Flexible authentication solution for Rails with Warden.
186 matches across 7 categories. Click a row to expand file-level details.
| Severity | File | Line | Snippet |
|---|---|---|---|
| LOW | app/controllers/devise_controller.rb | 21 | # Override prefixes to consider the scoped view. |
| LOW | test/rails_app/config/environments/production.rb | 41 | # config.action_dispatch.x_sendfile_header = "X-Sendfile" # for apache |
| LOW | test/rails_app/config/environments/production.rb | 61 | |
| LOW | test/rails_app/config/environments/test.rb | 1 | # frozen_string_literal: true |
| LOW | test/rails_app/config/initializers/devise.rb | 1 | # frozen_string_literal: true |
| LOW | test/rails_app/config/initializers/devise.rb | 21 | config.mailer_sender = "please-change-me@config-initializers-devise.com" |
| LOW | test/rails_app/config/initializers/devise.rb | 41 | # should be aborted or not if the value is not present. By default is empty. |
| LOW | test/rails_app/config/initializers/devise.rb | 61 | # Tell if authentication through request.params is enabled. True by default. |
| LOW | test/rails_app/config/initializers/devise.rb | 81 | # When allow_unconfirmed_access_for is zero, the user won't be able to sign in without confirming. |
| LOW | test/rails_app/config/initializers/devise.rb | 101 | # Regex to use to validate the email address |
| LOW | test/rails_app/config/initializers/devise.rb | 121 | # :both = Enables both strategies |
| LOW | test/rails_app/config/initializers/devise.rb | 141 | |
| LOW | test/rails_app/config/initializers/devise.rb | 161 | # The default is true, which means any logout action will sign out all active scopes. |
| LOW | test/rails_app/config/initializers/devise.rb | 181 | # If you want to use other strategies, that are not supported by Devise, or |
| LOW | test/rails_app/db/schema.rb | 1 | # encoding: UTF-8 |
| LOW | lib/devise.rb | 381 | # +model+ - String representing the load path to a custom *model* for this module (to autoload.) |
| LOW | lib/devise.rb | 441 | |
| LOW | lib/devise/mapping.rb | 1 | # frozen_string_literal: true |
| LOW | lib/devise/parameter_sanitizer.rb | 1 | # frozen_string_literal: true |
| LOW | lib/devise/parameter_sanitizer.rb | 21 | # def configure_permitted_parameters |
| LOW | lib/devise/parameter_sanitizer.rb | 81 | |
| LOW | lib/devise/test/controller_helpers.rb | 1 | # frozen_string_literal: true |
| LOW | lib/devise/test/controller_helpers.rb | 61 | # * +scope+ - An optional +Symbol+ with the scope where the resource |
| LOW | lib/devise/test/integration_helpers.rb | 1 | # frozen_string_literal: true |
| LOW | lib/devise/mailers/helpers.rb | 61 | template_path |
| LOW | lib/devise/strategies/authenticatable.rb | 61 | # |
| LOW | lib/devise/models/omniauthable.rb | 1 | # frozen_string_literal: true |
| LOW | lib/devise/models/database_authenticatable.rb | 1 | # frozen_string_literal: true |
| LOW | lib/devise/models/database_authenticatable.rb | 101 | false |
| LOW | lib/devise/models/database_authenticatable.rb | 141 | result |
| LOW | lib/devise/models/authenticatable.rb | 1 | # frozen_string_literal: true |
| LOW | lib/devise/models/authenticatable.rb | 21 | # passed to find_for_authentication method and considered in your model lookup. |
| LOW | lib/devise/models/authenticatable.rb | 41 | # |
| LOW | lib/devise/models/authenticatable.rb | 141 | # |
| LOW | lib/devise/models/authenticatable.rb | 161 | # end |
| LOW | lib/devise/models/authenticatable.rb | 181 | # message = devise_mailer.send(notification, self, *args) |
| LOW | lib/devise/models/authenticatable.rb | 241 | http_authenticatable.include?(strategy) : http_authenticatable |
| LOW | lib/devise/models/recoverable.rb | 1 | # frozen_string_literal: true |
| LOW | lib/devise/models/recoverable.rb | 61 | # reset_password_within is a model configuration, must always be an integer value. |
| LOW | lib/devise/models/timeoutable.rb | 1 | # frozen_string_literal: true |
| LOW | lib/devise/models/confirmable.rb | 1 | # frozen_string_literal: true |
| LOW | lib/devise/models/confirmable.rb | 21 | # |
