Devise Token Auth v0.1.43.beta1 Release Notes

Release Date: 2017-11-13 // over 6 years ago
  • Full Changelog

    Closed issues:

    • Return a authentication token #1015
    • API is not using defined ApiController but rather ApplicationController #1014
    • TypeError (can't dump hash with default proc) #1012
    • Namespaces and overriding default mailer templates #1011
    • Cant login after signing in via oauth #1010
    • Omniauth with devise token auth #1007
    • Not returning headers on error #1002
    • Hardcoded resource.provider in RegistrationsController? #997
    • Confirmation URL query parameters don't match header counterparts #993
    • Gem clashing #991
    • Sign in, Sign out not working #982
    • access token always expires in one minute #980
    • How to customize Omniauth payload #974
    • How do Create user's roles. #963
    • Why does a confirm_success_url column appear in some of the test migrations? #959
    • Readme "Usage TL;DR" section - add confirm_success_url to required params? #955
    • ar #954
    • how to get first name and last name of user #953
    • Model for nested attributes not being saved #952
    • Can not have multiple model #950
    • ๐Ÿ‘‰ NoMethodError when current_user is called #947
    • How to manually send the confirmation email (e.g. after User.create in Rails console)? #946
    • Make DeviseAuthToken inherits my API base Controller? #945
    • Missing auth headers in response to validate_token #944
    • tokens_match? issue #942
    • Not send email notification when email changed ? #940
    • Token generation fails when user has incomplete data that is mandatory #938
    • Is there a way to prevent persisting the same token to user table when in batch mode? #934
    • Token expires too soon #933
    • Seeing other users data on logout and login #932
    • token authentication not working on production #931
    • Getting 'uninitialized constant ActionDispatch::Routing::Mapper::Scope (NameError)' with rails 3 #930
    • How do I include User relationships to response after authenticate #928
    • Can't unlock account through email link in lockable #927
    • accidental issue #926
    • Can't verify CSRF token authenticity on PUT request only #924
    • Reset password url no host #923
    • In batch mode tokens are unnecessarily stored for every request although unchanged #922
    • ๐Ÿ‘‰ current_user not available during authorization #921
    • Resend confirmation email #920
    • Change Authentication Keys #919
    • Devise Set User By Token Is Clashing with Normal Devise Helpers #917
    • XSS (javascript execution vulnerability) #916
    • Using the Generator Without Capitalizing Model Name #912
    • ๐Ÿ‘‰ undefined method `authenticate_user!' when want to version my api #908
    • RuntimeError in DeviseTokenAuth::OmniauthCallbacksController#omniauth_success on google_oauth2 login #907
    • JSON API status? #906
    • ๐Ÿ‘‰ Filter chain halted as :authenticate_user! rendered or redirected #905
    • Completed 422 Unprocessable Entity [Rails 5 API only, React with J-Toker] #904
    • ๐Ÿ‘ API authentication. Method not allowed 405. Use POST /sign_in to sign in. GET is not supported. #900
    • validate_token Works but nothing else... #899
    • OAuth failure callback error with Google provider #898
    • Registration Name attribute is not stored #897
    • The action 'edit' could not be found for DeviseTokenAuth::RegistrationsController #896
    • Change provider when sessions controller #893
    • Overriding render_create_success does not obey serializer option (AMS) #890
    • How can i get access-token with omniauth on React Native app #889
    • Forgot Password flow with JSON responses #888
    • unknown attribute 'expiry' for User. #886
    • Email Regex causing Issue - not synced with Devise email RegEx #885
    • undefined method `[]=' for nil:NilClass due to missing client_id #881
    • Return parent with sign in data? #880
    • json-hyper-schema for devise_token_auth #879
    • ๐ŸŒ validate_token works on local web server, but not remote? #873
    • getting random "Authorized users only." when uploading multiple files at once. #862
    • Caching causing an issue #861
    • How to authenticate user using username using this gem ? #859
    • Segmentation Fault is raising while trying to send emails. #857
    • How to Restrict Access to a Single Client? #854
