Revamped system for managing authentication tokens. - Every user has 1 token per client (web browser) - Tokens are rotated every 10 minutes New system migrates the old tokens to "legacy" tokens, so users still remain logged on. Also introduces weekly job to expire old auth tokens. |
||
|---|---|---|
| .. | ||
| default_current_user_provider_spec.rb | ||
| facebook_authenticator_spec.rb | ||
| github_authenticator_spec.rb | ||
| google_oauth2_authenticator_spec.rb | ||
| open_id_authenticator_spec.rb | ||