| LOW | lib/devise/models/confirmable.rb | 181 | # in models to map to a nice sign up e-mail. |
| LOW | lib/devise/models/confirmable.rb | 201 | # # allow_unconfirmed_access_for = 5.days and confirmation_sent_at = 4.days.ago |
| LOW | lib/devise/models/confirmable.rb | 221 | # Examples: |
| LOW | lib/devise/models/confirmable.rb | 301 | # used to insert your own logic that is only run after the user successfully |
| LOW | lib/devise/models/lockable.rb | 1 | # frozen_string_literal: true |
| LOW | lib/devise/models/rememberable.rb | 1 | # frozen_string_literal: true |
| LOW | lib/devise/models/rememberable.rb | 21 | # asking for credentials. After this time the user will be blocked and |
| LOW | lib/devise/models/validatable.rb | 1 | # frozen_string_literal: true |
| LOW | lib/devise/controllers/helpers.rb | 21 | # defined for normal mappings. |
| LOW | lib/devise/controllers/helpers.rb | 81 | end |
| LOW | lib/devise/controllers/helpers.rb | 101 | # authenticate_admin! # Signs admin in or redirect |
| LOW | lib/devise/controllers/helpers.rb | 181 | elsif context.respond_to?(:root_path) |
| LOW | lib/devise/controllers/helpers.rb | 201 | # namespace :user do |
| LOW | lib/devise/controllers/sign_in_out.rb | 21 | # to the set_user method in warden. |
| LOW | lib/devise/controllers/store_location.rb | 1 | # frozen_string_literal: true |
| LOW | lib/devise/controllers/url_helpers.rb | 1 | # frozen_string_literal: true |
| LOW | lib/devise/rails/routes.rb | 41 | # |
| LOW | lib/devise/rails/routes.rb | 61 | # # Confirmation routes for Confirmable, if User model has :confirmable configured |
| 41 more matches not shown… | |||
| Severity | File | Line | Snippet |
|---|---|---|---|
| LOW | app/mailers/devise/mailer.rb | 7 | def confirmation_instructions(record, token, opts = {}) |
| LOW | app/mailers/devise/mailer.rb | 12 | def reset_password_instructions(record, token, opts = {}) |
| LOW | app/controllers/devise_controller.rb | 215 | def respond_with_navigational(*args, &block) |
| LOW | app/controllers/devise/omniauth_callbacks_controller.rb | 29 | def after_omniauth_failure_path_for(scope) |
| LOW | app/controllers/devise/passwords_controller.rb | 55 | def after_resetting_password_path_for(resource) |
| LOW | app/controllers/devise/passwords_controller.rb | 60 | def after_sending_reset_password_instructions_path_for(resource_name) |
| LOW | app/controllers/devise/unlocks_controller.rb | 40 | def after_sending_unlock_instructions_path_for(resource) |
| LOW | app/controllers/devise/confirmations_controller.rb | 38 | def after_resending_confirmation_instructions_path_for(resource_name) |
| LOW | app/controllers/devise/confirmations_controller.rb | 43 | def after_confirmation_path_for(resource_name, resource) |
| LOW | app/controllers/devise/registrations_controller.rb | 111 | def after_inactive_sign_up_path_for(resource) |
| LOW | app/controllers/devise/registrations_controller.rb | 151 | def set_flash_message_for_update(resource, prev_unconfirmed_email) |
| LOW | test/mailers/mailer_test.rb | 8 | def confirmation_instructions(record, token, opts = {}) |
| LOW | test/mailers/mailer_test.rb | 26 | def confirmation_instructions(record, token, opts = {}) |
| LOW | test/integration/http_authenticatable_test.rb | 102 | def sign_in_as_new_user_with_http(username = "user@test.com", password = "12345678") |
| LOW | test/integration/lockable_test.rb | 7 | def visit_user_unlock_with_token(unlock_token) |
| LOW | test/integration/confirmable_test.rb | 7 | def visit_user_confirmation_with_token(confirmation_token) |
| LOW | test/integration/confirmable_test.rb | 291 | def visit_admin_confirmation_with_token(confirmation_token) |
| LOW | test/models/confirmable_test.rb | 321 | def confirm_user_by_token_with_confirmation_sent_at(confirmation_sent_at) |
| LOW | test/support/helpers.rb | 49 | def create_user_without_email(attributes = {}) |
| LOW | test/support/helpers.rb | 53 | def create_user_with_validations(attributes = {}) |
| LOW | test/support/assertions.rb | 25 | def assert_raise_with_message(exception_klass, message, &block) |