    • NoMethodError (undefined method `new_session_path' for #<Devise::OmniauthCallbacksController:0x0000000630f628>) #853
    • Token based authentication with LDAP only #850
    • Insecure session created with reset password link #848
    • Swagger / Yard Docs #846
    • NoMethodError: undefined method `[]=' for nil:NilClass in unit test #839
    • No resource_class found #838
    • How to Custom Mailer ? #837
    • Password gets updated but current password is still invalid. #836
    • CookieOverflow on namespaced controllers #835
    • no registration routes when used with devise #834
    • Incompatibility with shoulda in email uniqueness #833
    • No HTML for omniauth_external_window view in Rails 5 API #830
    • DeviseTokenAuth::TokenValidationsController#validate_token returns 401 unauthorized. #829
    • Console warning #828
    • omniauth-facebook authentication with an Angular 2 front end application. #827
    • uid is similar to email #825
    • Use POST to sign in. GET is not supported. #823
    • Invalid login credentials. Please try again. #822
    • Devise redirecting Web request to the Token JSON API #821
    • Wrong model mapped for token_validation #820
    • Banning a user #817
    • Sometimes very frequently, sometimes very randomly - 401 Unauthorized. #813
    • The confirmation email is not send with the standard devise support #812
    • Securing headers on client side #809
    • Impersonate user #802
    • Can't use JBuilder templates when overriding rendering methods #801
    • I18n broken (e.g. :already_in_use) #799
    • very unstable gem full of bugs !! #795
    • CORS answers 404 always #794
    • Authorized Users Only on iOS client #792
    • user_signed_in? doesn't returning access_token after few continuous call to it !!! #791
    • 302 found when I try to redirect to "/devise_token_auth/sessions#create" #790
    • Initializer default_password_reset_url not working. #789
    • Gem querying database twice for authenticating user #788
    • No authentication headers when using Single Table Inheritance on my User model #783
    • Can't migrate database after 'rails g devise_token_auth:install User auth' #781
    • Diferent tokens from devise and devise_token_auth some times get in conflict... #780
    • LinkedIn SignIn #778
    • Rails engine (api only) - undefined method `mount_devise_token_auth_for' for #<ActionDispatch::Routing::Mapper: #777
    • multiple congratulation emails #774
    • Set up a new API application controller not working? #773
    • Explicitly do not invalidate token #772
    • Prevent user from sharing account #770
    • I'am not able to serialize user #769
    • Could not find generator 'devise_token_auth:install' #768
    • Soft deletion #766
    • QUESTION: tokens field in database #763
    • Current user from channel. #760
    • devise_token_auth with LDAP? #759
    • Passing block to for strong parameters breaks code #758
    • ๐Ÿ‘ API authentication: Use POST /sign_in to sign in. GET is not supported. #754
    • Integration help #753
    • undefined method `tokens' upon signing up #752
    • resource name for scoped mounting #748
    • Signing in with Mongoid 6 + Rails 5 causes AuthenticationError #742
    • Multiple user registration with multiple providers #740
    • Headers not sent on GET request #739
    • Best practice for using virtual attributes #738
    • E-mail update is enabled by default #736
    • Limit formats allowed to make requests #735
    • Error in password reset. Password not changed, even though edit returns 200 #732
    • Using devise_async and sidekiq to send emails asynchronously #727
    • Separate Devise Token Auth configuration per model #725
    • No token on response header #721
    • Massive Cookie Size Leads to Errors #718
    • 401 on sign_in #717
    • Unable to reconfirm a users email #716
    • Which is client and access_token #714
    • Sign_in custom method: how? #711
    • ๐Ÿš… define_helpers not called at rails launch #708
    • Always Set Headers in Batch Mode #702
    • Use with existing User model #701
    • The inactive_message and active_for_authentication #695
    • Reset password link not working for the second time #691
    • ๐Ÿ‘‰ How to properly set headers in order to use current_user, authenticate_user! etc methods? #690
    • Sign Up Permitted Parameters gets Passed but Never saves succesfully to Database #688
    • Live Demo on heroku crashes #687
    • Ruby on rails devise_token_auth gem unable to find routes #686
