leap_web.git/users/app/controllers/controller_extension, branch master

moving users: app and test files

2014-04-08T09:49:14+00:00

redirect home when logged in visits /signup (#5446)

2014-04-04T13:40:22+00:00

require_token now checks for token and login

2014-02-10T13:59:01+00:00

rename authorize to require_login

2014-02-10T13:26:30+00:00

authorize_admin -> require_admin

also add require_token which will ensure token has been used for auth.

minor: refactor token auth a bit

2014-02-10T13:26:30+00:00

locale prefix support:

2013-12-22T10:00:49+00:00

* set locale based on request header
* enforce locale path prefix when current locale is not the default
* note: don't use root_path anymore, instead use home_path

use Token#authenticate for authentication

2013-09-03T06:33:30+00:00

This will return the user. But we can add timestamp validations and updates here.

token.user will get you the right user

2013-08-27T12:57:44+00:00

This way we can stub the token to return the user directly. Stubbing User.find_by_param is not a good idea as it will make all calls to User#find_by_param with a different id fail.

do not redirect if no token present

2013-08-27T12:57:44+00:00

So far we allow two mechanisms of authentication:
  * session based
  * token based

If token fails session will be atempted in most cases. So we can't just redirect here or we get a double render error.

clear token on logout with test

2013-08-27T12:57:44+00:00