| LOW | lib/devise/parameter_filter.rb | 19 | def filtered_hash_by_method_for_given_keys(conditions, method, condition_keys) |
| LOW | lib/devise/strategies/authenticatable.rb | 157 | def parse_authentication_key_values(hash, keys) |
| LOW | lib/devise/models/database_authenticatable.rb | 198 | def find_for_database_authentication(conditions) |
| LOW | lib/devise/models/authenticatable.rb | 180 | # def render_and_send_devise_message(notification, *args) |
| LOW | lib/devise/models/authenticatable.rb | 206 | def apply_to_attribute_or_variable(attr, method) |
| LOW | lib/devise/models/authenticatable.rb | 267 | def find_first_by_auth_conditions(tainted_conditions, opts = {}) |
| LOW | lib/devise/models/authenticatable.rb | 272 | def find_or_initialize_with_error_by(attribute, value, error = :invalid) #:nodoc: |
| LOW | lib/devise/models/authenticatable.rb | 277 | def find_or_initialize_with_errors(required_attributes, attributes, error = :invalid) #:nodoc: |
| LOW | lib/devise/models/recoverable.rb | 98 | def send_reset_password_instructions_notification(token) |
| LOW | lib/devise/models/recoverable.rb | 114 | def with_reset_password_token(token) |
| LOW | lib/devise/models/recoverable.rb | 123 | def send_reset_password_instructions(attributes = {}) |
| LOW | lib/devise/models/confirmable.rb | 318 | def send_confirmation_instructions(attributes = {}) |
| LOW | lib/devise/models/confirmable.rb | 359 | def find_by_unconfirmed_email_with_errors(attributes = {}) |
| LOW | lib/devise/controllers/store_location.rb | 56 | def extract_path_from_location(location) |
| LOW | lib/devise/controllers/store_location.rb | 71 | def add_fragment_back_to_path(uri, path) |
| LOW | lib/devise/rails/routes.rb | 460 | def with_devise_exclusive_scope(new_path, new_as, options) #:nodoc: |
| LOW | …templates/controllers/omniauth_callbacks_controller.rb | 27 | # def after_omniauth_failure_path_for(scope) |
| LOW | …nerators/templates/controllers/passwords_controller.rb | 26 | # def after_resetting_password_path_for(resource) |
| LOW | …nerators/templates/controllers/passwords_controller.rb | 31 | # def after_sending_reset_password_instructions_path_for(resource_name) |
| LOW | …generators/templates/controllers/unlocks_controller.rb | 22 | # def after_sending_unlock_instructions_path_for(resource) |
| LOW | …tors/templates/controllers/confirmations_controller.rb | 22 | # def after_resending_confirmation_instructions_path_for(resource_name) |
| LOW | …tors/templates/controllers/confirmations_controller.rb | 27 | # def after_confirmation_path_for(resource_name, resource) |
| LOW | …tors/templates/controllers/registrations_controller.rb | 59 | # def after_inactive_sign_up_path_for(resource) |
| Severity | File | Line | Snippet |
|---|---|---|---|
| LOW | app/controllers/devise/passwords_controller.rb | 64 | # Check if a reset_password_token is provided in the request |
| LOW | app/controllers/devise/passwords_controller.rb | 72 | # Check if the user should be signed in automatically after resetting the password. |
| LOW | app/controllers/devise/passwords_controller.rb | 77 | # Check if proper Lockable module methods are present & unlock strategy |
| LOW | app/controllers/devise/sessions_controller.rb | 57 | # Check if there is no signed in user before doing the sign out. |
| LOW | app/controllers/devise/registrations_controller.rb | 130 | # Check if the user should be signed in automatically after updating the password. |
| LOW | test/rails_app/config/environments/production.rb | 67 | # Set this to true and configure the email server for immediate delivery to raise delivery errors. |
| LOW | lib/devise/failure_app.rb | 263 | # Check if flash messages should be emitted. Default is to do it on |
| LOW | lib/devise/strategies/authenticatable.rb | 60 | # Check if this is a valid strategy for http authentication by: |
| LOW | lib/devise/strategies/authenticatable.rb | 70 | # Check if this is a valid strategy for params authentication by: |