    • undefined method `[]' for nil:NilClass during omniauth callback #682
    • 0๏ธโƒฃ client_id resets to default after session_controller#create #680
    • "Unpermitted parameter: session" issues when action_controller.action_on_unpermitted_parameters is :raise #676
    • Rails 5 + mongoid + devise_token_auth - undefined method `add_mongoid_support=' for DeviseTokenAuth:Module (NoMethodError) #675
    • 0.1.36 to 0.1.37 Breaks Test Suite #670
    • Why NOT 'email_required?' is considered? #668
    • make a separate Apicontroller from Applicationcontroller #667
    • Devise Omniauth and DeviseTokenAuth Omniauth #666
    • Seperate view files for different models. #664
    • Password Reset Link doesn't work #658
    • [Question] Using in mobile apps (pass reset/libs for major OSes)? #657
    • confrimable registration token expire #655
    • Get extra from omniauth-facebook. #647
    • Ability to change email? #646
    • headers_names is not defined in 0.1.37 #645
    • Oauth2 - Android Authentication - one-time-code flow #639
    • make use of max_number_of_devices on sign_in #637
    • is possible to use provider and uid columns on the authentications table? #633
    • undefined method 'render' at devise_token_auth/controllers/helpers.rb #630
    • Override default routes #628
    • user_signed_in? VS user.signedIn ? #623
    • Retrieve from (local) cache first? #622
    • Update Gem (RubyGem) Not issue #621
    • Email uniqueness on both email and oauth provider #617
    • ArgumentError (wrong number of arguments (given 1, expected 0)) #616
    • exclude devise validatable module? #613
    • Devise omniauth_path_prefix overriden #610
    • Override devise token auth response #609
    • Previous authentication params remain in url after sign out when using OAuth #605
    • Problem with auth headers and multiple models #602
    • Re-written URL with token does not work with Angular default routing #599
    • Rails 5 - Missing template devise_token_auth/registrations/create #598
    • REST routes #595
    • Multiple providers per user #594
    • MongoDB #593
    • Problem with CORS setup and exposing special headers #591
    • Password reset allows user to bypass confirmable #590
    • empty request.env['omniauth.params'] causes exception #586
    • Getting Error: 'No connection pool for ActiveRecord::Base' when generating the devise_token_auth generator inside an Rails Engine #584
    • Preventing creation of users in an oauth scenario #583
    • Extend token lifespan on use? #573
    • Unable to sign in using LinkedIn #572
    • Cannot use rake with mount_devise_token_auth_for in routes.rb #570
    • Provide configuration for token hashing algorithm #560
    • Using devise_token_auth with devise for one method #559
    • omiauth-google #558
    • Use devise_token_auth with facebook iOS login SDK #556
    • omniauth-facebook login #555
    • ActionController::RoutingError (No route matches [POST] "/omniauth/steam/callback") #554
    • get Authorized users only when use devise with devise_token_auth #553
    • Models other than User not returning auth headers after each request #552
    • Cannot get ng-token-auth, devise-token-auth and Rails to work for facebook login #551
    • Yielding Resource to Overriding Controller #548
    • Confirmation controller does not response with JSON #546
    • message['redirect-url'] in the reset password email is not set automatically. #545
    • Failed migration: how to handle existing user db #544
    • set a no reply email adresse #542
    • check if user confirmed is account #539
    • support for multiple client_id #535
    • Cut some actions? #534
    • Getting issues with api authentication #529
    • โšก๏ธ Error: unknown attribute 'current_password' for User when updating a password #524
    • Error Response as HTML #522
    • render_create_success should return 201 code not 200? #516
    • RuntimeError (can't modify frozen Hash) #515
    • tokens not being serialized! #495
    • Sign in from controller #494
    • Unpermitted Parameters: confirm_success_url, config_name, registration #489
    • Bundler could not find compatible versions for gem "rails": #488
    • Does anyone try to link current omniauth account to devise-token-auth account? #487
    • I want to use a different column for provider instead of defalut "email" #485
    • @resource.allow_password_change is not persisted across requests #481
