 0.2  
							
							 
							
							
 
							
						 
						
							14 years ago  
						
					 
				
					
						
							
							
								 
								Vladimir
							
						 
						
							 
							
							
							
								
							
								8da6ada802 
								
							
								 
							
						 
						
							
							
								
								need_two_factor_authentication? method should accept request param.  
							
							 
							
							
 
							
						 
						
							14 years ago  
						
					 
				
					
						
							
							
								 
								Carlos Vilhena
							
						 
						
							 
							
							
							
								
							
								3c6b836dc0 
								
							
								 
							
						 
						
							
							
								
								change should be instance method  
							
							 
							
							
 
							
						 
						
							14 years ago  
						
					 
				
					
						
							
							
								 
								Carlos Vilhena
							
						 
						
							 
							
							
							
								
							
								d1a4f4073a 
								
							
								 
							
						 
						
							
							
								
								trim empty lines  
							
							 
							
							
 
							
						 
						
							14 years ago  
						
					 
				
					
						
							
							
								 
								Carlos Vilhena
							
						 
						
							 
							
							
							
								
							
								457f00dceb 
								
							
								 
							
						 
						
							
							
								
								change description  
							
							 
							
							
 
							
						 
						
							14 years ago  
						
					 
				
					
						
							
							
								 
								Carlos Vilhena
							
						 
						
							 
							
							
							
								
							
								bf9f970cb6 
								
							
								 
							
						 
						
							
							
								
								refactor the schema  
							
							 
							
							
 
							
						 
						
							14 years ago  
						
					 
				
					
						
							
							
								 
								Carlos Vilhena
							
						 
						
							 
							
							
							
								
							
								811e91079d 
								
							
								 
							
						 
						
							
							
								
								generate migration after adding :two_factor_authentication  
							
							 
							
							
 
							
						 
						
							14 years ago  
						
					 
				
					
						
							
							
								 
								Carlos Vilhena
							
						 
						
							 
							
							
							
								
							
								3a7293218a 
								
							
								 
							
						 
						
							
							
								
								add active record generator  
							
							 
							
							
 
							
						 
						
							14 years ago  
						
					 
				
					
						
							
							
								 
								Carlos Vilhena
							
						 
						
							 
							
							
							
								
							
								e2f54d9980 
								
							
								 
							
						 
						
							
							
								
								add migration template  
							
							 
							
							
 
							
						 
						
							14 years ago  
						
					 
				
					
						
							
							
								 
								Carlos Vilhena
							
						 
						
							 
							
							
							
								
							
								6be4f7a051 
								
							
								 
							
						 
						
							
							
								
								adding generator which will include :two_factor_authenticable to devise  
							
							 
							
							
 
							
						 
						
							14 years ago  
						
					 
				
					
						
							
							
								 
								Carlos Vilhena
							
						 
						
							 
							
							
							
								
							
								81fea21391 
								
							
								 
							
						 
						
							
							
								
								ActiveSupport::Concern deprecation warnings  
							
							 
							
							
 
							
						 
						
							14 years ago  
						
					 
				
					
						
							
							
								 
								Carlos Vilhena
							
						 
						
							 
							
							
							
								
							
								2a0f37dc62 
								
							
								 
							
						 
						
							
							
								
								fix "The InstanceMethods module inside ActiveSupport::Concern will be no longer included automatically."  
							
							 
							
							
 
							
						 
						
							14 years ago  
						
					 
				
					
						
							
							
								 
								Dmitrii Golub
							
						 
						
							 
							
							
							
								
							
								e4c812ad6d 
								
							
								 
							
						 
						
							
							
								
								first commit  
							
							 
							
							
 
							
						 
						
							14 years ago