Devise v4.0.0.rc1 Release Notes

Release Date: 2016-02-01 // about 8 years ago
    • ๐Ÿ‘Œ Support added to Rails 5 (by @twalpole).
    • ๐Ÿš… Devise no longer supports Rails 3.2 and 4.0.
    • ๐Ÿ’Ž Devise no longer supports Ruby 1.9 and 2.0.

    • ๐Ÿ—„ deprecations

      • The devise_parameter_sanitize API has changed: The for method was deprecated in favor of permit:
      def configure_permitted_parameters
        devise_parameter_sanitizer.for(:sign_up) << :subscribe_newsletter
        # Should become the following.
        devise_parameter_sanitizer.permit(:sign_up, keys: [:subscribe_newsletter])
      end
      

      The customization through instance methods on the sanitizer implementation should be done through it's initialize method:

      class User::ParameterSanitizer < Devise::ParameterSanitizer
        def sign_up
          default_params.permit(:username, :email)
        end
      end
      
      # The `sign_up` method can be a `permit` call on the sanitizer `initialize`.
      
      class User::ParameterSanitizer < Devise::ParameterSanitizer
        def initialize(*)
          super
          permit(:sign_up, keys: [:username, :email])
        end
      end
      

      You can check more examples and explanations on the [README section](README.md#strong-parameters) and on the [ParameterSanitizer docs](lib/devise/parameter_sanitizer.rb).

    Please check 3-stable for previous changes.