ff49f72ad9
Revamped system for managing authentication tokens. - Every user has 1 token per client (web browser) - Tokens are rotated every 10 minutes New system migrates the old tokens to "legacy" tokens, so users still remain logged on. Also introduces weekly job to expire old auth tokens. |
||
---|---|---|
.. | ||
default_current_user_provider_spec.rb | ||
facebook_authenticator_spec.rb | ||
github_authenticator_spec.rb | ||
google_oauth2_authenticator_spec.rb | ||
open_id_authenticator_spec.rb |