| LOW | lib/devise/strategies/authenticatable.rb | 82 | # Check if the model accepts this strategy as http authenticatable. |
| LOW | lib/devise/strategies/authenticatable.rb | 87 | # Check if the model accepts this strategy as params authenticatable. |
| LOW | lib/devise/models/authenticatable.rb | 75 | # Check if the current object is valid for authentication. This method and |
| LOW | lib/devise/controllers/helpers.rb | 270 | # Check if flash messages should be emitted. Default is to do it on |
| Severity | File | Line | Snippet |
|---|---|---|---|
| MEDIUM | test/rails_app/db/schema.rb | 4 | # This file is auto-generated from the current state of the database. Instead |
| MEDIUM | test/support/webrat/integrations/rails.rb | 21 | # This method is private within webrat gem and after Ruby 2.4 we get a lot of warnings because |
| MEDIUM | lib/devise.rb | 289 | # Define a set of modules that are called when a mapping is added. |
| MEDIUM | lib/devise/models/database_authenticatable.rb | 10 | # This module defines a `password=` method. This method will hash the argument |
| MEDIUM | lib/devise/models/authenticatable.rb | 245 | # This method is always called during an authentication process but |
| MEDIUM | lib/devise/models/rememberable.rb | 133 | # Create the cookie key using the record id and remember_token |
| MEDIUM | lib/devise/rails/routes.rb | 47 | # This method is going to look inside your User model and create the |
| Severity | File | Line | Snippet |
|---|---|---|---|
| LOW | test/integration/omniauthable_test.rb | 10 | "email" => 'user@example.com', |
| LOW | test/integration/recoverable_test.rb | 51 | fill_in 'email', with: 'foo@bar.com' |
| LOW | test/integration/recoverable_test.rb | 63 | fill_in 'email', with: 'foo@bar.com' |
| LOW | test/integration/recoverable_test.rb | 76 | fill_in 'email', with: 'foo@bar.com' |
| LOW | test/integration/recoverable_test.rb | 81 | assert_have_selector "input[type=email][value='foo@bar.com']" |
| LOW | test/integration/recoverable_test.rb | 87 | create_user(email: 'foo@bar.com') |
| LOW | test/integration/recoverable_test.rb | 99 | create_user(email: 'foo@bar.com') |
| LOW | test/integration/database_authenticatable_test.rb | 10 | fill_in 'email', with: 'foo@bar.com' |
| LOW | test/integration/database_authenticatable_test.rb | 21 | fill_in 'email', with: 'foo@bar.com' |
| LOW | test/integration/database_authenticatable_test.rb | 32 | fill_in 'email', with: 'foo@bar.com' |
| LOW | test/integration/database_authenticatable_test.rb | 40 | create_user(email: 'foo@bar.com') |
| LOW | test/integration/database_authenticatable_test.rb | 107 | fill_in 'email', with: 'foo@bar.com' |
| LOW | test/models/database_authenticatable_test.rb | 74 | conditions = { "login" => "foo@bar.com", "bool1" => true, "bool2" => false, "fixnum" => 123, "will_be_converted" => |
| LOW | test/models/database_authenticatable_test.rb | 76 | assert_equal( { "login" => "foo@bar.com", "bool1" => "true", "bool2" => "false", "fixnum" => "123", "will_be_convert |
| LOW | guides/bug_report_templates/integration_test.rb | 95 | login_as User.create!(email: 'test@test.com', password: 'test123456', password_confirmation: 'test123456') |
| Severity | File | Line | Snippet |
|---|---|---|---|
| LOW | lib/devise/failure_app.rb | 115 | # TODO: Remove the fallback and just use `downcase_first` once we drop support for Rails 7.0. |
| LOW | lib/devise/models/authenticatable.rb | 104 | # given to :except will simply add names to exempt to Devise internal list. |
| MEDIUM | lib/devise/models/confirmable.rb | 31 | # confirmation. Also, when used in conjunction with `send_email_changed_notification`, |
| MEDIUM | lib/generators/templates/devise.rb | 160 | # Also, when used in conjunction with `send_email_changed_notification`, |
| Severity | File | Line | Snippet |
|---|---|---|---|
| LOW | lib/devise/models/authenticatable.rb | 42 | # You can overwrite this method yourself, but if you do, don't forget to call super: |
| LOW | lib/devise/models/authenticatable.rb | 42 | # You can overwrite this method yourself, but if you do, don't forget to call super: |