    • Would like to know is there any missing for i18n translation file? #479
    • Unpermitted paramter: session (401 Unauthorized) for only one particluar user #477
    • Reading logged user in constraint #475
    • devise_token_auth is being called when it shouldn't #473
    • Unable to override sessions controller #471
    • Support Devise Strong Parameters by Block #464
    • How to make http header still available when return to oauth call back #461
    • skip: [:omniauth_callbacks] doesn't work in v0.1.37.beta3 #460
    • This gem change default omniauth path? #459
    • Rails 5 compatible? #458
    • Null email causes NoMethodError (undefined method `downcase!' for nil:NilClass) #457
    • Cannot send confirmation email when using alongside with standard devise #456
    • cancancan: load_and_authorize_resources causes method_missing failure #452
    • example app for api #451
    • is session store necessary? #449
    • HTTP Headers not being sent when using as an API from an Android Phone #448
    • Is it possible to pass token via json? #447
    • NoMethodError (undefined method enable\_standard\_devise\_support' for DeviseTokenAuth:Module\): app/controllers/devise\_token\_auth/concerns/set\_user\_by\_token.rb:35:inset_user_by_token' #437
    • duplicate method - resource_class #433
    • Unpermitted parameter errors #432
    • redirect_uri_mismatch after update from 0.1.34 to 0.1.37 #420
    • password_confirmation not actually required #419
    • Why should I use .to_json to get the right json object and not an array? #400
    • Errors after removing confirmable #397
    • Add JSON API (v1.0) compliant API option #396
    • NoMethodError in DeviseTokenAuth::SessionsController#create #394
    • Add better uid + provider unique support #392
    • Unable to Logout after sign up and/or sign in #391
    • Cohabitation with doorkeeper #389
    • React native signup/login using Facebook SDK #385
    • when does tokens field get cleared #372
    • Passing access_token after signup #366
    • 'no implicit conversion of Hash into String (TypeError)' on Travis CI #365
    • discrepancy between registration events #364
    • Block isn't called in super do |resource| override. #363
    • Auth header is not being set in sign up when using confirmable with allowed unconfirmed access #361
    • Spontaneous log out from app (presumably because of batch requests) #359
    • github provider callback url (?auth_token) #354
    • ๐Ÿ‘‰ Is it possible to authenticate_user! without failing the filter chain? #353
    • Support for Lockable and Timeoutable when using Devise and DeviseTokenAuth #346
    • Official support and documentation on how to use alongside Devise for APIs #345
    • permitted parameters not working as expected #344
    • Using devise and devise_token_auth side by side #343
    • Multiple Devise Models. One using token #342
    • ArgumentError in DeviseTokenAuth::ConfirmationsController#show #339
    • Issue with audited-activerecord #338
    • Ember Simple Auth #334
    • group authentication not redirecting #332
    • Getting `table_exists?' error when using devise_token_auth with Mongoid #325
    • Can't authorize (user_signed_in? always show false) #316
    • Devise Email Validation #314
    • Android native - Unpredictable 401 #313
    • How to skip confirmation on register but possibility to ask later #303
    • User with multiple providers gets invalid login credential except the latest provider he/she registered. #298
    • Conder making view helpers available in token_validations_controller #292
    • Using alongside "normal" rails app #290
    • Reset password error. #284
    • Configured verbatim, devise_token_auth receives this error google only #282
    • Facebook Auth isn't working for Google Chrome users that have Data Compression set to on #279
    • Used alongside standard Devise broke the Devise mail confirmation #265
    • How To Handle Guest Account #264
    • confirmable feature bugs? #263
    • helper methods don't work #258
    • reset password link is not getting to redirection #247
    • Should a 404 reset tokens? #244
    • Devise.secret_key was not set. Please add the following to your Devise initializer #235
    • Expected params don't match Devise itself #233
    • Namespaced Models #228
    • Can't verify CSRF token authenticity #227
    • Error on OmniauthCallbacksController#omniauth_success #222
    • ๐Ÿ‘‰ undefined method `authenticate_user!' #219
    • The omniauth implementation on this gem use redirection. We need to get around these. #216
    • Which software did you use to create the workflow ? #215
    • AbstractController::ActionNotFound (The action 'new' could not be found for DeviseTokenAuth::RegistrationsController): #212
    • Oauth broken when attributes have a new line #211
    • No route matches [GET] "/omniauth/sign_in" #199
    • I have a rails backend rendered app (erb). Can I switch to devise token auth? #196
    • authentication via phone # #194
    • Cannot use this gem alongside Devise #192
    • Some headers without "access-token" (and friends) while testing with Rspec #188
    • AbstractController::ActionNotFound with Controller Override #185
    • Best way to set up migration for installation on existing User table already using Devise? #181
    • Architecture Q: Why did you not use Warden? #180
    • NoMethodError (undefined method `[]=' for nil:NilClass) #178
    • Sign_in / Sign_up via token_auth and via session #168
    • Facebook login - Redirect issue #166
    • expired confirmation & reset link #164
    • Storing token in Redis? #163
    • list with http response codes #157
    • Trouble accessing provider auth key and secret #153
    • Omniauth: New user or not ? #151
    • Forcing SSL for DeviseTokenAuth causes error 'new' could not be found #141
    • NoMethodError (undefined method `name' for nil:NilClass) - devise_controller.rb:22 #134
    • Sudo action / confirm your identity protocol #131
    • devise_token_auth for multiple client #122
    • Invalid Authenticity Token with last version #109
    • Routes not properly set #101
    • allow_unconfirmed_access_for #89
    • Usage with Grape #73
    • Allow updating of default attributes by default? #61

    ๐Ÿ”€ Merged pull requests:

    • Fixes include bug causing sign_in to require auth #1016 (karlingen)
    • Update CONTRIBUTING.md #1009 (stratigos)
    • Adding Danish locale #1006 (mikkeljuhl)
    • allow only one confirmation #1001 (MaicolBen)
    • Added capitalize to user_class in model file template #1000 (kiritAyya)
    • Match email regexp with devise #999 (MaicolBen)
    • Edit RegistrationsController#create to use ResourceFinder::provider #998 (m4-miranda)
    • 993 - mirror auth header keys in build_auth_url query params #996 (ethagnawl)
    • Add link to wiki of how to add fields for an existing user table #985 (MaicolBen)
    • ๐Ÿ‘‰ contemplate single table inheritance in DeviseTokenAuth::Concerns::SetUserByToken#set_user_by_token #984 (maxwells)
    • Upgrade test suite to use Rails 5 #981 (lynndylanhurley)
    • Conditionally set rails version on migration #979 (MaicolBen)
    • remove confirm_success_url entries from dummy migrations #978 (ethagnawl)
    • โœ… link to cached version of _How to Run a Single Rails Unit Test_ blog โ€ฆ #977 (ethagnawl)
    • Fix default provider after refactor in concern #975 (MaicolBen)
    • Adding in unlocks controller and specs. This should resolve #927. #971 (brycesenz)
    • Add a call to contribute to the top of the README. Ref #969. #970 (zachfeldman)
    • CONTRIBUTING: Add header, format sections #968 (olleolleolle)
    • Add note about Grape usage. Closes #73. #967 (zachfeldman)
    • Allow other provider than email when logins #964 (MaicolBen)
    • change devise method to reset password by token #957 (dks17)
    • Docs - add confirm_sucess_url to required params in email registration #956 (pnewsam)
    • Fix header name on account delete documentation #909 (mconiglio)
    • Document the confirm_success_url param for email registration #901 (nerfologist)
    • Fix header markdown typo #895 (f3ndot)
    • Support setting whitelist, without setting default redirect_url #894 (dkniffin)
    • Feature/customable authorized users only error response #869 (abeyuya)
    • Use rails validator instead of custom one #865 (MaicolBen)
    • Ability to use different default fields in model #849 (blddmnd)
    • GitHub Issues template, Contributing guidelines #847 (olleolleolle)
    • Better implementation to test if connection to db is active #843 (richardxia)
    • Improve documentation for testing. #840 (JonRowe)
    • Allow user specific token lifespans #704 (codez)
    • Always set header in batch mode #703 (codez)
    • Fix for issue #677 #678 (develop-test1)
    • Flag signin when user confirms email address. #410 (ghost)